| js.2mp4.xyz/AV4.us.jpg |  188.114.96.1 | 200 OK | 8.7 kB |
IP188.114.96.1:443
Requested byhttps://av.tube-dl.top/contact/----kw/inurl:spankbang.party CertificateIssuerGoogle Trust Services LLC Subject2mp4.xyz FingerprintEA:8B:3D:2A:6E:4A:92:4C:C7:E4:CE:45:0E:7B:95:73:D0:3D:2B:BF ValidityMon, 04 Mar 2024 12:43:20 GMT - Sun, 02 Jun 2024 12:43:19 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 307x82, components 3 Hashedfe007a6e5b3d268b2528f564b60b43 1644c8ef97c871079e07e5079d613af5cb94052f bf5bb657f5e788af0c02b9b437d3f15bec91e27175e5a654e3d431fb6d063390
GET /AV4.us.jpg HTTP/1.1
Host: js.2mp4.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.tube-dl.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 26 Apr 2024 07:49:49 GMT
content-type: image/jpeg
content-length: 8741
etag: "2225-614075c7eff6b"
access-control-allow-origin: *
access-control-allow-headers: Cake
cache-control: public, max-age=360000
cf-cache-status: HIT
age: 93927
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=l8nv9DC%2FeVf%2FF0U1QgAdePvjhvZQNVXJo38%2BypLqVUqtYU%2B2OhNNf8ZQwGwA%2BqzTQpuh%2B7LaCkLT1OcTvUMl9gws8E%2B9lPM34scVf%2BWw9Cw6bkhpI8gra3zelogsCQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a4fa781e94568d-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| img.redwap-cdn.com/195/195730/195730_320x180.jpg |  104.21.234.193 | | 11 kB |
URL img.redwap-cdn.com/195/195730/195730_320x180.jpg IP104.21.234.193:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 85", progressive, precision 8, 320x180, components 3 Hash51e5ee9bb743ee6750ce660eb6ace1d1 085e07492d7bbb98c8d6138de1682adc858d372e ab82b5edfd6d0f678e276ff60e9d2dfbfa05cc7840a30cac720a3b410040500a
GET /195/195730/195730_320x180.jpg HTTP/1.1
Host: img.redwap-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.tube-dl.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 26 Apr 2024 07:49:49 GMT
content-type: image/jpeg
content-length: 11042
x-object-meta-mtime: 1492670394
etag: 51e5ee9bb743ee6750ce660eb6ace1d1
last-modified: Wed, 03 Apr 2019 08:23:19 GMT
x-timestamp: 1554279798.06567
x-trans-id: tx086f9389bb8d416685b4f-0063c9811d
x-openstack-request-id: tx086f9389bb8d416685b4f-0063c9811d
access-control-allow-origin: *
access-control-allow-methods: HEAD,GET,POST,PUT,PATCH,DELETE,OPTIONS
access-control-allow-headers: Content-Type,X-Requested-With,X-Auth-Token,X-Openstack-Request-Id,X-Container-Meta-type,X-Container-Meta-Temp-URL-Key,Authorization
access-control-expose-headers: X-Container-Meta-Temp-Url-Key,X-Container-Bytes-Used,Last-Modified,X-Timestamp
cache-control: max-age=31536000
expires: Sat, 27 Apr 2024 00:38:38 GMT
x-proxy-cache: HIT
cf-cache-status: HIT
age: 112271
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=MzVOII4SW8emAUP9f08VsqcPOLoDyv8R6V27KhmeSG2BNX2tLZhlOsmJLYyCy4F6Js40bj8l9K6%2Bws4sojGr5UWrC2A8KLq7HsQpbiCRv8g%2BxZMT1htSOakab%2B6bVi84gw%2BZb%2B4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a4fa78bf8b9403-LHR
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| img.redwap-cdn.com/843/843771/843771_320x180.jpg | 104.21.234.193 | | 12 kB |
URL img.redwap-cdn.com/843/843771/843771_320x180.jpg IP104.21.234.193:0
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 85", progressive, precision 8, 320x180, components 3 Hash133ae833b0eb8095c98d599d88470b91 a216c6e9fd4465b0a9fbc1ee7083babb8181c9aa f9cfaf08631c4b7377e76723c7b8ae4e5fa0b7a20ceca9d1f1d298e3c28679df
GET /843/843771/843771_320x180.jpg HTTP/1.1
Host: img.redwap-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.tube-dl.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 26 Apr 2024 07:49:49 GMT
content-type: image/jpeg
content-length: 11841
etag: 133ae833b0eb8095c98d599d88470b91
last-modified: Sat, 27 Jul 2019 01:48:39 GMT
x-timestamp: 1564192118.69943
x-trans-id: tx6d51ef4c05e34f1492cab-0063c9d049
x-openstack-request-id: tx6d51ef4c05e34f1492cab-0063c9d049
access-control-allow-origin: *
access-control-allow-methods: HEAD,GET,POST,PUT,PATCH,DELETE,OPTIONS
access-control-allow-headers: Content-Type,X-Requested-With,X-Auth-Token,X-Openstack-Request-Id,X-Container-Meta-type,X-Container-Meta-Temp-URL-Key,Authorization
access-control-expose-headers: X-Container-Meta-Temp-Url-Key,X-Container-Bytes-Used,Last-Modified,X-Timestamp
cache-control: max-age=31536000
expires: Sat, 27 Apr 2024 07:48:15 GMT
x-proxy-cache: HIT
cf-cache-status: HIT
age: 86494
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RRhBNZ5eqcH7qh4VLQeHIMJlptUrFOqYWyLaFGz9pjLfykZB%2B7z4VB9aRtbDjlbHtnZG2563SMFdBVxKWPStXG%2BLUaJ1eZnK3MLaR9mPyZJsvyWTdYKS7d7z3F8w9xHnlRuZnHY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a4fa79a8ae9403-LHR
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| en.vidmo.pro/thumbs_320/da/90/da9041102a7976c23ba02645af5b11e1/15784000.jpg |  89.248.193.244 | | 14 kB |
URL en.vidmo.pro/thumbs_320/da/90/da9041102a7976c23ba02645af5b11e1/15784000.jpg IP89.248.193.244:0 ASN#49505 OOO Network of data-centers Selectel
File typeJPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 320x240, components 3 Hash6c0e3a620b762b3cf3e1b7ddb72be9ed 8a3296e8854027da86f6201ceef610553921512a 19e08ea74eb6fc8b9d3526a6c00b67f05eead5b4c92866701d9ac39f2efa6edd
GET /thumbs_320/da/90/da9041102a7976c23ba02645af5b11e1/15784000.jpg HTTP/1.1
Host: en.vidmo.pro
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.tube-dl.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 26 Apr 2024 07:49:49 GMT
content-type: image/jpeg
content-length: 14350
last-modified: Mon, 06 Nov 2023 16:56:42 GMT
expires: Wed, 15 Nov 2023 20:19:03 GMT
cache-control: max-age=604800, public, no-transform
x-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| pornolomka2.com/uploads/posts/2017-02/medium/1486028634_00-10-10.jpg |  91.194.110.16 | | 123 kB |
URL pornolomka2.com/uploads/posts/2017-02/medium/1486028634_00-10-10.jpg IP91.194.110.16:0 ASN#213166 UA-Hosting SIA
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 100", baseline, precision 8, 450x253, components 3 Size123 kB (122792 bytes) Hash446d0bb1125252d391e69cf63ee189ee 12d33e3e51e8359ec45fc19cb27089bd0b511792 cb3eb426c7702c5c3bbd2a52305eaf009c4d1823eb19253f0b3f9654aa9abdf2
GET /uploads/posts/2017-02/medium/1486028634_00-10-10.jpg HTTP/1.1
Host: pornolomka2.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.tube-dl.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.10.3
date: Fri, 26 Apr 2024 07:48:12 GMT
content-type: image/jpeg
content-length: 122792
last-modified: Sun, 30 Aug 2020 16:59:46 GMT
etag: "5f4bdb02-1dfa8"
expires: Fri, 03 May 2024 07:48:12 GMT
cache-control: max-age=604800
strict-transport-security: max-age=15768000
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| moav.com/contents/videos_screenshots/20000/20976/preview.jpg | 104.21.235.194 | | 77 kB |
URL moav.com/contents/videos_screenshots/20000/20976/preview.jpg IP104.21.235.194:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Lavc59.14.100", baseline, precision 8, 1280x720, components 3 Hash79723cdeb872b949834a637def3f076a 14d3b43dc18e0810021fe85b5d2bf2fe4e767220 02ead0a55a5dad43b39ffc1ea8f3f65acc06a44a750c789a9a5605a1081865f4
GET /contents/videos_screenshots/20000/20976/preview.jpg HTTP/1.1
Host: moav.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.tube-dl.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 26 Apr 2024 07:49:49 GMT
content-type: image/jpeg
content-length: 76912
last-modified: Wed, 30 Mar 2022 08:23:53 GMT
etag: "62441399-12c70"
expires: Thu, 23 May 2024 21:25:36 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 210253
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=75%2FCn9wOFIUIcFZ8W9PesD8htNWEjYcoPdUBqonRrH%2BPv410yrVjPC0nWywo7ji5eiqTNfKkwFkDXatgM6eJT9yq5Yq9Pdax0nN9L2xbQSpJwszO0YcQo4wwhQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a4fa79ccd923e9-LHR
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| v1.tkvid.cc/videos/202310/14/652acbc53cc26f063e39e2d5/cover.jpg |  54.230.111.48 | | 31 kB |
URL v1.tkvid.cc/videos/202310/14/652acbc53cc26f063e39e2d5/cover.jpg IP54.230.111.48:0
File typeJPEG image data, baseline, precision 8, 478x294, components 3 Hash49128d223158b5d9dc930082c282d5df 40eb5ec662eaedf5ad36c4921528573b81b88bca 7981b94f9b164c795d35081fa2d563be975a7bb7cb009c8223fd396aaae9d682
GET /videos/202310/14/652acbc53cc26f063e39e2d5/cover.jpg HTTP/1.1
Host: v1.tkvid.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.tube-dl.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 31373
accept-ranges: bytes
cache-control: public, max-age=31536000
date: Wed, 24 Apr 2024 02:52:00 GMT
etag: W/"7a8d-18b2f34995c"
last-modified: Sat, 14 Oct 2023 17:20:58 GMT
server: Caddy
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
x-dns-prefetch-control: off
x-download-options: noopen
x-xss-protection: 1; mode=block
x-cache: Hit from cloudfront
via: 1.1 c2b101e67ac25a2f0013450d56ecac38.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 97we5yWaJ4-zlHQWXBvjdVQYFhjai20Ny_kJhFdJioIxlvTp8LusXg==
age: 190669
x-frame-options: SAMEORIGIN
referrer-policy: strict-origin-when-cross-origin
vary: Origin
X-Firefox-Spdy: h2
|
|
| cdn1.hotmoza.tv/thumb/08/48/33/084833da4e2f9b1ec956089fcd119f3e.jpg | 172.67.217.174 | | 6.3 kB |
URL cdn1.hotmoza.tv/thumb/08/48/33/084833da4e2f9b1ec956089fcd119f3e.jpg IP172.67.217.174:0
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 320x180, components 3 Hash8362d110f5f975706e2342ef8e377ce4 e5bc5788ba3222ed722c4f466a4145ddec9dbb72 09bbde1616b1517092738d2ae751cee980c81ae5b4ded20da39a575735658b1a
GET /thumb/08/48/33/084833da4e2f9b1ec956089fcd119f3e.jpg HTTP/1.1
Host: cdn1.hotmoza.tv
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.tube-dl.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 26 Apr 2024 07:49:49 GMT
content-type: image/jpeg
content-length: 6309
last-modified: Sun, 09 Feb 2020 04:32:50 GMT
etag: 8362d110f5f975706e2342ef8e377ce4
x-timestamp: 1581222769.39446
x-object-meta-mtime: 1581222767.787055
x-trans-id: tx3959bd1355754aa199254-005e648951
x-openstack-request-id: tx3959bd1355754aa199254-005e648951
cache-control: max-age=172800
access-control-allow-origin: *
access-control-allow-methods: HEAD,GET,POST,PUT,PATCH,DELETE,OPTIONS
access-control-allow-headers: Content-Type,X-Requested-With,X-Auth-Token,X-Openstack-Request-Id,X-Container-Meta-type,X-Container-Meta-Temp-URL-Key
access-control-expose-headers: X-Container-Meta-Temp-Url-Key,X-Container-Bytes-Used,Last-Modified,X-Timestamp
expires: Fri, 26 Apr 2024 16:35:20 GMT
x-proxy-cache: HIT
cf-cache-status: HIT
age: 141269
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3f7ZxhFLjJloK47MpPuI7OJCE4xbnVucfw7MYPlUZmg7WwAAwuaF%2Ff70ATbUP5hHq6zoEToMP6stD2tpKuzBcnBOG84CbdKwOIETeu%2FjXEkph4Ng%2Fqyiko9snF6cAihM6YU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a4fa7b5933568f-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| www.javwind.com/contents/videos_screenshots/33000/33678/preview.jpg | 188.114.96.1 | | 101 kB |
URL www.javwind.com/contents/videos_screenshots/33000/33678/preview.jpg IP188.114.96.1:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 32x27, segment length 16, comment: "Lavc59.21.103", baseline, precision 8, 720x480, components 3 Size101 kB (101036 bytes) Hashe148cebd44fb4e598db782d1ace36730 3c57dfe5a3d6d6bc722b8d843134e3b4d97400f6 43c73e32425d64a396f73ce163a2fa4a8e41a54989b0183a02d430841c0c5e53
GET /contents/videos_screenshots/33000/33678/preview.jpg HTTP/1.1
Host: www.javwind.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.tube-dl.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 26 Apr 2024 07:49:49 GMT
content-type: image/jpeg
content-length: 101036
etag: "62e57711-18aac"
expires: Sat, 27 Apr 2024 00:30:00 GMT
strict-transport-security: max-age=31536000
access-control-allow-origin: *
access-control-allow-headers: *
access-control-expose-headers: Server,range,Content-Length,Content-Range
access-control-allow-methods: GET, HEAD, OPTIONS
cache-control: max-age=15570
x-served-by: www.javwind.com
cf-cache-status: HIT
age: 26054
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8ESKDnixfI6nvLIeBQt4a%2F0E%2FsHZ3u7tZXRQXKgZh%2FgpOWisdax9rrvm6LNsLHJOjTBEUo1ckay2BMqs1XBg4P5NPuQnjSnBeBoycEj4wqltBMk5vyyrb5tEsmhfKTgVMDo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a4fa7b5c00b505-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| cdn1.hotmoza.tv/thumb/d3/96/5c/d3965c57b51a55dcf3073aaa24ef933a.jpg | 172.67.217.174 | | 11 kB |
URL cdn1.hotmoza.tv/thumb/d3/96/5c/d3965c57b51a55dcf3073aaa24ef933a.jpg IP172.67.217.174:0
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 85", progressive, precision 8, 320x180, components 3 Hashab04c5dadb96399ffda4971fd4623aaf 256e7a6319d72246b71036e02de4886b728e3bb7 ec30bdba9b05c3df7f1b2342f0fe104148e6ffab6c34c92ce2f9f8f262834d7a
GET /thumb/d3/96/5c/d3965c57b51a55dcf3073aaa24ef933a.jpg HTTP/1.1
Host: cdn1.hotmoza.tv
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.tube-dl.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 26 Apr 2024 07:49:49 GMT
content-type: image/jpeg
content-length: 10651
last-modified: Sat, 08 Feb 2020 18:36:54 GMT
etag: ab04c5dadb96399ffda4971fd4623aaf
x-timestamp: 1581187013.31484
x-object-meta-mtime: 1581187008.67362
x-trans-id: tx3e78ab2b9d1d48c481243-005e64ca12
x-openstack-request-id: tx3e78ab2b9d1d48c481243-005e64ca12
cache-control: max-age=172800
access-control-allow-origin: *
access-control-allow-methods: HEAD,GET,POST,PUT,PATCH,DELETE,OPTIONS
access-control-allow-headers: Content-Type,X-Requested-With,X-Auth-Token,X-Openstack-Request-Id,X-Container-Meta-type,X-Container-Meta-Temp-URL-Key
access-control-expose-headers: X-Container-Meta-Temp-Url-Key,X-Container-Bytes-Used,Last-Modified,X-Timestamp
expires: Sat, 27 Apr 2024 09:56:38 GMT
x-proxy-cache: HIT
cf-cache-status: HIT
age: 78791
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xnnDkwyL1eoQpEJk3NJ7HGcmC62%2By2kuNBl%2FsRlAiAU%2FP3smq8XH9vnFzQ15gr9vCFwXUBEEPN2RBquT8%2BIok4lH95Kj9JTQyZqPasse4UzXrnAG6yY06Nggbn%2BMhj5Ge14%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a4fa7b693b568f-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| cdn.hotscope.tv/files/thumbnail/Ag6YwqwtW.jpg |  51.83.238.19 | | 6.3 kB |
URL cdn.hotscope.tv/files/thumbnail/Ag6YwqwtW.jpg IP51.83.238.19:0
File typeJPEG image data, JFIF standard 1.02, aspect ratio, density 4000x4383, segment length 16, comment: "Lavc58.54.100", baseline, precision 8, 270x375, components 3 Hash80a446521e41acbe02e41ce927e47f25 c7f1391d5a5cac31e0bffd7770c0ec0c859b5803 01865c8f32240f2a1107d386affc0555ac3d64e254ac5a1aa4358ff65aac9ca2
GET /files/thumbnail/Ag6YwqwtW.jpg HTTP/1.1
Host: cdn.hotscope.tv
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.tube-dl.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Fri, 26 Apr 2024 07:49:50 GMT
Content-Type: image/jpeg
Content-Length: 6259
Last-Modified: Sun, 17 Jan 2021 12:53:24 GMT
Connection: keep-alive
ETag: "60043344-1873"
Expires: Sat, 26 Apr 2025 07:49:50 GMT
Cache-Control: max-age=31536000
Accept-Ranges: bytes
|
|
| img.fulibao3.xyz/video/other/2023-10-04/104630076083.jpg |  138.199.37.232 | | 8.8 kB |
URL img.fulibao3.xyz/video/other/2023-10-04/104630076083.jpg IP138.199.37.232:0 ASN#60068 Datacamp Limited
File typeJPEG image data, JFIF standard 1.02, aspect ratio, density 3x4, segment length 16, comment: "Lavc57.89.100", baseline, precision 8, 240x320, components 3 Hash1ec6b23232df19c8559463e7baa52806 5eb73f2bcb13c51a998fd55599d0f1160853d354 4a4cc805e49f6a27b554823e43834de41dee39560d0cb30ee17f8b31fa2bb0d5
GET /video/other/2023-10-04/104630076083.jpg HTTP/1.1
Host: img.fulibao3.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.tube-dl.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 26 Apr 2024 07:49:50 GMT
content-type: image/jpeg
content-length: 8824
server: BunnyCDN-DE1-874
cdn-pullzone: 2165286
cdn-uid: b3494596-edf6-493f-b108-d7d0b32a86d9
cdn-requestcountrycode: NO
cache-control: public, max-age=2592000
last-modified: Sat, 20 Apr 2024 07:09:33 GMT
x-amz-meta-src_last_modified_millis: 1709095914804
x-amz-request-id: 53b2f30b67da8ff4
x-amz-id-2: aZAgwZGaLOUIznzjyZL5hSzXVN+FmKDBm
x-amz-version-id: 4_z6db0df79a348fd9a85e70f10_f102673d902866607_d20240420_m070933_c004_v0402000_t0019_u01713596973575
strict-transport-security: max-age=63072000
cdn-proxyver: 1.04
cdn-requestpullsuccess: True
cdn-requestpullcode: 206
cdn-cachedat: 04/24/2024 14:57:23
cdn-edgestorageid: 1077
cdn-status: 200
cdn-requestid: e76259e3ebcc523822bd19b4a537c33c
cdn-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| incestporn.pro/thumbs//852/2705852731943547852_0.jpg | 188.114.97.1 | | 4.9 kB |
URL incestporn.pro/thumbs//852/2705852731943547852_0.jpg IP188.114.97.1:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 240x180, components 3 Hash7d43b5ea15c0dcd1a35166c67fc29859 cb42d3d24652f2d09109d3a5be9edd46d3879649 60bb51e310032696a43fa5ab66b7d06d00d93b8fe36a671beeab41e3dc2cd9cb
GET /thumbs//852/2705852731943547852_0.jpg HTTP/1.1
Host: incestporn.pro
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.tube-dl.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 26 Apr 2024 07:49:50 GMT
