| weciima-myciima.wecema2.shop/contents/avatars/50/1614194935.png |  172.67.166.63 | 200 OK | 8.1 kB |
URL GET HTTP/3weciima-myciima.wecema2.shop/contents/avatars/50/1614194935.png IP172.67.166.63:443
Requested byhttps://weciima-myciima.wecema2.shop/watch/%D9%85%D8%B4%D8%A7%D9%87%D8%AF%D8%A9-%D9%85%D8%B3%D9%84%D8%B3%D9%84-my-roommate-is-a-detective-%D9%85%D9%88%D8%B3%D9%85-1-%D8%AD%D9%84%D9%82%D8%A9-10/ CertificateIssuerGoogle Trust Services LLC Subjectwecema2.shop Fingerprint7E:07:C9:7B:1D:0D:04:D7:21:B4:7A:13:F4:02:09:06:7D:2C:2B:F3 ValiditySun, 03 Dec 2023 02:42:06 GMT - Sat, 02 Mar 2024 02:42:05 GMT
File typePNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced\012- data Hash048fc99c6192df92b0ac8a3a70deb6a3 4965b739d6356eb0c3aa3ab31dda7819109d5560 b5ce80a1814813878697ff5aed0bff46d3d8caad894ba7e4a1e9cfb74d0b9c83
GET /contents/avatars/50/1614194935.png HTTP/1.1
Host: weciima-myciima.wecema2.shop
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://weciima-myciima.wecema2.shop/watch/%D9%85%D8%B4%D8%A7%D9%87%D8%AF%D8%A9-%D9%85%D8%B3%D9%84%D8%B3%D9%84-my-roommate-is-a-detective-%D9%85%D9%88%D8%B3%D9%85-1-%D8%AD%D9%84%D9%82%D8%A9-10/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 05 Dec 2023 16:53:54 GMT
content-type: image/png
content-length: 8147
last-modified: Wed, 24 Feb 2021 19:28:55 GMT
etag: "6036a8f7-1fd3"
vary: Accept, Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 6850
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Vf65hEfhtRzWbiJaTV2A7hmzfFIm757UPh%2BrWmwr0v4RB9PNEuRl4wpOQcwdPfALRXe6H9tj3VzBjIu5%2BSlTwwtm80qv%2FRSpSUxBCrCYgS9fFaYVtYZJY0YHCiSihGGfQpZvST1Ftcg1gqYJabGY"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 830dced7d99856a2-OSL
alt-svc: h3=":443"; ma=86400
|
|
| www.googletagmanager.com/gtag/js?id=G-6JHTFKY3P3 | 142.250.74.104 | 200 OK | 90 kB |
URL GET HTTP/2www.googletagmanager.com/gtag/js?id=G-6JHTFKY3P3 IP142.250.74.104:443
Requested byhttps://weciima-myciima.wecema2.shop/watch/%D9%85%D8%B4%D8%A7%D9%87%D8%AF%D8%A9-%D9%85%D8%B3%D9%84%D8%B3%D9%84-my-roommate-is-a-detective-%D9%85%D9%88%D8%B3%D9%85-1-%D8%AD%D9%84%D9%82%D8%A9-10/ CertificateIssuerGoogle Trust Services LLC Subject*.google-analytics.com Fingerprint37:42:10:B7:89:70:45:51:80:81:66:CE:95:21:72:5D:46:0B:E2:34 ValidityMon, 23 Oct 2023 11:18:19 GMT - Mon, 15 Jan 2024 11:18:18 GMT
File typeASCII text, with very long lines (3651) Hashedc479875db27703976a9c30d334e90b 3846f998db5976cdb8748314b054b64d34c95fb2 6bfe0ef7c9becd8344a934afd8f586a9d78899a1bf0041eee8a9b3a6808db2a0
GET /gtag/js?id=G-6JHTFKY3P3 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://weciima-myciima.wecema2.shop/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Tue, 05 Dec 2023 16:53:54 GMT
expires: Tue, 05 Dec 2023 16:53:54 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 89741
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/tajawal/v3/Iurf6YBj_oCad4k1l8KiHrFpiQ.woff2 | 216.58.207.227 | 200 OK | 9.9 kB |
URL GET HTTP/2fonts.gstatic.com/s/tajawal/v3/Iurf6YBj_oCad4k1l8KiHrFpiQ.woff2 IP216.58.207.227:443
Requested byhttps://weciima-myciima.wecema2.shop/watch/%D9%85%D8%B4%D8%A7%D9%87%D8%AF%D8%A9-%D9%85%D8%B3%D9%84%D8%B3%D9%84-my-roommate-is-a-detective-%D9%85%D9%88%D8%B3%D9%85-1-%D8%AD%D9%84%D9%82%D8%A9-10/ CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 9864, version 1.0\012- data Hash9751651b345afc0e49ca1a302c19a294 05393c6e747f5e8a3c7fbee5fe15cad4c80837e1 d5aa3e4c58493f8d3693be4962e94e08d14e178ef4f0be2a27369a8813498e54
GET /s/tajawal/v3/Iurf6YBj_oCad4k1l8KiHrFpiQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://weciima-myciima.wecema2.shop
DNT: 1
Connection: keep-alive
Referer: https://weciima-myciima.wecema2.shop/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 9864
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 08:41:58 GMT
expires: Fri, 29 Nov 2024 08:41:58 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 16 Jul 2019 03:31:06 GMT
content-type: font/woff2
age: 461516
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/tajawal/v3/Iurf6YBj_oCad4k1l5anHrFpiQ.woff2 | 216.58.207.227 | 200 OK | 11 kB |
URL GET HTTP/2fonts.gstatic.com/s/tajawal/v3/Iurf6YBj_oCad4k1l5anHrFpiQ.woff2 IP216.58.207.227:443
Requested byhttps://weciima-myciima.wecema2.shop/watch/%D9%85%D8%B4%D8%A7%D9%87%D8%AF%D8%A9-%D9%85%D8%B3%D9%84%D8%B3%D9%84-my-roommate-is-a-detective-%D9%85%D9%88%D8%B3%D9%85-1-%D8%AD%D9%84%D9%82%D8%A9-10/ CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 10580, version 1.0\012- data Hash245d8f75ea8c5799e5de85a8a7bd4172 7f546a6c551e87bb224124789c11fdb2f6429479 2f96f4fd6fe569f64e044e0409274b2f2d79976497a9b275deb497dbbfc542b0
GET /s/tajawal/v3/Iurf6YBj_oCad4k1l5anHrFpiQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://weciima-myciima.wecema2.shop
DNT: 1
Connection: keep-alive
Referer: https://weciima-myciima.wecema2.shop/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 10580
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 05 Dec 2023 07:33:18 GMT
expires: Wed, 04 Dec 2024 07:33:18 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 16 Jul 2019 03:31:01 GMT
content-type: font/woff2
age: 33636
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/tajawal/v3/Iurf6YBj_oCad4k1l8KiHrRpiYlJ.woff2 | 216.58.207.227 | 200 OK | 8.5 kB |
URL GET HTTP/2fonts.gstatic.com/s/tajawal/v3/Iurf6YBj_oCad4k1l8KiHrRpiYlJ.woff2 IP216.58.207.227:443
Requested byhttps://weciima-myciima.wecema2.shop/watch/%D9%85%D8%B4%D8%A7%D9%87%D8%AF%D8%A9-%D9%85%D8%B3%D9%84%D8%B3%D9%84-my-roommate-is-a-detective-%D9%85%D9%88%D8%B3%D9%85-1-%D8%AD%D9%84%D9%82%D8%A9-10/ CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 8488, version 1.0\012- data Hashb405dddf4639fdf946fed00d4b91139c 5df4eb97753c51715b996fcec1dec7e55877404b b0d3610919043227b56c8d5130e2ead271a067bb1b930678d5af24bbbae7c16f
GET /s/tajawal/v3/Iurf6YBj_oCad4k1l8KiHrRpiYlJ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://weciima-myciima.wecema2.shop
DNT: 1
Connection: keep-alive
Referer: https://weciima-myciima.wecema2.shop/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 8488
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 23:22:28 GMT
expires: Fri, 29 Nov 2024 23:22:28 GMT
cache-control: public, max-age=31536000
age: 408686
last-modified: Tue, 16 Jul 2019 03:31:11 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/bevan/v12/4iCj6KZ0a9NXjG8dWCs.woff2 | 216.58.207.227 | 200 OK | 20 kB |
URL GET HTTP/2fonts.gstatic.com/s/bevan/v12/4iCj6KZ0a9NXjG8dWCs.woff2 IP216.58.207.227:443
Requested byhttps://weciima-myciima.wecema2.shop/watch/%D9%85%D8%B4%D8%A7%D9%87%D8%AF%D8%A9-%D9%85%D8%B3%D9%84%D8%B3%D9%84-my-roommate-is-a-detective-%D9%85%D9%88%D8%B3%D9%85-1-%D8%AD%D9%84%D9%82%D8%A9-10/ CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 19984, version 1.0\012- data Hash0db10b5d1f471ef6c3a30158ff403106 ea993e87704687d1399a3b1fd79aa84c47659c82 e0e544b2864b4c3d7425f4eff9f9365b629abcbaf37f03d0bf5ba381f227d48a
GET /s/bevan/v12/4iCj6KZ0a9NXjG8dWCs.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://weciima-myciima.wecema2.shop
DNT: 1
Connection: keep-alive
Referer: https://weciima-myciima.wecema2.shop/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 19984
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 05 Dec 2023 15:05:52 GMT
expires: Wed, 04 Dec 2024 15:05:52 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 01 Sep 2020 03:51:37 GMT
content-type: font/woff2
age: 6482
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/tajawal/v3/Iurf6YBj_oCad4k1l5anHrRpiYlJ.woff2 | 216.58.207.227 | 200 OK | 8.9 kB |
URL GET HTTP/2fonts.gstatic.com/s/tajawal/v3/Iurf6YBj_oCad4k1l5anHrRpiYlJ.woff2 IP216.58.207.227:443
Requested byhttps://weciima-myciima.wecema2.shop/watch/%D9%85%D8%B4%D8%A7%D9%87%D8%AF%D8%A9-%D9%85%D8%B3%D9%84%D8%B3%D9%84-my-roommate-is-a-detective-%D9%85%D9%88%D8%B3%D9%85-1-%D8%AD%D9%84%D9%82%D8%A9-10/ CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 8948, version 1.0\012- data Hash3ca4aaa12ffa2e1f165db59f857ee5b0 1a72fa6677fa1b70f43d4a0abf3c309c211ee9fa d404f987f0d261c3eff16cd778fb138d5c604af7f361e609ef0b91bac16d7e67
GET /s/tajawal/v3/Iurf6YBj_oCad4k1l5anHrRpiYlJ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://weciima-myciima.wecema2.shop
DNT: 1
Connection: keep-alive
Referer: https://weciima-myciima.wecema2.shop/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 8948
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 05:16:57 GMT
expires: Fri, 29 Nov 2024 05:16:57 GMT
cache-control: public, max-age=31536000
age: 473817
last-modified: Tue, 16 Jul 2019 03:31:22 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| gp.feiriegershon.com/rbTulH6Lqu1gEt4v4/40334 |  172.255.6.148 | 200 OK | 20 B |
URL GET HTTP/1.1gp.feiriegershon.com/rbTulH6Lqu1gEt4v4/40334 IP172.255.6.148:443
Requested byhttps://weciima-myciima.wecema2.shop/watch/%D9%85%D8%B4%D8%A7%D9%87%D8%AF%D8%A9-%D9%85%D8%B3%D9%84%D8%B3%D9%84-my-roommate-is-a-detective-%D9%85%D9%88%D8%B3%D9%85-1-%D8%AD%D9%84%D9%82%D8%A9-10/ CertificateIssuerLet's Encrypt Subjectgp.feiriegershon.com Fingerprint38:54:A9:6D:D6:CE:E0:BE:44:2F:B9:B6:5D:4C:2C:7A:DF:43:7B:D6 ValidityThu, 09 Nov 2023 15:25:09 GMT - Wed, 07 Feb 2024 15:25:08 GMT
