| dolatiaschan.com/tag.min.js | 139.45.197.107 | 200 OK | 27 kB |
URL GET HTTP/2dolatiaschan.com/tag.min.js IP 139.45.197.107:443
Requested byhttps://homosports.shop/online/stream-49.php CertificateIssuerLet's Encrypt Subjectdolatiaschan.com FingerprintAC:49:3B:31:E2:4D:0E:4A:EF:17:42:2E:F4:13:21:8F:FB:E1:F2:C5 ValidityThu, 16 Jan 2025 05:31:09 GMT - Wed, 16 Apr 2025 05:31:08 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Hash92d615111d6bc45ae50303fcf145b19b 0c7695eb5badb5f92a37c1548760f943926dab74 79601b2822291d6565d3bf07f60dfa9f4479af1f47bf7fdb2687b4af050155bd
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /tag.min.js HTTP/1.1
Host: dolatiaschan.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://homosports.shop/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 19 Jan 2025 20:43:03 GMT
content-type: text/javascript; charset=utf-8
content-length: 27356
content-encoding: br
x-trace-id: 44414279378f2094ff0d856df3616646
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
accept-ranges: bytes
last-modified: Sat, 18 Jan 2025 10:51:45 GMT
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace, favicon
access-control-max-age: 86400
pragma: no-cache
expires: Tue, 11 Jan 1994 10:00:00 GMT
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
|
|
| ht.escinsuper.com/rG2eVOfCrjcQ/69521 | 23.109.170.189 | 200 OK | 20 B |
URL GET HTTP/1.1ht.escinsuper.com/rG2eVOfCrjcQ/69521 IP 23.109.170.189:443
Requested byhttps://homosports.shop/online/stream-49.php CertificateIssuerLet's Encrypt Subjectht.escinsuper.com FingerprintB5:F6:36:2C:6E:54:33:97:34:5D:9A:BB:0C:87:EA:35:2C:AD:8F:D9 ValidityFri, 17 Jan 2025 08:15:28 GMT - Thu, 17 Apr 2025 08:15:27 GMT
File typegzip compressed data, from Unix Hash7029066c27ac6f5ef18d660d5741979a 46c6643f07aa7f6bfe7118de926b86defc5087c4 59869db34853933b239f1e2219cf7d431da006aa919635478511fabbfc8849d2
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /rG2eVOfCrjcQ/69521 HTTP/1.1
Host: ht.escinsuper.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://homosports.shop/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 19 Jan 2025 20:43:04 GMT
Content-Type: application/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=20
Accept-ch: sec-ch-ua-platform-version,sec-ch-ua-model,sec-ch-ua-full-version,sec-ch-ua-full-version-list
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://homosports.shop
Access-Control-Allow-Headers: content-type, megageocheckolololo, x-forwarded-for, x-requested-with, cache-control, pragma, expires
Access-Control-Max-Age: 600
Access-Control-Allow-Methods: GET, POST, OPTIONS
Set-Cookie: GL_UI4=eJw9jUtug0AQRPljJ4akJQ7gIxgUjL3MJivfAQ0zDZ4Ypq1mjJ3bZxIp2dUrPVV5nhcUL%2BAvyRrCm6hhe1R9s5dYojyUVVW%2BHSrZ151o%2BlJVTVnvYK3n1opuRBvBap4E29YuEWwGNMhatpIUZvDqrL%2FmYuhuIog7FkZlEE%2FOGDNIO6b7jFyEEBkxIaQfmrGnhzPEJzEEx72L2rjo7yCguQjzJ4hP2twe%2BSbx8jzx4Pk6CtsTT61WDuOBhULw32ElhcWB%2BAtShfPF0hWARtX%2B%2B7%2Bf8fizBonCRUuHZM%2FI38wATrY%3D; expires=Mon, 20-Jan-2025 20:43:04 GMT; Max-Age=86400; path=/; secure; SameSite=None
GL_GI10=eJwViE0KgzAUBvMeJVAqhY96AE%2BQamsXbmuXRReewGopgZBIEvtz%2B%2BpiBmaEEJwmYD0hqQpV5ao8qeJSgl7gpgUPFrJx%2FtP%2FQB6cn8HeYtcG47LazTYuf8BmbZDG%2Fmr0N%2BucmaN2NoAXtnX%2FMM%2FjrbuDJkng6FaHMRWgtzz8AV7hHdE%3D; expires=Mon, 20-Jan-2025 20:43:04 GMT; Max-Age=86400; path=/; secure; SameSite=None
Content-Encoding: gzip
Vary: Accept-Encoding
Strict-Transport-Security: max-age=1
X-Content-Type-Options: nosniff
|
|
| youradexchange.com/script/suurl5.php?r=6201170&cbur=0.7189720598739898&cbiframe=0&cbWidth=1280&cbHeight=1024&cbtitle=&cbpage=https%3A%2F%2Fhomosports.shop%2Fonline%2Fstream-49.php&cbref=&cbdescription=&cbkeywords=&cbcdn=qsvbi.space&ufp=Linux%20x86_64%2FMozilla%2FNetscape%2Ftrue%2Ffalse%2F1280x10240en-USunknown4824%20bits&ts=1737319383775&srs=a881eb4da3f4cb439d5895c4fe46a33c&atv=57.0&abtg=1&adbv=3-cdn-js | 104.21.91.188 | 200 OK | 7.0 kB |