content-type: image/jpeg
content-length: 4871
last-modified: Sun, 08 Mar 2020 10:54:21 GMT
etag: "5e64cedd-1307"
expires: Sun, 26 May 2024 07:49:50 GMT
cache-control: max-age=2592000
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=NZgGqYmkfVvlelJCo5PN3TmChnNMG%2FUbMZ8gcJbdOd5PPnWy2MZTfMT6bGLfVdk3ZgWLGov91%2ByuIng2u0u8NnqaxH4T5giYZPWkk887HPZbThydFEfb1zn1eMd2QnFy8Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a4fa7b5d0db4f4-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| img.fulibao3.xyz/video/other/2023-10-04/205374223212.jpg | 138.199.37.232 | | 6.3 kB |
URL img.fulibao3.xyz/video/other/2023-10-04/205374223212.jpg IP138.199.37.232:0 ASN#60068 Datacamp Limited
File typeJPEG image data, JFIF standard 1.02, aspect ratio, density 1708x2277, segment length 16, comment: "Lavc57.89.100", baseline, precision 8, 240x320, components 3 Hashdf35a1f6f0573c1098985927bda7f2f0 0f13a6210fe03b2e2a92cf4cf8c9294bae6660c5 213ccc12c785e559cbbf88bc2ca827eeffc39e243cefc80471f4438513393ce7
GET /video/other/2023-10-04/205374223212.jpg HTTP/1.1
Host: img.fulibao3.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.tube-dl.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 26 Apr 2024 07:49:50 GMT
content-type: image/jpeg
content-length: 6332
server: BunnyCDN-DE1-874
cdn-pullzone: 2165286
cdn-uid: b3494596-edf6-493f-b108-d7d0b32a86d9
cdn-requestcountrycode: NO
cache-control: public, max-age=2592000
last-modified: Sat, 20 Apr 2024 09:42:59 GMT
x-amz-meta-src_last_modified_millis: 1709095934949
x-amz-request-id: 969b317675e85e5a
x-amz-id-2: aZOkwXGbZOaIzqjimZJxh2DVeN7tmIzCM
x-amz-version-id: 4_z6db0df79a348fd9a85e70f10_f10292bf3f4555b81_d20240420_m094259_c004_v0402004_t0040_u01713606179030
strict-transport-security: max-age=63072000
cdn-proxyver: 1.04
cdn-requestpullsuccess: True
cdn-requestpullcode: 206
cdn-cachedat: 04/24/2024 16:45:25
cdn-edgestorageid: 723
cdn-status: 200
cdn-requestid: aeb5c43e14b72d34824b1701c61d2837
cdn-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| rtgallery.net/tb/charlott.jpg |  5.63.144.85 | | 15 kB |
URL rtgallery.net/tb/charlott.jpg IP5.63.144.85:0
File typeJPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 320x240, components 3 Hashf7851a5ce556a9ced9121efd2f88bd6e 46916604f9e0f81dc4324c72f6dec2dab6ba6dca 455b233438911c7b29669087644fbcfa91e65b44e738a34a10085fc75ee8df54
GET /tb/charlott.jpg HTTP/1.1
Host: rtgallery.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.tube-dl.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.16.1
Date: Fri, 26 Apr 2024 06:52:41 GMT
Content-Type: image/jpeg
Content-Length: 14786
Last-Modified: Fri, 02 Jun 2017 16:13:21 GMT
Connection: keep-alive
ETag: "59318ea1-39c2"
Accept-Ranges: bytes
|
|
| img.fulibao3.xyz/video/other/2023-10-04/204950852753.jpg | 138.199.37.232 | | 11 kB |
URL img.fulibao3.xyz/video/other/2023-10-04/204950852753.jpg IP138.199.37.232:0 ASN#60068 Datacamp Limited
File typeJPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, comment: "Lavc57.89.100", baseline, precision 8, 320x240, components 3 Hashd8fd4a175cd01de114c1f5ebffdb70cb 6e87d3b33beb9e35249bc3d0f91e8922b3dcc202 d8dd66f7dd00caa5f80c640d1a2bc05b03d1be8db16e68e8be8dfbc2ae5c7120
GET /video/other/2023-10-04/204950852753.jpg HTTP/1.1
Host: img.fulibao3.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.tube-dl.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 26 Apr 2024 07:49:50 GMT
content-type: image/jpeg
content-length: 11408
server: BunnyCDN-DE1-874
cdn-pullzone: 2165286
cdn-uid: b3494596-edf6-493f-b108-d7d0b32a86d9
cdn-requestcountrycode: NO
cache-control: public, max-age=2592000
last-modified: Sat, 20 Apr 2024 09:42:30 GMT
x-amz-meta-src_last_modified_millis: 1709095936293
x-amz-request-id: e0ee4d2caaed2981
x-amz-id-2: aZGYwWGZ/ORMz/jhGZBFhfjW3N6hm5jAG
x-amz-version-id: 4_z6db0df79a348fd9a85e70f10_f113729b07c035a25_d20240420_m094230_c004_v0402024_t0018_u01713606150510
strict-transport-security: max-age=63072000
cdn-proxyver: 1.04
cdn-requestpullsuccess: True
cdn-requestpullcode: 206
cdn-cachedat: 04/24/2024 19:32:52
cdn-edgestorageid: 1054
cdn-status: 200
cdn-requestid: 9be94bc70fcb2055e7967029c098d6e4
cdn-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| thumbs.movieplaces.tv/bvobpbp/krpo/trrj/xpj/964406-sura.jpg | 188.114.97.1 | | 45 kB |
URL thumbs.movieplaces.tv/bvobpbp/krpo/trrj/xpj/964406-sura.jpg IP188.114.97.1:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 100", baseline, precision 8, 330x250, components 3 Hashfd5892b22dfd0c459fb5d2b8037babb1 a27f4474d2825247c51d5aa44073ead20bf82084 1b03b536d679e15d754d2d9748491e619f7b1a9fa1160059551bba0dc44293b6
GET /bvobpbp/krpo/trrj/xpj/964406-sura.jpg HTTP/1.1
Host: thumbs.movieplaces.tv
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.tube-dl.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 26 Apr 2024 07:49:50 GMT
content-type: image/jpeg
content-length: 44593
last-modified: Mon, 18 Apr 2022 20:54:57 GMT
etag: "625dd021-ae31"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
cf-cache-status: HIT
age: 1139841
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2RgKQcf7EtaesHo0oz74qvyrlAfyx%2B67LTrbsdY%2BNsjVw6AZZmjwWGYEBBaEMsH5QqkpTmA6NRFsXNAMkdkKZ8VwvhBiq1kaeqA0df3TP%2FQSUMLl5Bc6Lc%2BFwiiOjVl5I53AJkkPq0I%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a4fa7c29905687-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| img.fulibao3.xyz/video/other/2023-10-04/102473753640.jpg | 138.199.37.232 | | 3.2 kB |
URL img.fulibao3.xyz/video/other/2023-10-04/102473753640.jpg IP138.199.37.232:0 ASN#60068 Datacamp Limited
File typeJPEG image data, JFIF standard 1.02, aspect ratio, density 1708x2277, segment length 16, comment: "Lavc57.89.100", baseline, precision 8, 240x320, components 3 Hash4c3551647db4016a013bbdf8619c89c1 5c66a28332856680c3e3a2c602e9109b1d490c2d 57ef4c88eeec6aff1c53c035108e18f10c272d4ae9576f21f2da5e6c546feb2f
GET /video/other/2023-10-04/102473753640.jpg HTTP/1.1
Host: img.fulibao3.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.tube-dl.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 26 Apr 2024 07:49:50 GMT
content-type: image/jpeg
content-length: 3158
server: BunnyCDN-DE1-874
cdn-pullzone: 2165286
cdn-uid: b3494596-edf6-493f-b108-d7d0b32a86d9
cdn-requestcountrycode: NO
cache-control: public, max-age=2592000
last-modified: Sat, 20 Apr 2024 07:04:57 GMT
x-amz-meta-src_last_modified_millis: 1709095935813
x-amz-request-id: 884fe9c8b0dd1010
x-amz-id-2: aZJww02aQOQozADgYZP5h/zUjN+pmajC1
x-amz-version-id: 4_z6db0df79a348fd9a85e70f10_f1126b41d87de168e_d20240420_m070457_c004_v0402003_t0059_u01713596697754
strict-transport-security: max-age=63072000
cdn-proxyver: 1.04
cdn-requestpullsuccess: True
cdn-requestpullcode: 206
cdn-cachedat: 04/24/2024 17:09:33
cdn-edgestorageid: 1048
cdn-status: 200
cdn-requestid: 32844696dd47834d804408bac6c8d5ee
cdn-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| img.fulibao3.xyz/video/other/2023-10-04/324935624847.jpg | 138.199.37.232 | | 8.1 kB |
URL img.fulibao3.xyz/video/other/2023-10-04/324935624847.jpg IP138.199.37.232:0 ASN#60068 Datacamp Limited
File typeJPEG image data, JFIF standard 1.02, aspect ratio, density 1708x2277, segment length 16, comment: "Lavc57.89.100", baseline, precision 8, 240x320, components 3 Hashb925cad78182e780b736f890c940ac08 c1293b2d819fe76261a68c84c1a874fabd830434 d1b27e261240bc50d3efdcf78015fd16c6446a879dd414cd6264957aba617dd0
GET /video/other/2023-10-04/324935624847.jpg HTTP/1.1
Host: img.fulibao3.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.tube-dl.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 26 Apr 2024 07:49:50 GMT
content-type: image/jpeg
content-length: 8088
server: BunnyCDN-DE1-874
cdn-pullzone: 2165286
cdn-uid: b3494596-edf6-493f-b108-d7d0b32a86d9
cdn-requestcountrycode: NO
cache-control: public, max-age=2592000
last-modified: Sat, 20 Apr 2024 05:18:36 GMT
x-amz-meta-src_last_modified_millis: 1709095935000
x-amz-request-id: 848776f0417c5e76
x-amz-id-2: aZEAwI2YSOSAzTjgsZGZhWDWwN7dm4DCE
x-amz-version-id: 4_z6db0df79a348fd9a85e70f10_f10672e12c366aac5_d20240420_m051836_c004_v0402000_t0032_u01713590316909
strict-transport-security: max-age=63072000
cdn-proxyver: 1.04
cdn-requestpullsuccess: True
cdn-requestpullcode: 206
cdn-cachedat: 04/24/2024 14:48:05
cdn-edgestorageid: 874
cdn-status: 200
cdn-requestid: d1ffe405b9c93488bfc4590b9571ecdb
cdn-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| cdn.hotscope.tv/files/thumbnail/eTTYtBFuJ.jpg | 51.83.238.19 | | 11 kB |
URL cdn.hotscope.tv/files/thumbnail/eTTYtBFuJ.jpg IP51.83.238.19:0
File typeJPEG image data, JFIF standard 1.02, aspect ratio, density 400x423, segment length 16, comment: "Lavc58.54.100", baseline, precision 8, 270x375, components 3 Hash3986f123f1a709441050576e0cbd039a e6a538ac46e653a174ad49bb3e446e9a73c5e0f3 39e9f3c5f9bb1a6bfd297655daf54820e5333e357f2b00df11b3766aa9432bc7
GET /files/thumbnail/eTTYtBFuJ.jpg HTTP/1.1
Host: cdn.hotscope.tv
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.tube-dl.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Fri, 26 Apr 2024 07:49:50 GMT
Content-Type: image/jpeg
Content-Length: 10952
Last-Modified: Wed, 04 Mar 2020 19:18:33 GMT
Connection: keep-alive
ETag: "5e5fff09-2ac8"
Expires: Sat, 26 Apr 2025 07:49:50 GMT
Cache-Control: max-age=31536000
Accept-Ranges: bytes
|
|
| img.fulibao3.xyz/video/other/2023-10-04/296090201632.jpg | 138.199.37.232 | | 9.4 kB |
URL img.fulibao3.xyz/video/other/2023-10-04/296090201632.jpg IP138.199.37.232:0 ASN#60068 Datacamp Limited
File typeJPEG image data, JFIF standard 1.02, aspect ratio, density 3x4, segment length 16, comment: "Lavc57.89.100", baseline, precision 8, 240x320, components 3 Hashb01faf65e5cfc616957d194a98b52a68 1dc43bf8793df712bd5c3fbee988c1d192dad713 2f78c212e5f4a8fd40c19d22b5d08f9e1f9e73c59b3860dd54f082f340c16fa1
GET /video/other/2023-10-04/296090201632.jpg HTTP/1.1
Host: img.fulibao3.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.tube-dl.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 26 Apr 2024 07:49:50 GMT
content-type: image/jpeg
content-length: 9384
server: BunnyCDN-DE1-874
cdn-pullzone: 2165286
cdn-uid: b3494596-edf6-493f-b108-d7d0b32a86d9
cdn-requestcountrycode: NO
cache-control: public, max-age=2592000
last-modified: Sat, 20 Apr 2024 05:14:11 GMT
x-amz-meta-src_last_modified_millis: 1709095911000
x-amz-request-id: adb1fc75b2beb3e1
x-amz-id-2: aZN8wVWZ0OVMzWDgKZPBhTzXON8pm5TB7
x-amz-version-id: 4_z6db0df79a348fd9a85e70f10_f10996f849aa659a2_d20240420_m051411_c004_v0402009_t0047_u01713590051457
strict-transport-security: max-age=63072000
cdn-proxyver: 1.04
cdn-requestpullsuccess: True
cdn-requestpullcode: 206
cdn-cachedat: 04/24/2024 15:18:02
cdn-edgestorageid: 874
cdn-status: 200
cdn-requestid: 31d357efb41f1bd1d7c7bb3116cb86b8
cdn-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| img.fulibao3.xyz/video/other/2023-10-04/117206125865.jpg | 138.199.37.232 | | 6.9 kB |
URL img.fulibao3.xyz/video/other/2023-10-04/117206125865.jpg IP138.199.37.232:0 ASN#60068 Datacamp Limited
File typeJPEG image data, JFIF standard 1.02, aspect ratio, density 1708x2277, segment length 16, comment: "Lavc57.89.100", baseline, precision 8, 240x320, components 3 Hash5b7c3521ee46d0dc5426ff587bb7d03a 02e9f9944a01faf9857ff75152ae6833889a109c 55038ba93e29828d7a54d052ad22b2c2d3692ca87680691723e6dcfb2bb08399
GET /video/other/2023-10-04/117206125865.jpg HTTP/1.1
Host: img.fulibao3.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.tube-dl.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 26 Apr 2024 07:49:50 GMT
content-type: image/jpeg
content-length: 6883
server: BunnyCDN-DE1-874
cdn-pullzone: 2165286
cdn-uid: b3494596-edf6-493f-b108-d7d0b32a86d9
cdn-requestcountrycode: NO
cache-control: public, max-age=2592000
last-modified: Sat, 20 Apr 2024 07:34:06 GMT
x-amz-meta-src_last_modified_millis: 1709095943289
x-amz-request-id: ce974114be5323ef
x-amz-id-2: aZAkwJGZyORQzeDgVZNVhSTWhNx5maDAt
x-amz-version-id: 4_z6db0df79a348fd9a85e70f10_f10160f9ba40a5d44_d20240420_m073406_c004_v0402021_t0055_u01713598446887
strict-transport-security: max-age=63072000
cdn-proxyver: 1.04
cdn-requestpullsuccess: True
cdn-requestpullcode: 206
cdn-cachedat: 04/24/2024 16:37:54
cdn-edgestorageid: 1053
cdn-status: 200
cdn-requestid: f974dd5e610716ce567b911758f21749
cdn-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| img.fulibao3.xyz/video/thumb/3b2a49171593e86173846b586f4a346b.jpg | 138.199.37.232 | | 71 kB |
URL img.fulibao3.xyz/video/thumb/3b2a49171593e86173846b586f4a346b.jpg IP138.199.37.232:0 ASN#60068 Datacamp Limited
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 980x550, components 3 Hash68e42d60a200a56342ceeb3c9cd22312 4b3b74cf2f4b2c26f44f7c4e6df74ece154bd55a f4ffc70c1621d01bef0deb62d65ff14010f97f6f028ed5a2a431d584e3990657
GET /video/thumb/3b2a49171593e86173846b586f4a346b.jpg HTTP/1.1
Host: img.fulibao3.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.tube-dl.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 26 Apr 2024 07:49:50 GMT
content-type: image/jpeg
content-length: 70870
server: BunnyCDN-DE1-874
cdn-pullzone: 2165286
cdn-uid: b3494596-edf6-493f-b108-d7d0b32a86d9
cdn-requestcountrycode: NO
cache-control: public, max-age=2592000
last-modified: Sat, 20 Apr 2024 08:31:58 GMT
x-amz-meta-src_last_modified_millis: 1709099193780
x-amz-request-id: 8f41cdf3c9b41d39
x-amz-id-2: aZG8wOmYsORQzIDivZLFhUDX+N3dmpzCk
x-amz-version-id: 4_z6db0df79a348fd9a85e70f10_f113135bfe44d8f40_d20240420_m083158_c004_v0402020_t0042_u01713601918214
strict-transport-security: max-age=63072000
cdn-proxyver: 1.04
cdn-requestpullsuccess: True
cdn-requestpullcode: 206
cdn-cachedat: 04/24/2024 14:57:25
cdn-edgestorageid: 1076
cdn-status: 200
cdn-requestid: 3ddc83cba05ce88e112c4072990eb0f8
cdn-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| img.fulibao3.xyz/video/other/2023-10-04/264774646948.jpg | 138.199.37.232 | | 124 kB |
URL img.fulibao3.xyz/video/other/2023-10-04/264774646948.jpg IP138.199.37.232:0 ASN#60068 Datacamp Limited
File typePNG image data, 718 x 404, 8-bit colormap, non-interlaced Size124 kB (124237 bytes) Hash7fcc10db10e1ed1e434e83f078703937 9ff899ee58dbf47e6076dada35d61a72631bb066 34ef5450e3cc9652674fac82e784515d63b51903f9444db0990a63d9ec6f2854
GET /video/other/2023-10-04/264774646948.jpg HTTP/1.1
Host: img.fulibao3.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.tube-dl.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 26 Apr 2024 07:49:50 GMT
content-type: image/jpeg
content-length: 124237
server: BunnyCDN-DE1-874
cdn-pullzone: 2165286
cdn-uid: b3494596-edf6-493f-b108-d7d0b32a86d9
cdn-requestcountrycode: NO
cache-control: public, max-age=2592000
last-modified: Sat, 20 Apr 2024 05:07:30 GMT
x-amz-meta-src_last_modified_millis: 1709095890000
x-amz-request-id: 47db3f4cbc3e0a6c
x-amz-id-2: aZFIwAmbAOUMzZjj0ZNph6jWhN9Bm6DA6
x-amz-version-id: 4_z6db0df79a348fd9a85e70f10_f1148401029e3e7ee_d20240420_m050730_c004_v0402005_t0026_u01713589650190
strict-transport-security: max-age=63072000
cdn-proxyver: 1.04
cdn-requestpullsuccess: True
cdn-requestpullcode: 206
cdn-cachedat: 04/24/2024 16:36:27
cdn-edgestorageid: 1047
cdn-status: 200
cdn-requestid: 63dc80a8abce8d6168ca381e1b581ddc
cdn-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| img.fulibao3.xyz/video/thumb/fc738dcb62bb4c32bf035c36557e7ce5.jpg | 138.199.37.232 | | 101 kB |
URL img.fulibao3.xyz/video/thumb/fc738dcb62bb4c32bf035c36557e7ce5.jpg IP138.199.37.232:0 ASN#60068 Datacamp Limited
File typePNG image data, 718 x 404, 8-bit colormap, non-interlaced Size101 kB (100760 bytes) Hashf0c39e1c395041f24404b93bcae81499 d8daae99305f6163a34659c00e30f7e0d2c42c09 bd4d365dfc3ae9267db0116080ba5004cee8abe17b5511f0fafd670404b7033d
GET /video/thumb/fc738dcb62bb4c32bf035c36557e7ce5.jpg HTTP/1.1
Host: img.fulibao3.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.tube-dl.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 26 Apr 2024 07:49:50 GMT
content-type: image/jpeg
content-length: 100760
server: BunnyCDN-DE1-874
cdn-pullzone: 2165286
cdn-uid: b3494596-edf6-493f-b108-d7d0b32a86d9
cdn-requestcountrycode: NO
cache-control: public, max-age=2592000
last-modified: Sat, 20 Apr 2024 05:17:14 GMT
x-amz-meta-src_last_modified_millis: 1709100345000
x-amz-request-id: 40e9d8a612eda8c0
x-amz-id-2: aZOEw72a4OewzOTgcZO1hmzXuN9tmXzDD
x-amz-version-id: 4_z6db0df79a348fd9a85e70f10_f1020a59eb7027b90_d20240420_m051714_c004_v0402022_t0029_u01713590234034
strict-transport-security: max-age=63072000
cdn-proxyver: 1.04
cdn-requestpullsuccess: True
cdn-requestpullcode: 206
cdn-cachedat: 04/24/2024 22:30:23
cdn-edgestorageid: 865
cdn-status: 200
cdn-requestid: 7a53cdea56443e24f560d7e85a0ffaf9
cdn-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.91pjav.com/contents/videos_screenshots/54000/54096/preview.jpg | 188.114.96.1 | | 174 kB |
URL www.91pjav.com/contents/videos_screenshots/54000/54096/preview.jpg IP188.114.96.1:0
File typeJPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, comment: "Lavc58.54.100", baseline, precision 8, 1280x720, components 3 Size174 kB (173507 bytes) Hash983db8e9ffb8e5a1bbb7c6852ab521ea d33315111df23c2db2c79e1fdd3f03c4c63bca67 0517c00e181e5517316bce3e9768030413a125d5b659dd686799571107e378f3
GET /contents/videos_screenshots/54000/54096/preview.jpg HTTP/1.1
Host: www.91pjav.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.tube-dl.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 26 Apr 2024 07:49:50 GMT
content-type: image/jpeg
content-length: 173507
last-modified: Sat, 17 Oct 2020 08:52:02 GMT
etag: "5f8ab0b2-2a5c3"
expires: Wed, 15 May 2024 17:41:38 GMT
cache-control: max-age=2592000
access-control-allow-headers: *
access-control-expose-headers: Server,range,Content-Length,Content-Range
access-control-allow-methods: GET, HEAD, OPTIONS
access-control-allow-origin: *
cf-cache-status: HIT
age: 914892
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2BeSr61HQ%2FNb85xpBNUVTkVqf2XxIs14aHBTg4ZU4HpCBITRAM4CxVsor1TKWM2mN1T4ORg0VAqyOY8Gu8pznguZOIur%2F%2Fc1%2BClZOpoqLAyXDzodvZ0QdOruyfnwj6J2dCA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a4fa7cdfc01c0e-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| vidmo.pro/thumbs_320/1f/2d/1f2d2efec3c082f87c8469d0d03ff94a/15613584.jpg | 89.248.193.244 | | 12 kB |
URL vidmo.pro/thumbs_320/1f/2d/1f2d2efec3c082f87c8469d0d03ff94a/15613584.jpg IP89.248.193.244:0 ASN#49505 OOO Network of data-centers Selectel
File typeJPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 320x240, components 3 Hashf1e7cf8503aea15586eaf0be22743c7a 09744c02673aac7d5891e4aa565fe121e7b52c84 90f4788de462545134f2bbf85ae3943ee7cf928b3afd4cd1a03be71eda908655
GET /thumbs_320/1f/2d/1f2d2efec3c082f87c8469d0d03ff94a/15613584.jpg HTTP/1.1
Host: vidmo.pro
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.tube-dl.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 26 Apr 2024 07:49:50 GMT
content-type: image/jpeg
content-length: 12249
last-modified: Sat, 24 Jun 2023 19:01:51 GMT
expires: Mon, 20 Nov 2023 19:08:17 GMT
cache-control: max-age=604800, public, no-transform
x-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.91pjav.com/contents/videos_screenshots/91000/91772/preview.jpg | 188.114.96.1 | | 226 kB |
URL www.91pjav.com/contents/videos_screenshots/91000/91772/preview.jpg IP188.114.96.1:0
File typeJPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, comment: "Lavc58.54.100", baseline, precision 8, 1920x1080, components 3 Size226 kB (226405 bytes) Hashe7e3a860d230b56ff31379ce6fb9d74b 49762542a39de2f69f5905d4093e27ca00ee182b 47d536feffe0b4ebd290e9fb7b1f89476dbd6f84c239c83d256c5ed18f1189ff
GET /contents/videos_screenshots/91000/91772/preview.jpg HTTP/1.1
Host: www.91pjav.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.tube-dl.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 26 Apr 2024 07:49:50 GMT
content-type: image/jpeg
content-length: 226405
last-modified: Sat, 13 Nov 2021 18:12:02 GMT
etag: "618ffff2-37465"
expires: Sat, 25 May 2024 12:03:19 GMT
cache-control: max-age=2592000
access-control-allow-headers: *
access-control-expose-headers: Server,range,Content-Length,Content-Range
access-control-allow-methods: GET, HEAD, OPTIONS
access-control-allow-origin: *
cf-cache-status: HIT
age: 71191
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=504n3jmq%2F%2BEoPY7IEnuz28OrBOmOPJoO82QodwJfPDFb%2BMPhfkyZGK22Ivu3mvysDPv3CCb0ooQP8NeTroAhhehQN29n30PAfW233jX2%2BOd%2Bb95Y1clRTYhWlwiZWtLtQg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a4fa7cdfc11c0e-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| javtube.net/media/videos/tmb/000/128/200/1.jpg | 172.67.208.149 | | 7.2 kB |
URL javtube.net/media/videos/tmb/000/128/200/1.jpg IP172.67.208.149:0
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 256x144, components 3 Hashd1ac3f86da0bdbaca948502bd766e102 fddccdd9cfd2552f3eb2734151a2e0b8161158f7 fe1c5486fa1335bd97118b572560b23aee4c9bb6431365a688db0cf640b0a131
GET /media/videos/tmb/000/128/200/1.jpg HTTP/1.1
Host: javtube.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.tube-dl.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 26 Apr 2024 07:49:50 GMT
content-type: image/jpeg
content-length: 7236
last-modified: Sun, 15 Nov 2020 14:07:03 GMT
etag: "5fb13607-1c44"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=DAcm6rs5QmG92GAFh76n63WileSDfjVTgsUdONj%2F4WouoRXP%2FFQCfa1AUPPIlgH4xTTHNulfGokunV%2By81Hm6DG1tNWmdkGGVfHUezKZYG0zt3k7jug67MqiCGCk8A%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a4fa7bc806b4ee-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| img.uubaobei.top//xwupload/video/other/2023-10-04/205670648878.jpg | 23.237.40.66 | | 8.8 kB |
URL img.uubaobei.top//xwupload/video/other/2023-10-04/205670648878.jpg IP23.237.40.66:0
File typeJPEG image data, JFIF standard 1.02, aspect ratio, density 30001x-25614, segment length 16, comment: "Lavc57.89.100", baseline, precision 8, 240x320, components 3 Hash7a0f0e4211b9fb8dd0d831f1f0c1aa59 034de7ec75b5c8f80e681ce92d6679bae3668fa4 4f31cad1d237e96540b3690538373098269cca95386b67943ed80d70efa9776e
GET //xwupload/video/other/2023-10-04/205670648878.jpg HTTP/1.1
Host: img.uubaobei.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.tube-dl.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: openresty
Date: Fri, 26 Apr 2024 07:49:50 GMT
Content-Type: image/jpeg
Content-Length: 8767
Last-Modified: Wed, 28 Feb 2024 04:51:31 GMT
Connection: keep-alive
ETag: "65debbd3-223f"
Expires: Sun, 26 May 2024 07:49:50 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
|
|
| img.uubaobei.top//xwupload/video/other/2023-10-04/990194592565.jpg | 23.237.40.66 | | 8.1 kB |
URL img.uubaobei.top//xwupload/video/other/2023-10-04/990194592565.jpg IP23.237.40.66:0
File typeJPEG image data, JFIF standard 1.02, aspect ratio, density 1708x2277, segment length 16, comment: "Lavc57.89.100", baseline, precision 8, 240x320, components 3 Hash65d4c42d6a2b8b4ae053a955e6b3067a 7345bbfe2c830265319e6443091eeade5bcc74a6 34a253b7d8d5cd71d68184bf202e7a683bbd1e6cb2f22888d112a5fc5bb6c15d
GET //xwupload/video/other/2023-10-04/990194592565.jpg HTTP/1.1
Host: img.uubaobei.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.tube-dl.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: openresty
Date: Fri, 26 Apr 2024 07:49:50 GMT
Content-Type: image/jpeg
Content-Length: 8128
Last-Modified: Wed, 28 Feb 2024 04:51:42 GMT
Connection: keep-alive
ETag: "65debbde-1fc0"
Expires: Sun, 26 May 2024 07:49:50 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
|
|
| jsjs.4jpg.top/index.php?js=very | 188.114.97.1 | 200 OK | 8.4 kB |
URL GET HTTP/3jsjs.4jpg.top/index.php?js=very IP188.114.97.1:443
Requested byhttps://css.4jpg.top/tagjpa.php?noself=1&url=av.av4us.top/tags/9 CertificateIssuerGoogle Trust Services LLC Subject4jpg.top Fingerprint19:3C:A7:CB:6C:A2:7F:AC:A7:F8:06:02:93:BD:6D:64:17:BD:D5:58 ValidityThu, 07 Mar 2024 14:29:37 GMT - Wed, 05 Jun 2024 14:29:36 GMT
File typeASCII text, with no line terminators Hash77542f8a3ada1bb8b45eb9139c5e69ef 08556fa802dce18bec90fc57d62c7caaa4dbbdd0 4a12c40c3eb9ed0e055519dbd5be4cb7e88ee707739484aa38e3e3284c0bdc46
GET /index.php?js=very HTTP/1.1
Host: jsjs.4jpg.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.tube-dl.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 26 Apr 2024 07:49:49 GMT
content-type: text/html; charset=UTF-8
imghost: 17296161209-h-jsjs4jpgtopmh--NO-rm162158222235/index.php?js=very
56nloadrate: 1.1021875
cache-control: max-age=360000, private
vary: Accept-Encoding
access-control-allow-origin: *
access-control-allow-headers: Cake
cf-cache-status: BYPASS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=22qf1OyFZDUKc7ZGcO0ELsN7eTSjBlAKJjQSBqUJRPhH4ODGU%2FqndtwIFGa84wH5YfXKlI2yL0d7R4qI%2FOxrhdnHFzpPBiOznVljeqI3XGb2yUWgNsIcHCe3h8if%2FDHR"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87a4fa780a4e1c12-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| cdnjs.cloudflare.com/ajax/libs/nosleep/0.11.0/NoSleep.min.js | 104.17.25.14 | 200 OK | 4.0 kB |
URL GET HTTP/3cdnjs.cloudflare.com/ajax/libs/nosleep/0.11.0/NoSleep.min.js IP104.17.25.14:443
Requested byhttps://av.tube-dl.top/contact/----kw/inurl:spankbang.party CertificateIssuerCloudflare, Inc. Subjectsni.cloudflaressl.com Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (10613) Hashea77f824de2ef57acb12e7cb6596365e 10bad0dbdf30a0471c2c786b349daeb1dd19180e 2b19d92ce83bf3b498f73103ba1240f09c84798b1f92aedf1491ccf0aa6f5e4c
GET /ajax/libs/nosleep/0.11.0/NoSleep.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.tube-dl.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 26 Apr 2024 07:49:50 GMT
content-type: application/javascript; charset=utf-8
content-length: 3953
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5ed16b69-29bf"
last-modified: Fri, 29 May 2020 20:07:05 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 17784
expires: Wed, 16 Apr 2025 07:49:50 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8afIjA3V30vr7EX%2F0HVQMDNe06TK3TXH9O7AbAkTW8smK9JqtEvcDfaThDWpsEf0V5Ofl%2F9AIuRQotr7O7nOJKCHzd0fKBlbaILejxswnIQqK5bIRSedgzEtwzeuQuRVK1RbxvEi"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 87a4fa80da4a712d-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| www.googletagmanager.com/gtag/js?id=UA-620120-3 | 142.250.74.168 | 200 OK | 69 kB |
URL GET HTTP/3www.googletagmanager.com/gtag/js?id=UA-620120-3 IP142.250.74.168:443
Requested byhttps://av.tube-dl.top/contact/----kw/inurl:spankbang.party CertificateIssuerGoogle Trust Services LLC Subject*.google-analytics.com Fingerprint1E:33:2E:4B:C3:51:05:B7:73:DC:21:BF:3E:02:B3:16:D8:0B:AB:BB ValidityMon, 18 Mar 2024 19:37:14 GMT - Mon, 10 Jun 2024 19:37:13 GMT
File typeJavaScript source, ASCII text, with very long lines (1763) Hash1a3069050ba1373de972e3fdd1b28b01 3aa9daecd42fcd854050a1a372f6dfa203893427 0db695c36d6090744c681999204ffc223129381153bbd894aaa1e62d8c1f0e7e
GET /gtag/js?id=UA-620120-3 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.tube-dl.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Fri, 26 Apr 2024 07:49:50 GMT
expires: Fri, 26 Apr 2024 07:49:50 GMT
cache-control: private, max-age=900
last-modified: Fri, 26 Apr 2024 06:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 69243
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| cdn.jsdelivr.net/npm/yandex-metrica-watch/watch.js | 151.101.1.229 | 200 OK | 76 kB |
URL GET HTTP/3cdn.jsdelivr.net/npm/yandex-metrica-watch/watch.js IP151.101.1.229:443
Requested byhttps://av.tube-dl.top/contact/----kw/inurl:spankbang.party CertificateIssuerGlobalSign nv-sa Subjectjsdelivr.net Fingerprint05:87:2C:BA:73:14:21:54:82:00:8B:AD:85:8F:E9:C6:4D:C7:66:09 ValidityWed, 27 Sep 2023 18:13:13 GMT - Mon, 28 Oct 2024 18:13:12 GMT
File typeJavaScript source, Unicode text, UTF-8 (with BOM) text, with very long lines (546) Hash42d39a9126c8c10554ea284c98aabea4 b57a08e14c17abdd7910dd0416c50031e2dfa94b b47aac0d23c87c29cbeb20e603b758bd7cdb7b2b743d685c26aaf2e3daeb00eb
GET /npm/yandex-metrica-watch/watch.js HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.tube-dl.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=604800, s-maxage=43200
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: application/javascript; charset=utf-8
x-jsd-version: 1.322.0
x-jsd-version-type: version
etag: W/"2c894-tXoI4UwXq915EN0EFsUAMeLfqUs"
content-encoding: br
accept-ranges: bytes
date: Fri, 26 Apr 2024 07:49:50 GMT
age: 31845
x-served-by: cache-fra-eddf8230153-FRA, cache-hel1410022-HEL
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 76100
X-Firefox-Spdy: h2
|
|
| jsjs.4jpg.top/index.php?js=very | 188.114.97.1 | 200 OK | 4.0 kB |
URL GET HTTP/3jsjs.4jpg.top/index.php?js=very IP188.114.97.1:443
Requested byhttps://css.4jpg.top/tagjpa.php?noself=1&url=av.av4us.top/tags/9 CertificateIssuerGoogle Trust Services LLC Subject4jpg.top Fingerprint19:3C:A7:CB:6C:A2:7F:AC:A7:F8:06:02:93:BD:6D:64:17:BD:D5:58 ValidityThu, 07 Mar 2024 14:29:37 GMT - Wed, 05 Jun 2024 14:29:36 GMT
File typeASCII text, with no line terminators Hash77542f8a3ada1bb8b45eb9139c5e69ef 08556fa802dce18bec90fc57d62c7caaa4dbbdd0 4a12c40c3eb9ed0e055519dbd5be4cb7e88ee707739484aa38e3e3284c0bdc46
GET /index.php?js=very HTTP/1.1
Host: jsjs.4jpg.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.tube-dl.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 26 Apr 2024 07:49:51 GMT
content-type: text/html; charset=UTF-8
imghost: 17296161209-h-jsjs4jpgtopmh--NO-rm162158222235/index.php?js=very
56nloadrate: 1.1865625
cache-control: max-age=360000, private
vary: Accept-Encoding
access-control-allow-origin: *
access-control-allow-headers: Cake
cf-cache-status: BYPASS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=XqeawC5PkNqFZHh%2FAKfFgGcEB41zitqxetAOG6oWkKKxDfnHgtXBcKe5brql08MJ71%2F2QxJeP2qqbDMCYsFHITSAq%2BJc0e%2ByOu9aWV8WPU%2BS0GUMnpjR%2BapPkw3zPmAA"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87a4fa811f3256ae-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| cdn.jsdelivr.net/npm/yandex-metrica-watch/watch.js | 151.101.1.229 | 200 OK | 76 kB |
URL GET HTTP/3cdn.jsdelivr.net/npm/yandex-metrica-watch/watch.js IP151.101.1.229:443
Requested byhttps://av.tube-dl.top/contact/----kw/inurl:spankbang.party CertificateIssuerGlobalSign nv-sa Subjectjsdelivr.net Fingerprint05:87:2C:BA:73:14:21:54:82:00:8B:AD:85:8F:E9:C6:4D:C7:66:09 ValidityWed, 27 Sep 2023 18:13:13 GMT - Mon, 28 Oct 2024 18:13:12 GMT
File typeJavaScript source, Unicode text, UTF-8 (with BOM) text, with very long lines (546) Hash42d39a9126c8c10554ea284c98aabea4 b57a08e14c17abdd7910dd0416c50031e2dfa94b b47aac0d23c87c29cbeb20e603b758bd7cdb7b2b743d685c26aaf2e3daeb00eb
GET /npm/yandex-metrica-watch/watch.js HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.tube-dl.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 76100
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=604800, s-maxage=43200
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: application/javascript; charset=utf-8
x-jsd-version: 1.322.0
x-jsd-version-type: version
etag: W/"2c894-tXoI4UwXq915EN0EFsUAMeLfqUs"
content-encoding: br
accept-ranges: bytes
date: Fri, 26 Apr 2024 07:49:51 GMT
age: 31845
x-served-by: cache-fra-eddf8230153-FRA, cache-hel1410023-HEL
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
|
|
| www.googletagmanager.com/gtag/js?id=UA-620120-3 | 142.250.74.168 | 200 OK | 69 kB |
URL GET HTTP/3www.googletagmanager.com/gtag/js?id=UA-620120-3 IP142.250.74.168:443
Requested byhttps://av.tube-dl.top/contact/----kw/inurl:spankbang.party CertificateIssuerGoogle Trust Services LLC Subject*.google-analytics.com Fingerprint1E:33:2E:4B:C3:51:05:B7:73:DC:21:BF:3E:02:B3:16:D8:0B:AB:BB ValidityMon, 18 Mar 2024 19:37:14 GMT - Mon, 10 Jun 2024 19:37:13 GMT
File typeJavaScript source, ASCII text, with very long lines (1763) Hash427f87e54c27fcec375246dcb83310be 9eb8f097212d588a88ca16de74c714193b9b73bb 55d2949f1620e50412a2f91387cceeac6357ba020a654968d99c6893603c1ba8
GET /gtag/js?id=UA-620120-3 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.tube-dl.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Fri, 26 Apr 2024 07:49:51 GMT
expires: Fri, 26 Apr 2024 07:49:51 GMT
cache-control: private, max-age=900
last-modified: Fri, 26 Apr 2024 06:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 69212
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| cf9c86d5de.f33207dc6c.com/1e6048537fd0bf07420ace8536306a3b/23782?version_name=d | 45.133.44.52 | 200 OK | 5.3 kB |
URL GET HTTP/2cf9c86d5de.f33207dc6c.com/1e6048537fd0bf07420ace8536306a3b/23782?version_name=d IP45.133.44.52:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://av.tube-dl.top/contact/----kw/inurl:spankbang.party CertificateIssuerLet's Encrypt Subjectcf9c86d5de.f33207dc6c.com Fingerprint07:43:06:4D:DB:B9:3C:31:4D:0B:61:89:FB:65:A1:AA:78:A1:36:FD ValidityTue, 23 Apr 2024 02:30:49 GMT - Mon, 22 Jul 2024 02:30:48 GMT
File typeNew Line Delimited JSON text data Hash3aa0271dd5a55b19cde64da690492f28 ae9dc55825cd60b5c7997c9d24cba293680125b1 7886a328e35fbd9fafdbd94c77f633fafb6cdb2d21dd7ced5948cd68cbfd67db
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /1e6048537fd0bf07420ace8536306a3b/23782?version_name=d HTTP/1.1
Host: cf9c86d5de.f33207dc6c.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://av.tube-dl.top
DNT: 1
Connection: keep-alive
Referer: https://av.tube-dl.top/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 26 Apr 2024 07:49:51 GMT
content-type: application/json
server: nginx/1.18.0
cache-control: max-age=300
expires: Fri, 26 Apr 2024 07:54:51 GMT
x-proxy-cache: HIT
access-control-allow-origin: *
X-Firefox-Spdy: h2
|
|
| jsjs.4jpg.top/index.php?js=very | 188.114.97.1 | 200 OK | 4.0 kB |
URL GET HTTP/3jsjs.4jpg.top/index.php?js=very IP188.114.97.1:443
Requested byhttps://css.4jpg.top/tagjpa.php?noself=1&url=av.av4us.top/tags/9 CertificateIssuerGoogle Trust Services LLC Subject4jpg.top Fingerprint19:3C:A7:CB:6C:A2:7F:AC:A7:F8:06:02:93:BD:6D:64:17:BD:D5:58 ValidityThu, 07 Mar 2024 14:29:37 GMT - Wed, 05 Jun 2024 14:29:36 GMT