File typegzip compressed data, from Unix\012- data Hash7029066c27ac6f5ef18d660d5741979a 46c6643f07aa7f6bfe7118de926b86defc5087c4 59869db34853933b239f1e2219cf7d431da006aa919635478511fabbfc8849d2
GET /rbTulH6Lqu1gEt4v4/40334 HTTP/1.1
Host: gp.feiriegershon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://weciima-myciima.wecema2.shop/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 05 Dec 2023 16:53:54 GMT
Content-Type: application/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=20
Accept-ch: sec-ch-ua-platform-version,sec-ch-ua-model,sec-ch-ua-full-version
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://weciima-myciima.wecema2.shop
Access-Control-Allow-Headers: content-type, megageocheckolololo, x-forwarded-for, x-requested-with, cache-control, pragma, expires
Access-Control-Max-Age: 600
Access-Control-Allow-Methods: GET, POST, OPTIONS
Set-Cookie: GL_UI4=eJw9zV1OhDAcBHC%2BWXVBJ%2BEAHqFVQXz0Za%2FgIyntH6wL7aZU0NtLTPRtMvlNJgiCqLpFuGYp4k9R414NvJGs5fKhfmRNUz8JRkPfvvTtc8MFa3Gll86LfiKf4LDMwvnOrwmOIxlyWnbSKipwt6u%2F5mzsZhKkvRNGFUjnXUwF8t7ZbSFXxUiMmAn5STsa7NcuxId1iDmr96zNnkOGyC5VXF4jf9NG7cvyiIizsswC3Fwm4Qfr5k6rLEQ6OqEI4SsOUngarftGrmg5e3sB7KS6f%2F97HG%2BcIVO0aklIrX8n9wNBjE5s; expires=Wed, 06-Dec-2023 16:53:54 GMT; Max-Age=86400; path=/; secure; SameSite=None
GL_GI10=eJwViE0KgzAUBvMeJVAqhY96AE%2BQamsXbmuXRReewGopgZBIEvtz%2B%2BpiBmaEEJwmYD0hqQpV5ao8qeJSgl7gpgUPFrJx%2FtP%2FQB6cn8HeYtcG47LazTYuf8BmbZDG%2Fmr0N%2BucmaN2NoAXtnX%2FMM%2FjrbuDJkng6FaHMRWgtzz8AV7hHdE%3D; expires=Wed, 06-Dec-2023 16:53:54 GMT; Max-Age=86400; path=/; secure; SameSite=None
Content-Encoding: gzip
Vary: Accept-Encoding
Strict-Transport-Security: max-age=1
X-Content-Type-Options: nosniff
|
|
| weciima-myciima.wecema2.shop/wp-content/themes/Mycima2021/components/packs/%23header/netflix.png | 172.67.166.63 | 200 OK | 3.5 kB |
URL GET HTTP/3weciima-myciima.wecema2.shop/wp-content/themes/Mycima2021/components/packs/%23header/netflix.png IP172.67.166.63:443
Requested byhttps://weciima-myciima.wecema2.shop/watch/%D9%85%D8%B4%D8%A7%D9%87%D8%AF%D8%A9-%D9%85%D8%B3%D9%84%D8%B3%D9%84-my-roommate-is-a-detective-%D9%85%D9%88%D8%B3%D9%85-1-%D8%AD%D9%84%D9%82%D8%A9-10/ CertificateIssuerGoogle Trust Services LLC Subjectwecema2.shop Fingerprint7E:07:C9:7B:1D:0D:04:D7:21:B4:7A:13:F4:02:09:06:7D:2C:2B:F3 ValiditySun, 03 Dec 2023 02:42:06 GMT - Sat, 02 Mar 2024 02:42:05 GMT
File typePNG image data, 60 x 60, 8-bit/color RGBA, non-interlaced\012- data Hash54110064037a44285faf10b2cbe55e87 b2677d46ed052bfda6eecbb61ee5539349f5603d c5b633a4f58b811923c6d41cbe24939af6aebb02e6796169c1797f0eeb31bdd4
GET /wp-content/themes/Mycima2021/components/packs/%23header/netflix.png HTTP/1.1
Host: weciima-myciima.wecema2.shop
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://weciima-myciima.wecema2.shop/watch/%D9%85%D8%B4%D8%A7%D9%87%D8%AF%D8%A9-%D9%85%D8%B3%D9%84%D8%B3%D9%84-my-roommate-is-a-detective-%D9%85%D9%88%D8%B3%D9%85-1-%D8%AD%D9%84%D9%82%D8%A9-10/
Cookie: _ga_6JHTFKY3P3=GS1.1.1701795240.1.0.1701795240.0.0.0; _ga=GA1.1.894831312.1701795241
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 05 Dec 2023 16:53:55 GMT
content-type: image/png
content-length: 3533
last-modified: Sun, 22 Aug 2021 16:56:59 GMT
etag: "612281db-dcd"
vary: Accept, Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 500
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=GCWua0%2FfNCEbnjBpthBmgM%2BDbdr%2FiCE8wes4SysOjT3F9AaQ4fKChzwk6UVEyeslXpeOj9StxJcEk%2BqMMIZ16lMQ68MiCj%2FpwjIMOf95r6vLBmFnAOjyddx1w%2FcRUDpnJMNWk94vKzhyQFGBYv9e"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 830dcedade5656a2-OSL
alt-svc: h3=":443"; ma=86400
|
|
| inklinkor.com/tag.min.js | 172.67.211.29 | 200 OK | 28 kB |
IP172.67.211.29:443
Requested byhttps://weciima-myciima.wecema2.shop/watch/%D9%85%D8%B4%D8%A7%D9%87%D8%AF%D8%A9-%D9%85%D8%B3%D9%84%D8%B3%D9%84-my-roommate-is-a-detective-%D9%85%D9%88%D8%B3%D9%85-1-%D8%AD%D9%84%D9%82%D8%A9-10/ CertificateIssuerGoogle Trust Services LLC Subjectinklinkor.com Fingerprint5D:E8:2B:4E:1D:87:E7:D0:24:0C:11:4B:6D:AF:1B:8A:38:CB:A3:6E ValidityMon, 23 Oct 2023 14:48:09 GMT - Sun, 21 Jan 2024 14:48:08 GMT
File typeASCII text, with very long lines (65536), with no line terminators Hash20bfd0fb50dd41c960911f2e18a89ba7 398d0addd9eb7d82090ae7de7c89b237379150d8 2c8669e1a3ee4da3132e73f02c27ff2139c8b5fe0dd429f78af173a6253f6fed
GET /tag.min.js HTTP/1.1
Host: inklinkor.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://weciima-myciima.wecema2.shop/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 05 Dec 2023 16:53:54 GMT
content-type: text/javascript; charset=utf-8
x-trace-id: 0b3e297f437b99ce6d354a807d7f660d
cache-control: max-age=86400
last-modified: Tue, 05 Dec 2023 14:45:18 GMT
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Wow64
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace
access-control-max-age: 86400
pragma: no-cache
expires: Wed, 06 Dec 2023 16:13:45 GMT
timing-allow-origin: *
cf-cache-status: HIT
age: 2409
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Ld%2B4%2BAtyEXF3J2tXVOYGUuIPeSFofoyU%2FYa%2Biu3VprdOnrRhKxtDeYzEyNC12GXuifxVud7oPAGJd04FKVzIEEZeGkLaWOQH6TrMp6qmw3V%2FtXP59IorbOxqDVZWsmKu"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830dced9bc8e0b59-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| www.googletagmanager.com/gtag/js?id=UA-128370636-1&l=dataLayer&cx=c | 142.250.74.104 | 200 OK | 65 kB |
URL GET HTTP/3www.googletagmanager.com/gtag/js?id=UA-128370636-1&l=dataLayer&cx=c IP142.250.74.104:443
Requested byhttps://weciima-myciima.wecema2.shop/watch/%D9%85%D8%B4%D8%A7%D9%87%D8%AF%D8%A9-%D9%85%D8%B3%D9%84%D8%B3%D9%84-my-roommate-is-a-detective-%D9%85%D9%88%D8%B3%D9%85-1-%D8%AD%D9%84%D9%82%D8%A9-10/ CertificateIssuerGoogle Trust Services LLC Subject*.google-analytics.com Fingerprint37:42:10:B7:89:70:45:51:80:81:66:CE:95:21:72:5D:46:0B:E2:34 ValidityMon, 23 Oct 2023 11:18:19 GMT - Mon, 15 Jan 2024 11:18:18 GMT
File typeASCII text, with very long lines (3026) Hash1c3ead8814db55cf2d3fca1e319c1c31 f3c8bb0c96200cc83b3dbc6f77735dd9f5471948 969797a2d45c7e3d33972d9b357920dc1735918a154e2576c6d3d1d01c43458e
GET /gtag/js?id=UA-128370636-1&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://weciima-myciima.wecema2.shop/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Tue, 05 Dec 2023 16:53:55 GMT
expires: Tue, 05 Dec 2023 16:53:55 GMT
cache-control: private, max-age=900
last-modified: Tue, 05 Dec 2023 15:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 64995
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| bytogeticr.com/split_track?action=check_overlay&dlShown=false&zone=4796941 |  104.21.17.211 | 200 OK | 0 B |
URL GET HTTP/2bytogeticr.com/split_track?action=check_overlay&dlShown=false&zone=4796941 IP104.21.17.211:443
Requested byhttps://weciima-myciima.wecema2.shop/watch/%D9%85%D8%B4%D8%A7%D9%87%D8%AF%D8%A9-%D9%85%D8%B3%D9%84%D8%B3%D9%84-my-roommate-is-a-detective-%D9%85%D9%88%D8%B3%D9%85-1-%D8%AD%D9%84%D9%82%D8%A9-10/ CertificateIssuerGoogle Trust Services LLC Subjectbytogeticr.com Fingerprint2D:28:CA:AA:05:F0:64:01:4D:7D:C6:25:AB:74:80:B2:C0:D8:91:A8 ValidityThu, 12 Oct 2023 10:34:02 GMT - Wed, 10 Jan 2024 10:34:01 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /split_track?action=check_overlay&dlShown=false&zone=4796941 HTTP/1.1
Host: bytogeticr.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://weciima-myciima.wecema2.shop/
Origin: https://weciima-myciima.wecema2.shop
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 05 Dec 2023 16:53:55 GMT
content-type: application/octet-stream
content-length: 0
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS, HEAD
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range
access-control-expose-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=8ybjZPhSXjT7p0sPC7WonEl8%2F2GhqBz9y0bWm53X%2FtcKCPUyeoa2zAgm%2FZaB6vTPYrkPGXqTUO6AE33ACVqhTyJ%2BZtPPc1GCmpaikOFT7e%2BP1%2B7dGngATTZanjVo4xh%2FFg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 830dcedc0f1eb505-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| weciima-myciima.wecema2.shop/wp-content/uploads/2021/03/My-Roommate-Is-a-Detective-s01.jpg | 172.67.166.63 | 200 OK | 112 kB |
URL GET HTTP/3weciima-myciima.wecema2.shop/wp-content/uploads/2021/03/My-Roommate-Is-a-Detective-s01.jpg IP172.67.166.63:443
Requested byhttps://weciima-myciima.wecema2.shop/watch/%D9%85%D8%B4%D8%A7%D9%87%D8%AF%D8%A9-%D9%85%D8%B3%D9%84%D8%B3%D9%84-my-roommate-is-a-detective-%D9%85%D9%88%D8%B3%D9%85-1-%D8%AD%D9%84%D9%82%D8%A9-10/ CertificateIssuerGoogle Trust Services LLC Subjectwecema2.shop Fingerprint7E:07:C9:7B:1D:0D:04:D7:21:B4:7A:13:F4:02:09:06:7D:2C:2B:F3 ValiditySun, 03 Dec 2023 02:42:06 GMT - Sat, 02 Mar 2024 02:42:05 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 600x900, components 3\012- data Size112 kB (112408 bytes) Hashfd7cd2e531ccd1e8bffa114719da548e 24357408eb862e468d7d83436586209df854a38d 706ca92bc0f62c8f03dec679b79b0331e1fb64259ca5aefd0dbd9a31197e16ca
GET /wp-content/uploads/2021/03/My-Roommate-Is-a-Detective-s01.jpg HTTP/1.1
Host: weciima-myciima.wecema2.shop
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://weciima-myciima.wecema2.shop/
DNT: 1
Connection: keep-alive
Cookie: _ga_6JHTFKY3P3=GS1.1.1701795240.1.0.1701795240.0.0.0; _ga=GA1.1.894831312.1701795241
