Report - phim18hi.net/the-loai/phim-18/trang-2.html

Report Overview

Submitted URL
phim18hi.net/the-loai/phim-18/trang-2.html
IP
104.21.65.244
ASN
#13335 CLOUDFLARENET
Submitted
2024-05-05 01:41:10
Access
public
Website Title
Tuyển Tập Phim 18+ | Phim 18+ HD Vietsub
Final URL
phim18hi.net/the-loai/phim-18/trang-2.html
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
2

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
qh.telpathpols.com	unknown	unknown	No data	No data	411 B	1.5 kB	23.109.170.241
khophim-poster.cuoiia.top	unknown	2021-10-21	2022-11-30	2023-10-04	9.5 kB	7.4 MB	188.114.97.1
region1.analytics.google.com	unknown	1997-09-15	2022-03-17	2024-05-04	815 B	443 B	216.239.34.36
www.google.no	25607	2001-02-26	2016-04-05	2024-05-03	575 B	578 B	172.217.21.163
i.imgur.com	5110	2009-01-09	2012-05-21	2024-05-03	832 B	33 kB	151.101.244.193
phim18hi.net	unknown	unknown	No data	No data	2.2 kB	633 kB	172.67.195.134
www.googletagmanager.com	75	2011-11-11	2013-05-22	2024-05-03	419 B	98 kB	142.250.74.72

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2024-05-05	medium	telpathpols.com	Sinkholed

ThreatFox

No alerts detected

JavaScript (15)

	URL	Size	First Seen	Last Seen
	phim18hi.net/the-loai/phim-18/trang-2.html	85 B	2024-05-05	2024-05-05
Pretty URL phim18hi.net/the-loai/phim-18/trang-2.html IP 172.67.195.134 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2024-05-05 03:41:17 Last Seen2024-05-05 03:41:17 Times Seen1 Hash d3375a11b54ee1265e59fcf06ec74e9c 3ee1fb8808c862cbcb2fb1f377cf0f5ad3a18cab 17bd5982dc9b4eeab9e1c21c1d773eb2780bc0e47383a1be23ee6abdf79cb6df Loading...

	phim18hi.net/the-loai/phim-18/trang-2.html	153 B	2023-11-17	2024-05-05
Pretty URL phim18hi.net/the-loai/phim-18/trang-2.html IP 172.67.195.134 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-11-17 04:26:26 Last Seen2024-05-05 03:41:17 Times Seen2 Hash 6d381e36d315f1bd1ae48a6cc7e72a09 84aed85a25cf5c23fa157699a7bd259c75d1f5ff 9e5a8e9661307c9f394800d583f8e0cbdc3cf452db0f7cc99b3c410a828dfb75 Loading...

	unknown	37 B	2023-04-11	2024-05-18
Pretty Introduced by Function Embedded in HTML false Observations First Seen2023-04-11 21:31:25 Last Seen2024-05-18 20:04:03 Times Seen237891 Hash 29d0c84b9d1d8da446a6062c6a840ad9 6d6b3a6065667c7c50d92f3889c85ed65a9ad784 3c3cbdb71d0d2c22f504f4d63d8a6ffe8d250cde7e58300619be35b6bbab26a1 Loading...

	phim18hi.net/the-loai/phim-18/trang-2.html	109 kB	2023-11-17	2024-05-05
Pretty URL phim18hi.net/the-loai/phim-18/trang-2.html IP 172.67.195.134 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-11-17 04:26:26 Last Seen2024-05-05 03:41:17 Times Seen2 Hash a7fd75a7413682ea2da7fa26c65eaee0 3c92c3431bebc61b887c996ae100a47907177118 3e649f610ba43e1f57fb9f26c5891d1b340f1c04f139d039f4ba94863eb5e655 Loading...

	phim18hi.net/the-loai/phim-18/trang-2.html	44 kB	2023-11-17	2024-05-05
Pretty URL phim18hi.net/the-loai/phim-18/trang-2.html IP 172.67.195.134 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-11-17 04:26:26 Last Seen2024-05-05 03:41:17 Times Seen2 Hash 253851d416d5ec653ba322a717dcfbdf 5f1b7e3a3bf459a4a69073de57b4fb977d9ab0d0 7cdbdf152e40df80d8330baf82efd478e846bbd0f6c70add05de3ee5603525e6 Loading...

	phim18hi.net/the-loai/phim-18/trang-2.html	448 B	2023-11-17	2024-05-05
Pretty URL phim18hi.net/the-loai/phim-18/trang-2.html IP 172.67.195.134 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-11-17 04:26:26 Last Seen2024-05-05 03:41:17 Times Seen2 Hash df46b781421bd16ef02c7211faa7224a 9cccb32635e5672fe7d7e9d5cb9dad65c39bd2f2 afe0e8d2baa72c9ddc0f72816d78e8fb359b7c53ffb20cbddc3d09a6e832a3d4 Loading...

	unknown	47 B	2023-04-11	2024-05-18
Pretty Introduced by Function Embedded in HTML false Observations First Seen2023-04-11 22:25:25 Last Seen2024-05-18 19:19:00 Times Seen4919 Hash 2512414f817df8312569d55032748f81 13467df6e962aa77bb36867ff1412e1ba9f8feb1 e193735f8d500f10e2cdc6a94f5a43fb0257c1e2f8afc10fa04f0e3761d258de Loading...

	unknown	79 B	2023-04-11	2024-05-18
Pretty Introduced by Function Embedded in HTML false Observations First Seen2023-04-11 21:38:58 Last Seen2024-05-18 20:04:03 Times Seen126553 Hash aa049e2749b8531cb8f233c2f64fc2b2 b611a5a62c1813ae5b4763378b3a4a565556530a e52e51d5897d7a179089ddcf8f5de7aeb3ef4f27b054b63e937cf308b685c9e2 Loading...

	phim18hi.net/the-loai/phim-18/trang-2.html	4.2 kB	2024-05-05	2024-05-05
Pretty URL phim18hi.net/the-loai/phim-18/trang-2.html IP 172.67.195.134 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2024-05-05 03:41:17 Last Seen2024-05-05 03:41:17 Times Seen1 Hash d3875057805db1b4090c34b219efdc05 bce89e4f153d86bd1cc33e6fd4b38e847f6109bb a302a7c376ce1bf1ddb355cb5a8ab1a49eefa0ac49ddec97d00602c362664ea9 Loading...

	phim18hi.net/the-loai/phim-18/trang-2.html	8.7 kB	2023-11-17	2024-05-05
Pretty URL phim18hi.net/the-loai/phim-18/trang-2.html IP 172.67.195.134 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-11-17 04:26:26 Last Seen2024-05-05 03:41:18 Times Seen2 Hash c815caa9372a850350d407389bcb1756 dcc391d515193645ad69bc0f87d85ff1bcd7486a 8b13d86508a157d904d82a807b8e542ab53d3bd708b49cab688a33a84d2b7bcb Loading...

	phim18hi.net/the-loai/phim-18/trang-2.html	15 kB	2023-11-17	2024-05-05
Pretty URL phim18hi.net/the-loai/phim-18/trang-2.html IP 172.67.195.134 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-11-17 04:26:26 Last Seen2024-05-05 03:41:18 Times Seen2 Hash 71024144032dcede7c08bc8b8fb0f052 2138b3d523c42e57db1cfd3cf4c9bdf2173c22f5 0da19f4993827582db9635ba7085db11a982f3a187203d8e471bb58c0dd4ade9 Loading...

	www.googletagmanager.com/gtag/js?id=G-C9P7YSLSGM	288 kB	2024-05-05	2024-05-05
Pretty URL www.googletagmanager.com/gtag/js?id=G-C9P7YSLSGM IP 142.250.74.72 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2024-05-05 03:41:18 Last Seen2024-05-05 03:41:18 Times Seen2 Hash 627225a50c493a17479f616675c25afa 9ddc5732d5a9403ad12b7ba93314f91f3fb15fd6 f9e1a3635549cf5696ec14788f9ea1c8f594736a541cb9a3154b23befe328048 Loading...

	phim18hi.net/the-loai/phim-18/trang-2.html	8.5 kB	2023-11-17	2024-05-05
Pretty URL phim18hi.net/the-loai/phim-18/trang-2.html IP 172.67.195.134 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-11-17 04:26:26 Last Seen2024-05-05 03:41:18 Times Seen2 Hash 23ea50d0bd662825d3bf800cd4a37323 a8fcc2fea182b98bf050f4500d09d5304af8f80c 30ba68388f7714258b0e0807d67e5b0bedbed2669e1f232188a374267f5bfda6 Loading...

	phim18hi.net/the-loai/phim-18/trang-2.html	15 B	2023-11-17	2024-05-05
Pretty URL phim18hi.net/the-loai/phim-18/trang-2.html IP 172.67.195.134 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-11-17 04:26:26 Last Seen2024-05-05 03:41:18 Times Seen2 Hash c605a9e23c339770724759819a319e28 b1c20727eeff226d28b60706a89447f9efd34ba1 995e6acafa089d4fcc71666940b7299144701e8d851b91fb33220b200a63d3bc Loading...

	qh.telpathpols.com/rgRW3fpgqA2W1h8/64597	0 B	2023-03-07	2024-05-18
Pretty URL qh.telpathpols.com/rgRW3fpgqA2W1h8/64597 IP 23.109.170.241 ASN #7979 SERVERS-COM Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:01:59 Last Seen2024-05-18 20:05:42 Times Seen37795201 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Loading...

