200 OK 12 kB URL User Request GET HTTP/1.1 IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (1503), with CRLF line terminators
Hash 99959a2c8b07f4b79b226d6f865f8e0f
6739192a3c86ccb756bd58242a6fd276cf53a355
226a211407473a913acce185ca9478f6eab6f776889bd6d319b28632b58234f5
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET / HTTP/1.1
Host: 173.244.209.59
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 26 Nov 2023 04:15:41 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Set-Cookie: zgIu_2132_saltkey=uhY9yYYP; expires=Tue, 26-Dec-2023 04:15:41 GMT; Max-Age=2592000; path=/; HttpOnly
zgIu_2132_lastvisit=1700968541; expires=Tue, 26-Dec-2023 04:15:41 GMT; Max-Age=2592000; path=/
zgIu_2132_sid=BjppNh; expires=Mon, 27-Nov-2023 04:15:41 GMT; Max-Age=86400; path=/
zgIu_2132_lastact=1700972141%09index.php%09; expires=Mon, 27-Nov-2023 04:15:41 GMT; Max-Age=86400; path=/
X-XSS-Protection: 1; mode=block
Referrer-Policy: no-referrer-when-downgrade
Content-Encoding: gzip
5278.cc/static/image/88x31_RTA-5042-1996-1400-1577-RTA_d.gif
200 OK 745 B URL GET HTTP/2 5278.cc/static/image/88x31_RTA-5042-1996-1400-1577-RTA_d.gif
IP
Certificate IssuerGoogle Trust Services LLC
Subject5278.cc
FingerprintA7:8B:0C:69:3F:1F:90:57:E6:4C:5F:0A:A6:52:71:47:B2:5B:53:48
ValidityWed, 18 Oct 2023 21:07:14 GMT - Tue, 16 Jan 2024 21:07:13 GMT
File type GIF image data, version 89a, 88 x 31\012- data
Hash 0852d285a79d04f03211161a15b098db
5a38bea21f4837cd7955bac7b50a61eadd96f23d
345048ae5248afb4e9977dd80ba624e8c7ed13b46f334a297176015733138a61
GET /static/image/88x31_RTA-5042-1996-1400-1577-RTA_d.gif HTTP/1.1
Host: 5278.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://173.244.209.59/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 26 Nov 2023 04:15:42 GMT
content-type: image/gif
content-length: 745
last-modified: Fri, 10 Apr 2020 15:01:39 GMT
etag: "5e908a53-2e9"
expires: Fri, 01 Dec 2023 05:09:57 GMT
cache-control: max-age=604800
x-xss-protection: 1; mode=block
referrer-policy: no-referrer-when-downgrade
cf-cache-status: HIT
age: 169545
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 82bf4fcfef57b4ee-OSL
X-Firefox-Spdy: h2
waust.at/c.js
200 OK 6.8 kB IP
File type ASCII text, with very long lines (12997), with no line terminators
Hash 45bfa6dedd6f7a9ce980b168e0350ad0
82c6b381da9abd8cb3db22ba4868287fe4e976f1
856420e1f59d0096185cdaac909fa54a9f596f52255d7a5f1ac502403f61d3ab
GET /c.js HTTP/1.1
Host: waust.at
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://173.244.209.59/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 26 Nov 2023 04:15:42 GMT
Content-Type: application/x-javascript
Transfer-Encoding: chunked
Connection: keep-alive
last-modified: Thu, 12 Jan 2023 17:19:30 GMT
etag: W/"63c04122-32c5"
expires: Mon, 27 Nov 2023 04:14:01 GMT
cache-control: max-age=86400
access-control-allow-origin: *
content-encoding: gzip
CF-Cache-Status: HIT
Age: 101
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=kShtscQbulTKsSncwvYVoOt3g2ZTslYXBsA04kjs5J48bqF9UHuUaQuQprdqqB6hUAnDwZkLYSCWopwqZmADDD%2BPvBte%2BNBEJx5NXHd9HXkOSbbKo7d0OLJX"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 82bf4fcffe495691-OSL
alt-svc: h2=":443"; ma=60
5278.cc/data/cache/logging.js?QuV
200 OK 162 B URL GET HTTP/2 5278.cc/data/cache/logging.js?QuV
IP
Certificate IssuerGoogle Trust Services LLC
Subject5278.cc
FingerprintA7:8B:0C:69:3F:1F:90:57:E6:4C:5F:0A:A6:52:71:47:B2:5B:53:48
ValidityWed, 18 Oct 2023 21:07:14 GMT - Tue, 16 Jan 2024 21:07:13 GMT
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
GET /data/cache/logging.js?QuV HTTP/1.1
Host: 5278.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://173.244.209.59/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Date: Sun, 26 Nov 2023 04:15:42 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://5278.cc/data/cache/logging.js?QuV
Cache-Control: max-age=1200
CF-Cache-Status: MISS
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 82bf4fcf8cc65687-OSL
5278.cc/data/cache/style_1_common.css?QuV
301 Moved Permanently 162 B URL GET HTTP/1.1 5278.cc/data/cache/style_1_common.css?QuV
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
GET /data/cache/style_1_common.css?QuV HTTP/1.1
Host: 5278.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://173.244.209.59/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Date: Sun, 26 Nov 2023 04:15:42 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://5278.cc/data/cache/style_1_common.css?QuV
Cache-Control: max-age=1200
CF-Cache-Status: MISS
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 82bf4fcf8e60b4ed-OSL
5278.cc/data/cache/common.js?QuV
200 OK 162 B URL GET HTTP/2 5278.cc/data/cache/common.js?QuV
IP
Certificate IssuerGoogle Trust Services LLC
Subject5278.cc
FingerprintA7:8B:0C:69:3F:1F:90:57:E6:4C:5F:0A:A6:52:71:47:B2:5B:53:48
ValidityWed, 18 Oct 2023 21:07:14 GMT - Tue, 16 Jan 2024 21:07:13 GMT
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
GET /data/cache/common.js?QuV HTTP/1.1
Host: 5278.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://173.244.209.59/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Date: Sun, 26 Nov 2023 04:15:42 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://5278.cc/data/cache/common.js?QuV
Cache-Control: max-age=1200
CF-Cache-Status: MISS
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 82bf4fcf8ab956a5-OSL
5278.cc/data/cache/forum.js?QuV
200 OK 162 B URL GET HTTP/2 5278.cc/data/cache/forum.js?QuV
IP
Certificate IssuerGoogle Trust Services LLC
Subject5278.cc
FingerprintA7:8B:0C:69:3F:1F:90:57:E6:4C:5F:0A:A6:52:71:47:B2:5B:53:48
ValidityWed, 18 Oct 2023 21:07:14 GMT - Tue, 16 Jan 2024 21:07:13 GMT
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
GET /data/cache/forum.js?QuV HTTP/1.1
Host: 5278.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://173.244.209.59/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Date: Sun, 26 Nov 2023 04:15:42 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://5278.cc/data/cache/forum.js?QuV
Cache-Control: max-age=1200
CF-Cache-Status: MISS
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 82bf4fcf8810b4eb-OSL
5278.cc/data/cache/style_1_forum_index.css?QuV
200 OK 162 B URL GET HTTP/2 5278.cc/data/cache/style_1_forum_index.css?QuV
IP
Certificate IssuerGoogle Trust Services LLC
Subject5278.cc
FingerprintA7:8B:0C:69:3F:1F:90:57:E6:4C:5F:0A:A6:52:71:47:B2:5B:53:48
ValidityWed, 18 Oct 2023 21:07:14 GMT - Tue, 16 Jan 2024 21:07:13 GMT
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
GET /data/cache/style_1_forum_index.css?QuV HTTP/1.1
Host: 5278.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://173.244.209.59/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Date: Sun, 26 Nov 2023 04:15:42 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://5278.cc/data/cache/style_1_forum_index.css?QuV
Cache-Control: max-age=1200
CF-Cache-Status: MISS
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 82bf4fcf8a2e5694-OSL
5278.cc/data/cache/md5.js?QuV
301 Moved Permanently 162 B URL GET HTTP/1.1 5278.cc/data/cache/md5.js?QuV
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
GET /data/cache/md5.js?QuV HTTP/1.1
Host: 5278.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://173.244.209.59/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Date: Sun, 26 Nov 2023 04:15:42 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://5278.cc/data/cache/md5.js?QuV
Cache-Control: max-age=1200
CF-Cache-Status: MISS
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 82bf4fcf8cdb5684-OSL
5278.cc/home.php?mod=misc&ac=sendmail&rand=1700971388
200 OK 162 B URL GET HTTP/2 5278.cc/home.php?mod=misc&ac=sendmail&rand=1700971388
IP
Certificate IssuerGoogle Trust Services LLC
Subject5278.cc
FingerprintA7:8B:0C:69:3F:1F:90:57:E6:4C:5F:0A:A6:52:71:47:B2:5B:53:48
ValidityWed, 18 Oct 2023 21:07:14 GMT - Tue, 16 Jan 2024 21:07:13 GMT
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
GET /home.php?mod=misc&ac=sendmail&rand=1700971388 HTTP/1.1
Host: 5278.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://173.244.209.59/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Date: Sun, 26 Nov 2023 04:15:42 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://5278.cc/home.php?mod=misc&ac=sendmail&rand=1700971388
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 82bf4fd04d0d5687-OSL
2158novffp.com/lv/esnk/1942075/code.js
200 OK 39 kB URL GET HTTP/1.1 2158novffp.com/lv/esnk/1942075/code.js
IP
File type ASCII text, with very long lines (65107)
Hash 1ea97a74d912b98ead79ab30e2a299a5
b90ffae3c6b825940f1d600baf7044248dfa5dee
23ba86ffadb7ceeaf442b35e17b342bad43c259822df5567f91891c05c7f7e25
GET /lv/esnk/1942075/code.js HTTP/1.1
Host: 2158novffp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://173.244.209.59/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 26 Nov 2023 04:15:42 GMT
Content-Type: application/javascript
Last-Modified: Wed, 15 Nov 2023 14:55:11 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"6554dbcf-19d6e"
X-JS-AB2: current
Timing-Allow-Origin: *
Accept-CH: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
Content-Encoding: gzip
cse.google.com/cse.js?cx=003255067950578180703:b2mbmgskras
200 OK 2.5 kB URL GET HTTP/2 cse.google.com/cse.js?cx=003255067950578180703:b2mbmgskras
IP
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint4C:0D:17:8C:F1:30:7C:3A:6F:9B:8E:B4:83:0E:5C:BD:ED:17:3E:95
ValidityMon, 23 Oct 2023 11:18:24 GMT - Mon, 15 Jan 2024 11:18:23 GMT
File type ASCII text, with very long lines (613)
Hash 7710653ed3f092f54634e49fcf949f1e
c34d5861a2085c1f72978ea51774e2e5fa47741b
e78d9eda05a76e9e581131e70f36c4510e3d8dd04b91b1cd0d7c0e5ec227bdd2
GET /cse.js?cx=003255067950578180703:b2mbmgskras HTTP/1.1
Host: cse.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://173.244.209.59/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/javascript; charset=UTF-8
cross-origin-resource-policy: cross-origin
content-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-Fi47pVlSZizO34FiwfoO3g' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other
cross-origin-opener-policy: same-origin-allow-popups; report-to="gws"
report-to: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]}
content-disposition: attachment; filename="f.txt"
content-encoding: br
date: Sun, 26 Nov 2023 04:15:42 GMT
server: gws
content-length: 2462
x-xss-protection: 0
x-frame-options: SAMEORIGIN
set-cookie: CONSENT=PENDING+698; expires=Tue, 25-Nov-2025 04:15:42 GMT; path=/; domain=.google.com; Secure
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
expires: Sun, 26 Nov 2023 04:15:42 GMT
cache-control: private
X-Firefox-Spdy: h2
ad.sitemaji.com/ysm_5278.js
200 OK 5.3 kB URL GET HTTP/2 ad.sitemaji.com/ysm_5278.js
IP
Certificate IssuerLet's Encrypt
Subjectsitemaji.com
Fingerprint36:9C:FB:85:3D:AE:19:45:69:4A:13:55:C5:6A:A9:79:F3:A3:26:48
ValidityMon, 20 Nov 2023 06:03:47 GMT - Sun, 18 Feb 2024 06:03:46 GMT
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (17486), with no line terminators
Hash 6ec9e165e7a83eaaa750047547bdf1c1
ebd541f324eda274fa5bfc48828dae1eac366cda
93570b4cf570ef46a440c9dd14a10eb2cea2d4f981966fe43a0b739d074a4806
GET /ysm_5278.js HTTP/1.1
Host: ad.sitemaji.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://173.244.209.59/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.12.1 (Ubuntu)
content-encoding: br
via: 1.1 google
content-length: 5256
date: Sat, 25 Nov 2023 15:24:23 GMT
expires: Sun, 26 Nov 2023 15:24:23 GMT
cache-control: max-age=86400,public
age: 46279
last-modified: Tue, 15 Sep 2020 07:30:49 GMT
etag: W/"5f606da9-444e"
content-type: application/javascript
vary: Accept-Encoding,Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.googletagmanager.com/gtag/js?id=G-59LMKH83ZM
200 OK 91 kB URL GET HTTP/2 www.googletagmanager.com/gtag/js?id=G-59LMKH83ZM
IP
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint37:42:10:B7:89:70:45:51:80:81:66:CE:95:21:72:5D:46:0B:E2:34
ValidityMon, 23 Oct 2023 11:18:19 GMT - Mon, 15 Jan 2024 11:18:18 GMT
File type ASCII text, with very long lines (4179)
Hash e77dd05592a08e4124a410498938093b
7775a2ed67bf7aa095f0863e1274cc6f7dd85ff9
6ab9f336e7691da25d8c58e737a91d6284fa756f46b5779d33eadfefeb71e47c
GET /gtag/js?id=G-59LMKH83ZM HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://173.244.209.59/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sun, 26 Nov 2023 04:15:42 GMT
expires: Sun, 26 Nov 2023 04:15:42 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 91426
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
zerossl.ocsp.sectigo.com/
727 B URL zerossl.ocsp.sectigo.com/
IP
Hash dab76f7651701140c0f886aada76b444
afe36105760316fbeb4b7373396a76479f9e0ad2
9a70014d3452a99b82bf9a41789e91404a54e26c57deab8c2722a56ee40f3392
POST / HTTP/1.1
Host: zerossl.ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 26 Nov 2023 04:15:42 GMT
Content-Type: application/ocsp-response
Content-Length: 727
Connection: keep-alive
Last-Modified: Sat, 25 Nov 2023 10:49:47 GMT
Expires: Sat, 02 Dec 2023 10:49:46 GMT
Etag: "afe36105760316fbeb4b7373396a76479f9e0ad2"
Cache-Control: max-age=541631,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 82bf4fd2aef65696-OSL
zerossl.ocsp.sectigo.com/
727 B URL zerossl.ocsp.sectigo.com/
IP
Hash dab76f7651701140c0f886aada76b444
afe36105760316fbeb4b7373396a76479f9e0ad2
9a70014d3452a99b82bf9a41789e91404a54e26c57deab8c2722a56ee40f3392
POST / HTTP/1.1
Host: zerossl.ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 26 Nov 2023 04:15:42 GMT
Content-Type: application/ocsp-response
Content-Length: 727
Connection: keep-alive
Last-Modified: Sat, 25 Nov 2023 10:49:47 GMT
Expires: Sat, 02 Dec 2023 10:49:46 GMT
Etag: "afe36105760316fbeb4b7373396a76479f9e0ad2"
Cache-Control: max-age=541443,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 82bf4fd2a8740b55-OSL
5278.cc/data/attachment/common/cd/common_328_icon.png
200 OK 162 B URL GET HTTP/2 5278.cc/data/attachment/common/cd/common_328_icon.png
IP
Certificate IssuerGoogle Trust Services LLC
Subject5278.cc
FingerprintA7:8B:0C:69:3F:1F:90:57:E6:4C:5F:0A:A6:52:71:47:B2:5B:53:48
ValidityWed, 18 Oct 2023 21:07:14 GMT - Tue, 16 Jan 2024 21:07:13 GMT
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
GET /data/attachment/common/cd/common_328_icon.png HTTP/1.1
Host: 5278.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://173.244.209.59/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Date: Sun, 26 Nov 2023 04:15:42 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://5278.cc/data/attachment/common/cd/common_328_icon.png
Cache-Control: max-age=1200
CF-Cache-Status: MISS
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 82bf4fd2ee705687-OSL
5278.cc/static/image/common/ad_close.gif
301 Moved Permanently 162 B URL GET HTTP/1.1 5278.cc/static/image/common/ad_close.gif
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
GET /static/image/common/ad_close.gif HTTP/1.1
Host: 5278.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://173.244.209.59/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Date: Sun, 26 Nov 2023 04:15:42 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://5278.cc/static/image/common/ad_close.gif
Cache-Control: max-age=1200
CF-Cache-Status: MISS
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 82bf4fd2ea52b4eb-OSL
5278.cc/data/attachment/common/03/common_195_icon.png
200 OK 162 B URL GET HTTP/2 5278.cc/data/attachment/common/03/common_195_icon.png
IP
Certificate IssuerGoogle Trust Services LLC
Subject5278.cc
FingerprintA7:8B:0C:69:3F:1F:90:57:E6:4C:5F:0A:A6:52:71:47:B2:5B:53:48
ValidityWed, 18 Oct 2023 21:07:14 GMT - Tue, 16 Jan 2024 21:07:13 GMT
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
GET /data/attachment/common/03/common_195_icon.png HTTP/1.1
Host: 5278.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://173.244.209.59/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Date: Sun, 26 Nov 2023 04:15:42 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://5278.cc/data/attachment/common/03/common_195_icon.png
Cache-Control: max-age=1200
CF-Cache-Status: MISS
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 82bf4fd2efa65684-OSL
5278.cc/data/attachment/common/c0/common_219_icon.png
200 OK 162 B URL GET HTTP/2 5278.cc/data/attachment/common/c0/common_219_icon.png
IP
Certificate IssuerGoogle Trust Services LLC
Subject5278.cc
FingerprintA7:8B:0C:69:3F:1F:90:57:E6:4C:5F:0A:A6:52:71:47:B2:5B:53:48
ValidityWed, 18 Oct 2023 21:07:14 GMT - Tue, 16 Jan 2024 21:07:13 GMT
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
GET /data/attachment/common/c0/common_219_icon.png HTTP/1.1
Host: 5278.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://173.244.209.59/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Date: Sun, 26 Nov 2023 04:15:42 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://5278.cc/data/attachment/common/c0/common_219_icon.png
Cache-Control: max-age=1200
CF-Cache-Status: MISS
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 82bf4fd2e856b4ed-OSL
5278.cc/data/attachment/common/e2/common_71_icon.png
200 OK 162 B URL GET HTTP/2 5278.cc/data/attachment/common/e2/common_71_icon.png
IP
Certificate IssuerGoogle Trust Services LLC
Subject5278.cc
FingerprintA7:8B:0C:69:3F:1F:90:57:E6:4C:5F:0A:A6:52:71:47:B2:5B:53:48
ValidityWed, 18 Oct 2023 21:07:14 GMT - Tue, 16 Jan 2024 21:07:13 GMT
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
GET /data/attachment/common/e2/common_71_icon.png HTTP/1.1
Host: 5278.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://173.244.209.59/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Date: Sun, 26 Nov 2023 04:15:42 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://5278.cc/data/attachment/common/e2/common_71_icon.png
Cache-Control: max-age=1200
CF-Cache-Status: MISS
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 82bf4fd2ecef5694-OSL
5278.cc/static/image/common/logo.gif
200 OK 162 B URL GET HTTP/2 5278.cc/static/image/common/logo.gif
IP
Certificate IssuerGoogle Trust Services LLC
Subject5278.cc
FingerprintA7:8B:0C:69:3F:1F:90:57:E6:4C:5F:0A:A6:52:71:47:B2:5B:53:48
ValidityWed, 18 Oct 2023 21:07:14 GMT - Tue, 16 Jan 2024 21:07:13 GMT
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
GET /static/image/common/logo.gif HTTP/1.1
Host: 5278.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://173.244.209.59/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Date: Sun, 26 Nov 2023 04:15:42 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://5278.cc/static/image/common/logo.gif
Cache-Control: max-age=1200
CF-Cache-Status: MISS
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 82bf4fd2ec9356a5-OSL
5278.cc/data/cache/logging.js?QuV
200 OK 1.4 kB URL GET HTTP/2 5278.cc/data/cache/logging.js?QuV
IP
Certificate IssuerGoogle Trust Services LLC
Subject5278.cc
FingerprintA7:8B:0C:69:3F:1F:90:57:E6:4C:5F:0A:A6:52:71:47:B2:5B:53:48
ValidityWed, 18 Oct 2023 21:07:14 GMT - Tue, 16 Jan 2024 21:07:13 GMT
File type ASCII text, with very long lines (390), with no line terminators
Hash 4544d50d2dde9cccea8012a9a5d0cfb7
db2e168b35fb57db8002e3223effcc50a705ed30
843ca4ccc43f7c97d0f24897b2890a713355e0e5e89f6a96001e663e10282b45
GET /data/cache/logging.js?QuV HTTP/1.1
Host: 5278.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://173.244.209.59/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 26 Nov 2023 04:15:42 GMT
content-type: application/javascript; charset=utf-8
vary: Accept-Encoding, Accept-Encoding
last-modified: Thu, 23 Nov 2023 11:00:23 GMT
etag: W/"655f30c7-186"
expires: Thu, 30 Nov 2023 12:13:25 GMT
cache-control: max-age=604800
x-xss-protection: 1; mode=block
referrer-policy: no-referrer-when-downgrade
cf-cache-status: HIT
age: 230537
server: cloudflare
cf-ray: 82bf4fd1b895b4ee-OSL
content-encoding: br
X-Firefox-Spdy: h2
5278.cc/source/plugin/social_login/assets/buttons/facebook.png
301 Moved Permanently 162 B URL GET HTTP/1.1 5278.cc/source/plugin/social_login/assets/buttons/facebook.png
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
GET /source/plugin/social_login/assets/buttons/facebook.png HTTP/1.1
Host: 5278.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://173.244.209.59/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Date: Sun, 26 Nov 2023 04:15:42 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://5278.cc/source/plugin/social_login/assets/buttons/facebook.png
Cache-Control: max-age=1200
CF-Cache-Status: MISS
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 82bf4fd3bab5b4eb-OSL
5278.cc/data/cache/style_1_common.css?QuV
301 Moved Permanently 16 kB URL GET HTTP/1.1 5278.cc/data/cache/style_1_common.css?QuV
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash ec72393c477558defb0c4ad847b0c0e7
9443e257ac28e95035a9dab038cc24ad853d3577
f3d6b1fe8ef249e4af22d396f14436fb1620b247b2692ca7af602d32becbf15a
GET /data/cache/style_1_common.css?QuV HTTP/1.1
Host: 5278.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://173.244.209.59/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 26 Nov 2023 04:15:42 GMT
content-type: text/css
vary: Accept-Encoding, Accept-Encoding
last-modified: Thu, 23 Nov 2023 11:00:24 GMT
etag: W/"655f30c8-10e38"
expires: Sat, 02 Dec 2023 05:53:28 GMT
cache-control: max-age=604800
x-xss-protection: 1; mode=block
referrer-policy: no-referrer-when-downgrade
cf-cache-status: HIT
age: 80533
server: cloudflare
cf-ray: 82bf4fd1b898b4ee-OSL
content-encoding: br
X-Firefox-Spdy: h2
player.hboav.com/guga/images/close-icon-circle.png
200 OK 405 B URL GET HTTP/2 player.hboav.com/guga/images/close-icon-circle.png
IP
Certificate IssuerZeroSSL
Subjectplayer.hboav.com
Fingerprint9F:B9:42:16:DD:30:9A:F3:AF:D9:D0:93:F3:33:02:F3:7F:5C:BD:02
ValidityThu, 16 Nov 2023 00:00:00 GMT - Wed, 14 Feb 2024 23:59:59 GMT
File type PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced\012- data
Hash bc8bf5d1633e548e9a178bf29be30b7b
bd290b6eabd73d2c95db053620797503e9178484
94f575abdb5c45476f9c2b62bbe06fbfacce9d25e95796ffcd07680bd7c6c0bb
GET /guga/images/close-icon-circle.png HTTP/1.1
Host: player.hboav.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://173.244.209.59/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 26 Nov 2023 04:15:42 GMT
content-type: image/png
content-length: 405
last-modified: Thu, 20 Oct 2022 11:09:10 GMT
etag: "63512c56-195"
expires: Mon, 27 Nov 2023 04:15:42 GMT
cache-control: max-age=86400
accept-ranges: bytes
X-Firefox-Spdy: h2
5278.cc/static/image/common/px.png
200 OK 210 B URL GET HTTP/2 5278.cc/static/image/common/px.png
IP
Certificate IssuerGoogle Trust Services LLC
Subject5278.cc
FingerprintA7:8B:0C:69:3F:1F:90:57:E6:4C:5F:0A:A6:52:71:47:B2:5B:53:48
ValidityWed, 18 Oct 2023 21:07:14 GMT - Tue, 16 Jan 2024 21:07:13 GMT
File type PNG image data, 50 x 1, 1-bit colormap, non-interlaced\012- data
Hash 1120da8344d0a52265635f08820867f4
964f9165b23b866cce7dc930566160615b05bbe5
e11970020edea5be0994cf33d189346011dc92c901e946303ba6422b028bc231
GET /static/image/common/px.png HTTP/1.1
Host: 5278.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://5278.cc/data/cache/style_1_common.css?QuV
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 26 Nov 2023 04:15:42 GMT
content-type: image/png
content-length: 210
last-modified: Mon, 30 Mar 2020 00:45:00 GMT
etag: "5e81410c-d2"
expires: Thu, 30 Nov 2023 07:19:26 GMT
cache-control: max-age=604800
x-xss-protection: 1; mode=block
referrer-policy: no-referrer-when-downgrade
cf-cache-status: HIT
age: 248176
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 82bf4fd42a0cb4ee-OSL
X-Firefox-Spdy: h2
5278.cc/static/image/common/nv.png
200 OK 1.9 kB URL GET HTTP/2 5278.cc/static/image/common/nv.png
IP
Certificate IssuerGoogle Trust Services LLC
Subject5278.cc
FingerprintA7:8B:0C:69:3F:1F:90:57:E6:4C:5F:0A:A6:52:71:47:B2:5B:53:48
ValidityWed, 18 Oct 2023 21:07:14 GMT - Tue, 16 Jan 2024 21:07:13 GMT
File type PNG image data, 960 x 66, 8-bit colormap, non-interlaced\012- data
Hash b02c0551341677c53349001303d4151d
6b139c240260f32e51576da4c6116fcccdca9ba7
36b50a166399a572b49419de731c7fcfe8dd5507568a6b5b2810ba52c1ff6495
GET /static/image/common/nv.png HTTP/1.1
Host: 5278.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://5278.cc/data/cache/style_1_common.css?QuV
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 26 Nov 2023 04:15:42 GMT
content-type: image/png
content-length: 1939
last-modified: Mon, 30 Mar 2020 00:45:00 GMT
etag: "5e81410c-793"
expires: Wed, 29 Nov 2023 11:52:14 GMT
cache-control: max-age=604800
x-xss-protection: 1; mode=block
referrer-policy: no-referrer-when-downgrade
cf-cache-status: HIT
age: 318207
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 82bf4fd42a11b4ee-OSL
X-Firefox-Spdy: h2
5278.cc/static/image/common/qmenu.png
200 OK 225 B URL GET HTTP/2 5278.cc/static/image/common/qmenu.png
IP
Certificate IssuerGoogle Trust Services LLC
Subject5278.cc
FingerprintA7:8B:0C:69:3F:1F:90:57:E6:4C:5F:0A:A6:52:71:47:B2:5B:53:48
ValidityWed, 18 Oct 2023 21:07:14 GMT - Tue, 16 Jan 2024 21:07:13 GMT
File type PNG image data, 113 x 53, 2-bit colormap, non-interlaced\012- data
Hash ae1dc766a431b3eecce822e4b96a292b
dafff6b1084db2fb0bef0eb6cd88517e260e8745
16c8426119bd296f4aa1cc8c1b516f8f8603dde679fc97cba75c61b6a719f2ae
GET /static/image/common/qmenu.png HTTP/1.1