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 05 Dec 2023 16:53:55 GMT
content-type: image/jpeg
content-length: 112408
last-modified: Wed, 12 May 2021 23:00:54 GMT
etag: "609c5e26-1b718"
vary: Accept, Accept-Encoding
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=hsxbh94ax%2BQUsBedvVlR4O5LCZffbdLUGmGzITqfwq9g5AbZvUB5xAGWJ0zjKODbeUhF9ho9DhLdX%2BLEpQ3HmLnffT3uN01Y7xdMF0uNRmM02sYlKu0Pl8hDChCogkZSUBT46rveA%2FoBi7SvjKvS"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 830dcedbffe756a2-OSL
alt-svc: h3=":443"; ma=86400
|
|
| alteredyacht.com/5a/ab/22/5aab22948fc5f2edc2ca37dff2cd916f.js | 173.233.137.36 | 200 OK | 23 kB |
URL GET HTTP/1.1alteredyacht.com/5a/ab/22/5aab22948fc5f2edc2ca37dff2cd916f.js IP173.233.137.36:443
Requested byhttps://weciima-myciima.wecema2.shop/watch/%D9%85%D8%B4%D8%A7%D9%87%D8%AF%D8%A9-%D9%85%D8%B3%D9%84%D8%B3%D9%84-my-roommate-is-a-detective-%D9%85%D9%88%D8%B3%D9%85-1-%D8%AD%D9%84%D9%82%D8%A9-10/ CertificateIssuerLet's Encrypt Subjectalteredyacht.com Fingerprint19:5F:34:04:D0:B1:63:4D:D0:A6:04:B1:17:7A:5D:BC:5A:49:1F:12 ValiditySat, 21 Oct 2023 06:12:09 GMT - Fri, 19 Jan 2024 06:12:08 GMT
File typeASCII text, with very long lines (59260) Hash2717459b8857a87fe5b14177ab437be0 42884161eec9ff8fe22aecbfbaecb0398514bc27 16dcb4aa08dcc5b3c123da9fcd8834426066af46d1b88fda787a260745061419
GET /5a/ab/22/5aab22948fc5f2edc2ca37dff2cd916f.js HTTP/1.1
Host: alteredyacht.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://weciima-myciima.wecema2.shop/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Tue, 05 Dec 2023 16:53:55 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Set-Cookie: 4b4e7ab587d59b22ad7bcd2439afc363_AN-1159_layer=0; expires=Sat, 09 Dec 2023 20:53:55 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: d7015bfcc9574f81c909b468deb0f340
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
|
|
| site-assets.fontawesome.com/releases/v6.0.0/webfonts/fa-brands-400.woff2 | 172.64.147.188 | 200 OK | 105 kB |
URL GET HTTP/2site-assets.fontawesome.com/releases/v6.0.0/webfonts/fa-brands-400.woff2 IP172.64.147.188:443
Requested byhttps://weciima-myciima.wecema2.shop/watch/%D9%85%D8%B4%D8%A7%D9%87%D8%AF%D8%A9-%D9%85%D8%B3%D9%84%D8%B3%D9%84-my-roommate-is-a-detective-%D9%85%D9%88%D8%B3%D9%85-1-%D8%AD%D9%84%D9%82%D8%A9-10/ CertificateIssuerDigiCert Inc Subject*.fontawesome.com Fingerprint93:F9:69:8C:73:B0:08:60:65:F3:39:41:39:66:D3:2B:78:3A:6E:3D ValidityMon, 04 Dec 2023 00:00:00 GMT - Fri, 03 Jan 2025 23:59:59 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 104740, version 768.256\012- data Size105 kB (104740 bytes) Hash27ed7b486bfe3163c0d312b6d2aa9069 97cb3773774b591841557c859b0f1b4b1b1cde09 fb347c28258cfeeb9b0904c469d8049fcb2ad4d1bb5e4c9601e0edda3b76bb69
GET /releases/v6.0.0/webfonts/fa-brands-400.woff2 HTTP/1.1
Host: site-assets.fontawesome.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://weciima-myciima.wecema2.shop
DNT: 1
Connection: keep-alive
Referer: https://site-assets.fontawesome.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 05 Dec 2023 16:53:55 GMT
content-type: font/woff2
content-length: 104740
x-amz-id-2: mPUwQUeAXAUmWlox47kByEXAiCDaAi4vrbhe8ToiWw2fdqiMvcD5pvLhYYxoKXrNQXawxNXVeeE=
x-amz-request-id: 1Z3GSQ6DKEGS3MJ1
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding
last-modified: Mon, 07 Feb 2022 20:26:45 GMT
etag: "27ed7b486bfe3163c0d312b6d2aa9069"
cache-control: max-age=31556926
cf-cache-status: HIT
age: 67394
accept-ranges: bytes
server: cloudflare
cf-ray: 830dcedd1d26b527-OSL
X-Firefox-Spdy: h2
|
|
| glaultoa.com/5/4796941/?oo=1&js_build=iclick-v1.640.0 |  139.45.197.245 | 200 OK | 359 kB |
URL GET HTTP/2glaultoa.com/5/4796941/?oo=1&js_build=iclick-v1.640.0 IP139.45.197.245:443
Requested byhttps://weciima-myciima.wecema2.shop/watch/%D9%85%D8%B4%D8%A7%D9%87%D8%AF%D8%A9-%D9%85%D8%B3%D9%84%D8%B3%D9%84-my-roommate-is-a-detective-%D9%85%D9%88%D8%B3%D9%85-1-%D8%AD%D9%84%D9%82%D8%A9-10/ CertificateIssuerLet's Encrypt Subjectglaultoa.com Fingerprint76:62:43:3F:4B:5F:3A:A9:C6:00:2D:6B:18:2F:1C:90:5D:34:A8:A0 ValiditySat, 02 Dec 2023 14:50:24 GMT - Fri, 01 Mar 2024 14:50:23 GMT
File typegzip compressed data, max speed, from Unix\012- data Size359 kB (359143 bytes) Hash184510381a4edde27ee79baadace72f9 456adc42d7c62fb91147a2c985974c5f42a64eaa 6fe2bb7ebaa67fefdc8ec9b511ff0eb1f7a99e2b20a1c8d655a61ce16c326fbd
GET /5/4796941/?oo=1&js_build=iclick-v1.640.0 HTTP/1.1
Host: glaultoa.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://weciima-myciima.wecema2.shop
DNT: 1
Connection: keep-alive
Referer: https://weciima-myciima.wecema2.shop/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 05 Dec 2023 16:53:55 GMT
content-type: application/json
x-trace-id: d2b675a5c2f34a98b503801ea3b589bc
link: <https://my.rtmark.net>; rel="preconnect dns-prefetch",<https://propeller-tracking.com>; rel="preconnect dns-prefetch",<https://sr7pv7n5x.com>; rel="preconnect dns-prefetch"
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Wow64
access-control-allow-origin: https://weciima-myciima.wecema2.shop
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace
access-control-max-age: 86400
timing-allow-origin: *
set-cookie: OAID=c75124271ad9490d86acc84c36a154ca; expires=Wed, 04 Dec 2024 16:53:55 GMT; path=/; secure; SameSite=None
oaidts=1701795235; expires=Wed, 04 Dec 2024 16:53:55 GMT; path=/; secure; SameSite=None
syncedCookie=; expires=Tue, 10 Nov 2009 23:00:00 GMT
pragma: no-cache, no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT, Mon, 26 Jul 1997 05:00:00 GMT
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| site-assets.fontawesome.com/releases/v6.0.0/webfonts/fa-solid-900.woff2 | 172.64.147.188 | 200 OK | 304 kB |
URL GET HTTP/2site-assets.fontawesome.com/releases/v6.0.0/webfonts/fa-solid-900.woff2 IP172.64.147.188:443
Requested byhttps://weciima-myciima.wecema2.shop/watch/%D9%85%D8%B4%D8%A7%D9%87%D8%AF%D8%A9-%D9%85%D8%B3%D9%84%D8%B3%D9%84-my-roommate-is-a-detective-%D9%85%D9%88%D8%B3%D9%85-1-%D8%AD%D9%84%D9%82%D8%A9-10/ CertificateIssuerDigiCert Inc Subject*.fontawesome.com Fingerprint93:F9:69:8C:73:B0:08:60:65:F3:39:41:39:66:D3:2B:78:3A:6E:3D ValidityMon, 04 Dec 2023 00:00:00 GMT - Fri, 03 Jan 2025 23:59:59 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 303544, version 768.256\012- data Size304 kB (303544 bytes) Hash78863e0f6e65fbe6175866e6d5b6f18a 8cda0fc2a701bd6dcfaa94261178fa78df1d15de 82877c6d33c5d786db4815f756437c3e853e08bf8c6c267fd246760d2a96d029
GET /releases/v6.0.0/webfonts/fa-solid-900.woff2 HTTP/1.1
Host: site-assets.fontawesome.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://weciima-myciima.wecema2.shop
DNT: 1
Connection: keep-alive
Referer: https://site-assets.fontawesome.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 05 Dec 2023 16:53:55 GMT
content-type: font/woff2
content-length: 303544
x-amz-id-2: b4AEJgMhabI0RusIJl+zDMVrp7W+V9h0Kn0qDgku69SzTZ6RfePhtPlYm4+m+C63Rh5Cef/CwFk=
x-amz-request-id: 1Z3PTF8NJRDNXEK1
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding
last-modified: Mon, 07 Feb 2022 20:26:45 GMT
etag: "78863e0f6e65fbe6175866e6d5b6f18a"
cache-control: max-age=31556926
cf-cache-status: HIT
age: 67237
accept-ranges: bytes
server: cloudflare
cf-ray: 830dcedd2d2eb527-OSL
X-Firefox-Spdy: h2
|
|
| site-assets.fontawesome.com/releases/v6.0.0/webfonts/fa-light-300.woff2 | 172.64.147.188 | 200 OK | 392 kB |
URL GET HTTP/2site-assets.fontawesome.com/releases/v6.0.0/webfonts/fa-light-300.woff2 IP172.64.147.188:443
Requested byhttps://weciima-myciima.wecema2.shop/watch/%D9%85%D8%B4%D8%A7%D9%87%D8%AF%D8%A9-%D9%85%D8%B3%D9%84%D8%B3%D9%84-my-roommate-is-a-detective-%D9%85%D9%88%D8%B3%D9%85-1-%D8%AD%D9%84%D9%82%D8%A9-10/ CertificateIssuerDigiCert Inc Subject*.fontawesome.com Fingerprint93:F9:69:8C:73:B0:08:60:65:F3:39:41:39:66:D3:2B:78:3A:6E:3D ValidityMon, 04 Dec 2023 00:00:00 GMT - Fri, 03 Jan 2025 23:59:59 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 392136, version 768.256\012- data Size392 kB (392136 bytes) Hash2cb9262f4870f225de120af23500828a 0330732496c970248a96c6df732b4b6e8407246f d9c0c73c3e6a75d59ff20ce5e1d4bdec5ee8c6f2724ff0deb6cddb8f7f207dbe
GET /releases/v6.0.0/webfonts/fa-light-300.woff2 HTTP/1.1
Host: site-assets.fontawesome.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://weciima-myciima.wecema2.shop
DNT: 1
Connection: keep-alive
Referer: https://site-assets.fontawesome.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 05 Dec 2023 16:53:55 GMT
content-type: font/woff2
content-length: 392136
x-amz-id-2: 5C5W7z1HW9LiZIeDDnSxljXd7MuTQDSy559zoNNw+tfXw5VpIP+7VwPNaqInnzAkzVQEf0On1Hw=
x-amz-request-id: 1Z3YG92JVMR92G58
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding
last-modified: Mon, 07 Feb 2022 20:26:45 GMT
etag: "2cb9262f4870f225de120af23500828a"
cache-control: max-age=31556926
cf-cache-status: HIT
age: 67237
accept-ranges: bytes
server: cloudflare
cf-ray: 830dcedd2d30b527-OSL
X-Firefox-Spdy: h2
|
|
| cdnjs.cloudflare.com/ajax/libs/video.js/7.0.0/video.min.js | 104.17.24.14 | 200 OK | 90 kB |
URL GET HTTP/2cdnjs.cloudflare.com/ajax/libs/video.js/7.0.0/video.min.js IP104.17.24.14:443