File typeASCII text, with no line terminators Hash77542f8a3ada1bb8b45eb9139c5e69ef 08556fa802dce18bec90fc57d62c7caaa4dbbdd0 4a12c40c3eb9ed0e055519dbd5be4cb7e88ee707739484aa38e3e3284c0bdc46
GET /index.php?js=very HTTP/1.1
Host: jsjs.4jpg.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.tube-dl.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 26 Apr 2024 07:49:51 GMT
content-type: text/html; charset=UTF-8
imghost: 17296161209-h-jsjs4jpgtopmh--NO-rm162158222235/index.php?js=very
56nloadrate: 1.1865625
cache-control: max-age=360000, private
vary: Accept-Encoding
access-control-allow-origin: *
access-control-allow-headers: Cake
cf-cache-status: BYPASS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HRufWYEqzv3fIkl%2B4NfEGFAp8%2Bq41%2FuUZUMp9%2BcuDNF5RVWagIS7%2BSxmEOov%2BAYn6yIVihxo8pgS%2FmlvoMJ%2Bxt25JKeiGbWB5BMLDH5JAK8TaPcAUsb5xjzdUixmYKhx"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87a4fa84eacd56ae-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| cdn.jsdelivr.net/npm/yandex-metrica-watch/watch.js | 151.101.1.229 | 200 OK | 76 kB |
URL GET HTTP/3cdn.jsdelivr.net/npm/yandex-metrica-watch/watch.js IP151.101.1.229:443
Requested byhttps://av.tube-dl.top/contact/----kw/inurl:spankbang.party CertificateIssuerGlobalSign nv-sa Subjectjsdelivr.net Fingerprint05:87:2C:BA:73:14:21:54:82:00:8B:AD:85:8F:E9:C6:4D:C7:66:09 ValidityWed, 27 Sep 2023 18:13:13 GMT - Mon, 28 Oct 2024 18:13:12 GMT
File typeJavaScript source, Unicode text, UTF-8 (with BOM) text, with very long lines (546) Hash42d39a9126c8c10554ea284c98aabea4 b57a08e14c17abdd7910dd0416c50031e2dfa94b b47aac0d23c87c29cbeb20e603b758bd7cdb7b2b743d685c26aaf2e3daeb00eb
GET /npm/yandex-metrica-watch/watch.js HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.tube-dl.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 76100
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=604800, s-maxage=43200
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: application/javascript; charset=utf-8
x-jsd-version: 1.322.0
x-jsd-version-type: version
etag: W/"2c894-tXoI4UwXq915EN0EFsUAMeLfqUs"
content-encoding: br
accept-ranges: bytes
date: Fri, 26 Apr 2024 07:49:51 GMT
age: 31845
x-served-by: cache-fra-eddf8230153-FRA, cache-hel1410023-HEL
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
|
|
| www.googletagmanager.com/gtag/js?id=UA-620120-3 | 142.250.74.168 | 200 OK | 69 kB |
URL GET HTTP/3www.googletagmanager.com/gtag/js?id=UA-620120-3 IP142.250.74.168:443
Requested byhttps://av.tube-dl.top/contact/----kw/inurl:spankbang.party CertificateIssuerGoogle Trust Services LLC Subject*.google-analytics.com Fingerprint1E:33:2E:4B:C3:51:05:B7:73:DC:21:BF:3E:02:B3:16:D8:0B:AB:BB ValidityMon, 18 Mar 2024 19:37:14 GMT - Mon, 10 Jun 2024 19:37:13 GMT
File typeJavaScript source, ASCII text, with very long lines (1763) Hash965cd533239b1faac985b91bf4ba1f15 a4c447cac540eeba0abd43f3e84d277d6fc6542d 4fbc1b1033f4468cc413d6aac20af7276def1db249fa05544ff9cfa286b6fca9
GET /gtag/js?id=UA-620120-3 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.tube-dl.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Fri, 26 Apr 2024 07:49:51 GMT
expires: Fri, 26 Apr 2024 07:49:51 GMT
cache-control: private, max-age=900
last-modified: Fri, 26 Apr 2024 06:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 69243
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| ajax.googleapis.com/ajax/libs/jquery/3.3.1/jquery.min.js | 172.217.21.170 | 200 OK | 30 kB |
URL GET HTTP/2ajax.googleapis.com/ajax/libs/jquery/3.3.1/jquery.min.js IP172.217.21.170:443
Requested byhttps://av.tube-dl.top/contact/----kw/inurl:spankbang.party CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint5F:6D:48:87:16:89:1E:A5:57:29:92:8B:34:BD:F2:92:0C:7F:F2:50 ValidityMon, 08 Apr 2024 07:32:03 GMT - Mon, 01 Jul 2024 07:32:02 GMT
File typeJavaScript source, ASCII text, with very long lines (65451) Hasha09e13ee94d51c524b7e2a728c7d4039 0dc32db4aa9c5f03f3b38c47d883dbd4fed13aae 160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef
GET /ajax/libs/jquery/3.3.1/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.tube-dl.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 30399
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 25 Apr 2024 11:06:17 GMT
expires: Fri, 25 Apr 2025 11:06:17 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
age: 74614
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| js.2mp4.xyz/AV4.us.jpg | 188.114.96.1 | 200 OK | 8.7 kB |
IP188.114.96.1:443
Requested byhttps://av.tube-dl.top/contact/----kw/inurl:spankbang.party CertificateIssuerGoogle Trust Services LLC Subject2mp4.xyz FingerprintEA:8B:3D:2A:6E:4A:92:4C:C7:E4:CE:45:0E:7B:95:73:D0:3D:2B:BF ValidityMon, 04 Mar 2024 12:43:20 GMT - Sun, 02 Jun 2024 12:43:19 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 307x82, components 3 Hashedfe007a6e5b3d268b2528f564b60b43 1644c8ef97c871079e07e5079d613af5cb94052f bf5bb657f5e788af0c02b9b437d3f15bec91e27175e5a654e3d431fb6d063390
GET /AV4.us.jpg HTTP/1.1
Host: js.2mp4.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.tube-dl.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 26 Apr 2024 07:49:51 GMT
content-type: image/jpeg
content-length: 8741
etag: "2225-614075c7eff6b"
access-control-allow-origin: *
access-control-allow-headers: Cake
cache-control: public, max-age=360000
cf-cache-status: HIT
age: 93929
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=d8s4qbpYrLqbfbzDd1OMCDaMdtjJ7MDl6IhDgszLQV4w%2BrRUzvDKUzFDfudA0tpmovhoPOKgHmXRP6J65%2F8SxJ903xEA8PtO93RobuX6lnqIsc3p7bz%2FnBazFIFRpA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a4fa87882b56be-OSL
alt-svc: h3=":443"; ma=86400
|
|
| ajax.googleapis.com/ajax/libs/jquery/3.3.1/jquery.min.js | 172.217.21.170 | 200 OK | 30 kB |
URL GET HTTP/2ajax.googleapis.com/ajax/libs/jquery/3.3.1/jquery.min.js IP172.217.21.170:443
Requested byhttps://av.tube-dl.top/contact/----kw/inurl:spankbang.party CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint5F:6D:48:87:16:89:1E:A5:57:29:92:8B:34:BD:F2:92:0C:7F:F2:50 ValidityMon, 08 Apr 2024 07:32:03 GMT - Mon, 01 Jul 2024 07:32:02 GMT
File typeJavaScript source, ASCII text, with very long lines (65451) Hasha09e13ee94d51c524b7e2a728c7d4039 0dc32db4aa9c5f03f3b38c47d883dbd4fed13aae 160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef
GET /ajax/libs/jquery/3.3.1/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.tube-dl.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 30399
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 25 Apr 2024 11:06:17 GMT
expires: Fri, 25 Apr 2025 11:06:17 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
age: 74615
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| av.tube-dl.top/contact/----kw/inurl:spankbang.party | 188.114.96.1 | 200 OK | 40 kB |
URL User Request GET HTTP/3av.tube-dl.top/contact/----kw/inurl:spankbang.party IP188.114.96.1:443
CertificateIssuerGoogle Trust Services LLC Subjecttube-dl.top Fingerprint83:8A:DD:22:7A:3D:A7:FE:66:68:DE:EB:E9:47:EF:8E:06:50:F3:DD ValidityWed, 13 Mar 2024 16:17:42 GMT - Tue, 11 Jun 2024 16:17:41 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (1329), with CRLF, LF line terminators Hasha1ea8ad690eac83b633e8b50c97f5829 45c9fa1f4ddd8e088d7f76f5bdd255ba0b695fa7 a5546d44b05c79abaf4d6b5b3b8f2280cda9b1e6cd1aed0bd1df31bb13db8943
GET /contact/----kw/inurl:spankbang.party HTTP/1.1
Host: av.tube-dl.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.tube-dl.top/kw/inurl:spankbang.party
Cookie: lctcfck=NO
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 26 Apr 2024 07:49:51 GMT
content-type: text/html; charset=UTF-8
pdojs-line8: host-av.tube-dl.top96.161.209-myhost-av.tube-dl.top.12.53.113/contact/----v/s:/www.youtube.com/watch?v=WPI_pf6rUnw
phost: av.tube-dl.top
pdojs-line1051: notjp--myhost-av.tube-dl.top-filteron-
line2125: notjp--myhost-av.tube-dl.top-filteron-/contact/----v/s:/www.youtube.com/watch?v=WPI_pf6rUnw
line2128: notjp--myhost-av.tube-dl.top-filteron-
line2425: notjp-/contact/----v/s:/www.youtube.com/watch?v=WPI_pf6rUnw-myhost-av.tube-dl.top-filteron-
cache-control: public, max-age=84737
vary: Accept-Encoding
access-control-allow-origin: *
access-control-allow-headers: Cake
x-proxy-cache-hd-la: HIT
xkey-hd-la: contactav.tube-dl.top-A-av.tube-dl.top--my_zone
cf-cache-status: MISS
last-modified: Fri, 26 Apr 2024 07:49:51 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kPnu%2FOBpjP3aMxeWWqJIpDhmowCvzFwP2sfkB52ngECHcnoOHbhjX3k2hbOyZ6WZOKwIGvSd2dX5pkPAz7OSO8e66iEQ8XZHJS18FMJ9GSaiixEJPPBPCU5P4l4FSjBr6w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87a4fa82784256c9-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| cacrz.4jpg.top/AV4.us.jpg | 188.114.97.1 | 200 OK | 8.7 kB |
URL GET HTTP/3cacrz.4jpg.top/AV4.us.jpg IP188.114.97.1:443
Requested byhttps://av.tube-dl.top/contact/----kw/inurl:spankbang.party CertificateIssuerGoogle Trust Services LLC Subject4jpg.top Fingerprint19:3C:A7:CB:6C:A2:7F:AC:A7:F8:06:02:93:BD:6D:64:17:BD:D5:58 ValidityThu, 07 Mar 2024 14:29:37 GMT - Wed, 05 Jun 2024 14:29:36 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 307x82, components 3 Hashedfe007a6e5b3d268b2528f564b60b43 1644c8ef97c871079e07e5079d613af5cb94052f bf5bb657f5e788af0c02b9b437d3f15bec91e27175e5a654e3d431fb6d063390
GET /AV4.us.jpg HTTP/1.1
Host: cacrz.4jpg.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 26 Apr 2024 07:49:52 GMT
content-type: image/jpeg
content-length: 8741
etag: "2225-5499bcea176c0"
access-control-allow-origin: *
access-control-allow-headers: Cake
ahost: RZ
cache-control: public, max-age=3600000
cf-cache-status: HIT
age: 1315314
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ZSRSFXwVmJe%2BMLZJgcCaRz76OgNLl2AtGo98NcABfAV2JLJRWBYFpvESS7NkiD12cBFQMng23jVvjI%2Bb%2BpzylDYJZkkzY9sLBB1XfhL2EB4I96wG95dVEJ3cS8T8VlkG4A%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a4fa88fdf956ae-OSL
alt-svc: h3=":443"; ma=86400
|
|
| js.capndr.com/advertising.js | 45.133.44.52 | 200 OK | 0 B |
URL GET HTTP/2js.capndr.com/advertising.js IP45.133.44.52:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://av.tube-dl.top/contact/----kw/inurl:spankbang.party CertificateIssuerLet's Encrypt Subjectjs.capndr.com Fingerprint0D:30:A1:FB:7E:A0:EC:89:85:17:27:67:37:21:DA:E0:CB:E3:26:06 ValiditySun, 21 Apr 2024 03:00:41 GMT - Sat, 20 Jul 2024 03:00:40 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /advertising.js HTTP/1.1
Host: js.capndr.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.tube-dl.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 26 Apr 2024 07:49:52 GMT
content-type: application/javascript; charset=utf-8
content-length: 0
server: nginx/1.18.0
last-modified: Fri, 14 Jul 2023 08:23:25 GMT
etag: "64b105fd-0"
expires: Fri, 26 Apr 2024 07:54:52 GMT
cache-control: max-age=300
x-proxy-cache: HIT
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| notification.tubecup.net/tags?tag_id=23782&timezone_olson=UTC&version_name=d&med_script_id=44&page=https%3A//av.tube-dl.top/contact/----kw/inurl%3Aspankbang.party | 159.69.161.134 | 204 No Content | 0 B |
URL GET HTTP/2notification.tubecup.net/tags?tag_id=23782&timezone_olson=UTC&version_name=d&med_script_id=44&page=https%3A//av.tube-dl.top/contact/----kw/inurl%3Aspankbang.party IP159.69.161.134:443 ASN#24940 Hetzner Online GmbH
Requested byhttps://av.tube-dl.top/contact/----kw/inurl:spankbang.party CertificateIssuerLet's Encrypt Subjectnotification.tubecup.net Fingerprint04:18:87:3E:DE:60:E2:78:66:0A:24:6F:E5:3B:42:79:5B:AC:40:20 ValidityThu, 18 Apr 2024 11:21:02 GMT - Wed, 17 Jul 2024 11:21:01 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tags?tag_id=23782&timezone_olson=UTC&version_name=d&med_script_id=44&page=https%3A//av.tube-dl.top/contact/----kw/inurl%3Aspankbang.party HTTP/1.1
Host: notification.tubecup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://av.tube-dl.top
DNT: 1
Connection: keep-alive
Referer: https://av.tube-dl.top/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
server: nginx/1.18.0
date: Fri, 26 Apr 2024 07:49:52 GMT
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
X-Firefox-Spdy: h2
|
|
| fp.metricswpsh.com/fp?tag_id=23782 | 157.90.84.242 | 200 OK | 0 B |
URL POST HTTP/1.1fp.metricswpsh.com/fp?tag_id=23782 IP157.90.84.242:443 ASN#24940 Hetzner Online GmbH
Requested byhttps://av.tube-dl.top/contact/----kw/inurl:spankbang.party CertificateIssuerLet's Encrypt Subjectnotification.tubecup.net Fingerprint04:18:87:3E:DE:60:E2:78:66:0A:24:6F:E5:3B:42:79:5B:AC:40:20 ValidityThu, 18 Apr 2024 11:21:02 GMT - Wed, 17 Jul 2024 11:21:01 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /fp?tag_id=23782 HTTP/1.1
Host: fp.metricswpsh.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://av.tube-dl.top/
Origin: https://av.tube-dl.top
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 204 No Content
Server: nginx/1.20.1
Date: Fri, 26 Apr 2024 07:49:52 GMT
Connection: keep-alive
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: content-type
Access-Control-Allow-Methods: GET,HEAD,PUT,PATCH,POST,DELETE
Access-Control-Allow-Origin: https://av.tube-dl.top
Vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
|
|
| 0c0be7a0c2.0ab9f67572.com/in/track?data=eyJ3bCI6MSwic3ViaWQiOjAsInVzZXJfaWQiOiI3NjUxMjY3MDQ2NzgxMDk2MDAwIiwidGltZXpvbmUiOjAsInZlciI6IjMuMTIxLjAiLCJ0YWdfaWQiOjIzNzgyLCJzY3JlZW5fcmVzb2x1dGlvbiI6IjEyODB4MTAyNCIsImFkYmxvY2siOjAsInRpbWV6b25lX29sc29uIjoiVVRDIiwidXRtX3NvdXJjZSI6IiIsInV0bV9tZWRpdW0iOiIiLCJ1dG1fY2FtcGFpZ24iOiIiLCJ1dG1fY29udGVudCI6IiIsIm1tIjowLCJpbml0X3N0YXJ0X2xhdGVuY3kiOjAuNDgsImlzX3YyIjoxLCJpc192Ml9lbXB0eSI6MH0= | 45.133.44.53 | 200 OK | 0 B |
URL GET HTTP/20c0be7a0c2.0ab9f67572.com/in/track?data=eyJ3bCI6MSwic3ViaWQiOjAsInVzZXJfaWQiOiI3NjUxMjY3MDQ2NzgxMDk2MDAwIiwidGltZXpvbmUiOjAsInZlciI6IjMuMTIxLjAiLCJ0YWdfaWQiOjIzNzgyLCJzY3JlZW5fcmVzb2x1dGlvbiI6IjEyODB4MTAyNCIsImFkYmxvY2siOjAsInRpbWV6b25lX29sc29uIjoiVVRDIiwidXRtX3NvdXJjZSI6IiIsInV0bV9tZWRpdW0iOiIiLCJ1dG1fY2FtcGFpZ24iOiIiLCJ1dG1fY29udGVudCI6IiIsIm1tIjowLCJpbml0X3N0YXJ0X2xhdGVuY3kiOjAuNDgsImlzX3YyIjoxLCJpc192Ml9lbXB0eSI6MH0= IP45.133.44.53:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://av.tube-dl.top/contact/----kw/inurl:spankbang.party CertificateIssuerLet's Encrypt Subject0c0be7a0c2.0ab9f67572.com Fingerprint1E:76:86:5C:33:12:91:B3:DB:48:95:9C:34:E9:19:B7:9C:E5:BE:83 ValidityTue, 23 Apr 2024 04:00:22 GMT - Mon, 22 Jul 2024 04:00:21 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /in/track?data=eyJ3bCI6MSwic3ViaWQiOjAsInVzZXJfaWQiOiI3NjUxMjY3MDQ2NzgxMDk2MDAwIiwidGltZXpvbmUiOjAsInZlciI6IjMuMTIxLjAiLCJ0YWdfaWQiOjIzNzgyLCJzY3JlZW5fcmVzb2x1dGlvbiI6IjEyODB4MTAyNCIsImFkYmxvY2siOjAsInRpbWV6b25lX29sc29uIjoiVVRDIiwidXRtX3NvdXJjZSI6IiIsInV0bV9tZWRpdW0iOiIiLCJ1dG1fY2FtcGFpZ24iOiIiLCJ1dG1fY29udGVudCI6IiIsIm1tIjowLCJpbml0X3N0YXJ0X2xhdGVuY3kiOjAuNDgsImlzX3YyIjoxLCJpc192Ml9lbXB0eSI6MH0= HTTP/1.1
Host: 0c0be7a0c2.0ab9f67572.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://av.tube-dl.top
DNT: 1
Connection: keep-alive
Referer: https://av.tube-dl.top/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 26 Apr 2024 07:49:52 GMT
content-length: 0
server: nginx/1.18.0
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
X-Firefox-Spdy: h2
|
|
| fp.metricswpsh.com/fp?tag_id=23782 | 157.90.84.242 | 200 OK | 58 B |
URL POST HTTP/1.1fp.metricswpsh.com/fp?tag_id=23782 IP157.90.84.242:443 ASN#24940 Hetzner Online GmbH
Requested byhttps://av.tube-dl.top/contact/----kw/inurl:spankbang.party CertificateIssuerLet's Encrypt Subjectnotification.tubecup.net Fingerprint04:18:87:3E:DE:60:E2:78:66:0A:24:6F:E5:3B:42:79:5B:AC:40:20 ValidityThu, 18 Apr 2024 11:21:02 GMT - Wed, 17 Jul 2024 11:21:01 GMT
Hash87385fcd2a67fc74d2fa67366ba68ea2 a604cdbb1d31ce257e8643eee9219c9c724c200c 9307cbb21345500294eae459b18a8ffb2bd2fcccd928a09efbc1e324fa9c9995
POST /fp?tag_id=23782 HTTP/1.1
Host: fp.metricswpsh.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json;charset=utf-8
Content-Length: 1835
Origin: https://av.tube-dl.top
DNT: 1
Connection: keep-alive
Referer: https://av.tube-dl.top/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.20.1
Date: Fri, 26 Apr 2024 07:49:52 GMT
Content-Type: application/json; charset=UTF-8
Content-Length: 58
Connection: keep-alive
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://av.tube-dl.top
Set-Cookie: id=5146773347745048798; Expires=Sat, 26 Apr 2025 07:49:52 GMT; Secure; SameSite=None
Vary: Origin
|
|
| accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fm.youtube.com%2Ffavicon.ico&uilel=3&hl=en&service=youtube | 74.125.131.84 | 302 Found | 0 B |
URL GET HTTP/2accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fm.youtube.com%2Ffavicon.ico&uilel=3&hl=en&service=youtube IP74.125.131.84:443
Requested byhttps://av.tube-dl.top/contact/----kw/inurl:spankbang.party CertificateIssuerGoogle Trust Services LLC Subjectaccounts.google.com Fingerprint24:73:6B:52:47:71:E2:CB:E3:4E:89:44:4B:29:D9:F4:C2:A0:F1:14 ValidityMon, 08 Apr 2024 07:33:55 GMT - Mon, 01 Jul 2024 07:33:54 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ServiceLogin?passive=true&continue=https%3A%2F%2Fm.youtube.com%2Ffavicon.ico&uilel=3&hl=en&service=youtube HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