HTTP Transactions (30)

URL IP Response Size

phim18hi.net/vtseo/images/img.png?v=6

172.67.195.134

200 OK

31 kB

URL GET HTTP/3
phim18hi.net/vtseo/images/img.png?v=6
IP
172.67.195.134:443
ASN
#13335 CLOUDFLARENET

Requested by
https://phim18hi.net/the-loai/phim-18/trang-2.html
Certificate
IssuerGoogle Trust Services LLC
Subjectphim18hi.net
Fingerprint38:FB:B9:CC:F0:6A:54:C8:DC:A9:7F:37:CB:40:77:A9:22:9B:01:02
ValiditySun, 28 Apr 2024 05:02:41 GMT - Sat, 27 Jul 2024 05:02:40 GMT

File type
PNG image data, 350 x 292, 8-bit/color RGBA, non-interlaced
Size
31 kB (30780 bytes)
Hash
f63fae6c8051d1dd8610e1095fbcc86b
78cd3b0885f36fb7f76c50f6d3c6eac0b5112e21
053bd36bfba0177dbc7a1d33e96cad9a096fee9699bb57b94080c3ff54b04111

HTTP Headers

GET /vtseo/images/img.png?v=6 HTTP/1.1
Host: phim18hi.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://phim18hi.net/the-loai/phim-18/trang-2.html
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=6nh9nc76i6ns0r340sgk6gui31
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Sun, 05 May 2024 01:40:42 GMT
content-type: image/png
content-length: 30780
last-modified: Mon, 05 Feb 2024 13:28:59 GMT
etag: "65c0e29b-783c"
x-content-type-options: "nosniff" always
x-xss-protection: "1; mode=block" always
strict-transport-security: "max-age=31536000; includeSubDomains; preload" always
referrer-policy: no-referrer-when-downgrade
expires: Wed, 30 Apr 2025 21:55:48 GMT
cache-control: public, max-age=31536000, must-revalidate, proxy-revalidate, immutable, stale-while-revalidate=86400, stale-if-error=604800
cf-cache-status: HIT
age: 359094
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=VFRlhmoBjb%2B6kS1TPObFqpKhWQuqibiiFB0oTwME02T5lvHtSQRlfnFeLGbq7u0kPwLn6IyNuGBrju7981U99e847zTrQJ4OuVW8XqWJt0aWjgKEtdevbfJJ%2F%2ByZjBQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87ed06285a5f5684-OSL
alt-svc: h3=":443"; ma=86400

phim18hi.net/vtseo/fonts/fontawesome-webfont.woff?v=4.3.0

172.67.195.134

200 OK

66 kB

URL GET HTTP/3
phim18hi.net/vtseo/fonts/fontawesome-webfont.woff?v=4.3.0
IP
172.67.195.134:443
ASN
#13335 CLOUDFLARENET

Requested by
https://phim18hi.net/the-loai/phim-18/trang-2.html
Certificate
IssuerGoogle Trust Services LLC
Subjectphim18hi.net
Fingerprint38:FB:B9:CC:F0:6A:54:C8:DC:A9:7F:37:CB:40:77:A9:22:9B:01:02
ValiditySun, 28 Apr 2024 05:02:41 GMT - Sat, 27 Jul 2024 05:02:40 GMT

File type
Web Open Font Format, TrueType, length 65452, version 1.0
Size
66 kB (65452 bytes)
Hash
d95d6f5d5ab7cfefd09651800b69bd54
7d65e0227d0d7cdc1718119cd2a7dce0638f151c
199411f659f41aaccb959bacb1b0de30e54f244352a48c6f9894e65ae0f8a9a1

HTTP Headers

GET /vtseo/fonts/fontawesome-webfont.woff?v=4.3.0 HTTP/1.1
Host: phim18hi.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Referer: https://phim18hi.net/the-loai/phim-18/trang-2.html
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=6nh9nc76i6ns0r340sgk6gui31
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Sun, 05 May 2024 01:40:42 GMT
content-type: font/woff
content-length: 65452
last-modified: Fri, 29 Dec 2023 15:36:09 GMT
etag: "658ee769-ffac"
x-content-type-options: "nosniff" always
x-xss-protection: "1; mode=block" always
strict-transport-security: "max-age=31536000; includeSubDomains; preload" always
referrer-policy: no-referrer-when-downgrade
expires: Fri, 02 May 2025 06:11:37 GMT
cache-control: public, max-age=31536000, must-revalidate, proxy-revalidate
cf-cache-status: HIT
age: 242945
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=oQvBGerpsmAafggWRYM1LJmH2J%2FMwUyNxa8u9HDi6IP02CfpH%2FxJSo9tZPMpkaXN1xMedDIlECbimwY%2B4f6VHk5KaB0Urjp8Hrq3q%2FBcwagpmUsB4bfxkCx23lFmLSU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87ed06287a655684-OSL
alt-svc: h3=":443"; ma=86400

www.googletagmanager.com/gtag/js?id=G-C9P7YSLSGM

142.250.74.72

200 OK

98 kB

URL GET HTTP/2
www.googletagmanager.com/gtag/js?id=G-C9P7YSLSGM
IP
142.250.74.72:443
ASN
#15169 GOOGLE

Requested by
https://phim18hi.net/the-loai/phim-18/trang-2.html
Certificate
IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint93:6B:D2:9D:92:BE:2D:D8:02:67:82:83:5E:EF:A3:F9:13:F3:26:AE
ValidityTue, 16 Apr 2024 03:18:45 GMT - Tue, 09 Jul 2024 03:18:44 GMT

File type
JavaScript source, ASCII text, with very long lines (5955)
Size
98 kB (97832 bytes)
Hash
627225a50c493a17479f616675c25afa
9ddc5732d5a9403ad12b7ba93314f91f3fb15fd6
f9e1a3635549cf5696ec14788f9ea1c8f594736a541cb9a3154b23befe328048

HTTP Headers

GET /gtag/js?id=G-C9P7YSLSGM HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://phim18hi.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sun, 05 May 2024 01:40:42 GMT
expires: Sun, 05 May 2024 01:40:42 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 97832
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

qh.telpathpols.com/rgRW3fpgqA2W1h8/64597

23.109.170.241

200 OK

20 B

URL GET HTTP/1.1
qh.telpathpols.com/rgRW3fpgqA2W1h8/64597
IP
23.109.170.241:443
ASN
#7979 SERVERS-COM

Requested by
https://phim18hi.net/the-loai/phim-18/trang-2.html
Certificate
IssuerLet's Encrypt
Subjectqh.telpathpols.com
FingerprintF9:39:1A:D2:E4:B2:49:FE:86:47:9D:C8:0E:E5:AC:1C:40:3C:06:7A
ValiditySat, 27 Apr 2024 08:43:17 GMT - Fri, 26 Jul 2024 08:43:16 GMT

File type
gzip compressed data, from Unix
Size
20 B (20 bytes)
Hash
7029066c27ac6f5ef18d660d5741979a
46c6643f07aa7f6bfe7118de926b86defc5087c4
59869db34853933b239f1e2219cf7d431da006aa919635478511fabbfc8849d2

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /rgRW3fpgqA2W1h8/64597 HTTP/1.1
Host: qh.telpathpols.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://phim18hi.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Sun, 05 May 2024 01:40:43 GMT
Content-Type: application/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=20
Accept-ch: sec-ch-ua-platform-version,sec-ch-ua-model,sec-ch-ua-full-version,sec-ch-ua-full-version-list
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://phim18hi.net
Access-Control-Allow-Headers: content-type, megageocheckolololo, x-forwarded-for, x-requested-with, cache-control, pragma, expires
Access-Control-Max-Age: 600
Access-Control-Allow-Methods: GET, POST, OPTIONS
Set-Cookie: GL_UI4=eJw9jUtug0AQRPljJ4akJQ7gIxgUjL3MJivfAQ0zDZ4Ypq1mjJ3bZxIp2dUrPVV5nhcUL%2BAvyRrCm6hhe1R9s5dYojyUVVW%2BHSrZ151o%2BlJVTVnvYK3n1opuRBvBap4E29YuEWwGNMhatpIUZvDqrL%2FmYuhuIog7FkZlEE%2FOGDNIO6b7jFyEEBkxIaQfmrGnhzPEJzEEx72L2rjo7yCguQjzJ4hP2twe%2BSbx8jzx4Pk6CtsTT61WDuOBhULw32ElhcWB%2BAtShfPF0hWARtX%2B%2B7%2Bf8fizBonCRUuHZM%2FI38wATrY%3D; expires=Mon, 06-May-2024 01:40:43 GMT; Max-Age=86400; path=/; secure; SameSite=None
GL_GI10=eJwVyM0KgkAUhuE5hxiIJPjIC%2FAKTMsWbrNl6MIrMIsYGObIzNjP3WeLd%2FG8SilOE7CZkNRlXhd5dcjLUwV6gtsOPDroVvx7%2BII8uDiCvcOmC1ayRmYXlz9i9TfIYHu25pP1YudoxAXw0roZbvaxv%2FRX0KQJHEUzONxTBXrp3Q9e7R3S; expires=Mon, 06-May-2024 01:40:43 GMT; Max-Age=86400; path=/; secure; SameSite=None
Content-Encoding: gzip
Vary: Accept-Encoding
Strict-Transport-Security: max-age=1
X-Content-Type-Options: nosniff

khophim-poster.cuoiia.top/images/2024/03/07/728x90.gif

188.114.97.1

200 OK

113 kB

URL GET HTTP/2
khophim-poster.cuoiia.top/images/2024/03/07/728x90.gif
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://phim18hi.net/the-loai/phim-18/trang-2.html
Certificate
IssuerGoogle Trust Services LLC
Subjectcuoiia.top
FingerprintFF:02:90:80:9B:63:AF:F1:B3:F7:C0:C6:D8:68:91:9A:18:DC:4B:65
ValiditySun, 24 Mar 2024 21:16:16 GMT - Sat, 22 Jun 2024 21:16:15 GMT