Host: 5278.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://5278.cc/data/cache/style_1_common.css?QuV
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 26 Nov 2023 04:15:42 GMT
content-type: image/png
content-length: 225
last-modified: Mon, 30 Mar 2020 00:45:00 GMT
etag: "5e81410c-e1"
expires: Thu, 30 Nov 2023 07:19:26 GMT
cache-control: max-age=604800
x-xss-protection: 1; mode=block
referrer-policy: no-referrer-when-downgrade
cf-cache-status: HIT
age: 248176
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 82bf4fd42a12b4ee-OSL
X-Firefox-Spdy: h2
5278.cc/static/image/common/nv_a.png
200 OK 2.1 kB URL GET HTTP/2 5278.cc/static/image/common/nv_a.png
IP
Certificate IssuerGoogle Trust Services LLC
Subject5278.cc
FingerprintA7:8B:0C:69:3F:1F:90:57:E6:4C:5F:0A:A6:52:71:47:B2:5B:53:48
ValidityWed, 18 Oct 2023 21:07:14 GMT - Tue, 16 Jan 2024 21:07:13 GMT
File type PNG image data, 160 x 132, 8-bit colormap, non-interlaced\012- data
Hash 30006d8eff8bfbb4e29701eb30a18320
ea849a9273076997c43fd178296b77e04f28fa48
1d4bcffdc9c7bfa0d785c9d0db50c2cb94e15c81978d68d0f5a8caa1b201685c
GET /static/image/common/nv_a.png HTTP/1.1
Host: 5278.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://5278.cc/data/cache/style_1_common.css?QuV
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 26 Nov 2023 04:15:42 GMT
content-type: image/png
content-length: 2076
last-modified: Mon, 30 Mar 2020 00:45:00 GMT
etag: "5e81410c-81c"
expires: Thu, 30 Nov 2023 10:41:13 GMT
cache-control: max-age=604800
x-xss-protection: 1; mode=block
referrer-policy: no-referrer-when-downgrade
cf-cache-status: HIT
age: 236069
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 82bf4fd43a16b4ee-OSL
X-Firefox-Spdy: h2
5278.cc/static/image/common/pn.png
200 OK 592 B URL GET HTTP/2 5278.cc/static/image/common/pn.png
IP
Certificate IssuerGoogle Trust Services LLC
Subject5278.cc
FingerprintA7:8B:0C:69:3F:1F:90:57:E6:4C:5F:0A:A6:52:71:47:B2:5B:53:48
ValidityWed, 18 Oct 2023 21:07:14 GMT - Tue, 16 Jan 2024 21:07:13 GMT
File type PNG image data, 500 x 96, 8-bit colormap, non-interlaced\012- data
Hash 7899e665e913b4ba1d8d433e16f99e3a
890f06e456f62b6572100aa640f9ae2f2aab1aa3
525036fe705bc74f4b46e9faa480ecd23f7ffc872974c8f0aaed7aad408de2ad
GET /static/image/common/pn.png HTTP/1.1
Host: 5278.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://5278.cc/data/cache/style_1_common.css?QuV
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 26 Nov 2023 04:15:42 GMT
content-type: image/png
content-length: 592
last-modified: Mon, 30 Mar 2020 00:45:00 GMT
etag: "5e81410c-250"
expires: Wed, 29 Nov 2023 11:52:14 GMT
cache-control: max-age=604800
x-xss-protection: 1; mode=block
referrer-policy: no-referrer-when-downgrade
cf-cache-status: HIT
age: 318207
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 82bf4fd42a0eb4ee-OSL
X-Firefox-Spdy: h2
5278.cc/source/plugin/social_login/assets/buttons/line.png
200 OK 162 B URL GET HTTP/2 5278.cc/source/plugin/social_login/assets/buttons/line.png
IP
Certificate IssuerGoogle Trust Services LLC
Subject5278.cc
FingerprintA7:8B:0C:69:3F:1F:90:57:E6:4C:5F:0A:A6:52:71:47:B2:5B:53:48
ValidityWed, 18 Oct 2023 21:07:14 GMT - Tue, 16 Jan 2024 21:07:13 GMT
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
GET /source/plugin/social_login/assets/buttons/line.png HTTP/1.1
Host: 5278.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://173.244.209.59/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Date: Sun, 26 Nov 2023 04:15:42 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://5278.cc/source/plugin/social_login/assets/buttons/line.png
Cache-Control: max-age=1200
CF-Cache-Status: MISS
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 82bf4fd3bed15687-OSL
5278.cc/data/attachment/common/33/common_28_icon.png
301 Moved Permanently 162 B URL GET HTTP/1.1 5278.cc/data/attachment/common/33/common_28_icon.png
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
GET /data/attachment/common/33/common_28_icon.png HTTP/1.1
Host: 5278.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://173.244.209.59/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Date: Sun, 26 Nov 2023 04:15:42 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://5278.cc/data/attachment/common/33/common_28_icon.png
Cache-Control: max-age=1200
CF-Cache-Status: MISS
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 82bf4fd3c8d7b4ed-OSL
5278.cc/data/attachment/common/4c/common_121_icon.png
301 Moved Permanently 162 B URL GET HTTP/1.1 5278.cc/data/attachment/common/4c/common_121_icon.png
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
GET /data/attachment/common/4c/common_121_icon.png HTTP/1.1
Host: 5278.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://173.244.209.59/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Date: Sun, 26 Nov 2023 04:15:42 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://5278.cc/data/attachment/common/4c/common_121_icon.png
Cache-Control: max-age=1200
CF-Cache-Status: MISS
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 82bf4fd3cd645694-OSL
5278.cc/data/attachment/common/a1/common_42_icon.png
301 Moved Permanently 162 B URL GET HTTP/1.1 5278.cc/data/attachment/common/a1/common_42_icon.png
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
GET /data/attachment/common/a1/common_42_icon.png HTTP/1.1
Host: 5278.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://173.244.209.59/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Date: Sun, 26 Nov 2023 04:15:42 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://5278.cc/data/attachment/common/a1/common_42_icon.png
Cache-Control: max-age=1200
CF-Cache-Status: MISS
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 82bf4fd3ccfd56a5-OSL
5278.cc/source/plugin/social_login/assets/buttons/google.png
301 Moved Permanently 162 B URL GET HTTP/1.1 5278.cc/source/plugin/social_login/assets/buttons/google.png
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
GET /source/plugin/social_login/assets/buttons/google.png HTTP/1.1
Host: 5278.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://173.244.209.59/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Date: Sun, 26 Nov 2023 04:15:42 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://5278.cc/source/plugin/social_login/assets/buttons/google.png
Cache-Control: max-age=1200
CF-Cache-Status: MISS
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 82bf4fd3c83c5684-OSL
www.google.com/cse/static/style/look/v4/default.css
200 OK 1.3 kB URL GET HTTP/2 www.google.com/cse/static/style/look/v4/default.css
IP
Certificate IssuerGoogle Trust Services LLC
Subjectwww.google.com
FingerprintB0:8E:97:10:7E:30:90:F6:42:A1:32:63:5C:78:27:D3:A8:F1:05:D1
ValidityMon, 23 Oct 2023 11:24:57 GMT - Mon, 15 Jan 2024 11:24:56 GMT
Hash c14e45e189f801818b14f1315605a632
dd7e7fb9d156b343beef0155b41da1c847d69e41
dcec22bbcb68119d6c7d6d5e088fb82183a9826d0c9e3403f1386fd837f06a89
GET /cse/static/style/look/v4/default.css HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://173.244.209.59/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/prose-team
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="prose-team"
report-to: {"group":"prose-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/prose-team"}]}
content-length: 1345
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sun, 26 Nov 2023 03:53:44 GMT
expires: Sun, 26 Nov 2023 04:43:44 GMT
cache-control: public, max-age=3000
age: 1318
last-modified: Wed, 17 Jun 2020 00:00:00 GMT
content-type: text/css
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.google.com/cse/static/element/2b35e7a15e0e30e2/default+zh_TW.css
200 OK 9.1 kB URL GET HTTP/2 www.google.com/cse/static/element/2b35e7a15e0e30e2/default+zh_TW.css
IP
Certificate IssuerGoogle Trust Services LLC
Subjectwww.google.com
FingerprintB0:8E:97:10:7E:30:90:F6:42:A1:32:63:5C:78:27:D3:A8:F1:05:D1
ValidityMon, 23 Oct 2023 11:24:57 GMT - Mon, 15 Jan 2024 11:24:56 GMT
Hash baccb7180fe061b63ed061ec10c3b0c8
bfb31590ba6e758eb8f25735b564d7e4a0919025
a5402de70228d4bf5379b518225b702918f6ae277e9293f9d16334c2b1fa31e3
GET /cse/static/element/2b35e7a15e0e30e2/default+zh_TW.css HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://173.244.209.59/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/css
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/prose-team
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="prose-team"
report-to: {"group":"prose-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/prose-team"}]}
content-length: 9068
date: Sun, 26 Nov 2023 04:15:42 GMT
expires: Sun, 26 Nov 2023 04:15:42 GMT
cache-control: private, max-age=31536000
last-modified: Tue, 07 Nov 2023 17:44:48 GMT
x-content-type-options: nosniff
link: <https://www.adsensecustomsearchads.com>; rel="preconnect"
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
5278.cc/static/image/common/pt_item.png
200 OK 3.6 kB URL GET HTTP/2 5278.cc/static/image/common/pt_item.png
IP
Certificate IssuerGoogle Trust Services LLC
Subject5278.cc
FingerprintA7:8B:0C:69:3F:1F:90:57:E6:4C:5F:0A:A6:52:71:47:B2:5B:53:48
ValidityWed, 18 Oct 2023 21:07:14 GMT - Tue, 16 Jan 2024 21:07:13 GMT
File type PNG image data, 10 x 10, 8-bit colormap, non-interlaced\012- data
Hash 7c38a4ac700c4df1cce9ebbf9b5909a3
35bed3762414178d208e54c9c34ba6276de8cb46
5c872d994d0fcb495c1ab307b17fed7fa88db8d4b30dd10a4a164d50dd49ca2c
GET /static/image/common/pt_item.png HTTP/1.1
Host: 5278.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://5278.cc/data/cache/style_1_common.css?QuV
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 26 Nov 2023 04:15:42 GMT
content-type: image/png
content-length: 3598
last-modified: Mon, 30 Mar 2020 00:45:00 GMT
etag: "5e81410c-e0e"
expires: Thu, 30 Nov 2023 10:41:13 GMT
cache-control: max-age=604800
x-xss-protection: 1; mode=block
referrer-policy: no-referrer-when-downgrade
cf-cache-status: HIT
age: 236069
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 82bf4fd53aa0b4ee-OSL
X-Firefox-Spdy: h2
5278.cc/static/image/common/titlebg.png
200 OK 315 B URL GET HTTP/2 5278.cc/static/image/common/titlebg.png
IP
Certificate IssuerGoogle Trust Services LLC
Subject5278.cc
FingerprintA7:8B:0C:69:3F:1F:90:57:E6:4C:5F:0A:A6:52:71:47:B2:5B:53:48
ValidityWed, 18 Oct 2023 21:07:14 GMT - Tue, 16 Jan 2024 21:07:13 GMT
File type PNG image data, 50 x 31, 8-bit colormap, non-interlaced\012- data
Hash 47c44f22ac9221047b99987333a9d103
39e32fe8674c5cdc97e3e7ddf9aab1e46c067de1
4d880b3c0c01656faf44c1b2c8bad99aba326551487156da633e3e6e21ecfe9f
GET /static/image/common/titlebg.png HTTP/1.1
Host: 5278.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://5278.cc/data/cache/style_1_common.css?QuV
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 26 Nov 2023 04:15:42 GMT
content-type: image/png
content-length: 315
last-modified: Mon, 30 Mar 2020 00:45:00 GMT
etag: "5e81410c-13b"
expires: Sat, 02 Dec 2023 08:39:55 GMT
cache-control: max-age=604800
x-xss-protection: 1; mode=block
referrer-policy: no-referrer-when-downgrade
cf-cache-status: HIT
age: 70547
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 82bf4fd53aa2b4ee-OSL
X-Firefox-Spdy: h2
5278.cc/js/c.js?v=QuV
200 OK 1.4 kB IP
Certificate IssuerGoogle Trust Services LLC
Subject5278.cc
FingerprintA7:8B:0C:69:3F:1F:90:57:E6:4C:5F:0A:A6:52:71:47:B2:5B:53:48
ValidityWed, 18 Oct 2023 21:07:14 GMT - Tue, 16 Jan 2024 21:07:13 GMT
File type ASCII text, with CRLF line terminators
Hash 610229a30b44c028c0772a75dfd09d54
0fd27e03f3b6d22291b0d5d8c7c60eb95924ac68
490203ff03e29a4337cbbf6b86f37dc527668f3822877ba5b2b98c5fb2ffaca4
GET /js/c.js?v=QuV HTTP/1.1
Host: 5278.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://173.244.209.59/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 26 Nov 2023 04:15:42 GMT
content-type: application/javascript; charset=utf-8
vary: Accept-Encoding, Accept-Encoding
last-modified: Thu, 17 Aug 2023 21:03:41 GMT
etag: W/"64de8b2d-3b3"
expires: Thu, 30 Nov 2023 12:13:25 GMT
cache-control: max-age=604800
x-xss-protection: 1; mode=block
referrer-policy: no-referrer-when-downgrade
cf-cache-status: HIT
age: 230537
server: cloudflare
cf-ray: 82bf4fcfef56b4ee-OSL
content-encoding: br
X-Firefox-Spdy: h2
5278.cc/static/image/common/search.png
200 OK 1.3 kB URL GET HTTP/2 5278.cc/static/image/common/search.png
IP
Certificate IssuerGoogle Trust Services LLC
Subject5278.cc
FingerprintA7:8B:0C:69:3F:1F:90:57:E6:4C:5F:0A:A6:52:71:47:B2:5B:53:48
ValidityWed, 18 Oct 2023 21:07:14 GMT - Tue, 16 Jan 2024 21:07:13 GMT
File type PNG image data, 61 x 250, 8-bit colormap, non-interlaced\012- data
Hash 9be14dfd232fdfa065ee9b918b1c3d52
2509b10bc5604e142c610224a67e617eb2720d6a
53011dd9bfefc55a2234215ed39e524e53324e392625af441e5fe2b479050805
GET /static/image/common/search.png HTTP/1.1
Host: 5278.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://5278.cc/data/cache/style_1_common.css?QuV
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 26 Nov 2023 04:15:42 GMT
content-type: image/png
content-length: 1301
last-modified: Mon, 30 Mar 2020 00:45:00 GMT
etag: "5e81410c-515"
expires: Fri, 01 Dec 2023 07:23:42 GMT
cache-control: max-age=604800
x-xss-protection: 1; mode=block
referrer-policy: no-referrer-when-downgrade
cf-cache-status: HIT
age: 161520
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 82bf4fd53a9fb4ee-OSL
X-Firefox-Spdy: h2
5278.cc/data/attachment/common/6e/common_29_icon.png
301 Moved Permanently 162 B URL GET HTTP/1.1 5278.cc/data/attachment/common/6e/common_29_icon.png
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
GET /data/attachment/common/6e/common_29_icon.png HTTP/1.1
Host: 5278.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://173.244.209.59/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Date: Sun, 26 Nov 2023 04:15:43 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://5278.cc/data/attachment/common/6e/common_29_icon.png
Cache-Control: max-age=1200
CF-Cache-Status: MISS
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 82bf4fd539745684-OSL
5278.cc/static/image/common/collapsed_no.gif
200 OK 162 B URL GET HTTP/2 5278.cc/static/image/common/collapsed_no.gif
IP
Certificate IssuerGoogle Trust Services LLC
Subject5278.cc
FingerprintA7:8B:0C:69:3F:1F:90:57:E6:4C:5F:0A:A6:52:71:47:B2:5B:53:48
ValidityWed, 18 Oct 2023 21:07:14 GMT - Tue, 16 Jan 2024 21:07:13 GMT
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
GET /static/image/common/collapsed_no.gif HTTP/1.1
Host: 5278.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://173.244.209.59/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Date: Sun, 26 Nov 2023 04:15:43 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://5278.cc/static/image/common/collapsed_no.gif
Cache-Control: max-age=1200
CF-Cache-Status: MISS
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 82bf4fd53e165694-OSL
5278.cc/data/attachment/common/cd/common_328_icon.png
200 OK 5.0 kB URL GET HTTP/2 5278.cc/data/attachment/common/cd/common_328_icon.png
IP
Certificate IssuerGoogle Trust Services LLC
Subject5278.cc
FingerprintA7:8B:0C:69:3F:1F:90:57:E6:4C:5F:0A:A6:52:71:47:B2:5B:53:48
ValidityWed, 18 Oct 2023 21:07:14 GMT - Tue, 16 Jan 2024 21:07:13 GMT
File type PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced\012- data
Hash 15ec14dd4c67ea4d308ae69e30f8f50f
cef3570499fb2f32989900b9f14bf4c75d59f3a3
41ccb97cae3ab140126113e0cf566f3b91c2995eec3ccce805fb84f43e6d6663
GET /data/attachment/common/cd/common_328_icon.png HTTP/1.1
Host: 5278.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://173.244.209.59/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 26 Nov 2023 04:15:43 GMT
content-type: image/png
content-length: 5022
last-modified: Sun, 26 Jul 2020 11:47:47 GMT
etag: "5f1d6d63-139e"
expires: Fri, 01 Dec 2023 05:09:56 GMT
cache-control: max-age=604800
x-xss-protection: 1; mode=block
referrer-policy: no-referrer-when-downgrade
cf-cache-status: HIT
age: 169547
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 82bf4fd5eb17b4ee-OSL
X-Firefox-Spdy: h2
5278.cc/static/image/common/ad_close.gif
301 Moved Permanently 1.2 kB URL GET HTTP/1.1 5278.cc/static/image/common/ad_close.gif
IP
File type GIF image data, version 89a, 35 x 12\012- data
Hash dd83c8f21fdec164b443d3195b7981ac
ad2a090f200b235a4bec90a015d8d653f21b264a
f9eeb5e73fad8cc698764c87163fcb72e9651a37f67455861ab8a189daefeb5f
GET /static/image/common/ad_close.gif HTTP/1.1
Host: 5278.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://173.244.209.59/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 26 Nov 2023 04:15:43 GMT
content-type: image/gif
content-length: 1164
last-modified: Mon, 30 Mar 2020 00:44:56 GMT
etag: "5e814108-48c"
expires: Sat, 02 Dec 2023 04:26:46 GMT
cache-control: max-age=604800
x-xss-protection: 1; mode=block
referrer-policy: no-referrer-when-downgrade
cf-cache-status: HIT
age: 85737
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 82bf4fd5eb1ab4ee-OSL
X-Firefox-Spdy: h2
5278.cc/data/attachment/common/e7/common_360_icon.png
301 Moved Permanently 162 B URL GET HTTP/1.1 5278.cc/data/attachment/common/e7/common_360_icon.png
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
GET /data/attachment/common/e7/common_360_icon.png HTTP/1.1
Host: 5278.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://173.244.209.59/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Date: Sun, 26 Nov 2023 04:15:43 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://5278.cc/data/attachment/common/e7/common_360_icon.png
Cache-Control: max-age=1200
CF-Cache-Status: MISS
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 82bf4fd53f735687-OSL
5278.cc/data/attachment/common/37/common_23_icon.png
301 Moved Permanently 162 B URL GET HTTP/1.1 5278.cc/data/attachment/common/37/common_23_icon.png
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
GET /data/attachment/common/37/common_23_icon.png HTTP/1.1
Host: 5278.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://173.244.209.59/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Date: Sun, 26 Nov 2023 04:15:43 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://5278.cc/data/attachment/common/37/common_23_icon.png
Cache-Control: max-age=1200
CF-Cache-Status: MISS
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 82bf4fd539c4b4ed-OSL
5278.cc/data/attachment/common/a8/common_4_icon.png
200 OK 162 B URL GET HTTP/2 5278.cc/data/attachment/common/a8/common_4_icon.png
IP
Certificate IssuerGoogle Trust Services LLC
Subject5278.cc
FingerprintA7:8B:0C:69:3F:1F:90:57:E6:4C:5F:0A:A6:52:71:47:B2:5B:53:48
ValidityWed, 18 Oct 2023 21:07:14 GMT - Tue, 16 Jan 2024 21:07:13 GMT
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
GET /data/attachment/common/a8/common_4_icon.png HTTP/1.1
Host: 5278.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://173.244.209.59/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Date: Sun, 26 Nov 2023 04:15:43 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://5278.cc/data/attachment/common/a8/common_4_icon.png
Cache-Control: max-age=1200
CF-Cache-Status: MISS
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 82bf4fd53dd156a5-OSL
5278.cc/data/attachment/common/c3/common_362_icon.png
200 OK 162 B URL GET HTTP/2 5278.cc/data/attachment/common/c3/common_362_icon.png
IP
Certificate IssuerGoogle Trust Services LLC
Subject5278.cc
FingerprintA7:8B:0C:69:3F:1F:90:57:E6:4C:5F:0A:A6:52:71:47:B2:5B:53:48
ValidityWed, 18 Oct 2023 21:07:14 GMT - Tue, 16 Jan 2024 21:07:13 GMT
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
GET /data/attachment/common/c3/common_362_icon.png HTTP/1.1
Host: 5278.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://173.244.209.59/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Date: Sun, 26 Nov 2023 04:15:43 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://5278.cc/data/attachment/common/c3/common_362_icon.png
Cache-Control: max-age=1200
CF-Cache-Status: MISS
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 82bf4fd53babb4eb-OSL
5278.cc/data/attachment/common/03/common_195_icon.png
200 OK 2.9 kB URL GET HTTP/2 5278.cc/data/attachment/common/03/common_195_icon.png
IP
Certificate IssuerGoogle Trust Services LLC
Subject5278.cc
FingerprintA7:8B:0C:69:3F:1F:90:57:E6:4C:5F:0A:A6:52:71:47:B2:5B:53:48
ValidityWed, 18 Oct 2023 21:07:14 GMT - Tue, 16 Jan 2024 21:07:13 GMT
File type PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced\012- data
Hash 936dceb4bbd8c4e25b82cf42a1e88ac2
25d0e0b9665fa10f2dfd0289153bc07172e6e5f4
4b479bad3291bd0270304c18b8287fa149d63f4214b6972f61438a9141fc613c
GET /data/attachment/common/03/common_195_icon.png HTTP/1.1
Host: 5278.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://173.244.209.59/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 26 Nov 2023 04:15:43 GMT
content-type: image/png
content-length: 2904
last-modified: Sun, 26 Jul 2020 11:45:40 GMT
etag: "5f1d6ce4-b58"
expires: Thu, 30 Nov 2023 07:19:26 GMT
cache-control: max-age=604800
x-xss-protection: 1; mode=block
referrer-policy: no-referrer-when-downgrade
cf-cache-status: HIT
age: 248177
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 82bf4fd5fb20b4ee-OSL
X-Firefox-Spdy: h2
5278.cc/data/attachment/common/c0/common_219_icon.png
200 OK 2.7 kB URL GET HTTP/2 5278.cc/data/attachment/common/c0/common_219_icon.png
IP
Certificate IssuerGoogle Trust Services LLC
Subject5278.cc
FingerprintA7:8B:0C:69:3F:1F:90:57:E6:4C:5F:0A:A6:52:71:47:B2:5B:53:48
ValidityWed, 18 Oct 2023 21:07:14 GMT - Tue, 16 Jan 2024 21:07:13 GMT
File type PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced\012- data
Hash 64e3b3255e83b1efe400733f9c610190
053728dc1136a2f9b0d2e14380d54dbb4a048f5a
2b508155da8148b5a85c563355a99dd53dff0d49d55f4f82b4f516dbbe88348e
GET /data/attachment/common/c0/common_219_icon.png HTTP/1.1
Host: 5278.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://173.244.209.59/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 26 Nov 2023 04:15:43 GMT
content-type: image/png
content-length: 2746
last-modified: Sat, 12 Nov 2022 03:20:00 GMT
etag: "636f10e0-aba"
expires: Fri, 01 Dec 2023 05:09:56 GMT
cache-control: max-age=604800
x-xss-protection: 1; mode=block
referrer-policy: no-referrer-when-downgrade
cf-cache-status: HIT
age: 169547
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 82bf4fd5fb24b4ee-OSL
X-Firefox-Spdy: h2
5278.cc/data/attachment/common/e2/common_71_icon.png
200 OK 2.9 kB URL GET HTTP/2 5278.cc/data/attachment/common/e2/common_71_icon.png
IP
Certificate IssuerGoogle Trust Services LLC
Subject5278.cc
FingerprintA7:8B:0C:69:3F:1F:90:57:E6:4C:5F:0A:A6:52:71:47:B2:5B:53:48
ValidityWed, 18 Oct 2023 21:07:14 GMT - Tue, 16 Jan 2024 21:07:13 GMT
File type PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced\012- data
Hash 936dceb4bbd8c4e25b82cf42a1e88ac2
25d0e0b9665fa10f2dfd0289153bc07172e6e5f4
4b479bad3291bd0270304c18b8287fa149d63f4214b6972f61438a9141fc613c
GET /data/attachment/common/e2/common_71_icon.png HTTP/1.1
Host: 5278.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://173.244.209.59/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 26 Nov 2023 04:15:43 GMT
content-type: image/png
content-length: 2904
last-modified: Sun, 26 Jul 2020 11:45:55 GMT
etag: "5f1d6cf3-b58"
expires: Thu, 30 Nov 2023 07:19:26 GMT
cache-control: max-age=604800
x-xss-protection: 1; mode=block
referrer-policy: no-referrer-when-downgrade
cf-cache-status: HIT
age: 248177
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 82bf4fd5fb28b4ee-OSL
X-Firefox-Spdy: h2
5278.cc/static/image/common/logo.gif
200 OK 6.5 kB URL GET HTTP/2 5278.cc/static/image/common/logo.gif
IP
Certificate IssuerGoogle Trust Services LLC
Subject5278.cc
FingerprintA7:8B:0C:69:3F:1F:90:57:E6:4C:5F:0A:A6:52:71:47:B2:5B:53:48
ValidityWed, 18 Oct 2023 21:07:14 GMT - Tue, 16 Jan 2024 21:07:13 GMT
File type GIF image data, version 89a, 189 x 75\012- data
Hash 0a6e792ff3245b440d179d93e441657b
884afd8fbb9d2e6ca100cd35a1ae2cfd381dd998
8d981bc1081026aa5424fed7ad76d889c272480019c76fe12bc6190c9a6b6f47
GET /static/image/common/logo.gif HTTP/1.1
Host: 5278.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://173.244.209.59/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 26 Nov 2023 04:15:43 GMT
content-type: image/gif
content-length: 6541
last-modified: Fri, 24 May 2019 23:06:44 GMT
etag: "5ce87904-198d"
expires: Fri, 01 Dec 2023 07:23:39 GMT
cache-control: max-age=604800
x-xss-protection: 1; mode=block
referrer-policy: no-referrer-when-downgrade
cf-cache-status: HIT
age: 161524
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 82bf4fd60b2eb4ee-OSL
X-Firefox-Spdy: h2
5278.cc/source/plugin/social_login/assets/buttons/facebook.png
301 Moved Permanently 479 B URL GET HTTP/1.1 5278.cc/source/plugin/social_login/assets/buttons/facebook.png
IP
File type PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced\012- data
Hash d5c34de107dd32c7df0bec7813262bd5
a625fdec2324c3260e5d49f2728c2246e45aed41
75231a24e74865e2ae3f24bbfa5303c6e16e1946b7a655412c4b25b94fa77a1e
GET /source/plugin/social_login/assets/buttons/facebook.png HTTP/1.1
Host: 5278.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://173.244.209.59/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 26 Nov 2023 04:15:43 GMT
content-type: image/png
content-length: 479
last-modified: Sun, 09 Jan 2022 01:53:59 GMT