URL GET HTTP/2youradexchange.com/script/suurl5.php?r=6201170&cbur=0.7189720598739898&cbiframe=0&cbWidth=1280&cbHeight=1024&cbtitle=&cbpage=https%3A%2F%2Fhomosports.shop%2Fonline%2Fstream-49.php&cbref=&cbdescription=&cbkeywords=&cbcdn=qsvbi.space&ufp=Linux%20x86_64%2FMozilla%2FNetscape%2Ftrue%2Ffalse%2F1280x10240en-USunknown4824%20bits&ts=1737319383775&srs=a881eb4da3f4cb439d5895c4fe46a33c&atv=57.0&abtg=1&adbv=3-cdn-js IP 104.21.91.188:443
Requested byhttps://homosports.shop/online/stream-49.php CertificateIssuerGoogle Trust Services Subjectyouradexchange.com Fingerprint8B:14:37:06:AD:3B:34:24:D2:1C:2E:8F:85:18:45:17:CE:7A:8F:77 ValidityFri, 06 Dec 2024 14:16:45 GMT - Thu, 06 Mar 2025 14:16:44 GMT
File typegzip compressed data, max compression, from Unix Hashb22814bcf721b7b08d26990e1d65edaa bc9c00094fe69d369fdf2fda09fb4b8d85abfb76 43322d615e6e4fc06c2a2baef7a68eebceda33b3a7b6eb61ab58776dc5c41a64
GET /script/suurl5.php?r=6201170&cbur=0.7189720598739898&cbiframe=0&cbWidth=1280&cbHeight=1024&cbtitle=&cbpage=https%3A%2F%2Fhomosports.shop%2Fonline%2Fstream-49.php&cbref=&cbdescription=&cbkeywords=&cbcdn=qsvbi.space&ufp=Linux%20x86_64%2FMozilla%2FNetscape%2Ftrue%2Ffalse%2F1280x10240en-USunknown4824%20bits&ts=1737319383775&srs=a881eb4da3f4cb439d5895c4fe46a33c&atv=57.0&abtg=1&adbv=3-cdn-js HTTP/1.1
Host: youradexchange.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://homosports.shop/
Origin: https://homosports.shop
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 19 Jan 2025 20:43:04 GMT
content-type: application/json; charset=utf-8
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: GET, POST, OPTIONS
content-encoding: gzip
via: 1.1 google
cf-cache-status: DYNAMIC
vary: accept-encoding
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4p8Vwb16aH1%2Bed%2Fu9lHnHawPvwP5ghM%2BRHSG0rG6oa9YhZj%2F9b%2FRsoIVuEO7QQoZw0U%2FGXVZ0qYqBQoqyDTtn9Rf0URumSaal%2BL35x3SBxbjDLsSDXuPqlOY351HXt3YnpXtDiw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 9049a7a4fb22b500-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=1270&min_rtt=598&rtt_var=1340&sent=7&recv=10&lost=0&retrans=0&sent_bytes=3221&recv_bytes=1356&delivery_rate=6464285&cwnd=254&unsent_bytes=0&cid=0aed092f5104b431&ts=213&x=0"
X-Firefox-Spdy: h2
|
|
| cdn.jsdelivr.net/npm/clappr@latest/dist/clappr.min.js | 104.18.186.31 | 200 OK | 145 kB |
URL GET HTTP/2cdn.jsdelivr.net/npm/clappr@latest/dist/clappr.min.js IP 104.18.186.31:443
Requested byhttps://cookiewebplay.xyz/premiumtv/bigsportz.php?id=49 CertificateIssuerSectigo Limited Subject*.jsdelivr.net Fingerprint74:7A:63:DF:06:27:1E:52:8C:E8:0D:AD:1F:89:98:B5:EB:2D:49:EE ValiditySat, 04 May 2024 00:00:00 GMT - Sun, 04 May 2025 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Size145 kB (145133 bytes) Hashf55c6c796275a41ce7d97bd160e648ff 936285f9c8c85a749a1ef8cfc4d5e84b7ea2bc89 db7ce4b1edd2c3701c3f2585f7cbd70857173195489a99703ab39de16fa45b6c
GET /npm/clappr@latest/dist/clappr.min.js HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cookiewebplay.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 19 Jan 2025 20:43:04 GMT
content-type: application/javascript; charset=utf-8
content-length: 145133
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=604800, s-maxage=43200
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-jsd-version: 0.3.13
x-jsd-version-type: version
etag: W/"80319-k2KF+cjIWnSaHvjPxNXoS36ivIk"
content-encoding: br
x-served-by: cache-fra-eddf8230067-FRA, cache-lga21958-LGA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
cf-cache-status: HIT
age: 12005