File type
GIF image data, version 89a, 728 x 90
Size
113 kB (112766 bytes)
Hash
da6ce091d57342888f78b3f95886619b
d9c653c9a9fab5e0d84edc44b545ba7e4f021f88
84bceb25cc235a0210fa4c2710171f883ba73f9f0149f0b32a57dfe61c794979

HTTP Headers

GET /images/2024/03/07/728x90.gif HTTP/1.1
Host: khophim-poster.cuoiia.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://phim18hi.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Sun, 05 May 2024 01:40:43 GMT
content-type: image/gif
content-length: 112766
last-modified: Thu, 07 Mar 2024 05:07:21 GMT
etag: "65e94b89-1b87e"
x-content-type-options: "nosniff" always
x-xss-protection: "1; mode=block" always
strict-transport-security: "max-age=31536000; includeSubDomains; preload" always
referrer-policy: no-referrer-when-downgrade
expires: Sat, 22 Mar 2025 21:37:58 GMT
cache-control: public, max-age=31536000, must-revalidate, proxy-revalidate, immutable, stale-while-revalidate=86400, stale-if-error=604800
cf-cache-status: HIT
age: 359095
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8u0hH05b7UBBo8ixdOrfUvnJxV2Yblq0crAm6N9JJJD%2FXmXZ5jKxpgt2cfYwo7H7kni5LYlJl5lnPMFNCVeav5%2FwLStpKOXHskqn3dw29cudKyAoM7pnTN6KIUpHkkRXUB%2FOZl9yDfxHVJwC"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87ed062a8b050b3d-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

khophim-poster.cuoiia.top/images/2024/01/20/600x400.jpg

188.114.97.1

200 OK

86 kB

URL GET HTTP/2
khophim-poster.cuoiia.top/images/2024/01/20/600x400.jpg
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://phim18hi.net/the-loai/phim-18/trang-2.html
Certificate
IssuerGoogle Trust Services LLC
Subjectcuoiia.top
FingerprintFF:02:90:80:9B:63:AF:F1:B3:F7:C0:C6:D8:68:91:9A:18:DC:4B:65
ValiditySun, 24 Mar 2024 21:16:16 GMT - Sat, 22 Jun 2024 21:16:15 GMT

File type
JPEG image data, progressive, precision 8, 600x400, components 3
Size
86 kB (85454 bytes)
Hash
6bf413145afc9e138a698d9070e5772e
dc0309013951398956a0fb3a86c941ca4315cbb5
c60e850c0a838281bef564b6fd1410750894a645eabe84809411cb0f3a561d99

HTTP Headers

GET /images/2024/01/20/600x400.jpg HTTP/1.1
Host: khophim-poster.cuoiia.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://phim18hi.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Sun, 05 May 2024 01:40:43 GMT
content-type: image/jpeg
content-length: 85454
last-modified: Sat, 20 Jan 2024 13:11:22 GMT
etag: "65abc67a-14dce"
x-content-type-options: "nosniff" always
x-xss-protection: "1; mode=block" always
strict-transport-security: "max-age=31536000; includeSubDomains; preload" always
referrer-policy: no-referrer-when-downgrade
expires: Wed, 26 Mar 2025 05:17:01 GMT
cache-control: public, max-age=31536000, must-revalidate, proxy-revalidate, immutable, stale-while-revalidate=86400, stale-if-error=604800
cf-cache-status: HIT
age: 372294
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0mrVkX%2BE4rCpzaLs80uAT2rWY7h%2FYEDY9wzqKfXOa57N%2F45W%2FxAKc%2Fvpc6fulXfRsM6kTS5CYv6%2BdXM7Khp1srKROhwwnr6rkQEOAwHtPv4N15etyh7DGtRvBfTaODLgwM5WjMx9xYC5%2BQ%2F3"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87ed062a8b0a0b3d-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

khophim-poster.cuoiia.top/images/2024/01/21/anh123_1.gif

188.114.97.1

200 OK

101 kB

URL GET HTTP/2
khophim-poster.cuoiia.top/images/2024/01/21/anh123_1.gif
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://phim18hi.net/the-loai/phim-18/trang-2.html
Certificate
IssuerGoogle Trust Services LLC
Subjectcuoiia.top
FingerprintFF:02:90:80:9B:63:AF:F1:B3:F7:C0:C6:D8:68:91:9A:18:DC:4B:65
ValiditySun, 24 Mar 2024 21:16:16 GMT - Sat, 22 Jun 2024 21:16:15 GMT

File type
GIF image data, version 89a, 931 x 121
Size
101 kB (100901 bytes)
Hash
c5fac85f6724c816743bfa6c9cdff257
b3dbc9f52ce11375bd96b7d896c2ecd207ecdf84
2fe57871e8cb8d061712100970d8977cecb4e60c174b3c423332debc4138a894

HTTP Headers

GET /images/2024/01/21/anh123_1.gif HTTP/1.1
Host: khophim-poster.cuoiia.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://phim18hi.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Sun, 05 May 2024 01:40:43 GMT
content-type: image/gif
content-length: 100901
last-modified: Sun, 21 Jan 2024 12:43:07 GMT
etag: "65ad115b-18a25"
x-content-type-options: "nosniff" always
x-xss-protection: "1; mode=block" always
strict-transport-security: "max-age=31536000; includeSubDomains; preload" always
referrer-policy: no-referrer-when-downgrade
expires: Sat, 22 Mar 2025 22:54:22 GMT
cache-control: public, max-age=31536000, must-revalidate, proxy-revalidate, immutable, stale-while-revalidate=86400, stale-if-error=604800
cf-cache-status: HIT
age: 372294
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Ujvl3NczmO8O2TSi2%2B4JLcBEaxF9huthExQ8SNA5FMPyOTLFheLyvjCUI%2BismwIO3N6ClYcxz%2FBv44M8ToY6MSPaNK0QPhv3RDh5%2FL4kGHaH2yEBFEB7%2BUyalZHjAkMCyCEPubimg0O2DbdO"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87ed062a9b110b3d-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

khophim-poster.cuoiia.top/images/2024/02/12/789CLUB.gif

188.114.97.1

200 OK

185 kB

URL GET HTTP/2
khophim-poster.cuoiia.top/images/2024/02/12/789CLUB.gif
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://phim18hi.net/the-loai/phim-18/trang-2.html
Certificate
IssuerGoogle Trust Services LLC
Subjectcuoiia.top
FingerprintFF:02:90:80:9B:63:AF:F1:B3:F7:C0:C6:D8:68:91:9A:18:DC:4B:65
ValiditySun, 24 Mar 2024 21:16:16 GMT - Sat, 22 Jun 2024 21:16:15 GMT

File type
GIF image data, version 89a, 980 x 90
Size
185 kB (184893 bytes)
Hash
2659448b88ae07ad3df8ff5ce4d190d3
ca9ce23821b408777016d6b4cfbca9f0f6f71c33
447f00d56c617c2457125160487a32c2f99ec6ae3e79317ff5ad39807f4eb0e2

HTTP Headers

GET /images/2024/02/12/789CLUB.gif HTTP/1.1
Host: khophim-poster.cuoiia.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://phim18hi.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Sun, 05 May 2024 01:40:43 GMT
content-type: image/gif
content-length: 184893
last-modified: Mon, 12 Feb 2024 06:53:24 GMT
etag: "65c9c064-2d23d"
x-content-type-options: "nosniff" always
x-xss-protection: "1; mode=block" always
strict-transport-security: "max-age=31536000; includeSubDomains; preload" always
referrer-policy: no-referrer-when-downgrade
expires: Sun, 23 Mar 2025 03:40:33 GMT
cache-control: public, max-age=31536000, must-revalidate, proxy-revalidate, immutable, stale-while-revalidate=86400, stale-if-error=604800
cf-cache-status: HIT
age: 372294
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=avfcht%2F54FfIJrZTUyYsbbAkAoy%2BMOVqYWzcSUbpxCKLfFyJc5rIhaisSHRLBKSrAAyfHAWZCVxSFbe%2FzJvwzzuLs4uxCUnCVo8s1vwxh%2F8iyCR8LqVovvlEaoKMJv3xIXsT6ZV786ZaSt%2Fj"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87ed062a9b0d0b3d-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

khophim-poster.cuoiia.top/images/2024/04/25/728x90-xembonghay.gif

188.114.97.1

200 OK

613 kB

URL GET HTTP/2
khophim-poster.cuoiia.top/images/2024/04/25/728x90-xembonghay.gif
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://phim18hi.net/the-loai/phim-18/trang-2.html
Certificate
IssuerGoogle Trust Services LLC
Subjectcuoiia.top
FingerprintFF:02:90:80:9B:63:AF:F1:B3:F7:C0:C6:D8:68:91:9A:18:DC:4B:65
ValiditySun, 24 Mar 2024 21:16:16 GMT - Sat, 22 Jun 2024 21:16:15 GMT

File type
GIF image data, version 89a, 728 x 90
Size
613 kB (612888 bytes)
Hash
3a8f8f0c0ed098479b0ce1b7a69da83e
3b5898d5fa4d99e516654b050ec528d3a7e35783
c50a5ea116d061c5541703c99c2c1ceba90ab77d0c5c459944748b0fe4b5655c