etag: "61da4037-1df"
expires: Tue, 28 Nov 2023 17:21:51 GMT
cache-control: max-age=604800
x-xss-protection: 1; mode=block
referrer-policy: no-referrer-when-downgrade
cf-cache-status: HIT
age: 384832
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 82bf4fd60b2fb4ee-OSL
X-Firefox-Spdy: h2
5278.cc/data/attachment/common/33/common_28_icon.png
301 Moved Permanently 1.0 kB URL GET HTTP/1.1 5278.cc/data/attachment/common/33/common_28_icon.png
IP
File type PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced\012- data
Hash 21579c4afbbf8d3c30c77f85f8f23980
625d0dfbb27ed3fa69e930580c3b1b15ab873cd7
18c0357f4622e0897373e79a7870e701de1197a3d1e15dc11bf0690d72cf3d74
GET /data/attachment/common/33/common_28_icon.png HTTP/1.1
Host: 5278.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://173.244.209.59/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 26 Nov 2023 04:15:43 GMT
content-type: image/png
content-length: 1036
last-modified: Sun, 26 Jul 2020 11:40:50 GMT
etag: "5f1d6bc2-40c"
expires: Thu, 30 Nov 2023 07:19:23 GMT
cache-control: max-age=604800
x-xss-protection: 1; mode=block
referrer-policy: no-referrer-when-downgrade
cf-cache-status: HIT
age: 248180
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 82bf4fd61b51b4ee-OSL
X-Firefox-Spdy: h2
5278.cc/source/plugin/social_login/assets/buttons/line.png
200 OK 966 B URL GET HTTP/2 5278.cc/source/plugin/social_login/assets/buttons/line.png
IP
Certificate IssuerGoogle Trust Services LLC
Subject5278.cc
FingerprintA7:8B:0C:69:3F:1F:90:57:E6:4C:5F:0A:A6:52:71:47:B2:5B:53:48
ValidityWed, 18 Oct 2023 21:07:14 GMT - Tue, 16 Jan 2024 21:07:13 GMT
File type PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced\012- data
Hash 233491ed5d8180d6cec63ae655f1111f
c96d96b32f65b0daf5e1e89566fcd3123366e917
f259a09db366f75f80f71c185cdefc331858d1e83aa2f73e418db216672b8e18
GET /source/plugin/social_login/assets/buttons/line.png HTTP/1.1
Host: 5278.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://173.244.209.59/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 26 Nov 2023 04:15:43 GMT
content-type: image/png
content-length: 966
last-modified: Sun, 09 Jan 2022 01:29:45 GMT
etag: "61da3a89-3c6"
expires: Wed, 29 Nov 2023 11:52:14 GMT
cache-control: max-age=604800
x-xss-protection: 1; mode=block
referrer-policy: no-referrer-when-downgrade
cf-cache-status: HIT
age: 318209
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 82bf4fd61b50b4ee-OSL
X-Firefox-Spdy: h2
5278.cc/data/attachment/common/4c/common_121_icon.png
301 Moved Permanently 2.7 kB URL GET HTTP/1.1 5278.cc/data/attachment/common/4c/common_121_icon.png
IP
File type PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced\012- data
Hash 64e3b3255e83b1efe400733f9c610190
053728dc1136a2f9b0d2e14380d54dbb4a048f5a
2b508155da8148b5a85c563355a99dd53dff0d49d55f4f82b4f516dbbe88348e
GET /data/attachment/common/4c/common_121_icon.png HTTP/1.1
Host: 5278.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://173.244.209.59/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 26 Nov 2023 04:15:43 GMT
content-type: image/png
content-length: 2746
last-modified: Sun, 26 Jul 2020 11:51:36 GMT
etag: "5f1d6e48-aba"
expires: Wed, 29 Nov 2023 11:52:14 GMT
cache-control: max-age=604800
x-xss-protection: 1; mode=block
referrer-policy: no-referrer-when-downgrade
cf-cache-status: HIT
age: 318209
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 82bf4fd63b5bb4ee-OSL
X-Firefox-Spdy: h2
5278.cc/source/plugin/social_login/assets/buttons/google.png
301 Moved Permanently 1.2 kB URL GET HTTP/1.1 5278.cc/source/plugin/social_login/assets/buttons/google.png
IP
File type PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced\012- data
Hash b7711d4ec17c711479e4ace63f8cff55
27c9d009d6a10ebe0db2a680328bdeeb3043ad7a
038229f3ce86c9c45ab62ccfd129799c46e75223d78ae7e5365704a54ee3dbfb
GET /source/plugin/social_login/assets/buttons/google.png HTTP/1.1
Host: 5278.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://173.244.209.59/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 26 Nov 2023 04:15:43 GMT
content-type: image/png
content-length: 1199
last-modified: Sun, 09 Jan 2022 01:55:08 GMT
etag: "61da407c-4af"
expires: Fri, 01 Dec 2023 09:41:49 GMT
cache-control: max-age=604800
x-xss-protection: 1; mode=block
referrer-policy: no-referrer-when-downgrade
cf-cache-status: HIT
age: 153234
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 82bf4fd63b5db4ee-OSL
X-Firefox-Spdy: h2
5278.cc/data/attachment/common/a1/common_42_icon.png
301 Moved Permanently 1.9 kB URL GET HTTP/1.1 5278.cc/data/attachment/common/a1/common_42_icon.png
IP
File type PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced\012- data
Hash 4c94573d66c6dcb95b3759cb9221190b
dc38afeeaa46cf9cf6807a8f2737b69c23ea7030
72c32be94d54066b98339a6b47393629d713bedfb5402cfd018974d8f78f59a0
GET /data/attachment/common/a1/common_42_icon.png HTTP/1.1
Host: 5278.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://173.244.209.59/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 26 Nov 2023 04:15:43 GMT
content-type: image/png
content-length: 1915
last-modified: Sun, 26 Jul 2020 11:38:54 GMT
etag: "5f1d6b4e-77b"
expires: Fri, 01 Dec 2023 09:41:54 GMT
cache-control: max-age=604800
x-xss-protection: 1; mode=block
referrer-policy: no-referrer-when-downgrade
cf-cache-status: HIT
age: 153229
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 82bf4fd63b5cb4ee-OSL
X-Firefox-Spdy: h2
5278.cc/data/attachment/common/34/common_30_icon.png
200 OK 162 B URL GET HTTP/2 5278.cc/data/attachment/common/34/common_30_icon.png
IP
Certificate IssuerGoogle Trust Services LLC
Subject5278.cc
FingerprintA7:8B:0C:69:3F:1F:90:57:E6:4C:5F:0A:A6:52:71:47:B2:5B:53:48
ValidityWed, 18 Oct 2023 21:07:14 GMT - Tue, 16 Jan 2024 21:07:13 GMT
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
GET /data/attachment/common/34/common_30_icon.png HTTP/1.1
Host: 5278.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://173.244.209.59/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Date: Sun, 26 Nov 2023 04:15:43 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://5278.cc/data/attachment/common/34/common_30_icon.png
Cache-Control: max-age=1200
CF-Cache-Status: MISS
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 82bf4fd5f9f35684-OSL
5278.cc/data/attachment/common/98/common_20_icon.png
301 Moved Permanently 162 B URL GET HTTP/1.1 5278.cc/data/attachment/common/98/common_20_icon.png
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
GET /data/attachment/common/98/common_20_icon.png HTTP/1.1
Host: 5278.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://173.244.209.59/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Date: Sun, 26 Nov 2023 04:15:43 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://5278.cc/data/attachment/common/98/common_20_icon.png
Cache-Control: max-age=1200
CF-Cache-Status: MISS
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 82bf4fd61c3cb4eb-OSL
5278.cc/data/attachment/common/ca/common_321_icon.png
200 OK 162 B URL GET HTTP/2 5278.cc/data/attachment/common/ca/common_321_icon.png
IP
Certificate IssuerGoogle Trust Services LLC
Subject5278.cc
FingerprintA7:8B:0C:69:3F:1F:90:57:E6:4C:5F:0A:A6:52:71:47:B2:5B:53:48
ValidityWed, 18 Oct 2023 21:07:14 GMT - Tue, 16 Jan 2024 21:07:13 GMT
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
GET /data/attachment/common/ca/common_321_icon.png HTTP/1.1
Host: 5278.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://173.244.209.59/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Date: Sun, 26 Nov 2023 04:15:43 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://5278.cc/data/attachment/common/ca/common_321_icon.png
Cache-Control: max-age=1200
CF-Cache-Status: MISS
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 82bf4fd5fe905694-OSL
ads.adxadserv.com/ad?spotid=5ee74fb661d6e22d6c6bca31&type=300x250&output=html&extra1=0&ref=http%3A//173.244.209.59/&dt=1700972146204&screen=1280x1024&tags=
200 OK 1.1 kB URL GET HTTP/1.1 ads.adxadserv.com/ad?spotid=5ee74fb661d6e22d6c6bca31&type=300x250&output=html&extra1=0&ref=http%3A//173.244.209.59/&dt=1700972146204&screen=1280x1024&tags=
IP
ASN #39572 DataWeb Global Group B.V.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (579)
Hash 6854ed49fa7259279e99e55a30ba765e
95d669d36fa74e80a71e040aee7cce46a88014d8
bc0d3a49d0de5507e14b3f768d838a551be6cd0c6d46d009eee00e0a89ac3fb7
GET /ad?spotid=5ee74fb661d6e22d6c6bca31&type=300x250&output=html&extra1=0&ref=http%3A//173.244.209.59/&dt=1700972146204&screen=1280x1024&tags= HTTP/1.1
Host: ads.adxadserv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://173.244.209.59/
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 26 Nov 2023 04:15:43 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 1089
Connection: keep-alive
Cache-Control: no-cache
5278.cc/data/attachment/common/6e/common_29_icon.png
301 Moved Permanently 4.2 kB URL GET HTTP/1.1 5278.cc/data/attachment/common/6e/common_29_icon.png
IP
File type PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced\012- data
Hash 2cb14e521d08e3a464c103a65aadbec4
633121b3f9b74e15d24fe126366c9fec5554b4d5
6b5a1952745947d099e9ecf9ed581ff15b62e3bf6387484331644f44e35a827f
GET /data/attachment/common/6e/common_29_icon.png HTTP/1.1
Host: 5278.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://173.244.209.59/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 26 Nov 2023 04:15:43 GMT
content-type: image/png
content-length: 4247
last-modified: Sun, 26 Jul 2020 11:42:22 GMT
etag: "5f1d6c1e-1097"
expires: Fri, 01 Dec 2023 05:09:56 GMT
cache-control: max-age=604800
x-xss-protection: 1; mode=block
referrer-policy: no-referrer-when-downgrade
cf-cache-status: HIT
age: 169546
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 82bf4fd6bbafb4ee-OSL
X-Firefox-Spdy: h2
5278.cc/static/image/common/collapsed_no.gif
200 OK 275 B URL GET HTTP/2 5278.cc/static/image/common/collapsed_no.gif
IP
Certificate IssuerGoogle Trust Services LLC
Subject5278.cc
FingerprintA7:8B:0C:69:3F:1F:90:57:E6:4C:5F:0A:A6:52:71:47:B2:5B:53:48
ValidityWed, 18 Oct 2023 21:07:14 GMT - Tue, 16 Jan 2024 21:07:13 GMT
File type PNG image data, 17 x 17, 4-bit colormap, non-interlaced\012- data
Hash 932fc2d611f31101dfff16f4173694d2
65976fa41b7588b22f9ca8afcd4dbc08ca00f629
26848782aeb4790ecda1fbe7d6994726a22cde2a5ed89bac7cc13db5ee7db968
GET /static/image/common/collapsed_no.gif HTTP/1.1
Host: 5278.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://173.244.209.59/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 26 Nov 2023 04:15:43 GMT
content-type: image/gif
content-length: 275
last-modified: Mon, 30 Mar 2020 00:44:58 GMT
etag: "5e81410a-113"
expires: Fri, 01 Dec 2023 05:09:56 GMT
cache-control: max-age=604800
x-xss-protection: 1; mode=block
referrer-policy: no-referrer-when-downgrade
cf-cache-status: HIT
age: 169547
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 82bf4fd6bbb1b4ee-OSL
X-Firefox-Spdy: h2
5278.cc/data/attachment/common/e7/common_360_icon.png
301 Moved Permanently 1.9 kB URL GET HTTP/1.1 5278.cc/data/attachment/common/e7/common_360_icon.png
IP
File type PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced\012- data
Hash 4c94573d66c6dcb95b3759cb9221190b
dc38afeeaa46cf9cf6807a8f2737b69c23ea7030
72c32be94d54066b98339a6b47393629d713bedfb5402cfd018974d8f78f59a0
GET /data/attachment/common/e7/common_360_icon.png HTTP/1.1
Host: 5278.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://173.244.209.59/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 26 Nov 2023 04:15:43 GMT
content-type: image/png
content-length: 1915
last-modified: Sun, 26 Jul 2020 11:38:37 GMT
etag: "5f1d6b3d-77b"
expires: Tue, 28 Nov 2023 19:51:15 GMT
cache-control: max-age=604800
x-xss-protection: 1; mode=block
referrer-policy: no-referrer-when-downgrade
cf-cache-status: HIT
age: 375868
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 82bf4fd6bbb4b4ee-OSL
X-Firefox-Spdy: h2
5278.cc/data/attachment/common/17/common_43_icon.png
200 OK 162 B URL GET HTTP/2 5278.cc/data/attachment/common/17/common_43_icon.png
IP
Certificate IssuerGoogle Trust Services LLC
Subject5278.cc
FingerprintA7:8B:0C:69:3F:1F:90:57:E6:4C:5F:0A:A6:52:71:47:B2:5B:53:48
ValidityWed, 18 Oct 2023 21:07:14 GMT - Tue, 16 Jan 2024 21:07:13 GMT
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
GET /data/attachment/common/17/common_43_icon.png HTTP/1.1
Host: 5278.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://173.244.209.59/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Date: Sun, 26 Nov 2023 04:15:43 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://5278.cc/data/attachment/common/17/common_43_icon.png
Cache-Control: max-age=1200
CF-Cache-Status: MISS
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 82bf4fd61fc85687-OSL
5278.cc/data/attachment/common/3c/common_21_icon.png
200 OK 162 B URL GET HTTP/2 5278.cc/data/attachment/common/3c/common_21_icon.png
IP
Certificate IssuerGoogle Trust Services LLC
Subject5278.cc
FingerprintA7:8B:0C:69:3F:1F:90:57:E6:4C:5F:0A:A6:52:71:47:B2:5B:53:48
ValidityWed, 18 Oct 2023 21:07:14 GMT - Tue, 16 Jan 2024 21:07:13 GMT
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
GET /data/attachment/common/3c/common_21_icon.png HTTP/1.1
Host: 5278.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://173.244.209.59/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Date: Sun, 26 Nov 2023 04:15:43 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://5278.cc/data/attachment/common/3c/common_21_icon.png
Cache-Control: max-age=1200
CF-Cache-Status: MISS
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 82bf4fd61e4956a5-OSL
5278.cc/data/attachment/common/ec/common_127_icon.png
200 OK 162 B URL GET HTTP/2 5278.cc/data/attachment/common/ec/common_127_icon.png
IP
Certificate IssuerGoogle Trust Services LLC
Subject5278.cc
FingerprintA7:8B:0C:69:3F:1F:90:57:E6:4C:5F:0A:A6:52:71:47:B2:5B:53:48
ValidityWed, 18 Oct 2023 21:07:14 GMT - Tue, 16 Jan 2024 21:07:13 GMT
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
GET /data/attachment/common/ec/common_127_icon.png HTTP/1.1
Host: 5278.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://173.244.209.59/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Date: Sun, 26 Nov 2023 04:15:43 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://5278.cc/data/attachment/common/ec/common_127_icon.png
Cache-Control: max-age=1200
CF-Cache-Status: MISS
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 82bf4fd61a77b4ed-OSL
5278.cc/data/attachment/common/37/common_23_icon.png
301 Moved Permanently 1.9 kB URL GET HTTP/1.1 5278.cc/data/attachment/common/37/common_23_icon.png
IP
File type PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced\012- data
Hash 4c94573d66c6dcb95b3759cb9221190b
dc38afeeaa46cf9cf6807a8f2737b69c23ea7030
72c32be94d54066b98339a6b47393629d713bedfb5402cfd018974d8f78f59a0
GET /data/attachment/common/37/common_23_icon.png HTTP/1.1
Host: 5278.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://173.244.209.59/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 26 Nov 2023 04:15:43 GMT
content-type: image/png
content-length: 1915
last-modified: Sun, 26 Jul 2020 11:37:54 GMT
etag: "5f1d6b12-77b"
expires: Wed, 29 Nov 2023 11:52:14 GMT
cache-control: max-age=604800
x-xss-protection: 1; mode=block
referrer-policy: no-referrer-when-downgrade
cf-cache-status: HIT
age: 318209
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 82bf4fd6dbc6b4ee-OSL
X-Firefox-Spdy: h2
5278.cc/data/attachment/common/a8/common_4_icon.png
200 OK 4.2 kB URL GET HTTP/2 5278.cc/data/attachment/common/a8/common_4_icon.png
IP
Certificate IssuerGoogle Trust Services LLC
Subject5278.cc
FingerprintA7:8B:0C:69:3F:1F:90:57:E6:4C:5F:0A:A6:52:71:47:B2:5B:53:48
ValidityWed, 18 Oct 2023 21:07:14 GMT - Tue, 16 Jan 2024 21:07:13 GMT
File type PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced\012- data
Hash 2cb14e521d08e3a464c103a65aadbec4
633121b3f9b74e15d24fe126366c9fec5554b4d5
6b5a1952745947d099e9ecf9ed581ff15b62e3bf6387484331644f44e35a827f
GET /data/attachment/common/a8/common_4_icon.png HTTP/1.1
Host: 5278.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://173.244.209.59/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 26 Nov 2023 04:15:43 GMT
content-type: image/png
content-length: 4247
last-modified: Sun, 26 Jul 2020 11:42:31 GMT
etag: "5f1d6c27-1097"
expires: Sat, 02 Dec 2023 08:39:51 GMT
cache-control: max-age=604800
x-xss-protection: 1; mode=block
referrer-policy: no-referrer-when-downgrade
cf-cache-status: HIT
age: 70552
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 82bf4fd6dbc9b4ee-OSL
X-Firefox-Spdy: h2
5278.cc/data/attachment/common/6f/common_18_icon.png
200 OK 162 B URL GET HTTP/2 5278.cc/data/attachment/common/6f/common_18_icon.png
IP
Certificate IssuerGoogle Trust Services LLC
Subject5278.cc
FingerprintA7:8B:0C:69:3F:1F:90:57:E6:4C:5F:0A:A6:52:71:47:B2:5B:53:48
ValidityWed, 18 Oct 2023 21:07:14 GMT - Tue, 16 Jan 2024 21:07:13 GMT
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
GET /data/attachment/common/6f/common_18_icon.png HTTP/1.1
Host: 5278.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://173.244.209.59/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Date: Sun, 26 Nov 2023 04:15:43 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://5278.cc/data/attachment/common/6f/common_18_icon.png
Cache-Control: max-age=1200
CF-Cache-Status: MISS
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 82bf4fd68c76b4eb-OSL
5278.cc/data/attachment/common/c3/common_362_icon.png
200 OK 2.9 kB URL GET HTTP/2 5278.cc/data/attachment/common/c3/common_362_icon.png
IP
Certificate IssuerGoogle Trust Services LLC
Subject5278.cc
FingerprintA7:8B:0C:69:3F:1F:90:57:E6:4C:5F:0A:A6:52:71:47:B2:5B:53:48
ValidityWed, 18 Oct 2023 21:07:14 GMT - Tue, 16 Jan 2024 21:07:13 GMT
File type PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced\012- data
Hash 244cda212fce6a59c48a410c3105209c
776f3f6bdbe87a309f23cc2fe88d10cb8ff483e2
4ce289f9d44e9e30b6bcdc056f3ba4b33d826200853f62021a57137165606e12
GET /data/attachment/common/c3/common_362_icon.png HTTP/1.1
Host: 5278.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://173.244.209.59/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 26 Nov 2023 04:15:43 GMT
content-type: image/png
content-length: 2857
last-modified: Sun, 26 Jul 2020 11:40:14 GMT
etag: "5f1d6b9e-b29"
expires: Wed, 29 Nov 2023 11:52:14 GMT
cache-control: max-age=604800
x-xss-protection: 1; mode=block
referrer-policy: no-referrer-when-downgrade
cf-cache-status: HIT
age: 318209
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 82bf4fd6ebd0b4ee-OSL
X-Firefox-Spdy: h2
5278.cc/data/attachment/common/98/common_20_icon.png
301 Moved Permanently 4.2 kB URL GET HTTP/1.1 5278.cc/data/attachment/common/98/common_20_icon.png
IP
File type PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced\012- data
Hash 2cb14e521d08e3a464c103a65aadbec4
633121b3f9b74e15d24fe126366c9fec5554b4d5
6b5a1952745947d099e9ecf9ed581ff15b62e3bf6387484331644f44e35a827f
GET /data/attachment/common/98/common_20_icon.png HTTP/1.1
Host: 5278.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://173.244.209.59/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 26 Nov 2023 04:15:43 GMT
content-type: image/png
content-length: 4247
last-modified: Sun, 26 Jul 2020 11:43:23 GMT
etag: "5f1d6c5b-1097"
expires: Sat, 02 Dec 2023 07:28:55 GMT
cache-control: max-age=604800
x-xss-protection: 1; mode=block
referrer-policy: no-referrer-when-downgrade
cf-cache-status: HIT
age: 74808
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 82bf4fd6fbdab4ee-OSL
X-Firefox-Spdy: h2
5278.cc/data/attachment/common/34/common_30_icon.png
200 OK 4.2 kB URL GET HTTP/2 5278.cc/data/attachment/common/34/common_30_icon.png
IP
Certificate IssuerGoogle Trust Services LLC
Subject5278.cc
FingerprintA7:8B:0C:69:3F:1F:90:57:E6:4C:5F:0A:A6:52:71:47:B2:5B:53:48
ValidityWed, 18 Oct 2023 21:07:14 GMT - Tue, 16 Jan 2024 21:07:13 GMT
File type PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced\012- data
Hash 2cb14e521d08e3a464c103a65aadbec4
633121b3f9b74e15d24fe126366c9fec5554b4d5
6b5a1952745947d099e9ecf9ed581ff15b62e3bf6387484331644f44e35a827f
GET /data/attachment/common/34/common_30_icon.png HTTP/1.1
Host: 5278.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://173.244.209.59/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 26 Nov 2023 04:15:43 GMT
content-type: image/png
content-length: 4247
last-modified: Sun, 26 Jul 2020 11:42:14 GMT
etag: "5f1d6c16-1097"
expires: Thu, 30 Nov 2023 07:19:25 GMT
cache-control: max-age=604800
x-xss-protection: 1; mode=block
referrer-policy: no-referrer-when-downgrade
cf-cache-status: HIT
age: 248178
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 82bf4fd6fbd9b4ee-OSL
X-Firefox-Spdy: h2
5278.cc/data/attachment/common/1f/common_19_icon.png
200 OK 162 B URL GET HTTP/2 5278.cc/data/attachment/common/1f/common_19_icon.png
IP
Certificate IssuerGoogle Trust Services LLC
Subject5278.cc
FingerprintA7:8B:0C:69:3F:1F:90:57:E6:4C:5F:0A:A6:52:71:47:B2:5B:53:48
ValidityWed, 18 Oct 2023 21:07:14 GMT - Tue, 16 Jan 2024 21:07:13 GMT
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
GET /data/attachment/common/1f/common_19_icon.png HTTP/1.1
Host: 5278.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://173.244.209.59/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Date: Sun, 26 Nov 2023 04:15:43 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://5278.cc/data/attachment/common/1f/common_19_icon.png
Cache-Control: max-age=1200
CF-Cache-Status: MISS
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 82bf4fd65a595684-OSL
player.hboav.com/guga/images/utn/009.jpg
200 OK 101 kB URL GET HTTP/2 player.hboav.com/guga/images/utn/009.jpg
IP
Certificate IssuerZeroSSL
Subjectplayer.hboav.com
Fingerprint9F:B9:42:16:DD:30:9A:F3:AF:D9:D0:93:F3:33:02:F3:7F:5C:BD:02
ValidityThu, 16 Nov 2023 00:00:00 GMT - Wed, 14 Feb 2024 23:59:59 GMT
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=0], baseline, precision 8, 815x119, components 3\012- data
Size 101 kB (101219 bytes)
Hash 60f0b5895854c83ea0ed6fdc14a94e34
af2eb4ce5ecca7285b403f6f1bce58d78752a0f0
65e8c7c5e6f451eac37851cb9f0a018df3245c9592eadf754a4537a751bc53ae
GET /guga/images/utn/009.jpg HTTP/1.1
Host: player.hboav.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://173.244.209.59/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 26 Nov 2023 04:15:42 GMT
content-type: image/jpeg
content-length: 101219
last-modified: Mon, 17 Jan 2022 05:08:27 GMT
etag: "61e4f9cb-18b63"
expires: Mon, 27 Nov 2023 04:15:42 GMT
cache-control: max-age=86400
accept-ranges: bytes
X-Firefox-Spdy: h2
player.hboav.com/guga/20231113_square.html
200 OK 168 B URL GET HTTP/1.1 player.hboav.com/guga/20231113_square.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF line terminators
Hash d544e7f83d516953498600cc7e76a0ab
ad375dc281f43ff1a85acff971c378c39a53d2bb
24a322f732741ff2e4845284bb32e12c100952231fd2c84acdcfbc58438a3ca1
GET /guga/20231113_square.html HTTP/1.1
Host: player.hboav.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://173.244.209.59/
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 26 Nov 2023 04:15:43 GMT
Content-Type: text/html; charset=utf-8
Last-Modified: Mon, 13 Nov 2023 15:28:57 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"655240b9-d2"
Content-Encoding: gzip
5278.cc/data/attachment/common/d6/common_40_icon.png
301 Moved Permanently 162 B URL GET HTTP/1.1 5278.cc/data/attachment/common/d6/common_40_icon.png
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
GET /data/attachment/common/d6/common_40_icon.png HTTP/1.1
Host: 5278.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://173.244.209.59/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Date: Sun, 26 Nov 2023 04:15:43 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://5278.cc/data/attachment/common/d6/common_40_icon.png
Cache-Control: max-age=1200
CF-Cache-Status: MISS
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 82bf4fd6decf56a5-OSL
5278.cc/data/attachment/common/6f/common_329_icon.png
200 OK 162 B URL GET HTTP/2 5278.cc/data/attachment/common/6f/common_329_icon.png
IP
Certificate IssuerGoogle Trust Services LLC
Subject5278.cc
FingerprintA7:8B:0C:69:3F:1F:90:57:E6:4C:5F:0A:A6:52:71:47:B2:5B:53:48
ValidityWed, 18 Oct 2023 21:07:14 GMT - Tue, 16 Jan 2024 21:07:13 GMT
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
GET /data/attachment/common/6f/common_329_icon.png HTTP/1.1
Host: 5278.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://173.244.209.59/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Date: Sun, 26 Nov 2023 04:15:43 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://5278.cc/data/attachment/common/6f/common_329_icon.png
Cache-Control: max-age=1200
CF-Cache-Status: MISS
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 82bf4fd6bef95694-OSL
5278.cc/data/attachment/common/ea/common_64_icon.png
301 Moved Permanently 162 B URL GET HTTP/1.1 5278.cc/data/attachment/common/ea/common_64_icon.png
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
GET /data/attachment/common/ea/common_64_icon.png HTTP/1.1