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=w95at6MTsDJdCRZqR6rHs5IWBWqGxN2WypV3glKOSxGWiwYJ4bhpm1MUlxblXQrH9n%2Bhj30yePs%2BD94QZ%2BMtgMgSecQVWKcunEtmsZdWbDZ7NSP0u6fnSAb5v3LSpxxjsfs%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 9049a7a71e8456cc-OSL
X-Firefox-Spdy: h2
|
|
| code.jquery.com/jquery-3.6.0.min.js | 151.101.2.137 | 200 OK | 31 kB |
URL GET HTTP/2code.jquery.com/jquery-3.6.0.min.js IP 151.101.2.137:443
Requested byhttps://cookiewebplay.xyz/premiumtv/bigsportz.php?id=49 CertificateIssuerSectigo Limited Subject*.jquery.com FingerprintCD:B5:6E:05:85:0C:5A:AE:47:12:80:2A:5B:C6:E5:8F:11:72:E2:B5 ValidityTue, 25 Jun 2024 00:00:00 GMT - Wed, 25 Jun 2025 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (65447) Hash8fb8fee4fcc3cc86ff6c724154c49c42 b82d238d4e31fdf618bae8ac11a6c812c03dd0d4 ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e
GET /jquery-3.6.0.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cookiewebplay.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Fri, 18 Oct 1991 12:00:00 GMT
etag: W/"28feccc0-15d9d"
cache-control: public, max-age=31536000, stale-while-revalidate=604800
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Sun, 19 Jan 2025 20:43:04 GMT
age: 2804723
x-served-by: cache-lga21931-LGA, cache-hel1410029-HEL
x-cache: HIT, HIT
x-cache-hits: 71, 1299419
x-timer: S1737319384.232429,VS0,VE0
vary: Accept-Encoding
content-length: 30875
X-Firefox-Spdy: h2
|
|
| upload.wikimedia.org/wikipedia/commons/2/21/Speaker_Icon.svg | 185.15.59.240 | 200 OK | 328 B |
URL GET HTTP/2upload.wikimedia.org/wikipedia/commons/2/21/Speaker_Icon.svg IP 185.15.59.240:443
Requested byhttps://cookiewebplay.xyz/premiumtv/bigsportz.php?id=49 CertificateIssuerDigiCert Inc Subject*.wikipedia.org Fingerprint0B:3A:AB:D4:5E:55:A4:08:2B:F7:C1:DA:63:37:75:F1:EB:04:6E:A5 ValidityThu, 26 Sep 2024 00:00:00 GMT - Fri, 17 Oct 2025 23:59:59 GMT
File typeSVG Scalable Vector Graphics image Hash1e965f9ca6bac55c4bfece8dabe6fa47 ea28e0f6d1a42bd7f2ab416bcf2a9fd0dde55fab 70e589ae4b79586ddd4eadd1ac8b501d64ab0433c2038c92e945fbb6195ad7a9
GET /wikipedia/commons/2/21/Speaker_Icon.svg HTTP/1.1
Host: upload.wikimedia.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cookiewebplay.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 19 Jan 2025 13:05:00 GMT
server: ATS/9.2.6
etag: W/1e965f9ca6bac55c4bfece8dabe6fa47
content-type: image/svg+xml
x-object-meta-sha1base36: rcosig5pk1fefnugtbiewl19zhtt86j
last-modified: Wed, 28 Aug 2019 18:11:18 GMT
content-encoding: gzip
vary: Accept-Encoding
age: 27483
x-cache: cp3078 hit, cp3078 hit/26887
x-cache-status: hit-front
server-timing: cache;desc="hit-front", host;desc="cp3078"
strict-transport-security: max-age=106384710; includeSubDomains; preload
report-to: { "group": "wm_nel", "max_age": 604800, "endpoints": [{ "url": "https://intake-logging.wikimedia.org/v1/events?stream=w3c.reportingapi.network_error&schema_uri=/w3c/reportingapi/network_error/1.0.0" }] }
nel: { "report_to": "wm_nel", "max_age": 604800, "failure_fraction": 0.05, "success_fraction": 0.0}
x-client-ip: 91.90.42.154
x-content-type-options: nosniff
access-control-allow-origin: *
access-control-expose-headers: Age, Date, Content-Length, Content-Range, X-Content-Duration, X-Cache
timing-allow-origin: *
accept-ranges: bytes
content-length: 328
X-Firefox-Spdy: h2
|
|
| homosports.shop/online/stream-49.php | 104.21.74.169 | 200 OK | 0 B |
URL HEAD HTTP/3homosports.shop/online/stream-49.php IP 104.21.74.169:443
Requested byhttps://homosports.shop/online/stream-49.php CertificateIssuerGoogle Trust Services Subjecthomosports.shop FingerprintAB:C8:18:1E:4D:DA:CE:FD:A0:F8:FA:F6:2D:31:BA:97:11:CB:48:28 ValidityTue, 10 Dec 2024 05:13:39 GMT - Mon, 10 Mar 2025 05:13:38 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