Requested byhttps://weciima-myciima.wecema2.shop/run/39cfbaf5d20fdb3a00827a25920f8c2b40030c800f0020cd97453456de998c6cbe790b1af9ad71557e7c226a573f28a1db907f5101c8e905e08d13c010fbf113f6a66eb206696151c117573a5b98b609238106cef0a8326aa5509e5b5a35453c32125f/?Key=F4Vq9eB1h3Lyy-ch79jJEw&Expires=1701805449 CertificateIssuerCloudflare, Inc. Subjectsni.cloudflaressl.com Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT
File typeUnicode text, UTF-8 text, with very long lines (65141) Hash32803413b97579648bb6d086fde72f08 8a7d229a24879f094e80b78e417c90d07cdc4f13 8636f49e04c3b2b95dbdc4bc2dfff6d5babbfd642eab954087deaa7c2c2fae11
GET /ajax/libs/video.js/7.0.0/video.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://weciima-myciima.wecema2.shop/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 05 Dec 2023 16:53:55 GMT
content-type: application/javascript; charset=utf-8
content-length: 89934
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb0401f-6092d"
last-modified: Mon, 04 May 2020 16:17:35 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 725833
expires: Sun, 24 Nov 2024 16:53:55 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=0yjRuMhJ698ade0Ue36fkW%2Fa8BEYJZO7TSfTzGR1ZNrdIwf55XItw6vs5GlAW9OAQSh4KqkIweu45MAneB5NINlx3IGCCYPDAXI29%2F%2BuPaEXOKz6NapL84CnqDK0eR%2B9zgmPHetl"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 830dcede0efcb50c-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| code.jquery.com/jquery-3.5.1.min.js | 151.101.66.137 | 200 OK | 31 kB |
URL GET HTTP/2code.jquery.com/jquery-3.5.1.min.js IP151.101.66.137:443
Requested byhttps://weciima-myciima.wecema2.shop/run/39cfbaf5d20fdb3a00827a25920f8c2b40030c800f0020cd97453456de998c6cbe790b1af9ad71557e7c226a573f28a1db907f5101c8e905e08d13c010fbf113f6a66eb206696151c117573a5b98b609238106cef0a8326aa5509e5b5a35453c32125f/?Key=F4Vq9eB1h3Lyy-ch79jJEw&Expires=1701805449 CertificateIssuerSectigo Limited Subject*.jquery.com FingerprintD2:19:0A:AD:CE:BB:9C:61:17:5D:29:4B:A2:54:E8:C6:91:B8:F9:8D ValidityTue, 11 Jul 2023 00:00:00 GMT - Sun, 14 Jul 2024 23:59:59 GMT
File typeASCII text, with very long lines (65451) Hashdc5e7f18c8d36ac1d3d4753a87c98d0a c8e1c8b386dc5b7a9184c763c88d19a346eb3342 f7f6a5894f1d19ddad6fa392b2ece2c5e578cbf7da4ea805b6885eb6985b6e3d
GET /jquery-3.5.1.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://weciima-myciima.wecema2.shop/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Fri, 18 Oct 1991 12:00:00 GMT
etag: W/"28feccc0-15d84"
cache-control: public, max-age=31536000, stale-while-revalidate=604800
access-control-allow-origin: *
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 05 Dec 2023 16:53:55 GMT
age: 3340548
x-served-by: cache-lga13628-LGA, cache-bma1678-BMA
x-cache: HIT, HIT
x-cache-hits: 20, 364451
x-timer: S1701795236.536606,VS0,VE0
vary: Accept-Encoding
content-length: 30879
X-Firefox-Spdy: h2
|
|
| ocsp.r2m03.amazontrust.com/ | 143.204.53.97 | | 471 B |
URL ocsp.r2m03.amazontrust.com/ IP143.204.53.97:0
Hash1bfba60a71cfc2840a9d32837d6e0007 a0b0d4b59cdb00e6b087cad1a6c4b08aa7459fc9 7e592639e95cbc324b3017f1a6aa171657ee61fa9e4eea956c1b719cebd1f44d
POST / HTTP/1.1
Host: ocsp.r2m03.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=7200
Date: Tue, 05 Dec 2023 16:53:55 GMT
Last-Modified: Tue, 05 Dec 2023 16:25:16 GMT
Server: ECAcc (ska/F77E)
X-Cache: Miss from cloudfront
Via: 1.1 475d4ecb64796af058573c6f1048e898.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: sGN9UcZqgZM9d7A8P-g_mLfv7cxhz6M5wqHY2LJ-nL1cDaInWH2WcQ==
Age: 1719
|
|
| proftrafficcounter.com/stats |  18.157.140.81 | 200 OK | 40 B |
URL GET HTTP/2proftrafficcounter.com/stats IP18.157.140.81:443
Requested byhttps://weciima-myciima.wecema2.shop/watch/%D9%85%D8%B4%D8%A7%D9%87%D8%AF%D8%A9-%D9%85%D8%B3%D9%84%D8%B3%D9%84-my-roommate-is-a-detective-%D9%85%D9%88%D8%B3%D9%85-1-%D8%AD%D9%84%D9%82%D8%A9-10/ CertificateIssuerAmazon Subjectproftrafficcounter.com FingerprintE3:9F:79:6F:80:C0:BF:F8:C4:EB:45:F3:E9:0F:A7:41:F6:0C:05:E6 ValidityTue, 21 Nov 2023 00:00:00 GMT - Thu, 19 Dec 2024 23:59:59 GMT
File typeASCII text, with no line terminators Hash2e90070a9bedf94ec6fb79312dfc9ec5 7d716d6ed6c848855b2b9fe56449e2175f9582a2 a70f4f314a9e29a527d3b471e6339dab2374f8e33f52a04b074c1b6a467af4fe
GET /stats HTTP/1.1
Host: proftrafficcounter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://weciima-myciima.wecema2.shop
DNT: 1
Connection: keep-alive
Referer: https://weciima-myciima.wecema2.shop/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 05 Dec 2023 16:53:55 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: https://weciima-myciima.wecema2.shop
vary: Origin
access-control-allow-credentials: true
set-cookie: uid_id2=43e1d5bc-d9e5-4534-868e-225e79ae8dfd:2:1; expires=Fri, 02 Dec 2033 16:53:55 GMT; secure; SameSite=None
X-Firefox-Spdy: h2
|
|
| weciima-myciima.wecema2.shop/wp-content/uploads/2023/02/wecima-favicon-1.png | 172.67.166.63 | 200 OK | 5.5 kB |
URL GET HTTP/3weciima-myciima.wecema2.shop/wp-content/uploads/2023/02/wecima-favicon-1.png IP172.67.166.63:443
Requested byhttps://weciima-myciima.wecema2.shop/watch/%D9%85%D8%B4%D8%A7%D9%87%D8%AF%D8%A9-%D9%85%D8%B3%D9%84%D8%B3%D9%84-my-roommate-is-a-detective-%D9%85%D9%88%D8%B3%D9%85-1-%D8%AD%D9%84%D9%82%D8%A9-10/ CertificateIssuerGoogle Trust Services LLC Subjectwecema2.shop Fingerprint7E:07:C9:7B:1D:0D:04:D7:21:B4:7A:13:F4:02:09:06:7D:2C:2B:F3 ValiditySun, 03 Dec 2023 02:42:06 GMT - Sat, 02 Mar 2024 02:42:05 GMT
File typePNG image data, 271 x 211, 8-bit/color RGBA, non-interlaced\012- data Hashde6cab0eb34528ddc75c0bba91468367 805566b4421a52ccbc7ddea87282ce4df241f64e ab33b59200764ca718a5f977d0eccf57c27d02560c59ba3a9b12af1819b1f7fa
GET /wp-content/uploads/2023/02/wecima-favicon-1.png HTTP/1.1
Host: weciima-myciima.wecema2.shop
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://weciima-myciima.wecema2.shop/
DNT: 1
Connection: keep-alive
Cookie: _ga_6JHTFKY3P3=GS1.1.1701795240.1.0.1701795240.0.0.0; _ga=GA1.1.894831312.1701795241
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 05 Dec 2023 16:53:56 GMT
content-type: image/png
content-length: 5499
last-modified: Mon, 13 Feb 2023 20:21:20 GMT
etag: "63ea9bc0-157b"
vary: Accept, Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 354
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=DAnEdjx0L6fSM1qk3Oti%2BWB4ehCj1OzGjIGmtpoON6I4Rxomm3sOVTRl4OlZiUJ4Y3Q2et2XnEtu49TYX0btf%2FV5J42PLOHnIWGOvrbxqxsA8qMIjuGk0wUwQVCqSGxiinjJxlqyZi3oL%2FgSe19m"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 830dcee198a656a2-OSL
alt-svc: h3=":443"; ma=86400
|
|
| marbleapplicationsblushing.com/pixel/purst?dl=0&th=0&sc=0&rs=1454&rd=1454&fd=853&bv=23.12.v.2&tmpl=70 | 192.243.61.225 | 200 OK | 0 B |
URL GET HTTP/1.1marbleapplicationsblushing.com/pixel/purst?dl=0&th=0&sc=0&rs=1454&rd=1454&fd=853&bv=23.12.v.2&tmpl=70 IP192.243.61.225:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://weciima-myciima.wecema2.shop/watch/%D9%85%D8%B4%D8%A7%D9%87%D8%AF%D8%A9-%D9%85%D8%B3%D9%84%D8%B3%D9%84-my-roommate-is-a-detective-%D9%85%D9%88%D8%B3%D9%85-1-%D8%AD%D9%84%D9%82%D8%A9-10/ CertificateIssuerLet's Encrypt Subjectmarbleapplicationsblushing.com FingerprintE2:63:34:5D:24:6D:4F:CA:3F:15:91:D6:52:D6:ED:69:F9:28:84:7E ValidityTue, 28 Nov 2023 10:36:41 GMT - Mon, 26 Feb 2024 10:36:40 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /pixel/purst?dl=0&th=0&sc=0&rs=1454&rd=1454&fd=853&bv=23.12.v.2&tmpl=70 HTTP/1.1
Host: marbleapplicationsblushing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://weciima-myciima.wecema2.shop/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Tue, 05 Dec 2023 16:53:56 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
|
|
| marbleapplicationsblushing.com/pixel/pure | 192.243.61.225 | 204 No Content | 0 B |
URL OPTIONS HTTP/1.1marbleapplicationsblushing.com/pixel/pure IP192.243.61.225:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://weciima-myciima.wecema2.shop/watch/%D9%85%D8%B4%D8%A7%D9%87%D8%AF%D8%A9-%D9%85%D8%B3%D9%84%D8%B3%D9%84-my-roommate-is-a-detective-%D9%85%D9%88%D8%B3%D9%85-1-%D8%AD%D9%84%D9%82%D8%A9-10/ CertificateIssuerLet's Encrypt Subjectmarbleapplicationsblushing.com FingerprintE2:63:34:5D:24:6D:4F:CA:3F:15:91:D6:52:D6:ED:69:F9:28:84:7E ValidityTue, 28 Nov 2023 10:36:41 GMT - Mon, 26 Feb 2024 10:36:40 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
OPTIONS /pixel/pure HTTP/1.1
Host: marbleapplicationsblushing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://weciima-myciima.wecema2.shop/
Origin: https://weciima-myciima.wecema2.shop
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 204 No Content
Server: nginx/1.21.6
Date: Tue, 05 Dec 2023 16:53:56 GMT
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Allow-Credentials: true
Access-Control-Max-Age: 1728000
Content-Type: text/plain; charset=utf-8
Content-Length: 0
|
|
| marbleapplicationsblushing.com/pixel/pure | 192.243.61.225 | 204 No Content | 0 B |
URL OPTIONS HTTP/1.1marbleapplicationsblushing.com/pixel/pure IP192.243.61.225:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://weciima-myciima.wecema2.shop/watch/%D9%85%D8%B4%D8%A7%D9%87%D8%AF%D8%A9-%D9%85%D8%B3%D9%84%D8%B3%D9%84-my-roommate-is-a-detective-%D9%85%D9%88%D8%B3%D9%85-1-%D8%AD%D9%84%D9%82%D8%A9-10/ CertificateIssuerLet's Encrypt Subjectmarbleapplicationsblushing.com FingerprintE2:63:34:5D:24:6D:4F:CA:3F:15:91:D6:52:D6:ED:69:F9:28:84:7E ValidityTue, 28 Nov 2023 10:36:41 GMT - Mon, 26 Feb 2024 10:36:40 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