Host: 5278.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://173.244.209.59/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Date: Sun, 26 Nov 2023 04:15:43 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://5278.cc/data/attachment/common/ea/common_64_icon.png
Cache-Control: max-age=1200
CF-Cache-Status: MISS
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 82bf4fd72ab15684-OSL
5278.cc/data/attachment/common/ca/common_321_icon.png
200 OK 4.2 kB URL GET HTTP/2 5278.cc/data/attachment/common/ca/common_321_icon.png
IP
Certificate IssuerGoogle Trust Services LLC
Subject5278.cc
FingerprintA7:8B:0C:69:3F:1F:90:57:E6:4C:5F:0A:A6:52:71:47:B2:5B:53:48
ValidityWed, 18 Oct 2023 21:07:14 GMT - Tue, 16 Jan 2024 21:07:13 GMT
File type PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced\012- data
Hash 2cb14e521d08e3a464c103a65aadbec4
633121b3f9b74e15d24fe126366c9fec5554b4d5
6b5a1952745947d099e9ecf9ed581ff15b62e3bf6387484331644f44e35a827f
GET /data/attachment/common/ca/common_321_icon.png HTTP/1.1
Host: 5278.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://173.244.209.59/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 26 Nov 2023 04:15:43 GMT
content-type: image/png
content-length: 4247
last-modified: Sun, 26 Jul 2020 11:42:06 GMT
etag: "5f1d6c0e-1097"
expires: Tue, 28 Nov 2023 19:51:15 GMT
cache-control: max-age=604800
x-xss-protection: 1; mode=block
referrer-policy: no-referrer-when-downgrade
cf-cache-status: HIT
age: 375868
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 82bf4fd78c18b4ee-OSL
X-Firefox-Spdy: h2
5278.cc/data/attachment/common/34/common_41_icon.png
200 OK 162 B URL GET HTTP/2 5278.cc/data/attachment/common/34/common_41_icon.png
IP
Certificate IssuerGoogle Trust Services LLC
Subject5278.cc
FingerprintA7:8B:0C:69:3F:1F:90:57:E6:4C:5F:0A:A6:52:71:47:B2:5B:53:48
ValidityWed, 18 Oct 2023 21:07:14 GMT - Tue, 16 Jan 2024 21:07:13 GMT
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
GET /data/attachment/common/34/common_41_icon.png HTTP/1.1
Host: 5278.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://173.244.209.59/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Date: Sun, 26 Nov 2023 04:15:43 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://5278.cc/data/attachment/common/34/common_41_icon.png
Cache-Control: max-age=1200
CF-Cache-Status: MISS
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 82bf4fd6d8245687-OSL
5278.cc/data/attachment/common/d6/common_39_icon.png
200 OK 162 B URL GET HTTP/2 5278.cc/data/attachment/common/d6/common_39_icon.png
IP
Certificate IssuerGoogle Trust Services LLC
Subject5278.cc
FingerprintA7:8B:0C:69:3F:1F:90:57:E6:4C:5F:0A:A6:52:71:47:B2:5B:53:48
ValidityWed, 18 Oct 2023 21:07:14 GMT - Tue, 16 Jan 2024 21:07:13 GMT
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
GET /data/attachment/common/d6/common_39_icon.png HTTP/1.1
Host: 5278.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://173.244.209.59/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Date: Sun, 26 Nov 2023 04:15:43 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://5278.cc/data/attachment/common/d6/common_39_icon.png
Cache-Control: max-age=1200
CF-Cache-Status: MISS
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 82bf4fd6dadfb4ed-OSL
5278.cc/data/attachment/common/a5/common_38_icon.png
301 Moved Permanently 162 B URL GET HTTP/1.1 5278.cc/data/attachment/common/a5/common_38_icon.png
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
GET /data/attachment/common/a5/common_38_icon.png HTTP/1.1
Host: 5278.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://173.244.209.59/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Date: Sun, 26 Nov 2023 04:15:43 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://5278.cc/data/attachment/common/a5/common_38_icon.png
Cache-Control: max-age=1200
CF-Cache-Status: MISS
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 82bf4fd6fca9b4eb-OSL
5278.cc/data/attachment/common/57/common_235_icon.png
200 OK 162 B URL GET HTTP/2 5278.cc/data/attachment/common/57/common_235_icon.png
IP
Certificate IssuerGoogle Trust Services LLC
Subject5278.cc
FingerprintA7:8B:0C:69:3F:1F:90:57:E6:4C:5F:0A:A6:52:71:47:B2:5B:53:48
ValidityWed, 18 Oct 2023 21:07:14 GMT - Tue, 16 Jan 2024 21:07:13 GMT
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
GET /data/attachment/common/57/common_235_icon.png HTTP/1.1
Host: 5278.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://173.244.209.59/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Date: Sun, 26 Nov 2023 04:15:43 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://5278.cc/data/attachment/common/57/common_235_icon.png
Cache-Control: max-age=1200
CF-Cache-Status: MISS
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 82bf4fd79b0d5684-OSL
5278.cc/home.php?mod=misc&ac=sendmail&rand=1700971388
200 OK 1.0 kB URL GET HTTP/2 5278.cc/home.php?mod=misc&ac=sendmail&rand=1700971388
IP
Certificate IssuerGoogle Trust Services LLC
Subject5278.cc
FingerprintA7:8B:0C:69:3F:1F:90:57:E6:4C:5F:0A:A6:52:71:47:B2:5B:53:48
ValidityWed, 18 Oct 2023 21:07:14 GMT - Tue, 16 Jan 2024 21:07:13 GMT
Hash f6f3b8c8e0ad1295e29bb49c655741af
8c5778c1065e5e28a85e4156d09cb0ab935688bb
05f89e2d8d86e9a8d80ffd2f481e0b012c0025c8662b37286454668fb09ebaa0
GET /home.php?mod=misc&ac=sendmail&rand=1700971388 HTTP/1.1
Host: 5278.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://173.244.209.59/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 26 Nov 2023 04:15:43 GMT
content-type: text/javascript;charset=UTF-8
set-cookie: zgIu_2132_saltkey=o1KQJyEy; expires=Tue, 26-Dec-2023 04:15:43 GMT; Max-Age=2592000; path=/; secure; HttpOnly
zgIu_2132_lastvisit=1700968543; expires=Tue, 26-Dec-2023 04:15:43 GMT; Max-Age=2592000; path=/; secure
zgIu_2132_sid=TTT6MK; expires=Mon, 27-Nov-2023 04:15:43 GMT; Max-Age=86400; path=/; secure
zgIu_2132_lastact=1700972143%09home.php%09misc; expires=Mon, 27-Nov-2023 04:15:43 GMT; Max-Age=86400; path=/; secure
zgIu_2132_sendmail=1; expires=Sun, 26-Nov-2023 04:20:43 GMT; Max-Age=300; path=/; secure
x-xss-protection: 1; mode=block
referrer-policy: no-referrer-when-downgrade
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 82bf4fd2893db4ee-OSL
content-encoding: br
X-Firefox-Spdy: h2
player.hboav.com/guga/20231123_square.html
200 OK 1.2 kB URL GET HTTP/2 player.hboav.com/guga/20231123_square.html
IP
Certificate IssuerZeroSSL
Subjectplayer.hboav.com
Fingerprint9F:B9:42:16:DD:30:9A:F3:AF:D9:D0:93:F3:33:02:F3:7F:5C:BD:02
ValidityThu, 16 Nov 2023 00:00:00 GMT - Wed, 14 Feb 2024 23:59:59 GMT
File type gzip compressed data, from Unix\012- data
Hash 3c1b14cc464c36613e7290c0a2c23afb
05982c3dd3a1d328418c73b158b570762513637f
c57ae4c3d99cd518d36073c29152a21e70527d1490743e89f91afe88fbbb9c7f
GET /guga/20231123_square.html HTTP/1.1
Host: player.hboav.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://173.244.209.59/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 26 Nov 2023 04:15:42 GMT
content-type: text/html; charset=utf-8
last-modified: Thu, 23 Nov 2023 00:14:31 GMT
vary: Accept-Encoding
etag: W/"655e9967-cf"
content-encoding: gzip
X-Firefox-Spdy: h2
5278.cc/data/attachment/common/ec/common_127_icon.png
200 OK 4.2 kB URL GET HTTP/2 5278.cc/data/attachment/common/ec/common_127_icon.png
IP
Certificate IssuerGoogle Trust Services LLC
Subject5278.cc
FingerprintA7:8B:0C:69:3F:1F:90:57:E6:4C:5F:0A:A6:52:71:47:B2:5B:53:48
ValidityWed, 18 Oct 2023 21:07:14 GMT - Tue, 16 Jan 2024 21:07:13 GMT
File type PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced\012- data
Hash 2cb14e521d08e3a464c103a65aadbec4
633121b3f9b74e15d24fe126366c9fec5554b4d5
6b5a1952745947d099e9ecf9ed581ff15b62e3bf6387484331644f44e35a827f
GET /data/attachment/common/ec/common_127_icon.png HTTP/1.1
Host: 5278.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://173.244.209.59/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 26 Nov 2023 04:15:43 GMT
content-type: image/png
content-length: 4247
last-modified: Sun, 26 Jul 2020 11:42:56 GMT
etag: "5f1d6c40-1097"
expires: Wed, 29 Nov 2023 11:52:14 GMT
cache-control: max-age=604800
x-xss-protection: 1; mode=block
referrer-policy: no-referrer-when-downgrade
cf-cache-status: HIT
age: 318209
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 82bf4fd7ec6eb4ee-OSL
X-Firefox-Spdy: h2
5278.cc/data/attachment/common/6f/common_18_icon.png
200 OK 4.2 kB URL GET HTTP/2 5278.cc/data/attachment/common/6f/common_18_icon.png
IP
Certificate IssuerGoogle Trust Services LLC
Subject5278.cc
FingerprintA7:8B:0C:69:3F:1F:90:57:E6:4C:5F:0A:A6:52:71:47:B2:5B:53:48
ValidityWed, 18 Oct 2023 21:07:14 GMT - Tue, 16 Jan 2024 21:07:13 GMT
File type PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced\012- data
Hash 2cb14e521d08e3a464c103a65aadbec4
633121b3f9b74e15d24fe126366c9fec5554b4d5
6b5a1952745947d099e9ecf9ed581ff15b62e3bf6387484331644f44e35a827f
GET /data/attachment/common/6f/common_18_icon.png HTTP/1.1
Host: 5278.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://173.244.209.59/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 26 Nov 2023 04:15:43 GMT
content-type: image/png
content-length: 4247
last-modified: Sun, 26 Jul 2020 11:42:39 GMT
etag: "5f1d6c2f-1097"
expires: Fri, 01 Dec 2023 05:09:56 GMT
cache-control: max-age=604800
x-xss-protection: 1; mode=block
referrer-policy: no-referrer-when-downgrade
cf-cache-status: HIT
age: 169546
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 82bf4fd7ec6fb4ee-OSL
X-Firefox-Spdy: h2
5278.cc/static/image/common/scrolltop.png
200 OK 1.4 kB URL GET HTTP/2 5278.cc/static/image/common/scrolltop.png
IP
Certificate IssuerGoogle Trust Services LLC
Subject5278.cc
FingerprintA7:8B:0C:69:3F:1F:90:57:E6:4C:5F:0A:A6:52:71:47:B2:5B:53:48
ValidityWed, 18 Oct 2023 21:07:14 GMT - Tue, 16 Jan 2024 21:07:13 GMT
File type PNG image data, 80 x 120, 8-bit colormap, interlaced\012- data
Hash e619a381b11184c28e12b6c199d075d7
934e3ace2c81b51f5c804143c2e1a124a6a9b77d
c9a11fc108c17c57cc8196558ec7a9eba3833a0a7023717251bf2a0ed25244fb
GET /static/image/common/scrolltop.png HTTP/1.1
Host: 5278.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://5278.cc/data/cache/style_1_common.css?QuV
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 26 Nov 2023 04:15:43 GMT
content-type: image/png
content-length: 1383
last-modified: Mon, 30 Mar 2020 00:45:00 GMT
etag: "5e81410c-567"
expires: Thu, 30 Nov 2023 07:19:26 GMT
cache-control: max-age=604800
x-xss-protection: 1; mode=block
referrer-policy: no-referrer-when-downgrade
cf-cache-status: HIT
age: 248177
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 82bf4fd7ec71b4ee-OSL
X-Firefox-Spdy: h2
5278.cc/data/attachment/common/ba/common_364_icon.png
301 Moved Permanently 162 B URL GET HTTP/1.1 5278.cc/data/attachment/common/ba/common_364_icon.png
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
GET /data/attachment/common/ba/common_364_icon.png HTTP/1.1
Host: 5278.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://173.244.209.59/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Date: Sun, 26 Nov 2023 04:15:43 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://5278.cc/data/attachment/common/ba/common_364_icon.png
Cache-Control: max-age=1200
CF-Cache-Status: MISS
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 82bf4fd74f0356a5-OSL
5278.cc/data/attachment/common/03/common_63_icon.png
200 OK 162 B URL GET HTTP/2 5278.cc/data/attachment/common/03/common_63_icon.png
IP
Certificate IssuerGoogle Trust Services LLC
Subject5278.cc
FingerprintA7:8B:0C:69:3F:1F:90:57:E6:4C:5F:0A:A6:52:71:47:B2:5B:53:48
ValidityWed, 18 Oct 2023 21:07:14 GMT - Tue, 16 Jan 2024 21:07:13 GMT
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
GET /data/attachment/common/03/common_63_icon.png HTTP/1.1
Host: 5278.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://173.244.209.59/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Date: Sun, 26 Nov 2023 04:15:43 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://5278.cc/data/attachment/common/03/common_63_icon.png
Cache-Control: max-age=1200
CF-Cache-Status: MISS
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 82bf4fd77f755694-OSL
5278.cc/data/attachment/common/fe/common_330_icon.png
200 OK 162 B URL GET HTTP/2 5278.cc/data/attachment/common/fe/common_330_icon.png
IP
Certificate IssuerGoogle Trust Services LLC
Subject5278.cc
FingerprintA7:8B:0C:69:3F:1F:90:57:E6:4C:5F:0A:A6:52:71:47:B2:5B:53:48
ValidityWed, 18 Oct 2023 21:07:14 GMT - Tue, 16 Jan 2024 21:07:13 GMT
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
GET /data/attachment/common/fe/common_330_icon.png HTTP/1.1
Host: 5278.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://173.244.209.59/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Date: Sun, 26 Nov 2023 04:15:43 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://5278.cc/data/attachment/common/fe/common_330_icon.png
Cache-Control: max-age=1200
CF-Cache-Status: MISS
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 82bf4fd7987d5687-OSL
static.adxadserv.com/css/wm.css
200 OK 651 B URL GET HTTP/1.1 static.adxadserv.com/css/wm.css
IP
ASN #60068 Datacamp Limited
Requested by http://ads.adxadserv.com/ad?spotid=5ee74fb661d6e22d6c6bca31&type=300x250&output=html&extra1=0&ref=http%3A//173.244.209.59/&dt=1700972146204&screen=1280x1024&tags=
File type ASCII text, with CRLF line terminators
Hash 8e650a1494467e89a838c1c05d42c8b4
a15e7cbefcc644f3b4a333b05708868e7759bed5
425ada380ee0eea11f25db022a49856977415561b9728b9add91e5a79edd10e3
GET /css/wm.css HTTP/1.1
Host: static.adxadserv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://ads.adxadserv.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 26 Nov 2023 04:15:43 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Mon, 03 Aug 2020 09:41:06 GMT
ETag: W/"5f27dbb2-711"
Server: CDN77-Turbo
X-77-NZT: EQwBuUwJDQH3Sw0BAA
X-77-NZT-Ray: c0a4cc28f702970b6fc66265c7443218
X-Accel-Expires: @1701939865
X-Accel-Date: 1700903204
X-Cache-LB: HIT
X-Age-LB: 68939
X-77-POP: stockholmSE
X-77-Cache: HIT
X-77-Age: 68939
Content-Encoding: gzip
sc.cx732.com/stub/300x250.png
200 OK 16 kB URL GET HTTP/2 sc.cx732.com/stub/300x250.png
IP
Requested by http://ads.adxadserv.com/ad?spotid=5ee74fb661d6e22d6c6bca31&type=300x250&output=html&extra1=0&ref=http%3A//173.244.209.59/&dt=1700972146204&screen=1280x1024&tags=
Certificate IssuerLet's Encrypt
Subjectcx732.com
Fingerprint6E:01:6D:54:18:56:1E:86:95:E2:A7:60:1C:87:6D:05:04:CE:3D:4F
ValidityThu, 12 Oct 2023 12:41:58 GMT - Wed, 10 Jan 2024 12:41:57 GMT
File type PNG image data, 600 x 500, 8-bit/color RGBA, non-interlaced\012- data
Hash c4734ef1a9f7862df5002d44a171e428
8d713be28c1d0c93ef5fe60bbe02b8916b781da0
101856b2a08f1a7da0ca75dfc34ddb8cc5ba662f85e52321e3d218fb63999ce7
GET /stub/300x250.png HTTP/1.1
Host: sc.cx732.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://ads.adxadserv.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 26 Nov 2023 04:15:43 GMT
content-type: image/png
content-length: 15975
last-modified: Mon, 28 Feb 2022 13:02:07 GMT
etag: "621cc7cf-3e67"
cache-control: max-age=14400
cf-cache-status: HIT
age: 1246
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Hg9iTWop0Vd%2BPnqlhEyRPuVz%2FHK%2Bf7nqgHHIQJmjcozd6Snv0qhxLhHRCXiqghWP7ux3VanOSI5Ifw9wfn4SX%2FEAPuAYQu7iZuQJSUd0aGF6MPQza%2F6EjpAoEFdqBqE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82bf4fd89bf056b1-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
player.hboav.com/guga/mid_index.php
200 OK 4.8 kB URL GET HTTP/2 player.hboav.com/guga/mid_index.php
IP
Certificate IssuerZeroSSL
Subjectplayer.hboav.com
Fingerprint9F:B9:42:16:DD:30:9A:F3:AF:D9:D0:93:F3:33:02:F3:7F:5C:BD:02
ValidityThu, 16 Nov 2023 00:00:00 GMT - Wed, 14 Feb 2024 23:59:59 GMT
File type gzip compressed data, from Unix\012- data
Hash 493663c46db034ab11170de6551e4795
e97c4461734dca757589cba6cb1a081669dc631b
87174764b44302baacc5e926029ccc37b68e8d7b67af149e790789075e1a55f1
GET /guga/mid_index.php HTTP/1.1
Host: player.hboav.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://173.244.209.59/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 26 Nov 2023 04:15:42 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
5278.cc/data/attachment/common/d6/common_40_icon.png
301 Moved Permanently 2.7 kB URL GET HTTP/1.1 5278.cc/data/attachment/common/d6/common_40_icon.png
IP
File type PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced\012- data
Hash 64e3b3255e83b1efe400733f9c610190
053728dc1136a2f9b0d2e14380d54dbb4a048f5a
2b508155da8148b5a85c563355a99dd53dff0d49d55f4f82b4f516dbbe88348e
GET /data/attachment/common/d6/common_40_icon.png HTTP/1.1
Host: 5278.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://173.244.209.59/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 26 Nov 2023 04:15:43 GMT
content-type: image/png
content-length: 2746
last-modified: Sun, 26 Jul 2020 11:51:00 GMT
etag: "5f1d6e24-aba"
expires: Fri, 01 Dec 2023 07:50:01 GMT
cache-control: max-age=604800
x-xss-protection: 1; mode=block
referrer-policy: no-referrer-when-downgrade
cf-cache-status: HIT
age: 159942
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 82bf4fd8ccf2b4ee-OSL
X-Firefox-Spdy: h2
5278.cc/data/attachment/common/6f/common_329_icon.png
200 OK 5.0 kB URL GET HTTP/2 5278.cc/data/attachment/common/6f/common_329_icon.png
IP
Certificate IssuerGoogle Trust Services LLC
Subject5278.cc
FingerprintA7:8B:0C:69:3F:1F:90:57:E6:4C:5F:0A:A6:52:71:47:B2:5B:53:48
ValidityWed, 18 Oct 2023 21:07:14 GMT - Tue, 16 Jan 2024 21:07:13 GMT
File type PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced\012- data
Hash 15ec14dd4c67ea4d308ae69e30f8f50f
cef3570499fb2f32989900b9f14bf4c75d59f3a3
41ccb97cae3ab140126113e0cf566f3b91c2995eec3ccce805fb84f43e6d6663
GET /data/attachment/common/6f/common_329_icon.png HTTP/1.1
Host: 5278.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://173.244.209.59/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 26 Nov 2023 04:15:43 GMT
content-type: image/png
content-length: 5022
last-modified: Sun, 26 Jul 2020 11:47:37 GMT
etag: "5f1d6d59-139e"
expires: Wed, 29 Nov 2023 11:52:14 GMT
cache-control: max-age=604800
x-xss-protection: 1; mode=block
referrer-policy: no-referrer-when-downgrade
cf-cache-status: HIT
age: 318209
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 82bf4fd91d1db4ee-OSL
X-Firefox-Spdy: h2
5278.cc/data/attachment/common/34/common_41_icon.png
200 OK 2.7 kB URL GET HTTP/2 5278.cc/data/attachment/common/34/common_41_icon.png
IP
Certificate IssuerGoogle Trust Services LLC
Subject5278.cc
FingerprintA7:8B:0C:69:3F:1F:90:57:E6:4C:5F:0A:A6:52:71:47:B2:5B:53:48
ValidityWed, 18 Oct 2023 21:07:14 GMT - Tue, 16 Jan 2024 21:07:13 GMT
File type PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced\012- data
Hash 64e3b3255e83b1efe400733f9c610190
053728dc1136a2f9b0d2e14380d54dbb4a048f5a
2b508155da8148b5a85c563355a99dd53dff0d49d55f4f82b4f516dbbe88348e
GET /data/attachment/common/34/common_41_icon.png HTTP/1.1
Host: 5278.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://173.244.209.59/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 26 Nov 2023 04:15:43 GMT
content-type: image/png
content-length: 2746
last-modified: Sun, 26 Jul 2020 11:51:06 GMT
etag: "5f1d6e2a-aba"
expires: Thu, 30 Nov 2023 07:19:26 GMT
cache-control: max-age=604800
x-xss-protection: 1; mode=block
referrer-policy: no-referrer-when-downgrade
cf-cache-status: HIT
age: 248177
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 82bf4fd94d3eb4ee-OSL
X-Firefox-Spdy: h2
5278.cc/data/attachment/common/d6/common_39_icon.png
200 OK 2.7 kB URL GET HTTP/2 5278.cc/data/attachment/common/d6/common_39_icon.png
IP
Certificate IssuerGoogle Trust Services LLC
Subject5278.cc
FingerprintA7:8B:0C:69:3F:1F:90:57:E6:4C:5F:0A:A6:52:71:47:B2:5B:53:48
ValidityWed, 18 Oct 2023 21:07:14 GMT - Tue, 16 Jan 2024 21:07:13 GMT
File type PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced\012- data
Hash 64e3b3255e83b1efe400733f9c610190
053728dc1136a2f9b0d2e14380d54dbb4a048f5a
2b508155da8148b5a85c563355a99dd53dff0d49d55f4f82b4f516dbbe88348e
GET /data/attachment/common/d6/common_39_icon.png HTTP/1.1
Host: 5278.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://173.244.209.59/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 26 Nov 2023 04:15:43 GMT
content-type: image/png
content-length: 2746
last-modified: Sun, 26 Jul 2020 11:50:55 GMT
etag: "5f1d6e1f-aba"
expires: Fri, 01 Dec 2023 05:09:56 GMT
cache-control: max-age=604800
x-xss-protection: 1; mode=block
referrer-policy: no-referrer-when-downgrade
cf-cache-status: HIT
age: 169546
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 82bf4fd94d40b4ee-OSL
X-Firefox-Spdy: h2
5278.cc/data/attachment/common/a5/common_38_icon.png
301 Moved Permanently 3.1 kB URL GET HTTP/1.1 5278.cc/data/attachment/common/a5/common_38_icon.png
IP
File type PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced\012- data
Hash 44ffb8deff8aa1489c264ab1d8d88608
66e842b56db43c6e189efdb4157435e912a740e9
da07b29822cd44d763f83cde23c8173b24bbb1ab206f92eb5e4e7c9b628fe2f4
GET /data/attachment/common/a5/common_38_icon.png HTTP/1.1
Host: 5278.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://173.244.209.59/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 26 Nov 2023 04:15:43 GMT
content-type: image/png
content-length: 3066
last-modified: Sun, 26 Jul 2020 11:44:12 GMT
etag: "5f1d6c8c-bfa"
expires: Fri, 01 Dec 2023 09:41:54 GMT
cache-control: max-age=604800
x-xss-protection: 1; mode=block
referrer-policy: no-referrer-when-downgrade
cf-cache-status: HIT
age: 153229
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 82bf4fd94d48b4ee-OSL
X-Firefox-Spdy: h2
5278.cc/data/attachment/common/ea/common_64_icon.png
301 Moved Permanently 1.0 kB URL GET HTTP/1.1 5278.cc/data/attachment/common/ea/common_64_icon.png
IP
File type PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced\012- data
Hash 21579c4afbbf8d3c30c77f85f8f23980
625d0dfbb27ed3fa69e930580c3b1b15ab873cd7
18c0357f4622e0897373e79a7870e701de1197a3d1e15dc11bf0690d72cf3d74
GET /data/attachment/common/ea/common_64_icon.png HTTP/1.1
Host: 5278.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://173.244.209.59/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 26 Nov 2023 04:15:43 GMT
content-type: image/png
content-length: 1036
last-modified: Sun, 26 Jul 2020 11:40:43 GMT
etag: "5f1d6bbb-40c"
expires: Wed, 29 Nov 2023 11:52:14 GMT
cache-control: max-age=604800
x-xss-protection: 1; mode=block
referrer-policy: no-referrer-when-downgrade
cf-cache-status: HIT
age: 318209
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 82bf4fd95d52b4ee-OSL
X-Firefox-Spdy: h2
5278.cc/data/attachment/common/57/common_235_icon.png
200 OK 2.7 kB URL GET HTTP/2 5278.cc/data/attachment/common/57/common_235_icon.png
IP
Certificate IssuerGoogle Trust Services LLC
Subject5278.cc
FingerprintA7:8B:0C:69:3F:1F:90:57:E6:4C:5F:0A:A6:52:71:47:B2:5B:53:48
ValidityWed, 18 Oct 2023 21:07:14 GMT - Tue, 16 Jan 2024 21:07:13 GMT
File type PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced\012- data
Hash 64e3b3255e83b1efe400733f9c610190
053728dc1136a2f9b0d2e14380d54dbb4a048f5a
2b508155da8148b5a85c563355a99dd53dff0d49d55f4f82b4f516dbbe88348e
GET /data/attachment/common/57/common_235_icon.png HTTP/1.1
Host: 5278.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://173.244.209.59/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 26 Nov 2023 04:15:43 GMT
content-type: image/png
content-length: 2746
last-modified: Sun, 26 Jul 2020 11:51:30 GMT
etag: "5f1d6e42-aba"
expires: Wed, 29 Nov 2023 11:52:14 GMT
cache-control: max-age=604800
x-xss-protection: 1; mode=block
referrer-policy: no-referrer-when-downgrade
cf-cache-status: HIT
age: 318209
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 82bf4fd99d76b4ee-OSL
X-Firefox-Spdy: h2
5278.cc/data/attachment/common/03/common_63_icon.png
200 OK 3.1 kB URL GET HTTP/2 5278.cc/data/attachment/common/03/common_63_icon.png
IP
Certificate IssuerGoogle Trust Services LLC
Subject5278.cc
FingerprintA7:8B:0C:69:3F:1F:90:57:E6:4C:5F:0A:A6:52:71:47:B2:5B:53:48
ValidityWed, 18 Oct 2023 21:07:14 GMT - Tue, 16 Jan 2024 21:07:13 GMT
File type PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced\012- data
Hash d3a2623b35aec882a09863b6e8fe5006
ed6c5a0782f861d1953ffda4d5648f6594532bd1
b9b7e072344ed24581bc29ea98844b50c03e412311725806c792bb2c3ae98c42
GET /data/attachment/common/03/common_63_icon.png HTTP/1.1
Host: 5278.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://173.244.209.59/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 26 Nov 2023 04:15:43 GMT
content-type: image/png
content-length: 3069
last-modified: Sun, 26 Jul 2020 11:46:43 GMT
etag: "5f1d6d23-bfd"
expires: Tue, 28 Nov 2023 19:51:15 GMT
cache-control: max-age=604800
x-xss-protection: 1; mode=block
referrer-policy: no-referrer-when-downgrade
cf-cache-status: HIT
age: 375868
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 82bf4fd9ad80b4ee-OSL
X-Firefox-Spdy: h2
5278.cc/data/attachment/common/fe/common_330_icon.png
200 OK 5.0 kB URL GET HTTP/2 5278.cc/data/attachment/common/fe/common_330_icon.png
IP
Certificate IssuerGoogle Trust Services LLC
Subject5278.cc
FingerprintA7:8B:0C:69:3F:1F:90:57:E6:4C:5F:0A:A6:52:71:47:B2:5B:53:48
ValidityWed, 18 Oct 2023 21:07:14 GMT - Tue, 16 Jan 2024 21:07:13 GMT