HEAD /online/stream-49.php HTTP/1.1
Host: homosports.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://homosports.shop/online/stream-49.php
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 19 Jan 2025 20:43:04 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
cf-cache-status: DYNAMIC
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=m7QWpivoOe7w5cUqJJPUq%2FraywnBSgwfAgvlJtb%2BV7dINPm%2B4j1sIdL2TFe4jbrhVoVVTGjcegDLmOPuSsBL7%2FyVii3WIyawVOhrcuBRtMN1HcxitCcfdx5fvFs%2FHQeQ6Dc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 9049a7a52c7856cc-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=5161&min_rtt=5068&rtt_var=2086&sent=14&recv=11&lost=0&retrans=0&sent_bytes=4185&recv_bytes=1568&delivery_rate=101626&cwnd=12000&unsent_bytes=0&cid=6e227fd24e6101b0&ts=861&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| pubtrky.com/ut/hb.php?cb=0.33107183068965806&v=1 | 172.67.188.110 | 204 No Content | 0 B |
URL POST HTTP/2pubtrky.com/ut/hb.php?cb=0.33107183068965806&v=1 IP 172.67.188.110:443
Requested byhttps://homosports.shop/online/stream-49.php CertificateIssuerGoogle Trust Services Subjectpubtrky.com Fingerprint10:FA:C7:47:C5:CD:66:A3:F0:EF:89:DB:77:36:C7:92:65:AB:DB:13 ValidityTue, 07 Jan 2025 09:52:08 GMT - Mon, 07 Apr 2025 10:50:44 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /ut/hb.php?cb=0.33107183068965806&v=1 HTTP/1.1
Host: pubtrky.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain; charset=utf-8
Content-Length: 827
Origin: https://homosports.shop
DNT: 1
Connection: keep-alive
Referer: https://homosports.shop/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
date: Sun, 19 Jan 2025 20:43:04 GMT
access-control-allow-origin: *
via: 1.1 google
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=l5um9o7RwGoSoUSpE0jYnp5bGbYlE73VZXCNWHgwq9DTBOiYPXjiJ7ZNj8BUN%2FC%2BFalNfuVUXfkdxQaYDxerMUZQY3ZIc63U9CXjTwrU6uKceedNl9uSnpmu8mKi%2Fw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 9049a7a6dba6b512-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=535&min_rtt=472&rtt_var=126&sent=7&recv=11&lost=0&retrans=0&sent_bytes=3271&recv_bytes=2084&delivery_rate=6884310&cwnd=254&unsent_bytes=0&cid=1f0d84b847e750d7&ts=159&x=0"
X-Firefox-Spdy: h2
|
|
| cookiewebplay.xyz/premiumtv/bigsportz.php?id=49 | 172.67.214.213 | 200 OK | 0 B |
URL GET HTTP/2cookiewebplay.xyz/premiumtv/bigsportz.php?id=49 IP 172.67.214.213:443
Requested byhttps://homosports.shop/online/stream-49.php CertificateIssuerGoogle Trust Services Subjectcookiewebplay.xyz Fingerprint6E:30:9D:30:C3:10:A0:9B:70:88:E7:87:05:C2:7F:9A:69:3B:32:AE ValidityWed, 04 Dec 2024 11:06:10 GMT - Tue, 04 Mar 2025 11:06:09 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
HEAD /premiumtv/bigsportz.php?id=49 HTTP/1.1
Host: cookiewebplay.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cookiewebplay.xyz/premiumtv/bigsportz.php?id=49
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 19 Jan 2025 20:43:04 GMT
content-type: text/html; charset=UTF-8
cache-control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
videocdn: HIT
videocdnx: NO
node: PHP
x-cache: HIT
cf-cache-status: DYNAMIC
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dndQG4wPdjjxHC8JRrzQQ%2FBF0E5UH37J7mAi6znPSg%2F62IgHFv%2BuEGJDN1F5byKad%2BBFXZFhc0LDPcTKTb%2BIhTMRe8BDGZ%2BvOBf3NdRJ8lKjW4Ydyx8FyA2ADf1No28K%2BprhWw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 9049a7a7be2856c0-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3011&min_rtt=2071&rtt_var=1009&sent=39&recv=11&lost=0&retrans=0&sent_bytes=34156&recv_bytes=1563&delivery_rate=8673883&cwnd=24000&unsent_bytes=0&cid=672bc29c8bf0a90d&ts=324&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| gletchauka.net/tag.min.js | 139.45.197.118 | 200 OK | 27 kB |