HTTP Headers

GET /images/2024/04/25/728x90-xembonghay.gif HTTP/1.1
Host: khophim-poster.cuoiia.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://phim18hi.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Sun, 05 May 2024 01:40:43 GMT
content-type: image/gif
content-length: 612888
last-modified: Thu, 25 Apr 2024 07:56:47 GMT
etag: "662a0cbf-95a18"
x-content-type-options: "nosniff" always
x-xss-protection: "1; mode=block" always
strict-transport-security: "max-age=31536000; includeSubDomains; preload" always
referrer-policy: no-referrer-when-downgrade
expires: Fri, 25 Apr 2025 07:57:59 GMT
cache-control: public, max-age=31536000, must-revalidate, proxy-revalidate, immutable, stale-while-revalidate=86400, stale-if-error=604800
cf-cache-status: HIT
age: 14168
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=OQ9bNV%2B9i53TW0XHjUPt09CwG%2Fa7G7Y45nptfLjH%2FsyMpdnLzjpifdwtgN5g3%2BN6o68OdJO%2BJcNbnYjwjSVXb%2BkgxXZqxs96gZKGwvuHxKOPgrWui4uxOH%2Fb6Eq%2BRb12oFKWWE1lmes6ltcj"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87ed062a8b040b3d-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

khophim-poster.cuoiia.top/images/2024/04/25/728x90-xembong88.gif

188.114.97.1

200 OK

593 kB

URL GET HTTP/2
khophim-poster.cuoiia.top/images/2024/04/25/728x90-xembong88.gif
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://phim18hi.net/the-loai/phim-18/trang-2.html
Certificate
IssuerGoogle Trust Services LLC
Subjectcuoiia.top
FingerprintFF:02:90:80:9B:63:AF:F1:B3:F7:C0:C6:D8:68:91:9A:18:DC:4B:65
ValiditySun, 24 Mar 2024 21:16:16 GMT - Sat, 22 Jun 2024 21:16:15 GMT

File type
GIF image data, version 89a, 728 x 90
Size
593 kB (593004 bytes)
Hash
655ef4eac452e46e7309b910bf0d4c42
05bdbffe523b74b4e7cd9b4fab679688b136c58d
78b6e77af22b1a7dc4ce532dd528835480f25e4eafd95f0aae4d6bf749f5159a

HTTP Headers

GET /images/2024/04/25/728x90-xembong88.gif HTTP/1.1
Host: khophim-poster.cuoiia.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://phim18hi.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Sun, 05 May 2024 01:40:43 GMT
content-type: image/gif
content-length: 593004
last-modified: Thu, 25 Apr 2024 07:56:46 GMT
etag: "662a0cbe-90c6c"
x-content-type-options: "nosniff" always
x-xss-protection: "1; mode=block" always
strict-transport-security: "max-age=31536000; includeSubDomains; preload" always
referrer-policy: no-referrer-when-downgrade
expires: Fri, 25 Apr 2025 07:57:59 GMT
cache-control: public, max-age=31536000, must-revalidate, proxy-revalidate, immutable, stale-while-revalidate=86400, stale-if-error=604800
cf-cache-status: HIT
age: 359095
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=VJeI5FWfUWdVfgp6ZmemjP3qRkG6lV7IQopQBK8bKbiRQjk2vS6uQEnCBHbO67JitILD5LuFAm66pYUJD1iNW9rsV2PwFusHw5KlZ3ctv8Rfx8Yqvwzb9HPhgIrWm5jqO6mo8bZv4hA0GMa7"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87ed062a8b0b0b3d-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

khophim-poster.cuoiia.top/images/2023/11/16/728x90XS.gif

188.114.97.1

200 OK

587 kB

URL GET HTTP/2
khophim-poster.cuoiia.top/images/2023/11/16/728x90XS.gif
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://phim18hi.net/the-loai/phim-18/trang-2.html
Certificate
IssuerGoogle Trust Services LLC
Subjectcuoiia.top
FingerprintFF:02:90:80:9B:63:AF:F1:B3:F7:C0:C6:D8:68:91:9A:18:DC:4B:65
ValiditySun, 24 Mar 2024 21:16:16 GMT - Sat, 22 Jun 2024 21:16:15 GMT

File type
GIF image data, version 89a, 728 x 90
Size
587 kB (586989 bytes)
Hash
1831b8eb54d9782bef0e6759f332ff6f
490d10271ef1b77d902ec6f1f0e46717022bd18f
8a2b9473ae674d359d80f5f971fbacf2e75c653301ef1d92d3e10916b7eee694

HTTP Headers

GET /images/2023/11/16/728x90XS.gif HTTP/1.1
Host: khophim-poster.cuoiia.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://phim18hi.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Sun, 05 May 2024 01:40:43 GMT
content-type: image/gif
content-length: 586989
last-modified: Thu, 16 Nov 2023 02:57:59 GMT
etag: "65558537-8f4ed"
x-content-type-options: "nosniff" always
x-xss-protection: "1; mode=block" always
strict-transport-security: "max-age=31536000; includeSubDomains; preload" always
referrer-policy: no-referrer-when-downgrade
expires: Sat, 22 Mar 2025 20:20:50 GMT
cache-control: public, max-age=31536000, must-revalidate, proxy-revalidate, immutable, stale-while-revalidate=86400, stale-if-error=604800
cf-cache-status: HIT
age: 359095
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QNSlA7yM%2FSbHGLDhkrBI%2BnLynxDo65%2Bqu6UHF9KyBMGMm%2BtPWBlOEOiWX564RlrSZ2YSGHYoH%2F16Lkce8Pz9HBX9GWL%2Bu8uUzqmeIVGRMvVHLbWSJlKXi2Vo6FhIErB0tZhOjBfHIWislZgj"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87ed062a9b100b3d-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

khophim-poster.cuoiia.top/images/2024/02/25/728x90-FB68-DT-CC---DANG-KY.gif

188.114.97.1

200 OK

1.3 MB

URL GET HTTP/2
khophim-poster.cuoiia.top/images/2024/02/25/728x90-FB68-DT-CC---DANG-KY.gif
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://phim18hi.net/the-loai/phim-18/trang-2.html
Certificate
IssuerGoogle Trust Services LLC
Subjectcuoiia.top
FingerprintFF:02:90:80:9B:63:AF:F1:B3:F7:C0:C6:D8:68:91:9A:18:DC:4B:65
ValiditySun, 24 Mar 2024 21:16:16 GMT - Sat, 22 Jun 2024 21:16:15 GMT

File type
GIF image data, version 89a, 728 x 90
Size
1.3 MB (1319311 bytes)
Hash
3d3bb7b14a21fce0fb593c7ca0d1ec78
9f703eaf3c4c3efc402f6f96ee689410c7ad816d
c7bc7e5afaae912264752d1680bc7c2a8897ec5dfa010508f9eed16e8ce1be92

HTTP Headers

GET /images/2024/02/25/728x90-FB68-DT-CC---DANG-KY.gif HTTP/1.1
Host: khophim-poster.cuoiia.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://phim18hi.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Sun, 05 May 2024 01:40:43 GMT
content-type: image/gif
content-length: 1319311
last-modified: Sun, 25 Feb 2024 13:40:19 GMT
etag: "65db4343-14218f"
x-content-type-options: "nosniff" always
x-xss-protection: "1; mode=block" always
strict-transport-security: "max-age=31536000; includeSubDomains; preload" always
referrer-policy: no-referrer-when-downgrade
expires: Wed, 26 Mar 2025 05:17:01 GMT
cache-control: public, max-age=31536000, must-revalidate, proxy-revalidate, immutable, stale-while-revalidate=86400, stale-if-error=604800
cf-cache-status: HIT
age: 242946
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=x%2BiDb0yloiE%2FHBvlPfgsLBPWF4BOfntgPyB7exUfd4Kmz2s6xZrN2Mb%2Fm0qpjGv2xjHTqtXgSA4pbRELphZPqsN8kIu2481JQNDCZF6FPXbDWRvAl3UohrN%2FljPYLlqkJmU6ud9eRXIACa5t"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87ed062a8b060b3d-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

khophim-poster.cuoiia.top/images/2024/03/11/728x90.gif

188.114.97.1

200 OK

3.3 MB

URL GET HTTP/2
khophim-poster.cuoiia.top/images/2024/03/11/728x90.gif
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://phim18hi.net/the-loai/phim-18/trang-2.html
Certificate
IssuerGoogle Trust Services LLC
Subjectcuoiia.top
FingerprintFF:02:90:80:9B:63:AF:F1:B3:F7:C0:C6:D8:68:91:9A:18:DC:4B:65
ValiditySun, 24 Mar 2024 21:16:16 GMT - Sat, 22 Jun 2024 21:16:15 GMT

File type
GIF image data, version 89a, 728 x 90
Size
3.3 MB (3317886 bytes)
Hash
c6f16e959bc36e44249478bbe7aa8b98
6810c198d59dbfa59e1c59c2a861e0ebb286ba73
2a993ac3ea2b7904ee22c66838d3e9a216fe4bf091bc0bd6bdd96d3df60e7df3