POST /pixel/pure HTTP/1.1
Host: marbleapplicationsblushing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 73
Origin: https://weciima-myciima.wecema2.shop
DNT: 1
Connection: keep-alive
Referer: https://weciima-myciima.wecema2.shop/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Tue, 05 Dec 2023 16:53:57 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
|
|
| site-assets.fontawesome.com/releases/v6.0.0/css/all.css | 172.64.147.188 | 200 OK | 466 kB |
URL GET HTTP/2site-assets.fontawesome.com/releases/v6.0.0/css/all.css IP172.64.147.188:443
Requested byhttps://weciima-myciima.wecema2.shop/watch/%D9%85%D8%B4%D8%A7%D9%87%D8%AF%D8%A9-%D9%85%D8%B3%D9%84%D8%B3%D9%84-my-roommate-is-a-detective-%D9%85%D9%88%D8%B3%D9%85-1-%D8%AD%D9%84%D9%82%D8%A9-10/ CertificateIssuerDigiCert Inc Subject*.fontawesome.com Fingerprint93:F9:69:8C:73:B0:08:60:65:F3:39:41:39:66:D3:2B:78:3A:6E:3D ValidityMon, 04 Dec 2023 00:00:00 GMT - Fri, 03 Jan 2025 23:59:59 GMT
File typeASCII text, with very long lines (65360) Size466 kB (465728 bytes) Hashc8ccf9786058107114b343d52efb40bc f690727a3f4aede7f2287320db4a07874381c10c 7ef19507353beb14a0415f80892c79742e8bd5072cfafd0e8806b12baeb7ef2d
GET /releases/v6.0.0/css/all.css HTTP/1.1
Host: site-assets.fontawesome.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://weciima-myciima.wecema2.shop/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 05 Dec 2023 16:53:55 GMT
content-type: text/css
x-amz-id-2: kMts6lFk375420qO3pr8/pgncg9KdJXO2mycrjfjiw9JKdxKdw7G+FRNrNX/EjNilTSOj1jW0LG9ktV5W0uoEQ==
x-amz-request-id: WXY6M1MVYE64C3HD
last-modified: Mon, 07 Feb 2022 20:23:49 GMT
etag: W/"c8ccf9786058107114b343d52efb40bc"
cache-control: max-age=31556926
cf-cache-status: HIT
age: 563328
vary: Accept-Encoding
server: cloudflare
cf-ray: 830dcedb0f7056c1-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| weciima-myciima.wecema2.shop/run/39cfbaf5d20fdb3a00827a25920f8c2b40030c800f0020cd97453456de998c6cbe790b1af9ad71557e7c226a573f28a1db907f5101c8e905e08d13c010fbf113f6a66eb206696151c117573a5b98b609238106cef0a8326aa5509e5b5a35453c32125f/?Key=F4Vq9eB1h3Lyy-ch79jJEw&Expires=1701805449 | 172.67.166.63 | 200 OK | 1.1 MB |
URL GET HTTP/3weciima-myciima.wecema2.shop/run/39cfbaf5d20fdb3a00827a25920f8c2b40030c800f0020cd97453456de998c6cbe790b1af9ad71557e7c226a573f28a1db907f5101c8e905e08d13c010fbf113f6a66eb206696151c117573a5b98b609238106cef0a8326aa5509e5b5a35453c32125f/?Key=F4Vq9eB1h3Lyy-ch79jJEw&Expires=1701805449 IP172.67.166.63:443
Requested byhttps://weciima-myciima.wecema2.shop/watch/%D9%85%D8%B4%D8%A7%D9%87%D8%AF%D8%A9-%D9%85%D8%B3%D9%84%D8%B3%D9%84-my-roommate-is-a-detective-%D9%85%D9%88%D8%B3%D9%85-1-%D8%AD%D9%84%D9%82%D8%A9-10/ CertificateIssuerGoogle Trust Services LLC Subjectwecema2.shop Fingerprint7E:07:C9:7B:1D:0D:04:D7:21:B4:7A:13:F4:02:09:06:7D:2C:2B:F3 ValiditySun, 03 Dec 2023 02:42:06 GMT - Sat, 02 Mar 2024 02:42:05 GMT
Size1.1 MB (1075605 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /run/39cfbaf5d20fdb3a00827a25920f8c2b40030c800f0020cd97453456de998c6cbe790b1af9ad71557e7c226a573f28a1db907f5101c8e905e08d13c010fbf113f6a66eb206696151c117573a5b98b609238106cef0a8326aa5509e5b5a35453c32125f/?Key=F4Vq9eB1h3Lyy-ch79jJEw&Expires=1701805449 HTTP/1.1
Host: weciima-myciima.wecema2.shop
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://weciima-myciima.wecema2.shop/watch/%D9%85%D8%B4%D8%A7%D9%87%D8%AF%D8%A9-%D9%85%D8%B3%D9%84%D8%B3%D9%84-my-roommate-is-a-detective-%D9%85%D9%88%D8%B3%D9%85-1-%D8%AD%D9%84%D9%82%D8%A9-10/
DNT: 1
Connection: keep-alive
Cookie: _ga_6JHTFKY3P3=GS1.1.1701795240.1.0.1701795240.0.0.0; _ga=GA1.1.894831312.1701795241
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 05 Dec 2023 16:53:55 GMT
content-type: text/html; charset=UTF-8
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=hJgu6Dt6Xcr7QN3jFtE8aKX2kjcmJ76tO4e9WfXz35hAvNt30T%2BhUHmuBfNroe%2FBu42u5vnrVEzYtxi54Q1pD3s3N%2BxSHWtn0qnPU1quaQrQRLlcdxFGbbaKowFJP0nSwcTGEHIT0jIENgjvCuGh"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 830dcedc080e56a2-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| weciima-myciima.wecema2.shop/wp-content/themes/Mycima2021/components/packs/%23footer/js/jquery-3.4.1.min.js?ver=6.2.2 | 172.67.166.63 | 200 OK | 88 kB |
URL GET HTTP/3weciima-myciima.wecema2.shop/wp-content/themes/Mycima2021/components/packs/%23footer/js/jquery-3.4.1.min.js?ver=6.2.2 IP172.67.166.63:443
Requested byhttps://weciima-myciima.wecema2.shop/watch/%D9%85%D8%B4%D8%A7%D9%87%D8%AF%D8%A9-%D9%85%D8%B3%D9%84%D8%B3%D9%84-my-roommate-is-a-detective-%D9%85%D9%88%D8%B3%D9%85-1-%D8%AD%D9%84%D9%82%D8%A9-10/ CertificateIssuerGoogle Trust Services LLC Subjectwecema2.shop Fingerprint7E:07:C9:7B:1D:0D:04:D7:21:B4:7A:13:F4:02:09:06:7D:2C:2B:F3 ValiditySun, 03 Dec 2023 02:42:06 GMT - Sat, 02 Mar 2024 02:42:05 GMT
File typeASCII text, with very long lines (65536), with no line terminators Hashb4999cbb6a73a9b312f635cff75e5a53 c7b683fc72d06eac129185c3e60362f5c1adc2a8 736173659d4431b8a53a08aacc1bec3ad3a2f44df5209c09d76c265374698302
GET /wp-content/themes/Mycima2021/components/packs/%23footer/js/jquery-3.4.1.min.js?ver=6.2.2 HTTP/1.1
Host: weciima-myciima.wecema2.shop
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://weciima-myciima.wecema2.shop/watch/%D9%85%D8%B4%D8%A7%D9%87%D8%AF%D8%A9-%D9%85%D8%B3%D9%84%D8%B3%D9%84-my-roommate-is-a-detective-%D9%85%D9%88%D8%B3%D9%85-1-%D8%AD%D9%84%D9%82%D8%A9-10/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 05 Dec 2023 16:53:54 GMT
content-type: application/javascript; charset=utf-8
last-modified: Sun, 22 Aug 2021 16:57:00 GMT
etag: W/"612281dc-157fb"
cache-control: max-age=14400
cf-cache-status: HIT
age: 499
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Uo9LerSVamN6GzOkvowjkIJMiab2ahH5o2eV03GPJTe9pnJBO4IghjzaZYUY3D4GgBW9w8jNX7guuPWsA0ITxrG0xQPcCGxGwjq%2BsgeDOjAKeEAqhrPxmcGv2aAjKtbP43t37epV0h%2BmfNwUSoji"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830dced7d99a56a2-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| weciima-myciima.wecema2.shop/wp-content/themes/Mycima2021/Style/fonts.css | 172.67.166.63 | 404 Not Found | 265 kB |
URL GET HTTP/3weciima-myciima.wecema2.shop/wp-content/themes/Mycima2021/Style/fonts.css IP172.67.166.63:443
Requested byhttps://weciima-myciima.wecema2.shop/run/39cfbaf5d20fdb3a00827a25920f8c2b40030c800f0020cd97453456de998c6cbe790b1af9ad71557e7c226a573f28a1db907f5101c8e905e08d13c010fbf113f6a66eb206696151c117573a5b98b609238106cef0a8326aa5509e5b5a35453c32125f/?Key=F4Vq9eB1h3Lyy-ch79jJEw&Expires=1701805449 CertificateIssuerGoogle Trust Services LLC Subjectwecema2.shop Fingerprint7E:07:C9:7B:1D:0D:04:D7:21:B4:7A:13:F4:02:09:06:7D:2C:2B:F3 ValiditySun, 03 Dec 2023 02:42:06 GMT - Sat, 02 Mar 2024 02:42:05 GMT
Size265 kB (265328 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /wp-content/themes/Mycima2021/Style/fonts.css HTTP/1.1
Host: weciima-myciima.wecema2.shop
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://weciima-myciima.wecema2.shop/run/39cfbaf5d20fdb3a00827a25920f8c2b40030c800f0020cd97453456de998c6cbe790b1af9ad71557e7c226a573f28a1db907f5101c8e905e08d13c010fbf113f6a66eb206696151c117573a5b98b609238106cef0a8326aa5509e5b5a35453c32125f/?Key=F4Vq9eB1h3Lyy-ch79jJEw&Expires=1701805449
Cookie: _ga_6JHTFKY3P3=GS1.1.1701795240.1.0.1701795240.0.0.0; _ga=GA1.1.894831312.1701795241
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
date: Tue, 05 Dec 2023 16:53:55 GMT
content-type: text/html; charset=UTF-8
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: max-age=14400, must-revalidate
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=fxxCmErPW5l2cW0kppPyGJYgk%2BTvG8mIJHhel8sv%2FfwCC3l%2FEg0rP5%2F4HN5rWDq2m4S1C3pHrug52Ut5LfCkGc8YRGly88R%2FdsNCyY5YwsJ%2FJn9FwOHkJ2kBGDZYKzIjvzDlxaXFIft6PJ%2BDDAea"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830dcedddac756a2-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| weciima-myciima.wecema2.shop/wp-content/themes/Mycima2021/js/vidjs-2.js | 172.67.166.63 | 200 OK | 27 kB |
URL GET HTTP/3weciima-myciima.wecema2.shop/wp-content/themes/Mycima2021/js/vidjs-2.js IP172.67.166.63:443
Requested byhttps://weciima-myciima.wecema2.shop/run/39cfbaf5d20fdb3a00827a25920f8c2b40030c800f0020cd97453456de998c6cbe790b1af9ad71557e7c226a573f28a1db907f5101c8e905e08d13c010fbf113f6a66eb206696151c117573a5b98b609238106cef0a8326aa5509e5b5a35453c32125f/?Key=F4Vq9eB1h3Lyy-ch79jJEw&Expires=1701805449 CertificateIssuerGoogle Trust Services LLC Subjectwecema2.shop Fingerprint7E:07:C9:7B:1D:0D:04:D7:21:B4:7A:13:F4:02:09:06:7D:2C:2B:F3 ValiditySun, 03 Dec 2023 02:42:06 GMT - Sat, 02 Mar 2024 02:42:05 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /wp-content/themes/Mycima2021/js/vidjs-2.js HTTP/1.1
Host: weciima-myciima.wecema2.shop
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://weciima-myciima.wecema2.shop/run/39cfbaf5d20fdb3a00827a25920f8c2b40030c800f0020cd97453456de998c6cbe790b1af9ad71557e7c226a573f28a1db907f5101c8e905e08d13c010fbf113f6a66eb206696151c117573a5b98b609238106cef0a8326aa5509e5b5a35453c32125f/?Key=F4Vq9eB1h3Lyy-ch79jJEw&Expires=1701805449
Cookie: _ga_6JHTFKY3P3=GS1.1.1701795240.1.0.1701795240.0.0.0; _ga=GA1.1.894831312.1701795241