content-type: application/binary
set-cookie: __Host-GAPS=1:dpCB3CCLzcAEAI7cfHWj_b38CjHMHg:3xyLDBypiqaWeXna; Expires=Sun, 26-Apr-2026 07:49:52 GMT; Path=/; Secure; HttpOnly; Priority=HIGH
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Fri, 26 Apr 2024 07:49:52 GMT
location: https://accounts.google.com/InteractiveLogin?continue=https://m.youtube.com/favicon.ico&hl=en&passive=true&service=youtube&uilel=3&ifkv=AaSxoQxscCwX59ocpPIe3zdjzvkTvgL65X3okpxU9X2ZbLPUnxsb_Mp7jhbs2aibBZiOPpC45cFn4g
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-opener-policy: unsafe-none
content-security-policy: script-src 'nonce-hahiqocb23mPSAU9PlDUWg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/AccountsSigninPassiveLoginHttp/cspreport/allowlist, require-trusted-types-for 'script';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport
cross-origin-resource-policy: cross-origin
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factor=*, ch-ua-platform=*, ch-ua-platform-version=*
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
server: ESF
content-length: 0
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| ajax.googleapis.com/ajax/libs/jquery/3.3.1/jquery.min.js | 172.217.21.170 | 200 OK | 30 kB |
URL GET HTTP/2ajax.googleapis.com/ajax/libs/jquery/3.3.1/jquery.min.js IP172.217.21.170:443
Requested byhttps://av.tube-dl.top/contact/----kw/inurl:spankbang.party CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint5F:6D:48:87:16:89:1E:A5:57:29:92:8B:34:BD:F2:92:0C:7F:F2:50 ValidityMon, 08 Apr 2024 07:32:03 GMT - Mon, 01 Jul 2024 07:32:02 GMT
File typeJavaScript source, ASCII text, with very long lines (65451) Hasha09e13ee94d51c524b7e2a728c7d4039 0dc32db4aa9c5f03f3b38c47d883dbd4fed13aae 160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef
GET /ajax/libs/jquery/3.3.1/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://css.4jpg.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 30399
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 25 Apr 2024 11:06:17 GMT
expires: Fri, 25 Apr 2025 11:06:17 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
age: 74616
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| jsjs.4jpg.top/index.php?js=av4&advertisement& | 188.114.97.1 | | 40 kB |
URL GET jsjs.4jpg.top/index.php?js=av4&advertisement& IP188.114.97.1:0
Requested byhttps://css.4jpg.top/tagjpa.php?noself=1&url=av.av4us.top/tags/9 CertificateIssuerGoogle Trust Services LLC Subject4jpg.top Fingerprint19:3C:A7:CB:6C:A2:7F:AC:A7:F8:06:02:93:BD:6D:64:17:BD:D5:58 ValidityThu, 07 Mar 2024 14:29:37 GMT - Wed, 05 Jun 2024 14:29:36 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (6529), with CRLF line terminators Hash45e989539bafacd91df966b0451af51c 8fa24bb22d852faaa92504d90142d1952e670eab 94f004a0662877ec610984e70f2ca52698223dd0a61d713ef1b63045ef2d6ddf
GET /index.php?js=av4&advertisement& HTTP/1.1
Host: jsjs.4jpg.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://css.4jpg.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 26 Apr 2024 07:49:52 GMT
content-type: text/html; charset=UTF-8
imghost: 17296161209-h-jsjs4jpgtopmh--NO-rm162158222152/index.php?js=av4&advertisement&
56nloadrate: 1.1621875
cache-control: public, max-age=14400, s-max-age=1800
vary: Accept-Encoding
access-control-allow-origin: *
access-control-allow-headers: Cake
cf-cache-status: HIT
age: 1759
last-modified: Fri, 26 Apr 2024 07:20:33 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=PzCKkIBpbUnJgg6tSDB6izXdkfspXG9j1jrNtx2SB2R%2FNdzdGk4AyPi6layE8%2Bpt1lfrKBwhxFInOFeWRjibRvNmTIzopktqCBwu8vpQaTVgcO6USX8Dx%2BS%2B6hBNY2Mz"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87a4fa8d79ce56ae-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| cdnjs.cloudflare.com/ajax/libs/nosleep/0.11.0/NoSleep.min.js | 104.17.25.14 | 200 OK | 4.0 kB |
URL GET HTTP/3cdnjs.cloudflare.com/ajax/libs/nosleep/0.11.0/NoSleep.min.js IP104.17.25.14:443
Requested byhttps://av.tube-dl.top/contact/----kw/inurl:spankbang.party CertificateIssuerCloudflare, Inc. Subjectsni.cloudflaressl.com Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (10613) Hashea77f824de2ef57acb12e7cb6596365e 10bad0dbdf30a0471c2c786b349daeb1dd19180e 2b19d92ce83bf3b498f73103ba1240f09c84798b1f92aedf1491ccf0aa6f5e4c
GET /ajax/libs/nosleep/0.11.0/NoSleep.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://css.4jpg.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 26 Apr 2024 07:49:53 GMT
content-type: application/javascript; charset=utf-8
content-length: 3953
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5ed16b69-29bf"
last-modified: Fri, 29 May 2020 20:07:05 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 17787
expires: Wed, 16 Apr 2025 07:49:53 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8YkSIe6VUHK8mZCMaVyT%2F3yF9neulqjDG6v6S7AvCZLse1Wuld4mVwu10CgfbvOfVWMpBgDjjlVWp71yXcyadmUhOR9CRfgLFUTYrvWs%2BDvjXz002Acw0okYgsxy8g2Y67SKTJUW"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 87a4fa8eea2c56c5-OSL
alt-svc: h3=":443"; ma=86400
|
|
| 116f21a281.7fbe2fd8a8.com/in/multy | 94.130.198.6 | 200 OK | 0 B |
URL POST HTTP/2116f21a281.7fbe2fd8a8.com/in/multy IP94.130.198.6:443 ASN#24940 Hetzner Online GmbH
Requested byhttps://av.tube-dl.top/contact/----kw/inurl:spankbang.party CertificateIssuerLet's Encrypt Subject7fbe2fd8a8.com FingerprintD4:8A:8B:7A:EF:BA:99:9B:9C:3A:45:2E:A7:88:D0:9D:CD:84:97:E8 ValidityTue, 23 Apr 2024 03:53:21 GMT - Mon, 22 Jul 2024 03:53:20 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /in/multy HTTP/1.1
Host: 116f21a281.7fbe2fd8a8.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://av.tube-dl.top/
Origin: https://av.tube-dl.top
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
server: nginx/1.20.1
date: Fri, 26 Apr 2024 07:49:53 GMT
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
X-Firefox-Spdy: h2
|
|
| page.phic4.top/myda.php | 172.67.190.9 | 200 OK | 427 B |
IP172.67.190.9:443
Requested byhttps://av.tube-dl.top/contact/----kw/inurl:spankbang.party CertificateIssuerLet's Encrypt Subjectphic4.top Fingerprint97:7B:53:56:9D:D4:88:D2:B6:C7:77:A9:FB:30:54:BA:5F:88:E8:B2 ValidityThu, 14 Mar 2024 14:09:59 GMT - Wed, 12 Jun 2024 14:09:58 GMT
Hashac9bbfd23f12ce2a9e70fcd709dd41e1 595f399fc92f04ffb495df21d53e4350238116e2 24f0fd31d8b3ce543dd9382781af0dd4b4afd40e5734a1126800a82b647f6760
GET /myda.php HTTP/1.1
Host: page.phic4.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://css.4jpg.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 26 Apr 2024 07:49:53 GMT
content-type: text/html; charset=utf-8
vary: User-Agent, Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 2054
last-modified: Fri, 26 Apr 2024 07:15:39 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=W7qA0zpDZFGoM%2FKbPeRC0k1gBHy5c6raOqvMtcNxISEELL2VYUp2Iv0MJs%2BOTIKBRjOjNQxAxYaU8qA5cRqwJECA7bwD1sdVlea6%2F7%2FvxI8cIz89ufz8As6nGnpEf%2BdTyA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87a4fa8f7a1756cc-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| av.av4us.top//js.2mp4.xyz/AV4.us.jpg | 172.67.200.220 | | 33 kB |
URL GET av.av4us.top//js.2mp4.xyz/AV4.us.jpg IP172.67.200.220:0
Requested byhttps://css.4jpg.top/tagjpa.php?noself=1&url=av.av4us.top/tags/9 CertificateIssuerGoogle Trust Services LLC Subjectav4us.top Fingerprint56:FA:73:53:8D:88:3B:88:25:AC:A2:68:BB:37:3C:27:E7:03:12:D2 ValidityFri, 08 Mar 2024 11:54:50 GMT - Thu, 06 Jun 2024 11:54:49 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (1310), with CRLF, LF line terminators Hash73711e1506ade81d9983310a4100dee8 a3d74ad4022611eb3483dd78769a49290edc9a67 a4c70c047df44fbebcb248950222dfe507c43b39a6b6917713b6c0cc31ce5fd2
GET //js.2mp4.xyz/AV4.us.jpg HTTP/1.1
Host: av.av4us.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 26 Apr 2024 07:49:53 GMT
content-type: text/html; charset=UTF-8
pdojs-line8: host-av.av4us.top96.161.209-myhost-av.av4us.top.12.53.113//js.2mp4.xyz/AV4.us.jpg
phost: av.av4us.top
pdojs-line1051: notjp--myhost-av.av4us.top-filteron-
line2125: notjp--myhost-av.av4us.top-filteron-//js.2mp4.xyz/AV4.us.jpg
line2128: notjp--myhost-av.av4us.top-filteron-
line2425: notjp-//js.2mp4.xyz/AV4.us.jpg-myhost-av.av4us.top-filteron-
cache-control: public, max-age=2632546
vary: Accept-Encoding
access-control-allow-origin: *
access-control-allow-headers: Cake
x-proxy-cache-hd-la: HIT
xkey-hd-la: av.//js.2mp4.xyz/AV4.us.jpg-A-av.av4us.top--my_zone
cf-cache-status: HIT
age: 619741
last-modified: Fri, 19 Apr 2024 03:40:52 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=e0t8u5M1Ox78T4tAGGjA3lwUeINy8ca3DawlFUSDrIEXFWSnNIuSL0tL9wbkPx%2FIgxRuWJTwKwBCBZujXn8eiYNq32blRQs%2BJqXOQzgznWIZ6jzICEVIH5q5yBfGGNA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87a4fa901e96b4f7-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| 116f21a281.7fbe2fd8a8.com/in/multy | 94.130.198.6 | 200 OK | 3.1 kB |
URL POST HTTP/2116f21a281.7fbe2fd8a8.com/in/multy IP94.130.198.6:443 ASN#24940 Hetzner Online GmbH
Requested byhttps://av.tube-dl.top/contact/----kw/inurl:spankbang.party CertificateIssuerLet's Encrypt Subject7fbe2fd8a8.com FingerprintD4:8A:8B:7A:EF:BA:99:9B:9C:3A:45:2E:A7:88:D0:9D:CD:84:97:E8 ValidityTue, 23 Apr 2024 03:53:21 GMT - Mon, 22 Jul 2024 03:53:20 GMT
Hashd701def20f055188f05382a888ba1940 a83305b3aa1edc8bbec62b98bcde2eba327f91c1 722a8b5b7253f47df58452ae57948c8c2e68613df75d51d5b8b8fef9666de342
POST /in/multy HTTP/1.1
Host: 116f21a281.7fbe2fd8a8.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json;charset=utf-8
Content-Length: 1750
Origin: https://av.tube-dl.top
DNT: 1
Connection: keep-alive
Referer: https://av.tube-dl.top/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.20.1
date: Fri, 26 Apr 2024 07:49:53 GMT
content-type: application/json
content-length: 3050
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| av.tube-dl.top/kw/inurl:spankbang.party | 188.114.96.1 | | 8.9 kB |
URL av.tube-dl.top/kw/inurl:spankbang.party IP188.114.96.1:0
CertificateIssuerGoogle Trust Services LLC Subjecttube-dl.top Fingerprint83:8A:DD:22:7A:3D:A7:FE:66:68:DE:EB:E9:47:EF:8E:06:50:F3:DD ValidityWed, 13 Mar 2024 16:17:42 GMT - Tue, 11 Jun 2024 16:17:41 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (16210), with CRLF, LF line terminators Hashbad51038d7c68e37ba6ab7cf9c42d54b 210922a7729c1aaa8ac234a9d06538e874d9078c d30e148fb7eb893dffd6594bdb45d66b2ff99478039cb81d01a7966ccd677eb3
GET /kw/inurl:spankbang.party HTTP/1.1
Host: av.tube-dl.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.tube-dl.top/
Cookie: lctcfck=NO
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 26 Apr 2024 07:49:50 GMT
content-type: text/html; charset=UTF-8
pdojs-line8: host-av.tube-dl.top96.161.209-myhost-av.tube-dl.top.12.53.113/kw/inurl:spankbang.party
phost: av.tube-dl.top
pdojs-line1051: notjp--myhost-av.tube-dl.top-filteron-
line2125: notjp--myhost-av.tube-dl.top-filteron-/kw/inurl:spankbang.party
line2128: notjp--myhost-av.tube-dl.top-filteron-
line2425: notjp-/kw/inurl:spankbang.party-myhost-av.tube-dl.top-filteron-
cache-control: public, max-age=864000
vary: Accept-Encoding
access-control-allow-origin: *
access-control-allow-headers: Cake
x-proxy-cache-hd-la: HIT
xkey-hd-la: av./kw/inurl:spankbang.party-A-av.tube-dl.top--my_zone
cf-cache-status: HIT
age: 198217
last-modified: Wed, 24 Apr 2024 00:46:13 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=I4qB3ZjnM69VPXYpBqSDH1HruD35Dj%2FNguYCUQZ9PfYuz89fmi5J%2FC5B9%2BhMzmIRzHt8o5WDP9hXHgP3YzmHMFYwyj5sk%2F97JdKwAWr9R8G7a0GOpKu58n8FAe%2FGjSiB0A%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87a4fa7f0ce756c9-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| 116f21a281.7fbe2fd8a8.com/in/show/?tag_ab=d&site_id=3117050&adblock=0&testab=0&auction_host=apply&mm=0&yc=0&render_type=hq&pr=av.tube-dl.top&banner_width=300&banner_height=250&user_keywords=&device_theme=light&v2_track=0&v2=0&conditions=tz_offset,dch_ip&ssp=3964&page=https%3A%2F%2Fav.tube-dl.top%2Fcontact%2F----kw%2Finurl%3Aspankbang.party&refdom=av.tube-dl.top&auction_time=1714117793&subid=809032184&sid=972394629&tcid=0&ver=8.159.0&ver_c=&spot_id=17050&utm_source=&utm_medium=&utm_campaign=&utm_content=&created_at=2024-04-26&iabcat=IAB25-3&keywords=&user_fp=1327480139441349969&score=19.53450784847115&durl=https%3A%2F%2Fkts.dasdaily.com%2Fin%2F1546%2F%3Fad_sub%3D809032184%26spot_id%3D17050%26is_adult%3D1%26p%3Dhttps%253A%252F%252Fav.tube-dl.top%252Fcontact%252F----kw%252Finurl%253Aspankbang.party%26idzone%3D0%26sid%3D1886&is_cpm=0&resp_type=&crid=&crtid=b0681ff5c1739e7f8bdbb8527f77d810&url=https%3A%2F%2Fkts.dasdaily.com%2Fin%2F1546%2F%3Fad_sub%3D809032184%26spot_id%3D17050%26is_adult%3D1%26p%3Dhttps%253A%252F%252Fav.tube-dl.top%252Fcontact%252F----kw%252Finurl%253Aspankbang.party%26idzone%3D0%26sid%3D1886&icons=fUbjP9uegRwkmBoJT4_r3ogAlVohpbCSR8HiVqgrXeI6YHGRlXQpU_CHfgho9VqVl_1E1p9hNNipiLWzv6OvvzRHvmoPOc7GPojE0hLl8Lyz6pxUuWCtBI36QcdEp4K6uod6kjARPH-iKKpwVCPRbp5os9_nfv9nAgukDldUsxfQWlP6PA&ext_cid=0&px_id=17050&min_cpm=0.03631180272923829&out_id=1&campaign_type=pop-default&aid=0&cid=2957&uniq=&mid=4759007070231770930&skin_id=71&vertical_id=0&skin_test=0&from_cache=0&ecpm=0.017790375069577338&cpm=0&verify_hash=6bd51924db3fd039ee5ce1c6e68b375c&is_native=4&real_bid=0.0004989758940630136&original_bid_usd=0.001018456&original_bid=0.001018456&exp=0&placement_type_id=0&ua_mismatch=Mozilla%2F5.0%20%28X11%3B%20Linux%20x86_64%3B%20rv%3A96.0%29%20Gecko%2F20100101%20Firefox%2F96.0&ip_mismatch=91.90.42.154&geo=NO&carrier=-&label_ids=108,0,114,20,27&need_redirect_show=0&applied_features=prod,main-skins-settings&show_count=1&expiration_timestamp=0&image_url=https%3A%2F%2Fstatic.bookmsg.com%2Fcreatives%2FSG%2FSG_083be47dfc3e28c9a68305b76181a5033bc45790.webp&site=native-push-adult&price=0.001018456&hostname=auc-inpage-hz-6-a&auc_type=1&pop_type=1&site_id64=&interest_vertical_ids=&mo=&ve=&timezone_olson=UTC&topics=&historical_keywords=&pop_cpc=0.0000010184560000000001&ext_campaign_id_str=&pattern1=0&pattern2=0&pattern3=0&pattern4=0&pattern5=0&format=gamblingBlueMessage-view-b_r-body&mlf=1&mlc=1&st=0.04&cpa=d2e766c8-b5f5-412a-a777-09c5b2b1ebc0&prev_step_diff=852 | 94.130.198.6 | 200 OK | 0 B |
URL GET HTTP/2116f21a281.7fbe2fd8a8.com/in/show/?tag_ab=d&site_id=3117050&adblock=0&testab=0&auction_host=apply&mm=0&yc=0&render_type=hq&pr=av.tube-dl.top&banner_width=300&banner_height=250&user_keywords=&device_theme=light&v2_track=0&v2=0&conditions=tz_offset,dch_ip&ssp=3964&page=https%3A%2F%2Fav.tube-dl.top%2Fcontact%2F----kw%2Finurl%3Aspankbang.party&refdom=av.tube-dl.top&auction_time=1714117793&subid=809032184&sid=972394629&tcid=0&ver=8.159.0&ver_c=&spot_id=17050&utm_source=&utm_medium=&utm_campaign=&utm_content=&created_at=2024-04-26&iabcat=IAB25-3&keywords=&user_fp=1327480139441349969&score=19.53450784847115&durl=https%3A%2F%2Fkts.dasdaily.com%2Fin%2F1546%2F%3Fad_sub%3D809032184%26spot_id%3D17050%26is_adult%3D1%26p%3Dhttps%253A%252F%252Fav.tube-dl.top%252Fcontact%252F----kw%252Finurl%253Aspankbang.party%26idzone%3D0%26sid%3D1886&is_cpm=0&resp_type=&crid=&crtid=b0681ff5c1739e7f8bdbb8527f77d810&url=https%3A%2F%2Fkts.dasdaily.com%2Fin%2F1546%2F%3Fad_sub%3D809032184%26spot_id%3D17050%26is_adult%3D1%26p%3Dhttps%253A%252F%252Fav.tube-dl.top%252Fcontact%252F----kw%252Finurl%253Aspankbang.party%26idzone%3D0%26sid%3D1886&icons=fUbjP9uegRwkmBoJT4_r3ogAlVohpbCSR8HiVqgrXeI6YHGRlXQpU_CHfgho9VqVl_1E1p9hNNipiLWzv6OvvzRHvmoPOc7GPojE0hLl8Lyz6pxUuWCtBI36QcdEp4K6uod6kjARPH-iKKpwVCPRbp5os9_nfv9nAgukDldUsxfQWlP6PA&ext_cid=0&px_id=17050&min_cpm=0.03631180272923829&out_id=1&campaign_type=pop-default&aid=0&cid=2957&uniq=&mid=4759007070231770930&skin_id=71&vertical_id=0&skin_test=0&from_cache=0&ecpm=0.017790375069577338&cpm=0&verify_hash=6bd51924db3fd039ee5ce1c6e68b375c&is_native=4&real_bid=0.0004989758940630136&original_bid_usd=0.001018456&original_bid=0.001018456&exp=0&placement_type_id=0&ua_mismatch=Mozilla%2F5.0%20%28X11%3B%20Linux%20x86_64%3B%20rv%3A96.0%29%20Gecko%2F20100101%20Firefox%2F96.0&ip_mismatch=91.90.42.154&geo=NO&carrier=-&label_ids=108,0,114,20,27&need_redirect_show=0&applied_features=prod,main-skins-settings&show_count=1&expiration_timestamp=0&image_url=https%3A%2F%2Fstatic.bookmsg.com%2Fcreatives%2FSG%2FSG_083be47dfc3e28c9a68305b76181a5033bc45790.webp&site=native-push-adult&price=0.001018456&hostname=auc-inpage-hz-6-a&auc_type=1&pop_type=1&site_id64=&interest_vertical_ids=&mo=&ve=&timezone_olson=UTC&topics=&historical_keywords=&pop_cpc=0.0000010184560000000001&ext_campaign_id_str=&pattern1=0&pattern2=0&pattern3=0&pattern4=0&pattern5=0&format=gamblingBlueMessage-view-b_r-body&mlf=1&mlc=1&st=0.04&cpa=d2e766c8-b5f5-412a-a777-09c5b2b1ebc0&prev_step_diff=852 IP94.130.198.6:443 ASN#24940 Hetzner Online GmbH