URL GET HTTP/2gletchauka.net/tag.min.js IP 139.45.197.118:443
Requested byhttps://cookiewebplay.xyz/premiumtv/bigsportz.php?id=49 CertificateIssuerLet's Encrypt Subjectgletchauka.net Fingerprint27:47:92:C5:1E:54:E6:2F:05:64:79:37:F3:DC:37:6C:1A:EB:B7:F6 ValiditySat, 23 Nov 2024 07:06:13 GMT - Fri, 21 Feb 2025 07:06:12 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Hash92d615111d6bc45ae50303fcf145b19b 0c7695eb5badb5f92a37c1548760f943926dab74 79601b2822291d6565d3bf07f60dfa9f4479af1f47bf7fdb2687b4af050155bd
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /tag.min.js HTTP/1.1
Host: gletchauka.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cookiewebplay.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 19 Jan 2025 20:43:04 GMT
content-type: text/javascript; charset=utf-8
content-length: 27356
content-encoding: br
x-trace-id: 1d274bd026d7522574362986acf1feef
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
accept-ranges: bytes
last-modified: Sat, 18 Jan 2025 10:51:45 GMT
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace, favicon
access-control-max-age: 86400
pragma: no-cache
expires: Tue, 11 Jan 1994 10:00:00 GMT
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
|
|
| doanaudabu.net/5/6712285/?oo=1&js_build=iclick-v1.1044.0&dmn=dolatiaschan.com&tt=2&ix=0 | 139.45.197.118 | 200 OK | 7.1 kB |
URL GET HTTP/2doanaudabu.net/5/6712285/?oo=1&js_build=iclick-v1.1044.0&dmn=dolatiaschan.com&tt=2&ix=0 IP 139.45.197.118:443
Requested byhttps://homosports.shop/online/stream-49.php CertificateIssuerLet's Encrypt Subjectdoanaudabu.net Fingerprint1B:0F:F1:E3:1C:B1:36:D1:8B:FB:04:EC:8F:DA:FD:51:EE:E1:4B:E3 ValidityThu, 14 Nov 2024 02:46:14 GMT - Wed, 12 Feb 2025 02:46:13 GMT
File typegzip compressed data, max speed, from Unix Hashb34c886231c2321703647ccc09bba857 f4e6970a5a3ef0d494664378f8b6e22410def302 7071e2aa8be2381a0ddbefe5c1571c8c140b7823f0a3f1e2105a9ac0c9d40d56
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /5/6712285/?oo=1&js_build=iclick-v1.1044.0&dmn=dolatiaschan.com&tt=2&ix=0 HTTP/1.1
Host: doanaudabu.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://homosports.shop
DNT: 1
Connection: keep-alive
Referer: https://homosports.shop/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 19 Jan 2025 20:43:04 GMT
content-type: application/json
x-trace-id: 59620c1d54b3d084d0a73e2f9599d329
link: <https://my.rtmark.net>; rel="preconnect dns-prefetch"
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
access-control-allow-origin: https://homosports.shop
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace, favicon
access-control-max-age: 86400
timing-allow-origin: *
set-cookie: OAID=008156d3368f43d0e66b65cdd11d1e5d; expires=Mon, 19 Jan 2026 20:43:04 GMT; path=/; secure; SameSite=None
oaidts=1737319384; expires=Mon, 19 Jan 2026 20:43:04 GMT; path=/; secure; SameSite=None
syncedCookie=; expires=Tue, 10 Nov 2009 23:00:00 GMT
pragma: no-cache, no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT, Mon, 26 Jul 1997 05:00:00 GMT
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| homosports.shop/favicon.ico | 104.21.74.169 | 404 Not Found | 4.8 kB |
URL GET HTTP/3homosports.shop/favicon.ico IP 104.21.74.169:443
Requested byhttps://homosports.shop/online/stream-49.php CertificateIssuerGoogle Trust Services Subjecthomosports.shop FingerprintAB:C8:18:1E:4D:DA:CE:FD:A0:F8:FA:F6:2D:31:BA:97:11:CB:48:28 ValidityTue, 10 Dec 2024 05:13:39 GMT - Mon, 10 Mar 2025 05:13:38 GMT
File typeHTML document, ASCII text, with CRLF line terminators Hash8eec510e57f5f732fd2cce73df7b73ef 3c0af39ecb3753c5fee3b53d063c7286019eac3b 55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0