HTTP Headers

GET /images/2024/03/11/728x90.gif HTTP/1.1
Host: khophim-poster.cuoiia.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://phim18hi.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Sun, 05 May 2024 01:40:43 GMT
content-type: image/gif
content-length: 3317886
last-modified: Mon, 11 Mar 2024 07:05:59 GMT
etag: "65eead57-32a07e"
x-content-type-options: "nosniff" always
x-xss-protection: "1; mode=block" always
strict-transport-security: "max-age=31536000; includeSubDomains; preload" always
referrer-policy: no-referrer-when-downgrade
expires: Wed, 26 Mar 2025 04:39:55 GMT
cache-control: public, max-age=31536000, must-revalidate, proxy-revalidate, immutable, stale-while-revalidate=86400, stale-if-error=604800
cf-cache-status: HIT
age: 372294
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LUddmIimBk%2BhtxO%2BO2LxdR3pjczen1sDzrW0q7K2XbUkgTjEgGUNQmi%2FJcOT%2B7RkKJhkWCE3lVtL02wOSen5QAOdOZrLZp1Jve3SsrhPOnXyloUO%2B5qjL5cILqmUeI2bZTX%2F0nV%2BYYqk0pvk"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87ed062a9b0f0b3d-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

khophim-poster.cuoiia.top/images/2024/03/26/6686-gif_728x90.gif

188.114.97.1

200 OK

163 kB

URL GET HTTP/3
khophim-poster.cuoiia.top/images/2024/03/26/6686-gif_728x90.gif
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://phim18hi.net/the-loai/phim-18/trang-2.html
Certificate
IssuerGoogle Trust Services LLC
Subjectcuoiia.top
FingerprintFF:02:90:80:9B:63:AF:F1:B3:F7:C0:C6:D8:68:91:9A:18:DC:4B:65
ValiditySun, 24 Mar 2024 21:16:16 GMT - Sat, 22 Jun 2024 21:16:15 GMT

File type
GIF image data, version 89a, 728 x 90
Size
163 kB (162832 bytes)
Hash
5ce6aa7f6bdc785b2c39281ddf6ef413
5e2c79599331ab6951ae0d757a4b7b94182ef10d
90375b20a451d231054aa7555b1e2335d8bdc36d22b83f3e30126586239c125f

HTTP Headers

GET /images/2024/03/26/6686-gif_728x90.gif HTTP/1.1
Host: khophim-poster.cuoiia.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://phim18hi.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Sun, 05 May 2024 01:40:44 GMT
content-type: image/gif
content-length: 162832
last-modified: Tue, 26 Mar 2024 14:26:10 GMT
etag: "6602db02-27c10"
x-content-type-options: "nosniff" always
x-xss-protection: "1; mode=block" always
strict-transport-security: "max-age=31536000; includeSubDomains; preload" always
referrer-policy: no-referrer-when-downgrade
expires: Wed, 26 Mar 2025 14:27:55 GMT
cache-control: public, max-age=31536000, must-revalidate, proxy-revalidate, immutable, stale-while-revalidate=86400, stale-if-error=604800
cf-cache-status: HIT
age: 359094
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=lkxcJykbETXk9abotzTw9pixhZu%2FnTYhJdRXef%2B4wFdOWd7kUv8dmmv6%2FVX43aWyEKa3qscEGMuRuoyBZErWI8CFuyjCMfjph1jfGeExt4AnERLrwt4y%2FsSOpHLTTydtxcqnCs2zdrSn%2B4mG"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87ed062efdf2b4fa-OSL
alt-svc: h3=":443"; ma=86400

phim18hi.net/favicon.png

172.67.195.134

200 OK

524 B

URL GET HTTP/3
phim18hi.net/favicon.png
IP
172.67.195.134:443
ASN
#13335 CLOUDFLARENET

Requested by
https://phim18hi.net/the-loai/phim-18/trang-2.html
Certificate
IssuerGoogle Trust Services LLC
Subjectphim18hi.net
Fingerprint38:FB:B9:CC:F0:6A:54:C8:DC:A9:7F:37:CB:40:77:A9:22:9B:01:02
ValiditySun, 28 Apr 2024 05:02:41 GMT - Sat, 27 Jul 2024 05:02:40 GMT

File type
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Size
524 B (524 bytes)
Hash
6ab47457484287d795381ae9e7403ff3
a210c959719df39f8a9d51962cc184fd7098c51f
53b7ba6a5bd7595fad084d3334b51106e963e91205c9503768d2d013c06ff59a

HTTP Headers

GET /favicon.png HTTP/1.1
Host: phim18hi.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://phim18hi.net/the-loai/phim-18/trang-2.html
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=6nh9nc76i6ns0r340sgk6gui31; _ga_C9P7YSLSGM=GS1.1.1714873243.1.0.1714873243.60.0.0; _ga=GA1.1.110476965.1714873243
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Sun, 05 May 2024 01:40:44 GMT
content-type: image/png
content-length: 524
last-modified: Fri, 29 Dec 2023 15:36:09 GMT
etag: "658ee769-20c"
x-content-type-options: "nosniff" always
x-xss-protection: "1; mode=block" always
strict-transport-security: "max-age=31536000; includeSubDomains; preload" always
referrer-policy: no-referrer-when-downgrade
expires: Wed, 30 Apr 2025 18:15:54 GMT
cache-control: public, max-age=31536000, must-revalidate, proxy-revalidate, immutable, stale-while-revalidate=86400, stale-if-error=604800
cf-cache-status: HIT
age: 372290
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=o6VkHs%2BLQ3QwHnRInGkvzVi5fR2eSEPsLKxK3Ba5sfzyfxnfs34lvk0xl5brjmYPm20LFKiXni%2FhcidD0ZzyQo%2FW18o0bjk8k0WHwjwDDI7%2F%2BePVBNH6xtFWoeem82c%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87ed06338e9a5684-OSL
alt-svc: h3=":443"; ma=86400

khophim-poster.cuoiia.top/images/2022/01/16/House-Tour-2021AA.jpg

188.114.97.1

200 OK

24 kB

URL GET HTTP/3
khophim-poster.cuoiia.top/images/2022/01/16/House-Tour-2021AA.jpg
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://phim18hi.net/the-loai/phim-18/trang-2.html
Certificate
IssuerGoogle Trust Services LLC
Subjectcuoiia.top
FingerprintFF:02:90:80:9B:63:AF:F1:B3:F7:C0:C6:D8:68:91:9A:18:DC:4B:65
ValiditySun, 24 Mar 2024 21:16:16 GMT - Sat, 22 Jun 2024 21:16:15 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 299x397, components 3
Size
24 kB (23652 bytes)
Hash
918d992919da22579061c5f1d3e26bac
20a7cae4f424d192be19d65528389b91d6b7f961
7ec9a510ad5042c2f5943cf7e0d6c9998645140fc1afbf15e82ff9bdf50e9ab5

HTTP Headers

GET /images/2022/01/16/House-Tour-2021AA.jpg HTTP/1.1
Host: khophim-poster.cuoiia.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://phim18hi.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Sun, 05 May 2024 01:40:44 GMT
content-type: image/jpeg
content-length: 23652
last-modified: Thu, 28 Jul 2022 07:26:18 GMT
etag: "62e23a1a-5c64"
x-content-type-options: "nosniff" always
x-xss-protection: "1; mode=block" always
strict-transport-security: "max-age=31536000; includeSubDomains; preload" always
referrer-policy: no-referrer-when-downgrade
expires: Tue, 22 Apr 2025 17:47:55 GMT
cache-control: public, max-age=31536000, must-revalidate, proxy-revalidate, immutable, stale-while-revalidate=86400, stale-if-error=604800
cf-cache-status: HIT
age: 377197
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=KRbjI9U6p4Id%2F%2Bzk4jJOBmP99w5q6J%2FrOU8zEvotdDrLa0MKZ9yN6UTgbggIVdgH9rWnwH44LqrzD3kbDIvI5OHUsXeqghfu%2FuroJVdzOsXpMQhR9dAaLhL8meSqUnmXOCkSFCWVfVnp4iHY"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87ed0633bfb6b4fa-OSL
alt-svc: h3=":443"; ma=86400

khophim-poster.cuoiia.top/images/2024/04/23/Love-Someone-2022a-1.jpg

188.114.97.1

200 OK

30 kB

URL GET HTTP/3
khophim-poster.cuoiia.top/images/2024/04/23/Love-Someone-2022a-1.jpg
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://phim18hi.net/the-loai/phim-18/trang-2.html
Certificate
IssuerGoogle Trust Services LLC
Subjectcuoiia.top
FingerprintFF:02:90:80:9B:63:AF:F1:B3:F7:C0:C6:D8:68:91:9A:18:DC:4B:65
ValiditySun, 24 Mar 2024 21:16:16 GMT - Sat, 22 Jun 2024 21:16:15 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 353x470, components 3
Size
30 kB (30513 bytes)
Hash
11b91101ffa0ca4bdaa8eefbc1e07238
c59b25e5b314f9b3df5744c9c56c82d1d63d3a81
e419c48104c91d7ca90a15f1d885d991b3ad5106343eafaebc9cae023c4c1cad

HTTP Headers

GET /images/2024/04/23/Love-Someone-2022a-1.jpg HTTP/1.1
Host: khophim-poster.cuoiia.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://phim18hi.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Sun, 05 May 2024 01:40:44 GMT
content-type: image/jpeg
content-length: 30513
last-modified: Tue, 23 Apr 2024 02:17:54 GMT
etag: "66271a52-7731"
x-content-type-options: "nosniff" always
x-xss-protection: "1; mode=block" always
strict-transport-security: "max-age=31536000; includeSubDomains; preload" always
referrer-policy: no-referrer-when-downgrade
expires: Wed, 23 Apr 2025 02:18:03 GMT
cache-control: public, max-age=31536000, must-revalidate, proxy-revalidate, immutable, stale-while-revalidate=86400, stale-if-error=604800
cf-cache-status: HIT
age: 372275
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Xa6%2FybXLkV7HAYyL57uGaKH8xNR5mTozPhsIjnZsWDi1DoDnUTz6fgEUCvVyea9VrxhFKp9wijoZo417eUnxf0qGoIkeqUr%2BaUKLCyHensTrHf%2F2mgOpxqJbx0HG5jfRPeCd8LBUgKafVyc2"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87ed0633dfc2b4fa-OSL
alt-svc: h3=":443"; ma=86400

khophim-poster.cuoiia.top/images/2023/12/16/Exchange-Sex-With-A-Friend-Couple-2019a-2.jpg