File type PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced\012- data
Hash 15ec14dd4c67ea4d308ae69e30f8f50f
cef3570499fb2f32989900b9f14bf4c75d59f3a3
41ccb97cae3ab140126113e0cf566f3b91c2995eec3ccce805fb84f43e6d6663
GET /data/attachment/common/fe/common_330_icon.png HTTP/1.1
Host: 5278.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://173.244.209.59/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 26 Nov 2023 04:15:43 GMT
content-type: image/png
content-length: 5022
last-modified: Sun, 26 Jul 2020 11:47:25 GMT
etag: "5f1d6d4d-139e"
expires: Wed, 29 Nov 2023 11:52:14 GMT
cache-control: max-age=604800
x-xss-protection: 1; mode=block
referrer-policy: no-referrer-when-downgrade
cf-cache-status: HIT
age: 318209
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 82bf4fd9bd89b4ee-OSL
X-Firefox-Spdy: h2
5278.cc/data/attachment/common/ba/common_364_icon.png
301 Moved Permanently 1.8 kB URL GET HTTP/1.1 5278.cc/data/attachment/common/ba/common_364_icon.png
IP
File type PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced\012- data
Hash 3c5891adec9510f87c9f8daf3dde3260
8121f9144485de44efb61017bd6afdc4edc066b9
06ec478e77bc4be3cce0c1070b990bf76f20ca20f178c40d5a339f4e8fcd5868
GET /data/attachment/common/ba/common_364_icon.png HTTP/1.1
Host: 5278.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://173.244.209.59/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 26 Nov 2023 04:15:43 GMT
content-type: image/png
content-length: 1760
last-modified: Sun, 26 Jul 2020 11:45:06 GMT
etag: "5f1d6cc2-6e0"
expires: Sun, 03 Dec 2023 04:07:43 GMT
cache-control: max-age=604800
x-xss-protection: 1; mode=block
referrer-policy: no-referrer-when-downgrade
cf-cache-status: HIT
age: 480
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 82bf4fd9bd8cb4ee-OSL
X-Firefox-Spdy: h2
cdn.pncloudfl.com/pn/7c6/72b/6fc/7c672b6fcc054d6062e66b28a6626f6c20622351.webp
200 OK 23 kB URL GET HTTP/2 cdn.pncloudfl.com/pn/7c6/72b/6fc/7c672b6fcc054d6062e66b28a6626f6c20622351.webp
IP
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintC6:42:10:11:EB:FA:38:01:62:34:DA:19:86:B6:89:D4:EF:B3:37:A8
ValidityFri, 31 Mar 2023 00:00:00 GMT - Sat, 30 Mar 2024 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 192x192, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash e2384b7bee2b843c01684ef468fb965e
7c672b6fcc054d6062e66b28a6626f6c20622351
15c87af498c434dc8b8d4309bb19995672683c76c68732615c71d9ae974f2ed1
GET /pn/7c6/72b/6fc/7c672b6fcc054d6062e66b28a6626f6c20622351.webp HTTP/1.1
Host: cdn.pncloudfl.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 26 Nov 2023 04:15:43 GMT
content-type: application/octet-stream
content-length: 22932
etag: e2384b7bee2b843c01684ef468fb965e
last-modified: Fri, 28 Apr 2023 13:32:55 GMT
x-timestamp: 1682688774.33743
x-trans-id: tx4e6a766e539d439aabab9-00645b64cc
x-openstack-request-id: tx4e6a766e539d439aabab9-00645b64cc
access-control-allow-methods: HEAD,GET,POST,PUT,PATCH,DELETE,OPTIONS
access-control-allow-headers: Content-Type,X-Requested-With,X-Auth-Token,X-Openstack-Request-Id,X-Container-Meta-type,X-Container-Meta-Temp-URL-Key,Authorization
access-control-expose-headers: X-Container-Meta-Temp-Url-Key,X-Container-Bytes-Used,Last-Modified,X-Timestamp
cache-control: max-age=172800
expires: Sun, 26 Nov 2023 06:48:43 GMT
x-proxy-cache: HIT
cf-cache-status: HIT
age: 163620
accept-ranges: bytes
vary: Accept-Encoding
access-control-allow-origin: *
server: cloudflare
cf-ray: 82bf4fd9eb19b4f7-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
player.hboav.com/guga/images/20231123/1.gif
200 OK 42 kB URL GET HTTP/2 player.hboav.com/guga/images/20231123/1.gif
IP
Requested by https://player.hboav.com/guga/header_banner.php
Certificate IssuerZeroSSL
Subjectplayer.hboav.com
Fingerprint9F:B9:42:16:DD:30:9A:F3:AF:D9:D0:93:F3:33:02:F3:7F:5C:BD:02
ValidityThu, 16 Nov 2023 00:00:00 GMT - Wed, 14 Feb 2024 23:59:59 GMT
File type GIF image data, version 89a, 468 x 60\012- data
Hash a6b933d644b52f69b092b1447107aeff
ac60ea2a7bfeeeca96e5e13db05175887b36f157
481cc5935ab5a2038a8ddb0454d6117a1482e003e6d85982b0dd04dc3327521d
GET /guga/images/20231123/1.gif HTTP/1.1
Host: player.hboav.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://player.hboav.com/guga/header_banner.php
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 26 Nov 2023 04:15:43 GMT
content-type: image/gif
content-length: 42536
last-modified: Wed, 22 Nov 2023 10:06:18 GMT
etag: "655dd29a-a628"
expires: Mon, 27 Nov 2023 04:15:43 GMT
cache-control: max-age=86400
accept-ranges: bytes
X-Firefox-Spdy: h2
player.hboav.com/guga/images/lovetoy486x604.gif
200 OK 20 kB URL GET HTTP/2 player.hboav.com/guga/images/lovetoy486x604.gif
IP
Requested by https://player.hboav.com/guga/header_banner.php
Certificate IssuerZeroSSL
Subjectplayer.hboav.com
Fingerprint9F:B9:42:16:DD:30:9A:F3:AF:D9:D0:93:F3:33:02:F3:7F:5C:BD:02
ValidityThu, 16 Nov 2023 00:00:00 GMT - Wed, 14 Feb 2024 23:59:59 GMT
File type GIF image data, version 89a, 468 x 60\012- data
Hash c83de0c51bb66770dc271644af427f32
8b19ff25b2376c65b98280e3ee0f87b488e0633c
cf31c0e0a0d15259e685ebbd002f0693a278ed862abd13fd9d8f9e458f22a6dc
GET /guga/images/lovetoy486x604.gif HTTP/1.1
Host: player.hboav.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://player.hboav.com/guga/header_banner.php
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 26 Nov 2023 04:15:43 GMT
content-type: image/gif
content-length: 19772
last-modified: Thu, 11 Apr 2013 20:05:56 GMT
etag: "516717a4-4d3c"
expires: Mon, 27 Nov 2023 04:15:43 GMT
cache-control: max-age=86400
accept-ranges: bytes
X-Firefox-Spdy: h2
player.hboav.com/guga/images/ii/2022_0919.gif
200 OK 61 kB URL GET HTTP/2 player.hboav.com/guga/images/ii/2022_0919.gif
IP
Requested by https://player.hboav.com/guga/header_banner.php
Certificate IssuerZeroSSL
Subjectplayer.hboav.com
Fingerprint9F:B9:42:16:DD:30:9A:F3:AF:D9:D0:93:F3:33:02:F3:7F:5C:BD:02
ValidityThu, 16 Nov 2023 00:00:00 GMT - Wed, 14 Feb 2024 23:59:59 GMT
File type GIF image data, version 89a, 468 x 60\012- data
Hash c0f48ec6c21831d5e4fc32e3ab00c361
21a4ba29ddb20209d9cacc7540d4713342fbb7f3
2311f449fbec186c9a4669ae6620e58e6d81d82efb5270cbb6bd517c5bd86f8a
GET /guga/images/ii/2022_0919.gif HTTP/1.1
Host: player.hboav.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://player.hboav.com/guga/header_banner.php
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 26 Nov 2023 04:15:43 GMT
content-type: image/gif
content-length: 61413
last-modified: Mon, 19 Sep 2022 04:13:13 GMT
etag: "6327ec59-efe5"
expires: Mon, 27 Nov 2023 04:15:43 GMT
cache-control: max-age=86400
accept-ranges: bytes
X-Firefox-Spdy: h2
player.hboav.com/guga/images/ut/avtvcc_1.gif
200 OK 22 kB URL GET HTTP/2 player.hboav.com/guga/images/ut/avtvcc_1.gif
IP
Requested by https://player.hboav.com/guga/header_banner.php
Certificate IssuerZeroSSL
Subjectplayer.hboav.com
Fingerprint9F:B9:42:16:DD:30:9A:F3:AF:D9:D0:93:F3:33:02:F3:7F:5C:BD:02
ValidityThu, 16 Nov 2023 00:00:00 GMT - Wed, 14 Feb 2024 23:59:59 GMT
File type GIF image data, version 89a, 468 x 60\012- data
Hash 95593b2d8cc9c47a14ba4b0e781f5398
97b3d4722ce5d6dc203c3ca70ceb753a99abe8f4
e060abdf7768c299317b5ff9416af6053fdfa8b20683b9127fdf4aa577a95937
GET /guga/images/ut/avtvcc_1.gif HTTP/1.1
Host: player.hboav.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://player.hboav.com/guga/header_banner.php
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 26 Nov 2023 04:15:43 GMT
content-type: image/gif
content-length: 21541
last-modified: Fri, 08 Aug 2014 18:37:13 GMT
etag: "53e518d9-5425"
expires: Mon, 27 Nov 2023 04:15:43 GMT
cache-control: max-age=86400
accept-ranges: bytes
X-Firefox-Spdy: h2
2158novffp.com/get/1942075?zoneid=1942075&jp=_clm1frmuw7tyjrbrotixax&nojs=0&abvar=0&febuild=1.0.178&t=0&wcks=1&wgl=0&cnvs=1&os=0&ss=1&ls=1&bb=0&plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF&lang=en-US&pf=Linux%20x86_64&cd=24&ix=0&x=1280&y=1024&md=0&afid=6303924398259712&eclog=0&sp=1&im=1&freq=0
200 OK 96 kB URL GET HTTP/2 2158novffp.com/get/1942075?zoneid=1942075&jp=_clm1frmuw7tyjrbrotixax&nojs=0&abvar=0&febuild=1.0.178&t=0&wcks=1&wgl=0&cnvs=1&os=0&ss=1&ls=1&bb=0&plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF&lang=en-US&pf=Linux%20x86_64&cd=24&ix=0&x=1280&y=1024&md=0&afid=6303924398259712&eclog=0&sp=1&im=1&freq=0
IP
Certificate IssuerBuypass AS-983163327
Subject
FingerprintFD:C1:CF:80:A9:5B:D1:10:B4:B3:C7:69:11:E1:AC:06:8F:75:9B:6C
ValiditySat, 28 Oct 2023 07:18:45 GMT - Wed, 24 Apr 2024 21:59:00 GMT
File type gzip compressed data, from Unix\012- data
Hash 108c51df9fafd9515640a07d08858e63
6c99d0d8bbd15f7aa2efb283992d6e7b7f2bd4c5
24f73c2056f15f074acf74d62c75e617dd6f9163dcf97b439dde18a2206cfa8b
GET /get/1942075?zoneid=1942075&jp=_clm1frmuw7tyjrbrotixax&nojs=0&abvar=0&febuild=1.0.178&t=0&wcks=1&wgl=0&cnvs=1&os=0&ss=1&ls=1&bb=0&plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF&lang=en-US&pf=Linux%20x86_64&cd=24&ix=0&x=1280&y=1024&md=0&afid=6303924398259712&eclog=0&sp=1&im=1&freq=0 HTTP/1.1
Host: 2158novffp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://173.244.209.59/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 26 Nov 2023 04:15:43 GMT
content-type: text/javascript; charset=utf-8
vary: Accept-Encoding
x-route-id: config
set-cookie: CHCK=1; Path=/; Expires=Sun, 29 Dec 2024 04:15:43 GMT; Secure; SameSite=None
UID=2311252315ce50ea70928743d6bd515397eb; Path=/; Expires=Sun, 29 Dec 2024 04:15:43 GMT; Secure; SameSite=None
content-encoding: gzip
timing-allow-origin: *
accept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
X-Firefox-Spdy: h2
poweredby.jads.co/js/jads.js
301 Moved Permanently 178 B URL GET HTTP/1.1 poweredby.jads.co/js/jads.js
IP
Requested by https://player.hboav.com/guga/mid_index.php
Certificate IssuerSectigo Limited
Subject*.jads.co
Fingerprint9E:B2:20:AC:19:4B:72:8F:12:D9:D6:5A:6A:B5:BE:EE:46:13:48:EB
ValidityMon, 26 Dec 2022 00:00:00 GMT - Fri, 26 Jan 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash cd2e0e43980a00fb6a2742d3afd803b8
81ffbd1712afe8cdf138b570c0fc9934742c33c1
bd9df047d51943acc4bc6cf55d88edb5b6785a53337ee2a0f74dd521aedde87d
GET /js/jads.js HTTP/1.1
Host: poweredby.jads.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://player.hboav.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Sun, 26 Nov 2023 04:15:43 GMT
Content-Type: text/html
Content-Length: 178
Connection: keep-alive
Location: jads2.js
player.hboav.com/js/wlfloat.js?v=QYlyc
200 OK 138 B URL GET HTTP/2 player.hboav.com/js/wlfloat.js?v=QYlyc
IP
Certificate IssuerZeroSSL
Subjectplayer.hboav.com
Fingerprint9F:B9:42:16:DD:30:9A:F3:AF:D9:D0:93:F3:33:02:F3:7F:5C:BD:02
ValidityThu, 16 Nov 2023 00:00:00 GMT - Wed, 14 Feb 2024 23:59:59 GMT
File type gzip compressed data, from Unix\012- data
Hash 2c4da238485d88b4e19043834e88a365
3425345c9b257fcd390f5c70306ac177dccaa144
0460d98b047d00637aa590392de2494b271ff91ca6cd0d8f04691775680990db
GET /js/wlfloat.js?v=QYlyc HTTP/1.1
Host: player.hboav.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://173.244.209.59/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 26 Nov 2023 04:15:43 GMT
content-type: application/javascript; charset=utf-8
last-modified: Tue, 29 Dec 2020 09:59:57 GMT
vary: Accept-Encoding
etag: W/"5feafe1d-17"
expires: Mon, 27 Nov 2023 04:15:43 GMT
cache-control: max-age=86400
content-encoding: gzip
X-Firefox-Spdy: h2
iezxmddndn.com/solid.gif?z=1944020&nojs=0&abvar=0&febuild=1.0.178&t=0&wcks=1&wgl=0&cnvs=1&os=0&ss=1&ls=1&bb=0&plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF&lang=en-US&pf=Linux%20x86_64&cd=24&ix=0&x=1280&y=1024&md=0&afid=7429824305106432&eclog=0&sp=1&im=1
200 OK 43 B URL POST HTTP/2 iezxmddndn.com/solid.gif?z=1944020&nojs=0&abvar=0&febuild=1.0.178&t=0&wcks=1&wgl=0&cnvs=1&os=0&ss=1&ls=1&bb=0&plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF&lang=en-US&pf=Linux%20x86_64&cd=24&ix=0&x=1280&y=1024&md=0&afid=7429824305106432&eclog=0&sp=1&im=1
IP
Certificate IssuerBuypass AS-983163327
Subject
Fingerprint0A:35:60:8F:E8:D6:56:65:D8:B1:88:38:40:D8:3D:8C:EA:33:A1:3A
ValiditySat, 28 Oct 2023 12:37:04 GMT - Wed, 24 Apr 2024 21:59:00 GMT
File type GIF image data, version 89a, 1 x 1\012- data
Hash 28e463819a210071de3b45ebe7633613
6dccd571828ec0912629119cf7eabfea9f33ddbc
44251f61629e2bfeead421241a917f43ad047af351659f01cd8fd937f0417f84
POST /solid.gif?z=1944020&nojs=0&abvar=0&febuild=1.0.178&t=0&wcks=1&wgl=0&cnvs=1&os=0&ss=1&ls=1&bb=0&plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF&lang=en-US&pf=Linux%20x86_64&cd=24&ix=0&x=1280&y=1024&md=0&afid=7429824305106432&eclog=0&sp=1&im=1 HTTP/1.1
Host: iezxmddndn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://173.244.209.59
DNT: 1
Connection: keep-alive
Referer: http://173.244.209.59/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 26 Nov 2023 04:15:43 GMT
content-type: image/gif
content-length: 43
x-route-id: stats.tag.loaded
set-cookie: CHCK=1; Path=/; Expires=Sun, 29 Dec 2024 04:15:43 GMT; Secure; SameSite=None
UID=23112523152b573ad7c2084ee98c4838e2b9; Path=/; Expires=Sun, 29 Dec 2024 04:15:43 GMT; Secure; SameSite=None
timing-allow-origin: *
accept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
X-Firefox-Spdy: h2
poweredby.jads.co/js/jads2.js
200 OK 1.7 kB URL GET HTTP/1.1 poweredby.jads.co/js/jads2.js
IP
Requested by https://player.hboav.com/guga/mid_index.php
Certificate IssuerSectigo Limited
Subject*.jads.co
Fingerprint9E:B2:20:AC:19:4B:72:8F:12:D9:D6:5A:6A:B5:BE:EE:46:13:48:EB
ValidityMon, 26 Dec 2022 00:00:00 GMT - Fri, 26 Jan 2024 23:59:59 GMT
File type ASCII text, with very long lines (3758), with no line terminators
Hash bc8141c4650030c41f6a98026b12ce80
af5618f7e467a207d4c64627be580283ab5640cd
5ad0b5133e45b32908a388c8c6dcfca2c23d1d9d3e2ed6a839a742bab1ffde51
GET /js/jads2.js HTTP/1.1
Host: poweredby.jads.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://player.hboav.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 26 Nov 2023 04:15:44 GMT
Content-Type: application/x-javascript
Last-Modified: Wed, 20 Sep 2023 21:26:09 GMT
Transfer-Encoding: chunked
Connection: close
ETag: W/"650b6371-eae"
Content-Encoding: gzip
adxadserv.com/ascripts/pxl.js
200 OK 24 kB URL GET HTTP/1.1 adxadserv.com/ascripts/pxl.js
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://a.ar732.com/ad?spotid=60d0484161d6e216935300d2&type=300x250&output=html&extra1=0&ref=http%3A//173.244.209.59/&dt=1700972146894&screen=1280x1024&tags=
Certificate IssuerLet's Encrypt
Subjectadxadserv.com
FingerprintF8:88:80:7F:5B:DB:FA:2D:82:38:B4:B0:63:00:5E:F2:59:44:94:52
ValiditySun, 01 Oct 2023 21:03:03 GMT - Sat, 30 Dec 2023 21:03:02 GMT
File type Unicode text, UTF-8 text, with very long lines (36114)
Hash 8348b78d100940ba1808a8e9b93f2e94
c2aa612dc3256c9f235dcfc6e330d0ecaf957768
9c983adf86ebc949957bdf55d524dfa278a79bea8d13f2efa9512c6dd37b86f5
GET /ascripts/pxl.js HTTP/1.1
Host: adxadserv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://ads.adxadserv.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.20.1
Date: Sun, 26 Nov 2023 04:15:44 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Fri, 25 Sep 2020 09:55:25 GMT
ETag: W/"5f6dbe8d-12fee"
Expires: Sat, 25 Nov 2023 07:59:11 GMT
Cache-Control: max-age=86400, public
X-77-NZT: EwwBw7WsGQH3IB0BAAwBuUwKAQH3AAAAAAgB1GY4EQFB
X-77-NZT-Ray: f5ba46238a7be0a170c662653fa26f04
X-77-Cache: HIT
Content-Encoding: gzip
X-Accel-Date: 1700899152
X-77-Age: 72992
X-Cache-LB: HIT, HIT
X-Age-LB: 0, 72992
X-77-POP: amsterdamNL
fonts.gstatic.com/s/ubuntu/v20/4iCs6KVjbNBYlgoKfw72.woff2
200 OK 35 kB URL GET HTTP/2 fonts.gstatic.com/s/ubuntu/v20/4iCs6KVjbNBYlgoKfw72.woff2
IP
Requested by http://ads.adxadserv.com/ad?spotid=5ee74fb661d6e22d6c6bca31&type=300x250&output=html&extra1=0&ref=http%3A//173.244.209.59/&dt=1700972146204&screen=1280x1024&tags=
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 34852, version 1.0\012- data
Hash 0e8eefb4549a2edf26c560cb9845952e
8d0b1718aacad934fd0043c87cbc54aa091396bf
7f653b3ce9d3277457fc6da4edb246ae2f6c913f088c42dcb8cd2e96267aa21a
GET /s/ubuntu/v20/4iCs6KVjbNBYlgoKfw72.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://ads.adxadserv.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 34852
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 23 Nov 2023 23:21:57 GMT
expires: Fri, 22 Nov 2024 23:21:57 GMT
cache-control: public, max-age=31536000
age: 190427
last-modified: Wed, 27 Apr 2022 16:31:23 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.google.com/cse/static/element/2b35e7a15e0e30e2/cse_element__zh_tw.js?usqp=CAI%3D
200 OK 107 kB URL GET HTTP/3 www.google.com/cse/static/element/2b35e7a15e0e30e2/cse_element__zh_tw.js?usqp=CAI%3D
IP
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint4C:0D:17:8C:F1:30:7C:3A:6F:9B:8E:B4:83:0E:5C:BD:ED:17:3E:95
ValidityMon, 23 Oct 2023 11:18:24 GMT - Mon, 15 Jan 2024 11:18:23 GMT
File type ASCII text, with very long lines (2024)
Size 107 kB (107355 bytes)
Hash 8efbecb6a42b55481861672a9af7817d
8ca356063cb58b3b4c3e9efdd07e543eed34380b
785e185b43b6ddbeee077cc543c75c14ef6e4c1cea57da9f593caee6b5d8bb97
GET /cse/static/element/2b35e7a15e0e30e2/cse_element__zh_tw.js?usqp=CAI%3D HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://173.244.209.59/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/prose-team
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="prose-team"
report-to: {"group":"prose-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/prose-team"}]}
content-length: 107355
date: Sun, 26 Nov 2023 04:15:44 GMT
expires: Sun, 26 Nov 2023 04:15:44 GMT
cache-control: private, max-age=31536000
last-modified: Tue, 07 Nov 2023 17:44:48 GMT
x-content-type-options: nosniff
link: <https://www.adsensecustomsearchads.com>; rel="preconnect"
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
a.ar732.com/ad?spotid=60d0484161d6e216935300d2&type=300x250&output=html&extra1=0&ref=http%3A//173.244.209.59/&dt=1700972146894&screen=1280x1024&tags=
200 OK 1.5 kB URL GET HTTP/2 a.ar732.com/ad?spotid=60d0484161d6e216935300d2&type=300x250&output=html&extra1=0&ref=http%3A//173.244.209.59/&dt=1700972146894&screen=1280x1024&tags=
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://player.hboav.com/guga/mid_index.php
Certificate IssuerLet's Encrypt
Subjecta.ar732.com
Fingerprint6D:36:50:DB:47:D6:F5:83:04:9A:A9:16:ED:75:D3:D6:44:11:33:73
ValiditySat, 14 Oct 2023 22:44:15 GMT - Fri, 12 Jan 2024 22:44:14 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (579)
Hash 8d43a13e809370c124a30b3471d681c2
d8c3c5b399271387b01e98b4df65780a15fddcfe
02a213d2abd11497db4484e73e437795151885a05696d0e7d4ac710456c4ebba
GET /ad?spotid=60d0484161d6e216935300d2&type=300x250&output=html&extra1=0&ref=http%3A//173.244.209.59/&dt=1700972146894&screen=1280x1024&tags= HTTP/1.1
Host: a.ar732.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://player.hboav.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 26 Nov 2023 04:15:44 GMT
content-type: text/html; charset=utf-8
content-length: 1514
cache-control: no-cache
X-Firefox-Spdy: h2
player.hboav.com/guga/images/20231113_300x250.gif
200 OK 129 kB URL GET HTTP/1.1 player.hboav.com/guga/images/20231113_300x250.gif
IP
Requested by http://player.hboav.com/guga/20231113_square.html
File type GIF image data, version 89a, 300 x 250\012- data
Size 129 kB (129102 bytes)
Hash 5ac8c569e3078b74c1d5998d8ef97298
29e8ff83ff02eb7aa8f13a4b866d5f4898d5c194
b310f7d2d48b1d649161be1435b2c771a02919c5fcce8cc8163f9717d1d1042d
GET /guga/images/20231113_300x250.gif HTTP/1.1
Host: player.hboav.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://player.hboav.com/guga/20231113_square.html
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 26 Nov 2023 04:15:43 GMT
Content-Type: image/gif
Content-Length: 129102
Last-Modified: Mon, 13 Nov 2023 13:14:10 GMT
Connection: keep-alive
ETag: "65522122-1f84e"
Expires: Mon, 27 Nov 2023 04:15:43 GMT
Cache-Control: max-age=86400
Accept-Ranges: bytes
5278.cc/favicon.ico?v=2
162 B IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
GET /favicon.ico?v=2 HTTP/1.1
Host: 5278.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://173.244.209.59/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Date: Sun, 26 Nov 2023 04:15:44 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://5278.cc/favicon.ico?v=2
Cache-Control: max-age=1200
CF-Cache-Status: MISS
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 82bf4fdd1e84b4ed-OSL
syndication.realsrv.com/v1/api.php
200 OK 3.0 kB URL POST HTTP/1.1 syndication.realsrv.com/v1/api.php
IP
ASN #60781 LeaseWeb Netherlands B.V.
Requested by https://a.realsrv.com/iframe.php?idzone=4403240&size=300x250
Certificate IssuerLet's Encrypt
Subjectrealsrv.com
Fingerprint33:54:4D:F8:0E:E4:00:D3:20:90:CA:61:C8:CC:4D:D5:CB:BB:83:57
ValidityThu, 05 Oct 2023 15:34:07 GMT - Wed, 03 Jan 2024 15:34:06 GMT
File type JSON data\012- , ASCII text, with very long lines (6310), with no line terminators
Hash 0c7806c3fd94c12b1da4fdd6af486dce
af588ddd46e2e5f2e780bed14d7f6f9fa85bafd6
bc7c14f5ff404cd404685740ee9fcc140bb1efc8c47efd3a4fd793fc6e68b500
POST /v1/api.php HTTP/1.1
Host: syndication.realsrv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 312
Origin: https://a.realsrv.com
DNT: 1
Connection: keep-alive
Referer: https://a.realsrv.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 26 Nov 2023 04:15:44 GMT
Content-Type: application/json
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: https://a.realsrv.com
Access-Control-Allow-Headers: Authorization, Content-Type
Access-Control-Request-Method: POST
Access-Control-Allow-Credentials: true
Set-Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A32%3A%226562c670485110.51938437533817647%22%3B%7D; expires=Tue, 25-Nov-2025 04:15:44 GMT; Max-Age=63072000; path=/; domain=realsrv.com; secure; SameSite=None
Accept-CH:
X-Robots-Tag: noindex, follow
Content-Encoding: gzip
www.88p2p.com/BANNER/live173_20090728/banner468x60_live173.gif
200 OK 22 kB URL GET HTTP/1.1 www.88p2p.com/BANNER/live173_20090728/banner468x60_live173.gif
IP
ASN #9919 New Century InfoComm Tech Co., Ltd.
Certificate IssuerGoDaddy.com, Inc.
Subjecta.n53e.com
FingerprintD5:EB:1F:B8:9A:8C:48:33:2B:57:9A:10:07:16:54:35:64:52:3E:DD
ValidityFri, 24 Feb 2023 07:00:17 GMT - Fri, 23 Feb 2024 09:19:59 GMT
File type GIF image data, version 89a, 468 x 60\012- data
Hash 95593b2d8cc9c47a14ba4b0e781f5398
97b3d4722ce5d6dc203c3ca70ceb753a99abe8f4
e060abdf7768c299317b5ff9416af6053fdfa8b20683b9127fdf4aa577a95937
GET /BANNER/live173_20090728/banner468x60_live173.gif HTTP/1.1
Host: www.88p2p.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://173.244.209.59/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 26 Nov 2023 04:15:43 GMT
Server: Apache/2.2.15 (CentOS)
Last-Modified: Tue, 28 Jul 2009 12:56:37 GMT
ETag: "41c0fc-5425-46fc399d4ab40"
Accept-Ranges: bytes
Content-Length: 21541
Keep-Alive: timeout=15
Connection: Keep-Alive
Content-Type: image/gif
a.realsrv.com/iframe.js?idzone=4403240&size=300x250
200 OK 1.0 kB URL GET HTTP/2 a.realsrv.com/iframe.js?idzone=4403240&size=300x250
IP
ASN #60068 Datacamp Limited
Requested by https://a.realsrv.com/iframe.php?idzone=4403240&size=300x250
Certificate IssuerLet's Encrypt
Subjectrealsrv.com
Fingerprint33:54:4D:F8:0E:E4:00:D3:20:90:CA:61:C8:CC:4D:D5:CB:BB:83:57
ValidityThu, 05 Oct 2023 15:34:07 GMT - Wed, 03 Jan 2024 15:34:06 GMT
File type ASCII text, with very long lines (2192), with no line terminators
Hash 41c1bd5dc22f0d39d52b821d94a5efcc
fae7945e442d2f089d7d3c09b592e6bfb586e72b
d0ccecdf2ba6c2d2735e95b1491c0beee6786a6c36bb6a7b56de2cd2ddb68bde
GET /iframe.js?idzone=4403240&size=300x250 HTTP/1.1
Host: a.realsrv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://a.realsrv.com/iframe.php?idzone=4403240&size=300x250
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 26 Nov 2023 04:15:44 GMT
content-type: application/javascript
vary: Accept-Encoding
etag: W/"fae7945e442d2f089d7d3c09b59"
accept-ch: Sec-CH-UA,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Model,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version
expires: Thu, 23 Nov 2023 15:37:58 GMT
cache-control: max-age=10800
x-robots-tag: noindex, follow
access-control-allow-origin: *
x-77-nzt: EwwBuUwJFAHXxwEAAAwBuUwKCQH31gAAAAwBJRPCKAH3lgQAAA
x-77-nzt-ray: af585630df53b97b70c66265c8aa1f00
x-accel-expires: @1700982489
x-accel-date: 1700971689
x-77-cache: HIT
x-77-age: 1843
content-encoding: gzip
server: CDN77-Turbo
x-cache-lb: HIT, HIT
x-age-lb: 214, 455
x-77-pop: stockholmSE
X-Firefox-Spdy: h2
syndication.realsrv.com/cimp.php?t=api&data=H4sIAAAAAAAAAz1Qy2oDMQz8lf7AGkmW/Mi5vbaQkg9wvF4oNBQ2UHqYj6/WJZUOGkYjjZCQxIV5EXuSeGI7qaJyqBRUApvi9e0MZZjkEnqHSiKrECvJCFGYi0CVoijBqEBz5VgJJSVJlgnOR5CnWPTljgIRwzuX92e8XM7gQKXqowgBPG2PUadBP8d4vm7GuVEfWmrJW7uybFdTW9cRu/EhRAv7aJ/3/Tv0r9t0nX7K4m15EJ7LoY6sfrfCgzDpj21vtwH86/4uRp7bRSB1ogQt5Ajr8Ifkqk3NKjOPaioqG1nTde3yC7o2X9FgAQAA
200 OK 20 B URL GET HTTP/1.1 syndication.realsrv.com/cimp.php?t=api&data=H4sIAAAAAAAAAz1Qy2oDMQz8lf7AGkmW/Mi5vbaQkg9wvF4oNBQ2UHqYj6/WJZUOGkYjjZCQxIV5EXuSeGI7qaJyqBRUApvi9e0MZZjkEnqHSiKrECvJCFGYi0CVoijBqEBz5VgJJSVJlgnOR5CnWPTljgIRwzuX92e8XM7gQKXqowgBPG2PUadBP8d4vm7GuVEfWmrJW7uybFdTW9cRu/EhRAv7aJ/3/Tv0r9t0nX7K4m15EJ7LoY6sfrfCgzDpj21vtwH86/4uRp7bRSB1ogQt5Ajr8Ifkqk3NKjOPaioqG1nTde3yC7o2X9FgAQAA
IP
ASN #60781 LeaseWeb Netherlands B.V.