GET /favicon.ico HTTP/1.1
Host: homosports.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://homosports.shop/online/stream-49.php
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 404 Not Found
date: Sun, 19 Jan 2025 20:43:04 GMT
content-type: text/html
cache-control: max-age=14400
cf-cache-status: EXPIRED
priority: u=6,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=p%2BOthlkVKLvqlbaNTaOggylihDxiZeMsDCmrulNvsXCINQmGJrp1%2FJPRvffHHi%2BrDhHmC%2FgAMVxZ0EuoF5EO%2FPdHzAUvxvRAssCplwplp5eljYiibMsd%2BURXK%2F%2BspdPzfqU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 9049a7a78ef256cc-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=7208&min_rtt=5068&rtt_var=5657&sent=15&recv=12&lost=0&retrans=0&sent_bytes=4879&recv_bytes=1612&delivery_rate=813&cwnd=12000&unsent_bytes=0&cid=6e227fd24e6101b0&ts=1049&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| qsvbi.space/script/ut.js?cb=1737319383918 | 104.21.22.93 | 200 OK | 56 kB |
URL GET HTTP/2qsvbi.space/script/ut.js?cb=1737319383918 IP 104.21.22.93:443
Requested byhttps://homosports.shop/online/stream-49.php CertificateIssuerGoogle Trust Services Subjectqsvbi.space Fingerprint45:68:48:73:0D:9A:0F:0F:A8:87:08:61:E7:64:CF:1F:20:C5:39:DE ValidityMon, 23 Dec 2024 03:45:46 GMT - Sun, 23 Mar 2025 04:42:50 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (65493), with no line terminators Hash4afa2ac99f97331dc98263d49022a958 60bb7c7c45ff14e8df86ef9e0b9a7a55a7d2baca a4beaec54247a9a3cb97821ecdb68d39cacdcdcc62ae872c13c2cca2d3d88e32
GET /script/ut.js?cb=1737319383918 HTTP/1.1
Host: qsvbi.space
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://homosports.shop/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 19 Jan 2025 20:43:03 GMT
content-type: text/javascript
x-goog-generation: 1733127707295818
x-goog-metageneration: 2
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 66473
x-goog-hash: crc32c=VBET1w==, md5=SvoqyZ+XMx3JgmPUkCKpWA==
x-goog-storage-class: MULTI_REGIONAL
access-control-allow-origin: *
x-guploader-uploadid: AFIdbgQ3aPFuycTDXKOx5KZSJp5_BQ9rZlV3a4cQw7tF4tqzmHL19_IbpTWWHoJHpigKOj4L
access-control-expose-headers: Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace
expires: Sun, 19 Jan 2025 20:21:21 GMT
cache-control: public, max-age=14400
age: 2410
last-modified: Mon, 02 Dec 2024 08:21:47 GMT
etag: W/"4afa2ac99f97331dc98263d49022a958"
alt-svc: h3=":443"; ma=86400
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gYYyfhbe%2FxEqCeHmN42apSs1vsuGWHUss7L17JT3r9XTeGkhgc6F2hEo8umU4%2FL8LQwDDq%2B%2FpQmroikhiSRPIjIjOmipqe7ecVRGpVHme8ZMyj84cxYOFBAHh2tSpA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 9049a7a5aa1db511-OSL
content-encoding: br
server-timing: cfL4;desc="?proto=TCP&rtt=541&min_rtt=518&rtt_var=116&sent=6&recv=10&lost=0&retrans=0&sent_bytes=3273&recv_bytes=1192&delivery_rate=7451114&cwnd=253&unsent_bytes=0&cid=a7fbb3610ff7b74d&ts=28&x=0"
X-Firefox-Spdy: h2
|
|
| doanaudabu.net/?rb=4hi1C_wfQ9VlA0SbtVOBN0q1xH3STZsIwVXxDbTDjthH2R3XAk9_n70SAJuWPAz4QA159TtoO6PF9mZDY6k-6Jg1nNZyvfGnk55Jj4uqbQSvqs_3XuTVYwhAnEeGd04rnRK-WLZoa1ml_tlw4RtQTOstV2dRbkmrHoY8vWkCbzv-XXjloAZJBWW2ZSxWvP1RUENwFhTJBnt1vGsFgCLIkQNQO1ctpZbu1MWyOYe8TsvK3nAiTQSBG5ZzNWSkNo5P4AFJXfWuWNweUeeAlfpmYm_p3pU%3D&request_ab2=0&zoneid=6712285&js_build=iclick-v1.1044.0&jsp=1&fs=0&cf=0&sw=1280&sh=1024&wih=1024&wiw=1280&ww=1280&wh=1024&sah=1024&wx=0&wy=0&cw=1280&wfc=4&pl=https%3A%2F%2Fhomosports.shop%2Fonline%2Fstream-49.php&drf=&np=1&pt=0&nb=1&ng=0&ix=0&nw=1&tb=false&btz=UTC&bto=0&tt=3&wgl=&js_build=iclick-v1.1044.0&navlng=en-US&vsbl=true&pnt=0&pnrc=0&bs=392ba52d-528b-440c-9e5e-2e58a27d5f1c&wasm=1&userId=008156d3368f43d0e66b65cdd11d1e5d&m=link | 139.45.197.118 | 200 OK | 2.9 kB |
URL GET HTTP/2doanaudabu.net/?rb=4hi1C_wfQ9VlA0SbtVOBN0q1xH3STZsIwVXxDbTDjthH2R3XAk9_n70SAJuWPAz4QA159TtoO6PF9mZDY6k-6Jg1nNZyvfGnk55Jj4uqbQSvqs_3XuTVYwhAnEeGd04rnRK-WLZoa1ml_tlw4RtQTOstV2dRbkmrHoY8vWkCbzv-XXjloAZJBWW2ZSxWvP1RUENwFhTJBnt1vGsFgCLIkQNQO1ctpZbu1MWyOYe8TsvK3nAiTQSBG5ZzNWSkNo5P4AFJXfWuWNweUeeAlfpmYm_p3pU%3D&request_ab2=0&zoneid=6712285&js_build=iclick-v1.1044.0&jsp=1&fs=0&cf=0&sw=1280&sh=1024&wih=1024&wiw=1280&ww=1280&wh=1024&sah=1024&wx=0&wy=0&cw=1280&wfc=4&pl=https%3A%2F%2Fhomosports.shop%2Fonline%2Fstream-49.php&drf=&np=1&pt=0&nb=1&ng=0&ix=0&nw=1&tb=false&btz=UTC&bto=0&tt=3&wgl=&js_build=iclick-v1.1044.0&navlng=en-US&vsbl=true&pnt=0&pnrc=0&bs=392ba52d-528b-440c-9e5e-2e58a27d5f1c&wasm=1&userId=008156d3368f43d0e66b65cdd11d1e5d&m=link IP 139.45.197.118:443
Requested byhttps://homosports.shop/online/stream-49.php CertificateIssuerLet's Encrypt Subjectdoanaudabu.net Fingerprint1B:0F:F1:E3:1C:B1:36:D1:8B:FB:04:EC:8F:DA:FD:51:EE:E1:4B:E3 ValidityThu, 14 Nov 2024 02:46:14 GMT - Wed, 12 Feb 2025 02:46:13 GMT
File typetroff or preprocessor input, ASCII text, with very long lines (2926), with no line terminators Hasha8bf97846f5b9a16e33320fd384097c8 7d8f8afceeb105dbff2291e8a8ed173347aa7da6 c162c97a1d4925fc9ef26cb8c38ee5c70e9293447d0409d0b2054f180ce7c7e1
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /?rb=4hi1C_wfQ9VlA0SbtVOBN0q1xH3STZsIwVXxDbTDjthH2R3XAk9_n70SAJuWPAz4QA159TtoO6PF9mZDY6k-6Jg1nNZyvfGnk55Jj4uqbQSvqs_3XuTVYwhAnEeGd04rnRK-WLZoa1ml_tlw4RtQTOstV2dRbkmrHoY8vWkCbzv-XXjloAZJBWW2ZSxWvP1RUENwFhTJBnt1vGsFgCLIkQNQO1ctpZbu1MWyOYe8TsvK3nAiTQSBG5ZzNWSkNo5P4AFJXfWuWNweUeeAlfpmYm_p3pU%3D&request_ab2=0&zoneid=6712285&js_build=iclick-v1.1044.0&jsp=1&fs=0&cf=0&sw=1280&sh=1024&wih=1024&wiw=1280&ww=1280&wh=1024&sah=1024&wx=0&wy=0&cw=1280&wfc=4&pl=https%3A%2F%2Fhomosports.shop%2Fonline%2Fstream-49.php&drf=&np=1&pt=0&nb=1&ng=0&ix=0&nw=1&tb=false&btz=UTC&bto=0&tt=3&wgl=&js_build=iclick-v1.1044.0&navlng=en-US&vsbl=true&pnt=0&pnrc=0&bs=392ba52d-528b-440c-9e5e-2e58a27d5f1c&wasm=1&userId=008156d3368f43d0e66b65cdd11d1e5d&m=link HTTP/1.1
Host: doanaudabu.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://homosports.shop/
Origin: https://homosports.shop
DNT: 1
Connection: keep-alive
Cookie: OAID=008156d3368f43d0e66b65cdd11d1e5d; oaidts=1737319384
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 19 Jan 2025 20:43:04 GMT
content-type: application/json
x-trace-id: 667a99f0bc6c81efb31eb4fc15a515fa
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
access-control-allow-origin: https://homosports.shop
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace, favicon
access-control-max-age: 86400
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
set-cookie: OAID=008156d3368f43d0e66b65cdd11d1e5d; expires=Mon, 19 Jan 2026 20:43:04 GMT; path=/; secure; SameSite=None
oaidts=1737319384; expires=Mon, 19 Jan 2026 20:43:04 GMT; path=/; secure; SameSite=None
syncedCookie=true; expires=Sun, 26 Jan 2025 20:43:04 GMT; path=/; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| cookiewebplay.xyz/blast.js | 172.67.214.213 | 200 OK | 78 kB |
URL GET HTTP/3cookiewebplay.xyz/blast.js IP 172.67.214.213:443
Requested byhttps://cookiewebplay.xyz/premiumtv/bigsportz.php?id=49 CertificateIssuerGoogle Trust Services Subjectcookiewebplay.xyz Fingerprint6E:30:9D:30:C3:10:A0:9B:70:88:E7:87:05:C2:7F:9A:69:3B:32:AE ValidityWed, 04 Dec 2024 11:06:10 GMT - Tue, 04 Mar 2025 11:06:09 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Hash091faec928970e76d37a3601c19fcf8a 6441e8eebe90eb8d4a40e7c25440ff99caba3520 eb06375118b1eb73f43b8f1851472008f84999a1b27359c075bf5da6feef9a12
GET /blast.js HTTP/1.1