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 05 Dec 2023 16:53:55 GMT
content-type: application/javascript; charset=utf-8
last-modified: Tue, 06 Jun 2023 18:43:27 GMT
etag: W/"647f7e4f-6a93"
cache-control: max-age=14400
cf-cache-status: HIT
age: 7192
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=lmhlNK0RvMZvNFtw3GP5VT0IDlLHdHJvDnwdq7hfzL1K918Pnjo72MrWpmwEq0GMY5J4X%2BHKX%2BNdcWZ1LC0UIzNa1y7j89mB6JoC8zrkojgcU4sJ8WyD8xySnC2jqQ84CdzfHLor%2FlTkXY%2BJRZpw"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830dcedddad556a2-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| unpkg.com/videojs-contrib-hls/dist/videojs-contrib-hls.js | 104.16.126.175 | 302 Found | 717 kB |
URL GET HTTP/2unpkg.com/videojs-contrib-hls/dist/videojs-contrib-hls.js IP104.16.126.175:443
Requested byhttps://weciima-myciima.wecema2.shop/run/39cfbaf5d20fdb3a00827a25920f8c2b40030c800f0020cd97453456de998c6cbe790b1af9ad71557e7c226a573f28a1db907f5101c8e905e08d13c010fbf113f6a66eb206696151c117573a5b98b609238106cef0a8326aa5509e5b5a35453c32125f/?Key=F4Vq9eB1h3Lyy-ch79jJEw&Expires=1701805449 CertificateIssuerCloudflare, Inc. Subjectsni.cloudflaressl.com FingerprintF7:B6:41:CA:15:FD:D1:0C:27:39:55:5D:C5:CE:3F:1C:A6:BB:9D:6F ValidityTue, 02 May 2023 00:00:00 GMT - Wed, 01 May 2024 23:59:59 GMT
Size717 kB (717184 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /videojs-contrib-hls/dist/videojs-contrib-hls.js HTTP/1.1
Host: unpkg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://weciima-myciima.wecema2.shop/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Tue, 05 Dec 2023 16:53:55 GMT
content-type: text/plain; charset=utf-8
access-control-allow-origin: *
cache-control: public, s-maxage=600, max-age=60
location: /videojs-contrib-hls@5.15.0/dist/videojs-contrib-hls.js
vary: Accept, Accept-Encoding
via: 1.1 fly.io
fly-request-id: 01HGXDV0MKG9S76NATZKC9W3S2-fra
cf-cache-status: HIT
age: 591
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 830dceddeaff56a2-OSL
X-Firefox-Spdy: h2
|
|
| unpkg.com/@videojs/themes@1.0.1/dist/forest/index.css | 104.16.126.175 | 200 OK | 4.7 kB |
URL GET HTTP/2unpkg.com/@videojs/themes@1.0.1/dist/forest/index.css IP104.16.126.175:443
Requested byhttps://weciima-myciima.wecema2.shop/run/39cfbaf5d20fdb3a00827a25920f8c2b40030c800f0020cd97453456de998c6cbe790b1af9ad71557e7c226a573f28a1db907f5101c8e905e08d13c010fbf113f6a66eb206696151c117573a5b98b609238106cef0a8326aa5509e5b5a35453c32125f/?Key=F4Vq9eB1h3Lyy-ch79jJEw&Expires=1701805449 CertificateIssuerCloudflare, Inc. Subjectsni.cloudflaressl.com FingerprintF7:B6:41:CA:15:FD:D1:0C:27:39:55:5D:C5:CE:3F:1C:A6:BB:9D:6F ValidityTue, 02 May 2023 00:00:00 GMT - Wed, 01 May 2024 23:59:59 GMT
File typeASCII text, with very long lines (4713), with no line terminators Hashf4eae9a8afcd9abd6c0a15a152e1bce8 9ab77953e7fe073c1e4075e3196613b9c8a06d60 0dc7cd97035d0073354825aa89d32ad41d8c0a3422226be471831cc28d8d024d
GET /@videojs/themes@1.0.1/dist/forest/index.css HTTP/1.1
Host: unpkg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://weciima-myciima.wecema2.shop/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 05 Dec 2023 16:53:55 GMT
content-type: text/css; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=31536000
last-modified: Wed, 28 Oct 2020 04:24:35 GMT
etag: W/"1261-TREtap8czYudjMboZWzHkoZFOgs"
via: 1.1 fly.io
fly-request-id: 01HFWZHECXF7RND07C4EGMPJ04-arn
cf-cache-status: HIT
age: 1089324
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 830dcededca456a2-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| weciima-myciima.wecema2.shop/wp-content/themes/Mycima2021/components/packs/%23footer/js/setup.js?1499679794&ver=6.2.2 | 172.67.166.63 | 200 OK | 153 kB |
URL GET HTTP/3weciima-myciima.wecema2.shop/wp-content/themes/Mycima2021/components/packs/%23footer/js/setup.js?1499679794&ver=6.2.2 IP172.67.166.63:443
Requested byhttps://weciima-myciima.wecema2.shop/watch/%D9%85%D8%B4%D8%A7%D9%87%D8%AF%D8%A9-%D9%85%D8%B3%D9%84%D8%B3%D9%84-my-roommate-is-a-detective-%D9%85%D9%88%D8%B3%D9%85-1-%D8%AD%D9%84%D9%82%D8%A9-10/ CertificateIssuerGoogle Trust Services LLC Subjectwecema2.shop Fingerprint7E:07:C9:7B:1D:0D:04:D7:21:B4:7A:13:F4:02:09:06:7D:2C:2B:F3 ValiditySun, 03 Dec 2023 02:42:06 GMT - Sat, 02 Mar 2024 02:42:05 GMT
Size153 kB (152752 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /wp-content/themes/Mycima2021/components/packs/%23footer/js/setup.js?1499679794&ver=6.2.2 HTTP/1.1
Host: weciima-myciima.wecema2.shop
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://weciima-myciima.wecema2.shop/watch/%D9%85%D8%B4%D8%A7%D9%87%D8%AF%D8%A9-%D9%85%D8%B3%D9%84%D8%B3%D9%84-my-roommate-is-a-detective-%D9%85%D9%88%D8%B3%D9%85-1-%D8%AD%D9%84%D9%82%D8%A9-10/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 05 Dec 2023 16:53:54 GMT
content-type: application/javascript; charset=utf-8
last-modified: Mon, 13 Feb 2023 19:31:57 GMT
etag: W/"63ea902d-254b0"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=d4qKyxi6s62FEs0TTjLtwBsLt8PzaxXMletHPs4xQ0hT7pGv2MSq%2FhoxRT8NRFYnOVtmGjvBhja9c9Du5ApmA%2BTLKtlJsB8Gy8SHpPmHfRZjI2OIH91ug220LL6%2Ft6l%2BE2PlEXg8haEyXtpbnUFh"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830dced7d99e56a2-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| site-assets.fontawesome.com/releases/v6.0.0/webfonts/fa-regular-400.woff2 | 172.64.147.188 | 200 OK | 358 kB |
URL GET HTTP/2site-assets.fontawesome.com/releases/v6.0.0/webfonts/fa-regular-400.woff2 IP172.64.147.188:443
Requested byhttps://weciima-myciima.wecema2.shop/watch/%D9%85%D8%B4%D8%A7%D9%87%D8%AF%D8%A9-%D9%85%D8%B3%D9%84%D8%B3%D9%84-my-roommate-is-a-detective-%D9%85%D9%88%D8%B3%D9%85-1-%D8%AD%D9%84%D9%82%D8%A9-10/ CertificateIssuerDigiCert Inc Subject*.fontawesome.com Fingerprint93:F9:69:8C:73:B0:08:60:65:F3:39:41:39:66:D3:2B:78:3A:6E:3D ValidityMon, 04 Dec 2023 00:00:00 GMT - Fri, 03 Jan 2025 23:59:59 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 357732, version 768.256\012- data Size358 kB (357732 bytes) Hashaca950cc283a103f77e0001fb67043b7 bf0d2965fbc75a8a23ca081c7094a95535d46ca6 d2d786476ddb1827a07bc0ac83e78cee6d262a16092b6064c166091132f09b65
GET /releases/v6.0.0/webfonts/fa-regular-400.woff2 HTTP/1.1
Host: site-assets.fontawesome.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://weciima-myciima.wecema2.shop
DNT: 1
Connection: keep-alive
Referer: https://site-assets.fontawesome.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 05 Dec 2023 16:53:55 GMT
content-type: font/woff2
content-length: 357732
x-amz-id-2: G6snCpPOHv0WUP9h0zYeir+coze03I1NywNm6uDyoAqRZFvRJCNG+MM3qN+DuDorJx7rpOFjM8s=
x-amz-request-id: 1Z3Z2C7YNATD2JJN
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding
last-modified: Mon, 07 Feb 2022 20:26:45 GMT
etag: "aca950cc283a103f77e0001fb67043b7"
cache-control: max-age=31556926
cf-cache-status: HIT
age: 67237
accept-ranges: bytes
server: cloudflare
cf-ray: 830dcedd2d2bb527-OSL
X-Firefox-Spdy: h2
|
|
| unpkg.com/videojs-flash/dist/videojs-flash.js | 104.16.126.175 | 302 Found | 39 kB |
URL GET HTTP/2unpkg.com/videojs-flash/dist/videojs-flash.js IP104.16.126.175:443
Requested byhttps://weciima-myciima.wecema2.shop/run/39cfbaf5d20fdb3a00827a25920f8c2b40030c800f0020cd97453456de998c6cbe790b1af9ad71557e7c226a573f28a1db907f5101c8e905e08d13c010fbf113f6a66eb206696151c117573a5b98b609238106cef0a8326aa5509e5b5a35453c32125f/?Key=F4Vq9eB1h3Lyy-ch79jJEw&Expires=1701805449 CertificateIssuerCloudflare, Inc. Subjectsni.cloudflaressl.com FingerprintF7:B6:41:CA:15:FD:D1:0C:27:39:55:5D:C5:CE:3F:1C:A6:BB:9D:6F ValidityTue, 02 May 2023 00:00:00 GMT - Wed, 01 May 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /videojs-flash/dist/videojs-flash.js HTTP/1.1
Host: unpkg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://weciima-myciima.wecema2.shop/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Tue, 05 Dec 2023 16:53:55 GMT
content-type: text/plain; charset=utf-8
access-control-allow-origin: *
cache-control: public, s-maxage=600, max-age=60
location: /videojs-flash@2.2.1/dist/videojs-flash.js
vary: Accept, Accept-Encoding
via: 1.1 fly.io
fly-request-id: 01HGXE5PPWW50NZFJ2XZTX3KY2-fra
cf-cache-status: HIT
age: 241
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 830dceddeb0056a2-OSL
X-Firefox-Spdy: h2
|
|
| weciima-myciima.wecema2.shop/watch/%D9%85%D8%B4%D8%A7%D9%87%D8%AF%D8%A9-%D9%85%D8%B3%D9%84%D8%B3%D9%84-my-roommate-is-a-detective-%D9%85%D9%88%D8%B3%D9%85-1-%D8%AD%D9%84%D9%82%D8%A9-10/ | 172.67.166.63 | 200 OK | 306 kB |
URL User Request GET HTTP/2weciima-myciima.wecema2.shop/watch/%D9%85%D8%B4%D8%A7%D9%87%D8%AF%D8%A9-%D9%85%D8%B3%D9%84%D8%B3%D9%84-my-roommate-is-a-detective-%D9%85%D9%88%D8%B3%D9%85-1-%D8%AD%D9%84%D9%82%D8%A9-10/ IP172.67.166.63:443
CertificateIssuerGoogle Trust Services LLC Subjectwecema2.shop Fingerprint7E:07:C9:7B:1D:0D:04:D7:21:B4:7A:13:F4:02:09:06:7D:2C:2B:F3 ValiditySun, 03 Dec 2023 02:42:06 GMT - Sat, 02 Mar 2024 02:42:05 GMT
Size306 kB (306254 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /watch/%D9%85%D8%B4%D8%A7%D9%87%D8%AF%D8%A9-%D9%85%D8%B3%D9%84%D8%B3%D9%84-my-roommate-is-a-detective-%D9%85%D9%88%D8%B3%D9%85-1-%D8%AD%D9%84%D9%82%D8%A9-10/ HTTP/1.1
Host: weciima-myciima.wecema2.shop