Requested by https://a.realsrv.com/iframe.php?idzone=4403240&size=300x250
Certificate IssuerLet's Encrypt
Subjectrealsrv.com
Fingerprint33:54:4D:F8:0E:E4:00:D3:20:90:CA:61:C8:CC:4D:D5:CB:BB:83:57
ValidityThu, 05 Oct 2023 15:34:07 GMT - Wed, 03 Jan 2024 15:34:06 GMT
File type gzip compressed data, max speed, from Unix\012- data
Hash a4745abc5e7fdb89cc6df3069f3c6e69
74789f7ddbebd5b7323f6f8174005b4bf8c1f1ed
d1111b245f685176180e6f1631e6dc49badf6672368e9ce260c71355165effdf
GET /cimp.php?t=api&data=H4sIAAAAAAAAAz1Qy2oDMQz8lf7AGkmW/Mi5vbaQkg9wvF4oNBQ2UHqYj6/WJZUOGkYjjZCQxIV5EXuSeGI7qaJyqBRUApvi9e0MZZjkEnqHSiKrECvJCFGYi0CVoijBqEBz5VgJJSVJlgnOR5CnWPTljgIRwzuX92e8XM7gQKXqowgBPG2PUadBP8d4vm7GuVEfWmrJW7uybFdTW9cRu/EhRAv7aJ/3/Tv0r9t0nX7K4m15EJ7LoY6sfrfCgzDpj21vtwH86/4uRp7bRSB1ogQt5Ajr8Ifkqk3NKjOPaioqG1nTde3yC7o2X9FgAQAA HTTP/1.1
Host: syndication.realsrv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://a.realsrv.com
DNT: 1
Connection: keep-alive
Referer: https://a.realsrv.com/
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A32%3A%226562c670485110.51938437533817647%22%3B%7D
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 26 Nov 2023 04:15:44 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: https://a.realsrv.com
Access-Control-Allow-Credentials: true
Set-Cookie: __upt=%7B%22v%22%3A1%2C%22id%22%3A%220%22%2C%22pcma%22%3A%22%22%2C%22acma%22%3A%22508.0199%22%7D; expires=Tue, 25 Nov 2025 04:15:44 GMT; path=/; domain=.realsrv.com; Secure; SameSite=none
Accept-CH:
X-Robots-Tag: noindex, follow
Content-Encoding: gzip
www.google.com/cse/static/images/1x/zh_TW/branding.png
200 OK 1.9 kB URL GET HTTP/3 www.google.com/cse/static/images/1x/zh_TW/branding.png
IP
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint4C:0D:17:8C:F1:30:7C:3A:6F:9B:8E:B4:83:0E:5C:BD:ED:17:3E:95
ValidityMon, 23 Oct 2023 11:18:24 GMT - Mon, 15 Jan 2024 11:18:23 GMT
File type PNG image data, 108 x 15, 8-bit/color RGBA, non-interlaced\012- data
Hash 946d4d4e2d44dad3efc71f275ab7aec6
b0d133b074b9e177ddc804da8e6dcd0d09172ee5
19e84e29fc980777914408b80b93d74ffb1266b65a1745aacac3ba5dd3f8bac1
GET /cse/static/images/1x/zh_TW/branding.png HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://173.244.209.59/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/prose-team
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="prose-team"
report-to: {"group":"prose-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/prose-team"}]}
content-length: 1876
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 21 Nov 2023 21:17:54 GMT
expires: Wed, 20 Nov 2024 21:17:54 GMT
cache-control: public, max-age=31536000
age: 370670
last-modified: Fri, 19 Jun 2020 20:30:00 GMT
content-type: image/png
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.google.com/cse/static/css/v2/clear.png
200 OK 1.0 kB URL GET HTTP/3 www.google.com/cse/static/css/v2/clear.png
IP
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint4C:0D:17:8C:F1:30:7C:3A:6F:9B:8E:B4:83:0E:5C:BD:ED:17:3E:95
ValidityMon, 23 Oct 2023 11:18:24 GMT - Mon, 15 Jan 2024 11:18:23 GMT
File type PNG image data, 10 x 10, 8-bit/color RGBA, non-interlaced\012- data
Hash 2df778bf2e22d52fe849babb330ec977
0f833f030bb43f282473bddd3a33b5f8cba7a845
329d1a750114920332eadc55c129957d9dbe5a1b25745e2f7e0ed4fad75e04cd
GET /cse/static/css/v2/clear.png HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/cse/static/element/2b35e7a15e0e30e2/default+zh_TW.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/prose-team
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="prose-team"
report-to: {"group":"prose-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/prose-team"}]}
content-length: 1018
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 23 Nov 2023 04:48:21 GMT
expires: Fri, 22 Nov 2024 04:48:21 GMT
cache-control: public, max-age=31536000
age: 257243
last-modified: Mon, 25 May 2020 08:30:00 GMT
content-type: image/png
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
clients1.google.com/generate_204
204 No Content 0 B URL GET HTTP/1.1 clients1.google.com/generate_204
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /generate_204 HTTP/1.1
Host: clients1.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://173.244.209.59/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 204 No Content
Content-Length: 0
Cross-Origin-Resource-Policy: cross-origin
Date: Sun, 26 Nov 2023 04:15:44 GMT
cse.google.com/adsense/search/async-ads.js
200 OK 53 kB URL GET HTTP/1.1 cse.google.com/adsense/search/async-ads.js
IP
File type ASCII text, with very long lines (1888)
Hash e1026ebdfa7fc41e6a55e586f14b8001
16a2bb2ffefc0293072fcf58839fcfc811990533
c9211b98042b17907d74bb76aa84613fe8d9dec0208003af8082899a662a00c4
GET /adsense/search/async-ads.js HTTP/1.1
Host: cse.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://173.244.209.59/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Type: text/javascript; charset=UTF-8
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/ads-afs-ui
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="ads-afs-ui"
Report-To: {"group":"ads-afs-ui","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-afs-ui"}]}
Date: Sun, 26 Nov 2023 04:15:44 GMT
Expires: Sun, 26 Nov 2023 04:15:44 GMT
Cache-Control: private, max-age=3600
ETag: "12933309866110392501"
X-Content-Type-Options: nosniff
Link: <https://www.adsensecustomsearchads.com>; rel="preconnect"
Content-Encoding: gzip
Transfer-Encoding: chunked
Server: sffe
X-XSS-Protection: 0
r.trackwilltrk.com/s1/1c3d665f-a99b-4b9e-a1f0-d2344b1d3854?externalId=6441b529-5193-4f4c-8a8a-52d8dfef2c1f&cv1=6441b529-5193-4f4c-8a8a-52d8dfef2c1f&cv2=0c1c5c30286e1db21a741e4b62c8b6e4&cv3=desktop&cv4=64cd06ae61d6e2749522effb&cv5=64cd06a261d6e27424278eff&cv6=en&cv7=5278.cc&cv8=Firefox&cv9=60d0484161d6e216935300d2&cv10=qpas_adxad_stub3_300x250
200 OK 436 B URL GET HTTP/1.1 r.trackwilltrk.com/s1/1c3d665f-a99b-4b9e-a1f0-d2344b1d3854?externalId=6441b529-5193-4f4c-8a8a-52d8dfef2c1f&cv1=6441b529-5193-4f4c-8a8a-52d8dfef2c1f&cv2=0c1c5c30286e1db21a741e4b62c8b6e4&cv3=desktop&cv4=64cd06ae61d6e2749522effb&cv5=64cd06a261d6e27424278eff&cv6=en&cv7=5278.cc&cv8=Firefox&cv9=60d0484161d6e216935300d2&cv10=qpas_adxad_stub3_300x250
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://a.ar732.com/ad?spotid=60d0484161d6e216935300d2&type=300x250&output=html&extra1=0&ref=http%3A//173.244.209.59/&dt=1700972146894&screen=1280x1024&tags=
Certificate IssuerLet's Encrypt
Subjectr.trackwilltrk.com
FingerprintA8:53:A6:ED:2C:DE:1B:AD:FC:D4:34:DD:83:A1:60:B4:8F:B1:28:DC
ValidityMon, 30 Oct 2023 07:27:38 GMT - Sun, 28 Jan 2024 07:27:37 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash 96e0ee47807ea2986a3b066f649fee4c
d2fc07c19a130d92721bf2809e05a81de0be4c34
488d799d8000251e0657a1b21189d41180250ae3b3f2a1223a0f73a80e3a1ca7
GET /s1/1c3d665f-a99b-4b9e-a1f0-d2344b1d3854?externalId=6441b529-5193-4f4c-8a8a-52d8dfef2c1f&cv1=6441b529-5193-4f4c-8a8a-52d8dfef2c1f&cv2=0c1c5c30286e1db21a741e4b62c8b6e4&cv3=desktop&cv4=64cd06ae61d6e2749522effb&cv5=64cd06a261d6e27424278eff&cv6=en&cv7=5278.cc&cv8=Firefox&cv9=60d0484161d6e216935300d2&cv10=qpas_adxad_stub3_300x250 HTTP/1.1
Host: r.trackwilltrk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://a.ar732.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.20.1
Date: Sun, 26 Nov 2023 04:15:44 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 436
Connection: close
Set-Cookie: uid=7R5dX-9-p; Path=/; Domain=trackwilltrk.com; Expires=Mon, 27 Nov 2023 04:15:44 GMT; HttpOnly
X-Request-Id: 860876e2-d3b4-4198-a4cf-1c840be91b8b
s3t3d2y8.afcdn.net/library/426059/436e78df886e31e338471bb6e3b05768b8275229.webp
200 OK 9.6 kB URL GET HTTP/2 s3t3d2y8.afcdn.net/library/426059/436e78df886e31e338471bb6e3b05768b8275229.webp
IP
Requested by https://a.realsrv.com/iframe.php?idzone=4403240&size=300x250
Certificate IssuerLet's Encrypt
Subjectafcdn.net
Fingerprint23:5D:B4:21:E2:4A:BC:A2:81:F9:7D:F8:B1:5C:6C:1D:7D:F3:FC:C8
ValidityThu, 05 Oct 2023 14:56:57 GMT - Wed, 03 Jan 2024 14:56:56 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 300x300, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash d6aebecbcd55c837e926819b2501107c
436e78df886e31e338471bb6e3b05768b8275229
943538330e8c4404c4e9c39a545bba63c18b30d8f1b1da0381d9b338e0457d5f
GET /library/426059/436e78df886e31e338471bb6e3b05768b8275229.webp HTTP/1.1
Host: s3t3d2y8.afcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://a.realsrv.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 26 Nov 2023 04:15:44 GMT
content-type: image/webp
content-length: 9636
last-modified: Tue, 19 Sep 2023 15:48:30 GMT
etag: "6509c2ce-25a4"
accept-ch: Sec-CH-UA,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Model,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version
expires: Wed, 18 Sep 2024 15:54:19 GMT
cache-control: max-age=31536000
access-control-allow-origin: *
x-robots-tag: noindex, follow
x-cache-op: HIT
server: CDN77-Turbo
x-77-nzt: EQwBeX8tUAH3yHI0AA
x-77-nzt-ray: c1fb9819bac235c070c662658de65221
x-accel-expires: @1729070888
x-accel-date: 1697534888
x-cache-lb: HIT
x-age-lb: 3437256
x-77-pop: copenhagenDK
x-77-cache: HIT
x-77-age: 3437256
accept-ranges: bytes
X-Firefox-Spdy: h2
fonts.gstatic.com/s/ubuntu/v20/4iCs6KVjbNBYlgoKfw72.woff2
200 OK 35 kB URL GET HTTP/2 fonts.gstatic.com/s/ubuntu/v20/4iCs6KVjbNBYlgoKfw72.woff2
IP
Requested by http://ads.adxadserv.com/ad?spotid=5ee74fb661d6e22d6c6bca31&type=300x250&output=html&extra1=0&ref=http%3A//173.244.209.59/&dt=1700972146204&screen=1280x1024&tags=
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 34852, version 1.0\012- data
Hash 0e8eefb4549a2edf26c560cb9845952e
8d0b1718aacad934fd0043c87cbc54aa091396bf
7f653b3ce9d3277457fc6da4edb246ae2f6c913f088c42dcb8cd2e96267aa21a
GET /s/ubuntu/v20/4iCs6KVjbNBYlgoKfw72.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://a.ar732.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 34852
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 23 Nov 2023 23:21:57 GMT
expires: Fri, 22 Nov 2024 23:21:57 GMT
cache-control: public, max-age=31536000
age: 190427
last-modified: Wed, 27 Apr 2022 16:31:23 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
adxadserv.com/ascripts/pxl.js
200 OK 24 kB URL GET HTTP/1.1 adxadserv.com/ascripts/pxl.js
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://a.ar732.com/ad?spotid=60d0484161d6e216935300d2&type=300x250&output=html&extra1=0&ref=http%3A//173.244.209.59/&dt=1700972146894&screen=1280x1024&tags=
Certificate IssuerLet's Encrypt
Subjectadxadserv.com
FingerprintF8:88:80:7F:5B:DB:FA:2D:82:38:B4:B0:63:00:5E:F2:59:44:94:52
ValiditySun, 01 Oct 2023 21:03:03 GMT - Sat, 30 Dec 2023 21:03:02 GMT
File type Unicode text, UTF-8 text, with very long lines (36114)
Hash 8348b78d100940ba1808a8e9b93f2e94
c2aa612dc3256c9f235dcfc6e330d0ecaf957768
9c983adf86ebc949957bdf55d524dfa278a79bea8d13f2efa9512c6dd37b86f5
GET /ascripts/pxl.js HTTP/1.1
Host: adxadserv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://a.ar732.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.20.1
Date: Sun, 26 Nov 2023 04:15:44 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Fri, 25 Sep 2020 09:55:25 GMT
ETag: W/"5f6dbe8d-12fee"
Expires: Sat, 25 Nov 2023 07:59:11 GMT
Cache-Control: max-age=86400, public
X-77-NZT: EwwBw7WsGQH3IB0BAAwBuUwKAQH3AAAAAAgB1GY4EQFB
X-77-NZT-Ray: f5ba4623b087aea470c662658a7d6229
X-77-Cache: HIT
Content-Encoding: gzip
X-Accel-Date: 1700899152
X-77-Age: 72992
X-Cache-LB: HIT, HIT
X-Age-LB: 0, 72992
X-77-POP: amsterdamNL
poweredby.jads.co/adshow.php?adzone=942502
200 OK 1.7 kB URL GET HTTP/1.1 poweredby.jads.co/adshow.php?adzone=942502
IP
Requested by https://player.hboav.com/guga/mid_index.php
Certificate IssuerSectigo Limited
Subject*.jads.co
Fingerprint9E:B2:20:AC:19:4B:72:8F:12:D9:D6:5A:6A:B5:BE:EE:46:13:48:EB
ValidityMon, 26 Dec 2022 00:00:00 GMT - Fri, 26 Jan 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (1320), with CRLF, LF line terminators
Hash b2e4c67f2ab75ce00dfa0b3758e2c513
267b1bb430919c4737bad486d0aa207a513f6679
c2e2c601f74b968218665fcb080dfd5e6f4c141be5328da62a936b41f69a1a35
GET /adshow.php?adzone=942502 HTTP/1.1
Host: poweredby.jads.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://player.hboav.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 26 Nov 2023 04:15:44 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
X-Powered-By: PHP/5.6.40
P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID CUR OUR IND STA"
Set-Cookie: surferid=0f1378a541b03be0e2c02baad3a6320a; expires=Mon, 25-Nov-2024 04:15:44 GMT; Max-Age=31536000; path=/; SameSite=None; Secure; domain=.jads.co
juicy_data_1=YTowOnt9; expires=Wed, 29-Nov-2023 04:15:44 GMT; Max-Age=259200; path=/; SameSite=None; Secure; domain=jads.co
juicy_data=YToxOntzOjEyOiJqdWljeV9kYXRhXzEiO3M6MToiMSI7fQ%3D%3D; expires=Wed, 29-Nov-2023 04:15:44 GMT; Max-Age=259200; path=/; SameSite=None; Secure; domain=jads.co
Content-Encoding: gzip
adxadserv.com/px/event/v1?e_t=pageview&url=https%253A%252F%252Fa.ar732.com%252Fad%253Fspotid%253D60d0484161d6e216935300d2%2526type%253D300x250%2526output%253Dhtml%2526extra1%253D0%2526ref%253Dhttp%25253A%252F%252F173.244.209.59%252F%2526dt%253D1700972146894%2526screen%253D1280x1024%2526tags%253D&ref=https%253A%252F%252Fplayer.hboav.com%252F&d_r=1&d_s=1280x1024&d_w=300x250&t_s=1700972147590&t_i=1700972147865&u_tz=0&u_l=en-US&u_l2=&u_l3=&pv_uid=77a21326-5c1b-4e63-880e-922ddd3fa43f&nav_rc=0&nav_nt=NAVIGATE&p_nn=adxad-rtb&p_pt=IFRAME&imid=77c59794-8c12-11ee-a273-e2e38133f3a0&spid=60d0484161d6e216935300d2&fpid_sa=1700972147865&fpid=&feid_sa=1700972147865&sid_sa=1700972147865&feid=8a3ac82f56487445296dcc0b5d3aa996&sid=d51c2e8318aca988d0f3389444a16a91&u_adb=0&vn=T-0.1.1&utm_typ=referral&utm_src=player.hboav.com&s_rst=1&ts=%5B0%2Cfalse%2Cfalse%5D&pl=Linux%20x86_64&cc=NA&ss=1&ls=1&idb=1&ab=0&od=0&ll=0&lr=0&lo=1&lb=0&cd=24&hc=48&dm=-1&dt=0&ed=-1&sr=5497558139904&e_d=%7B%22isResetRequired%22%3Atrue%7D&t_op=0.24
200 OK 0 B URL GET HTTP/1.1 adxadserv.com/px/event/v1?e_t=pageview&url=https%253A%252F%252Fa.ar732.com%252Fad%253Fspotid%253D60d0484161d6e216935300d2%2526type%253D300x250%2526output%253Dhtml%2526extra1%253D0%2526ref%253Dhttp%25253A%252F%252F173.244.209.59%252F%2526dt%253D1700972146894%2526screen%253D1280x1024%2526tags%253D&ref=https%253A%252F%252Fplayer.hboav.com%252F&d_r=1&d_s=1280x1024&d_w=300x250&t_s=1700972147590&t_i=1700972147865&u_tz=0&u_l=en-US&u_l2=&u_l3=&pv_uid=77a21326-5c1b-4e63-880e-922ddd3fa43f&nav_rc=0&nav_nt=NAVIGATE&p_nn=adxad-rtb&p_pt=IFRAME&imid=77c59794-8c12-11ee-a273-e2e38133f3a0&spid=60d0484161d6e216935300d2&fpid_sa=1700972147865&fpid=&feid_sa=1700972147865&sid_sa=1700972147865&feid=8a3ac82f56487445296dcc0b5d3aa996&sid=d51c2e8318aca988d0f3389444a16a91&u_adb=0&vn=T-0.1.1&utm_typ=referral&utm_src=player.hboav.com&s_rst=1&ts=%5B0%2Cfalse%2Cfalse%5D&pl=Linux%20x86_64&cc=NA&ss=1&ls=1&idb=1&ab=0&od=0&ll=0&lr=0&lo=1&lb=0&cd=24&hc=48&dm=-1&dt=0&ed=-1&sr=5497558139904&e_d=%7B%22isResetRequired%22%3Atrue%7D&t_op=0.24
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://a.ar732.com/ad?spotid=60d0484161d6e216935300d2&type=300x250&output=html&extra1=0&ref=http%3A//173.244.209.59/&dt=1700972146894&screen=1280x1024&tags=
Certificate IssuerLet's Encrypt
Subjectadxadserv.com
FingerprintF8:88:80:7F:5B:DB:FA:2D:82:38:B4:B0:63:00:5E:F2:59:44:94:52
ValiditySun, 01 Oct 2023 21:03:03 GMT - Sat, 30 Dec 2023 21:03:02 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /px/event/v1?e_t=pageview&url=https%253A%252F%252Fa.ar732.com%252Fad%253Fspotid%253D60d0484161d6e216935300d2%2526type%253D300x250%2526output%253Dhtml%2526extra1%253D0%2526ref%253Dhttp%25253A%252F%252F173.244.209.59%252F%2526dt%253D1700972146894%2526screen%253D1280x1024%2526tags%253D&ref=https%253A%252F%252Fplayer.hboav.com%252F&d_r=1&d_s=1280x1024&d_w=300x250&t_s=1700972147590&t_i=1700972147865&u_tz=0&u_l=en-US&u_l2=&u_l3=&pv_uid=77a21326-5c1b-4e63-880e-922ddd3fa43f&nav_rc=0&nav_nt=NAVIGATE&p_nn=adxad-rtb&p_pt=IFRAME&imid=77c59794-8c12-11ee-a273-e2e38133f3a0&spid=60d0484161d6e216935300d2&fpid_sa=1700972147865&fpid=&feid_sa=1700972147865&sid_sa=1700972147865&feid=8a3ac82f56487445296dcc0b5d3aa996&sid=d51c2e8318aca988d0f3389444a16a91&u_adb=0&vn=T-0.1.1&utm_typ=referral&utm_src=player.hboav.com&s_rst=1&ts=%5B0%2Cfalse%2Cfalse%5D&pl=Linux%20x86_64&cc=NA&ss=1&ls=1&idb=1&ab=0&od=0&ll=0&lr=0&lo=1&lb=0&cd=24&hc=48&dm=-1&dt=0&ed=-1&sr=5497558139904&e_d=%7B%22isResetRequired%22%3Atrue%7D&t_op=0.24 HTTP/1.1
Host: adxadserv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://a.ar732.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.20.1
Date: Sun, 26 Nov 2023 04:15:44 GMT
Content-Length: 0
Connection: keep-alive
a.magsrv.com/iframe.php?idzone=5129256&size=300x250
200 OK 28 kB URL GET HTTP/2 a.magsrv.com/iframe.php?idzone=5129256&size=300x250
IP
Requested by https://r.trackwilltrk.com/s1/1c3d665f-a99b-4b9e-a1f0-d2344b1d3854?externalId=6441b529-5193-4f4c-8a8a-52d8dfef2c1f&cv1=6441b529-5193-4f4c-8a8a-52d8dfef2c1f&cv2=0c1c5c30286e1db21a741e4b62c8b6e4&cv3=desktop&cv4=64cd06ae61d6e2749522effb&cv5=64cd06a261d6e27424278eff&cv6=en&cv7=5278.cc&cv8=Firefox&cv9=60d0484161d6e216935300d2&cv10=qpas_adxad_stub3_300x250
Certificate IssuerLet's Encrypt
Subjectmagsrv.com
FingerprintC5:BC:C0:62:0C:DC:A9:D2:61:A6:77:A9:6C:31:19:AD:CD:2E:00:67
ValidityThu, 05 Oct 2023 15:26:28 GMT - Wed, 03 Jan 2024 15:26:27 GMT
File type gzip compressed data, from Unix\012- data
Hash 982a3f0d1a39bff24704ae2aa3936272
cd68af613edb864406155626fca90295c29636ef
fc5aee35b5e3fe337ed2e57e7b8ede23a756a70f7ff3e93b7137f7d2793e8dcc
GET /iframe.php?idzone=5129256&size=300x250 HTTP/1.1
Host: a.magsrv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://r.trackwilltrk.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 26 Nov 2023 04:15:44 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
accept-ch:
expires: Sun, 26 Nov 2023 06:31:43 GMT
cache-control: max-age=10800
x-robots-tag: noindex, follow
access-control-allow-origin: *
x-77-nzt: EgwBeX8tUAH3vAkAAAwBJRPCKAH3lQAAAA
x-77-nzt-ray: c1fb98198ca7b8c070c6626522421d33
x-accel-expires: @1700980303
x-accel-date: 1700969652
x-77-cache: HIT
x-77-age: 2641
content-encoding: gzip
server: CDN77-Turbo
x-cache-lb: HIT
x-age-lb: 2492
x-77-pop: copenhagenDK
X-Firefox-Spdy: h2
a.realsrv.com/iframe.php?idzone=4403240&size=300x250
200 OK 52 kB URL GET HTTP/2 a.realsrv.com/iframe.php?idzone=4403240&size=300x250
IP
ASN #60068 Datacamp Limited
Requested by https://player.hboav.com/guga/mid_index.php
Certificate IssuerLet's Encrypt
Subjectrealsrv.com
Fingerprint33:54:4D:F8:0E:E4:00:D3:20:90:CA:61:C8:CC:4D:D5:CB:BB:83:57
ValidityThu, 05 Oct 2023 15:34:07 GMT - Wed, 03 Jan 2024 15:34:06 GMT
File type gzip compressed data, from Unix\012- data
Hash ea19a7ec3c8b7ae5fc4c7e98087ebdb9
58f8c005c0f0e1d66889ea60d78d0fd3788eda59
7c094db0dcf91b5afacee462a40850fc1e207ea0100e21b4eed8b69d54deed45
GET /iframe.php?idzone=4403240&size=300x250 HTTP/1.1
Host: a.realsrv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://player.hboav.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 26 Nov 2023 04:15:43 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
accept-ch: Sec-CH-UA,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Model,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version
expires: Sun, 26 Nov 2023 07:08:08 GMT
cache-control: max-age=10800
x-robots-tag: noindex, follow
access-control-allow-origin: *
x-77-nzt: EwwBuUwJFAHXxwEAAAwBuUwKAQGzYyoAAAwB1GY4EQGzmSoAAA
x-77-nzt-ray: af585630df53b97b6fc6626513b8b42b
x-accel-expires: @1700982488
x-accel-date: 1700971688
x-77-cache: HIT
x-77-age: 22211
content-encoding: gzip
server: CDN77-Turbo
x-cache-lb: EXPIRED, HIT
x-age-lb: 10851, 455
x-77-pop: stockholmSE
X-Firefox-Spdy: h2
s.magsrv.com/v1/api.php
200 OK 3.0 kB IP
ASN #60781 LeaseWeb Netherlands B.V.
Requested by https://a.magsrv.com/iframe.php?idzone=5129256&size=300x250
Certificate IssuerLet's Encrypt
Subjectmagsrv.com
FingerprintC5:BC:C0:62:0C:DC:A9:D2:61:A6:77:A9:6C:31:19:AD:CD:2E:00:67
ValidityThu, 05 Oct 2023 15:26:28 GMT - Wed, 03 Jan 2024 15:26:27 GMT
File type JSON data\012- , ASCII text, with very long lines (6330), with no line terminators
Hash 9671ce901d51067c182863432426267a
3e465ec2bea732d8786c762d1bbc47321d030a8e
5e7c7379c2d6b377a767a681d05e33a83a90e9bcbb188cc160f6cf7c28fbd310
POST /v1/api.php HTTP/1.1
Host: s.magsrv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 311
Origin: https://a.magsrv.com
DNT: 1
Connection: keep-alive
Referer: https://a.magsrv.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 26 Nov 2023 04:15:45 GMT
Content-Type: application/json
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: https://a.magsrv.com
Access-Control-Allow-Headers: Authorization, Content-Type
Access-Control-Request-Method: POST
Access-Control-Allow-Credentials: true
Set-Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A32%3A%226562c6712fee98.23548816652243036%22%3B%7D; expires=Tue, 25-Nov-2025 04:15:45 GMT; Max-Age=63072000; path=/; domain=magsrv.com; secure; SameSite=None
Accept-CH:
X-Robots-Tag: noindex, follow
Content-Encoding: gzip
s.magsrv.com/cimp.php?t=api&data=H4sIAAAAAAAAAz2Q3UpDMRCEX8UXaJjd7Oan994qFHyAnJ9KsUU4inoxD29yimYITJbZ4SMKjQeRg/qDxqP40ZxVQkUwDeLGp+cTTfi5tfnt+3K9hvn9RtMErxQXy8pcNYnTRat6oqPQcpVYwZKSJs+ggZHoUo9mwwUAqoiw7FYFdWzy8eW0X6EElGpUsD8Gxeiw7vEzetYlQ1spc9F1ndpUYsnLOU1TTEvL9TyCbOHWXj+2rx0adwVE7ejUv0HXYYSjWNTO1g+4jy/nrd1W8j93J2fey1W5F4GJVtAd05onNFlyysnXYrPGqZjOWKR/R2u/MeYIj24BAAA=
200 OK 20 B URL GET HTTP/1.1 s.magsrv.com/cimp.php?t=api&data=H4sIAAAAAAAAAz2Q3UpDMRCEX8UXaJjd7Oan994qFHyAnJ9KsUU4inoxD29yimYITJbZ4SMKjQeRg/qDxqP40ZxVQkUwDeLGp+cTTfi5tfnt+3K9hvn9RtMErxQXy8pcNYnTRat6oqPQcpVYwZKSJs+ggZHoUo9mwwUAqoiw7FYFdWzy8eW0X6EElGpUsD8Gxeiw7vEzetYlQ1spc9F1ndpUYsnLOU1TTEvL9TyCbOHWXj+2rx0adwVE7ejUv0HXYYSjWNTO1g+4jy/nrd1W8j93J2fey1W5F4GJVtAd05onNFlyysnXYrPGqZjOWKR/R2u/MeYIj24BAAA=
IP
ASN #60781 LeaseWeb Netherlands B.V.
Requested by https://a.magsrv.com/iframe.php?idzone=5129256&size=300x250
Certificate IssuerLet's Encrypt
Subjectmagsrv.com
FingerprintC5:BC:C0:62:0C:DC:A9:D2:61:A6:77:A9:6C:31:19:AD:CD:2E:00:67
ValidityThu, 05 Oct 2023 15:26:28 GMT - Wed, 03 Jan 2024 15:26:27 GMT
File type gzip compressed data, max speed, from Unix\012- data
Hash a4745abc5e7fdb89cc6df3069f3c6e69
74789f7ddbebd5b7323f6f8174005b4bf8c1f1ed
d1111b245f685176180e6f1631e6dc49badf6672368e9ce260c71355165effdf
GET /cimp.php?t=api&data=H4sIAAAAAAAAAz2Q3UpDMRCEX8UXaJjd7Oan994qFHyAnJ9KsUU4inoxD29yimYITJbZ4SMKjQeRg/qDxqP40ZxVQkUwDeLGp+cTTfi5tfnt+3K9hvn9RtMErxQXy8pcNYnTRat6oqPQcpVYwZKSJs+ggZHoUo9mwwUAqoiw7FYFdWzy8eW0X6EElGpUsD8Gxeiw7vEzetYlQ1spc9F1ndpUYsnLOU1TTEvL9TyCbOHWXj+2rx0adwVE7ejUv0HXYYSjWNTO1g+4jy/nrd1W8j93J2fey1W5F4GJVtAd05onNFlyysnXYrPGqZjOWKR/R2u/MeYIj24BAAA= HTTP/1.1
Host: s.magsrv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://a.magsrv.com
DNT: 1
Connection: keep-alive
Referer: https://a.magsrv.com/
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A32%3A%226562c6712fee98.23548816652243036%22%3B%7D
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 26 Nov 2023 04:15:45 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: https://a.magsrv.com
Access-Control-Allow-Credentials: true
Set-Cookie: __upt=%7B%22v%22%3A1%2C%22id%22%3A%220%22%2C%22pcma%22%3A%22%22%2C%22acma%22%3A%22508.0199%22%7D; expires=Tue, 25 Nov 2025 04:15:45 GMT; path=/; domain=.magsrv.com; Secure; SameSite=none
Accept-CH:
X-Robots-Tag: noindex, follow
Content-Encoding: gzip
s3t3d2y8.afcdn.net/library/426059/436e78df886e31e338471bb6e3b05768b8275229.webp
200 OK 9.6 kB URL GET HTTP/2 s3t3d2y8.afcdn.net/library/426059/436e78df886e31e338471bb6e3b05768b8275229.webp
IP
Requested by https://a.realsrv.com/iframe.php?idzone=4403240&size=300x250
Certificate IssuerLet's Encrypt
Subjectafcdn.net
Fingerprint23:5D:B4:21:E2:4A:BC:A2:81:F9:7D:F8:B1:5C:6C:1D:7D:F3:FC:C8
ValidityThu, 05 Oct 2023 14:56:57 GMT - Wed, 03 Jan 2024 14:56:56 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 300x300, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash d6aebecbcd55c837e926819b2501107c
436e78df886e31e338471bb6e3b05768b8275229
943538330e8c4404c4e9c39a545bba63c18b30d8f1b1da0381d9b338e0457d5f
GET /library/426059/436e78df886e31e338471bb6e3b05768b8275229.webp HTTP/1.1
Host: s3t3d2y8.afcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://a.magsrv.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 26 Nov 2023 04:15:45 GMT
content-type: image/webp
content-length: 9636
last-modified: Tue, 19 Sep 2023 15:48:30 GMT
etag: "6509c2ce-25a4"
accept-ch: Sec-CH-UA,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Model,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version
expires: Wed, 18 Sep 2024 15:54:19 GMT
cache-control: max-age=31536000
access-control-allow-origin: *
x-robots-tag: noindex, follow
x-cache-op: HIT
server: CDN77-Turbo
x-77-nzt: EQwBeX8tUAH3yXI0AA
x-77-nzt-ray: c1fb9819bac235c071c662655c7fb50f
x-accel-expires: @1729070888
x-accel-date: 1697534888
x-cache-lb: HIT
x-age-lb: 3437257
x-77-pop: copenhagenDK
x-77-cache: HIT
x-77-age: 3437257
accept-ranges: bytes
X-Firefox-Spdy: h2
adxadserv.com/px/heartbeat/v1?pv_uid=f2bce5a7-458c-42eb-8836-f9e137d7a47d&t_op=5.422&p_nn=adxad-rtb&fpid_sa=1700972147140&fpid=f420958de7d80c63e74e56617a5632be&feid_sa=1700972147140&sid_sa=1700972147140&feid=2da783b402bff6f89fad9ace36b5547a&sid=3c785e1d253a16c7b712319945c44c4d&u_adb=0&vn=T-0.1.1&utm_typ=referral&utm_src=173.244.209.59&s_rst=0&ts=%5B0%2Cfalse%2Cfalse%5D&pl=Linux%20x86_64&cc=NA&ss=1&ls=1&idb=1&ab=0&od=0&ll=0&lr=0&lo=1&lb=0&cd=24&hc=48&dm=-1&dt=0&ed=-1&sr=5497558139904&fb=10384
200 OK 0 B URL POST HTTP/1.1 adxadserv.com/px/heartbeat/v1?pv_uid=f2bce5a7-458c-42eb-8836-f9e137d7a47d&t_op=5.422&p_nn=adxad-rtb&fpid_sa=1700972147140&fpid=f420958de7d80c63e74e56617a5632be&feid_sa=1700972147140&sid_sa=1700972147140&feid=2da783b402bff6f89fad9ace36b5547a&sid=3c785e1d253a16c7b712319945c44c4d&u_adb=0&vn=T-0.1.1&utm_typ=referral&utm_src=173.244.209.59&s_rst=0&ts=%5B0%2Cfalse%2Cfalse%5D&pl=Linux%20x86_64&cc=NA&ss=1&ls=1&idb=1&ab=0&od=0&ll=0&lr=0&lo=1&lb=0&cd=24&hc=48&dm=-1&dt=0&ed=-1&sr=5497558139904&fb=10384
IP
ASN #39572 DataWeb Global Group B.V.