Requested byhttps://av.tube-dl.top/contact/----kw/inurl:spankbang.party CertificateIssuerLet's Encrypt Subject7fbe2fd8a8.com FingerprintD4:8A:8B:7A:EF:BA:99:9B:9C:3A:45:2E:A7:88:D0:9D:CD:84:97:E8 ValidityTue, 23 Apr 2024 03:53:21 GMT - Mon, 22 Jul 2024 03:53:20 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /in/show/?tag_ab=d&site_id=3117050&adblock=0&testab=0&auction_host=apply&mm=0&yc=0&render_type=hq&pr=av.tube-dl.top&banner_width=300&banner_height=250&user_keywords=&device_theme=light&v2_track=0&v2=0&conditions=tz_offset,dch_ip&ssp=3964&page=https%3A%2F%2Fav.tube-dl.top%2Fcontact%2F----kw%2Finurl%3Aspankbang.party&refdom=av.tube-dl.top&auction_time=1714117793&subid=809032184&sid=972394629&tcid=0&ver=8.159.0&ver_c=&spot_id=17050&utm_source=&utm_medium=&utm_campaign=&utm_content=&created_at=2024-04-26&iabcat=IAB25-3&keywords=&user_fp=1327480139441349969&score=19.53450784847115&durl=https%3A%2F%2Fkts.dasdaily.com%2Fin%2F1546%2F%3Fad_sub%3D809032184%26spot_id%3D17050%26is_adult%3D1%26p%3Dhttps%253A%252F%252Fav.tube-dl.top%252Fcontact%252F----kw%252Finurl%253Aspankbang.party%26idzone%3D0%26sid%3D1886&is_cpm=0&resp_type=&crid=&crtid=b0681ff5c1739e7f8bdbb8527f77d810&url=https%3A%2F%2Fkts.dasdaily.com%2Fin%2F1546%2F%3Fad_sub%3D809032184%26spot_id%3D17050%26is_adult%3D1%26p%3Dhttps%253A%252F%252Fav.tube-dl.top%252Fcontact%252F----kw%252Finurl%253Aspankbang.party%26idzone%3D0%26sid%3D1886&icons=fUbjP9uegRwkmBoJT4_r3ogAlVohpbCSR8HiVqgrXeI6YHGRlXQpU_CHfgho9VqVl_1E1p9hNNipiLWzv6OvvzRHvmoPOc7GPojE0hLl8Lyz6pxUuWCtBI36QcdEp4K6uod6kjARPH-iKKpwVCPRbp5os9_nfv9nAgukDldUsxfQWlP6PA&ext_cid=0&px_id=17050&min_cpm=0.03631180272923829&out_id=1&campaign_type=pop-default&aid=0&cid=2957&uniq=&mid=4759007070231770930&skin_id=71&vertical_id=0&skin_test=0&from_cache=0&ecpm=0.017790375069577338&cpm=0&verify_hash=6bd51924db3fd039ee5ce1c6e68b375c&is_native=4&real_bid=0.0004989758940630136&original_bid_usd=0.001018456&original_bid=0.001018456&exp=0&placement_type_id=0&ua_mismatch=Mozilla%2F5.0%20%28X11%3B%20Linux%20x86_64%3B%20rv%3A96.0%29%20Gecko%2F20100101%20Firefox%2F96.0&ip_mismatch=91.90.42.154&geo=NO&carrier=-&label_ids=108,0,114,20,27&need_redirect_show=0&applied_features=prod,main-skins-settings&show_count=1&expiration_timestamp=0&image_url=https%3A%2F%2Fstatic.bookmsg.com%2Fcreatives%2FSG%2FSG_083be47dfc3e28c9a68305b76181a5033bc45790.webp&site=native-push-adult&price=0.001018456&hostname=auc-inpage-hz-6-a&auc_type=1&pop_type=1&site_id64=&interest_vertical_ids=&mo=&ve=&timezone_olson=UTC&topics=&historical_keywords=&pop_cpc=0.0000010184560000000001&ext_campaign_id_str=&pattern1=0&pattern2=0&pattern3=0&pattern4=0&pattern5=0&format=gamblingBlueMessage-view-b_r-body&mlf=1&mlc=1&st=0.04&cpa=d2e766c8-b5f5-412a-a777-09c5b2b1ebc0&prev_step_diff=852 HTTP/1.1
Host: 116f21a281.7fbe2fd8a8.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.tube-dl.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.20.1
date: Fri, 26 Apr 2024 07:49:53 GMT
content-length: 0
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
X-Firefox-Spdy: h2
|
|
| 116f21a281.7fbe2fd8a8.com/in/show/?tag_ab=d&site_id=3117050&adblock=0&testab=0&auction_host=apply&mm=0&yc=0&render_type=hq&pr=av.tube-dl.top&banner_width=300&banner_height=250&user_keywords=&device_theme=light&v2_track=0&v2=0&conditions=tz_offset,dch_ip&ssp=3964&page=https%3A%2F%2Fav.tube-dl.top%2Fcontact%2F----kw%2Finurl%3Aspankbang.party&refdom=av.tube-dl.top&auction_time=1714117793&subid=809032184&sid=972394629&tcid=0&ver=8.159.0&ver_c=&spot_id=17050&utm_source=&utm_medium=&utm_campaign=&utm_content=&created_at=2024-04-26&iabcat=IAB25-3&keywords=&user_fp=1327480139441349969&score=19.53450784847115&durl=https%3A%2F%2Fkts.dasdaily.com%2Fin%2F1546%2F%3Fad_sub%3D809032184%26spot_id%3D17050%26is_adult%3D1%26p%3Dhttps%253A%252F%252Fav.tube-dl.top%252Fcontact%252F----kw%252Finurl%253Aspankbang.party%26idzone%3D0%26sid%3D1886&is_cpm=0&resp_type=&crid=443543&crtid=49661a8c79cc7892534b48f9a4846c99&url=https%3A%2F%2Fads.trafficircles.com%2Fadx-dir-d%2Fclick%3Frid%3D53fe2b49-8945-4b28-b324-abd5cb4c6cb9%26type%3Drtb%26feed%3D3197%26region%3D%26tc%3D1%26ts%3D1714117793259&icons=KpuUudh9IjJD2duGKcT4Ca0qv654dQJzZf6INdYDQVYfjUZVZ6MPbiFmUJYrqBaz192WlKCx5bxl2B61iF7HuO0urMA4JTQ9t97QZvsNt-yo7NV4kJwAuak-UDu7fve4nBZeOy0NEnL7QzMFivPfPp3go6JGZALyroxsIn5ZZ49I3Y7cEzgdve17Ct4OEM-uGPkUq5mL2z_GEEeXGgp9DJtPveb5UilayNy4qqCdtuw&ext_cid=93564&px_id=7317050&min_cpm=0.0007018932565645992&out_id=0&campaign_type=hq&aid=3699&cid=15946&uniq=bb257d173c03d8683cd508c29948db334223aa4f3b7328fb726ea30347f1582b&mid=4759007070231770930&skin_id=71&vertical_id=0&skin_test=0&from_cache=0&ecpm=0.003952097052970368&cpm=0&verify_hash=68693c9db32ca83c0118159dc3531647&is_native=1&real_bid=0.005734542850404978&original_bid_usd=0.005734542850404978&original_bid=0.005734542850404978&exp=1440&placement_type_id=0&ua_mismatch=Mozilla%2F5.0%20%28X11%3B%20Linux%20x86_64%3B%20rv%3A96.0%29%20Gecko%2F20100101%20Firefox%2F96.0&ip_mismatch=91.90.42.154&geo=NO&carrier=-&label_ids=4,5,90,108,0&need_redirect_show=0&applied_features=prod,main-skins-settings&show_count=1&expiration_timestamp=0&image_url=&site=native-push-adult&price=0.005734542850404978&hostname=auc-inpage-hz-6-a&auc_type=1&pop_type=1&site_id64=&interest_vertical_ids=&mo=&ve=&timezone_olson=UTC&topics=&historical_keywords=&pop_cpc=0.000005734542850404978&ext_campaign_id_str=93564&pattern1=0&pattern2=0&pattern3=0&pattern4=0&pattern5=0&format=gamblingBlueMessage-view-b_r-body&st=0.04&cpa=fc9f0dbc-c247-42bf-91f0-edc0e8a8f20e&prev_step_diff=851 | 94.130.198.6 | 200 OK | 0 B |
URL GET HTTP/2116f21a281.7fbe2fd8a8.com/in/show/?tag_ab=d&site_id=3117050&adblock=0&testab=0&auction_host=apply&mm=0&yc=0&render_type=hq&pr=av.tube-dl.top&banner_width=300&banner_height=250&user_keywords=&device_theme=light&v2_track=0&v2=0&conditions=tz_offset,dch_ip&ssp=3964&page=https%3A%2F%2Fav.tube-dl.top%2Fcontact%2F----kw%2Finurl%3Aspankbang.party&refdom=av.tube-dl.top&auction_time=1714117793&subid=809032184&sid=972394629&tcid=0&ver=8.159.0&ver_c=&spot_id=17050&utm_source=&utm_medium=&utm_campaign=&utm_content=&created_at=2024-04-26&iabcat=IAB25-3&keywords=&user_fp=1327480139441349969&score=19.53450784847115&durl=https%3A%2F%2Fkts.dasdaily.com%2Fin%2F1546%2F%3Fad_sub%3D809032184%26spot_id%3D17050%26is_adult%3D1%26p%3Dhttps%253A%252F%252Fav.tube-dl.top%252Fcontact%252F----kw%252Finurl%253Aspankbang.party%26idzone%3D0%26sid%3D1886&is_cpm=0&resp_type=&crid=443543&crtid=49661a8c79cc7892534b48f9a4846c99&url=https%3A%2F%2Fads.trafficircles.com%2Fadx-dir-d%2Fclick%3Frid%3D53fe2b49-8945-4b28-b324-abd5cb4c6cb9%26type%3Drtb%26feed%3D3197%26region%3D%26tc%3D1%26ts%3D1714117793259&icons=KpuUudh9IjJD2duGKcT4Ca0qv654dQJzZf6INdYDQVYfjUZVZ6MPbiFmUJYrqBaz192WlKCx5bxl2B61iF7HuO0urMA4JTQ9t97QZvsNt-yo7NV4kJwAuak-UDu7fve4nBZeOy0NEnL7QzMFivPfPp3go6JGZALyroxsIn5ZZ49I3Y7cEzgdve17Ct4OEM-uGPkUq5mL2z_GEEeXGgp9DJtPveb5UilayNy4qqCdtuw&ext_cid=93564&px_id=7317050&min_cpm=0.0007018932565645992&out_id=0&campaign_type=hq&aid=3699&cid=15946&uniq=bb257d173c03d8683cd508c29948db334223aa4f3b7328fb726ea30347f1582b&mid=4759007070231770930&skin_id=71&vertical_id=0&skin_test=0&from_cache=0&ecpm=0.003952097052970368&cpm=0&verify_hash=68693c9db32ca83c0118159dc3531647&is_native=1&real_bid=0.005734542850404978&original_bid_usd=0.005734542850404978&original_bid=0.005734542850404978&exp=1440&placement_type_id=0&ua_mismatch=Mozilla%2F5.0%20%28X11%3B%20Linux%20x86_64%3B%20rv%3A96.0%29%20Gecko%2F20100101%20Firefox%2F96.0&ip_mismatch=91.90.42.154&geo=NO&carrier=-&label_ids=4,5,90,108,0&need_redirect_show=0&applied_features=prod,main-skins-settings&show_count=1&expiration_timestamp=0&image_url=&site=native-push-adult&price=0.005734542850404978&hostname=auc-inpage-hz-6-a&auc_type=1&pop_type=1&site_id64=&interest_vertical_ids=&mo=&ve=&timezone_olson=UTC&topics=&historical_keywords=&pop_cpc=0.000005734542850404978&ext_campaign_id_str=93564&pattern1=0&pattern2=0&pattern3=0&pattern4=0&pattern5=0&format=gamblingBlueMessage-view-b_r-body&st=0.04&cpa=fc9f0dbc-c247-42bf-91f0-edc0e8a8f20e&prev_step_diff=851 IP94.130.198.6:443 ASN#24940 Hetzner Online GmbH
Requested byhttps://av.tube-dl.top/contact/----kw/inurl:spankbang.party CertificateIssuerLet's Encrypt Subject7fbe2fd8a8.com FingerprintD4:8A:8B:7A:EF:BA:99:9B:9C:3A:45:2E:A7:88:D0:9D:CD:84:97:E8 ValidityTue, 23 Apr 2024 03:53:21 GMT - Mon, 22 Jul 2024 03:53:20 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /in/show/?tag_ab=d&site_id=3117050&adblock=0&testab=0&auction_host=apply&mm=0&yc=0&render_type=hq&pr=av.tube-dl.top&banner_width=300&banner_height=250&user_keywords=&device_theme=light&v2_track=0&v2=0&conditions=tz_offset,dch_ip&ssp=3964&page=https%3A%2F%2Fav.tube-dl.top%2Fcontact%2F----kw%2Finurl%3Aspankbang.party&refdom=av.tube-dl.top&auction_time=1714117793&subid=809032184&sid=972394629&tcid=0&ver=8.159.0&ver_c=&spot_id=17050&utm_source=&utm_medium=&utm_campaign=&utm_content=&created_at=2024-04-26&iabcat=IAB25-3&keywords=&user_fp=1327480139441349969&score=19.53450784847115&durl=https%3A%2F%2Fkts.dasdaily.com%2Fin%2F1546%2F%3Fad_sub%3D809032184%26spot_id%3D17050%26is_adult%3D1%26p%3Dhttps%253A%252F%252Fav.tube-dl.top%252Fcontact%252F----kw%252Finurl%253Aspankbang.party%26idzone%3D0%26sid%3D1886&is_cpm=0&resp_type=&crid=443543&crtid=49661a8c79cc7892534b48f9a4846c99&url=https%3A%2F%2Fads.trafficircles.com%2Fadx-dir-d%2Fclick%3Frid%3D53fe2b49-8945-4b28-b324-abd5cb4c6cb9%26type%3Drtb%26feed%3D3197%26region%3D%26tc%3D1%26ts%3D1714117793259&icons=KpuUudh9IjJD2duGKcT4Ca0qv654dQJzZf6INdYDQVYfjUZVZ6MPbiFmUJYrqBaz192WlKCx5bxl2B61iF7HuO0urMA4JTQ9t97QZvsNt-yo7NV4kJwAuak-UDu7fve4nBZeOy0NEnL7QzMFivPfPp3go6JGZALyroxsIn5ZZ49I3Y7cEzgdve17Ct4OEM-uGPkUq5mL2z_GEEeXGgp9DJtPveb5UilayNy4qqCdtuw&ext_cid=93564&px_id=7317050&min_cpm=0.0007018932565645992&out_id=0&campaign_type=hq&aid=3699&cid=15946&uniq=bb257d173c03d8683cd508c29948db334223aa4f3b7328fb726ea30347f1582b&mid=4759007070231770930&skin_id=71&vertical_id=0&skin_test=0&from_cache=0&ecpm=0.003952097052970368&cpm=0&verify_hash=68693c9db32ca83c0118159dc3531647&is_native=1&real_bid=0.005734542850404978&original_bid_usd=0.005734542850404978&original_bid=0.005734542850404978&exp=1440&placement_type_id=0&ua_mismatch=Mozilla%2F5.0%20%28X11%3B%20Linux%20x86_64%3B%20rv%3A96.0%29%20Gecko%2F20100101%20Firefox%2F96.0&ip_mismatch=91.90.42.154&geo=NO&carrier=-&label_ids=4,5,90,108,0&need_redirect_show=0&applied_features=prod,main-skins-settings&show_count=1&expiration_timestamp=0&image_url=&site=native-push-adult&price=0.005734542850404978&hostname=auc-inpage-hz-6-a&auc_type=1&pop_type=1&site_id64=&interest_vertical_ids=&mo=&ve=&timezone_olson=UTC&topics=&historical_keywords=&pop_cpc=0.000005734542850404978&ext_campaign_id_str=93564&pattern1=0&pattern2=0&pattern3=0&pattern4=0&pattern5=0&format=gamblingBlueMessage-view-b_r-body&st=0.04&cpa=fc9f0dbc-c247-42bf-91f0-edc0e8a8f20e&prev_step_diff=851 HTTP/1.1
Host: 116f21a281.7fbe2fd8a8.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.tube-dl.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.20.1
date: Fri, 26 Apr 2024 07:49:53 GMT
content-length: 0
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
X-Firefox-Spdy: h2
|
|
| static.bookmsg.com/creatives/SG/SG_083be47dfc3e28c9a68305b76181a5033bc45790_icon.webp?pattern1=0&pattern2=0&pattern3=0&pattern4=0&pattern5=0&format=gamblingBlueMessage-view-b_r-body&mlf=1&mlc=1&st=0.04&cpa=777471cf-7cd0-48bb-9df9-fe78a03183a4&prev_step_diff=852 | 45.133.44.24 | 200 OK | 486 B |
URL GET HTTP/2static.bookmsg.com/creatives/SG/SG_083be47dfc3e28c9a68305b76181a5033bc45790_icon.webp?pattern1=0&pattern2=0&pattern3=0&pattern4=0&pattern5=0&format=gamblingBlueMessage-view-b_r-body&mlf=1&mlc=1&st=0.04&cpa=777471cf-7cd0-48bb-9df9-fe78a03183a4&prev_step_diff=852 IP45.133.44.24:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://av.tube-dl.top/contact/----kw/inurl:spankbang.party CertificateIssuerLet's Encrypt Subjectstatic.bookmsg.com FingerprintD1:F7:45:48:1F:97:95:82:21:67:D7:E5:0D:16:FA:F3:6C:7C:97:76 ValidityFri, 05 Apr 2024 03:01:07 GMT - Thu, 04 Jul 2024 03:01:06 GMT
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 100x100, Scaling: [none]x[none], YUV color, decoders should clamp Hashceeb4e8840c24621c0e0352b42b38a5b 03cbceb0134a39267014595938705e2916580644 50cb77ae9715629235f102dd53a68559df1b64416f71179dbb4aa942725790b3
GET /creatives/SG/SG_083be47dfc3e28c9a68305b76181a5033bc45790_icon.webp?pattern1=0&pattern2=0&pattern3=0&pattern4=0&pattern5=0&format=gamblingBlueMessage-view-b_r-body&mlf=1&mlc=1&st=0.04&cpa=777471cf-7cd0-48bb-9df9-fe78a03183a4&prev_step_diff=852 HTTP/1.1
Host: static.bookmsg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.tube-dl.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 26 Apr 2024 07:49:53 GMT
content-type: image/webp
content-length: 486
server: nginx/1.24.0
last-modified: Fri, 08 Dec 2023 10:18:03 GMT
etag: "6572ed5b-1e6"
expires: Sat, 26 Apr 2025 07:49:53 GMT
cache-control: max-age=31536000
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| static.bookmsg.com/creatives/SG/SG_083be47dfc3e28c9a68305b76181a5033bc45790.webp | 45.133.44.24 | 200 OK | 1.1 kB |
URL GET HTTP/2static.bookmsg.com/creatives/SG/SG_083be47dfc3e28c9a68305b76181a5033bc45790.webp IP45.133.44.24:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://av.tube-dl.top/contact/----kw/inurl:spankbang.party CertificateIssuerLet's Encrypt Subjectstatic.bookmsg.com FingerprintD1:F7:45:48:1F:97:95:82:21:67:D7:E5:0D:16:FA:F3:6C:7C:97:76 ValidityFri, 05 Apr 2024 03:01:07 GMT - Thu, 04 Jul 2024 03:01:06 GMT
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 360x240, Scaling: [none]x[none], YUV color, decoders should clamp Hash2a11e13b2bd67bb9a6cb347d7c73df13 b85460a33f9b229f42c08a6a94ae433a4d5c32ab 1d0d6b5176d6a48b3042a107f929bbfcefd4a057273ac488bbb7f7affd909b56
GET /creatives/SG/SG_083be47dfc3e28c9a68305b76181a5033bc45790.webp HTTP/1.1
Host: static.bookmsg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.tube-dl.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 26 Apr 2024 07:49:53 GMT
content-type: image/webp
content-length: 1066
server: nginx/1.24.0
last-modified: Fri, 08 Dec 2023 10:18:03 GMT
etag: "6572ed5b-42a"
expires: Sat, 26 Apr 2025 07:49:53 GMT
cache-control: max-age=31536000
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.w3schools.com/w3css/4/w3.css | 192.229.133.221 | 200 OK | 5.3 kB |
URL GET HTTP/2www.w3schools.com/w3css/4/w3.css IP192.229.133.221:443
Requested byhttps://av.tube-dl.top/contact/----kw/inurl:spankbang.party CertificateIssuerDigiCert Inc Subject*.w3schools.com Fingerprint20:AF:FF:E1:FC:DB:58:C8:05:B7:D2:97:1F:8F:A1:C6:AD:ED:59:3A ValidityWed, 03 Apr 2024 00:00:00 GMT - Sun, 04 May 2025 23:59:59 GMT
File typeUnicode text, UTF-8 (with BOM) text Hashba0537e9574725096af97c27d7e54f76 bd46b47d74d344f435b5805114559d45979762d5 4a7611bc677873a0f87fe21727bc3a2a43f57a5ded3b10ce33a0f371a2e6030f
GET /w3css/4/w3.css HTTP/1.1
Host: www.w3schools.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.tube-dl.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-encoding: gzip
accept-ranges: bytes
age: 5109
cache-control: public,max-age=14400,public
content-security-policy: frame-ancestors 'self' https://mycourses.w3schools.com;
content-type: text/css
date: Fri, 26 Apr 2024 07:49:54 GMT
etag: "0451b5ef97da1:0+gzip"
last-modified: Thu, 25 Apr 2024 12:52:02 GMT
server: ECS (ska/F716)
vary: Accept-Encoding
x-cache: HIT
x-content-security-policy: frame-ancestors 'self' https://mycourses.w3schools.com;
x-powered-by: ASP.NET
content-length: 5256
X-Firefox-Spdy: h2
|
|
| accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fm.youtube.com%2Ffavicon.ico&hl=en&ifkv=AaSxoQyyAV6zAYAGhV7WLVSSbDUDSYKmNG2-ZvqvBN7t7xEDlTy4c9wYJpq2MuFmHnAriqKHeAs9_w&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S671999331%3A1714117793264071&theme=mn&ddm=0 | 74.125.131.84 | 403 Forbidden | 803 B |
URL GET HTTP/3accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fm.youtube.com%2Ffavicon.ico&hl=en&ifkv=AaSxoQyyAV6zAYAGhV7WLVSSbDUDSYKmNG2-ZvqvBN7t7xEDlTy4c9wYJpq2MuFmHnAriqKHeAs9_w&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S671999331%3A1714117793264071&theme=mn&ddm=0 IP74.125.131.84:443
Requested byhttps://av.tube-dl.top/contact/----kw/inurl:spankbang.party CertificateIssuerGoogle Trust Services LLC Subject*.google.com Fingerprint01:16:A3:AE:CA:C9:AC:ED:3A:C9:AA:75:BE:C2:51:EF:65:CE:23:E1 ValidityMon, 08 Apr 2024 06:34:56 GMT - Mon, 01 Jul 2024 06:34:55 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (1644), with no line terminators Hash3e93bafc70d52ca3ee33d70cdcac02ee c3721d7e4a0dded0cb8f8435a9bb8d91824b0fa4 dd72adde576d55ecff604e21b5da43a10a29f59c9d715dfaa06d39a3ad4c54b8
GET /v3/signin/identifier?continue=https%3A%2F%2Fm.youtube.com%2Ffavicon.ico&hl=en&ifkv=AaSxoQyyAV6zAYAGhV7WLVSSbDUDSYKmNG2-ZvqvBN7t7xEDlTy4c9wYJpq2MuFmHnAriqKHeAs9_w&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S671999331%3A1714117793264071&theme=mn&ddm=0 HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 403 Forbidden
content-type: text/html; charset=utf-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Fri, 26 Apr 2024 07:49:53 GMT
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
strict-transport-security: max-age=31536000; includeSubDomains