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 05 Dec 2023 16:53:54 GMT
content-type: text/html; charset=UTF-8
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=hbUMQQYl0DAQcsAdsuQ3tpiiMDiTSSf3v1%2F2CPuc9bsza4xbXDB%2FkOwDlxWzol1vjTSgXKzRpk7eCIJIS6tLIwVmgi%2BkTRVi%2B0W0a1v%2Fmf9DluXB22smfKx7FS3d%2BNzM61svAwWQic1GMz40xiTe"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 830dced47bab5688-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| weciima-myciima.wecema2.shop/insights.php | 172.67.166.63 | 200 OK | 35 B |
URL POST HTTP/3weciima-myciima.wecema2.shop/insights.php IP172.67.166.63:443
Requested byhttps://weciima-myciima.wecema2.shop/watch/%D9%85%D8%B4%D8%A7%D9%87%D8%AF%D8%A9-%D9%85%D8%B3%D9%84%D8%B3%D9%84-my-roommate-is-a-detective-%D9%85%D9%88%D8%B3%D9%85-1-%D8%AD%D9%84%D9%82%D8%A9-10/ CertificateIssuerGoogle Trust Services LLC Subjectwecema2.shop Fingerprint7E:07:C9:7B:1D:0D:04:D7:21:B4:7A:13:F4:02:09:06:7D:2C:2B:F3 ValiditySun, 03 Dec 2023 02:42:06 GMT - Sat, 02 Mar 2024 02:42:05 GMT
File typetroff or preprocessor input, ASCII text, with no line terminators Hash6b652cac01878c3fd56eb6144f8ec758 2fb0dbad10a7c55b807ebc198e20ed61e8e1569f 95eff1092198a47f11a7261d5419945c9b7745f457589fc3c9f1cbac4cd5fe95
POST /insights.php HTTP/1.1
Host: weciima-myciima.wecema2.shop
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 12
Origin: https://weciima-myciima.wecema2.shop
DNT: 1
Connection: keep-alive
Referer: https://weciima-myciima.wecema2.shop/watch/%D9%85%D8%B4%D8%A7%D9%87%D8%AF%D8%A9-%D9%85%D8%B3%D9%84%D8%B3%D9%84-my-roommate-is-a-detective-%D9%85%D9%88%D8%B3%D9%85-1-%D8%AD%D9%84%D9%82%D8%A9-10/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 05 Dec 2023 16:53:54 GMT
content-type: application/json
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=J%2F%2BfpyOunFAEBA4KYOKOlSzjuzt834r3UjomVXCYQnmmJx2OSYi74Sy1UC88t%2BEQuUJsIjF20OVWWSH9V%2FXjrE8iCyc9Fx%2FDFUNgH7GHcHP6J4nEpfd6ymaH%2BLNtZ5nGRLBwEOJ3Drk%2Bfww%2B7W42"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 830dced91b7756a2-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| wecima.tube/wp-content/uploads/2023/02/wecima-favicon-1.png | 172.67.184.130 | 301 Moved Permanently | 5.5 kB |
URL GET HTTP/3wecima.tube/wp-content/uploads/2023/02/wecima-favicon-1.png IP172.67.184.130:443
Requested byhttps://weciima-myciima.wecema2.shop/watch/%D9%85%D8%B4%D8%A7%D9%87%D8%AF%D8%A9-%D9%85%D8%B3%D9%84%D8%B3%D9%84-my-roommate-is-a-detective-%D9%85%D9%88%D8%B3%D9%85-1-%D8%AD%D9%84%D9%82%D8%A9-10/ CertificateIssuerCloudflare, Inc. Subjectsni.cloudflaressl.com Fingerprint38:85:67:EA:CB:D5:AA:EA:AA:13:D8:8E:A0:F9:5E:3A:EC:0B:54:66 ValidityThu, 02 Feb 2023 00:00:00 GMT - Fri, 02 Feb 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /wp-content/uploads/2023/02/wecima-favicon-1.png HTTP/1.1
Host: wecima.tube
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://weciima-myciima.wecema2.shop/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 301 Moved Permanently
date: Tue, 05 Dec 2023 16:53:56 GMT
content-type: text/html
location: https://weciima-myciima.wecema2.shop/wp-content/uploads/2023/02/wecima-favicon-1.png
cache-control: max-age=31536000
cf-cache-status: HIT
age: 325
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=c1dpOymI5Bj2qgTjANXGNx%2BOqov%2BY3rs3E3uGIFTOBqcV%2FqyOH06boQ61Kgj5nIJMRMSMOKGxD6pBQ1LCaYld3VfbzuS%2FiY7d1mMM8IPJjsq2B26weEfcwDiPy5teg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830dcee16c43b4ff-OSL
alt-svc: h3=":443"; ma=86400
|
|
| weciima-myciima.wecema2.shop/run/39cfbaf5d20fdb3a00827a25920f8c2b40030c800f0020cd97453456de998c6cbe790b1af9ad71557e7c226a573f28a1db907f5101c8e905e08d13c010fbf113f6a66eb206696151c117573a5b98b609238106cef0a8326aa5509e5b5a35453c32125f?Key=F4Vq9eB1h3Lyy-ch79jJEw&Expires=1701805449 | 172.67.166.63 | 301 Moved Permanently | 1.1 MB |
URL GET HTTP/3weciima-myciima.wecema2.shop/run/39cfbaf5d20fdb3a00827a25920f8c2b40030c800f0020cd97453456de998c6cbe790b1af9ad71557e7c226a573f28a1db907f5101c8e905e08d13c010fbf113f6a66eb206696151c117573a5b98b609238106cef0a8326aa5509e5b5a35453c32125f?Key=F4Vq9eB1h3Lyy-ch79jJEw&Expires=1701805449 IP172.67.166.63:443
Requested byhttps://weciima-myciima.wecema2.shop/watch/%D9%85%D8%B4%D8%A7%D9%87%D8%AF%D8%A9-%D9%85%D8%B3%D9%84%D8%B3%D9%84-my-roommate-is-a-detective-%D9%85%D9%88%D8%B3%D9%85-1-%D8%AD%D9%84%D9%82%D8%A9-10/ CertificateIssuerGoogle Trust Services LLC Subjectwecema2.shop Fingerprint7E:07:C9:7B:1D:0D:04:D7:21:B4:7A:13:F4:02:09:06:7D:2C:2B:F3 ValiditySun, 03 Dec 2023 02:42:06 GMT - Sat, 02 Mar 2024 02:42:05 GMT
Size1.1 MB (1075605 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /run/39cfbaf5d20fdb3a00827a25920f8c2b40030c800f0020cd97453456de998c6cbe790b1af9ad71557e7c226a573f28a1db907f5101c8e905e08d13c010fbf113f6a66eb206696151c117573a5b98b609238106cef0a8326aa5509e5b5a35453c32125f?Key=F4Vq9eB1h3Lyy-ch79jJEw&Expires=1701805449 HTTP/1.1
Host: weciima-myciima.wecema2.shop
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://weciima-myciima.wecema2.shop/watch/%D9%85%D8%B4%D8%A7%D9%87%D8%AF%D8%A9-%D9%85%D8%B3%D9%84%D8%B3%D9%84-my-roommate-is-a-detective-%D9%85%D9%88%D8%B3%D9%85-1-%D8%AD%D9%84%D9%82%D8%A9-10/
Cookie: _ga_6JHTFKY3P3=GS1.1.1701795240.1.0.1701795240.0.0.0; _ga=GA1.1.894831312.1701795241
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 301 Moved Permanently
date: Tue, 05 Dec 2023 16:53:55 GMT
content-type: text/html; charset=UTF-8
location: https://weciima-myciima.wecema2.shop/run/39cfbaf5d20fdb3a00827a25920f8c2b40030c800f0020cd97453456de998c6cbe790b1af9ad71557e7c226a573f28a1db907f5101c8e905e08d13c010fbf113f6a66eb206696151c117573a5b98b609238106cef0a8326aa5509e5b5a35453c32125f/?Key=F4Vq9eB1h3Lyy-ch79jJEw&Expires=1701805449
x-redirect-by: WordPress
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=GgI53td20xxePAMBUvvHR3BHx%2Byg5kJaRTqgLLbM6BjLTOQ6t%2Ba5PtHLzf%2FCalBZgIz5%2Brdpyl1szujINxa7hHgBpT8gwcOfC5ODLmDZtltleoCFNXP00zAfBLO9RS2tAp141cZKiTm6g%2Bc5FQ81"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 830dcedb4eea56a2-OSL
alt-svc: h3=":443"; ma=86400
|
|
| weciimaa.online/watch/%D9%85%D8%B4%D8%A7%D9%87%D8%AF%D8%A9-%D9%85%D8%B3%D9%84%D8%B3%D9%84-my-roommate-is-a-detective-%D9%85%D9%88%D8%B3%D9%85-1-%D8%AD%D9%84%D9%82%D8%A9-10/ | 104.21.30.204 | 301 Moved Permanently | 306 kB |
URL User Request GET HTTP/2weciimaa.online/watch/%D9%85%D8%B4%D8%A7%D9%87%D8%AF%D8%A9-%D9%85%D8%B3%D9%84%D8%B3%D9%84-my-roommate-is-a-detective-%D9%85%D9%88%D8%B3%D9%85-1-%D8%AD%D9%84%D9%82%D8%A9-10/ IP104.21.30.204:443
CertificateIssuerGoogle Trust Services LLC Subjectweciimaa.online FingerprintF6:EA:A5:C9:39:78:5A:AD:C7:A1:5C:5A:78:9A:1E:98:D0:3D:90:B9 ValidityFri, 10 Nov 2023 02:06:10 GMT - Thu, 08 Feb 2024 02:06:09 GMT
Size306 kB (306254 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /watch/%D9%85%D8%B4%D8%A7%D9%87%D8%AF%D8%A9-%D9%85%D8%B3%D9%84%D8%B3%D9%84-my-roommate-is-a-detective-%D9%85%D9%88%D8%B3%D9%85-1-%D8%AD%D9%84%D9%82%D8%A9-10/ HTTP/1.1
Host: weciimaa.online
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 301 Moved Permanently
date: Tue, 05 Dec 2023 16:53:53 GMT
content-type: text/html
location: https://weciima-myciima.wecema2.shop/watch/%D9%85%D8%B4%D8%A7%D9%87%D8%AF%D8%A9-%D9%85%D8%B3%D9%84%D8%B3%D9%84-my-roommate-is-a-detective-%D9%85%D9%88%D8%B3%D9%85-1-%D8%AD%D9%84%D9%82%D8%A9-10/
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=BhqSfwVUKieUq9%2FDqIzy3WB4VmmRCBe9booYJwKC%2B%2B3d9kR2W%2FmcfCcebiZkLHD2i1lQt8geuJSuQBzJH3yM8y42Y6pOUbgLZmPN0pT52DJKIDUEwYPFzIiPaeKPwVMqcvE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 830dced42d7a56ab-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| weciima-myciima.wecema2.shop/wp-includes/css/classic-themes.min.css?ver=6.2.2 | 172.67.166.63 | 200 OK | 291 B |
URL GET HTTP/3weciima-myciima.wecema2.shop/wp-includes/css/classic-themes.min.css?ver=6.2.2 IP172.67.166.63:443
Requested byhttps://weciima-myciima.wecema2.shop/watch/%D9%85%D8%B4%D8%A7%D9%87%D8%AF%D8%A9-%D9%85%D8%B3%D9%84%D8%B3%D9%84-my-roommate-is-a-detective-%D9%85%D9%88%D8%B3%D9%85-1-%D8%AD%D9%84%D9%82%D8%A9-10/ CertificateIssuerGoogle Trust Services LLC Subjectwecema2.shop Fingerprint7E:07:C9:7B:1D:0D:04:D7:21:B4:7A:13:F4:02:09:06:7D:2C:2B:F3 ValiditySun, 03 Dec 2023 02:42:06 GMT - Sat, 02 Mar 2024 02:42:05 GMT
File typeASCII text, with no line terminators Hash2485a0fab337da61deb41cc4aa994c1b af1a1d4c6b7c287dc881dd4f46b6b547ac5a5353 7e0bdafc01d81aed845a69d0a32120145155f75aca4c603d8952de7ecc5c6410
GET /wp-includes/css/classic-themes.min.css?ver=6.2.2 HTTP/1.1
Host: weciima-myciima.wecema2.shop
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://weciima-myciima.wecema2.shop/watch/%D9%85%D8%B4%D8%A7%D9%87%D8%AF%D8%A9-%D9%85%D8%B3%D9%84%D8%B3%D9%84-my-roommate-is-a-detective-%D9%85%D9%88%D8%B3%D9%85-1-%D8%AD%D9%84%D9%82%D8%A9-10/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 05 Dec 2023 16:53:54 GMT
content-type: text/css
last-modified: Thu, 08 Jun 2023 18:55:51 GMT
etag: W/"64822437-123"
cache-control: max-age=14400
cf-cache-status: HIT
age: 682