Requested by http://ads.adxadserv.com/ad?spotid=5ee74fb661d6e22d6c6bca31&type=300x250&output=html&extra1=0&ref=http%3A//173.244.209.59/&dt=1700972146204&screen=1280x1024&tags=
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /px/heartbeat/v1?pv_uid=f2bce5a7-458c-42eb-8836-f9e137d7a47d&t_op=5.422&p_nn=adxad-rtb&fpid_sa=1700972147140&fpid=f420958de7d80c63e74e56617a5632be&feid_sa=1700972147140&sid_sa=1700972147140&feid=2da783b402bff6f89fad9ace36b5547a&sid=3c785e1d253a16c7b712319945c44c4d&u_adb=0&vn=T-0.1.1&utm_typ=referral&utm_src=173.244.209.59&s_rst=0&ts=%5B0%2Cfalse%2Cfalse%5D&pl=Linux%20x86_64&cc=NA&ss=1&ls=1&idb=1&ab=0&od=0&ll=0&lr=0&lo=1&lb=0&cd=24&hc=48&dm=-1&dt=0&ed=-1&sr=5497558139904&fb=10384 HTTP/1.1
Host: adxadserv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: text/plain;charset=UTF-8
Content-Length: 1
Origin: http://ads.adxadserv.com
DNT: 1
Connection: keep-alive
Referer: http://ads.adxadserv.com/
HTTP/1.1 200 OK
Server: nginx/1.20.1
Date: Sun, 26 Nov 2023 04:15:49 GMT
Content-Length: 0
Connection: keep-alive
adxadserv.com/px/heartbeat/v1?pv_uid=77a21326-5c1b-4e63-880e-922ddd3fa43f&t_op=5.241&p_nn=adxad-rtb&fpid_sa=1700972147865&fpid=f420958de7d80c63e74e56617a5632be&feid_sa=1700972147865&sid_sa=1700972147865&feid=8a3ac82f56487445296dcc0b5d3aa996&sid=d51c2e8318aca988d0f3389444a16a91&u_adb=0&vn=T-0.1.1&utm_typ=referral&utm_src=player.hboav.com&s_rst=0&ts=%5B0%2Cfalse%2Cfalse%5D&pl=Linux%20x86_64&cc=NA&ss=1&ls=1&idb=1&ab=0&od=0&ll=0&lr=0&lo=1&lb=0&cd=24&hc=48&dm=-1&dt=0&ed=-1&sr=5497558139904&fb=10384
200 OK 0 B URL POST HTTP/1.1 adxadserv.com/px/heartbeat/v1?pv_uid=77a21326-5c1b-4e63-880e-922ddd3fa43f&t_op=5.241&p_nn=adxad-rtb&fpid_sa=1700972147865&fpid=f420958de7d80c63e74e56617a5632be&feid_sa=1700972147865&sid_sa=1700972147865&feid=8a3ac82f56487445296dcc0b5d3aa996&sid=d51c2e8318aca988d0f3389444a16a91&u_adb=0&vn=T-0.1.1&utm_typ=referral&utm_src=player.hboav.com&s_rst=0&ts=%5B0%2Cfalse%2Cfalse%5D&pl=Linux%20x86_64&cc=NA&ss=1&ls=1&idb=1&ab=0&od=0&ll=0&lr=0&lo=1&lb=0&cd=24&hc=48&dm=-1&dt=0&ed=-1&sr=5497558139904&fb=10384
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://a.ar732.com/ad?spotid=60d0484161d6e216935300d2&type=300x250&output=html&extra1=0&ref=http%3A//173.244.209.59/&dt=1700972146894&screen=1280x1024&tags=
Certificate IssuerLet's Encrypt
Subjectadxadserv.com
FingerprintF8:88:80:7F:5B:DB:FA:2D:82:38:B4:B0:63:00:5E:F2:59:44:94:52
ValiditySun, 01 Oct 2023 21:03:03 GMT - Sat, 30 Dec 2023 21:03:02 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /px/heartbeat/v1?pv_uid=77a21326-5c1b-4e63-880e-922ddd3fa43f&t_op=5.241&p_nn=adxad-rtb&fpid_sa=1700972147865&fpid=f420958de7d80c63e74e56617a5632be&feid_sa=1700972147865&sid_sa=1700972147865&feid=8a3ac82f56487445296dcc0b5d3aa996&sid=d51c2e8318aca988d0f3389444a16a91&u_adb=0&vn=T-0.1.1&utm_typ=referral&utm_src=player.hboav.com&s_rst=0&ts=%5B0%2Cfalse%2Cfalse%5D&pl=Linux%20x86_64&cc=NA&ss=1&ls=1&idb=1&ab=0&od=0&ll=0&lr=0&lo=1&lb=0&cd=24&hc=48&dm=-1&dt=0&ed=-1&sr=5497558139904&fb=10384 HTTP/1.1
Host: adxadserv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 1
Origin: https://a.ar732.com
DNT: 1
Connection: keep-alive
Referer: https://a.ar732.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.20.1
Date: Sun, 26 Nov 2023 04:15:49 GMT
Content-Length: 0
Connection: keep-alive
2158novffp.com/whob.gif?z=1942075&pb=e862a52c534778b1aed4a6df73a19adb1700979343&psp=7-0spdn6Z5JifjInHxIiRBayRjgpDqUpsXuZQW3X6USGUAtL0jomZgreUQz4_0_mLUqThMGBoANUCAPeS2aEr0cw7f7YtqJAltlFDgrejmV_BWK9s0Dh9Uf3gx9Tis449wcuoJidt-pO-hrkfRLmO5cgGn6T8L0lS76yFcose0Uiedzz0ASIAgqLVYhhWfttcasZYRHuz0c8Hd1Bt45FvkWwcL_D79CML5Qcc6SNm_yt1rJtOlW837YPmJAZ_N_IEFmgpzx0VDn9sMT9W6BOHU30XyJ6L6FyP6LPgGl765RZS7ERYA5OhyHyDyBXKrcUbY2srk3XmQtycGxGy0PLo3Zmsajdy-2aDc11OBqj8drJA8iWuYkshuWl3emVYtusjLKLetbpK0hH4RFQgCzA7KE765IlbrCFtyRf9Phxv0a9F1znDfA3Wem4z4hvQOc9gLWyFi3QPwI7kO0vfzJJtGmsEcfUYSW4j33F5FpLIfk25d3hgrLycIT9WTXA4ssK2aHOcim4eTkiENIMvfGAgY7CPMnyyhQy5QBKoyxBaV39iZ4PYzZtViq7qo80SuFcRqDw20t5g4Kbq7uiVdy03YnqatcQLaD4dNcSNtTkyCv_cDd_E6YC0NvS6jDPbywuIclGi6_bPzUfVysA11s_5iNmqjXfxwp-PtEAIeMdE5nl4qlHb_OfxwCWRmDxyomQJRcrV_iDAm_yH_BBs86qM9WCbibykEdgha2aw5pn3QbXQPFKGMMRo_O8R9Y0sGHCfkcj3apdmpfuppCUVOn3sKYscykr73fW_4yiDL2zkd-P1ZdBcs0YA1ReKILGE9YM40yIpmpJq_K6V1Hnz2jOeEtgI8ddPk3BA3XQX3wl-27mCNcEhh2CH4kM5-d4QdPTIVs56ZG4GmdhjqoShVY6KKXaZQbjgUtaw0jir4ySzu4qdnnZlLTGRQva1Vs84Fjv-v6Q5_iGbE-eRtZklwyefhxDsr09xUEjlGZ4xS6T5kO1EVJvN6LKjB3nOjzTzRY=&im=1&freq=0&nojs=0&abvar=0&febuild=1.0.178&t=0&wcks=1&wgl=0&cnvs=1&os=0&ss=1&ls=1&bb=0&plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF&lang=en-US&pf=Linux%20x86_64&cd=24&ix=0&x=1280&y=1024&md=0&afid=6303924398259712&eclog=0&sp=1&im=1&pload=285
200 OK 43 B URL GET HTTP/2 2158novffp.com/whob.gif?z=1942075&pb=e862a52c534778b1aed4a6df73a19adb1700979343&psp=7-0spdn6Z5JifjInHxIiRBayRjgpDqUpsXuZQW3X6USGUAtL0jomZgreUQz4_0_mLUqThMGBoANUCAPeS2aEr0cw7f7YtqJAltlFDgrejmV_BWK9s0Dh9Uf3gx9Tis449wcuoJidt-pO-hrkfRLmO5cgGn6T8L0lS76yFcose0Uiedzz0ASIAgqLVYhhWfttcasZYRHuz0c8Hd1Bt45FvkWwcL_D79CML5Qcc6SNm_yt1rJtOlW837YPmJAZ_N_IEFmgpzx0VDn9sMT9W6BOHU30XyJ6L6FyP6LPgGl765RZS7ERYA5OhyHyDyBXKrcUbY2srk3XmQtycGxGy0PLo3Zmsajdy-2aDc11OBqj8drJA8iWuYkshuWl3emVYtusjLKLetbpK0hH4RFQgCzA7KE765IlbrCFtyRf9Phxv0a9F1znDfA3Wem4z4hvQOc9gLWyFi3QPwI7kO0vfzJJtGmsEcfUYSW4j33F5FpLIfk25d3hgrLycIT9WTXA4ssK2aHOcim4eTkiENIMvfGAgY7CPMnyyhQy5QBKoyxBaV39iZ4PYzZtViq7qo80SuFcRqDw20t5g4Kbq7uiVdy03YnqatcQLaD4dNcSNtTkyCv_cDd_E6YC0NvS6jDPbywuIclGi6_bPzUfVysA11s_5iNmqjXfxwp-PtEAIeMdE5nl4qlHb_OfxwCWRmDxyomQJRcrV_iDAm_yH_BBs86qM9WCbibykEdgha2aw5pn3QbXQPFKGMMRo_O8R9Y0sGHCfkcj3apdmpfuppCUVOn3sKYscykr73fW_4yiDL2zkd-P1ZdBcs0YA1ReKILGE9YM40yIpmpJq_K6V1Hnz2jOeEtgI8ddPk3BA3XQX3wl-27mCNcEhh2CH4kM5-d4QdPTIVs56ZG4GmdhjqoShVY6KKXaZQbjgUtaw0jir4ySzu4qdnnZlLTGRQva1Vs84Fjv-v6Q5_iGbE-eRtZklwyefhxDsr09xUEjlGZ4xS6T5kO1EVJvN6LKjB3nOjzTzRY=&im=1&freq=0&nojs=0&abvar=0&febuild=1.0.178&t=0&wcks=1&wgl=0&cnvs=1&os=0&ss=1&ls=1&bb=0&plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF&lang=en-US&pf=Linux%20x86_64&cd=24&ix=0&x=1280&y=1024&md=0&afid=6303924398259712&eclog=0&sp=1&im=1&pload=285
IP
Certificate IssuerBuypass AS-983163327
Subject
FingerprintFD:C1:CF:80:A9:5B:D1:10:B4:B3:C7:69:11:E1:AC:06:8F:75:9B:6C
ValiditySat, 28 Oct 2023 07:18:45 GMT - Wed, 24 Apr 2024 21:59:00 GMT
File type GIF image data, version 89a, 1 x 1\012- data
Hash 28e463819a210071de3b45ebe7633613
6dccd571828ec0912629119cf7eabfea9f33ddbc
44251f61629e2bfeead421241a917f43ad047af351659f01cd8fd937f0417f84
GET /whob.gif?z=1942075&pb=e862a52c534778b1aed4a6df73a19adb1700979343&psp=7-0spdn6Z5JifjInHxIiRBayRjgpDqUpsXuZQW3X6USGUAtL0jomZgreUQz4_0_mLUqThMGBoANUCAPeS2aEr0cw7f7YtqJAltlFDgrejmV_BWK9s0Dh9Uf3gx9Tis449wcuoJidt-pO-hrkfRLmO5cgGn6T8L0lS76yFcose0Uiedzz0ASIAgqLVYhhWfttcasZYRHuz0c8Hd1Bt45FvkWwcL_D79CML5Qcc6SNm_yt1rJtOlW837YPmJAZ_N_IEFmgpzx0VDn9sMT9W6BOHU30XyJ6L6FyP6LPgGl765RZS7ERYA5OhyHyDyBXKrcUbY2srk3XmQtycGxGy0PLo3Zmsajdy-2aDc11OBqj8drJA8iWuYkshuWl3emVYtusjLKLetbpK0hH4RFQgCzA7KE765IlbrCFtyRf9Phxv0a9F1znDfA3Wem4z4hvQOc9gLWyFi3QPwI7kO0vfzJJtGmsEcfUYSW4j33F5FpLIfk25d3hgrLycIT9WTXA4ssK2aHOcim4eTkiENIMvfGAgY7CPMnyyhQy5QBKoyxBaV39iZ4PYzZtViq7qo80SuFcRqDw20t5g4Kbq7uiVdy03YnqatcQLaD4dNcSNtTkyCv_cDd_E6YC0NvS6jDPbywuIclGi6_bPzUfVysA11s_5iNmqjXfxwp-PtEAIeMdE5nl4qlHb_OfxwCWRmDxyomQJRcrV_iDAm_yH_BBs86qM9WCbibykEdgha2aw5pn3QbXQPFKGMMRo_O8R9Y0sGHCfkcj3apdmpfuppCUVOn3sKYscykr73fW_4yiDL2zkd-P1ZdBcs0YA1ReKILGE9YM40yIpmpJq_K6V1Hnz2jOeEtgI8ddPk3BA3XQX3wl-27mCNcEhh2CH4kM5-d4QdPTIVs56ZG4GmdhjqoShVY6KKXaZQbjgUtaw0jir4ySzu4qdnnZlLTGRQva1Vs84Fjv-v6Q5_iGbE-eRtZklwyefhxDsr09xUEjlGZ4xS6T5kO1EVJvN6LKjB3nOjzTzRY=&im=1&freq=0&nojs=0&abvar=0&febuild=1.0.178&t=0&wcks=1&wgl=0&cnvs=1&os=0&ss=1&ls=1&bb=0&plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF&lang=en-US&pf=Linux%20x86_64&cd=24&ix=0&x=1280&y=1024&md=0&afid=6303924398259712&eclog=0&sp=1&im=1&pload=285 HTTP/1.1
Host: 2158novffp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: CHCK=1; UID=2311252315ce50ea70928743d6bd515397eb
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 26 Nov 2023 04:15:52 GMT
content-type: image/gif
content-length: 43
x-route-id: stats.banner.view
timing-allow-origin: *
accept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
X-Firefox-Spdy: h2
5278.cc/static/image/common/newarow.gif
200 OK 327 B URL GET HTTP/2 5278.cc/static/image/common/newarow.gif
IP
Certificate IssuerGoogle Trust Services LLC
Subject5278.cc
FingerprintA7:8B:0C:69:3F:1F:90:57:E6:4C:5F:0A:A6:52:71:47:B2:5B:53:48
ValidityWed, 18 Oct 2023 21:07:14 GMT - Tue, 16 Jan 2024 21:07:13 GMT
File type GIF image data, version 89a, 500 x 46\012- data
Hash 9df8c0bbbf3885c3cecc424afda95306
936d2a15b8379cca338eb67573bbbd120b6c864f
144378b0a6ca8b3f4c2fa9ba0fe9dc1ef6e0e91655aa0e9415f5b7ec83bf4028
GET /static/image/common/newarow.gif HTTP/1.1
Host: 5278.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://5278.cc/data/cache/style_1_common.css?QuV
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 26 Nov 2023 04:15:42 GMT
content-type: image/gif
content-length: 327
last-modified: Mon, 30 Mar 2020 00:45:00 GMT
etag: "5e81410c-147"
expires: Wed, 29 Nov 2023 11:52:14 GMT
cache-control: max-age=604800
x-xss-protection: 1; mode=block
referrer-policy: no-referrer-when-downgrade
cf-cache-status: HIT
age: 318207
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 82bf4fd42a0bb4ee-OSL
X-Firefox-Spdy: h2
5278.cc/static/image/common/background.png
200 OK 1.2 kB URL GET HTTP/2 5278.cc/static/image/common/background.png
IP
Certificate IssuerGoogle Trust Services LLC
Subject5278.cc
FingerprintA7:8B:0C:69:3F:1F:90:57:E6:4C:5F:0A:A6:52:71:47:B2:5B:53:48
ValidityWed, 18 Oct 2023 21:07:14 GMT - Tue, 16 Jan 2024 21:07:13 GMT
File type PNG image data, 50 x 81, 8-bit colormap, non-interlaced\012- data
Hash 5c884d51205f2f58a0e12eb91d6fb665
42be54df261896116149f3a27132c19b3c57c9fc
ff49564e79c4029241afef0a3e56ffe6c09f07f945a6b0cdf78b84b839c2eb7d
GET /static/image/common/background.png HTTP/1.1
Host: 5278.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://5278.cc/data/cache/style_1_common.css?QuV
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 26 Nov 2023 04:15:42 GMT
content-type: image/png
content-length: 1166
last-modified: Mon, 30 Mar 2020 00:44:58 GMT
etag: "5e81410a-48e"
expires: Fri, 01 Dec 2023 07:23:40 GMT
cache-control: max-age=604800
x-xss-protection: 1; mode=block
referrer-policy: no-referrer-when-downgrade
cf-cache-status: HIT
age: 161522
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 82bf4fd3e9edb4ee-OSL
X-Firefox-Spdy: h2
a.realsrv.com/ad-provider.js
200 OK 122 kB URL GET HTTP/2 a.realsrv.com/ad-provider.js
IP
ASN #60068 Datacamp Limited
Requested by https://a.realsrv.com/iframe.php?idzone=4403240&size=300x250
Certificate IssuerLet's Encrypt
Subjectrealsrv.com
Fingerprint33:54:4D:F8:0E:E4:00:D3:20:90:CA:61:C8:CC:4D:D5:CB:BB:83:57
ValidityThu, 05 Oct 2023 15:34:07 GMT - Wed, 03 Jan 2024 15:34:06 GMT
File type ASCII text, with very long lines (32959)
Size 122 kB (122118 bytes)
Hash d49a008c1ebc345a45c82d3568b74a57
a3a4ec9261ccc398f73e0a7ae180432d955f8f5f
16c49ebd0602f212c42aa872a47149de690000186578416857ce78c95b46fb3e
GET /ad-provider.js HTTP/1.1
Host: a.realsrv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://a.realsrv.com/iframe.php?idzone=4403240&size=300x250
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 26 Nov 2023 04:15:43 GMT
content-type: application/javascript
vary: Accept-Encoding
etag: W/"a3a4ec9261ccc398f73e0a7ae18"
accept-ch:
expires: Thu, 23 Nov 2023 13:30:35 GMT
cache-control: max-age=10800
x-robots-tag: noindex, follow
access-control-allow-origin: *
x-77-nzt: A7lMCRQ3Nzf/RgoAALlMCgk3Nzf/CQAAANRmOBE3Nzf/BBwAAA
x-77-nzt-ray: af585630df53b97b6fc66265f8939839
x-accel-expires: @1700980313
x-accel-date: 1700969513
x-77-cache: HIT
x-77-age: 9811
content-encoding: gzip
server: CDN77-Turbo
x-cache-lb: HIT, HIT
x-age-lb: 9, 2630
x-77-pop: stockholmSE
X-Firefox-Spdy: h2
static.adxadserv.com/js/adb.js
200 OK 1.3 kB URL GET HTTP/2 static.adxadserv.com/js/adb.js
IP
ASN #60068 Datacamp Limited
Certificate IssuerLet's Encrypt
Subject1585977359.rsc.cdn77.org
Fingerprint11:4C:DC:15:D3:66:0C:E4:77:6D:B8:F8:DE:49:6F:09:2A:C9:1F:CB
ValidityWed, 22 Nov 2023 23:05:55 GMT - Tue, 20 Feb 2024 23:05:54 GMT
File type troff or preprocessor input, ASCII text, with very long lines (1365), with no line terminators
Hash 2ea8d2bc9be2b596f2df95f25d68ef61
cae60cdb0e4e7176ed676de49a48a5145b684c22
6437eb006f05e8d3b3227e3dc259912ab006774caa42584364c4ca2618cf3441
GET /js/adb.js HTTP/1.1
Host: static.adxadserv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://173.244.209.59/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 26 Nov 2023 04:15:42 GMT
content-type: application/javascript
vary: Accept-Encoding
last-modified: Tue, 05 Sep 2023 14:53:26 GMT
etag: W/"64f740e6-510"
server: CDN77-Turbo
x-77-nzt: EQwBuUwJDQH3ia8MAA
x-77-nzt-ray: c0a4cc2885ffd7026ec662655a58a50b
x-accel-expires: @1701177571
x-accel-date: 1700140773
x-cache-lb: HIT
x-age-lb: 831369
x-77-pop: stockholmSE
x-77-cache: HIT
x-77-age: 831369
content-encoding: gzip
X-Firefox-Spdy: h2
player.hboav.com/guga/images/20231123/3.gif
200 OK 95 kB URL GET HTTP/2 player.hboav.com/guga/images/20231123/3.gif
IP
Requested by https://player.hboav.com/guga/20231123_square.html
Certificate IssuerZeroSSL
Subjectplayer.hboav.com
Fingerprint9F:B9:42:16:DD:30:9A:F3:AF:D9:D0:93:F3:33:02:F3:7F:5C:BD:02
ValidityThu, 16 Nov 2023 00:00:00 GMT - Wed, 14 Feb 2024 23:59:59 GMT
File type GIF image data, version 89a, 300 x 250\012- data
Hash f3afd0f899f18a2fe68e23b95cf8d57e
0bfa28b8a2c3dfb4149f81c832b495f3338f8fe2
1eba54e8e87fbd9e829608f3e251fd17776bd8a69a1137645247c28d6ec5a89a
GET /guga/images/20231123/3.gif HTTP/1.1
Host: player.hboav.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://player.hboav.com/guga/20231123_square.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 26 Nov 2023 04:15:43 GMT
content-type: image/gif
content-length: 94867
last-modified: Wed, 22 Nov 2023 11:49:36 GMT
etag: "655dead0-17293"
expires: Mon, 27 Nov 2023 04:15:43 GMT
cache-control: max-age=86400
accept-ranges: bytes
X-Firefox-Spdy: h2
5278.cc/static/image/common/chart.png
200 OK 990 B URL GET HTTP/2 5278.cc/static/image/common/chart.png
IP
Certificate IssuerGoogle Trust Services LLC
Subject5278.cc
FingerprintA7:8B:0C:69:3F:1F:90:57:E6:4C:5F:0A:A6:52:71:47:B2:5B:53:48
ValidityWed, 18 Oct 2023 21:07:14 GMT - Tue, 16 Jan 2024 21:07:13 GMT
File type PNG image data, 16 x 16, 8-bit colormap, non-interlaced\012- data
Hash 3046ca1c2d74c72b752711e737c1a965
44856101b21db49e188fecef03f8e91c7e0bdc61
b2018d88f01016ba37924a4a7df4c39399ff28109dd65acd195b8b263cb65720
GET /static/image/common/chart.png HTTP/1.1
Host: 5278.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://5278.cc/data/cache/style_1_forum_index.css?QuV
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 26 Nov 2023 04:15:42 GMT
content-type: image/png
content-length: 990
last-modified: Mon, 30 Mar 2020 00:44:58 GMT
etag: "5e81410a-3de"
expires: Wed, 29 Nov 2023 11:52:15 GMT
cache-control: max-age=604800
x-xss-protection: 1; mode=block
referrer-policy: no-referrer-when-downgrade
cf-cache-status: HIT
age: 318207
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 82bf4fd53aa1b4ee-OSL
X-Firefox-Spdy: h2
adxadserv.com/px/event/v1?e_t=pageview&url=http%253A%252F%252Fads.adxadserv.com%252Fad%253Fspotid%253D5ee74fb661d6e22d6c6bca31%2526type%253D300x250%2526output%253Dhtml%2526extra1%253D0%2526ref%253Dhttp%25253A%252F%252F173.244.209.59%252F%2526dt%253D1700972146204%2526screen%253D1280x1024%2526tags%253D&ref=http%253A%252F%252F173.244.209.59%252F&d_r=1&d_s=1280x1024&d_w=300x250&t_s=1700972146497&t_i=1700972147140&u_tz=0&u_l=en-US&u_l2=&u_l3=&pv_uid=f2bce5a7-458c-42eb-8836-f9e137d7a47d&nav_rc=0&nav_nt=NAVIGATE&p_nn=adxad-rtb&p_pt=IFRAME&imid=772686c2-8c12-11ee-a273-e2e38133f3a0&spid=5ee74fb661d6e22d6c6bca31&fpid_sa=1700972147140&fpid=&feid_sa=1700972147140&sid_sa=1700972147140&feid=2da783b402bff6f89fad9ace36b5547a&sid=3c785e1d253a16c7b712319945c44c4d&u_adb=0&vn=T-0.1.1&utm_typ=referral&utm_src=173.244.209.59&s_rst=1&ts=%5B0%2Cfalse%2Cfalse%5D&pl=Linux%20x86_64&cc=NA&ss=1&ls=1&idb=1&ab=0&od=0&ll=0&lr=0&lo=1&lb=0&cd=24&hc=48&dm=-1&dt=0&ed=-1&sr=5497558139904&e_d=%7B%22isResetRequired%22%3Atrue%7D&t_op=0.421
200 OK 0 B URL GET HTTP/1.1 adxadserv.com/px/event/v1?e_t=pageview&url=http%253A%252F%252Fads.adxadserv.com%252Fad%253Fspotid%253D5ee74fb661d6e22d6c6bca31%2526type%253D300x250%2526output%253Dhtml%2526extra1%253D0%2526ref%253Dhttp%25253A%252F%252F173.244.209.59%252F%2526dt%253D1700972146204%2526screen%253D1280x1024%2526tags%253D&ref=http%253A%252F%252F173.244.209.59%252F&d_r=1&d_s=1280x1024&d_w=300x250&t_s=1700972146497&t_i=1700972147140&u_tz=0&u_l=en-US&u_l2=&u_l3=&pv_uid=f2bce5a7-458c-42eb-8836-f9e137d7a47d&nav_rc=0&nav_nt=NAVIGATE&p_nn=adxad-rtb&p_pt=IFRAME&imid=772686c2-8c12-11ee-a273-e2e38133f3a0&spid=5ee74fb661d6e22d6c6bca31&fpid_sa=1700972147140&fpid=&feid_sa=1700972147140&sid_sa=1700972147140&feid=2da783b402bff6f89fad9ace36b5547a&sid=3c785e1d253a16c7b712319945c44c4d&u_adb=0&vn=T-0.1.1&utm_typ=referral&utm_src=173.244.209.59&s_rst=1&ts=%5B0%2Cfalse%2Cfalse%5D&pl=Linux%20x86_64&cc=NA&ss=1&ls=1&idb=1&ab=0&od=0&ll=0&lr=0&lo=1&lb=0&cd=24&hc=48&dm=-1&dt=0&ed=-1&sr=5497558139904&e_d=%7B%22isResetRequired%22%3Atrue%7D&t_op=0.421
IP
ASN #39572 DataWeb Global Group B.V.