content-security-policy: require-trusted-types-for 'script';report-uri /v3/signin/_/AccountsSignInUi/cspreport, script-src 'nonce--4tK1P2cFU_gpKUSHbZcwg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /v3/signin/_/AccountsSignInUi/cspreport;worker-src 'self', script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /v3/signin/_/AccountsSignInUi/cspreport/allowlist
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factor=*, ch-ua-platform=*, ch-ua-platform-version=*
report-to: {"group":"AccountsSignInUi","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/AccountsSignInUi"}]}
cross-origin-opener-policy-report-only: same-origin; report-to="AccountsSignInUi"
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| us.opencan.net/nty/roiimp.img?event=impressions&bid-id=P3tkeH54fXh4fn5went8e2R-ZHh7e3F_ZHh6en1wf3xkfCx6cSp-fCpkKyt6fGR7eih6ZHB-fHBkcHtwfy0qeXt-eXB-&img=https%3A%2F%2Fcdn.amnew.net%2Ffiles%2F660c668a31abb_2024_04_02_08_11_54_image.webp | 31.204.132.207 | 302 Found | 0 B |
URL GET HTTP/2us.opencan.net/nty/roiimp.img?event=impressions&bid-id=P3tkeH54fXh4fn5went8e2R-ZHh7e3F_ZHh6en1wf3xkfCx6cSp-fCpkKyt6fGR7eih6ZHB-fHBkcHtwfy0qeXt-eXB-&img=https%3A%2F%2Fcdn.amnew.net%2Ffiles%2F660c668a31abb_2024_04_02_08_11_54_image.webp IP31.204.132.207:443
Requested byhttps://av.tube-dl.top/contact/----kw/inurl:spankbang.party CertificateIssuerLet's Encrypt Subject*.opencan.net FingerprintC6:E9:87:79:78:46:68:21:8A:56:70:F4:A8:5C:20:D0:89:03:07:6B ValidityWed, 17 Apr 2024 23:03:31 GMT - Tue, 16 Jul 2024 23:03:30 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /nty/roiimp.img?event=impressions&bid-id=P3tkeH54fXh4fn5went8e2R-ZHh7e3F_ZHh6en1wf3xkfCx6cSp-fCpkKyt6fGR7eih6ZHB-fHBkcHtwfy0qeXt-eXB-&img=https%3A%2F%2Fcdn.amnew.net%2Ffiles%2F660c668a31abb_2024_04_02_08_11_54_image.webp HTTP/1.1
Host: us.opencan.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
server: openresty/1.21.4.1
date: Fri, 26 Apr 2024 07:49:54 GMT
content-length: 0
location: https://cdn.amnew.net/files/660c668a31abb_2024_04_02_08_11_54_image.webp
X-Firefox-Spdy: h2
|
|
| cdn.amnew.net/files/660c668a31abb_2024_04_02_08_11_54_image.webp | 5.200.15.240 | 200 OK | 1.8 kB |
URL GET HTTP/2cdn.amnew.net/files/660c668a31abb_2024_04_02_08_11_54_image.webp IP5.200.15.240:443
Requested byhttps://av.tube-dl.top/contact/----kw/inurl:spankbang.party CertificateIssuerLet's Encrypt Subject*.amnew.net FingerprintD9:73:05:EC:E9:FC:0A:5E:1F:2A:E0:A1:97:85:C1:47:E8:5A:AB:5C ValidityMon, 04 Mar 2024 23:09:10 GMT - Sun, 02 Jun 2024 23:09:09 GMT
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 192x192, Scaling: [none]x[none], YUV color, decoders should clamp Hash151a2d131a348e40bb482c6fc84d3dda 66d97c3324fcb7b3074200a50925faeb31ecd801 fa37dcdae5467f3c68f5a5a9b0e321de5f020443c2bc9ad29595f6f26538311f
GET /files/660c668a31abb_2024_04_02_08_11_54_image.webp HTTP/1.1
Host: cdn.amnew.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/webp
content-length: 1760
last-modified: Tue, 02 Apr 2024 20:11:55 GMT
etag: "151a2d131a348e40bb482c6fc84d3dda"
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| css.4jpg.top/mycss/av4.css?3 | 188.114.97.1 | 200 OK | 9.3 kB |
URL GET HTTP/3css.4jpg.top/mycss/av4.css?3 IP188.114.97.1:443
Requested byhttps://css.4jpg.top/tagjpa.php?noself=1&url=av.av4us.top/tags/9 CertificateIssuerGoogle Trust Services LLC Subject4jpg.top Fingerprint19:3C:A7:CB:6C:A2:7F:AC:A7:F8:06:02:93:BD:6D:64:17:BD:D5:58 ValidityThu, 07 Mar 2024 14:29:37 GMT - Wed, 05 Jun 2024 14:29:36 GMT
Hashcbe6c1254bcefa3470ec27a2d3a05a0c 1801c38ebef199205632e8ece84dfc424fef8512 40a1e7cbce1d52d6d1fff2cfd519b21fe6209ceafeebb0a44fdbb1d90852b298
GET /mycss/av4.css?3 HTTP/1.1
Host: css.4jpg.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.tube-dl.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 26 Apr 2024 07:49:51 GMT
content-type: text/css
etag: W/"ef8-615968e3e7700"
access-control-allow-origin: *
access-control-allow-headers: Cake
cache-control: public, max-age=360000
cf-cache-status: HIT
age: 90784
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1qADyJYQz1wao29f5C0KztLw4OHEFVr6NRMtY0FMV4p248NAyUsaDDGOwkXUWNX81Al2ci92i5FUitfcnewUAb0msx52ZcxKDio08uOes56F4Jax6et1mdeeSfylKDI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a4fa866bf656ae-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| cf9c86d5de.f33207dc6c.com/0d1d1d0ae3f06d802747776c90722fd4.js | 45.133.44.52 | 200 OK | 470 kB |
URL GET HTTP/2cf9c86d5de.f33207dc6c.com/0d1d1d0ae3f06d802747776c90722fd4.js IP45.133.44.52:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://av.tube-dl.top/contact/----kw/inurl:spankbang.party CertificateIssuerLet's Encrypt Subjectcf9c86d5de.f33207dc6c.com Fingerprint07:43:06:4D:DB:B9:3C:31:4D:0B:61:89:FB:65:A1:AA:78:A1:36:FD ValidityTue, 23 Apr 2024 02:30:49 GMT - Mon, 22 Jul 2024 02:30:48 GMT
Size470 kB (470121 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /0d1d1d0ae3f06d802747776c90722fd4.js HTTP/1.1
Host: cf9c86d5de.f33207dc6c.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.tube-dl.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 26 Apr 2024 07:49:52 GMT
content-type: application/javascript; charset=utf-8
server: nginx/1.18.0
last-modified: Tue, 16 Apr 2024 12:49:54 GMT
etag: W/"661e73f2-72c69"
content-encoding: gzip
expires: Fri, 26 Apr 2024 07:54:52 GMT
cache-control: max-age=300
x-proxy-cache: HIT
access-control-allow-origin: *
X-Firefox-Spdy: h2
|
|
| cf9c86d5de.f33207dc6c.com/1db907bfe28934810665eeb126926cf9.js | 45.133.44.52 | 200 OK | 97 kB |
URL GET HTTP/2cf9c86d5de.f33207dc6c.com/1db907bfe28934810665eeb126926cf9.js IP45.133.44.52:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://av.tube-dl.top/contact/----kw/inurl:spankbang.party CertificateIssuerLet's Encrypt Subjectcf9c86d5de.f33207dc6c.com Fingerprint07:43:06:4D:DB:B9:3C:31:4D:0B:61:89:FB:65:A1:AA:78:A1:36:FD ValidityTue, 23 Apr 2024 02:30:49 GMT - Mon, 22 Jul 2024 02:30:48 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /1db907bfe28934810665eeb126926cf9.js HTTP/1.1
Host: cf9c86d5de.f33207dc6c.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.tube-dl.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 26 Apr 2024 07:49:52 GMT
content-type: application/javascript; charset=utf-8
server: nginx/1.18.0
last-modified: Tue, 16 Apr 2024 14:24:01 GMT
etag: W/"661e8a01-17ae8"
content-encoding: gzip
expires: Fri, 26 Apr 2024 07:54:52 GMT
cache-control: max-age=300
x-proxy-cache: HIT
access-control-allow-origin: *
X-Firefox-Spdy: h2
|
|
| comments.4jpg.top/comments/embed.js?37 | 188.114.97.1 | 404 Not Found | 0 B |
URL GET HTTP/3comments.4jpg.top/comments/embed.js?37 IP188.114.97.1:443
Requested byhttps://av.tube-dl.top/contact/----kw/inurl:spankbang.party CertificateIssuerGoogle Trust Services LLC Subject4jpg.top Fingerprint19:3C:A7:CB:6C:A2:7F:AC:A7:F8:06:02:93:BD:6D:64:17:BD:D5:58 ValidityThu, 07 Mar 2024 14:29:37 GMT - Wed, 05 Jun 2024 14:29:36 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /comments/embed.js?37 HTTP/1.1
Host: comments.4jpg.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.tube-dl.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
date: Fri, 26 Apr 2024 07:49:51 GMT
content-type: text/html; charset=iso-8859-1
x-proxy-cache-hd-la: HIT
cache-control: max-age=14400
cf-cache-status: HIT
age: 2
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1oS3CKQOMSuOeKnGRAjq0yZX14K2kEWiOYB3CH5Sm27%2FmKAKGhorNZQeOU4YQMuEpmG7tA2%2FnD0xP6%2B8HJ8B8VvaUsiKjUOwjLFLK3RuKW62qnoMnIpaHCpzucxv%2BSCzMIpdyQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a4fa86cc3156ae-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| comments.4jpg.top/comments/embed.js?37 | 188.114.97.1 | 404 Not Found | 0 B |
URL GET HTTP/3comments.4jpg.top/comments/embed.js?37 IP188.114.97.1:443
Requested byhttps://css.4jpg.top/tagjpa.php?noself=1&url=av.av4us.top/tags/9 CertificateIssuerGoogle Trust Services LLC Subject4jpg.top Fingerprint19:3C:A7:CB:6C:A2:7F:AC:A7:F8:06:02:93:BD:6D:64:17:BD:D5:58 ValidityThu, 07 Mar 2024 14:29:37 GMT - Wed, 05 Jun 2024 14:29:36 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /comments/embed.js?37 HTTP/1.1
Host: comments.4jpg.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://css.4jpg.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
date: Fri, 26 Apr 2024 07:49:53 GMT
content-type: text/html; charset=iso-8859-1
x-proxy-cache-hd-la: HIT
cache-control: max-age=14400
cf-cache-status: HIT
age: 4
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2Byg1g02JNDXrbPR%2BwWZPChYnu7UntYWS6aGC1z4hiZpLIV3K1%2BIuhGf2EcNsKSRit1iBTz59R8u5P5lr1j8oJAbiRMJmq6uhmWHgSaZOKXkVhVakp60xGb2%2FXUdtcCaWZRE4gg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a4fa8ecac656ae-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| cf9c86d5de.f33207dc6c.com/c37eb03648abae911c8ba86cf51fd9e6.js | 45.133.44.52 | 200 OK | 169 kB |
URL GET HTTP/2cf9c86d5de.f33207dc6c.com/c37eb03648abae911c8ba86cf51fd9e6.js IP45.133.44.52:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://av.tube-dl.top/contact/----kw/inurl:spankbang.party CertificateIssuerLet's Encrypt Subjectcf9c86d5de.f33207dc6c.com Fingerprint07:43:06:4D:DB:B9:3C:31:4D:0B:61:89:FB:65:A1:AA:78:A1:36:FD ValidityTue, 23 Apr 2024 02:30:49 GMT - Mon, 22 Jul 2024 02:30:48 GMT
Size169 kB (168568 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /c37eb03648abae911c8ba86cf51fd9e6.js HTTP/1.1
Host: cf9c86d5de.f33207dc6c.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.tube-dl.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 26 Apr 2024 07:49:52 GMT
content-type: application/javascript; charset=utf-8
server: nginx/1.18.0
last-modified: Thu, 25 Apr 2024 13:18:02 GMT
etag: W/"662a580a-29278"
content-encoding: gzip
expires: Fri, 26 Apr 2024 07:54:52 GMT
cache-control: max-age=300
x-proxy-cache: HIT
access-control-allow-origin: *
X-Firefox-Spdy: h2
|
|
| mcpuwpsh.com/get/ | 94.130.197.240 | 200 OK | 1.9 kB |
IP94.130.197.240:443 ASN#24940 Hetzner Online GmbH
Requested byhttps://av.tube-dl.top/contact/----kw/inurl:spankbang.party CertificateIssuerLet's Encrypt Subjectpuwpush.com Fingerprint53:1A:81:DB:A5:78:D8:1D:93:BF:BA:0F:71:6B:43:8D:3F:33:58:D1 ValidityFri, 01 Mar 2024 09:39:36 GMT - Thu, 30 May 2024 09:39:35 GMT
File typetroff or preprocessor input, ASCII text, with very long lines (1918), with no line terminators Hashe1bb143369a45561bb4de5e3bc50113e 2f1894da2c420ad11dd390ee65f86b4557fa015d 6f018ce538dede275e871c93164f41f27d946590e635a97aa1bcdf76044aab9d
POST /get/ HTTP/1.1
Host: mcpuwpsh.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://av.tube-dl.top/
Content-Type: text/plain;charset=UTF-8
Content-Length: 978
Origin: https://av.tube-dl.top
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.16.0
date: Fri, 26 Apr 2024 07:49:53 GMT
content-type: application/json
content-length: 1906
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
X-Firefox-Spdy: h2
|
|
| accounts.google.com/InteractiveLogin?continue=https://m.youtube.com/favicon.ico&hl=en&passive=true&service=youtube&uilel=3&ifkv=AaSxoQxscCwX59ocpPIe3zdjzvkTvgL65X3okpxU9X2ZbLPUnxsb_Mp7jhbs2aibBZiOPpC45cFn4g | 74.125.131.84 | 302 Found | 0 B |
URL GET HTTP/3accounts.google.com/InteractiveLogin?continue=https://m.youtube.com/favicon.ico&hl=en&passive=true&service=youtube&uilel=3&ifkv=AaSxoQxscCwX59ocpPIe3zdjzvkTvgL65X3okpxU9X2ZbLPUnxsb_Mp7jhbs2aibBZiOPpC45cFn4g IP74.125.131.84:443
Requested byhttps://av.tube-dl.top/contact/----kw/inurl:spankbang.party CertificateIssuerGoogle Trust Services LLC Subject*.google.com Fingerprint01:16:A3:AE:CA:C9:AC:ED:3A:C9:AA:75:BE:C2:51:EF:65:CE:23:E1 ValidityMon, 08 Apr 2024 06:34:56 GMT - Mon, 01 Jul 2024 06:34:55 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /InteractiveLogin?continue=https://m.youtube.com/favicon.ico&hl=en&passive=true&service=youtube&uilel=3&ifkv=AaSxoQxscCwX59ocpPIe3zdjzvkTvgL65X3okpxU9X2ZbLPUnxsb_Mp7jhbs2aibBZiOPpC45cFn4g HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 302 Found
content-type: text/html; charset=UTF-8
set-cookie: __Host-GAPS=1:ZG83sQzqlIKO6LbLlx-sG6tI_fkDMw:WvNPD0VAg4xLEhHU;Path=/;Expires=Sun, 26-Apr-2026 07:49:53 GMT;Secure;HttpOnly;Priority=HIGH
x-frame-options: DENY
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Fri, 26 Apr 2024 07:49:53 GMT
location: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fm.youtube.com%2Ffavicon.ico&hl=en&ifkv=AaSxoQyyAV6zAYAGhV7WLVSSbDUDSYKmNG2-ZvqvBN7t7xEDlTy4c9wYJpq2MuFmHnAriqKHeAs9_w&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S671999331%3A1714117793264071&theme=mn&ddm=0
strict-transport-security: max-age=31536000; includeSubDomains
content-security-policy: script-src 'nonce-25jl6HlG5vUMyNon-GaM9g' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /cspreport, require-trusted-types-for 'script';report-uri /cspreport
report-to: {"group":"coop_gse_qebhlk","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gse_qebhlk"}]}
cross-origin-opener-policy-report-only: same-origin; report-to="coop_gse_qebhlk"
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 426
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| nereserv.com/in/dip?site=native-push&wl=1&event_id=33452a8c-92b9-40ed-9ade-02e4838921d4&subid=809032184&sid=972394629&spot_id=17050&created_at=2024-04-26&timezone=0&ver=8.159.0&is_native=1 | 168.119.25.102 | 200 OK | 0 B |
URL GET HTTP/2nereserv.com/in/dip?site=native-push&wl=1&event_id=33452a8c-92b9-40ed-9ade-02e4838921d4&subid=809032184&sid=972394629&spot_id=17050&created_at=2024-04-26&timezone=0&ver=8.159.0&is_native=1 IP168.119.25.102:443 ASN#24940 Hetzner Online GmbH
Requested byhttps://av.tube-dl.top/contact/----kw/inurl:spankbang.party CertificateIssuerLet's Encrypt Subjectnotification.tubecup.net Fingerprint04:18:87:3E:DE:60:E2:78:66:0A:24:6F:E5:3B:42:79:5B:AC:40:20 ValidityThu, 18 Apr 2024 11:21:02 GMT - Wed, 17 Jul 2024 11:21:01 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /in/dip?site=native-push&wl=1&event_id=33452a8c-92b9-40ed-9ade-02e4838921d4&subid=809032184&sid=972394629&spot_id=17050&created_at=2024-04-26&timezone=0&ver=8.159.0&is_native=1 HTTP/1.1
Host: nereserv.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://av.tube-dl.top
DNT: 1
Connection: keep-alive
Referer: https://av.tube-dl.top/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.18.0
date: Fri, 26 Apr 2024 07:49:53 GMT
content-length: 0
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
X-Firefox-Spdy: h2
|
|
| mc.webvisor.org/watch/48140495/1?wmode=7&page-url=https%3A%2F%2Fav.tube-dl.top%2Fkw%2Finurl%3Aspankbang.party&page-ref=https%3A%2F%2Fav.tube-dl.top%2F&charset=utf-8&uah=che%0A0&browser-info=pv%3A1%3Avf%3A666f337a6dkslduqb1rg7ejkv%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1320%3Acn%3A1%3Adp%3A0%3Als%3A117345408720%3Ahid%3A807018511%3Az%3A0%3Ai%3A20240426074951%3Aet%3A1714117791%3Ac%3A1%3Arn%3A774181334%3Arqn%3A1%3Au%3A1714117791107737754%3Aw%3A1280x1024%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A0%2C0%2C12%2C1%2C%2C0%2C%2C520%2C3%2C975%2C%2C%2C984%3Aco%3A0%3Acpf%3A1%3Ans%3A1714117790125%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-0ed8ce9e1e39cec802dafc59181dfc61-a81f3b9bcdd80a361c14af38dc09b309-08cddc828a0a4cecdead9052886a5778-4335742423629acc806791d3e9f585f3-b3a4b0ac1b44d5bc13e6d73ffb506aad-61b9878bbce18de73aafc8582a198c0c-5274424d88b08056c17f1a11bd3f2aff-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-861578da3666aba98730162cd5ac0199%3Arqnl%3A1%3Ast%3A1714117791%3At%3Ainurl%3Aspankbang.party%E5%8B%95%E7%94%BB%40AV4.us&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29eco%283441412%29aw%281%29rcm%281%29cdl%28na%29fip%281%29ti%281%29&redirnss=1 | 93.158.134.119 | 200 OK | 448 B |
URL GET HTTP/2mc.webvisor.org/watch/48140495/1?wmode=7&page-url=https%3A%2F%2Fav.tube-dl.top%2Fkw%2Finurl%3Aspankbang.party&page-ref=https%3A%2F%2Fav.tube-dl.top%2F&charset=utf-8&uah=che%0A0&browser-info=pv%3A1%3Avf%3A666f337a6dkslduqb1rg7ejkv%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1320%3Acn%3A1%3Adp%3A0%3Als%3A117345408720%3Ahid%3A807018511%3Az%3A0%3Ai%3A20240426074951%3Aet%3A1714117791%3Ac%3A1%3Arn%3A774181334%3Arqn%3A1%3Au%3A1714117791107737754%3Aw%3A1280x1024%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A0%2C0%2C12%2C1%2C%2C0%2C%2C520%2C3%2C975%2C%2C%2C984%3Aco%3A0%3Acpf%3A1%3Ans%3A1714117790125%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-0ed8ce9e1e39cec802dafc59181dfc61-a81f3b9bcdd80a361c14af38dc09b309-08cddc828a0a4cecdead9052886a5778-4335742423629acc806791d3e9f585f3-b3a4b0ac1b44d5bc13e6d73ffb506aad-61b9878bbce18de73aafc8582a198c0c-5274424d88b08056c17f1a11bd3f2aff-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-861578da3666aba98730162cd5ac0199%3Arqnl%3A1%3Ast%3A1714117791%3At%3Ainurl%3Aspankbang.party%E5%8B%95%E7%94%BB%40AV4.us&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29eco%283441412%29aw%281%29rcm%281%29cdl%28na%29fip%281%29ti%281%29&redirnss=1 IP93.158.134.119:443