188.114.97.1

200 OK

28 kB

URL GET HTTP/3
khophim-poster.cuoiia.top/images/2023/12/16/Exchange-Sex-With-A-Friend-Couple-2019a-2.jpg
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://phim18hi.net/the-loai/phim-18/trang-2.html
Certificate
IssuerGoogle Trust Services LLC
Subjectcuoiia.top
FingerprintFF:02:90:80:9B:63:AF:F1:B3:F7:C0:C6:D8:68:91:9A:18:DC:4B:65
ValiditySun, 24 Mar 2024 21:16:16 GMT - Sat, 22 Jun 2024 21:16:15 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 0x0, segment length 16, baseline, precision 8, 353x470, components 3
Size
28 kB (27983 bytes)
Hash
7f38d68810a91252ce8049e6f6facfc4
aafa1d5a2b0599a2ed2f8a2103209b578204b8c5
2829f3ac7deb706d72db154f0aa4ae8abb19a8459aa6970aa5bc9a694bd7a4e5

HTTP Headers

GET /images/2023/12/16/Exchange-Sex-With-A-Friend-Couple-2019a-2.jpg HTTP/1.1
Host: khophim-poster.cuoiia.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://phim18hi.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Sun, 05 May 2024 01:40:44 GMT
content-type: image/jpeg
content-length: 27983
last-modified: Fri, 15 Dec 2023 19:44:30 GMT
etag: "657cac9e-6d4f"
x-content-type-options: "nosniff" always
x-xss-protection: "1; mode=block" always
strict-transport-security: "max-age=31536000; includeSubDomains; preload" always
referrer-policy: no-referrer-when-downgrade
expires: Sat, 22 Mar 2025 20:48:38 GMT
cache-control: public, max-age=31536000, must-revalidate, proxy-revalidate, immutable, stale-while-revalidate=86400, stale-if-error=604800
cf-cache-status: HIT
age: 280195
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xTaMmNxLYoTNkcFMpX5L5TRULomCIEhOMFjNZ0rjR46bqFyRnzqdgn4j0%2FiImCUQxXvDoVbq4i6Aaal4cPz8%2BG2aXEdLUZRsqddHfpr1vElDjO2VZk5HqruEXezHNpFmwxX62D%2Bn%2Bz%2BEPeGt"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87ed0633dfc5b4fa-OSL
alt-svc: h3=":443"; ma=86400

khophim-poster.cuoiia.top/images/2023/10/09/The-Taste-Of-A-New-Female-Employee-2023a-1.jpg

188.114.97.1

200 OK

30 kB

URL GET HTTP/3
khophim-poster.cuoiia.top/images/2023/10/09/The-Taste-Of-A-New-Female-Employee-2023a-1.jpg
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://phim18hi.net/the-loai/phim-18/trang-2.html
Certificate
IssuerGoogle Trust Services LLC
Subjectcuoiia.top
FingerprintFF:02:90:80:9B:63:AF:F1:B3:F7:C0:C6:D8:68:91:9A:18:DC:4B:65
ValiditySun, 24 Mar 2024 21:16:16 GMT - Sat, 22 Jun 2024 21:16:15 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 0x0, segment length 16, baseline, precision 8, 353x470, components 3
Size
30 kB (29952 bytes)
Hash
680ede59091c0862ce3304d16d2cfed8
d3bcb9035eae004daa21086e6956232efb4d982f
de3609565babe7ac916ba1b61fba3ecab0aefe2754d8156b6a9299b527647dd9

HTTP Headers

GET /images/2023/10/09/The-Taste-Of-A-New-Female-Employee-2023a-1.jpg HTTP/1.1
Host: khophim-poster.cuoiia.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://phim18hi.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Sun, 05 May 2024 01:40:44 GMT
content-type: image/jpeg
content-length: 29952
last-modified: Mon, 09 Oct 2023 01:20:03 GMT
etag: "65235543-7500"
x-content-type-options: "nosniff" always
x-xss-protection: "1; mode=block" always
strict-transport-security: "max-age=31536000; includeSubDomains; preload" always
referrer-policy: no-referrer-when-downgrade
expires: Sat, 19 Apr 2025 12:04:23 GMT
cache-control: public, max-age=31536000, must-revalidate, proxy-revalidate, immutable, stale-while-revalidate=86400, stale-if-error=604800
cf-cache-status: HIT
age: 284335
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dcfNUHrYDwRJWDViyWg%2Fun6vbOf4Sb51kjrs0TSlohk6NXAwT7QZh3m1oRWxYR2CEiSf0aOUc2U5qNYp4hR5QkWGhAuQA97OIRNPV%2F0IL6i4useUJtpQaCyhWn8nC0l3KyCo%2FCAryV9PlhYu"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87ed0633dfc6b4fa-OSL
alt-svc: h3=":443"; ma=86400

khophim-poster.cuoiia.top/images/2023/12/23/Soundproof-Suburban-Inn-2022a-1.jpg

188.114.97.1

200 OK

22 kB

URL GET HTTP/3
khophim-poster.cuoiia.top/images/2023/12/23/Soundproof-Suburban-Inn-2022a-1.jpg
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://phim18hi.net/the-loai/phim-18/trang-2.html
Certificate
IssuerGoogle Trust Services LLC
Subjectcuoiia.top
FingerprintFF:02:90:80:9B:63:AF:F1:B3:F7:C0:C6:D8:68:91:9A:18:DC:4B:65
ValiditySun, 24 Mar 2024 21:16:16 GMT - Sat, 22 Jun 2024 21:16:15 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 0x0, segment length 16, baseline, precision 8, 299x400, components 3
Size
22 kB (21796 bytes)
Hash
faf1c66c253753b779d41bc0b7955c1f
ec73cc41cc0d88a765b9f62ee1f09e11615d87e2
91e213213641b69121d5a62024b548a69f1df48b054a4519cd4424c6691158c7

HTTP Headers

GET /images/2023/12/23/Soundproof-Suburban-Inn-2022a-1.jpg HTTP/1.1
Host: khophim-poster.cuoiia.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://phim18hi.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Sun, 05 May 2024 01:40:44 GMT
content-type: image/jpeg
content-length: 21796
last-modified: Sat, 23 Dec 2023 11:11:38 GMT
etag: "6586c06a-5524"
x-content-type-options: "nosniff" always
x-xss-protection: "1; mode=block" always
strict-transport-security: "max-age=31536000; includeSubDomains; preload" always
referrer-policy: no-referrer-when-downgrade
expires: Thu, 17 Apr 2025 22:12:48 GMT
cache-control: public, max-age=31536000, must-revalidate, proxy-revalidate, immutable, stale-while-revalidate=86400, stale-if-error=604800
cf-cache-status: HIT
age: 377194
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9jI8wHbcvGs4iHQwx98y9eQUVFXSy9RztkB7ctRl982b%2FOWDbthocijOEMWaDJnHv0j4D90ygLnBPWu3rOP7XrcfXzRoUfMqmgZYRT8GbEZkrRACciEDcvW21%2BsHKZPTk9mJJ2ktymR%2FFIst"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87ed0633dfc7b4fa-OSL
alt-svc: h3=":443"; ma=86400

khophim-poster.cuoiia.top/images/2023/12/31/The-Man-Who-Overheard-The-Moans-Of-The-Next-Door-Neighbor-Got-Stabbed-2023a-1.jpg

188.114.97.1

200 OK

35 kB

URL GET HTTP/3
khophim-poster.cuoiia.top/images/2023/12/31/The-Man-Who-Overheard-The-Moans-Of-The-Next-Door-Neighbor-Got-Stabbed-2023a-1.jpg
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://phim18hi.net/the-loai/phim-18/trang-2.html
Certificate
IssuerGoogle Trust Services LLC
Subjectcuoiia.top
FingerprintFF:02:90:80:9B:63:AF:F1:B3:F7:C0:C6:D8:68:91:9A:18:DC:4B:65
ValiditySun, 24 Mar 2024 21:16:16 GMT - Sat, 22 Jun 2024 21:16:15 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 0x0, segment length 16, baseline, precision 8, 353x470, components 3
Size
35 kB (35404 bytes)
Hash
d8dcacf838fdc47a3085c77e11855f34
35d7106b596b6e30f099916a309f562849cdfe8c
4fefe08357d6227e7656a0090da53ed54471d70217d2b085d5a775015a7a5a65

HTTP Headers

GET /images/2023/12/31/The-Man-Who-Overheard-The-Moans-Of-The-Next-Door-Neighbor-Got-Stabbed-2023a-1.jpg HTTP/1.1
Host: khophim-poster.cuoiia.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://phim18hi.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Sun, 05 May 2024 01:40:44 GMT
content-type: image/jpeg
content-length: 35404
last-modified: Sun, 31 Dec 2023 16:21:37 GMT
etag: "65919511-8a4c"
x-content-type-options: "nosniff" always
x-xss-protection: "1; mode=block" always
strict-transport-security: "max-age=31536000; includeSubDomains; preload" always
referrer-policy: no-referrer-when-downgrade
expires: Sun, 23 Mar 2025 02:44:19 GMT
cache-control: public, max-age=31536000, must-revalidate, proxy-revalidate, immutable, stale-while-revalidate=86400, stale-if-error=604800
cf-cache-status: HIT
age: 189265
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=CP9yp1K9vzHPN5I%2FMptTCZHGFFmmSn2MXBGbT3HzUM4irXMI%2BfHe%2FlAio5wtznZ3pu%2FOQMiTpLPV6OEe%2BMv%2FGAPDAhKTg%2FSQThBAW9%2FIdB15jAqNnF%2BWWXSBpAHuCfAt0FC0BHc1h2LDlm05"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87ed0633efc8b4fa-OSL
alt-svc: h3=":443"; ma=86400

khophim-poster.cuoiia.top/images/2023/12/31/The-Sister-in-laws-Gluttonous-Appetite-For-Eating-Anyone-2023a-1.jpg