Requested by http://ads.adxadserv.com/ad?spotid=5ee74fb661d6e22d6c6bca31&type=300x250&output=html&extra1=0&ref=http%3A//173.244.209.59/&dt=1700972146204&screen=1280x1024&tags=
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /px/event/v1?e_t=pageview&url=http%253A%252F%252Fads.adxadserv.com%252Fad%253Fspotid%253D5ee74fb661d6e22d6c6bca31%2526type%253D300x250%2526output%253Dhtml%2526extra1%253D0%2526ref%253Dhttp%25253A%252F%252F173.244.209.59%252F%2526dt%253D1700972146204%2526screen%253D1280x1024%2526tags%253D&ref=http%253A%252F%252F173.244.209.59%252F&d_r=1&d_s=1280x1024&d_w=300x250&t_s=1700972146497&t_i=1700972147140&u_tz=0&u_l=en-US&u_l2=&u_l3=&pv_uid=f2bce5a7-458c-42eb-8836-f9e137d7a47d&nav_rc=0&nav_nt=NAVIGATE&p_nn=adxad-rtb&p_pt=IFRAME&imid=772686c2-8c12-11ee-a273-e2e38133f3a0&spid=5ee74fb661d6e22d6c6bca31&fpid_sa=1700972147140&fpid=&feid_sa=1700972147140&sid_sa=1700972147140&feid=2da783b402bff6f89fad9ace36b5547a&sid=3c785e1d253a16c7b712319945c44c4d&u_adb=0&vn=T-0.1.1&utm_typ=referral&utm_src=173.244.209.59&s_rst=1&ts=%5B0%2Cfalse%2Cfalse%5D&pl=Linux%20x86_64&cc=NA&ss=1&ls=1&idb=1&ab=0&od=0&ll=0&lr=0&lo=1&lb=0&cd=24&hc=48&dm=-1&dt=0&ed=-1&sr=5497558139904&e_d=%7B%22isResetRequired%22%3Atrue%7D&t_op=0.421 HTTP/1.1
Host: adxadserv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://ads.adxadserv.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.20.1
Date: Sun, 26 Nov 2023 04:15:44 GMT
Content-Length: 0
Connection: keep-alive
fonts.googleapis.com/css?family=Ubuntu&display=swap
200 OK 1.9 kB URL GET HTTP/2 fonts.googleapis.com/css?family=Ubuntu&display=swap
IP
Requested by http://ads.adxadserv.com/ad?spotid=5ee74fb661d6e22d6c6bca31&type=300x250&output=html&extra1=0&ref=http%3A//173.244.209.59/&dt=1700972146204&screen=1280x1024&tags=
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
FingerprintCC:96:E0:52:E0:9B:EA:A9:A0:F8:88:9A:90:20:11:47:61:00:3C:42
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type ASCII text, with very long lines (1920), with no line terminators
Hash bac8c0acfd05e532050648a2118aa2dd
c3a585733918dae1a7ab58f740622055560c0770
154dd3054e01133ab38a433b6b9c06a1c01bde95f19f1a9c28c94d9e938f003c
GET /css?family=Ubuntu&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://static.adxadserv.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sun, 26 Nov 2023 04:15:43 GMT
date: Sun, 26 Nov 2023 04:15:43 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
i.jads.co/1x1.gif
200 OK 28 kB IP
Requested by https://poweredby.jads.co/adshow.php?adzone=942502
Certificate IssuerSectigo Limited
Subject*.jads.co
Fingerprint9E:B2:20:AC:19:4B:72:8F:12:D9:D6:5A:6A:B5:BE:EE:46:13:48:EB
ValidityMon, 26 Dec 2022 00:00:00 GMT - Fri, 26 Jan 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 250x250, components 3\012- data
Hash 2acfb73fd2df022a7dad5595adef5bda
939b803ea641bd427b7599f92a816262e7a5bf48
3d4610a2ab69d08e54685d0d3cfcf03ec663bacff8cc89a1e0a2904a7769e641
GET /1x1.gif HTTP/1.1
Host: i.jads.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://poweredby.jads.co/
Cookie: surferid=0f1378a541b03be0e2c02baad3a6320a; juicy_data_1=YTowOnt9; juicy_data=YToxOntzOjEyOiJqdWljeV9kYXRhXzEiO3M6MToiMSI7fQ%3D%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 26 Nov 2023 04:15:44 GMT
Connection: Keep-Alive
ETag: "1478208967"
Cache-Control: max-age=19305552
Content-Length: 27460
Content-Type: image/jpeg
Last-Modified: Thu, 03 Nov 2016 21:36:07 GMT
Accept-Ranges: bytes
X-HW: 1700972144.dop209.sk1.t,1700972144.cds241.sk1.shn,1700972144.dop209.sk1.t,1700972144.cds217.sk1.c
a.magsrv.com/iframe.js?idzone=5129256&size=300x250
200 OK 2.2 kB URL GET HTTP/2 a.magsrv.com/iframe.js?idzone=5129256&size=300x250
IP
Requested by https://a.magsrv.com/iframe.php?idzone=5129256&size=300x250
Certificate IssuerLet's Encrypt
Subjectmagsrv.com
FingerprintC5:BC:C0:62:0C:DC:A9:D2:61:A6:77:A9:6C:31:19:AD:CD:2E:00:67
ValidityThu, 05 Oct 2023 15:26:28 GMT - Wed, 03 Jan 2024 15:26:27 GMT
File type ASCII text, with very long lines (2308), with no line terminators
Hash 70873b69b6bd39a53bed94e353e5e958
75e926c26f2b3f09b0ec19dd2c8153d5a5b08059
489f0ab444f1b98d7b63d8fc0cb47e81608c8e0863bc10e8c388f297cae36090
GET /iframe.js?idzone=5129256&size=300x250 HTTP/1.1
Host: a.magsrv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://a.magsrv.com/iframe.php?idzone=5129256&size=300x250
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 26 Nov 2023 04:15:45 GMT
content-type: application/javascript
vary: Accept-Encoding
etag: W/"f7fce750e52e29142ef70cb5e0c"
accept-ch:
expires: Thu, 23 Nov 2023 15:31:02 GMT
cache-control: max-age=10800
x-robots-tag: noindex, follow
access-control-allow-origin: *
x-77-nzt: Anl/LVA3Nzf/vAkAANRmOAk3Nzf/MwsAAA
x-77-nzt-ray: c1fb98198ca7b8c071c66265f758cb03
x-accel-expires: @1700980304
x-accel-date: 1700969653
x-77-cache: HIT
x-77-age: 5359
content-encoding: gzip
server: CDN77-Turbo
x-cache-lb: HIT
x-age-lb: 2492
x-77-pop: copenhagenDK
X-Firefox-Spdy: h2
iezxmddndn.com/get/1944020?zoneid=1944020&jp=_clwglhf3x5qmf1ti3lcsdi&nojs=0&abvar=0&febuild=1.0.178&t=0&wcks=1&wgl=0&cnvs=1&os=0&ss=1&ls=1&bb=0&plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF&lang=en-US&pf=Linux%20x86_64&cd=24&ix=0&x=1280&y=1024&md=0&afid=7429824305106432&eclog=0&sp=1&im=1
200 OK 37 B URL GET HTTP/2 iezxmddndn.com/get/1944020?zoneid=1944020&jp=_clwglhf3x5qmf1ti3lcsdi&nojs=0&abvar=0&febuild=1.0.178&t=0&wcks=1&wgl=0&cnvs=1&os=0&ss=1&ls=1&bb=0&plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF&lang=en-US&pf=Linux%20x86_64&cd=24&ix=0&x=1280&y=1024&md=0&afid=7429824305106432&eclog=0&sp=1&im=1
IP
Certificate IssuerBuypass AS-983163327
Subject
Fingerprint0A:35:60:8F:E8:D6:56:65:D8:B1:88:38:40:D8:3D:8C:EA:33:A1:3A
ValiditySat, 28 Oct 2023 12:37:04 GMT - Wed, 24 Apr 2024 21:59:00 GMT
File type ASCII text, with no line terminators
Hash 26c0446473cdbedd7eb18169ae75e0fd
c2a8a31848b22f49c044d0e8f2b4a48e856e08b8
c94588c2c490281057748a6bc21191dae810fb22ce8cc638b5e3fc7d390eb165
GET /get/1944020?zoneid=1944020&jp=_clwglhf3x5qmf1ti3lcsdi&nojs=0&abvar=0&febuild=1.0.178&t=0&wcks=1&wgl=0&cnvs=1&os=0&ss=1&ls=1&bb=0&plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF&lang=en-US&pf=Linux%20x86_64&cd=24&ix=0&x=1280&y=1024&md=0&afid=7429824305106432&eclog=0&sp=1&im=1 HTTP/1.1
Host: iezxmddndn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://173.244.209.59/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 26 Nov 2023 04:15:43 GMT
content-type: text/javascript
vary: Accept-Encoding
x-route-id: config
set-cookie: CHCK=1; Path=/; Expires=Sun, 29 Dec 2024 04:15:43 GMT; Secure; SameSite=None
UID=2311252315d08aa2a74a324b93be1341f5a0; Path=/; Expires=Sun, 29 Dec 2024 04:15:43 GMT; Secure; SameSite=None
content-encoding: gzip
timing-allow-origin: *
accept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Ubuntu&display=swap
200 OK 1.9 kB URL GET HTTP/3 fonts.googleapis.com/css?family=Ubuntu&display=swap
IP
Requested by https://a.ar732.com/ad?spotid=60d0484161d6e216935300d2&type=300x250&output=html&extra1=0&ref=http%3A//173.244.209.59/&dt=1700972146894&screen=1280x1024&tags=
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
FingerprintCC:96:E0:52:E0:9B:EA:A9:A0:F8:88:9A:90:20:11:47:61:00:3C:42
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type ASCII text, with very long lines (1920), with no line terminators
Hash bac8c0acfd05e532050648a2118aa2dd
c3a585733918dae1a7ab58f740622055560c0770
154dd3054e01133ab38a433b6b9c06a1c01bde95f19f1a9c28c94d9e938f003c
GET /css?family=Ubuntu&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://static.adxadserv.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sun, 26 Nov 2023 04:15:44 GMT
date: Sun, 26 Nov 2023 04:15:44 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
a.realsrv.com/build-iframe-js-url.js?idzone=4403240
200 OK 760 B URL GET HTTP/2 a.realsrv.com/build-iframe-js-url.js?idzone=4403240
IP
ASN #60068 Datacamp Limited
Requested by https://a.realsrv.com/iframe.php?idzone=4403240&size=300x250
Certificate IssuerLet's Encrypt
Subjectrealsrv.com
Fingerprint33:54:4D:F8:0E:E4:00:D3:20:90:CA:61:C8:CC:4D:D5:CB:BB:83:57
ValidityThu, 05 Oct 2023 15:34:07 GMT - Wed, 03 Jan 2024 15:34:06 GMT
File type ASCII text, with very long lines (785), with no line terminators
Hash a988e00170969e2f11d0ed2cae9029ee
e4f288de40a413f1368042369c7c986d82f35f46
2d5458651584ed77ea4ab7224f8be70e29be923562aedfb439f7b61685eb4e44
GET /build-iframe-js-url.js?idzone=4403240 HTTP/1.1
Host: a.realsrv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://a.realsrv.com/iframe.php?idzone=4403240&size=300x250
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 26 Nov 2023 04:15:43 GMT
content-type: application/javascript
vary: Accept-Encoding
etag: W/"cf291f06122b57d96d47d244672"
accept-ch: Sec-CH-UA,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Model,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version
expires: Thu, 23 Nov 2023 15:37:58 GMT
cache-control: max-age=10800
x-robots-tag: noindex, follow
access-control-allow-origin: *
x-77-nzt: A7lMCRQ3NzfvxwEAALlMCgE3Nzf/1gAAANRmOAk3Nzf/lQQAAA
x-77-nzt-ray: af585630df53b97b6fc66265c6ee4e39
x-accel-expires: @1700982488
x-accel-date: 1700971688
x-77-cache: HIT
x-77-age: 1842
content-encoding: gzip
server: CDN77-Turbo
x-cache-lb: HIT, HIT
x-age-lb: 214, 455
x-77-pop: stockholmSE
X-Firefox-Spdy: h2
a.magsrv.com/build-iframe-js-url.js?idzone=5129256
200 OK 759 B URL GET HTTP/2 a.magsrv.com/build-iframe-js-url.js?idzone=5129256
IP
Requested by https://a.magsrv.com/iframe.php?idzone=5129256&size=300x250
Certificate IssuerLet's Encrypt
Subjectmagsrv.com
FingerprintC5:BC:C0:62:0C:DC:A9:D2:61:A6:77:A9:6C:31:19:AD:CD:2E:00:67
ValidityThu, 05 Oct 2023 15:26:28 GMT - Wed, 03 Jan 2024 15:26:27 GMT
File type ASCII text, with very long lines (784), with no line terminators
Hash 6580d68b1f51c84767b8c8a8a8eb9981
0a565edb400fdce7c4b143028c8a78e1a3d02eb5
24c859db28cb0d291901e8ffbc2b7fd132100dd160d1237cb0902b90af41706a
GET /build-iframe-js-url.js?idzone=5129256 HTTP/1.1
Host: a.magsrv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://a.magsrv.com/iframe.php?idzone=5129256&size=300x250
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 26 Nov 2023 04:15:45 GMT
content-type: application/javascript
vary: Accept-Encoding
etag: W/"2265fff103b1add4764ffe88a17"
accept-ch:
expires: Thu, 23 Nov 2023 15:31:01 GMT
cache-control: max-age=10800
x-robots-tag: noindex, follow
access-control-allow-origin: *
x-77-nzt: EgwBeX8tUAH3vAkAAAwBJRPCKAH3MwsAAA
x-77-nzt-ray: c1fb98198ca7b8c071c66265e2af6601
x-accel-expires: @1700980304
x-accel-date: 1700969653
x-77-cache: HIT
x-77-age: 5359
content-encoding: gzip
server: CDN77-Turbo
x-cache-lb: HIT
x-age-lb: 2492
x-77-pop: copenhagenDK
X-Firefox-Spdy: h2
a.magsrv.com/ad-provider.js
200 OK 122 kB URL GET HTTP/2 a.magsrv.com/ad-provider.js
IP
Requested by https://a.magsrv.com/iframe.php?idzone=5129256&size=300x250
Certificate IssuerLet's Encrypt
Subjectmagsrv.com
FingerprintC5:BC:C0:62:0C:DC:A9:D2:61:A6:77:A9:6C:31:19:AD:CD:2E:00:67
ValidityThu, 05 Oct 2023 15:26:28 GMT - Wed, 03 Jan 2024 15:26:27 GMT
File type ASCII text, with very long lines (32959)
Size 122 kB (122106 bytes)
Hash f3c783d04c3150aeb0129db27599aaab
b97c740efdaca6e00b9db93bd8c25b01aafc7769
e34ea208a32339f047df8df0c4e27ed7c54903797902f5678c1caca2ba8f95a3
GET /ad-provider.js HTTP/1.1
Host: a.magsrv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://a.magsrv.com/iframe.php?idzone=5129256&size=300x250
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 26 Nov 2023 04:15:45 GMT
content-type: application/javascript
vary: Accept-Encoding
etag: W/"b97c740efdaca6e00b9db93bd8c"
accept-ch: Sec-CH-UA,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Model,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version
expires: Thu, 23 Nov 2023 15:31:28 GMT
cache-control: max-age=10800
x-robots-tag: noindex, follow
access-control-allow-origin: *
x-77-nzt: Anl/LVA3Nzf/TAoAANRmOBE3Nzf/bQAAAA
x-77-nzt-ray: c1fb98198ca7b8c071c662659117e101
x-accel-expires: @1700980309
x-accel-date: 1700969509
x-77-cache: HIT
x-77-age: 2745
content-encoding: gzip
server: CDN77-Turbo
x-cache-lb: HIT
x-age-lb: 2636
x-77-pop: copenhagenDK
X-Firefox-Spdy: h2
t.dtscout.com/pv/?_a=v&_h=173.244.209.59&_ss=4v8vil2c66&_pv=1&_ls=0&_u1=1&_u3=1&_cc=no&_pl=d&_cbid=5k32&_cb=_dtspv.c
200 OK 52 B URL GET HTTP/2 t.dtscout.com/pv/?_a=v&_h=173.244.209.59&_ss=4v8vil2c66&_pv=1&_ls=0&_u1=1&_u3=1&_cc=no&_pl=d&_cbid=5k32&_cb=_dtspv.c
IP
Certificate IssuerGoogle Trust Services LLC
Subjectdtscout.com
FingerprintED:BC:CA:7A:78:18:22:D3:92:DE:9B:2B:FD:8B:46:45:52:B6:A6:40
ValidityMon, 20 Nov 2023 09:56:51 GMT - Sun, 18 Feb 2024 09:56:50 GMT
File type ASCII text, with no line terminators
Hash b1695ca83912a19d9098cfff2c9dcd6a
d31bbf1f1cd0f9af377b974efa22fd2d10bc6f01
bb6a2bc6bd7232c1a0f2d51fdb8bcde44ef9039aca6df993128eb4dead7a2c05
GET /pv/?_a=v&_h=173.244.209.59&_ss=4v8vil2c66&_pv=1&_ls=0&_u1=1&_u3=1&_cc=no&_pl=d&_cbid=5k32&_cb=_dtspv.c HTTP/1.1
Host: t.dtscout.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://173.244.209.59/
Cookie: m=1; oa=1; df=1700972143
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 26 Nov 2023 04:15:43 GMT
content-type: application/javascript
x-t: 0.163
x-c: 0
expires: Sun, 26 Nov 2023 04:15:42 GMT
cache-control: no-cache
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=17DVLEB6iSLTpuU0VZK74tfx%2BX%2BSttVDfbD8YLvTNqVrDyWHlBxNiKXOqvOAbq%2FXO%2B7bBGallODlSojHBrT5mWxIWxEFI3AYg8lI1N%2BF8sBdJPPhnCCMUWdDgOeCz6w%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82bf4fd94ee62e13-ARN
content-encoding: br
X-Firefox-Spdy: h2
i.jads.co/ads/user64474/ad1862629-1696403773.gif
200 OK 52 kB URL GET HTTP/1.1 i.jads.co/ads/user64474/ad1862629-1696403773.gif
IP
Requested by https://poweredby.jads.co/adshow.php?adzone=942502
Certificate IssuerSectigo Limited
Subject*.jads.co
Fingerprint9E:B2:20:AC:19:4B:72:8F:12:D9:D6:5A:6A:B5:BE:EE:46:13:48:EB
ValidityMon, 26 Dec 2022 00:00:00 GMT - Fri, 26 Jan 2024 23:59:59 GMT
File type GIF image data, version 89a, 300 x 250\012- data
Hash 9a29a759b0f8668f0ed37ff54ed8c761
a2a3b50a53f7f44344e2c1d6400b4ca914be29a1
4d103cb7b56a2952e6b954d8147d0d1179e3ff1463d2b7686185cd1ff8e0c28e
GET /ads/user64474/ad1862629-1696403773.gif HTTP/1.1
Host: i.jads.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://poweredby.jads.co/
Cookie: surferid=0f1378a541b03be0e2c02baad3a6320a; juicy_data_1=YTowOnt9; juicy_data=YToxOntzOjEyOiJqdWljeV9kYXRhXzEiO3M6MToiMSI7fQ%3D%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 26 Nov 2023 04:15:44 GMT
Connection: Keep-Alive
ETag: "1696403773"
Cache-Control: max-age=26967870
Content-Length: 52306
Content-Type: image/gif
Last-Modified: Wed, 04 Oct 2023 07:16:13 GMT
Accept-Ranges: bytes
X-HW: 1700972144.dop228.sk1.t,1700972144.cds247.sk1.shn,1700972144.dop228.sk1.t,1700972144.cds257.sk1.c
static.adxadserv.com/js/b.js
200 OK 1.3 kB URL GET HTTP/2 static.adxadserv.com/js/b.js
IP
ASN #60068 Datacamp Limited
Requested by https://player.hboav.com/guga/mid_index.php
Certificate IssuerLet's Encrypt
Subject1585977359.rsc.cdn77.org
Fingerprint11:4C:DC:15:D3:66:0C:E4:77:6D:B8:F8:DE:49:6F:09:2A:C9:1F:CB
ValidityWed, 22 Nov 2023 23:05:55 GMT - Tue, 20 Feb 2024 23:05:54 GMT
File type troff or preprocessor input, ASCII text, with very long lines (1396), with no line terminators
Hash f1cb1e4370bfe746e615912b2bef78a1
bd3780effd2a9680ae81de14df0085ca0cf6585d
c7ac5b36f7d54d8de04d9e7b8ce4969269e20c967f3dc6ea9835e96281d6c140
GET /js/b.js HTTP/1.1
Host: static.adxadserv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://player.hboav.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 26 Nov 2023 04:15:43 GMT
content-type: application/javascript
vary: Accept-Encoding
last-modified: Mon, 17 Apr 2023 13:39:49 GMT
etag: W/"643d4c25-52c"
server: CDN77-Turbo
x-77-nzt: EQwBuUwJDQH3mdoHAA
x-77-nzt-ray: c0a4cc2885ffd7026fc66265630a4923
x-accel-expires: @1701488638
x-accel-date: 1700457430
x-cache-lb: HIT
x-age-lb: 514713
x-77-pop: stockholmSE
x-77-cache: HIT
x-77-age: 514713
content-encoding: gzip
X-Firefox-Spdy: h2
iezxmddndn.com/aas/r45d/vki/1944020/tghr.js
200 OK 89 kB URL GET HTTP/2 iezxmddndn.com/aas/r45d/vki/1944020/tghr.js
IP
Certificate IssuerBuypass AS-983163327
Subject
Fingerprint0A:35:60:8F:E8:D6:56:65:D8:B1:88:38:40:D8:3D:8C:EA:33:A1:3A
ValiditySat, 28 Oct 2023 12:37:04 GMT - Wed, 24 Apr 2024 21:59:00 GMT
File type ASCII text, with very long lines (65106)
Hash b5ad25e657c359d9e2824379c5ebb8cc
d5d14895ef55a0491582a585c4836a231acd987e
0329189d6600c05e50cd19bfe805c58ee69842f93217aaa6ecdedc654acb83bb
GET /aas/r45d/vki/1944020/tghr.js HTTP/1.1
Host: iezxmddndn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://173.244.209.59/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 26 Nov 2023 04:15:43 GMT
content-type: application/javascript
last-modified: Wed, 15 Nov 2023 14:55:11 GMT
vary: Accept-Encoding
etag: W/"6554dbcf-15c1f"
x-js-ab2: current
timing-allow-origin: *
accept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
content-encoding: gzip
X-Firefox-Spdy: h2
player.hboav.com/guga/header_banner.php
200 OK 2.6 kB URL GET HTTP/2 player.hboav.com/guga/header_banner.php
IP
Certificate IssuerZeroSSL
Subjectplayer.hboav.com
Fingerprint9F:B9:42:16:DD:30:9A:F3:AF:D9:D0:93:F3:33:02:F3:7F:5C:BD:02
ValidityThu, 16 Nov 2023 00:00:00 GMT - Wed, 14 Feb 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (2908), with no line terminators
Hash 75c71d2dad482da7a837fdc2d8d46e31
6c20fe86344f454692d8246ed0ff69313d949fa5
d3e38310bab729d2ed5bcaaed4d5206017bc613803a67c7acd260e0e5b7db2c1
GET /guga/header_banner.php HTTP/1.1
Host: player.hboav.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://173.244.209.59/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 26 Nov 2023 04:15:42 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
t.dtscout.com/i/?l=http%3A%2F%2F173.244.209.59%2F&j=
200 OK 2.1 kB URL GET HTTP/2 t.dtscout.com/i/?l=http%3A%2F%2F173.244.209.59%2F&j=
IP
Certificate IssuerGoogle Trust Services LLC
Subjectdtscout.com
FingerprintED:BC:CA:7A:78:18:22:D3:92:DE:9B:2B:FD:8B:46:45:52:B6:A6:40
ValidityMon, 20 Nov 2023 09:56:51 GMT - Sun, 18 Feb 2024 09:56:50 GMT
File type ASCII text, with very long lines (2163), with no line terminators
Hash 8811c1da7d7cd9a89cf1c9d88cf153c1
5dd7a95e6eee435a18d261757a4aa4aeea7ae472
0c72ec693d21a33e6c802f2648030af0433badc9a020325a82550115cf5044cc
GET /i/?l=http%3A%2F%2F173.244.209.59%2F&j= HTTP/1.1
Host: t.dtscout.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://173.244.209.59/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 26 Nov 2023 04:15:43 GMT
content-type: application/javascript
x-s: mtl1
set-cookie: m=1; Domain=dtscout.com; Expires=Sun, 26-Nov-2023 05:39:03 GMT; Max-Age=5000; Path=/; SameSite=None; Secure
oa=1; Domain=dtscout.com; Expires=Sun, 26-Nov-2023 08:15:43 GMT; Max-Age=14400; Path=/; SameSite=None; Secure
df=1700972143; Domain=dtscout.com; Expires=Tue, 05-Mar-2024 04:15:43 GMT; Max-Age=8640000; Path=/; SameSite=None; Secure
x-t: 0.339
expires: Sun, 26 Nov 2023 04:15:42 GMT
cache-control: no-cache
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=JX8MJHdEVkGvYXbnJ%2BztGh9%2B3LcErMigMoaKqoZTpNLJ2sth2O5uVND%2BrDIuhuj2y%2BrXcEPCx9thwK%2BommckRkmcfYSruGAzYOP9xmADbmdFGf%2FG2zQP8PKzFUSqTFU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82bf4fd64e172e13-ARN
content-encoding: br
X-Firefox-Spdy: h2
2158novffp.com/chicken.gif?z=1942075&pb=e862a52c534778b1aed4a6df73a19adb1700979343&psp=7-0spdn6Z5JifjInHxIiRBayRjgpDqUpsXuZQW3X6USGUAtL0jomZgreUQz4_0_mLUqThMGBoANUCAPeS2aEr0cw7f7YtqJAltlFDgrejmV_BWK9s0Dh9Uf3gx9Tis449wcuoJidt-pO-hrkfRLmO5cgGn6T8L0lS76yFcose0Uiedzz0ASIAgqLVYhhWfttcasZYRHuz0c8Hd1Bt45FvkWwcL_D79CML5Qcc6SNm_yt1rJtOlW837YPmJAZ_N_IEFmgpzx0VDn9sMT9W6BOHU30XyJ6L6FyP6LPgGl765RZS7ERYA5OhyHyDyBXKrcUbY2srk3XmQtycGxGy0PLo3Zmsajdy-2aDc11OBqj8drJA8iWuYkshuWl3emVYtusjLKLetbpK0hH4RFQgCzA7KE765IlbrCFtyRf9Phxv0a9F1znDfA3Wem4z4hvQOc9gLWyFi3QPwI7kO0vfzJJtGmsEcfUYSW4j33F5FpLIfk25d3hgrLycIT9WTXA4ssK2aHOcim4eTkiENIMvfGAgY7CPMnyyhQy5QBKoyxBaV39iZ4PYzZtViq7qo80SuFcRqDw20t5g4Kbq7uiVdy03YnqatcQLaD4dNcSNtTkyCv_cDd_E6YC0NvS6jDPbywuIclGi6_bPzUfVysA11s_5iNmqjXfxwp-PtEAIeMdE5nl4qlHb_OfxwCWRmDxyomQJRcrV_iDAm_yH_BBs86qM9WCbibykEdgha2aw5pn3QbXQPFKGMMRo_O8R9Y0sGHCfkcj3apdmpfuppCUVOn3sKYscykr73fW_4yiDL2zkd-P1ZdBcs0YA1ReKILGE9YM40yIpmpJq_K6V1Hnz2jOeEtgI8ddPk3BA3XQX3wl-27mCNcEhh2CH4kM5-d4QdPTIVs56ZG4GmdhjqoShVY6KKXaZQbjgUtaw0jir4ySzu4qdnnZlLTGRQva1Vs84Fjv-v6Q5_iGbE-eRtZklwyefhxDsr09xUEjlGZ4xS6T5kO1EVJvN6LKjB3nOjzTzRY=&im=1&freq=0&nojs=0&abvar=0&febuild=1.0.178&t=0&wcks=1&wgl=0&cnvs=1&os=0&ss=1&ls=1&bb=0&plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF&lang=en-US&pf=Linux%20x86_64&cd=24&ix=0&x=1280&y=1024&md=0&afid=6303924398259712&eclog=0&sp=1&im=1&pload=285
200 OK 43 B URL GET HTTP/2 2158novffp.com/chicken.gif?z=1942075&pb=e862a52c534778b1aed4a6df73a19adb1700979343&psp=7-0spdn6Z5JifjInHxIiRBayRjgpDqUpsXuZQW3X6USGUAtL0jomZgreUQz4_0_mLUqThMGBoANUCAPeS2aEr0cw7f7YtqJAltlFDgrejmV_BWK9s0Dh9Uf3gx9Tis449wcuoJidt-pO-hrkfRLmO5cgGn6T8L0lS76yFcose0Uiedzz0ASIAgqLVYhhWfttcasZYRHuz0c8Hd1Bt45FvkWwcL_D79CML5Qcc6SNm_yt1rJtOlW837YPmJAZ_N_IEFmgpzx0VDn9sMT9W6BOHU30XyJ6L6FyP6LPgGl765RZS7ERYA5OhyHyDyBXKrcUbY2srk3XmQtycGxGy0PLo3Zmsajdy-2aDc11OBqj8drJA8iWuYkshuWl3emVYtusjLKLetbpK0hH4RFQgCzA7KE765IlbrCFtyRf9Phxv0a9F1znDfA3Wem4z4hvQOc9gLWyFi3QPwI7kO0vfzJJtGmsEcfUYSW4j33F5FpLIfk25d3hgrLycIT9WTXA4ssK2aHOcim4eTkiENIMvfGAgY7CPMnyyhQy5QBKoyxBaV39iZ4PYzZtViq7qo80SuFcRqDw20t5g4Kbq7uiVdy03YnqatcQLaD4dNcSNtTkyCv_cDd_E6YC0NvS6jDPbywuIclGi6_bPzUfVysA11s_5iNmqjXfxwp-PtEAIeMdE5nl4qlHb_OfxwCWRmDxyomQJRcrV_iDAm_yH_BBs86qM9WCbibykEdgha2aw5pn3QbXQPFKGMMRo_O8R9Y0sGHCfkcj3apdmpfuppCUVOn3sKYscykr73fW_4yiDL2zkd-P1ZdBcs0YA1ReKILGE9YM40yIpmpJq_K6V1Hnz2jOeEtgI8ddPk3BA3XQX3wl-27mCNcEhh2CH4kM5-d4QdPTIVs56ZG4GmdhjqoShVY6KKXaZQbjgUtaw0jir4ySzu4qdnnZlLTGRQva1Vs84Fjv-v6Q5_iGbE-eRtZklwyefhxDsr09xUEjlGZ4xS6T5kO1EVJvN6LKjB3nOjzTzRY=&im=1&freq=0&nojs=0&abvar=0&febuild=1.0.178&t=0&wcks=1&wgl=0&cnvs=1&os=0&ss=1&ls=1&bb=0&plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF&lang=en-US&pf=Linux%20x86_64&cd=24&ix=0&x=1280&y=1024&md=0&afid=6303924398259712&eclog=0&sp=1&im=1&pload=285
IP
Certificate IssuerBuypass AS-983163327
Subject
FingerprintFD:C1:CF:80:A9:5B:D1:10:B4:B3:C7:69:11:E1:AC:06:8F:75:9B:6C
ValiditySat, 28 Oct 2023 07:18:45 GMT - Wed, 24 Apr 2024 21:59:00 GMT
File type GIF image data, version 89a, 1 x 1\012- data
Hash 28e463819a210071de3b45ebe7633613
6dccd571828ec0912629119cf7eabfea9f33ddbc
44251f61629e2bfeead421241a917f43ad047af351659f01cd8fd937f0417f84
GET /chicken.gif?z=1942075&pb=e862a52c534778b1aed4a6df73a19adb1700979343&psp=7-0spdn6Z5JifjInHxIiRBayRjgpDqUpsXuZQW3X6USGUAtL0jomZgreUQz4_0_mLUqThMGBoANUCAPeS2aEr0cw7f7YtqJAltlFDgrejmV_BWK9s0Dh9Uf3gx9Tis449wcuoJidt-pO-hrkfRLmO5cgGn6T8L0lS76yFcose0Uiedzz0ASIAgqLVYhhWfttcasZYRHuz0c8Hd1Bt45FvkWwcL_D79CML5Qcc6SNm_yt1rJtOlW837YPmJAZ_N_IEFmgpzx0VDn9sMT9W6BOHU30XyJ6L6FyP6LPgGl765RZS7ERYA5OhyHyDyBXKrcUbY2srk3XmQtycGxGy0PLo3Zmsajdy-2aDc11OBqj8drJA8iWuYkshuWl3emVYtusjLKLetbpK0hH4RFQgCzA7KE765IlbrCFtyRf9Phxv0a9F1znDfA3Wem4z4hvQOc9gLWyFi3QPwI7kO0vfzJJtGmsEcfUYSW4j33F5FpLIfk25d3hgrLycIT9WTXA4ssK2aHOcim4eTkiENIMvfGAgY7CPMnyyhQy5QBKoyxBaV39iZ4PYzZtViq7qo80SuFcRqDw20t5g4Kbq7uiVdy03YnqatcQLaD4dNcSNtTkyCv_cDd_E6YC0NvS6jDPbywuIclGi6_bPzUfVysA11s_5iNmqjXfxwp-PtEAIeMdE5nl4qlHb_OfxwCWRmDxyomQJRcrV_iDAm_yH_BBs86qM9WCbibykEdgha2aw5pn3QbXQPFKGMMRo_O8R9Y0sGHCfkcj3apdmpfuppCUVOn3sKYscykr73fW_4yiDL2zkd-P1ZdBcs0YA1ReKILGE9YM40yIpmpJq_K6V1Hnz2jOeEtgI8ddPk3BA3XQX3wl-27mCNcEhh2CH4kM5-d4QdPTIVs56ZG4GmdhjqoShVY6KKXaZQbjgUtaw0jir4ySzu4qdnnZlLTGRQva1Vs84Fjv-v6Q5_iGbE-eRtZklwyefhxDsr09xUEjlGZ4xS6T5kO1EVJvN6LKjB3nOjzTzRY=&im=1&freq=0&nojs=0&abvar=0&febuild=1.0.178&t=0&wcks=1&wgl=0&cnvs=1&os=0&ss=1&ls=1&bb=0&plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF&lang=en-US&pf=Linux%20x86_64&cd=24&ix=0&x=1280&y=1024&md=0&afid=6303924398259712&eclog=0&sp=1&im=1&pload=285 HTTP/1.1
Host: 2158novffp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: CHCK=1; UID=2311252315ce50ea70928743d6bd515397eb
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 26 Nov 2023 04:15:43 GMT
content-type: image/gif
content-length: 43
x-route-id: stats.impression
timing-allow-origin: *
accept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
X-Firefox-Spdy: h2
173.244.209.59
104.22.58.221
185.98.53.2
188.114.97.1
212.117.190.201
121.127.45.81
185.76.9.14
220.228.6.99