Requested byhttps://av.tube-dl.top/kw/inurl:spankbang.party CertificateIssuerGlobalSign nv-sa Subjectmc.webvisor.com Fingerprint2A:A0:A6:9C:1E:F9:C0:FD:36:75:E2:D3:32:B9:34:8F:EE:3B:81:11 ValidityFri, 19 Apr 2024 21:07:47 GMT - Fri, 11 Oct 2024 20:59:59 GMT
File typetroff or preprocessor input, ASCII text, with very long lines (500), with no line terminators Hash6e335ad8de6150766941d0a0eb15e7f0 5527d9d8b00a9960efac548cfa364b5730c90a0c 150156c0ef98d3e91ba286a456dc9f5a26cc5e91ecf7a3bc5e68729bbbb27c02
GET /watch/48140495/1?wmode=7&page-url=https%3A%2F%2Fav.tube-dl.top%2Fkw%2Finurl%3Aspankbang.party&page-ref=https%3A%2F%2Fav.tube-dl.top%2F&charset=utf-8&uah=che%0A0&browser-info=pv%3A1%3Avf%3A666f337a6dkslduqb1rg7ejkv%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1320%3Acn%3A1%3Adp%3A0%3Als%3A117345408720%3Ahid%3A807018511%3Az%3A0%3Ai%3A20240426074951%3Aet%3A1714117791%3Ac%3A1%3Arn%3A774181334%3Arqn%3A1%3Au%3A1714117791107737754%3Aw%3A1280x1024%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A0%2C0%2C12%2C1%2C%2C0%2C%2C520%2C3%2C975%2C%2C%2C984%3Aco%3A0%3Acpf%3A1%3Ans%3A1714117790125%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-0ed8ce9e1e39cec802dafc59181dfc61-a81f3b9bcdd80a361c14af38dc09b309-08cddc828a0a4cecdead9052886a5778-4335742423629acc806791d3e9f585f3-b3a4b0ac1b44d5bc13e6d73ffb506aad-61b9878bbce18de73aafc8582a198c0c-5274424d88b08056c17f1a11bd3f2aff-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-861578da3666aba98730162cd5ac0199%3Arqnl%3A1%3Ast%3A1714117791%3At%3Ainurl%3Aspankbang.party%E5%8B%95%E7%94%BB%40AV4.us&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29eco%283441412%29aw%281%29rcm%281%29cdl%28na%29fip%281%29ti%281%29&redirnss=1 HTTP/1.1
Host: mc.webvisor.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://av.tube-dl.top
Referer: https://av.tube-dl.top/
DNT: 1
Connection: keep-alive
Cookie: yabs-sid=1656914361714117791; i=YnvUTeGD/BaO5QbcOqfEMuaLtOGcCrYaHegjYxAYEwUbMSFdiqWqknCQQ36CZTAwxApfoLv/YNWaUfobuU+ozXeCyFc=; yandexuid=8268744851714117791; yuidss=8268744851714117791; ymex=1745653791.yrts.1714117791#1745653791.yrtsi.1714117791
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-length: 448
date: Fri, 26 Apr 2024 07:49:51 GMT
x-content-type-options: nosniff
access-control-allow-origin: https://av.tube-dl.top
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Fri, 26-Apr-2024 07:49:51 GMT
last-modified: Fri, 26-Apr-2024 07:49:51 GMT
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: application/json; charset=utf-8
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
|
|
| mc.webvisor.org/watch/48140495?wmode=7&page-url=https%3A%2F%2Fav.tube-dl.top%2Fcontact%2F----kw%2Finurl%3Aspankbang.party&page-ref=https%3A%2F%2Fav.tube-dl.top%2Fkw%2Finurl%3Aspankbang.party&charset=utf-8&uah=che%0A0&browser-info=pv%3A1%3Avf%3A666f337a6dkslduqb1rg7ejkv%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1320%3Acn%3A1%3Adp%3A0%3Als%3A117345408720%3Ahid%3A506375096%3Az%3A0%3Ai%3A20240426074951%3Aet%3A1714117792%3Ac%3A1%3Arn%3A761115843%3Arqn%3A2%3Au%3A1714117791107737754%3Aw%3A1280x1024%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A0%2C0%2C343%2C1%2C%2C0%2C%2C%2C%2C%2C%2C%2C%3Aco%3A0%3Acpf%3A1%3Ans%3A1714117791100%3Aadb%3A1%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-0ed8ce9e1e39cec802dafc59181dfc61-a81f3b9bcdd80a361c14af38dc09b309-08cddc828a0a4cecdead9052886a5778-4335742423629acc806791d3e9f585f3-b3a4b0ac1b44d5bc13e6d73ffb506aad-61b9878bbce18de73aafc8582a198c0c-5274424d88b08056c17f1a11bd3f2aff-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-861578da3666aba98730162cd5ac0199%3Arqnl%3A1%3Ast%3A1714117792%3At%3AContact%20%26%20Abuse%20%E5%8B%95%E7%94%BB%40AV4.us&t=gdpr(14)clc(0-0-0)rqnt(1)eco(3441412)aw(1)rcm(1)cdl(na)fip(1)ti(1) | 93.158.134.119 | 200 OK | 440 B |
URL GET HTTP/2mc.webvisor.org/watch/48140495?wmode=7&page-url=https%3A%2F%2Fav.tube-dl.top%2Fcontact%2F----kw%2Finurl%3Aspankbang.party&page-ref=https%3A%2F%2Fav.tube-dl.top%2Fkw%2Finurl%3Aspankbang.party&charset=utf-8&uah=che%0A0&browser-info=pv%3A1%3Avf%3A666f337a6dkslduqb1rg7ejkv%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1320%3Acn%3A1%3Adp%3A0%3Als%3A117345408720%3Ahid%3A506375096%3Az%3A0%3Ai%3A20240426074951%3Aet%3A1714117792%3Ac%3A1%3Arn%3A761115843%3Arqn%3A2%3Au%3A1714117791107737754%3Aw%3A1280x1024%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A0%2C0%2C343%2C1%2C%2C0%2C%2C%2C%2C%2C%2C%2C%3Aco%3A0%3Acpf%3A1%3Ans%3A1714117791100%3Aadb%3A1%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-0ed8ce9e1e39cec802dafc59181dfc61-a81f3b9bcdd80a361c14af38dc09b309-08cddc828a0a4cecdead9052886a5778-4335742423629acc806791d3e9f585f3-b3a4b0ac1b44d5bc13e6d73ffb506aad-61b9878bbce18de73aafc8582a198c0c-5274424d88b08056c17f1a11bd3f2aff-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-861578da3666aba98730162cd5ac0199%3Arqnl%3A1%3Ast%3A1714117792%3At%3AContact%20%26%20Abuse%20%E5%8B%95%E7%94%BB%40AV4.us&t=gdpr(14)clc(0-0-0)rqnt(1)eco(3441412)aw(1)rcm(1)cdl(na)fip(1)ti(1) IP93.158.134.119:443
Requested byhttps://av.tube-dl.top/contact/----kw/inurl:spankbang.party CertificateIssuerGlobalSign nv-sa Subjectmc.webvisor.com Fingerprint2A:A0:A6:9C:1E:F9:C0:FD:36:75:E2:D3:32:B9:34:8F:EE:3B:81:11 ValidityFri, 19 Apr 2024 21:07:47 GMT - Fri, 11 Oct 2024 20:59:59 GMT
File typetroff or preprocessor input, ASCII text, with very long lines (490), with no line terminators Hash936efe6adfb90f0872247672c08c4fb5 7cb5d295ff1fb70e82f3096bf3961de41b366f3b 939b0dd37a59f2ce3f6f799873f1c1ea1eb8e091ea86ed4f38ba1381f47b89f9
GET /watch/48140495?wmode=7&page-url=https%3A%2F%2Fav.tube-dl.top%2Fcontact%2F----kw%2Finurl%3Aspankbang.party&page-ref=https%3A%2F%2Fav.tube-dl.top%2Fkw%2Finurl%3Aspankbang.party&charset=utf-8&uah=che%0A0&browser-info=pv%3A1%3Avf%3A666f337a6dkslduqb1rg7ejkv%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1320%3Acn%3A1%3Adp%3A0%3Als%3A117345408720%3Ahid%3A506375096%3Az%3A0%3Ai%3A20240426074951%3Aet%3A1714117792%3Ac%3A1%3Arn%3A761115843%3Arqn%3A2%3Au%3A1714117791107737754%3Aw%3A1280x1024%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A0%2C0%2C343%2C1%2C%2C0%2C%2C%2C%2C%2C%2C%2C%3Aco%3A0%3Acpf%3A1%3Ans%3A1714117791100%3Aadb%3A1%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-0ed8ce9e1e39cec802dafc59181dfc61-a81f3b9bcdd80a361c14af38dc09b309-08cddc828a0a4cecdead9052886a5778-4335742423629acc806791d3e9f585f3-b3a4b0ac1b44d5bc13e6d73ffb506aad-61b9878bbce18de73aafc8582a198c0c-5274424d88b08056c17f1a11bd3f2aff-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-861578da3666aba98730162cd5ac0199%3Arqnl%3A1%3Ast%3A1714117792%3At%3AContact%20%26%20Abuse%20%E5%8B%95%E7%94%BB%40AV4.us&t=gdpr(14)clc(0-0-0)rqnt(1)eco(3441412)aw(1)rcm(1)cdl(na)fip(1)ti(1) HTTP/1.1
Host: mc.webvisor.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://av.tube-dl.top/
Origin: https://av.tube-dl.top
DNT: 1
Connection: keep-alive
Cookie: yabs-sid=1656914361714117791; i=YnvUTeGD/BaO5QbcOqfEMuaLtOGcCrYaHegjYxAYEwUbMSFdiqWqknCQQ36CZTAwxApfoLv/YNWaUfobuU+ozXeCyFc=; yandexuid=8268744851714117791; yuidss=8268744851714117791; ymex=1745653791.yrts.1714117791#1745653791.yrtsi.1714117791
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-length: 440
date: Fri, 26 Apr 2024 07:49:52 GMT
x-content-type-options: nosniff
access-control-allow-origin: https://av.tube-dl.top
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Fri, 26-Apr-2024 07:49:52 GMT
last-modified: Fri, 26-Apr-2024 07:49:52 GMT
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: application/json; charset=utf-8
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
|
|
| storage.multstorage.com/log/count.html | 104.21.30.242 | 200 OK | 882 B |
URL GET HTTP/2storage.multstorage.com/log/count.html IP104.21.30.242:443
Requested byhttps://av.tube-dl.top/contact/----kw/inurl:spankbang.party CertificateIssuerGoogle Trust Services LLC Subjectmultstorage.com Fingerprint63:F0:24:29:21:22:E5:42:33:61:B5:20:05:1B:EF:36:81:F5:7B:0A ValiditySun, 17 Mar 2024 08:38:54 GMT - Sat, 15 Jun 2024 08:38:53 GMT
File typeHTML document, ASCII text, with very long lines (919), with no line terminators Hash053b1fe641da8057571d40ebaf1624ab 09b2648b7d08c84621298f0b939cea5170a65022 6606334874a3edb8295831f41d3684433e4553ffe0a72e58c90926e00f39c6a4
GET /log/count.html HTTP/1.1
Host: storage.multstorage.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.tube-dl.top/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 26 Apr 2024 07:49:52 GMT
content-type: text/html
last-modified: Mon, 18 Sep 2023 14:39:06 GMT
vary: Accept-Encoding
x-request-id: c9d418a5ae1c7d08465096be35e8c610
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TldqsqjiS%2Bc%2ByCKrMxCkprzdd5GjJ15vj2ov7aM0c73XXEGCHzCo%2Fy%2BcS9nz1LgB%2FnnwfiRTxtfgYpg3z7kuDZF8w%2FhGnvdU1AZyU4aPhAUgFwL2bwAC1KdcE7Bv6bngtTttguTVkcoo4g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87a4fa8c6d017127-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| js.2mp4.xyz/?vidjs=51uad-5vq | 0.0.0.0 | | 0 B |
URL GET js.2mp4.xyz/?vidjs=51uad-5vq IP0.0.0.0:0
Requested byhttps://av.tube-dl.top/contact/----kw/inurl:spankbang.party CertificateIssuerGoogle Trust Services LLC Subject2mp4.xyz FingerprintEA:8B:3D:2A:6E:4A:92:4C:C7:E4:CE:45:0E:7B:95:73:D0:3D:2B:BF ValidityMon, 04 Mar 2024 12:43:20 GMT - Sun, 02 Jun 2024 12:43:19 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /?vidjs=51uad-5vq HTTP/1.1
Host: js.2mp4.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.tube-dl.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 26 Apr 2024 07:49:51 GMT
content-type: text/html; charset=UTF-8
pdo-line12: host-js.2mp4.xyz96.161.209-myhost-158.222.69/?vidjs=51uad-5vq
phost:
pdo-line55: host-js.2mp4.xyz96.161.209-myhost-158.222.69/?vidjs=51uad-5vq
cache-control: public, max-age=86400
vary: Accept-Encoding
access-control-allow-origin: *
access-control-allow-headers: Cake
cf-cache-status: HIT
age: 41593
last-modified: Thu, 25 Apr 2024 20:16:38 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=G0ExpOqeugsqOIJNfjtjS1aU5GMxQCI2iVHnX74JLsRImpCn%2B12Qk1kOMVt4lLKE%2B36VB9THZ%2FaoGzwVWiAJeomGMxHtvxSmv1eVHlO%2F521pnqzFJgYNjc7LJvLeHw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87a4fa863f0f56be-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| css.4jpg.top/tagjpa.php?noself=1&url=av.av4us.top/tags/9 | 188.114.97.1 | 200 OK | 90 kB |
URL GET HTTP/3css.4jpg.top/tagjpa.php?noself=1&url=av.av4us.top/tags/9 IP188.114.97.1:443
Requested byhttps://av.tube-dl.top/contact/----kw/inurl:spankbang.party CertificateIssuerGoogle Trust Services LLC Subject4jpg.top Fingerprint19:3C:A7:CB:6C:A2:7F:AC:A7:F8:06:02:93:BD:6D:64:17:BD:D5:58 ValidityThu, 07 Mar 2024 14:29:37 GMT - Wed, 05 Jun 2024 14:29:36 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tagjpa.php?noself=1&url=av.av4us.top/tags/9 HTTP/1.1
Host: css.4jpg.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.tube-dl.top/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 26 Apr 2024 07:49:52 GMT
content-type: text/html; charset=UTF-8
8tagproxuri: /tagjpa.php?noself=1&url=av.av4us.top/tags/9
x-frame-options: ALLOWALL
cross-origin-resource-policy: cross-origin
cache-control: public, max-age=72000
586tagproxuri: /tagjpa.php?noself=1&url=av.av4us.top/tags/9
access-control-allow-origin: *
access-control-allow-headers: Cake
cf-cache-status: HIT
age: 16246
last-modified: Fri, 26 Apr 2024 03:19:06 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kaadE0TkDwaszEjEoizl41GJnccymCUzngdizMfeDxZgSy%2FMl5B%2BqPG8tHkESpsBGyyvCoDmP9ep%2FPMXVovm2lW7n5Uc%2F0lVDG%2FmqfKcA0k1t0y87IF9QEd0Y2awUgU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a4fa8c891856ae-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| ads.trafficircles.com/adx-dir-d/openrtb/track?rid=53fe2b49-8945-4b28-b324-abd5cb4c6cb9&feed=3197®ion=us&tc=1&ts=1714117793259&pattern1=0&pattern2=0&pattern3=0&pattern4=0&pattern5=0&format=gamblingBlueMessage-view-b_r-body&st=0.04&cpa=cbd22f90-54cf-4dc6-a994-2edb82dc0f53&prev_step_diff=851 | 52.45.236.191 | 302 Found | 1.8 kB |
URL GET HTTP/2ads.trafficircles.com/adx-dir-d/openrtb/track?rid=53fe2b49-8945-4b28-b324-abd5cb4c6cb9&feed=3197®ion=us&tc=1&ts=1714117793259&pattern1=0&pattern2=0&pattern3=0&pattern4=0&pattern5=0&format=gamblingBlueMessage-view-b_r-body&st=0.04&cpa=cbd22f90-54cf-4dc6-a994-2edb82dc0f53&prev_step_diff=851 IP52.45.236.191:443
Requested byhttps://av.tube-dl.top/contact/----kw/inurl:spankbang.party CertificateIssuerAmazon Subjecttrafficircles.com Fingerprint1B:B2:75:82:65:C8:B2:8D:04:83:92:91:47:7D:C8:FC:6B:92:57:9F ValiditySat, 30 Sep 2023 00:00:00 GMT - Mon, 28 Oct 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /adx-dir-d/openrtb/track?rid=53fe2b49-8945-4b28-b324-abd5cb4c6cb9&feed=3197®ion=us&tc=1&ts=1714117793259&pattern1=0&pattern2=0&pattern3=0&pattern4=0&pattern5=0&format=gamblingBlueMessage-view-b_r-body&st=0.04&cpa=cbd22f90-54cf-4dc6-a994-2edb82dc0f53&prev_step_diff=851 HTTP/1.1
Host: ads.trafficircles.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Fri, 26 Apr 2024 07:49:54 GMT
content-type: text/html;charset=UTF-8
content-length: 0
location: https://us.opencan.net/nty/roiimp.img?event=impressions&bid-id=P3tkeH54fXh4fn5went8e2R-ZHh7e3F_ZHh6en1wf3xkfCx6cSp-fCpkKyt6fGR7eih6ZHB-fHBkcHtwfy0qeXt-eXB-&img=https%3A%2F%2Fcdn.amnew.net%2Ffiles%2F660c668a31abb_2024_04_02_08_11_54_image.webp
server: nginx
set-cookie: new_adx_profile_guid=a780cea7-88af-47b2-958d-90d34cd95739;Max-Age=7776000;path=/;SameSite=None; Secure
adx_profile_guid=a780cea7-88af-47b2-958d-90d34cd95739; path=/; Max-Age=7776000; Expires=Thu, 25-Jul-2024 07:49:54 GMT
p3p: CP='IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT'
X-Firefox-Spdy: h2
|
|
| js.2mp4.xyz/?vidjs=51uad-5vq | 0.0.0.0 | | 0 B |
URL GET js.2mp4.xyz/?vidjs=51uad-5vq IP0.0.0.0:0
Requested byhttps://css.4jpg.top/tagjpa.php?noself=1&url=av.av4us.top/tags/9 CertificateIssuerGoogle Trust Services LLC Subject2mp4.xyz FingerprintEA:8B:3D:2A:6E:4A:92:4C:C7:E4:CE:45:0E:7B:95:73:D0:3D:2B:BF ValidityMon, 04 Mar 2024 12:43:20 GMT - Sun, 02 Jun 2024 12:43:19 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /?vidjs=51uad-5vq HTTP/1.1
Host: js.2mp4.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://css.4jpg.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 26 Apr 2024 07:49:53 GMT
content-type: text/html; charset=UTF-8
pdo-line12: host-js.2mp4.xyz96.161.209-myhost-158.222.69/?vidjs=51uad-5vq
phost:
pdo-line55: host-js.2mp4.xyz96.161.209-myhost-158.222.69/?vidjs=51uad-5vq
cache-control: public, max-age=86400
vary: Accept-Encoding
access-control-allow-origin: *
access-control-allow-headers: Cake
cf-cache-status: HIT
age: 41595
last-modified: Thu, 25 Apr 2024 20:16:38 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FTbFXIzl0aKwtBBPEskRVGKsFiH51dWL3qB0tRlZ%2BjaoMttPdCG1QY8gwhfTuXtJ7NJK8G9PNDu9aF3RccmDfeYBAxmLsUrg5UBJbztLqWK4gSX2tNo3AiQmD%2Bu1UQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87a4fa8ecfa056be-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| js.wpshsdk.com/npc/sdk/push.m.js?v=1 | 45.133.44.53 | 200 OK | 34 kB |
URL GET HTTP/2js.wpshsdk.com/npc/sdk/push.m.js?v=1 IP45.133.44.53:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://av.tube-dl.top/contact/----kw/inurl:spankbang.party CertificateIssuerLet's Encrypt Subjectjs.wpshsdk.com Fingerprint7C:0A:CB:08:AD:6F:60:55:9E:07:7C:F7:07:AC:DD:CF:DF:AB:01:FD ValidityWed, 20 Mar 2024 05:01:38 GMT - Tue, 18 Jun 2024 05:01:37 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /npc/sdk/push.m.js?v=1 HTTP/1.1
Host: js.wpshsdk.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://av.tube-dl.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 26 Apr 2024 07:49:52 GMT
content-type: application/javascript; charset=utf-8
server: nginx/1.18.0
last-modified: Mon, 22 Apr 2024 13:08:51 GMT
etag: W/"66266163-845a"
content-encoding: gzip
expires: Fri, 26 Apr 2024 07:54:52 GMT
cache-control: max-age=300
x-proxy-cache: HIT
access-control-allow-origin: *
X-Firefox-Spdy: h2
|
|
| cf9c86d5de.f33207dc6c.com/526afdf9b717924176eabd0c81f90a31.js | 45.133.44.52 | 200 OK | 109 kB |
URL GET HTTP/2cf9c86d5de.f33207dc6c.com/526afdf9b717924176eabd0c81f90a31.js IP45.133.44.52:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://av.tube-dl.top/contact/----kw/inurl:spankbang.party CertificateIssuerLet's Encrypt Subjectcf9c86d5de.f33207dc6c.com Fingerprint07:43:06:4D:DB:B9:3C:31:4D:0B:61:89:FB:65:A1:AA:78:A1:36:FD ValidityTue, 23 Apr 2024 02:30:49 GMT - Mon, 22 Jul 2024 02:30:48 GMT
Size109 kB (109340 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /526afdf9b717924176eabd0c81f90a31.js HTTP/1.1
Host: cf9c86d5de.f33207dc6c.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://av.tube-dl.top
DNT: 1
Connection: keep-alive
Referer: https://av.tube-dl.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 26 Apr 2024 07:49:52 GMT
content-type: application/javascript; charset=utf-8
server: nginx/1.18.0
last-modified: Tue, 23 Apr 2024 09:45:19 GMT
etag: W/"6627832f-1ab1c"
content-encoding: gzip
expires: Fri, 26 Apr 2024 07:54:52 GMT
cache-control: max-age=300
x-proxy-cache: HIT
access-control-allow-origin: *
X-Firefox-Spdy: h2
|
|