188.114.97.1

200 OK

30 kB

URL GET HTTP/3
khophim-poster.cuoiia.top/images/2023/12/31/The-Sister-in-laws-Gluttonous-Appetite-For-Eating-Anyone-2023a-1.jpg
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://phim18hi.net/the-loai/phim-18/trang-2.html
Certificate
IssuerGoogle Trust Services LLC
Subjectcuoiia.top
FingerprintFF:02:90:80:9B:63:AF:F1:B3:F7:C0:C6:D8:68:91:9A:18:DC:4B:65
ValiditySun, 24 Mar 2024 21:16:16 GMT - Sat, 22 Jun 2024 21:16:15 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 0x0, segment length 16, baseline, precision 8, 353x470, components 3
Size
30 kB (29906 bytes)
Hash
dd4c8d42bf7e60c8ec11fcaede5cd3e6
daf135565fd2122cfd25845f4f93e9c7c0a27d7d
8ee8edc39108eb4f0f2ff6ebf4b7abeb6658e4476cbc087ecdd11dbd7014405b

HTTP Headers

GET /images/2023/12/31/The-Sister-in-laws-Gluttonous-Appetite-For-Eating-Anyone-2023a-1.jpg HTTP/1.1
Host: khophim-poster.cuoiia.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://phim18hi.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Sun, 05 May 2024 01:40:44 GMT
content-type: image/jpeg
content-length: 29906
last-modified: Sun, 31 Dec 2023 16:29:12 GMT
etag: "659196d8-74d2"
x-content-type-options: "nosniff" always
x-xss-protection: "1; mode=block" always
strict-transport-security: "max-age=31536000; includeSubDomains; preload" always
referrer-policy: no-referrer-when-downgrade
expires: Sat, 22 Mar 2025 18:36:26 GMT
cache-control: public, max-age=31536000, must-revalidate, proxy-revalidate, immutable, stale-while-revalidate=86400, stale-if-error=604800
cf-cache-status: HIT
age: 189264
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=L5DO0dkL%2F0EJketV0%2FkeTaPqEpUT711XvSC83oGvfd8UDwYK3%2BiKLJmXuN7A1FUQevXkBzvBDmzubaZysp7s7aUENnFhWH2Q78SMRki5u1y2chG3v6vdVJu57epTxwGyPsIThwnprv1v9Hh7"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87ed0633efc9b4fa-OSL
alt-svc: h3=":443"; ma=86400

khophim-poster.cuoiia.top/images/2024/01/02/Betrayal-Affair-And-Sex-2022a-1.jpg

188.114.97.1

200 OK

26 kB

URL GET HTTP/3
khophim-poster.cuoiia.top/images/2024/01/02/Betrayal-Affair-And-Sex-2022a-1.jpg
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://phim18hi.net/the-loai/phim-18/trang-2.html
Certificate
IssuerGoogle Trust Services LLC
Subjectcuoiia.top
FingerprintFF:02:90:80:9B:63:AF:F1:B3:F7:C0:C6:D8:68:91:9A:18:DC:4B:65
ValiditySun, 24 Mar 2024 21:16:16 GMT - Sat, 22 Jun 2024 21:16:15 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 0x0, segment length 16, baseline, precision 8, 353x470, components 3
Size
26 kB (26191 bytes)
Hash
2d461dbf55ff50ac2fb87cb6d166c7d3
221e8f36aa99db2a7079169a0fbb9d76ea92800b
aae79b56ba66db7ceac9fdb958b58f8b5fd580d04fab9ec5e2b421dddbda523a

HTTP Headers

GET /images/2024/01/02/Betrayal-Affair-And-Sex-2022a-1.jpg HTTP/1.1
Host: khophim-poster.cuoiia.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://phim18hi.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Sun, 05 May 2024 01:40:44 GMT
content-type: image/jpeg
content-length: 26191
last-modified: Mon, 01 Jan 2024 20:09:24 GMT
etag: "65931bf4-664f"
x-content-type-options: "nosniff" always
x-xss-protection: "1; mode=block" always
strict-transport-security: "max-age=31536000; includeSubDomains; preload" always
referrer-policy: no-referrer-when-downgrade
expires: Sat, 22 Mar 2025 20:48:15 GMT
cache-control: public, max-age=31536000, must-revalidate, proxy-revalidate, immutable, stale-while-revalidate=86400, stale-if-error=604800
cf-cache-status: HIT
age: 284335
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=nwWkXf6C2XJeQ7LXi3205GdkqELjPi7be09Af%2Fph6OcZTATtXICzVbHm%2FgfsV5O2wdSQH0w8XoWWQepglldGQpPohGwZz5nNBEWzMTjOalcaQ8yAeZ8WBr%2FAkEZ%2BfT69lqTn40hYZN2GYxqW"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87ed0633efcab4fa-OSL
alt-svc: h3=":443"; ma=86400

khophim-poster.cuoiia.top/images/2023/12/14/Innocent-Domestic-Girl-Perfect-For-Firewood-2023a-1.jpg

188.114.97.1

200 OK

18 kB

URL GET HTTP/3
khophim-poster.cuoiia.top/images/2023/12/14/Innocent-Domestic-Girl-Perfect-For-Firewood-2023a-1.jpg
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://phim18hi.net/the-loai/phim-18/trang-2.html
Certificate
IssuerGoogle Trust Services LLC
Subjectcuoiia.top
FingerprintFF:02:90:80:9B:63:AF:F1:B3:F7:C0:C6:D8:68:91:9A:18:DC:4B:65
ValiditySun, 24 Mar 2024 21:16:16 GMT - Sat, 22 Jun 2024 21:16:15 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 0x0, segment length 16, baseline, precision 8, 353x470, components 3
Size
18 kB (18088 bytes)
Hash
b99c2ba801c441d9781d39a278edaee3
667dc9b6aa2588d29dc3c476cc3e9c5f61112c36
727212753fe98f25c88511ddd895f314df020a7caf0c1059c03aba650b56ab40

HTTP Headers

GET /images/2023/12/14/Innocent-Domestic-Girl-Perfect-For-Firewood-2023a-1.jpg HTTP/1.1
Host: khophim-poster.cuoiia.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://phim18hi.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Sun, 05 May 2024 01:40:44 GMT
content-type: image/jpeg
content-length: 18088
last-modified: Wed, 13 Dec 2023 18:49:43 GMT
etag: "6579fcc7-46a8"
x-content-type-options: "nosniff" always
x-xss-protection: "1; mode=block" always
strict-transport-security: "max-age=31536000; includeSubDomains; preload" always
referrer-policy: no-referrer-when-downgrade
expires: Wed, 26 Mar 2025 05:43:09 GMT
cache-control: public, max-age=31536000, must-revalidate, proxy-revalidate, immutable, stale-while-revalidate=86400, stale-if-error=604800
cf-cache-status: HIT
age: 66781
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xmIMvl%2BVQu4vZZ6k5UH4HIlU91uGaQBoKkR8mUP%2BFTY3ZYYVTpzHdI8bO%2BH23Oz5vuMsXBSgFsfX%2B45%2BZsvmwpoJdMrfyzqqRYb9OSvQKWOlkv9zb%2BDxJOQ96Zof2G%2F7t%2BeknyKoUAm3l%2Bbz"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87ed0633efceb4fa-OSL
alt-svc: h3=":443"; ma=86400

khophim-poster.cuoiia.top/images/2024/04/23/Sweet-Release-2024a-1.jpg

188.114.97.1

200 OK

42 kB

URL GET HTTP/3
khophim-poster.cuoiia.top/images/2024/04/23/Sweet-Release-2024a-1.jpg
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://phim18hi.net/the-loai/phim-18/trang-2.html
Certificate
IssuerGoogle Trust Services LLC
Subjectcuoiia.top
FingerprintFF:02:90:80:9B:63:AF:F1:B3:F7:C0:C6:D8:68:91:9A:18:DC:4B:65
ValiditySun, 24 Mar 2024 21:16:16 GMT - Sat, 22 Jun 2024 21:16:15 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 353x470, components 3
Size
42 kB (42367 bytes)
Hash
608cf8e1e1d87468959b64bfb3737897
acd06bf6017f4ecbfafdd49658e657e3b4e15833
94153bc80cde15892af589a5ea22fc44ea6ecbe66fe01f0c6d62a05c8f864ca3