Host: cookiewebplay.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cookiewebplay.xyz/premiumtv/bigsportz.php?id=49
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 19 Jan 2025 20:43:04 GMT
content-type: application/javascript
last-modified: Thu, 17 Oct 2024 06:47:40 GMT
etag: W/"6710b30c-13040"
access-control-allow-origin: *
cache-control: max-age=14400
cf-cache-status: HIT
age: 168
priority: u=2,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=26sqCO627FCxAmUyUqBlW1Gl7u%2Fxk94CG0fCqZVUgkzLCMT7oYph50cYkTQ34MIDhdLgQa9t7BN2NwaSt1adcZa7AsQ9KaQ%2FGIBGbUbDeuhBTe39a4DPLrPZzlYC8WE0VObrDw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 9049a7a6ec8756c0-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3133&min_rtt=3066&rtt_var=1282&sent=13&recv=8&lost=0&retrans=0&sent_bytes=4164&recv_bytes=1200&delivery_rate=164438&cwnd=12000&unsent_bytes=0&cid=672bc29c8bf0a90d&ts=160&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| my.rtmark.net/gid.js?userId=008156d3368f43d0e66b65cdd11d1e5d | 104.18.18.184 | 200 OK | 65 B |
URL GET HTTP/2my.rtmark.net/gid.js?userId=008156d3368f43d0e66b65cdd11d1e5d IP 104.18.18.184:443
Requested byhttps://homosports.shop/online/stream-49.php CertificateIssuerGoogle Trust Services Subjectmy.rtmark.net Fingerprint56:7F:53:10:57:2F:C3:F4:06:8B:DB:2F:C1:F7:6A:1D:68:59:14:3F ValiditySat, 04 Jan 2025 10:02:11 GMT - Fri, 04 Apr 2025 11:00:33 GMT
File typetroff or preprocessor input, ASCII text, with no line terminators Hash1dc5ba2db210731827d7cd0007b9c0ba 5596a8d20eeeebd1ac4a8790931fbe0ce7d66f82 b701d691695c301d340eade9e0246f7d1ef553c52cdb11323b8e99d698b6eaef
GET /gid.js?userId=008156d3368f43d0e66b65cdd11d1e5d HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://homosports.shop
DNT: 1
Connection: keep-alive
Referer: https://homosports.shop/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 19 Jan 2025 20:43:04 GMT
content-type: application/json; charset=utf-8
access-control-allow-origin: https://homosports.shop
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
timing-allow-origin: *, *
set-cookie: ID=008156d3368f43d0e66b65cdd11d1e5d; expires=Mon, 19 Jan 2026 20:43:04 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 9049a7a95aa1b50f-OSL
content-encoding: gzip
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| cdn.jsdelivr.net/npm/disable-devtool@latest/disable-devtool.min.js | 104.18.186.31 | 200 OK | 17 kB |
URL GET HTTP/2cdn.jsdelivr.net/npm/disable-devtool@latest/disable-devtool.min.js IP 104.18.186.31:443
Requested byhttps://cookiewebplay.xyz/premiumtv/bigsportz.php?id=49 CertificateIssuerSectigo Limited Subject*.jsdelivr.net Fingerprint74:7A:63:DF:06:27:1E:52:8C:E8:0D:AD:1F:89:98:B5:EB:2D:49:EE ValiditySat, 04 May 2024 00:00:00 GMT - Sun, 04 May 2025 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /npm/disable-devtool@latest/disable-devtool.min.js HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cookiewebplay.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 19 Jan 2025 20:43:04 GMT
content-type: application/javascript; charset=utf-8
content-length: 6161
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=604800, s-maxage=43200
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-jsd-version: 0.3.8
x-jsd-version-type: version
etag: W/"4372-cTTqYs22VcKkI7FmI2XJm6ZFwr0"
content-encoding: br
x-served-by: cache-fra-etou8220123-FRA, cache-lga21961-LGA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
cf-cache-status: HIT
age: 29208
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=UiAdYtPPwt5oWVawmn1TayyMJ9sqWuXbRSBS7R1c8F40KyP7PxQyOkRIxGsggTzzjj2TwPmaiAYYQEYifhISHpP6sGKj%2BufhCuVcXu%2BTyZqQemWNEUE%2BrKc%2B%2FTwoIf0Q2PY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 9049a7a71e8156cc-OSL
X-Firefox-Spdy: h2
|
|