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ooZaRk6i2bhwqM9HjNerI5CP4jRNYgzIkeVpOaxz1gh%2FsxSo7CFt1hUNdFouiDK9Ue%2BSfqlNUqVqVcKnj2PigKMJgA%2BnJvjn100bdz9qTk6l0vjSn1JZVVdmaWdks8jJk113KjL42gsxd666s%2Fos"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830dced7b97456a2-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| wecima.tube/wp-content/uploads/2021/03/My-Roommate-Is-a-Detective-s01.jpg | 172.67.184.130 | 301 Moved Permanently | 112 kB |
URL GET HTTP/2wecima.tube/wp-content/uploads/2021/03/My-Roommate-Is-a-Detective-s01.jpg IP172.67.184.130:443
Requested byhttps://weciima-myciima.wecema2.shop/watch/%D9%85%D8%B4%D8%A7%D9%87%D8%AF%D8%A9-%D9%85%D8%B3%D9%84%D8%B3%D9%84-my-roommate-is-a-detective-%D9%85%D9%88%D8%B3%D9%85-1-%D8%AD%D9%84%D9%82%D8%A9-10/ CertificateIssuerCloudflare, Inc. Subjectsni.cloudflaressl.com Fingerprint38:85:67:EA:CB:D5:AA:EA:AA:13:D8:8E:A0:F9:5E:3A:EC:0B:54:66 ValidityThu, 02 Feb 2023 00:00:00 GMT - Fri, 02 Feb 2024 23:59:59 GMT
Size112 kB (112408 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /wp-content/uploads/2021/03/My-Roommate-Is-a-Detective-s01.jpg HTTP/1.1
Host: wecima.tube
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://weciima-myciima.wecema2.shop/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 301 Moved Permanently
date: Tue, 05 Dec 2023 16:53:55 GMT
content-type: text/html
location: https://weciima-myciima.wecema2.shop/wp-content/uploads/2021/03/My-Roommate-Is-a-Detective-s01.jpg
cache-control: max-age=31536000
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=YqEc8NsJizjdMI8D2Fy%2BY%2BmHSWOqAeFBLfEDSsFNF8k2kYlelm51geL91uwmC63PoBNgfVqjBy8199TBgX4wKevEwQEpXoyK4prUd9HJ1kWNE3swit0q3vOAckwYrw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830dcedb0cedb52d-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| friendshipmale.com/sfp.js | 172.64.172.31 | 200 OK | 86 kB |
URL GET HTTP/2friendshipmale.com/sfp.js IP172.64.172.31:443
Requested byhttps://weciima-myciima.wecema2.shop/watch/%D9%85%D8%B4%D8%A7%D9%87%D8%AF%D8%A9-%D9%85%D8%B3%D9%84%D8%B3%D9%84-my-roommate-is-a-detective-%D9%85%D9%88%D8%B3%D9%85-1-%D8%AD%D9%84%D9%82%D8%A9-10/ CertificateIssuerCloudflare, Inc. Subjectsni.cloudflaressl.com Fingerprint08:6F:D8:CB:9E:0C:0A:98:2E:C5:CD:21:8E:0B:76:2B:50:6F:B6:37 ValiditySat, 18 Feb 2023 00:00:00 GMT - Sat, 17 Feb 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sfp.js HTTP/1.1
Host: friendshipmale.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://weciima-myciima.wecema2.shop/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 05 Dec 2023 16:53:55 GMT
content-type: application/javascript; charset=utf-8
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
access-control-allow-origin: *
expires: Thu, 01 Jan 1970 00:00:01 GMT
cache-control: max-age=14400
x-request-id: 69864fffd2f54011d9df6e59bb11cd1c
strict-transport-security: max-age=0; includeSubdomains
cf-cache-status: EXPIRED
last-modified: Tue, 05 Dec 2023 16:53:55 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=xo40ksHlRgVncR8OBA8xaNYrvU%2FzUKiUQlBMvkN0P8c2%2FUErwUt0sScN72CdGCZxj%2FxoSlu5nC7JKICf5T9fwBrFs1mWG4m2kF7HRqrWE2QC7I7Lkpke2Jfi8PJrUeVnGOciP%2F0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830dcedf6c7ad184-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| unpkg.com/videojs-flash@2.2.1/dist/videojs-flash.js | 104.16.126.175 | 200 OK | 39 kB |
URL GET HTTP/2unpkg.com/videojs-flash@2.2.1/dist/videojs-flash.js IP104.16.126.175:443
Requested byhttps://weciima-myciima.wecema2.shop/run/39cfbaf5d20fdb3a00827a25920f8c2b40030c800f0020cd97453456de998c6cbe790b1af9ad71557e7c226a573f28a1db907f5101c8e905e08d13c010fbf113f6a66eb206696151c117573a5b98b609238106cef0a8326aa5509e5b5a35453c32125f/?Key=F4Vq9eB1h3Lyy-ch79jJEw&Expires=1701805449 CertificateIssuerCloudflare, Inc. Subjectsni.cloudflaressl.com FingerprintF7:B6:41:CA:15:FD:D1:0C:27:39:55:5D:C5:CE:3F:1C:A6:BB:9D:6F ValidityTue, 02 May 2023 00:00:00 GMT - Wed, 01 May 2024 23:59:59 GMT
Hashb671db9a73a06770313c1a05bcdc0b58 12280acce4192448e93e3b2ef9e1adf6c6eba94a 9162832cc3ed9507d8f869dd0d4fd0dacde05a078172d82a98b05e0aef1f1a34
GET /videojs-flash@2.2.1/dist/videojs-flash.js HTTP/1.1
Host: unpkg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://weciima-myciima.wecema2.shop/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 05 Dec 2023 16:53:55 GMT
content-type: application/javascript; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=31536000
last-modified: Sat, 26 Oct 1985 08:15:00 GMT
etag: W/"99ef-EigKzOQZJEjpPjsu+eGt9sbrqUo"
via: 1.1 fly.io
fly-request-id: 01HGA2WFN57BRV5J3SMR71H07H-arn
cf-cache-status: HIT
age: 649611
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 830dcededca656a2-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| unpkg.com/@videojs/themes@1/dist/forest/index.css | 104.16.126.175 | 302 Found | 4.7 kB |
URL GET HTTP/2unpkg.com/@videojs/themes@1/dist/forest/index.css IP104.16.126.175:443
Requested byhttps://weciima-myciima.wecema2.shop/run/39cfbaf5d20fdb3a00827a25920f8c2b40030c800f0020cd97453456de998c6cbe790b1af9ad71557e7c226a573f28a1db907f5101c8e905e08d13c010fbf113f6a66eb206696151c117573a5b98b609238106cef0a8326aa5509e5b5a35453c32125f/?Key=F4Vq9eB1h3Lyy-ch79jJEw&Expires=1701805449 CertificateIssuerCloudflare, Inc. Subjectsni.cloudflaressl.com FingerprintF7:B6:41:CA:15:FD:D1:0C:27:39:55:5D:C5:CE:3F:1C:A6:BB:9D:6F ValidityTue, 02 May 2023 00:00:00 GMT - Wed, 01 May 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /@videojs/themes@1/dist/forest/index.css HTTP/1.1
Host: unpkg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://weciima-myciima.wecema2.shop/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Tue, 05 Dec 2023 16:53:55 GMT
content-type: text/plain; charset=utf-8
access-control-allow-origin: *
cache-control: public, s-maxage=600, max-age=60
location: /@videojs/themes@1.0.1/dist/forest/index.css
vary: Accept, Accept-Encoding
via: 1.1 fly.io
fly-request-id: 01HGXDZRK6P84D7QHS8XVB6YC5-fra
cf-cache-status: HIT
age: 435
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 830dceddeafa56a2-OSL
X-Firefox-Spdy: h2
|
|
| unpkg.com/videojs-contrib-hls@5.15.0/dist/videojs-contrib-hls.js | 104.16.126.175 | 200 OK | 717 kB |
URL GET HTTP/2unpkg.com/videojs-contrib-hls@5.15.0/dist/videojs-contrib-hls.js IP104.16.126.175:443
Requested byhttps://weciima-myciima.wecema2.shop/run/39cfbaf5d20fdb3a00827a25920f8c2b40030c800f0020cd97453456de998c6cbe790b1af9ad71557e7c226a573f28a1db907f5101c8e905e08d13c010fbf113f6a66eb206696151c117573a5b98b609238106cef0a8326aa5509e5b5a35453c32125f/?Key=F4Vq9eB1h3Lyy-ch79jJEw&Expires=1701805449 CertificateIssuerCloudflare, Inc. Subjectsni.cloudflaressl.com FingerprintF7:B6:41:CA:15:FD:D1:0C:27:39:55:5D:C5:CE:3F:1C:A6:BB:9D:6F ValidityTue, 02 May 2023 00:00:00 GMT - Wed, 01 May 2024 23:59:59 GMT
Size717 kB (717184 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /videojs-contrib-hls@5.15.0/dist/videojs-contrib-hls.js HTTP/1.1
Host: unpkg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://weciima-myciima.wecema2.shop/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 05 Dec 2023 16:53:55 GMT
content-type: application/javascript; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=31536000
last-modified: Sat, 26 Oct 1985 08:15:00 GMT
etag: W/"af180-yddBL+N7CRgyB07pxWVoSeh+9Bw"
via: 1.1 fly.io
fly-request-id: 01HFTCM2M15W2XX1XCMRKBJ1CQ-arn
cf-cache-status: HIT
age: 1176272
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 830dcededcaa56a2-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| weciima-myciima.wecema2.shop/wp-content/themes/Mycima2021/components/packs/%23footer/js/owl.carousel.min.js?ver=6.2.2 | 172.67.166.63 | 200 OK | 95 kB |
URL GET HTTP/3weciima-myciima.wecema2.shop/wp-content/themes/Mycima2021/components/packs/%23footer/js/owl.carousel.min.js?ver=6.2.2 IP172.67.166.63:443
Requested byhttps://weciima-myciima.wecema2.shop/watch/%D9%85%D8%B4%D8%A7%D9%87%D8%AF%D8%A9-%D9%85%D8%B3%D9%84%D8%B3%D9%84-my-roommate-is-a-detective-%D9%85%D9%88%D8%B3%D9%85-1-%D8%AD%D9%84%D9%82%D8%A9-10/ CertificateIssuerGoogle Trust Services LLC Subjectwecema2.shop Fingerprint7E:07:C9:7B:1D:0D:04:D7:21:B4:7A:13:F4:02:09:06:7D:2C:2B:F3 ValiditySun, 03 Dec 2023 02:42:06 GMT - Sat, 02 Mar 2024 02:42:05 GMT
File typeASCII text, with very long lines (65536), with no line terminators Hashfcdee094e98d38fe380e1b5aad9bf444 d0ea8bb98673c7daa2da3af292eeea39a4f7479a ab97310577a6474ae4b0bd9bb8ef5267698bb9fa61127cb358d4512676d90488
GET /wp-content/themes/Mycima2021/components/packs/%23footer/js/owl.carousel.min.js?ver=6.2.2 HTTP/1.1
Host: weciima-myciima.wecema2.shop
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://weciima-myciima.wecema2.shop/watch/%D9%85%D8%B4%D8%A7%D9%87%D8%AF%D8%A9-%D9%85%D8%B3%D9%84%D8%B3%D9%84-my-roommate-is-a-detective-%D9%85%D9%88%D8%B3%D9%85-1-%D8%AD%D9%84%D9%82%D8%A9-10/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 05 Dec 2023 16:53:54 GMT
content-type: application/javascript; charset=utf-8
last-modified: Sun, 22 Aug 2021 16:57:00 GMT
etag: W/"612281dc-17394"
cache-control: max-age=14400
cf-cache-status: HIT
age: 682
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=rMMfEOgR%2BL3VpRn0vgUlZmd0b3mDpRW2ScnI80MrE3cvPwJGtYpb8bBbB5BcNsq2RGRVv8E3k6%2ByiY2wK%2B3DL6lRGW73%2BkwiL0APsppcbwNjbizISXU2Z1CxIEuHIegONvkEsa%2F9CMLmYU%2BFvluE"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830dced7d99c56a2-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
0.0.0.0