HTTP Headers

GET /images/2024/04/23/Sweet-Release-2024a-1.jpg HTTP/1.1
Host: khophim-poster.cuoiia.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://phim18hi.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Sun, 05 May 2024 01:40:44 GMT
content-type: image/jpeg
content-length: 42367
last-modified: Tue, 23 Apr 2024 02:37:27 GMT
etag: "66271ee7-a57f"
x-content-type-options: "nosniff" always
x-xss-protection: "1; mode=block" always
strict-transport-security: "max-age=31536000; includeSubDomains; preload" always
referrer-policy: no-referrer-when-downgrade
expires: Wed, 23 Apr 2025 02:39:07 GMT
cache-control: public, max-age=31536000, must-revalidate, proxy-revalidate, immutable, stale-while-revalidate=86400, stale-if-error=604800
cf-cache-status: HIT
age: 242947
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=qdg8z6376TDcZtg7WWZu%2FqtkmjyIBGRsV4Gor3yVxTYsOwBEaHl8F7f278Dr2GPzNFlN7JMBV0gwNH87dim%2FFt4kVvZ7BxH5jYWU2sSirI1pLbuS0uQq1BvtVFOuD4hjRGncQmrZzjUb0IpK"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87ed0633efcfb4fa-OSL
alt-svc: h3=":443"; ma=86400

region1.analytics.google.com/g/collect?v=2&tid=G-C9P7YSLSGM&gtm=45je4510v887195122za200&_p=1714873242887&_gaz=1&gcd=13l3l3l2l1&npa=1&dma_cps=sypham&dma=1&cid=110476965.1714873243&ul=en-us&sr=1280x1024&pscdl=noapi&_s=1&sid=1714873243&sct=1&seg=0&dl=https%3A%2F%2Fphim18hi.net%2Fthe-loai%2Fphim-18%2Ftrang-2.html&dt=Tuy%E1%BB%83n%20T%E1%BA%ADp%20Phim%2018%2B%20%7C%20Phim%2018%2B%20HD%20Vietsub&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1&tfd=913

216.239.34.36

204 No Content

0 B

URL POST HTTP/2
region1.analytics.google.com/g/collect?v=2&tid=G-C9P7YSLSGM&gtm=45je4510v887195122za200&_p=1714873242887&_gaz=1&gcd=13l3l3l2l1&npa=1&dma_cps=sypham&dma=1&cid=110476965.1714873243&ul=en-us&sr=1280x1024&pscdl=noapi&_s=1&sid=1714873243&sct=1&seg=0&dl=https%3A%2F%2Fphim18hi.net%2Fthe-loai%2Fphim-18%2Ftrang-2.html&dt=Tuy%E1%BB%83n%20T%E1%BA%ADp%20Phim%2018%2B%20%7C%20Phim%2018%2B%20HD%20Vietsub&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1&tfd=913
IP
216.239.34.36:443
ASN
#15169 GOOGLE

Requested by
https://phim18hi.net/the-loai/phim-18/trang-2.html
Certificate
IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint93:6B:D2:9D:92:BE:2D:D8:02:67:82:83:5E:EF:A3:F9:13:F3:26:AE
ValidityTue, 16 Apr 2024 03:18:45 GMT - Tue, 09 Jul 2024 03:18:44 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

POST /g/collect?v=2&tid=G-C9P7YSLSGM&gtm=45je4510v887195122za200&_p=1714873242887&_gaz=1&gcd=13l3l3l2l1&npa=1&dma_cps=sypham&dma=1&cid=110476965.1714873243&ul=en-us&sr=1280x1024&pscdl=noapi&_s=1&sid=1714873243&sct=1&seg=0&dl=https%3A%2F%2Fphim18hi.net%2Fthe-loai%2Fphim-18%2Ftrang-2.html&dt=Tuy%E1%BB%83n%20T%E1%BA%ADp%20Phim%2018%2B%20%7C%20Phim%2018%2B%20HD%20Vietsub&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1&tfd=913 HTTP/1.1
Host: region1.analytics.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://phim18hi.net
DNT: 1
Connection: keep-alive
Referer: https://phim18hi.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0

HTTP/2 204 No Content
access-control-allow-origin: https://phim18hi.net
date: Sun, 05 May 2024 01:40:44 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-C9P7YSLSGM&cid=110476965.1714873243&gtm=45je4510v887195122za200&aip=1&dma=1&dma_cps=sypham&gcd=13l3l3l2l1&npa=1&z=515243960

172.217.21.163

200 OK

42 B

URL GET HTTP/2
www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-C9P7YSLSGM&cid=110476965.1714873243&gtm=45je4510v887195122za200&aip=1&dma=1&dma_cps=sypham&gcd=13l3l3l2l1&npa=1&z=515243960
IP
172.217.21.163:443
ASN
#15169 GOOGLE

Requested by
https://phim18hi.net/the-loai/phim-18/trang-2.html
Certificate
IssuerGoogle Trust Services LLC
Subject*.google.no
Fingerprint7D:68:6D:B1:32:34:52:51:20:C9:53:FF:B9:B7:8F:7E:05:F9:F5:97
ValidityTue, 16 Apr 2024 04:31:00 GMT - Tue, 09 Jul 2024 04:30:59 GMT

File type
GIF image data, version 89a, 1 x 1
Size
42 B (42 bytes)
Hash
d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629

HTTP Headers

GET /ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-C9P7YSLSGM&cid=110476965.1714873243&gtm=45je4510v887195122za200&aip=1&dma=1&dma_cps=sypham&gcd=13l3l3l2l1&npa=1&z=515243960 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://phim18hi.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Sun, 05 May 2024 01:40:44 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

i.imgur.com/GisQjJSm.jpg

151.101.244.193

200 OK

12 kB

URL GET HTTP/2
i.imgur.com/GisQjJSm.jpg
IP
151.101.244.193:443
ASN
#54113 FASTLY

Requested by
https://phim18hi.net/the-loai/phim-18/trang-2.html
Certificate
IssuerSectigo Limited
Subject*.imgur.com
Fingerprint39:5B:E1:0D:4A:FC:A4:C7:F3:71:DE:C4:5C:12:69:F9:5F:58:9F:42
ValidityThu, 15 Feb 2024 00:00:00 GMT - Fri, 14 Feb 2025 23:59:59 GMT

File type
JPEG image data, baseline, precision 8, 240x320, components 3
Size
12 kB (11741 bytes)
Hash
1c58160370f7f82012a8cc9f437f5ea3
62191b97ac777a97e3ea4502051956e5285e70a7
ff5e4a934ded6b3ceecf30736167634e053b11b4ac51ef66fbf5517c90420faf

HTTP Headers

GET /GisQjJSm.jpg HTTP/1.1
Host: i.imgur.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://phim18hi.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: image/jpeg
last-modified: Wed, 17 Apr 2024 16:44:10 GMT
cache-control: public, max-age=31536000
accept-ranges: bytes
age: 1500994
date: Sun, 05 May 2024 01:40:44 GMT
x-served-by: cache-iad-kiad7000150-IAD, cache-hel1410024-HEL
x-cache: HIT, HIT
x-cache-hits: 359, 0
x-timer: S1714873245.918053,VS0,VE1
strict-transport-security: max-age=300
access-control-allow-methods: GET, OPTIONS
access-control-allow-origin: *
server: cat factory 1.0
x-content-type-options: nosniff
content-length: 11741
X-Firefox-Spdy: h2

i.imgur.com/PEkHqz7m.jpg

151.101.244.193

200 OK

20 kB

URL GET HTTP/2
i.imgur.com/PEkHqz7m.jpg
IP
151.101.244.193:443
ASN
#54113 FASTLY

Requested by
https://phim18hi.net/the-loai/phim-18/trang-2.html
Certificate
IssuerSectigo Limited
Subject*.imgur.com
Fingerprint39:5B:E1:0D:4A:FC:A4:C7:F3:71:DE:C4:5C:12:69:F9:5F:58:9F:42
ValidityThu, 15 Feb 2024 00:00:00 GMT - Fri, 14 Feb 2025 23:59:59 GMT

File type
JPEG image data, baseline, precision 8, 226x320, components 3
Size
20 kB (20132 bytes)
Hash
3950e839af522d8e49d7d53c51bc94c1
e71ec6400712a9eb31094a1cc13b3d1dbb5b5c41
8e59e83da3a8f4a236195f0377449995349232101869d82559781dddac92e32e

HTTP Headers

GET /PEkHqz7m.jpg HTTP/1.1
Host: i.imgur.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://phim18hi.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: image/jpeg
last-modified: Sat, 06 Apr 2024 23:27:30 GMT
cache-control: public, max-age=31536000
accept-ranges: bytes
age: 2427194
date: Sun, 05 May 2024 01:40:44 GMT
x-served-by: cache-iad-kjyo7100064-IAD, cache-hel1410024-HEL
x-cache: HIT, HIT
x-cache-hits: 677, 0
x-timer: S1714873245.925785,VS0,VE1
strict-transport-security: max-age=300
access-control-allow-methods: GET, OPTIONS
access-control-allow-origin: *
server: cat factory 1.0
x-content-type-options: nosniff
content-length: 20132
X-Firefox-Spdy: h2

phim18hi.net/the-loai/phim-18/trang-2.html

172.67.195.134

200 OK

532 kB

URL User Request GET HTTP/2
phim18hi.net/the-loai/phim-18/trang-2.html
IP
172.67.195.134:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerGoogle Trust Services LLC
Subjectphim18hi.net
Fingerprint38:FB:B9:CC:F0:6A:54:C8:DC:A9:7F:37:CB:40:77:A9:22:9B:01:02
ValiditySun, 28 Apr 2024 05:02:41 GMT - Sat, 27 Jul 2024 05:02:40 GMT

File type

Size
532 kB (531747 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /the-loai/phim-18/trang-2.html HTTP/1.1
Host: phim18hi.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Sun, 05 May 2024 01:40:42 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding, Accept-Encoding
set-cookie: PHPSESSID=6nh9nc76i6ns0r340sgk6gui31; path=/
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
x-content-type-options: "nosniff" always
x-xss-protection: "1; mode=block" always
strict-transport-security: "max-age=31536000; includeSubDomains; preload" always
referrer-policy: no-referrer-when-downgrade
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=SlMr8%2Frg%2BfadTkoNwpua41nSQgBJ1MNiUD2Qz7IyLHJd79Kk6YzITJbl49bYpKsW%2BkBP%2BGemR97lWK76xvJu%2FOjoLGzEwkfTzbRd%2FaDo07soEGn9t5n9GFWP%2Fmihdyw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87ed0624c864b51b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (15)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash