gnula.nu/comedia/ver-spoiler-alert-2022-online/
10 kB URL gnula.nu/comedia/ver-spoiler-alert-2022-online/
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (7623)
Hash b2a70d7854c6000cc5f1419076a7d509
13865219d0ef1d176b89467f27ce126da020b646
5128e77237e831b0363ea903edaa01d7ac41c905af53822bf2c0665776f57ee5
GET /comedia/ver-spoiler-alert-2022-online/ HTTP/1.1
Host: gnula.nu
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
set-cookie: __ddg1_=7Q4TDzvvC5nreh7ivH5U; Domain=.gnula.nu; HttpOnly; Path=/; Expires=Sat, 30-Nov-2024 16:18:16 GMT
date: Fri, 01 Dec 2023 16:18:16 GMT
content-type: text/html; charset=UTF-8
content-length: 10126
link: <https://gnula.nu/wp-json/>; rel="https://api.w.org/", <https://gnula.nu/wp-json/wp/v2/posts/436337>; rel="alternate"; type="application/json", <https://gnula.nu/?p=436337>; rel=shortlink
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
gnula.nu/wp-content/themes/charcoal2/scroller.js
830 B URL gnula.nu/wp-content/themes/charcoal2/scroller.js
IP
Hash 48768b563521714149bb8aa6dc5d7028
eb75f1d35fe6feb81ea481139b77a5016a8898c6
6e3ac5e6c454788ce07e2241b24201fb5aab54fb8b0438af421848691270ae79
GET /wp-content/themes/charcoal2/scroller.js HTTP/1.1
Host: gnula.nu
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gnula.nu/comedia/ver-spoiler-alert-2022-online/
Cookie: __ddg1_=7Q4TDzvvC5nreh7ivH5U
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Wed, 29 Nov 2023 13:17:53 GMT
content-type: application/javascript
last-modified: Tue, 19 May 2020 23:50:09 GMT
cache-control: max-age=604800
content-encoding: gzip
content-length: 830
ddg-cache-status: HIT,HIT
etag: W/"5ec470b1-400"
expires: Sat, 02 Dec 2023 09:15:38 GMT
age: 183623
X-Firefox-Spdy: h2
gnula.nu/wp-includes/css/dist/block-library/style.min.css
200 OK 8.9 kB URL GET HTTP/2 gnula.nu/wp-includes/css/dist/block-library/style.min.css
IP
Requested by https://gnula.nu/comedia/ver-spoiler-alert-2022-online/
Certificate IssuerLet's Encrypt
Subjectgnula.nu
FingerprintF0:71:98:32:BE:CF:19:29:10:5C:9C:E7:79:AB:E9:8F:53:2D:D1:DA
ValidityWed, 08 Nov 2023 10:13:46 GMT - Tue, 06 Feb 2024 10:13:45 GMT
File type Unicode text, UTF-8 text, with very long lines (29677)
Hash b5d1e2c87b60ce71c3fd90ca27073250
b65e3890ef1565f98971b344b4c85866a5f33860
2cd9de3dd26246204749cff259bc34e8e6a47ae5d6e4528b9b28c75d68d50cde
GET /wp-includes/css/dist/block-library/style.min.css HTTP/1.1
Host: gnula.nu
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gnula.nu/comedia/ver-spoiler-alert-2022-online/
Cookie: __ddg1_=7Q4TDzvvC5nreh7ivH5U
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Tue, 28 Nov 2023 17:41:26 GMT
content-type: text/css
last-modified: Wed, 14 Jul 2021 22:04:26 GMT
cache-control: max-age=604800
content-encoding: gzip
content-length: 8930
ddg-cache-status: HIT,HIT
etag: W/"60ef5f6a-e33b"
expires: Tue, 05 Dec 2023 06:15:21 GMT
age: 254210
X-Firefox-Spdy: h2
gnula.nu/wp-content/themes/charcoal2/style.css
6.2 kB URL gnula.nu/wp-content/themes/charcoal2/style.css
IP
File type Unicode text, UTF-8 text, with very long lines (1067)
Hash ae2719d3efe13897d95c3e8ae8e04195
1e1a2185851c6171e64e06ac5d4b1ea517825538
dbb6ef732d8f5cce8e954e20dbf55d8aabd7c399530338f53a132349bebb6a34
GET /wp-content/themes/charcoal2/style.css HTTP/1.1
Host: gnula.nu
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gnula.nu/comedia/ver-spoiler-alert-2022-online/
Cookie: __ddg1_=7Q4TDzvvC5nreh7ivH5U
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Tue, 28 Nov 2023 17:41:26 GMT
content-type: text/css
last-modified: Sun, 21 Feb 2021 22:32:04 GMT
cache-control: max-age=604800
content-encoding: gzip
content-length: 6165
ddg-cache-status: HIT,HIT
etag: W/"6032df64-9af4"
expires: Tue, 05 Dec 2023 06:15:21 GMT
age: 254210
X-Firefox-Spdy: h2
gnula.nu/wp-includes/js/wp-embed.min.js
804 B URL gnula.nu/wp-includes/js/wp-embed.min.js
IP
File type ASCII text, with very long lines (1443)
Hash 7c5c36baa69fcdb57bd891cda90920b3
9d8b3df7a4fa2968403290d69a60b2eab20734f5
6a482d2d94c0d1bc6937a1759389d01b475e6b28a0d9b5d7eaa3f9cc8f59f3cd
GET /wp-includes/js/wp-embed.min.js HTTP/1.1
Host: gnula.nu
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gnula.nu/comedia/ver-spoiler-alert-2022-online/
Cookie: __ddg1_=7Q4TDzvvC5nreh7ivH5U
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Tue, 28 Nov 2023 16:10:28 GMT
content-type: application/javascript
last-modified: Sun, 25 Jun 2023 13:37:38 GMT
cache-control: max-age=604800
content-encoding: gzip
content-length: 804
ddg-cache-status: HIT,HIT
etag: "64984322-5c6"
expires: Tue, 05 Dec 2023 16:08:37 GMT
age: 259668
X-Firefox-Spdy: h2
gnula.nu/wp-content/plugins/akismet/_inc/form.js
318 B URL gnula.nu/wp-content/plugins/akismet/_inc/form.js
IP
Hash 270f0cd7341bce6c2afacf2682e7690e
e9f1f100bb9e59ed8b060040c1695cb635e7a156
0515cbd1f8aee97e1c8e0d1d015ca96c86def13e90d2e73bf813072ccc23d531
GET /wp-content/plugins/akismet/_inc/form.js HTTP/1.1
Host: gnula.nu
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gnula.nu/comedia/ver-spoiler-alert-2022-online/
Cookie: __ddg1_=7Q4TDzvvC5nreh7ivH5U
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Tue, 28 Nov 2023 17:11:43 GMT
content-type: application/javascript
last-modified: Wed, 14 Jul 2021 20:59:01 GMT
cache-control: max-age=604800
content-encoding: gzip
content-length: 318
ddg-cache-status: HIT,MISS
etag: "60ef5015-2bc"
expires: Tue, 05 Dec 2023 17:11:43 GMT
age: 255993
X-Firefox-Spdy: h2
www.google.es/cse/brand?form=cse-search-box&lang=es
301 Moved Permanently 237 B URL GET HTTP/2 www.google.es/cse/brand?form=cse-search-box&lang=es
IP
Requested by https://gnula.nu/comedia/ver-spoiler-alert-2022-online/
Certificate IssuerGoogle Trust Services LLC
Subject*.google.es
FingerprintAC:38:79:24:16:9D:99:D5:EA:98:66:97:29:25:E7:1B:10:CC:A3:23
ValidityMon, 23 Oct 2023 11:27:03 GMT - Mon, 15 Jan 2024 11:27:02 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF, LF line terminators
Hash bda0dec939809d66ff8388fe5c716412
d768e1edcca0d64e15c1a26978d19c8fdfbd4e4f
334f05a39cdb64bac9f876dd2a2011649d08d578f6d751460c91ca294f3304cd
GET /cse/brand?form=cse-search-box&lang=es HTTP/1.1
Host: www.google.es
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gnula.nu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 301 Moved Permanently
location: https://www.gstatic.com/prose/brandjs.js
x-content-type-options: nosniff
server: sffe
content-length: 237
x-xss-protection: 0
date: Fri, 01 Dec 2023 15:52:19 GMT
expires: Fri, 01 Dec 2023 16:22:19 GMT
cache-control: public, max-age=1800
content-type: text/html; charset=UTF-8
age: 1558
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
apis.google.com/js/plusone.js
22 kB URL apis.google.com/js/plusone.js
IP
File type ASCII text, with very long lines (2664)
Hash 12476fdc6b8599d03eac729748337611
7a15dc04ad6e77026bf45927b78247411e3e0466
c5be6532f19ca90fb5966ed89be694f2bc2cded1e443d3489467cb28cd69af43
GET /js/plusone.js HTTP/1.1
Host: apis.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gnula.nu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
access-control-allow-origin: *
content-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gapi-team
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="gapi-team"
report-to: {"group":"gapi-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gapi-team"}]}
timing-allow-origin: *
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
content-length: 21930
date: Fri, 01 Dec 2023 16:18:17 GMT
expires: Fri, 01 Dec 2023 16:18:17 GMT
cache-control: private, max-age=1800, stale-while-revalidate=1800
etag: "b82ec1e6cb6f99ed"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
set-cookie: NID=511=cqTAuo8-1i9d2uj8blJrMPhjzwV67HOr7KbESvE9blJ5_r0KcHbxDKPTe7Lz7ubx-7SuCESZLMuMpcfjvV2IJlEFeH70XYQ7QwefgCZYe_UUn-MhJM3F8mJ4typ_RvCnvJOpAEW5zNBCPcheG6asM-2-nkznPW6_SsoFsep4JEs; expires=Sat, 01-Jun-2024 16:18:17 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.googletagmanager.com/gtag/js?id=UA-144276616-1
200 OK 69 kB URL GET HTTP/2 www.googletagmanager.com/gtag/js?id=UA-144276616-1
IP
Requested by https://gnula.nu/comedia/ver-spoiler-alert-2022-online/
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint37:42:10:B7:89:70:45:51:80:81:66:CE:95:21:72:5D:46:0B:E2:34
ValidityMon, 23 Oct 2023 11:18:19 GMT - Mon, 15 Jan 2024 11:18:18 GMT
File type ASCII text, with very long lines (4179)
Hash 656fe8420dffafce2bade675e151fe51
ca750f7c518655d5aeac64f2db7566b9ce335713
3d58c68e495e9ab8527e34d2264d3bc6fa49e17342b972aab99967b973b8ca6d
GET /gtag/js?id=UA-144276616-1 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gnula.nu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Fri, 01 Dec 2023 16:18:17 GMT
expires: Fri, 01 Dec 2023 16:18:17 GMT
cache-control: private, max-age=900
last-modified: Fri, 01 Dec 2023 15:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 68994
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
gnula.nu/wp-content/uploads/2023/09/Back_on_the_Strip3.gif
5.0 kB URL gnula.nu/wp-content/uploads/2023/09/Back_on_the_Strip3.gif
IP
File type GIF image data, version 89a, 54 x 83\012- data
Hash 567922d9be195bdb03b027f5531ebb53
44a765efa7e4a8ad8071d240c77dca5b308319d3
629cc6286e9e86b4d87bb4787be27024c9ffaef3166050b78213350854993844
GET /wp-content/uploads/2023/09/Back_on_the_Strip3.gif HTTP/1.1
Host: gnula.nu
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: __ddg1_=7Q4TDzvvC5nreh7ivH5U
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Thu, 30 Nov 2023 04:44:16 GMT
content-type: image/gif
content-length: 4980
last-modified: Mon, 04 Sep 2023 19:28:16 GMT
etag: "64f62fd0-1374"
expires: Thu, 07 Dec 2023 04:44:16 GMT
cache-control: max-age=604800
accept-ranges: bytes
age: 128041
ddg-cache-status: HIT,HIT
X-Firefox-Spdy: h2
gnula.nu/wp-content/uploads/2023/11/Doi_Boy3.gif
5.5 kB URL gnula.nu/wp-content/uploads/2023/11/Doi_Boy3.gif
IP
File type GIF image data, version 89a, 54 x 83\012- data
Hash f82dc4b34722458f848682b482d4532d
e0d98a08e48a890e9c91f5a257dd12df2ba1704d
14c608ee7d87a13d2880edd1be84bd96dc2a3d22974cd33e5d1417a2de8ade6c
GET /wp-content/uploads/2023/11/Doi_Boy3.gif HTTP/1.1
Host: gnula.nu
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: __ddg1_=7Q4TDzvvC5nreh7ivH5U
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Thu, 30 Nov 2023 05:12:45 GMT
content-type: image/gif
content-length: 5461
last-modified: Thu, 30 Nov 2023 04:21:22 GMT
etag: "65680dc2-1555"
expires: Thu, 07 Dec 2023 05:12:45 GMT
cache-control: max-age=604800
accept-ranges: bytes
age: 126332
ddg-cache-status: HIT,HIT
X-Firefox-Spdy: h2
gnula.nu/wp-content/uploads/2023/11/Ach_du_Scheisse3.gif
6.3 kB URL gnula.nu/wp-content/uploads/2023/11/Ach_du_Scheisse3.gif
IP
File type GIF image data, version 89a, 54 x 83\012- data
Hash c20ad67e248ed246fb60b4997940de32
d70f8ac2e840289c32a8d420d944957452b6510b
001325b2564db6e69018ec717bdd026cae7d8a4d5e726e59cb51a72dc00e7a1b
GET /wp-content/uploads/2023/11/Ach_du_Scheisse3.gif HTTP/1.1
Host: gnula.nu
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: __ddg1_=7Q4TDzvvC5nreh7ivH5U
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Thu, 30 Nov 2023 04:14:28 GMT
content-type: image/gif
content-length: 6337
last-modified: Thu, 30 Nov 2023 04:09:11 GMT
etag: "65680ae7-18c1"
expires: Thu, 07 Dec 2023 04:14:28 GMT
cache-control: max-age=604800
accept-ranges: bytes
age: 129829
ddg-cache-status: HIT,MISS
X-Firefox-Spdy: h2
acacdn.com/script/suv4.js
67 kB URL acacdn.com/script/suv4.js
IP
File type Unicode text, UTF-8 text, with very long lines (47039), with LF, NEL line terminators
Hash de54690edaff862d7d45599326c5849e
727480951690e21f66c1fbf27817b1917c99e201
6e83b1d1c02e76fd98d4dfb457ae14cf1670271fe0107a692ee367eb73c9809e
GET /script/suv4.js HTTP/1.1
Host: acacdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gnula.nu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 01 Dec 2023 16:18:16 GMT
content-type: text/javascript
x-guploader-uploadid: ABPtcPpcOhoAOTFQP3NKcdA9N0kovvM_Wn20Rahi4pIlERbCRnZpWfoRiiipDrYPiuckDJYfiBCV276CT9qBOqIU_aG7qgFalNnh
x-goog-generation: 1701078116653425
x-goog-metageneration: 2
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 202851
x-goog-hash: crc32c=U3QS7A==, md5=3lRpDtr/hi19RVmTJsWEng==
x-goog-storage-class: MULTI_REGIONAL
access-control-allow-origin: *
expires: Fri, 01 Dec 2023 15:32:50 GMT
cache-control: public, max-age=14400
last-modified: Mon, 27 Nov 2023 09:41:56 GMT
etag: W/"de54690edaff862d7d45599326c5849e"
age: 2759
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Ga2pclQOCp5Kx6EtaNN9XuU87Plglx56g2w4rUTB84%2BJTnn7WXuT5s7N33PETbQBgEMbLtUDLT%2B%2F8lkOZv0FZPC52YfwTIP%2Bj7IKK2au0UtrR52hoZF8Sd0vFifj"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82eca52738f6b523-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
gnula.nu/wp-content/uploads/2023/11/Istanbul_Icin_Son_Cagri3.gif
200 OK 5.9 kB URL GET HTTP/2 gnula.nu/wp-content/uploads/2023/11/Istanbul_Icin_Son_Cagri3.gif
IP
Requested by https://gnula.nu/comedia/ver-spoiler-alert-2022-online/
Certificate IssuerLet's Encrypt
Subjectgnula.nu
FingerprintF0:71:98:32:BE:CF:19:29:10:5C:9C:E7:79:AB:E9:8F:53:2D:D1:DA
ValidityWed, 08 Nov 2023 10:13:46 GMT - Tue, 06 Feb 2024 10:13:45 GMT
File type GIF image data, version 89a, 54 x 83\012- data
Hash ecf8e58cb03132cc64cbf3c29a777581
6c8bfd3e11999f6eec65054b6000427d01519558
94545711499d05562aa33a11ac34f52b61fd47622e36a8c64b3f66b4a27cead2
GET /wp-content/uploads/2023/11/Istanbul_Icin_Son_Cagri3.gif HTTP/1.1
Host: gnula.nu
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: __ddg1_=7Q4TDzvvC5nreh7ivH5U
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Thu, 30 Nov 2023 04:14:28 GMT
content-type: image/gif
content-length: 5909
last-modified: Thu, 30 Nov 2023 04:02:34 GMT
etag: "6568095a-1715"
expires: Thu, 07 Dec 2023 04:14:28 GMT
cache-control: max-age=604800
accept-ranges: bytes
age: 129829
ddg-cache-status: HIT,MISS
X-Firefox-Spdy: h2
gnula.nu/wp-content/uploads/2022/04/No_Name_and_Dynamite3.gif
200 OK 6.0 kB URL GET HTTP/2 gnula.nu/wp-content/uploads/2022/04/No_Name_and_Dynamite3.gif
IP
Requested by https://gnula.nu/comedia/ver-spoiler-alert-2022-online/
Certificate IssuerLet's Encrypt
Subjectgnula.nu
FingerprintF0:71:98:32:BE:CF:19:29:10:5C:9C:E7:79:AB:E9:8F:53:2D:D1:DA
ValidityWed, 08 Nov 2023 10:13:46 GMT - Tue, 06 Feb 2024 10:13:45 GMT
File type GIF image data, version 89a, 54 x 83\012- data
Hash d343f0bf0046d4acfd14353bc7080af7
5f372b0f941d6b4f1b8c20dd57154a8d18af87a6
cfc7d4114e879319eaabd02859ddaff8ebfc1fb25af09aa4ebbff36ffb043b79
GET /wp-content/uploads/2022/04/No_Name_and_Dynamite3.gif HTTP/1.1
Host: gnula.nu
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: __ddg1_=7Q4TDzvvC5nreh7ivH5U
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Thu, 30 Nov 2023 04:14:28 GMT
content-type: image/gif
content-length: 6048
last-modified: Mon, 25 Apr 2022 17:30:31 GMT
etag: "6266dab7-17a0"
expires: Thu, 07 Dec 2023 04:14:28 GMT
cache-control: max-age=604800
accept-ranges: bytes
age: 129829
ddg-cache-status: HIT,MISS
X-Firefox-Spdy: h2
gnula.nu/wp-content/uploads/2023/09/The_Dive3.gif
200 OK 5.7 kB URL GET HTTP/2 gnula.nu/wp-content/uploads/2023/09/The_Dive3.gif
IP
Requested by https://gnula.nu/comedia/ver-spoiler-alert-2022-online/
Certificate IssuerLet's Encrypt
Subjectgnula.nu
FingerprintF0:71:98:32:BE:CF:19:29:10:5C:9C:E7:79:AB:E9:8F:53:2D:D1:DA
ValidityWed, 08 Nov 2023 10:13:46 GMT - Tue, 06 Feb 2024 10:13:45 GMT
File type GIF image data, version 89a, 54 x 83\012- data
Hash f2756aa923964690d22e9ec2e3f855d5
0301af99789fb4bdb83a937a53fd5d30b814a9d2
c284eb9e90aa07b563c4b912ffe3dd8e1b059a788159f824f26049ff9d9a6d99
GET /wp-content/uploads/2023/09/The_Dive3.gif HTTP/1.1
Host: gnula.nu
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: __ddg1_=7Q4TDzvvC5nreh7ivH5U
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Thu, 30 Nov 2023 03:58:08 GMT
content-type: image/gif
content-length: 5668
last-modified: Tue, 12 Sep 2023 19:50:15 GMT
etag: "6500c0f7-1624"
expires: Thu, 07 Dec 2023 03:58:08 GMT
cache-control: max-age=604800
accept-ranges: bytes
age: 130809
ddg-cache-status: HIT,HIT
X-Firefox-Spdy: h2
ashcdn.com/script/ippg.js
46 kB URL ashcdn.com/script/ippg.js
IP
File type Unicode text, UTF-8 text, with very long lines (44425), with LF, NEL line terminators
Hash 6627344ab229174b4b69ca4155d115c2
328a39fff3b59355370bc07127741b65b9ab79b8
1b5290745ee4bd7fc40f32b7dee06e525bf75530dc6ae87a1f44e3e97ed97fad
GET /script/ippg.js HTTP/1.1
Host: ashcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gnula.nu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 01 Dec 2023 16:18:16 GMT
content-type: text/javascript
x-guploader-uploadid: ABPtcPoFJMDzCOnNPzhQuqF27VxVVw0sUso_NB0B1P8OmH8zxT-W7H1x8WZkc-fY36FKoR8N4mMIyaYjKxtfbvNSq6dSsg
x-goog-generation: 1701077827515884
x-goog-metageneration: 2
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 123734
x-goog-hash: crc32c=Q8nfpA==, md5=Zic0SrIpF0tLacpBVdEVwg==
x-goog-storage-class: MULTI_REGIONAL
access-control-allow-origin: *
expires: Fri, 01 Dec 2023 16:45:26 GMT
cache-control: public, max-age=3600
last-modified: Mon, 27 Nov 2023 09:37:07 GMT
etag: W/"6627344ab229174b4b69ca4155d115c2"
age: 1108
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2B2s%2F6bOTJhspI459T1cGQJSSGJ6m8GbYdFKhrxkpdC%2F7Tzto2%2FayCuU%2BxXhuR3k%2BA4xmsVCpw6UAi9PH63Ka7DrG3Dpwsh15kLQcTp3bKd8RSz4cOoCpxOPPnBfG"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82eca52749505699-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
gnula.nu/wp-content/uploads/2023/11/Christmas_Class_Reunion3.gif
5.9 kB URL gnula.nu/wp-content/uploads/2023/11/Christmas_Class_Reunion3.gif
IP
File type GIF image data, version 89a, 54 x 83\012- data
Hash 17f9dde2a5666fc16d8c1563efce7372
ded6398152c05e0b72ae48c87305ccd56f560e67
8e52c2020ed88c80eba090768296d8fdf2333c2915f19d0349d971b3f0235c24
GET /wp-content/uploads/2023/11/Christmas_Class_Reunion3.gif HTTP/1.1
Host: gnula.nu
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: __ddg1_=7Q4TDzvvC5nreh7ivH5U
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Thu, 30 Nov 2023 04:44:27 GMT
content-type: image/gif
content-length: 5946
last-modified: Thu, 30 Nov 2023 04:26:41 GMT
etag: "65680f01-173a"
expires: Thu, 07 Dec 2023 04:44:27 GMT
cache-control: max-age=604800
accept-ranges: bytes
age: 128030
ddg-cache-status: HIT,HIT
X-Firefox-Spdy: h2
gnula.nu/wp-content/uploads/2023/11/Die_Schule_der_magischen_Tiere_2m3.gif
6.0 kB URL gnula.nu/wp-content/uploads/2023/11/Die_Schule_der_magischen_Tiere_2m3.gif
IP
File type GIF image data, version 89a, 54 x 83\012- data
Hash cc21db0ee1423ac3d0805cf311776948
ad7bfffb5d5dfe489146882d12c971a0e7e29cab
f39cef8216874a2de3f3c36f28ea49a4ddf802daed31ec3fe29a4a603929471e
GET /wp-content/uploads/2023/11/Die_Schule_der_magischen_Tiere_2m3.gif HTTP/1.1
Host: gnula.nu
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: __ddg1_=7Q4TDzvvC5nreh7ivH5U
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Thu, 30 Nov 2023 03:47:54 GMT
content-type: image/gif
content-length: 5986
last-modified: Thu, 30 Nov 2023 03:36:54 GMT
etag: "65680356-1762"
expires: Thu, 07 Dec 2023 03:47:54 GMT
cache-control: max-age=604800
accept-ranges: bytes
age: 131423
ddg-cache-status: HIT,HIT
X-Firefox-Spdy: h2
gnula.nu/wp-content/uploads/2023/11/Uniao_Instavel3.gif
5.4 kB URL gnula.nu/wp-content/uploads/2023/11/Uniao_Instavel3.gif
IP
File type GIF image data, version 89a, 54 x 83\012- data
Hash 037ad1cb2edab127912a9148ff502916
33e7f0abf0f49ba78d2caecfeddeed1b84639d26
01fceb31b051caaf5eff2aca8365de0050781df6cb43cf3e49555b61bbc729bb
GET /wp-content/uploads/2023/11/Uniao_Instavel3.gif HTTP/1.1
Host: gnula.nu
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: __ddg1_=7Q4TDzvvC5nreh7ivH5U
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Thu, 30 Nov 2023 03:47:53 GMT
content-type: image/gif
content-length: 5438
last-modified: Thu, 30 Nov 2023 03:31:16 GMT
etag: "65680204-153e"
expires: Thu, 07 Dec 2023 03:47:53 GMT
cache-control: max-age=604800
accept-ranges: bytes
age: 131425
ddg-cache-status: HIT,HIT
X-Firefox-Spdy: h2
gnula.nu/wp-content/uploads/2023/11/Elena_sabe3.gif
5.5 kB URL gnula.nu/wp-content/uploads/2023/11/Elena_sabe3.gif
IP
File type GIF image data, version 89a, 54 x 83\012- data
Hash e5c50a3a85a0b790715821e2fec90b2a
cad09a63327c0707b29a73077df67353e73a2af8
268e458b4d63674ba86370c7195b457ee74d808d707ed5b297c7dc5e250e4e71
GET /wp-content/uploads/2023/11/Elena_sabe3.gif HTTP/1.1
Host: gnula.nu
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: __ddg1_=7Q4TDzvvC5nreh7ivH5U
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Thu, 30 Nov 2023 05:01:02 GMT
content-type: image/gif
content-length: 5458
last-modified: Thu, 30 Nov 2023 04:40:57 GMT
etag: "65681259-1552"
expires: Thu, 07 Dec 2023 05:01:02 GMT
cache-control: max-age=604800
accept-ranges: bytes
age: 127035
ddg-cache-status: HIT,HIT
X-Firefox-Spdy: h2
gnula.nu/wp-content/uploads/2022/02/A_Tale_of_Two_Guns3.gif
200 OK 6.0 kB URL GET HTTP/2 gnula.nu/wp-content/uploads/2022/02/A_Tale_of_Two_Guns3.gif
IP
Requested by https://gnula.nu/comedia/ver-spoiler-alert-2022-online/
Certificate IssuerLet's Encrypt
Subjectgnula.nu
FingerprintF0:71:98:32:BE:CF:19:29:10:5C:9C:E7:79:AB:E9:8F:53:2D:D1:DA
ValidityWed, 08 Nov 2023 10:13:46 GMT - Tue, 06 Feb 2024 10:13:45 GMT
File type GIF image data, version 89a, 54 x 83\012- data
Hash a31cbf887d88e8c909824d3ccc8e2f65
4bdd99f18b877790a2c8f5c4e20847721847cbb3
a5247a7b27fd3bf40a9c4e953c27f5a95977aa9cc9f278af1784595064f20e07
GET /wp-content/uploads/2022/02/A_Tale_of_Two_Guns3.gif HTTP/1.1
Host: gnula.nu
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: __ddg1_=7Q4TDzvvC5nreh7ivH5U
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Thu, 30 Nov 2023 04:44:13 GMT
content-type: image/gif
content-length: 5998
last-modified: Mon, 28 Feb 2022 19:36:36 GMT
etag: "621d2444-176e"
expires: Thu, 07 Dec 2023 04:44:13 GMT
cache-control: max-age=604800
accept-ranges: bytes
age: 128044
ddg-cache-status: HIT,HIT
X-Firefox-Spdy: h2
gnula.nu/wp-content/uploads/2023/01/The_Lair3.gif
200 OK 5.3 kB URL GET HTTP/2 gnula.nu/wp-content/uploads/2023/01/The_Lair3.gif
IP
Requested by https://gnula.nu/comedia/ver-spoiler-alert-2022-online/
Certificate IssuerLet's Encrypt
Subjectgnula.nu
FingerprintF0:71:98:32:BE:CF:19:29:10:5C:9C:E7:79:AB:E9:8F:53:2D:D1:DA
ValidityWed, 08 Nov 2023 10:13:46 GMT - Tue, 06 Feb 2024 10:13:45 GMT
File type GIF image data, version 89a, 54 x 83\012- data
Hash 72e57bca3ea56db1ac062cc3a2f65da0
a447e9440cfa794f55304f949cdf447fe81f4d4d
33822b1ffbe6e7add3890b5ecb2d911c85fa2e2288576e9c331fde5d3be1f122
GET /wp-content/uploads/2023/01/The_Lair3.gif HTTP/1.1
Host: gnula.nu
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: __ddg1_=7Q4TDzvvC5nreh7ivH5U
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Thu, 30 Nov 2023 03:47:36 GMT
content-type: image/gif
content-length: 5274
last-modified: Tue, 10 Jan 2023 15:33:34 GMT
etag: "63bd854e-149a"
expires: Thu, 07 Dec 2023 03:47:36 GMT
cache-control: max-age=604800
accept-ranges: bytes
age: 131442
ddg-cache-status: HIT,HIT
X-Firefox-Spdy: h2
gnula.nu/wp-content/uploads/2023/11/El_cuco3.gif
200 OK 6.0 kB URL GET HTTP/2 gnula.nu/wp-content/uploads/2023/11/El_cuco3.gif
IP
Requested by https://gnula.nu/comedia/ver-spoiler-alert-2022-online/
Certificate IssuerLet's Encrypt
Subjectgnula.nu
FingerprintF0:71:98:32:BE:CF:19:29:10:5C:9C:E7:79:AB:E9:8F:53:2D:D1:DA
ValidityWed, 08 Nov 2023 10:13:46 GMT - Tue, 06 Feb 2024 10:13:45 GMT
File type GIF image data, version 89a, 54 x 83\012- data
Hash 590498fee137638c1970fc08b77cab7c
169e4c6f8e4191b493dcf89c1db22e21b0d46671
6dfc87cb50eb8a284b461bd6f5ba195b28123df708ed8238cd02fc8c0d2773fc
GET /wp-content/uploads/2023/11/El_cuco3.gif HTTP/1.1
Host: gnula.nu
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: __ddg1_=7Q4TDzvvC5nreh7ivH5U
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Tue, 28 Nov 2023 07:25:40 GMT
content-type: image/gif
content-length: 5965
last-modified: Tue, 28 Nov 2023 07:22:13 GMT
etag: "65659525-174d"
expires: Tue, 05 Dec 2023 07:25:40 GMT
cache-control: max-age=604800
accept-ranges: bytes
age: 291157
ddg-cache-status: HIT,HIT
X-Firefox-Spdy: h2
gnula.nu/wp-content/uploads/2023/11/Te_estoy_amando_locamente3.gif
4.8 kB URL gnula.nu/wp-content/uploads/2023/11/Te_estoy_amando_locamente3.gif
IP
File type GIF image data, version 89a, 54 x 83\012- data
Hash 3a9ec8a14996f389da8180f7d2c48aa7
851c306945a4b55585e4fcfd110011ac82066381
305ce96d675fb174b44c21a200df0343af396c89662e8d12552fd2e05af86976
GET /wp-content/uploads/2023/11/Te_estoy_amando_locamente3.gif HTTP/1.1
Host: gnula.nu
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: __ddg1_=7Q4TDzvvC5nreh7ivH5U
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Tue, 28 Nov 2023 07:21:54 GMT
content-type: image/gif
content-length: 4772
last-modified: Tue, 28 Nov 2023 07:04:47 GMT
etag: "6565910f-12a4"
expires: Tue, 05 Dec 2023 07:21:54 GMT
cache-control: max-age=604800
accept-ranges: bytes
age: 291383
ddg-cache-status: HIT,MISS
X-Firefox-Spdy: h2
gnula.nu/wp-content/uploads/2023/08/Cobweb3.gif
5.5 kB URL gnula.nu/wp-content/uploads/2023/08/Cobweb3.gif
IP
File type GIF image data, version 89a, 54 x 83\012- data
Hash 5461e2e576db7500151d9285781a59ca
778f240c7196d379e8b2515cfbe0a379034a5849
2ecfc7124ee31b4addc8c75422259c8f4b7d145a34e3ca0f15d05ccca31415fa
GET /wp-content/uploads/2023/08/Cobweb3.gif HTTP/1.1
Host: gnula.nu
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: __ddg1_=7Q4TDzvvC5nreh7ivH5U
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Mon, 27 Nov 2023 17:58:15 GMT
content-type: image/gif
content-length: 5546
last-modified: Fri, 11 Aug 2023 07:42:11 GMT
etag: "64d5e653-15aa"
expires: Mon, 04 Dec 2023 17:58:15 GMT
cache-control: max-age=604800
accept-ranges: bytes
age: 339602
ddg-cache-status: HIT,MISS
X-Firefox-Spdy: h2
gnula.nu/wp-content/uploads/2023/11/The_Kiss_List3.gif
5.5 kB URL gnula.nu/wp-content/uploads/2023/11/The_Kiss_List3.gif
IP
File type GIF image data, version 89a, 54 x 83\012- data
Hash c001313b236392e718e81418f0263298
20c08b3237258db12953469193de9892b64c2295
a0290165af0d7420f54eb90e713447c247e39da1e05b8d501145c1e3262403ea
GET /wp-content/uploads/2023/11/The_Kiss_List3.gif HTTP/1.1
Host: gnula.nu
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: __ddg1_=7Q4TDzvvC5nreh7ivH5U
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Thu, 30 Nov 2023 03:57:52 GMT
content-type: image/gif
content-length: 5455
last-modified: Thu, 30 Nov 2023 03:46:43 GMT
etag: "656805a3-154f"
expires: Thu, 07 Dec 2023 03:57:52 GMT
cache-control: max-age=604800
accept-ranges: bytes
age: 130825
ddg-cache-status: HIT,HIT
X-Firefox-Spdy: h2
gnula.nu/wp-content/uploads/2023/11/The_End_of_Sex3.gif
5.5 kB URL gnula.nu/wp-content/uploads/2023/11/The_End_of_Sex3.gif
IP
File type GIF image data, version 89a, 54 x 83\012- data
Hash 5558a41783f3caa1401a5db329779008
f5c49d38d874009d9e749b18ad23d76e24faa30e
2b64ef95aa9149539c3b7568039650645fcd426fee34b4dd2108c27065d05dc7
GET /wp-content/uploads/2023/11/The_End_of_Sex3.gif HTTP/1.1
Host: gnula.nu
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: __ddg1_=7Q4TDzvvC5nreh7ivH5U
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Tue, 28 Nov 2023 07:09:38 GMT
content-type: image/gif
content-length: 5513
last-modified: Tue, 28 Nov 2023 06:57:06 GMT
etag: "65658f42-1589"
expires: Tue, 05 Dec 2023 07:09:38 GMT
cache-control: max-age=604800
accept-ranges: bytes
age: 292119
ddg-cache-status: HIT,HIT
X-Firefox-Spdy: h2
gnula.nu/wp-content/uploads/2023/11/Leo3.gif
5.3 kB URL gnula.nu/wp-content/uploads/2023/11/Leo3.gif
IP
File type GIF image data, version 89a, 54 x 83\012- data
Hash 89502a610a78229bafdf798a5a632685
7bf454fbbab6a977ee5f4e2d164712d0a4b137b3
289fbdcde602a64c7a196a71050f1255ba21e6bcb1175fc74fba7da8048fb9ba
GET /wp-content/uploads/2023/11/Leo3.gif HTTP/1.1
Host: gnula.nu
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: __ddg1_=7Q4TDzvvC5nreh7ivH5U
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Mon, 27 Nov 2023 15:38:28 GMT
content-type: image/gif
content-length: 5338
last-modified: Sat, 25 Nov 2023 20:02:50 GMT
etag: "656252ea-14da"
expires: Mon, 04 Dec 2023 15:38:28 GMT
cache-control: max-age=604800
accept-ranges: bytes
age: 347989
ddg-cache-status: HIT,HIT
X-Firefox-Spdy: h2
gnula.nu/wp-content/uploads/2023/11/Oppenheimer4.gif
43 kB URL gnula.nu/wp-content/uploads/2023/11/Oppenheimer4.gif
IP
File type GIF image data, version 89a, 215 x 269\012- data
Hash 17744f8c5660bb83a6332abcf2a40eaf
4075cdfb42a6bcc760b7edd5a0694119ff821741
842d27b2cc60e921a3ee1cd8297f980afc951d8590bc5489abe86a53787ddd82
GET /wp-content/uploads/2023/11/Oppenheimer4.gif HTTP/1.1
Host: gnula.nu
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: __ddg1_=7Q4TDzvvC5nreh7ivH5U
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Thu, 30 Nov 2023 05:37:12 GMT
content-type: image/gif
content-length: 43448
last-modified: Thu, 09 Nov 2023 03:48:46 GMT
cache-control: max-age=604800
accept-ranges: bytes
ddg-cache-status: HIT,HIT
etag: "654c569e-a9b8"
expires: Wed, 06 Dec 2023 06:30:19 GMT
age: 124865
X-Firefox-Spdy: h2
gnula.nu/wp-content/uploads/2023/09/Mission_Impossible_Dead_Reckoning_Part_One4.gif
200 OK 50 kB URL GET HTTP/2 gnula.nu/wp-content/uploads/2023/09/Mission_Impossible_Dead_Reckoning_Part_One4.gif
IP
Requested by https://gnula.nu/comedia/ver-spoiler-alert-2022-online/
Certificate IssuerLet's Encrypt
Subjectgnula.nu
FingerprintF0:71:98:32:BE:CF:19:29:10:5C:9C:E7:79:AB:E9:8F:53:2D:D1:DA
ValidityWed, 08 Nov 2023 10:13:46 GMT - Tue, 06 Feb 2024 10:13:45 GMT
File type GIF image data, version 89a, 215 x 269\012- data
Hash e4c6ffba6d339a5db2ecc3cad4e457a9
cc54ec07ed40fbfe028fa6367a88bf5d23d40395
cc9a47bc4fc2a4067557db62d45806418e88ff5b6afc2a8cdbc5a1b77518c361
GET /wp-content/uploads/2023/09/Mission_Impossible_Dead_Reckoning_Part_One4.gif HTTP/1.1
Host: gnula.nu
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: __ddg1_=7Q4TDzvvC5nreh7ivH5U
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Thu, 30 Nov 2023 23:23:41 GMT
content-type: image/gif
content-length: 50101
last-modified: Sat, 30 Sep 2023 18:34:34 GMT
cache-control: max-age=604800
accept-ranges: bytes
etag: "65186a3a-c3b5"
expires: Thu, 07 Dec 2023 23:23:41 GMT
age: 60876
ddg-cache-status: HIT,HIT
X-Firefox-Spdy: h2
gnula.nu/wp-content/uploads/2023/11/Tripped_Up3.gif
5.6 kB URL gnula.nu/wp-content/uploads/2023/11/Tripped_Up3.gif
IP
File type GIF image data, version 89a, 54 x 83\012- data
Hash 432b0f09ed7864c213a0a8fd6c202251
9354ce47cb1aad3bfaf5547a5a2ac181683aa7b6
3b475c333d02ed2616dc586e11c89ec54c27e222aa618d21d455bf799502775e
GET /wp-content/uploads/2023/11/Tripped_Up3.gif HTTP/1.1
Host: gnula.nu
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: __ddg1_=7Q4TDzvvC5nreh7ivH5U
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Thu, 30 Nov 2023 09:32:52 GMT
content-type: image/gif
content-length: 5569
last-modified: Tue, 28 Nov 2023 06:33:38 GMT
etag: "656589c2-15c1"
expires: Thu, 07 Dec 2023 09:32:52 GMT
cache-control: max-age=604800
accept-ranges: bytes
age: 110725
ddg-cache-status: HIT,HIT
X-Firefox-Spdy: h2
gnula.nu/wp-content/uploads/2023/09/Teenage_Mutant_Ninja_Turtles_Mutant_Mayhem4.gif
36 kB URL gnula.nu/wp-content/uploads/2023/09/Teenage_Mutant_Ninja_Turtles_Mutant_Mayhem4.gif
IP
File type GIF image data, version 89a, 215 x 269\012- data
Hash 7f45f5a390a1cf0455d0aefaa41e98e9
e2a72753877b85f2756fbfd34a8bcf6afb9c08ff
0d94128ccbb642c6e59fb1a99e150bb31f4fafc0566907f6717ddd58280bb824
GET /wp-content/uploads/2023/09/Teenage_Mutant_Ninja_Turtles_Mutant_Mayhem4.gif HTTP/1.1
Host: gnula.nu
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: __ddg1_=7Q4TDzvvC5nreh7ivH5U
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Sun, 26 Nov 2023 17:39:22 GMT
content-type: image/gif
content-length: 35524
last-modified: Sun, 03 Sep 2023 17:24:48 GMT
cache-control: max-age=604800
accept-ranges: bytes
ddg-cache-status: HIT,HIT
etag: "64f4c160-8ac4"
expires: Mon, 27 Nov 2023 22:54:18 GMT
age: 427135
X-Firefox-Spdy: h2
gnula.nu/wp-content/uploads/2023/08/Meg_2_The_Trench5.gif
42 kB URL gnula.nu/wp-content/uploads/2023/08/Meg_2_The_Trench5.gif
IP
File type GIF image data, version 89a, 215 x 269\012- data
Hash 82934c33dd6c9f9f4d643e2e77959718
520278bedd795b5cabe3dfe1ab02017db66f15de
6ec0b5fdb37c98dbdc97fa00ca1a58dd70d5b7c224ecff4c4ff3963f013e7f16
GET /wp-content/uploads/2023/08/Meg_2_The_Trench5.gif HTTP/1.1
Host: gnula.nu
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: __ddg1_=7Q4TDzvvC5nreh7ivH5U
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Sat, 25 Nov 2023 07:34:49 GMT
content-type: image/gif
content-length: 41569
last-modified: Fri, 25 Aug 2023 17:09:57 GMT
etag: "64e8e065-a261"
expires: Sat, 02 Dec 2023 07:34:49 GMT
cache-control: max-age=604800
accept-ranges: bytes
age: 549808
ddg-cache-status: HIT,HIT
X-Firefox-Spdy: h2
gnula.nu/wp-content/uploads/2022/08/Minions_The_Rise_of_Gru4.gif
200 OK 40 kB URL GET HTTP/2 gnula.nu/wp-content/uploads/2022/08/Minions_The_Rise_of_Gru4.gif
IP
Requested by https://gnula.nu/comedia/ver-spoiler-alert-2022-online/
Certificate IssuerLet's Encrypt
Subjectgnula.nu
FingerprintF0:71:98:32:BE:CF:19:29:10:5C:9C:E7:79:AB:E9:8F:53:2D:D1:DA
ValidityWed, 08 Nov 2023 10:13:46 GMT - Tue, 06 Feb 2024 10:13:45 GMT
File type GIF image data, version 89a, 215 x 269\012- data
Hash e77f0b8630fddaa60f4af4a3a38b1224
7b49bd428fbc28c1ca7acac32ce6aca443053eab
ceb169c22fda9f4739637944673372e7d2d2476778075b689eda5f292cad951d
GET /wp-content/uploads/2022/08/Minions_The_Rise_of_Gru4.gif HTTP/1.1
Host: gnula.nu
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: __ddg1_=7Q4TDzvvC5nreh7ivH5U
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Fri, 01 Dec 2023 04:49:20 GMT
content-type: image/gif
content-length: 40272
last-modified: Tue, 02 Aug 2022 14:00:46 GMT
cache-control: max-age=604800
accept-ranges: bytes
ddg-cache-status: HIT,HIT
etag: "62e92e0e-9d50"
expires: Thu, 07 Dec 2023 03:06:16 GMT
age: 41337
X-Firefox-Spdy: h2
gnula.nu/wp-content/uploads/2022/09/Three_Thousand_Years_of_Longing4.gif
200 OK 40 kB URL GET HTTP/2 gnula.nu/wp-content/uploads/2022/09/Three_Thousand_Years_of_Longing4.gif
IP
Requested by https://gnula.nu/comedia/ver-spoiler-alert-2022-online/
Certificate IssuerLet's Encrypt
Subjectgnula.nu
FingerprintF0:71:98:32:BE:CF:19:29:10:5C:9C:E7:79:AB:E9:8F:53:2D:D1:DA
ValidityWed, 08 Nov 2023 10:13:46 GMT - Tue, 06 Feb 2024 10:13:45 GMT
File type GIF image data, version 89a, 215 x 269\012- data
Hash defa4b7e5b78b3f54bb63e7971fb128c
f9df4b5376e03cf9672efed4b0415d597b4b61da
11e203114231734a55a865581b268b738a7ff79cea4da8bc0750cca58bfb8366
GET /wp-content/uploads/2022/09/Three_Thousand_Years_of_Longing4.gif HTTP/1.1
Host: gnula.nu
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: __ddg1_=7Q4TDzvvC5nreh7ivH5U
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Mon, 27 Nov 2023 09:27:36 GMT
content-type: image/gif
content-length: 39834
last-modified: Mon, 19 Sep 2022 19:00:03 GMT
etag: "6328bc33-9b9a"
expires: Mon, 04 Dec 2023 09:27:36 GMT
cache-control: max-age=604800
accept-ranges: bytes
age: 370242
ddg-cache-status: HIT,HIT
X-Firefox-Spdy: h2
gnula.nu/wp-content/uploads/2022/09/Fall5.gif
36 kB URL gnula.nu/wp-content/uploads/2022/09/Fall5.gif
IP
File type GIF image data, version 89a, 215 x 269\012- data
Hash 9e1d07d1fcda9b4db2b23ffd054d6640
0e389380b0628fb2a99944804b88b7019370e65c
03be235a9ddabb7abf9b38eee6387311d1ba8aa398d0f8f74bbc89535fbbfc2b
GET /wp-content/uploads/2022/09/Fall5.gif HTTP/1.1
Host: gnula.nu
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: __ddg1_=7Q4TDzvvC5nreh7ivH5U
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Thu, 30 Nov 2023 21:42:38 GMT
content-type: image/gif
content-length: 36342
last-modified: Fri, 02 Sep 2022 14:32:42 GMT
cache-control: max-age=604800
accept-ranges: bytes
ddg-cache-status: HIT,HIT
etag: "6312140a-8df6"
expires: Wed, 06 Dec 2023 05:24:24 GMT
age: 66939
X-Firefox-Spdy: h2
gnula.nu/wp-content/uploads/2022/07/Lightyear4.gif
200 OK 33 kB URL GET HTTP/2 gnula.nu/wp-content/uploads/2022/07/Lightyear4.gif
IP
Requested by https://gnula.nu/comedia/ver-spoiler-alert-2022-online/
Certificate IssuerLet's Encrypt
Subjectgnula.nu
FingerprintF0:71:98:32:BE:CF:19:29:10:5C:9C:E7:79:AB:E9:8F:53:2D:D1:DA
ValidityWed, 08 Nov 2023 10:13:46 GMT - Tue, 06 Feb 2024 10:13:45 GMT
File type GIF image data, version 89a, 215 x 269\012- data
Hash bc414fdcadd43283ba463097b1de3d92
bff73ee95800371b3e50dee1fbdd691095dddd92
11232c7a182b06dd91a0d706fd48d0cea7fa9f3817ea606c368d1320cf0490b5
GET /wp-content/uploads/2022/07/Lightyear4.gif HTTP/1.1
Host: gnula.nu
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: __ddg1_=7Q4TDzvvC5nreh7ivH5U
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Mon, 27 Nov 2023 23:01:55 GMT
content-type: image/gif
content-length: 33003
last-modified: Thu, 14 Jul 2022 16:51:11 GMT
cache-control: max-age=604800
accept-ranges: bytes
etag: "62d0497f-80eb"
expires: Mon, 04 Dec 2023 23:01:55 GMT
age: 321382
ddg-cache-status: HIT,HIT
X-Firefox-Spdy: h2
gnula.nu/wp-content/uploads/2021/09/Dear_Evan_Hansen4.gif
33 kB URL gnula.nu/wp-content/uploads/2021/09/Dear_Evan_Hansen4.gif
IP
File type GIF image data, version 89a, 215 x 269\012- data
Hash dce8ec7cdeee2deca8a5de066915e400
abb2f56e5f7c7a9c7d43762f73f2579d9fbc026d
3a7a5f3ce2f8e0930b9813442c60e2b04c701f713bb390061d424acf5560c3f1
GET /wp-content/uploads/2021/09/Dear_Evan_Hansen4.gif HTTP/1.1
Host: gnula.nu
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: __ddg1_=7Q4TDzvvC5nreh7ivH5U
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Wed, 29 Nov 2023 08:41:12 GMT
content-type: image/gif
content-length: 33142
last-modified: Mon, 20 Sep 2021 02:11:32 GMT
cache-control: max-age=604800
accept-ranges: bytes
ddg-cache-status: HIT,HIT
etag: "6147edd4-8176"
expires: Tue, 05 Dec 2023 20:18:10 GMT
age: 200225
X-Firefox-Spdy: h2
gnula.nu/wp-content/uploads/2021/09/Free_Guy5.gif
40 kB URL gnula.nu/wp-content/uploads/2021/09/Free_Guy5.gif
IP
File type GIF image data, version 89a, 215 x 269\012- data
Hash a46cc3cd01e9889ea09d14ec81ad1fbe
d462507245493576e505040bf0de984f2e490a4f
652a376a1bef35a690e3ca8a3ad646f5d71d291b4e430f09a7f7589575e0244a
GET /wp-content/uploads/2021/09/Free_Guy5.gif HTTP/1.1
Host: gnula.nu
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: __ddg1_=7Q4TDzvvC5nreh7ivH5U
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Tue, 28 Nov 2023 21:27:52 GMT
content-type: image/gif
content-length: 40539
last-modified: Wed, 29 Sep 2021 04:25:52 GMT
cache-control: max-age=604800
accept-ranges: bytes
ddg-cache-status: HIT,HIT
etag: "6153ead0-9e5b"
expires: Fri, 01 Dec 2023 04:40:53 GMT
age: 240625
X-Firefox-Spdy: h2
gnula.nu/wp-content/uploads/2021/05/Chaos_Walking5.gif
200 OK 36 kB URL GET HTTP/2 gnula.nu/wp-content/uploads/2021/05/Chaos_Walking5.gif
IP
Requested by https://gnula.nu/comedia/ver-spoiler-alert-2022-online/
Certificate IssuerLet's Encrypt
Subjectgnula.nu
FingerprintF0:71:98:32:BE:CF:19:29:10:5C:9C:E7:79:AB:E9:8F:53:2D:D1:DA
ValidityWed, 08 Nov 2023 10:13:46 GMT - Tue, 06 Feb 2024 10:13:45 GMT
File type GIF image data, version 89a, 215 x 269\012- data
Hash 8cbe83232e067e85f193643cff4733db
0b6476a4dbf52899cf9dc3b1b36743cfafcbbfa0
416115705b0e961e14f589b577a4b9096cf4c8bdb5f31ca3edb61b90b4947cac
GET /wp-content/uploads/2021/05/Chaos_Walking5.gif HTTP/1.1
Host: gnula.nu
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: __ddg1_=7Q4TDzvvC5nreh7ivH5U
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Wed, 29 Nov 2023 16:05:23 GMT
content-type: image/gif
content-length: 35478
last-modified: Sat, 08 May 2021 22:27:16 GMT
etag: "60971044-8a96"
expires: Wed, 06 Dec 2023 16:05:23 GMT
cache-control: max-age=604800
accept-ranges: bytes
age: 173574
ddg-cache-status: HIT,HIT
X-Firefox-Spdy: h2
gnula.nu/wp-content/uploads/2023/11/The_Creator4.gif
41 kB URL gnula.nu/wp-content/uploads/2023/11/The_Creator4.gif
IP
File type GIF image data, version 89a, 215 x 269\012- data
Hash c7b95d8d89e305a29ded75901845cb26
f74b3233f4be5463031d2c6c55065a8cf3b0824e
119dc80aa74d73dc83eddb00018d02fb19809adf11d1afa43aa0615e7d5e9291
GET /wp-content/uploads/2023/11/The_Creator4.gif HTTP/1.1
Host: gnula.nu
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: __ddg1_=7Q4TDzvvC5nreh7ivH5U
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Wed, 29 Nov 2023 11:34:49 GMT
content-type: image/gif
content-length: 40666
last-modified: Tue, 14 Nov 2023 03:29:36 GMT
cache-control: max-age=604800
accept-ranges: bytes
ddg-cache-status: HIT,HIT
etag: "6552e9a0-9eda"
expires: Sat, 02 Dec 2023 12:36:41 GMT
age: 189808
X-Firefox-Spdy: h2
gnula.nu/wp-content/uploads/2023/11/The_Killer4.gif
200 OK 37 kB URL GET HTTP/2 gnula.nu/wp-content/uploads/2023/11/The_Killer4.gif
IP
Requested by https://gnula.nu/comedia/ver-spoiler-alert-2022-online/
Certificate IssuerLet's Encrypt
Subjectgnula.nu
FingerprintF0:71:98:32:BE:CF:19:29:10:5C:9C:E7:79:AB:E9:8F:53:2D:D1:DA
ValidityWed, 08 Nov 2023 10:13:46 GMT - Tue, 06 Feb 2024 10:13:45 GMT
File type GIF image data, version 89a, 215 x 269\012- data
Hash 59a8ada6c0fcc8f7a5e9aaa0302efa22
17b76eafa3acd03372500c57794690909d3fd4db
b8e5c97be39d0c0a31e5d29dec1f6315f799309bbf7237ca48fb7823263838d5
GET /wp-content/uploads/2023/11/The_Killer4.gif HTTP/1.1
Host: gnula.nu
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: __ddg1_=7Q4TDzvvC5nreh7ivH5U
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Sat, 25 Nov 2023 03:08:17 GMT
content-type: image/gif
content-length: 36886
last-modified: Mon, 13 Nov 2023 19:52:51 GMT
etag: "65527e93-9016"
expires: Sat, 02 Dec 2023 03:08:17 GMT
cache-control: max-age=604800
accept-ranges: bytes
age: 565800
ddg-cache-status: HIT,HIT
X-Firefox-Spdy: h2
gnula.nu/wp-content/uploads/2023/10/Sound_of_Freedom4.gif
24 kB URL gnula.nu/wp-content/uploads/2023/10/Sound_of_Freedom4.gif
IP
File type GIF image data, version 89a, 215 x 269\012- data
Hash 41c5bb9c3c69b23be6a0c1b6c8351315
25673c6f729c9798f9a4cff30d2f197c669fb34c
83185f5bd4f07bf23132b52f9ac35c4f7bddc04ec3dfce6dc62112de12d45414
GET /wp-content/uploads/2023/10/Sound_of_Freedom4.gif HTTP/1.1
Host: gnula.nu
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: __ddg1_=7Q4TDzvvC5nreh7ivH5U
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Sat, 25 Nov 2023 19:39:49 GMT
content-type: image/gif
content-length: 23926
last-modified: Tue, 03 Oct 2023 18:12:35 GMT
etag: "651c5993-5d76"
expires: Sat, 02 Dec 2023 19:39:49 GMT
cache-control: max-age=604800
accept-ranges: bytes
age: 506308
ddg-cache-status: HIT,HIT
X-Firefox-Spdy: h2
gnula.nu/wp-content/uploads/2023/10/Five_Nights_at_Freddys4.gif
200 OK 29 kB URL GET HTTP/2 gnula.nu/wp-content/uploads/2023/10/Five_Nights_at_Freddys4.gif
IP
Requested by https://gnula.nu/comedia/ver-spoiler-alert-2022-online/
Certificate IssuerLet's Encrypt
Subjectgnula.nu
FingerprintF0:71:98:32:BE:CF:19:29:10:5C:9C:E7:79:AB:E9:8F:53:2D:D1:DA
ValidityWed, 08 Nov 2023 10:13:46 GMT - Tue, 06 Feb 2024 10:13:45 GMT
File type GIF image data, version 89a, 215 x 269\012- data
Hash 5b06efd6b37c325e961ccfaa2b507bd7
e9ac136175bad787f2b03913712b96c0f53c02c5
1d1a2e8077e834966412822233457ee12cd13f1241ed4f30fea4a7f8baf51069
GET /wp-content/uploads/2023/10/Five_Nights_at_Freddys4.gif HTTP/1.1
Host: gnula.nu
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: __ddg1_=7Q4TDzvvC5nreh7ivH5U
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Fri, 01 Dec 2023 10:41:24 GMT
content-type: image/gif
content-length: 28952
last-modified: Fri, 27 Oct 2023 04:27:28 GMT
cache-control: max-age=604800
accept-ranges: bytes
ddg-cache-status: HIT,HIT
etag: "653b3c30-7118"
expires: Thu, 07 Dec 2023 06:36:37 GMT
age: 20213
X-Firefox-Spdy: h2
gnula.nu/wp-content/uploads/2023/11/Cyst3.gif
5.7 kB URL gnula.nu/wp-content/uploads/2023/11/Cyst3.gif
IP
File type GIF image data, version 89a, 54 x 83\012- data
Hash f95b00de3b1cebb77ac33bb4eb94f57f
9f26d1e442891c55932c29c66259881eb230e73e
25e4cd2a700b0232b09a0dd5de230c4fd55bcf281b2fc1acbcd597305badfa84
GET /wp-content/uploads/2023/11/Cyst3.gif HTTP/1.1
Host: gnula.nu
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: __ddg1_=7Q4TDzvvC5nreh7ivH5U
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Tue, 28 Nov 2023 07:21:54 GMT
content-type: image/gif
content-length: 5702
last-modified: Tue, 28 Nov 2023 07:15:31 GMT
etag: "65659393-1646"
expires: Tue, 05 Dec 2023 07:21:54 GMT
cache-control: max-age=604800
accept-ranges: bytes
age: 291383
ddg-cache-status: HIT,HIT
X-Firefox-Spdy: h2
gnula.nu/wp-content/uploads/2023/10/Saw_x4.gif
41 kB URL gnula.nu/wp-content/uploads/2023/10/Saw_x4.gif
IP
File type GIF image data, version 89a, 215 x 269\012- data
Hash a2513416f8cdc783ef9dc67eaa552151
168dcd57286cb093a011914ffebbd1227af1c6b9
32142cc8cc27116daaad5358914e3c0386d5905903586cb74704753221f81080
GET /wp-content/uploads/2023/10/Saw_x4.gif HTTP/1.1
Host: gnula.nu
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: __ddg1_=7Q4TDzvvC5nreh7ivH5U
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Wed, 29 Nov 2023 14:21:44 GMT
content-type: image/gif
content-length: 41143
last-modified: Mon, 23 Oct 2023 08:49:54 GMT
cache-control: max-age=604800
accept-ranges: bytes
etag: "653633b2-a0b7"
expires: Wed, 06 Dec 2023 14:21:44 GMT
age: 179793
ddg-cache-status: HIT,HIT
X-Firefox-Spdy: h2
gnula.nu/wp-content/uploads/2023/10/The_Exorcist_Believer4.gif
200 OK 50 kB URL GET HTTP/2 gnula.nu/wp-content/uploads/2023/10/The_Exorcist_Believer4.gif
IP
Requested by https://gnula.nu/comedia/ver-spoiler-alert-2022-online/
Certificate IssuerLet's Encrypt
Subjectgnula.nu
FingerprintF0:71:98:32:BE:CF:19:29:10:5C:9C:E7:79:AB:E9:8F:53:2D:D1:DA
ValidityWed, 08 Nov 2023 10:13:46 GMT - Tue, 06 Feb 2024 10:13:45 GMT
File type GIF image data, version 89a, 215 x 269\012- data
Hash aeec7ecea7d329d5b8ba0bcbc607384f
d9fc3cd223a175d0c4c16698b0dcc05127c14480
cea18203892a1b41bf4a3a62309b299a8b67dcffa0c39dcd84078190114fdf2a
GET /wp-content/uploads/2023/10/The_Exorcist_Believer4.gif HTTP/1.1
Host: gnula.nu
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: __ddg1_=7Q4TDzvvC5nreh7ivH5U
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Fri, 01 Dec 2023 04:35:54 GMT
content-type: image/gif
content-length: 50527
last-modified: Tue, 24 Oct 2023 07:03:57 GMT
cache-control: max-age=604800
accept-ranges: bytes
ddg-cache-status: HIT,HIT
etag: "65376c5d-c55f"
expires: Wed, 06 Dec 2023 05:24:23 GMT
age: 42143
X-Firefox-Spdy: h2
gnula.nu/wp-content/uploads/2023/11/El_fantastico_caso_del_Golem3.gif
5.4 kB URL gnula.nu/wp-content/uploads/2023/11/El_fantastico_caso_del_Golem3.gif
IP
File type GIF image data, version 89a, 54 x 83\012- data
Hash 576a606f53545058d69e11c02bb0da6e
7bcd43a5f526dc41f3c1635acd98d3a5ee86ba96
fe1e92ce4e951e7c211dd6828a1bcbea781ae4fd75dbd28fc6546dac7fdb713f
GET /wp-content/uploads/2023/11/El_fantastico_caso_del_Golem3.gif HTTP/1.1
Host: gnula.nu
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: __ddg1_=7Q4TDzvvC5nreh7ivH5U
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Thu, 30 Nov 2023 05:12:52 GMT
content-type: image/gif
content-length: 5361
last-modified: Thu, 30 Nov 2023 04:46:20 GMT
etag: "6568139c-14f1"
expires: Thu, 07 Dec 2023 05:12:52 GMT
cache-control: max-age=604800
accept-ranges: bytes
age: 126325
ddg-cache-status: HIT,HIT
X-Firefox-Spdy: h2
gnula.nu/wp-content/uploads/2023/10/Mission_Impossible_Dead_Reckoning_Part_One5.gif
200 OK 48 kB URL GET HTTP/2 gnula.nu/wp-content/uploads/2023/10/Mission_Impossible_Dead_Reckoning_Part_One5.gif
IP
Requested by https://gnula.nu/comedia/ver-spoiler-alert-2022-online/
Certificate IssuerLet's Encrypt
Subjectgnula.nu
FingerprintF0:71:98:32:BE:CF:19:29:10:5C:9C:E7:79:AB:E9:8F:53:2D:D1:DA
ValidityWed, 08 Nov 2023 10:13:46 GMT - Tue, 06 Feb 2024 10:13:45 GMT
File type GIF image data, version 89a, 215 x 269\012- data
Hash bb002604f796d870697334de9014f390
139ad0995328de94f236acc369568031911cde78
0500b943d09d6d52f9dfd5d15246a1af2bf5ef708baaab5dea56d466724787b4
GET /wp-content/uploads/2023/10/Mission_Impossible_Dead_Reckoning_Part_One5.gif HTTP/1.1
Host: gnula.nu
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: __ddg1_=7Q4TDzvvC5nreh7ivH5U
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Thu, 30 Nov 2023 10:33:25 GMT
content-type: image/gif
content-length: 47828
last-modified: Tue, 10 Oct 2023 19:59:50 GMT
cache-control: max-age=604800
accept-ranges: bytes
ddg-cache-status: HIT,HIT
etag: "6525ad36-bad4"
expires: Thu, 07 Dec 2023 10:27:08 GMT
age: 107092
X-Firefox-Spdy: h2
gnula.nu/wp-content/uploads/2023/11/Napoleon_new.jpg
45 kB URL gnula.nu/wp-content/uploads/2023/11/Napoleon_new.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 23.4 (Macintosh), datetime=2023:11:24 19:00:10], baseline, precision 8, 215x279, components 3\012- data
Hash 5e69b1f2d3987179f8aabe66972e9381
8810ceb4d798fcdbe5eb88d04c3d944043da8260
79035b4c764aa926cd2f31bc9ca560cafba37dbff79b5e32da5cd14c44fe36f8
GET /wp-content/uploads/2023/11/Napoleon_new.jpg HTTP/1.1
Host: gnula.nu
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: __ddg1_=7Q4TDzvvC5nreh7ivH5U
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Sat, 25 Nov 2023 00:03:58 GMT
content-type: image/jpeg
content-length: 45008
last-modified: Sat, 25 Nov 2023 00:00:17 GMT
etag: "65613911-afd0"
expires: Sat, 02 Dec 2023 00:03:58 GMT
cache-control: max-age=604800
accept-ranges: bytes
age: 576859
ddg-cache-status: HIT,MISS
X-Firefox-Spdy: h2
gnula.nu/wp-content/uploads/2023/10/Trolls_Band_Together3.gif
200 OK 5.6 kB URL GET HTTP/2 gnula.nu/wp-content/uploads/2023/10/Trolls_Band_Together3.gif
IP
Requested by https://gnula.nu/comedia/ver-spoiler-alert-2022-online/
Certificate IssuerLet's Encrypt
Subjectgnula.nu
FingerprintF0:71:98:32:BE:CF:19:29:10:5C:9C:E7:79:AB:E9:8F:53:2D:D1:DA
ValidityWed, 08 Nov 2023 10:13:46 GMT - Tue, 06 Feb 2024 10:13:45 GMT
File type GIF image data, version 89a, 54 x 83\012- data
Hash dfbb62fdec98a82dd78a09050b4cf1b1
2490fab19f53e64bd7fb910f1eccd2627840d1a1
1d38b44295f6358a714d6cfd8082816f82cb851c76af27d97ae57451839bba16
GET /wp-content/uploads/2023/10/Trolls_Band_Together3.gif HTTP/1.1
Host: gnula.nu
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: __ddg1_=7Q4TDzvvC5nreh7ivH5U
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Sun, 26 Nov 2023 14:22:55 GMT
content-type: image/gif
content-length: 5642
last-modified: Tue, 31 Oct 2023 03:17:38 GMT
etag: "654071d2-160a"
expires: Sun, 03 Dec 2023 14:22:55 GMT
cache-control: max-age=604800
accept-ranges: bytes
age: 438922
ddg-cache-status: HIT,HIT
X-Firefox-Spdy: h2
gnula.nu/wp-content/uploads/2023/07/Oppenheimer3.gif
5.8 kB URL gnula.nu/wp-content/uploads/2023/07/Oppenheimer3.gif
IP
File type GIF image data, version 89a, 54 x 83\012- data
Hash 228dc0ddcd3ec592276efe612c140930
9d8930d1e1a5d6005120d2298933aa1ae730caa2
a0edf735533ffe5536a69f7b1d66863c59f08587d99a3ea583e5adc4ef863b0d
GET /wp-content/uploads/2023/07/Oppenheimer3.gif HTTP/1.1
Host: gnula.nu
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: __ddg1_=7Q4TDzvvC5nreh7ivH5U
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Fri, 01 Dec 2023 15:15:51 GMT
content-type: image/gif
content-length: 5816
last-modified: Fri, 21 Jul 2023 22:43:59 GMT
cache-control: max-age=604800
accept-ranges: bytes
ddg-cache-status: HIT,MISS
etag: "64bb0a2f-16b8"
expires: Fri, 08 Dec 2023 15:15:51 GMT
age: 3746
X-Firefox-Spdy: h2
gnula.nu/wp-content/uploads/2023/10/Heist_88m3.gif
6.0 kB URL gnula.nu/wp-content/uploads/2023/10/Heist_88m3.gif
IP
File type GIF image data, version 89a, 54 x 83\012- data
Hash de6d65c770d615991ccbf96505b769f2
9946e1603a160b1956b71aba24850e408e7018dd
def9927b30dfe39854c8f125898db849558a164d1c03470b4a254d6b29e21abd
GET /wp-content/uploads/2023/10/Heist_88m3.gif HTTP/1.1
Host: gnula.nu
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: __ddg1_=7Q4TDzvvC5nreh7ivH5U
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Tue, 28 Nov 2023 13:36:29 GMT
content-type: image/gif
content-length: 6043
last-modified: Tue, 10 Oct 2023 01:33:43 GMT
cache-control: max-age=604800
accept-ranges: bytes
ddg-cache-status: HIT,MISS
etag: "6524a9f7-179b"
expires: Tue, 05 Dec 2023 13:36:29 GMT
age: 268908
X-Firefox-Spdy: h2
gnula.nu/wp-content/uploads/2021/10/Lone_Wolf3.gif
5.3 kB URL gnula.nu/wp-content/uploads/2021/10/Lone_Wolf3.gif
IP
File type GIF image data, version 89a, 54 x 83\012- data
Hash d96d1a5ece95738472a9721b5a40b917
12d9e822a3f9a559f23b28ed1505ff4c868016ce
912f7b1b68ffee0b6201e11192a733445127c65a19418ac8af0744142787a7bd
GET /wp-content/uploads/2021/10/Lone_Wolf3.gif HTTP/1.1
Host: gnula.nu
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: __ddg1_=7Q4TDzvvC5nreh7ivH5U
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Mon, 27 Nov 2023 02:59:46 GMT
content-type: image/gif
content-length: 5298
last-modified: Wed, 27 Oct 2021 06:20:43 GMT
cache-control: max-age=604800
accept-ranges: bytes
etag: "6178efbb-14b2"
expires: Mon, 04 Dec 2023 02:59:46 GMT
age: 393511
ddg-cache-status: HIT,HIT
X-Firefox-Spdy: h2
gnula.nu/wp-content/uploads/2023/10/The_Exorcist_Believer3.gif
5.0 kB URL gnula.nu/wp-content/uploads/2023/10/The_Exorcist_Believer3.gif
IP
File type GIF image data, version 89a, 54 x 83\012- data
Hash a316e809ae5b1aa16324cfc89badbd12
3fc3c03d72d20a367b60168afeb454a37d82e7bc
d7935910ec0fe2cb33e0e338d72c870ca7cb5e4e944f9b8c0b1d5e7965762def
GET /wp-content/uploads/2023/10/The_Exorcist_Believer3.gif HTTP/1.1
Host: gnula.nu
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: __ddg1_=7Q4TDzvvC5nreh7ivH5U
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Tue, 28 Nov 2023 00:32:45 GMT
content-type: image/gif
content-length: 5040
last-modified: Fri, 06 Oct 2023 18:32:48 GMT
etag: "652052d0-13b0"
expires: Tue, 05 Dec 2023 00:32:45 GMT
cache-control: max-age=604800
accept-ranges: bytes
age: 315932
ddg-cache-status: HIT,HIT
X-Firefox-Spdy: h2
gnula.nu/wp-content/uploads/2023/09/Saw_x3.gif
5.2 kB URL gnula.nu/wp-content/uploads/2023/09/Saw_x3.gif
IP
File type GIF image data, version 89a, 54 x 83\012- data
Hash 1f65bd59e4865bdcb61af3d71b742cb9
fdf901497f0274e5669a311ff65f5fd4ff43ccb7
a5ce1421b1f59ba6f27ceff718e627b2c16386be90d524444db98841ae8b05be
GET /wp-content/uploads/2023/09/Saw_x3.gif HTTP/1.1
Host: gnula.nu
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: __ddg1_=7Q4TDzvvC5nreh7ivH5U
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Tue, 28 Nov 2023 19:52:09 GMT
content-type: image/gif
content-length: 5176
last-modified: Thu, 28 Sep 2023 17:49:56 GMT
etag: "6515bcc4-1438"
expires: Tue, 05 Dec 2023 19:52:09 GMT
cache-control: max-age=604800
accept-ranges: bytes
age: 246368
ddg-cache-status: HIT,HIT
X-Firefox-Spdy: h2
gnula.nu/wp-content/uploads/2023/07/Mission_Impossible_Dead_Reckoning_Part_One3.gif
200 OK 5.3 kB URL GET HTTP/2 gnula.nu/wp-content/uploads/2023/07/Mission_Impossible_Dead_Reckoning_Part_One3.gif
IP
Requested by https://gnula.nu/comedia/ver-spoiler-alert-2022-online/
Certificate IssuerLet's Encrypt
Subjectgnula.nu
FingerprintF0:71:98:32:BE:CF:19:29:10:5C:9C:E7:79:AB:E9:8F:53:2D:D1:DA
ValidityWed, 08 Nov 2023 10:13:46 GMT - Tue, 06 Feb 2024 10:13:45 GMT
File type GIF image data, version 89a, 54 x 83\012- data
Hash 597fb240753c1d89188d1ebb5625bedb
0ad26735e359aa70f3aea483d60dd4808954669e
198c7db9b5945582619e1d24174ff2597d0c9ec77da5a716442a355f660166af
GET /wp-content/uploads/2023/07/Mission_Impossible_Dead_Reckoning_Part_One3.gif HTTP/1.1
Host: gnula.nu
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: __ddg1_=7Q4TDzvvC5nreh7ivH5U
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Tue, 28 Nov 2023 05:04:26 GMT
content-type: image/gif
content-length: 5332
last-modified: Mon, 10 Jul 2023 21:16:37 GMT
cache-control: max-age=604800
accept-ranges: bytes
etag: "64ac7535-14d4"
expires: Tue, 05 Dec 2023 05:04:26 GMT
age: 299631
ddg-cache-status: HIT,HIT
X-Firefox-Spdy: h2
gnula.nu/wp-content/uploads/2023/09/A_Haunting_in_Venice3.gif
6.1 kB URL gnula.nu/wp-content/uploads/2023/09/A_Haunting_in_Venice3.gif
IP
File type GIF image data, version 89a, 54 x 83\012- data
Hash 9d9f71a3b6c8fa5742ebb418ba924e23
4b9e41998089f7dbfad1e5bb512dc2563ac08bf1
e5d564de25d7efe1214fb8f9d06f3a8a5a0c75baf5d3d2cd35f58543a2013555
GET /wp-content/uploads/2023/09/A_Haunting_in_Venice3.gif HTTP/1.1
Host: gnula.nu
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: __ddg1_=7Q4TDzvvC5nreh7ivH5U
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Wed, 29 Nov 2023 13:52:28 GMT
content-type: image/gif
content-length: 6088
last-modified: Fri, 15 Sep 2023 18:14:24 GMT
cache-control: max-age=604800
accept-ranges: bytes
etag: "65049f00-17c8"
expires: Wed, 06 Dec 2023 13:52:28 GMT
age: 181549
ddg-cache-status: HIT,HIT
X-Firefox-Spdy: h2
gnula.nu/wp-content/uploads/2023/10/A_Haunting_in_Venice4.gif
200 OK 37 kB URL GET HTTP/2 gnula.nu/wp-content/uploads/2023/10/A_Haunting_in_Venice4.gif
IP
Requested by https://gnula.nu/comedia/ver-spoiler-alert-2022-online/
Certificate IssuerLet's Encrypt
Subjectgnula.nu
FingerprintF0:71:98:32:BE:CF:19:29:10:5C:9C:E7:79:AB:E9:8F:53:2D:D1:DA
ValidityWed, 08 Nov 2023 10:13:46 GMT - Tue, 06 Feb 2024 10:13:45 GMT
File type GIF image data, version 89a, 215 x 269\012- data
Hash 04c5ef7fc2b9e00a45b91f98ff4947da
1344516bcffebbfd5c135277ea8912a60bc3edbb
d545cb528082b0e2640b41951619f8bbedf4c8909fc08dd1c1d20747a0cc62c7
GET /wp-content/uploads/2023/10/A_Haunting_in_Venice4.gif HTTP/1.1
Host: gnula.nu
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: __ddg1_=7Q4TDzvvC5nreh7ivH5U
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Fri, 01 Dec 2023 07:24:37 GMT
content-type: image/gif
content-length: 36634
last-modified: Tue, 31 Oct 2023 03:36:42 GMT
etag: "6540764a-8f1a"
expires: Fri, 08 Dec 2023 07:24:37 GMT
cache-control: max-age=604800
accept-ranges: bytes
age: 32020
ddg-cache-status: HIT,HIT
X-Firefox-Spdy: h2
gnula.nu/wp-content/uploads/2023/10/Expend4bles4.gif
37 kB URL gnula.nu/wp-content/uploads/2023/10/Expend4bles4.gif
IP
File type GIF image data, version 89a, 215 x 269\012- data
Hash e1a0e81f04c3f7da58864d3f0d1693ae
2cae579b3c0ea09cec80ecde77736f15eed1b75d
5ca5a506a0b8101fd861d5272337269adc1d25125d5bffcf9654247d69710841
GET /wp-content/uploads/2023/10/Expend4bles4.gif HTTP/1.1
Host: gnula.nu
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: __ddg1_=7Q4TDzvvC5nreh7ivH5U
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Tue, 28 Nov 2023 13:19:38 GMT
content-type: image/gif
content-length: 37198
last-modified: Sun, 15 Oct 2023 19:51:51 GMT
cache-control: max-age=604800
accept-ranges: bytes
ddg-cache-status: HIT,HIT
etag: "652c42d7-914e"
expires: Sat, 02 Dec 2023 12:17:50 GMT
age: 269919
X-Firefox-Spdy: h2
gnula.nu/wp-content/uploads/2023/09/Expend4bles3.gif
5.4 kB URL gnula.nu/wp-content/uploads/2023/09/Expend4bles3.gif
IP
File type GIF image data, version 89a, 54 x 83\012- data
Hash c82f9cb66a5830e322d1a0ca667b6dee
a260fe7ef25ee1e4c02524bc8e43bb2e6205c0e1
86925e7612eb63486fa5ec3d96a5def589be0b149a0e77494a1059990156fe81
GET /wp-content/uploads/2023/09/Expend4bles3.gif HTTP/1.1
Host: gnula.nu
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: __ddg1_=7Q4TDzvvC5nreh7ivH5U
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Fri, 01 Dec 2023 04:49:20 GMT
content-type: image/gif
content-length: 5424
last-modified: Fri, 22 Sep 2023 16:56:59 GMT
cache-control: max-age=604800
accept-ranges: bytes
ddg-cache-status: HIT,HIT
etag: "650dc75b-1530"
expires: Thu, 07 Dec 2023 03:06:15 GMT
age: 41337
X-Firefox-Spdy: h2
ajax.googleapis.com/ajax/libs/jquery/1.6/jquery.min.js
200 OK 32 kB URL GET HTTP/2 ajax.googleapis.com/ajax/libs/jquery/1.6/jquery.min.js
IP
Requested by https://gnula.nu/comedia/ver-spoiler-alert-2022-online/
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
FingerprintCC:96:E0:52:E0:9B:EA:A9:A0:F8:88:9A:90:20:11:47:61:00:3C:42
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (32769)
Hash 219073097031d9c1a95a1291d66f3a10
2b7996b01d90b7f424f2a2e6063947461db4b2b2
232066e3f6f1351afdaee1acb70c409766641fd5669e0b55ce7c77fac0a857ef
GET /ajax/libs/jquery/1.6/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 32222
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 00:31:31 GMT
expires: Fri, 29 Nov 2024 00:31:31 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 143206
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
gnula.nu/wp-content/uploads/2023/01/Spoiler_Alert_poster_usa.jpg
200 OK 58 kB URL GET HTTP/2 gnula.nu/wp-content/uploads/2023/01/Spoiler_Alert_poster_usa.jpg
IP
Requested by https://gnula.nu/comedia/ver-spoiler-alert-2022-online/
Certificate IssuerLet's Encrypt
Subjectgnula.nu
FingerprintF0:71:98:32:BE:CF:19:29:10:5C:9C:E7:79:AB:E9:8F:53:2D:D1:DA
ValidityWed, 08 Nov 2023 10:13:46 GMT - Tue, 06 Feb 2024 10:13:45 GMT
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 23.4 (Macintosh), datetime=2023:01:12 22:47:20], baseline, precision 8, 394x512, components 3\012- data
Hash f8e0ca1c0e36aecfeef9ae273e78569a
9f5acaf18644266e002e1ddaac06f361247977c7
607502167c6197bad4c26636ddfd55ecee6ed1204fc29bdd7edb62591488f943
GET /wp-content/uploads/2023/01/Spoiler_Alert_poster_usa.jpg HTTP/1.1
Host: gnula.nu
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: __ddg1_=7Q4TDzvvC5nreh7ivH5U
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Fri, 01 Dec 2023 16:18:17 GMT
content-type: image/jpeg
content-length: 57486
last-modified: Fri, 13 Jan 2023 03:47:47 GMT
etag: "63c0d463-e08e"
expires: Fri, 08 Dec 2023 16:18:17 GMT
cache-control: max-age=604800
accept-ranges: bytes
age: 0
ddg-cache-status: MISS,MISS
X-Firefox-Spdy: h2
www.googletagmanager.com/gtag/js?id=G-9Q8WZ8PMZM&l=dataLayer&cx=c
81 kB URL www.googletagmanager.com/gtag/js?id=G-9Q8WZ8PMZM&l=dataLayer&cx=c
IP
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint37:42:10:B7:89:70:45:51:80:81:66:CE:95:21:72:5D:46:0B:E2:34
ValidityMon, 23 Oct 2023 11:18:19 GMT - Mon, 15 Jan 2024 11:18:18 GMT
File type ASCII text, with very long lines (5955)
Hash c7853846a8906c5103799632c0020a52
4764304ea930d6a9876885127d6f5809c2101bda
3d6f58cf3782ade1f3370714f49c4b6d102900d6f3a764dcd8f71972d83915c7
GET /gtag/js?id=G-9Q8WZ8PMZM&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gnula.nu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Fri, 01 Dec 2023 16:18:17 GMT
expires: Fri, 01 Dec 2023 16:18:17 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 81221
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
gnula.nu/wp-content/themes/charcoal2/images/li2.gif
2.0 kB URL gnula.nu/wp-content/themes/charcoal2/images/li2.gif
IP
File type GIF image data, version 89a, 210 x 25\012- data
Hash dd9cca90bdfe16a9a85b6e46f57bb97f
c1a797f881f789f111df30455369e05439856211
54f6772dc8d1466e269ea4da0435d09751b740226bcb57e336abf066459e484a
GET /wp-content/themes/charcoal2/images/li2.gif HTTP/1.1
Host: gnula.nu
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gnula.nu/wp-content/themes/charcoal2/style.css
Cookie: __ddg1_=7Q4TDzvvC5nreh7ivH5U
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Wed, 29 Nov 2023 22:19:27 GMT
content-type: image/gif
content-length: 2043
last-modified: Tue, 19 May 2020 23:50:09 GMT
cache-control: max-age=604800
accept-ranges: bytes
ddg-cache-status: HIT,HIT
etag: "5ec470b1-7fb"
expires: Mon, 04 Dec 2023 17:13:42 GMT
age: 151130
X-Firefox-Spdy: h2
www.gstatic.com/prose/brandjs.js
5.8 kB URL www.gstatic.com/prose/brandjs.js
IP
File type ASCII text, with very long lines (1352)
Hash 5fd232d76f845e55064ad5069abfc141
afaa74984a2c8eb086ff2d22e0ad2abfce7d272e
6395e6f9f6fbcd953f0ffa40615094c565d86c265fb5028e64dd2dc872b5ce69
GET /prose/brandjs.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://gnula.nu/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/prose-team
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="prose-team"
report-to: {"group":"prose-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/prose-team"}]}
content-length: 5807
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 23:24:28 GMT
expires: Fri, 01 Dec 2023 23:24:28 GMT
cache-control: public, max-age=86400
age: 60829
last-modified: Tue, 06 Apr 2021 15:14:29 GMT
content-type: text/javascript
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
gnula.nu/wp-content/uploads/2014/04/heada.jpg
200 OK 90 kB URL GET HTTP/2 gnula.nu/wp-content/uploads/2014/04/heada.jpg
IP
Requested by https://gnula.nu/comedia/ver-spoiler-alert-2022-online/
Certificate IssuerLet's Encrypt
Subjectgnula.nu
FingerprintF0:71:98:32:BE:CF:19:29:10:5C:9C:E7:79:AB:E9:8F:53:2D:D1:DA
ValidityWed, 08 Nov 2023 10:13:46 GMT - Tue, 06 Feb 2024 10:13:45 GMT
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS5 Windows, datetime=2012:10:22 16:36:42], progressive, precision 8, 1200x116, components 3\012- data
Hash 50f9a92c99bb8560a4108909327f1314
3b964b1dd35ae34c5c0bbc931a3e650e47546061
da7095ec43fb09c4c5fde2546ac40a15fca9ad785a44a5bd00cf1963128243ac
GET /wp-content/uploads/2014/04/heada.jpg HTTP/1.1
Host: gnula.nu
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: __ddg1_=7Q4TDzvvC5nreh7ivH5U
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Fri, 01 Dec 2023 12:01:28 GMT
content-type: image/jpeg
content-length: 89782
last-modified: Wed, 20 May 2020 00:18:30 GMT
cache-control: max-age=604800
accept-ranges: bytes
ddg-cache-status: HIT,HIT
etag: "5ec47756-15eb6"
expires: Thu, 07 Dec 2023 21:45:35 GMT
age: 15409
X-Firefox-Spdy: h2
gnula.nu/wp-content/uploads/2014/04/headb.jpg
200 OK 46 kB URL GET HTTP/2 gnula.nu/wp-content/uploads/2014/04/headb.jpg
IP
Requested by https://gnula.nu/comedia/ver-spoiler-alert-2022-online/
Certificate IssuerLet's Encrypt
Subjectgnula.nu
FingerprintF0:71:98:32:BE:CF:19:29:10:5C:9C:E7:79:AB:E9:8F:53:2D:D1:DA
ValidityWed, 08 Nov 2023 10:13:46 GMT - Tue, 06 Feb 2024 10:13:45 GMT
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS5 Windows, datetime=2012:10:22 16:48:18], progressive, precision 8, 1200x65, components 3\012- data
Hash a464117e8d7a6e49becab8e33d3ef73c
39d4580fb9e397dc824075dc0100a5973ca4e2a7
b158e64c80b09edb16ca4ad107d62dbf4aa81e5bb684bd81dbdfb38447b2f241
GET /wp-content/uploads/2014/04/headb.jpg HTTP/1.1
Host: gnula.nu
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: __ddg1_=7Q4TDzvvC5nreh7ivH5U; _ga_9Q8WZ8PMZM=GS1.1.1701447502.1.0.1701447502.60.0.0; _ga=GA1.1.913219656.1701447503
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Tue, 28 Nov 2023 13:47:47 GMT
content-type: image/jpeg
content-length: 45487
last-modified: Wed, 20 May 2020 00:18:31 GMT
cache-control: max-age=604800
accept-ranges: bytes
ddg-cache-status: HIT,HIT
etag: "5ec47757-b1af"
expires: Thu, 30 Nov 2023 21:55:34 GMT
age: 268230
X-Firefox-Spdy: h2
gnula.nu/wp-content/themes/charcoal2/images/cover.jpg
200 OK 7.9 kB URL GET HTTP/2 gnula.nu/wp-content/themes/charcoal2/images/cover.jpg
IP
Requested by https://gnula.nu/comedia/ver-spoiler-alert-2022-online/
Certificate IssuerLet's Encrypt
Subjectgnula.nu
FingerprintF0:71:98:32:BE:CF:19:29:10:5C:9C:E7:79:AB:E9:8F:53:2D:D1:DA
ValidityWed, 08 Nov 2023 10:13:46 GMT - Tue, 06 Feb 2024 10:13:45 GMT
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS5 Windows, datetime=2012:10:22 18:36:21], progressive, precision 8, 733x1, components 3\012- data
Hash c112f3224ed14bb42edf832fb372b7ed
b8fa50269e145cdff0e133e9200240881409affa
3ef5c51a9b84f59b50fa0b4bcf5f007a7f431d0b1ad305d1488a108341d3ea97
GET /wp-content/themes/charcoal2/images/cover.jpg HTTP/1.1
Host: gnula.nu
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gnula.nu/wp-content/themes/charcoal2/style.css
Cookie: __ddg1_=7Q4TDzvvC5nreh7ivH5U; _ga_9Q8WZ8PMZM=GS1.1.1701447502.1.0.1701447502.60.0.0; _ga=GA1.1.913219656.1701447503
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Mon, 27 Nov 2023 23:01:55 GMT
content-type: image/jpeg
content-length: 7863
last-modified: Tue, 19 May 2020 23:50:09 GMT
cache-control: max-age=604800
accept-ranges: bytes
etag: "5ec470b1-1eb7"
expires: Mon, 04 Dec 2023 23:01:55 GMT
age: 321382
ddg-cache-status: HIT,HIT
X-Firefox-Spdy: h2
gnula.nu/wp-content/themes/charcoal2/images/title2.jpg
13 kB URL gnula.nu/wp-content/themes/charcoal2/images/title2.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=80, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=733], progressive, precision 8, 733x80, components 3\012- data
Hash 7e3bba5148383e024e7c60df9f45f50e
fdda5141ebad4e113e7474978a8b7f243b399488
69e8a33827a670237dddcabf6be05afa3de58f0bc4be2c19baa6840a033ef4fc
GET /wp-content/themes/charcoal2/images/title2.jpg HTTP/1.1
Host: gnula.nu
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gnula.nu/wp-content/themes/charcoal2/style.css
Cookie: __ddg1_=7Q4TDzvvC5nreh7ivH5U; _ga_9Q8WZ8PMZM=GS1.1.1701447502.1.0.1701447502.60.0.0; _ga=GA1.1.913219656.1701447503
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Tue, 28 Nov 2023 01:50:44 GMT
content-type: image/jpeg
content-length: 12871
last-modified: Tue, 19 May 2020 23:50:09 GMT
cache-control: max-age=604800
accept-ranges: bytes
etag: "5ec470b1-3247"
expires: Tue, 05 Dec 2023 01:50:44 GMT
age: 311253
ddg-cache-status: HIT,HIT
X-Firefox-Spdy: h2
gnula.nu/wp-content/themes/charcoal2/images/meta2.jpg
200 OK 10 kB URL GET HTTP/2 gnula.nu/wp-content/themes/charcoal2/images/meta2.jpg
IP
Requested by https://gnula.nu/comedia/ver-spoiler-alert-2022-online/
Certificate IssuerLet's Encrypt
Subjectgnula.nu
FingerprintF0:71:98:32:BE:CF:19:29:10:5C:9C:E7:79:AB:E9:8F:53:2D:D1:DA
ValidityWed, 08 Nov 2023 10:13:46 GMT - Tue, 06 Feb 2024 10:13:45 GMT
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=36, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=733], progressive, precision 8, 733x36, components 3\012- data
Hash d4ff51ac76dfed6d096597e3df76dd53
456558d04e04ea784a950ea752d35411e6b98bde
29c63951fe970b00a8d5da4c56da57e1b225abf9f5fc4e62fae7e6d40659a5c8
GET /wp-content/themes/charcoal2/images/meta2.jpg HTTP/1.1
Host: gnula.nu
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gnula.nu/wp-content/themes/charcoal2/style.css
Cookie: __ddg1_=7Q4TDzvvC5nreh7ivH5U; _ga_9Q8WZ8PMZM=GS1.1.1701447502.1.0.1701447502.60.0.0; _ga=GA1.1.913219656.1701447503
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Thu, 30 Nov 2023 11:11:40 GMT
content-type: image/jpeg
content-length: 10093
last-modified: Tue, 19 May 2020 23:50:09 GMT
etag: "5ec470b1-276d"
expires: Thu, 07 Dec 2023 11:11:40 GMT
cache-control: max-age=604800
accept-ranges: bytes
age: 104799
ddg-cache-status: HIT,HIT
X-Firefox-Spdy: h2
gnula.nu/wp-content/themes/charcoal2/images/footer.jpg
200 OK 12 kB URL GET HTTP/2 gnula.nu/wp-content/themes/charcoal2/images/footer.jpg
IP
Requested by https://gnula.nu/comedia/ver-spoiler-alert-2022-online/
Certificate IssuerLet's Encrypt
Subjectgnula.nu
FingerprintF0:71:98:32:BE:CF:19:29:10:5C:9C:E7:79:AB:E9:8F:53:2D:D1:DA
ValidityWed, 08 Nov 2023 10:13:46 GMT - Tue, 06 Feb 2024 10:13:45 GMT
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS5 Windows, datetime=2012:10:22 19:48:35], progressive, precision 8, 1200x72, components 3\012- data
Hash 2c6aad12cf0fdab93b1e0a1829e16e32
0920b41cd4d2f0f2b8fb42d992dfdddbc51ea67f
ab6ff958174c2bbf87bebd765f638b90904f63f31c85ce3e0159b67ca489d3b5
GET /wp-content/themes/charcoal2/images/footer.jpg HTTP/1.1
Host: gnula.nu
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gnula.nu/wp-content/themes/charcoal2/style.css
Cookie: __ddg1_=7Q4TDzvvC5nreh7ivH5U; _ga_9Q8WZ8PMZM=GS1.1.1701447502.1.0.1701447502.60.0.0; _ga=GA1.1.913219656.1701447503
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Wed, 29 Nov 2023 15:54:04 GMT
content-type: image/jpeg
content-length: 11906
last-modified: Tue, 19 May 2020 23:50:09 GMT
cache-control: max-age=604800
accept-ranges: bytes
etag: "5ec470b1-2e82"
expires: Wed, 06 Dec 2023 15:54:04 GMT
age: 174254
ddg-cache-status: HIT,HIT
X-Firefox-Spdy: h2
gnula.nu/wp-content/uploads/2019/11/vidfast_logo.jpg
200 OK 2.7 kB URL GET HTTP/2 gnula.nu/wp-content/uploads/2019/11/vidfast_logo.jpg
IP
Requested by https://gnula.nu/comedia/ver-spoiler-alert-2022-online/
Certificate IssuerLet's Encrypt
Subjectgnula.nu
FingerprintF0:71:98:32:BE:CF:19:29:10:5C:9C:E7:79:AB:E9:8F:53:2D:D1:DA
ValidityWed, 08 Nov 2023 10:13:46 GMT - Tue, 06 Feb 2024 10:13:45 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=5], baseline, precision 8, 120x25, components 3\012- data
Hash 977c49a7c500945470f8305ec9a0ded8
9380a791b1ad0b58d56c8a4e480faf9714ab0972
d184e83f8768f2f8b80977093661a8913b9e5cf2893a97ce89b8b4ed6d954cfb
GET /wp-content/uploads/2019/11/vidfast_logo.jpg HTTP/1.1
Host: gnula.nu
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: __ddg1_=7Q4TDzvvC5nreh7ivH5U; _ga_9Q8WZ8PMZM=GS1.1.1701447502.1.0.1701447502.60.0.0; _ga=GA1.1.913219656.1701447503
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Thu, 30 Nov 2023 09:33:23 GMT
content-type: image/jpeg
content-length: 2666
last-modified: Wed, 20 May 2020 00:19:07 GMT
etag: "5ec4777b-a6a"
expires: Thu, 07 Dec 2023 09:33:23 GMT
cache-control: max-age=604800
accept-ranges: bytes
age: 110696
ddg-cache-status: HIT,HIT
X-Firefox-Spdy: h2
gnula.nu/wp-content/uploads/2020/01/mixdroplogo.jpg
200 OK 10 kB URL GET HTTP/2 gnula.nu/wp-content/uploads/2020/01/mixdroplogo.jpg
IP
Requested by https://gnula.nu/comedia/ver-spoiler-alert-2022-online/
Certificate IssuerLet's Encrypt
Subjectgnula.nu
FingerprintF0:71:98:32:BE:CF:19:29:10:5C:9C:E7:79:AB:E9:8F:53:2D:D1:DA
ValidityWed, 08 Nov 2023 10:13:46 GMT - Tue, 06 Feb 2024 10:13:45 GMT
File type JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS4 Windows, datetime=2020:01:06 17:12:01], progressive, precision 8, 120x25, components 3\012- data
Hash 339a218192d859964a898e901ccb5507
a37e52dee255ccf1ed93df6df3f562f3ed42d6c5
4e365347ec6eac345c2818b92646740e1b5370ce76c13477570ba69f5f15b92f
GET /wp-content/uploads/2020/01/mixdroplogo.jpg HTTP/1.1
Host: gnula.nu
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: __ddg1_=7Q4TDzvvC5nreh7ivH5U; _ga_9Q8WZ8PMZM=GS1.1.1701447502.1.0.1701447502.60.0.0; _ga=GA1.1.913219656.1701447503
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Mon, 27 Nov 2023 18:37:03 GMT
content-type: image/jpeg
content-length: 10186
last-modified: Wed, 20 May 2020 00:19:02 GMT
etag: "5ec47776-27ca"
expires: Mon, 04 Dec 2023 18:37:03 GMT
cache-control: max-age=604800
accept-ranges: bytes
age: 337275
ddg-cache-status: HIT,HIT
X-Firefox-Spdy: h2
gnula.nu/wp-content/uploads/2019/11/upstream_logo.jpg
11 kB URL gnula.nu/wp-content/uploads/2019/11/upstream_logo.jpg
IP
File type JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS4 Windows, datetime=2019:11:25 19:27:21], progressive, precision 8, 125x25, components 3\012- data
Hash f669f9f67c226f9723c9c3a34b271831
dc79f87ac61418198a9328f97063d2cb8eae366b
bc69077ab6a8c8a7a826c675cddbdca17bcb43efda9546bd4a598874b06c73f4
GET /wp-content/uploads/2019/11/upstream_logo.jpg HTTP/1.1
Host: gnula.nu
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: __ddg1_=7Q4TDzvvC5nreh7ivH5U; _ga_9Q8WZ8PMZM=GS1.1.1701447502.1.0.1701447502.60.0.0; _ga=GA1.1.913219656.1701447503
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Fri, 01 Dec 2023 13:13:16 GMT
content-type: image/jpeg
content-length: 11029
last-modified: Wed, 20 May 2020 00:19:08 GMT
cache-control: max-age=604800
accept-ranges: bytes
ddg-cache-status: HIT,HIT
etag: "5ec4777c-2b15"
expires: Thu, 07 Dec 2023 13:41:33 GMT
age: 11102
X-Firefox-Spdy: h2
gnula.nu/wp-content/uploads/2014/03/logouplonee.jpg
200 OK 12 kB URL GET HTTP/2 gnula.nu/wp-content/uploads/2014/03/logouplonee.jpg
IP
Requested by https://gnula.nu/comedia/ver-spoiler-alert-2022-online/
Certificate IssuerLet's Encrypt
Subjectgnula.nu
FingerprintF0:71:98:32:BE:CF:19:29:10:5C:9C:E7:79:AB:E9:8F:53:2D:D1:DA
ValidityWed, 08 Nov 2023 10:13:46 GMT - Tue, 06 Feb 2024 10:13:45 GMT
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS5 Windows, datetime=2012:10:26 10:57:01], progressive, precision 8, 120x25, components 3\012- data
Hash 986778606a0fe42fb4c7634297518f12
b1d1b78683e7a6ba7197af4b8615239dd38247d5
3a364228f9e7852095a9f96fe04532684a1fc3146d9481e1c2a33e20449708d7
GET /wp-content/uploads/2014/03/logouplonee.jpg HTTP/1.1
Host: gnula.nu
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: __ddg1_=7Q4TDzvvC5nreh7ivH5U; _ga_9Q8WZ8PMZM=GS1.1.1701447502.1.0.1701447502.60.0.0; _ga=GA1.1.913219656.1701447503
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Sat, 25 Nov 2023 07:35:22 GMT
content-type: image/jpeg
content-length: 11951
last-modified: Wed, 20 May 2020 00:18:35 GMT
etag: "5ec4775b-2eaf"
expires: Sat, 02 Dec 2023 07:35:22 GMT
cache-control: max-age=604800
accept-ranges: bytes
age: 549777
ddg-cache-status: HIT,HIT
X-Firefox-Spdy: h2
gnula.nu/wp-content/uploads/2014/08/powvideologo.jpg
200 OK 13 kB URL GET HTTP/2 gnula.nu/wp-content/uploads/2014/08/powvideologo.jpg
IP
Requested by https://gnula.nu/comedia/ver-spoiler-alert-2022-online/
Certificate IssuerLet's Encrypt
Subjectgnula.nu
FingerprintF0:71:98:32:BE:CF:19:29:10:5C:9C:E7:79:AB:E9:8F:53:2D:D1:DA
ValidityWed, 08 Nov 2023 10:13:46 GMT - Tue, 06 Feb 2024 10:13:45 GMT
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS5 Windows, datetime=2014:08:07 12:24:51], progressive, precision 8, 120x25, components 3\012- data
Hash b5a70ab6f979625d56428f38845b0585
722a725e9079675de26f4819a2ea355af5bcb365
a70828377c541df6d2f61b16bb705e200795a643816ee9eb5218d3c3cc4c10e3
GET /wp-content/uploads/2014/08/powvideologo.jpg HTTP/1.1
Host: gnula.nu
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: __ddg1_=7Q4TDzvvC5nreh7ivH5U; _ga_9Q8WZ8PMZM=GS1.1.1701447502.1.0.1701447502.60.0.0; _ga=GA1.1.913219656.1701447503
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Mon, 27 Nov 2023 21:47:57 GMT
content-type: image/jpeg
content-length: 12692
last-modified: Wed, 20 May 2020 00:18:36 GMT
cache-control: max-age=604800
accept-ranges: bytes
ddg-cache-status: HIT,HIT
etag: "5ec4775c-3194"
expires: Wed, 29 Nov 2023 18:11:35 GMT
age: 325821
X-Firefox-Spdy: h2
gnula.nu/wp-content/uploads/2014/03/teelogo.jpg
200 OK 1.9 kB URL GET HTTP/2 gnula.nu/wp-content/uploads/2014/03/teelogo.jpg
IP
Requested by https://gnula.nu/comedia/ver-spoiler-alert-2022-online/
Certificate IssuerLet's Encrypt
Subjectgnula.nu
FingerprintF0:71:98:32:BE:CF:19:29:10:5C:9C:E7:79:AB:E9:8F:53:2D:D1:DA
ValidityWed, 08 Nov 2023 10:13:46 GMT - Tue, 06 Feb 2024 10:13:45 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=2, software=Picasa], baseline, precision 8, 120x25, components 3\012- data
Hash 79aa34a85d291706678d412586288e69
a49e3d3f00afa76d8752f3ac354e5923516b87a9
f2542be2bbff5095b6a0458ffd7b9f81dbe35cbe4663d558af58b6fdd75311c8
GET /wp-content/uploads/2014/03/teelogo.jpg HTTP/1.1
Host: gnula.nu
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: __ddg1_=7Q4TDzvvC5nreh7ivH5U; _ga_9Q8WZ8PMZM=GS1.1.1701447502.1.0.1701447502.60.0.0; _ga=GA1.1.913219656.1701447503
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Wed, 29 Nov 2023 18:14:57 GMT
content-type: image/jpeg
content-length: 1869
last-modified: Wed, 20 May 2020 00:18:35 GMT
cache-control: max-age=604800
accept-ranges: bytes
ddg-cache-status: HIT,HIT
etag: "5ec4775b-74d"
expires: Sun, 03 Dec 2023 10:17:27 GMT
age: 165801
X-Firefox-Spdy: h2
gnula.nu/wp-content/uploads/2017/06/gamovideo_icono.jpg
200 OK 14 kB URL GET HTTP/2 gnula.nu/wp-content/uploads/2017/06/gamovideo_icono.jpg
IP
Requested by https://gnula.nu/comedia/ver-spoiler-alert-2022-online/
Certificate IssuerLet's Encrypt
Subjectgnula.nu
FingerprintF0:71:98:32:BE:CF:19:29:10:5C:9C:E7:79:AB:E9:8F:53:2D:D1:DA
ValidityWed, 08 Nov 2023 10:13:46 GMT - Tue, 06 Feb 2024 10:13:45 GMT
File type JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS4 Windows, datetime=2017:06:07 17:57:51], baseline, precision 8, 120x25, components 3\012- data
Hash 368314eb9d88014da04fb660c0f8c155
1665b31b4e3039c9657495585725a2d9adeb0c14
7277c9bee0db4345bd77929d5a58a76b068d4ca09e5f0434bbe2686d66d31f34
GET /wp-content/uploads/2017/06/gamovideo_icono.jpg HTTP/1.1
Host: gnula.nu
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: __ddg1_=7Q4TDzvvC5nreh7ivH5U; _ga_9Q8WZ8PMZM=GS1.1.1701447502.1.0.1701447502.60.0.0; _ga=GA1.1.913219656.1701447503
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Thu, 30 Nov 2023 08:34:14 GMT
content-type: image/jpeg
content-length: 13979
last-modified: Wed, 20 May 2020 00:18:23 GMT
cache-control: max-age=604800
accept-ranges: bytes
ddg-cache-status: HIT,HIT
etag: "5ec4774f-369b"
expires: Tue, 05 Dec 2023 13:44:18 GMT
age: 114245
X-Firefox-Spdy: h2
gnula.nu/wp-content/uploads/2014/11/uptoboxlogo.jpg
200 OK 15 kB URL GET HTTP/2 gnula.nu/wp-content/uploads/2014/11/uptoboxlogo.jpg
IP
Requested by https://gnula.nu/comedia/ver-spoiler-alert-2022-online/
Certificate IssuerLet's Encrypt
Subjectgnula.nu
FingerprintF0:71:98:32:BE:CF:19:29:10:5C:9C:E7:79:AB:E9:8F:53:2D:D1:DA
ValidityWed, 08 Nov 2023 10:13:46 GMT - Tue, 06 Feb 2024 10:13:45 GMT
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=3, software=Adobe Photoshop CS5 Windows, datetime=2014:11:09 16:09:18], baseline, precision 8, 120x25, components 3\012- data
Hash b1293684b940b0a121cd5fef371bf248
ef2f3785dfd4a95159c53981bf16e9dc620068e4
fef8a80115e0dc42784d442204536dc7085770193c4549ca7cb070ca69c4cb04
GET /wp-content/uploads/2014/11/uptoboxlogo.jpg HTTP/1.1
Host: gnula.nu
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: __ddg1_=7Q4TDzvvC5nreh7ivH5U; _ga_9Q8WZ8PMZM=GS1.1.1701447502.1.0.1701447502.60.0.0; _ga=GA1.1.913219656.1701447503
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Thu, 30 Nov 2023 21:45:46 GMT
content-type: image/jpeg
content-length: 14655
last-modified: Wed, 20 May 2020 00:18:34 GMT
etag: "5ec4775a-393f"
expires: Thu, 07 Dec 2023 21:45:46 GMT
cache-control: max-age=604800
accept-ranges: bytes
age: 66752
ddg-cache-status: MISS,HIT
X-Firefox-Spdy: h2
gnula.nu/wp-content/uploads/2019/06/megauplogo.jpg
12 kB URL gnula.nu/wp-content/uploads/2019/06/megauplogo.jpg
IP
File type JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS4 Windows, datetime=2019:06:02 16:48:41], progressive, precision 8, 120x25, components 3\012- data
Hash a14ae76cb7ee306d9cb718f2013e830b
4d14787508dd155cc1611ebeab2e2b3dcfe7501c
3ee7b4cd1674be322a5fe2febd863d99b0c8aa5bd2e6951e4146aa152d960e77
GET /wp-content/uploads/2019/06/megauplogo.jpg HTTP/1.1
Host: gnula.nu
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: __ddg1_=7Q4TDzvvC5nreh7ivH5U; _ga_9Q8WZ8PMZM=GS1.1.1701447502.1.0.1701447502.60.0.0; _ga=GA1.1.913219656.1701447503
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Thu, 30 Nov 2023 04:20:45 GMT
content-type: image/jpeg
content-length: 12131
last-modified: Wed, 20 May 2020 00:19:06 GMT
etag: "5ec4777a-2f63"
expires: Thu, 07 Dec 2023 04:20:45 GMT
cache-control: max-age=604800
accept-ranges: bytes
age: 129453
ddg-cache-status: HIT,HIT
X-Firefox-Spdy: h2
gnula.nu/wp-content/uploads/2019/11/videomegaco_logo.jpg
200 OK 11 kB URL GET HTTP/2 gnula.nu/wp-content/uploads/2019/11/videomegaco_logo.jpg
IP
Requested by https://gnula.nu/comedia/ver-spoiler-alert-2022-online/
Certificate IssuerLet's Encrypt
Subjectgnula.nu
FingerprintF0:71:98:32:BE:CF:19:29:10:5C:9C:E7:79:AB:E9:8F:53:2D:D1:DA
ValidityWed, 08 Nov 2023 10:13:46 GMT - Tue, 06 Feb 2024 10:13:45 GMT
File type JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS4 Windows, datetime=2019:11:25 19:55:07], progressive, precision 8, 125x25, components 3\012- data
Hash c10c13b84e2c56898508f89109fabe5d
416ef2a526936bcb13bc1ac727af1d98dbb2558e
c5b2fdad5d5864cb44010fb0a6c969f69015d665b980ee3f0cf1084b552d5826
GET /wp-content/uploads/2019/11/videomegaco_logo.jpg HTTP/1.1
Host: gnula.nu
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: __ddg1_=7Q4TDzvvC5nreh7ivH5U; _ga_9Q8WZ8PMZM=GS1.1.1701447502.1.0.1701447502.60.0.0; _ga=GA1.1.913219656.1701447503
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Wed, 29 Nov 2023 02:15:48 GMT
content-type: image/jpeg
content-length: 10755
last-modified: Wed, 20 May 2020 00:19:08 GMT
cache-control: max-age=604800
accept-ranges: bytes
etag: "5ec4777c-2a03"
expires: Wed, 06 Dec 2023 02:15:48 GMT
age: 223350
ddg-cache-status: HIT,HIT
X-Firefox-Spdy: h2
gnula.nu/wp-content/uploads/2019/11/cloudvideo_logo.jpg
200 OK 9.6 kB URL GET HTTP/2 gnula.nu/wp-content/uploads/2019/11/cloudvideo_logo.jpg
IP
Requested by https://gnula.nu/comedia/ver-spoiler-alert-2022-online/
Certificate IssuerLet's Encrypt
Subjectgnula.nu
FingerprintF0:71:98:32:BE:CF:19:29:10:5C:9C:E7:79:AB:E9:8F:53:2D:D1:DA
ValidityWed, 08 Nov 2023 10:13:46 GMT - Tue, 06 Feb 2024 10:13:45 GMT
File type JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS4 Windows, datetime=2019:11:25 19:47:39], progressive, precision 8, 125x25, components 3\012- data
Hash 078ee7add511921aaad902404dc08147
36fbab8b3058b92cb11385bcd6c95217248f8c0b
596ddbbe067998ce7c15318c8b0a378156279cb7c997cbe059db1950aed10df0
GET /wp-content/uploads/2019/11/cloudvideo_logo.jpg HTTP/1.1
Host: gnula.nu
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: __ddg1_=7Q4TDzvvC5nreh7ivH5U; _ga_9Q8WZ8PMZM=GS1.1.1701447502.1.0.1701447502.60.0.0; _ga=GA1.1.913219656.1701447503
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Tue, 28 Nov 2023 14:15:17 GMT
content-type: image/jpeg
content-length: 9590
last-modified: Wed, 20 May 2020 00:19:07 GMT
etag: "5ec4777b-2576"
expires: Tue, 05 Dec 2023 14:15:17 GMT
cache-control: max-age=604800
accept-ranges: bytes
age: 266581
ddg-cache-status: HIT,HIT
X-Firefox-Spdy: h2
gnula.nu/wp-content/uploads/2020/03/uqload_logo.jpg
15 kB URL gnula.nu/wp-content/uploads/2020/03/uqload_logo.jpg
IP
File type JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS4 Windows, datetime=2020:03:07 13:01:14], baseline, precision 8, 120x25, components 3\012- data
Hash 7beb152971f6f9115c327c085cdbe520
ecfe07c35553c0daba398516ed51f3ce07e82f74
d53f421a5d1022ea8dbffb2306aa8468b4bf407de4a3bea309d0f7f77fa018a2
GET /wp-content/uploads/2020/03/uqload_logo.jpg HTTP/1.1
Host: gnula.nu
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: __ddg1_=7Q4TDzvvC5nreh7ivH5U; _ga_9Q8WZ8PMZM=GS1.1.1701447502.1.0.1701447502.60.0.0; _ga=GA1.1.913219656.1701447503
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Tue, 28 Nov 2023 15:42:32 GMT
content-type: image/jpeg
content-length: 15193
last-modified: Wed, 20 May 2020 00:19:02 GMT
etag: "5ec47776-3b59"
expires: Tue, 05 Dec 2023 15:42:32 GMT
cache-control: max-age=604800
accept-ranges: bytes
age: 261346
ddg-cache-status: HIT,HIT
X-Firefox-Spdy: h2
gnula.nu/wp-content/uploads/2017/01/bdlogo.jpg
12 kB URL gnula.nu/wp-content/uploads/2017/01/bdlogo.jpg
IP
File type JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS4 Windows, datetime=2017:01:09 11:58:03], baseline, precision 8, 120x25, components 3\012- data
Hash 876185df288cfbe7ee8579c35a60a6e2
b5a2604e5773b34627d0a3d473615808893f5f1e
198156f44a96a645e67e8a0806d7aae7f1c6c1b927c20c6abe40f903d464f69f
GET /wp-content/uploads/2017/01/bdlogo.jpg HTTP/1.1
Host: gnula.nu
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: __ddg1_=7Q4TDzvvC5nreh7ivH5U; _ga_9Q8WZ8PMZM=GS1.1.1701447502.1.0.1701447502.60.0.0; _ga=GA1.1.913219656.1701447503
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Thu, 30 Nov 2023 11:30:04 GMT
content-type: image/jpeg
content-length: 12383
last-modified: Wed, 20 May 2020 00:18:27 GMT
cache-control: max-age=604800
accept-ranges: bytes
etag: "5ec47753-305f"
expires: Thu, 07 Dec 2023 11:30:04 GMT
age: 103695
ddg-cache-status: HIT,HIT
X-Firefox-Spdy: h2
gnula.nu/wp-content/uploads/2023/09/Barbie4.gif
200 OK 32 kB URL GET HTTP/2 gnula.nu/wp-content/uploads/2023/09/Barbie4.gif
IP
Requested by https://gnula.nu/comedia/ver-spoiler-alert-2022-online/
Certificate IssuerLet's Encrypt
Subjectgnula.nu
FingerprintF0:71:98:32:BE:CF:19:29:10:5C:9C:E7:79:AB:E9:8F:53:2D:D1:DA
ValidityWed, 08 Nov 2023 10:13:46 GMT - Tue, 06 Feb 2024 10:13:45 GMT
File type GIF image data, version 89a, 215 x 269\012- data
Hash 8602b93d7c0f78fcfeda8f1835402941
9c4a29a9bfd3f047a6707eac0da8646dd0f92257
13906d99c2cae25493b89d2748fc24af121161ee77c9968e9298ddc8ab8b4772
GET /wp-content/uploads/2023/09/Barbie4.gif HTTP/1.1
Host: gnula.nu
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: __ddg1_=7Q4TDzvvC5nreh7ivH5U; _ga_9Q8WZ8PMZM=GS1.1.1701447502.1.0.1701447502.60.0.0; _ga=GA1.1.913219656.1701447503
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Wed, 29 Nov 2023 14:21:44 GMT
content-type: image/gif
content-length: 31450
last-modified: Sun, 03 Sep 2023 19:43:25 GMT
cache-control: max-age=604800
accept-ranges: bytes
ddg-cache-status: HIT,HIT
etag: "64f4e1dd-7ada"
expires: Sun, 03 Dec 2023 16:18:16 GMT
age: 179794
X-Firefox-Spdy: h2
apis.google.com/u/0/se/0/_/+1/fastbutton?usegapi=1&size=medium&origin=https%3A%2F%2Fgnula.nu&url=https%3A%2F%2Fgnula.nu%2Fcomedia%2Fver-spoiler-alert-2022-online%2F&gsrc=3p&ic=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.coKrc9A11Ng.O%2Fd%3D1%2Frs%3DAHpOoo_J8xjByIzBlcB6zLaAkxsUwdPdIw%2Fm%3D__features__
226 B URL apis.google.com/u/0/se/0/_/+1/fastbutton?usegapi=1&size=medium&origin=https%3A%2F%2Fgnula.nu&url=https%3A%2F%2Fgnula.nu%2Fcomedia%2Fver-spoiler-alert-2022-online%2F&gsrc=3p&ic=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.coKrc9A11Ng.O%2Fd%3D1%2Frs%3DAHpOoo_J8xjByIzBlcB6zLaAkxsUwdPdIw%2Fm%3D__features__
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF, LF line terminators
Hash 4df07581948280a6e769a24c5d99d775
843a2c95362347eb8894a6acb607f139be65ded4
3561b93a48d81fac116ccd6e60163bd382abb1d594c81240f5718feb1f197f73
GET /u/0/se/0/_/+1/fastbutton?usegapi=1&size=medium&origin=https%3A%2F%2Fgnula.nu&url=https%3A%2F%2Fgnula.nu%2Fcomedia%2Fver-spoiler-alert-2022-online%2F&gsrc=3p&ic=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.coKrc9A11Ng.O%2Fd%3D1%2Frs%3DAHpOoo_J8xjByIzBlcB6zLaAkxsUwdPdIw%2Fm%3D__features__ HTTP/1.1
Host: apis.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gnula.nu/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 301 Moved Permanently
location: http://developers.google.com/
cross-origin-resource-policy: cross-origin
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
date: Fri, 01 Dec 2023 16:18:18 GMT
expires: Fri, 01 Dec 2023 16:48:18 GMT
cache-control: public, max-age=1800
server: sffe
content-length: 226
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
region1.analytics.google.com/g/collect?v=2&tid=G-9Q8WZ8PMZM&_ono=1>m=45je3bt0v9124937025&_p=1701447501696&_gaz=1&gcd=11l1l1l1l1&dma_cps=sypham&dma=1&cid=913219656.1701447503&ul=en-us&sr=1280x1024&ir=1&_eu=EAAI&_s=1&sid=1701447502&sct=1&seg=0&dl=https%3A%2F%2Fgnula.nu%2Fcomedia%2Fver-spoiler-alert-2022-online%2F&dt=Ver%20Spoiler%20Alert%20(2022)%20online&en=page_view&_fv=1&_nsi=1&_ss=1&tfd=1763
0 B URL region1.analytics.google.com/g/collect?v=2&tid=G-9Q8WZ8PMZM&_ono=1>m=45je3bt0v9124937025&_p=1701447501696&_gaz=1&gcd=11l1l1l1l1&dma_cps=sypham&dma=1&cid=913219656.1701447503&ul=en-us&sr=1280x1024&ir=1&_eu=EAAI&_s=1&sid=1701447502&sct=1&seg=0&dl=https%3A%2F%2Fgnula.nu%2Fcomedia%2Fver-spoiler-alert-2022-online%2F&dt=Ver%20Spoiler%20Alert%20(2022)%20online&en=page_view&_fv=1&_nsi=1&_ss=1&tfd=1763
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-9Q8WZ8PMZM&_ono=1>m=45je3bt0v9124937025&_p=1701447501696&_gaz=1&gcd=11l1l1l1l1&dma_cps=sypham&dma=1&cid=913219656.1701447503&ul=en-us&sr=1280x1024&ir=1&_eu=EAAI&_s=1&sid=1701447502&sct=1&seg=0&dl=https%3A%2F%2Fgnula.nu%2Fcomedia%2Fver-spoiler-alert-2022-online%2F&dt=Ver%20Spoiler%20Alert%20(2022)%20online&en=page_view&_fv=1&_nsi=1&_ss=1&tfd=1763 HTTP/1.1
Host: region1.analytics.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://gnula.nu
DNT: 1
Connection: keep-alive
Referer: https://gnula.nu/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://gnula.nu
date: Fri, 01 Dec 2023 16:18:18 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ok.ru/videoembed/6827666639475
200 OK 78 kB URL GET HTTP/2 ok.ru/videoembed/6827666639475
IP
Requested by https://gnula.nu/comedia/ver-spoiler-alert-2022-online/
Certificate IssuerGlobalSign nv-sa
Subject*.ok.ru
Fingerprint66:20:81:B9:D0:20:96:BF:13:93:E6:76:FF:C4:19:BD:F6:29:0E:A3
ValidityWed, 04 Oct 2023 08:36:03 GMT - Wed, 02 Oct 2024 09:21:02 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (62876)
Hash ba2c9326a11fd19a0d1117bce008de82
be22945190f887a0ade48d33b9bc898b009802d6
4872ca72fbb096a87a8662df1f5330ecadb3ad5a6d37a8a9348a3c05871d5eee
GET /videoembed/6827666639475 HTTP/1.1
Host: ok.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: apache
date: Fri, 01 Dec 2023 16:18:18 GMT
content-type: text/html;charset=UTF-8
vary: Accept-Encoding
set-cookie: bci=5442078296516314073; Domain=.ok.ru; Expires=Wed, 19 Dec 2091 19:32:25 GMT; Path=/; Secure; HttpOnly
_statid=45685cef-955f-4f89-9e99-30e7aebac12b; Domain=.ok.ru; Expires=Wed, 19 Dec 2091 19:32:25 GMT; Path=/; Secure; HttpOnly
__last_online=1701447498174; Expires=Wed, 19 Dec 2091 19:32:25 GMT; Path=/; Secure
content-security-policy: default-src data: 'self' 'unsafe-inline' 'unsafe-eval' ok.ru *.ok.ru odnoklassniki.ru *.odnoklassniki.ru mycdn.me http://*.mycdn.me https://*.mycdn.me wss://ad.mail.ru *.mail.ru *.imgsmail.ru *.mradx.net *.serving-sys.com *.googleapis.com *.gstatic.com www.google.com https://api-maps.yandex.ru yastatic.net yandex.st *.doubleverify.com *.adsafeprotected.com https://consentmanager.mgr.consensu.org https://cdn.consentmanager.mgr.consensu.org https://football.sportmail.ru *.google.ru *.google.com *.googlesyndication.com *.yandex.ru blob:; script-src 'unsafe-inline' 'unsafe-eval' *.mail.ru https://*.mail.ru *.imgsmail.ru *.mradx.net ok.ru *.ok.ru odnoklassniki.ru *.odnoklassniki.ru mycdn.me http://*.mycdn.me https://*.mycdn.me mc.yandex.ru an.yandex.ru yastatic.net yandex.st *.google-analytics.com api-maps.yandex.ru https://api-maps.yandex.ru https://clck.yandex.ru *.googleapis.com *.gstatic.com www.google.com www.youtube.com https://www.youtube.com *.ytimg.com https://*.ytimg.com *.doubleverify.com *.dvtps.com *.doubleclick.net *.googletagservices.com *.googlesyndication.com *.googleadservices.com *.goodgame.ru https://*.goodgame.ru https://*.moatads.com *.adlooxtracking.com *.adlooxtracking.ru *.adsafeprotected.com *.serving-sys.com *.serving-sys.ru *.weborama.fr *.weborama-tech.ru https://enterprise.api-maps.yandex.ru https://suggest-maps.yandex.ru https://*.hit.gemius.pl https://consentmanager.mgr.consensu.org https://cdn.consentmanager.mgr.consensu.org https://gum.criteo.com https://football.sportmail.ru *.googletagmanager.com connect.facebook.net *.google.ru *.google.com *.googlesyndication.com yandex.ru; worker-src blob: 'self'; connect-src * wss: blob: data:; font-src * data: blob:; frame-src * blob: 'self'; img-src * data: blob: about:; media-src * data: blob:; object-src *; report-uri /csp/report;
content-security-policy-report-only: default-src data: blob: about: 'self' 'unsafe-inline' 'unsafe-eval' https: wss:; report-uri /csp/report?always;
last-modified: Sat, 30 Sep 2023 13:06:30 GMT
cache-control: no-cache, no-store
pragma: no-cache
expires: Mon, 26 Jul 1997 05:00:00 GMT
content-encoding: br
X-Firefox-Spdy: h2
apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.coKrc9A11Ng.O/m=auth/exm=plusone/rt=j/sv=1/d=1/ed=1/rs=AHpOoo_J8xjByIzBlcB6zLaAkxsUwdPdIw/cb=gapi.loaded_1?le=scs
34 kB URL apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.coKrc9A11Ng.O/m=auth/exm=plusone/rt=j/sv=1/d=1/ed=1/rs=AHpOoo_J8xjByIzBlcB6zLaAkxsUwdPdIw/cb=gapi.loaded_1?le=scs
IP
File type ASCII text, with very long lines (1586)
Hash e0fbc84518a1bab9c8bad9f76463d338
ecce9ef563bc5170ebcfcfd35e0dd5b17bc0b874
d99dd3891be0d37edbcc13fdaad780f164a758be5d0c8a71f66596e6cda04f70
GET /_/scs/abc-static/_/js/k=gapi.lb.en.coKrc9A11Ng.O/m=auth/exm=plusone/rt=j/sv=1/d=1/ed=1/rs=AHpOoo_J8xjByIzBlcB6zLaAkxsUwdPdIw/cb=gapi.loaded_1?le=scs HTTP/1.1
Host: apis.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gnula.nu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/social-frontend-mpm-access
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="social-frontend-mpm-access"
report-to: {"group":"social-frontend-mpm-access","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/social-frontend-mpm-access"}]}
content-length: 34324
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 05:23:52 GMT
expires: Fri, 29 Nov 2024 05:23:52 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 08 Nov 2023 22:37:21 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 125666
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
hqq.to/player/embed_player.php?vid=Jrrfq5trRPSh&autoplay=no
46 kB URL hqq.to/player/embed_player.php?vid=Jrrfq5trRPSh&autoplay=no
IP
ASN #262254 DDOS-GUARD CORP.
File type gzip compressed data, from Unix\012- data
Hash f2d5144fda59e7a77a2ebadbe9ff97d7
632f555e2458157e4d4f4c88c31b669c94659e1d
c9d783ca12c31fb960717c906ccedaa61a86efc15e3d84e6d3ce787b79d7ec6e
GET /player/embed_player.php?vid=Jrrfq5trRPSh&autoplay=no HTTP/1.1
Host: hqq.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 01 Dec 2023 16:18:18 GMT
content-type: text/html; charset=utf-8
vary: Accept-Encoding
x-robots-tag: 'none, noindex, nofollow, noarchive, nosnippet, noodp, notranslate, noimageindex'
x-content-type-options: nosniff
x-xss-protection: 1; mode=block;
p3p: policyref="http://www.example.com/w3c/p3p.xml", CP="CURa ADMa DEVa CONo HISa OUR IND DSP ALL COR"
link: <//hqq.to>; rel=preconnect; crossorigin, <//global.stun.twilio.com>; rel=dns-prefetch; crossorigin, <//counter.yadro.ru>; rel=preconnect; crossorigin, <//imasdk.googleapis.com>; rel=preconnect; crossorigin, <//stun2.l.google.com>; rel=dns-prefetch; crossorigin, <//unpkg.com>; rel=preconnect; crossorigin, <//mc.yandex.ru>; rel=preconnect; crossorigin, <//cdn.jsdelivr.net>; rel=preconnect; crossorigin, <//wss.commentsmodule.com>; rel=dns-prefetch; crossorigin, <//www.gstatic.com>; rel=preconnect; crossorigin, <//imasdk.googleapis.com>; rel=preconnect; crossorigin, <//storage.googleapis.com>; rel=preconnect; crossorigin, <//www.google.com>; rel=preconnect; crossorigin,<//a.labadena.com>; rel=preconnect; crossorigin, <//deliver.vkcdnservice.com>; rel=preconnect; crossorigin,<//vkcdnservice.appspot.com.storage.googleapis.com>; rel=preconnect; crossorigin, <//www.google.com>; rel=preconnect; crossorigin, <//www.recaptcha.net>; rel=preconnect; crossorigin, <//cdnjs.cloudflare.com>; rel=preconnect; crossorigin
pragma: no-cache
x-origin-location: player
cache-control: no-store, no-cache, must-revalidate, max-age=0, post-check=0, pre-check=0
content-encoding: gzip
server: Google Frontend
x-cache-status-inferno: MISS
x-inferno-location: player
x-inferno-limit-req: PASSED
X-Firefox-Spdy: h2
ok.ru/res/js/classic_801c7059.js
200 OK 12 kB URL GET HTTP/2 ok.ru/res/js/classic_801c7059.js
IP
Requested by https://ok.ru/videoembed/6827677059699
Certificate IssuerGlobalSign nv-sa
Subject*.ok.ru
Fingerprint66:20:81:B9:D0:20:96:BF:13:93:E6:76:FF:C4:19:BD:F6:29:0E:A3
ValidityWed, 04 Oct 2023 08:36:03 GMT - Wed, 02 Oct 2024 09:21:02 GMT
File type ASCII text, with very long lines (43048)
Hash 5e144bfd8a7ee9647db47238a38a4c82
8e5bc4c12ddd01450f36937660b2ca0fba55ca4b
9b0f3bd097e68cbc152122d282c34a6942d4cd553e60070fea5dde01727200f3
GET /res/js/classic_801c7059.js HTTP/1.1
Host: ok.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://ok.ru/videoembed/6827656153715
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: apache
date: Fri, 01 Dec 2023 16:18:18 GMT
content-type: application/javascript
content-length: 11986
last-modified: Wed, 29 Nov 2023 10:02:00 GMT
vary: Accept-Encoding
content-encoding: br
expires: Sat, 30 Nov 2024 16:18:18 GMT
cache-control: max-age=31536000
timing-allow-origin: *
X-Firefox-Spdy: h2
ok.ru/res/js/lib/require-2.1.11_9483d567.js
200 OK 5.8 kB URL GET HTTP/2 ok.ru/res/js/lib/require-2.1.11_9483d567.js
IP
Requested by https://ok.ru/videoembed/6827666639475
Certificate IssuerGlobalSign nv-sa
Subject*.ok.ru
Fingerprint66:20:81:B9:D0:20:96:BF:13:93:E6:76:FF:C4:19:BD:F6:29:0E:A3
ValidityWed, 04 Oct 2023 08:36:03 GMT - Wed, 02 Oct 2024 09:21:02 GMT
File type ASCII text, with very long lines (16739)
Hash a3b7b498db7bb3a7223ed7d511025184
2c7a1293ea511961443d5a45dc5932cfc2531501
9987c2582b2c41478c45c53d971bd797ac1a7f1e3c253aecc6f9f1975212ec90
GET /res/js/lib/require-2.1.11_9483d567.js HTTP/1.1
Host: ok.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://ok.ru/videoembed/6827666639475
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: apache
date: Fri, 01 Dec 2023 16:18:18 GMT
content-type: application/javascript
content-length: 5786
last-modified: Wed, 29 Nov 2023 10:02:00 GMT
vary: Accept-Encoding
content-encoding: br
expires: Sat, 30 Nov 2024 16:18:18 GMT
cache-control: max-age=31536000
timing-allow-origin: *
X-Firefox-Spdy: h2
ok.ru/res/js/classic_801c7059.js
200 OK 12 kB URL GET HTTP/2 ok.ru/res/js/classic_801c7059.js
IP
Requested by https://ok.ru/videoembed/6827677059699
Certificate IssuerGlobalSign nv-sa
Subject*.ok.ru
Fingerprint66:20:81:B9:D0:20:96:BF:13:93:E6:76:FF:C4:19:BD:F6:29:0E:A3
ValidityWed, 04 Oct 2023 08:36:03 GMT - Wed, 02 Oct 2024 09:21:02 GMT
File type ASCII text, with very long lines (43048)
Hash 5e144bfd8a7ee9647db47238a38a4c82
8e5bc4c12ddd01450f36937660b2ca0fba55ca4b
9b0f3bd097e68cbc152122d282c34a6942d4cd553e60070fea5dde01727200f3
GET /res/js/classic_801c7059.js HTTP/1.1
Host: ok.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://ok.ru/videoembed/6827666639475
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: apache
date: Fri, 01 Dec 2023 16:18:18 GMT
content-type: application/javascript
content-length: 11986
last-modified: Wed, 29 Nov 2023 10:02:00 GMT
vary: Accept-Encoding
content-encoding: br
expires: Sat, 30 Nov 2024 16:18:18 GMT
cache-control: max-age=31536000
timing-allow-origin: *
X-Firefox-Spdy: h2
youradexchange.com/ut/hb.php?cb=0.48157500944144427&v=1
0 B URL youradexchange.com/ut/hb.php?cb=0.48157500944144427&v=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /ut/hb.php?cb=0.48157500944144427&v=1 HTTP/1.1
Host: youradexchange.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain; charset=utf-8
Content-Length: 1306
Origin: https://gnula.nu
DNT: 1
Connection: keep-alive
Referer: https://gnula.nu/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
date: Fri, 01 Dec 2023 16:18:18 GMT
access-control-allow-origin: *
via: 1.1 google
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Scvv%2BBFRjUmlypITriclGVIaon9%2FA9xoUmkBWCM9E%2FskOlBIM7WdU5DADhdZ7sNP0HopbniFCtdvV1Jft3GKlqnsColWhypU8biLp23qAI58nw7FKWmLjUfwqOCWsHepYTeCyLs%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82eca5329a0b6394-LHR
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
hqq.to/ad/top/popunder.js
200 OK 21 B URL GET HTTP/2 hqq.to/ad/top/popunder.js
IP
ASN #262254 DDOS-GUARD CORP.
Requested by https://hqq.to/player/embed_player.php?vid=N6WTXDJGcpAT&autoplay=no
Certificate IssuerSectigo Limited
Subject*.hqq.to
Fingerprint3A:33:0A:E7:38:7D:10:B0:C1:D8:33:9C:C7:D0:F0:B0:9B:06:02:A0
ValidityThu, 23 Mar 2023 00:00:00 GMT - Sat, 23 Mar 2024 23:59:59 GMT
File type ASCII text, with no line terminators
Hash 533a813ddb8f84d7e018bf8e6296c44d
8c95af23d5dc502f1bc3395a6d2e339e696c0d3e
a499068cf858aa2cd9b077e2e354b6bf8435eaa8e44c2047f403c7283031977f
GET /ad/top/popunder.js HTTP/1.1
Host: hqq.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hqq.to/player/embed_player.php?vid=TtgN5uxDI5uf&autoplay=no
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 01 Dec 2023 16:18:18 GMT
content-type: application/javascript; charset=UTF-8
content-length: 21
last-modified: Wed, 15 Sep 2021 14:06:22 GMT
etag: "6141fdde-15"
access-control-allow-origin: *
access-control-allow-credentials: true
accessing-static: 1
cache-control: public, max-age=31536000, stale-while-revalidate=30, stale-if-error=30
pragma: cache
server: Google Frontend
x-cache-status-inferno-s: HIT
x-inferno-location: static
accept-ranges: bytes
X-Firefox-Spdy: h2
hqq.to/ad/top/popunder.js
200 OK 21 B URL GET HTTP/2 hqq.to/ad/top/popunder.js
IP
ASN #262254 DDOS-GUARD CORP.
Requested by https://hqq.to/player/embed_player.php?vid=N6WTXDJGcpAT&autoplay=no
Certificate IssuerSectigo Limited
Subject*.hqq.to
Fingerprint3A:33:0A:E7:38:7D:10:B0:C1:D8:33:9C:C7:D0:F0:B0:9B:06:02:A0
ValidityThu, 23 Mar 2023 00:00:00 GMT - Sat, 23 Mar 2024 23:59:59 GMT
File type ASCII text, with no line terminators
Hash 533a813ddb8f84d7e018bf8e6296c44d
8c95af23d5dc502f1bc3395a6d2e339e696c0d3e
a499068cf858aa2cd9b077e2e354b6bf8435eaa8e44c2047f403c7283031977f
GET /ad/top/popunder.js HTTP/1.1
Host: hqq.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hqq.to/player/embed_player.php?vid=Jrrfq5trRPSh&autoplay=no
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 01 Dec 2023 16:18:19 GMT
content-type: application/javascript; charset=UTF-8
content-length: 21
last-modified: Wed, 15 Sep 2021 14:06:22 GMT
etag: "6141fdde-15"
access-control-allow-origin: *
access-control-allow-credentials: true
accessing-static: 1
cache-control: public, max-age=31536000, stale-while-revalidate=30, stale-if-error=30
pragma: cache
server: Google Frontend
x-cache-status-inferno-s: HIT
x-inferno-location: static
accept-ranges: bytes
X-Firefox-Spdy: h2
ok.ru/res/js/lib/require-2.1.11_9483d567.js
200 OK 5.8 kB URL GET HTTP/2 ok.ru/res/js/lib/require-2.1.11_9483d567.js
IP
Requested by https://ok.ru/videoembed/6827666639475
Certificate IssuerGlobalSign nv-sa
Subject*.ok.ru
Fingerprint66:20:81:B9:D0:20:96:BF:13:93:E6:76:FF:C4:19:BD:F6:29:0E:A3
ValidityWed, 04 Oct 2023 08:36:03 GMT - Wed, 02 Oct 2024 09:21:02 GMT
File type ASCII text, with very long lines (16739)
Hash a3b7b498db7bb3a7223ed7d511025184
2c7a1293ea511961443d5a45dc5932cfc2531501
9987c2582b2c41478c45c53d971bd797ac1a7f1e3c253aecc6f9f1975212ec90
GET /res/js/lib/require-2.1.11_9483d567.js HTTP/1.1
Host: ok.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://ok.ru/videoembed/6827677059699
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: apache
date: Fri, 01 Dec 2023 16:18:19 GMT
content-type: application/javascript
content-length: 5786
last-modified: Wed, 29 Nov 2023 10:02:00 GMT
vary: Accept-Encoding
content-encoding: br
expires: Sat, 30 Nov 2024 16:18:19 GMT
cache-control: max-age=31536000
timing-allow-origin: *
X-Firefox-Spdy: h2
ok.ru/res/js/classic_801c7059.js
200 OK 12 kB URL GET HTTP/2 ok.ru/res/js/classic_801c7059.js
IP
Requested by https://ok.ru/videoembed/6827677059699
Certificate IssuerGlobalSign nv-sa
Subject*.ok.ru
Fingerprint66:20:81:B9:D0:20:96:BF:13:93:E6:76:FF:C4:19:BD:F6:29:0E:A3
ValidityWed, 04 Oct 2023 08:36:03 GMT - Wed, 02 Oct 2024 09:21:02 GMT
File type ASCII text, with very long lines (43048)
Hash 5e144bfd8a7ee9647db47238a38a4c82
8e5bc4c12ddd01450f36937660b2ca0fba55ca4b
9b0f3bd097e68cbc152122d282c34a6942d4cd553e60070fea5dde01727200f3
GET /res/js/classic_801c7059.js HTTP/1.1
Host: ok.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://ok.ru/videoembed/6827677059699
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: apache
date: Fri, 01 Dec 2023 16:18:19 GMT
content-type: application/javascript
content-length: 11986
last-modified: Wed, 29 Nov 2023 10:02:00 GMT
vary: Accept-Encoding
content-encoding: br
expires: Sat, 30 Nov 2024 16:18:19 GMT
cache-control: max-age=31536000
timing-allow-origin: *
X-Firefox-Spdy: h2
youradexchange.com/script/push.php?r=6887678&ipp=1&mads=2&position=top&atv=38.3&cbpage=https%3A%2F%2Fgnula.nu%2Fcomedia%2Fver-spoiler-alert-2022-online%2F&cbref=&srs=ba217163011a234a8228ff668a453a7a
200 OK 1.9 kB URL GET HTTP/2 youradexchange.com/script/push.php?r=6887678&ipp=1&mads=2&position=top&atv=38.3&cbpage=https%3A%2F%2Fgnula.nu%2Fcomedia%2Fver-spoiler-alert-2022-online%2F&cbref=&srs=ba217163011a234a8228ff668a453a7a
IP
Requested by https://gnula.nu/comedia/ver-spoiler-alert-2022-online/
Certificate IssuerGoogle Trust Services LLC
Subjectyouradexchange.com
FingerprintFD:52:FD:E8:62:0A:DE:66:86:28:19:39:64:21:57:5C:CB:8A:59:D9
ValidityTue, 17 Oct 2023 07:21:58 GMT - Mon, 15 Jan 2024 07:21:57 GMT
File type JSON data\012- , ASCII text, with very long lines (1813)
Hash c23054de881044f1e73d236cc77dc0b7
a05545a6828ff1e746a4a17dfb82fc406ab30b75
1eeb7e56e4549a124c06a47a11ebc9a288fae0b06a4ea419fec8c7e4402d2602
GET /script/push.php?r=6887678&ipp=1&mads=2&position=top&atv=38.3&cbpage=https%3A%2F%2Fgnula.nu%2Fcomedia%2Fver-spoiler-alert-2022-online%2F&cbref=&srs=ba217163011a234a8228ff668a453a7a HTTP/1.1
Host: youradexchange.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://gnula.nu/
Origin: https://gnula.nu
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 01 Dec 2023 16:18:18 GMT
content-type: application/json; charset=utf-8
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: GET, POST, OPTIONS
via: 1.1 google
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=d3Q3dLv%2BXH7UiNmGSO0ZXTaVKhS7nPo2Cy%2BjAaApdbCkeSFRgjJHGBEFFWvhEHtrKu79ZMbWdQyGRqVKkWPTrGojiiKZNv5MulgjDeWMRq%2F%2FSbyvfaWNsLw%2FzxbKpScK3vYz9gU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82eca5320d8363d7-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
www.google.com/cse/static/images/1x/es/branding.png
1.4 kB URL www.google.com/cse/static/images/1x/es/branding.png
IP
File type PNG image data, 132 x 15, 8-bit/color RGBA, non-interlaced\012- data
Hash 5cde6b1e2022536bb6bad42206b592e6
d5f8b090cdf01d307543e4adc439c5b450725ef6
6034e5ee0510f90b538cb59205702151396dda15fc431432b7fc95e4ecde8886
GET /cse/static/images/1x/es/branding.png HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gnula.nu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/prose-team
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="prose-team"
report-to: {"group":"prose-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/prose-team"}]}
content-length: 1404
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 04:55:01 GMT
expires: Fri, 29 Nov 2024 04:55:01 GMT
cache-control: public, max-age=31536000
age: 127398
last-modified: Mon, 25 May 2020 08:30:00 GMT
content-type: image/png
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&_ono=1&tid=G-9Q8WZ8PMZM&cid=913219656.1701447503>m=45je3bt0v9124937025&aip=1&dma=1&dma_cps=sypham&gcd=11l1l1l1l1&z=1346070022
42 B URL www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&_ono=1&tid=G-9Q8WZ8PMZM&cid=913219656.1701447503>m=45je3bt0v9124937025&aip=1&dma=1&dma_cps=sypham&gcd=11l1l1l1l1&z=1346070022
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&_ono=1&tid=G-9Q8WZ8PMZM&cid=913219656.1701447503>m=45je3bt0v9124937025&aip=1&dma=1&dma_cps=sypham&gcd=11l1l1l1l1&z=1346070022 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gnula.nu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 01 Dec 2023 16:18:19 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
hqq.to/js/video.jquery_plugs/modernizr.js?12
200 OK 1.6 kB URL GET HTTP/2 hqq.to/js/video.jquery_plugs/modernizr.js?12
IP
ASN #262254 DDOS-GUARD CORP.
Requested by https://hqq.to/player/embed_player.php?vid=Jrrfq5trRPSh&autoplay=no
Certificate IssuerSectigo Limited
Subject*.hqq.to
Fingerprint3A:33:0A:E7:38:7D:10:B0:C1:D8:33:9C:C7:D0:F0:B0:9B:06:02:A0
ValidityThu, 23 Mar 2023 00:00:00 GMT - Sat, 23 Mar 2024 23:59:59 GMT
File type gzip compressed data, from Unix\012- data
Hash 23660c2241d8e3db1eea3a4afe99c503
c30181620be904cbe5ebfe86de532f83d338b255
45a6041444f69d79b0aac44a9a8e77d4e2d24f8241f41605e6ab2d392b635123
GET /js/video.jquery_plugs/modernizr.js?12 HTTP/1.1
Host: hqq.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hqq.to/player/embed_player.php?vid=Jrrfq5trRPSh&autoplay=no
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 01 Dec 2023 16:18:18 GMT
content-type: application/javascript; charset=UTF-8
vary: Accept-Encoding
last-modified: Sun, 03 Jun 2018 17:19:35 GMT
etag: W/"5b142327-4cb"
access-control-allow-origin: *
access-control-allow-credentials: true
accessing-static: 1
cache-control: public, max-age=31536000, stale-while-revalidate=30, stale-if-error=30
pragma: cache
content-encoding: gzip
server: Google Frontend
x-cache-status-inferno-s: HIT
x-inferno-location: static
X-Firefox-Spdy: h2
ok.ru/videoembed/6827656153715
23 kB URL ok.ru/videoembed/6827656153715
IP
Certificate IssuerGlobalSign nv-sa
Subject*.ok.ru
Fingerprint66:20:81:B9:D0:20:96:BF:13:93:E6:76:FF:C4:19:BD:F6:29:0E:A3
ValidityWed, 04 Oct 2023 08:36:03 GMT - Wed, 02 Oct 2024 09:21:02 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (62856)
Hash 52d1f3c45e31973ff1dd522736618ad5
e2a932c6e4b8a961fb6637da5e1835ddb55769c9
446fc892939893ba991e14f9e4962e8309ae07a8d631d73277f8c38d13af88e3
GET /videoembed/6827656153715 HTTP/1.1
Host: ok.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: apache
date: Fri, 01 Dec 2023 16:18:18 GMT
content-type: text/html;charset=UTF-8
vary: Accept-Encoding
set-cookie: bci=-5553714216843912029; Domain=.ok.ru; Expires=Wed, 19 Dec 2091 19:32:25 GMT; Path=/; Secure; HttpOnly
_statid=ef2a0e7c-4164-452e-ba0c-8490dca87145; Domain=.ok.ru; Expires=Wed, 19 Dec 2091 19:32:25 GMT; Path=/; Secure; HttpOnly
__last_online=1701447498157; Expires=Wed, 19 Dec 2091 19:32:25 GMT; Path=/; Secure
content-security-policy: default-src data: 'self' 'unsafe-inline' 'unsafe-eval' ok.ru *.ok.ru odnoklassniki.ru *.odnoklassniki.ru mycdn.me http://*.mycdn.me https://*.mycdn.me wss://ad.mail.ru *.mail.ru *.imgsmail.ru *.mradx.net *.serving-sys.com *.googleapis.com *.gstatic.com www.google.com https://api-maps.yandex.ru yastatic.net yandex.st *.doubleverify.com *.adsafeprotected.com https://consentmanager.mgr.consensu.org https://cdn.consentmanager.mgr.consensu.org https://football.sportmail.ru *.google.ru *.google.com *.googlesyndication.com *.yandex.ru blob:; script-src 'unsafe-inline' 'unsafe-eval' *.mail.ru https://*.mail.ru *.imgsmail.ru *.mradx.net ok.ru *.ok.ru odnoklassniki.ru *.odnoklassniki.ru mycdn.me http://*.mycdn.me https://*.mycdn.me mc.yandex.ru an.yandex.ru yastatic.net yandex.st *.google-analytics.com api-maps.yandex.ru https://api-maps.yandex.ru https://clck.yandex.ru *.googleapis.com *.gstatic.com www.google.com www.youtube.com https://www.youtube.com *.ytimg.com https://*.ytimg.com *.doubleverify.com *.dvtps.com *.doubleclick.net *.googletagservices.com *.googlesyndication.com *.googleadservices.com *.goodgame.ru https://*.goodgame.ru https://*.moatads.com *.adlooxtracking.com *.adlooxtracking.ru *.adsafeprotected.com *.serving-sys.com *.serving-sys.ru *.weborama.fr *.weborama-tech.ru https://enterprise.api-maps.yandex.ru https://suggest-maps.yandex.ru https://*.hit.gemius.pl https://consentmanager.mgr.consensu.org https://cdn.consentmanager.mgr.consensu.org https://gum.criteo.com https://football.sportmail.ru *.googletagmanager.com connect.facebook.net *.google.ru *.google.com *.googlesyndication.com yandex.ru; worker-src blob: 'self'; connect-src * wss: blob: data:; font-src * data: blob:; frame-src * blob: 'self'; img-src * data: blob: about:; media-src * data: blob:; object-src *; report-uri /csp/report;
content-security-policy-report-only: default-src data: blob: about: 'self' 'unsafe-inline' 'unsafe-eval' https: wss:; report-uri /csp/report?always;
last-modified: Sat, 07 Oct 2023 12:43:33 GMT
cache-control: no-cache, no-store
pragma: no-cache
expires: Mon, 26 Jul 1997 05:00:00 GMT
content-encoding: br
X-Firefox-Spdy: h2
voe.sx/e/4pbc0k91o9jh
1.6 kB IP
ASN #262254 DDOS-GUARD CORP.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash d7dd27db008b95a253cb0ab725203fa4
4701f28309ddf0c7bf46d6efed4933f699f566f4
7780bf1cf4ca792863efc4a6afd229f6ad4fcb32cd6a20a5189e337f09234c54
GET /e/4pbc0k91o9jh HTTP/1.1
Host: voe.sx
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gnula.nu/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
server: ddos-guard
strict-transport-security: max-age=31536000
content-security-policy: upgrade-insecure-requests;
content-type: text/html; charset=UTF-8
cache-control: no-cache, private
date: Fri, 01 Dec 2023 16:18:18 GMT
location: https://troyyourlead.com/e/4pbc0k91o9jh
set-cookie: __ddg1_=AhiyJKmsh5ARIHs65ukK; Domain=.voe.sx; HttpOnly; Path=/; Expires=Sat, 30-Nov-2024 16:18:18 GMT
XSRF-TOKEN=eyJpdiI6IlVRSTFyMFRqTVBPejV3OHVkVGZJZWc9PSIsInZhbHVlIjoiM001ZlJvaHlWbXE3bnE2bUdyWGROSFZmYW1QQkppaC82VHYvbktrcjRFb09pSVZLWXNzV0xuWnBZTlcreTFLeWlUMjErRFU3SmhlbzR1ZFBwdVFZd25ndGdydmRxZSttdGJUYVh4YldMWFlGYjk4WWtlbjZPL1A2RDFQTXlMZkgiLCJtYWMiOiI1NjdlYjgzZDRmMTQzZmU1Y2JmZTc4ZDNjZThlODJiMDc1ZTM0MmQxOTFlMWI2NmQ2NzA0MTQ2N2NjYjkxMjY5IiwidGFnIjoiIn0%3D; expires=Fri, 01 Dec 2023 17:48:18 GMT; Max-Age=5400; path=/; secure; samesite=none
voe_session=eyJpdiI6IitlRmVlT1FWVFRRcmI3ZXNUUm0wQ0E9PSIsInZhbHVlIjoia0JKT3J2ZVE5N0diSU9rbDY1azNJeE9JMTRFUHY2UVlTU2hIbGdsVkp2RzA1UHVORml2RFhvQWF3cGdoeUZLZWZWODJOelIycFFjMk5XTU1yUk9hdzJ0eFU5dm1sdEpkdFhXUHZnWGs2SUtobk1VVmtvWFVSa0M1R1F6NWsycjQiLCJtYWMiOiJlYjlmMWYzNjNhYzEwODZjN2NlMmNlODdmMjQyN2M2ZmQwNGRlNzZiNDY5N2Q1ODk0NjNjOWZhNzI0ZTI2ZDhkIiwidGFnIjoiIn0%3D; expires=Fri, 01 Dec 2023 17:48:18 GMT; Max-Age=5400; path=/; secure; httponly; samesite=none
content-encoding: br
vary: Accept-Encoding
X-Firefox-Spdy: h2
st.mycdn.me/res/css/prod/videoembed/videoembed.9f06c2f1.css
200 OK 3.2 kB URL GET HTTP/2 st.mycdn.me/res/css/prod/videoembed/videoembed.9f06c2f1.css
IP
Requested by https://ok.ru/videoembed/6827656153715
Certificate IssuerGlobalSign nv-sa
Subject*.mycdn.me
Fingerprint2E:0D:A0:C3:73:22:EE:41:29:80:7E:43:6C:5C:5D:00:00:D5:2B:4C
ValidityFri, 11 Aug 2023 04:51:21 GMT - Wed, 11 Sep 2024 04:51:20 GMT
File type ASCII text, with very long lines (15831), with no line terminators
Hash 9f06c2f19e517b712b7dba8f051e480e
3e6a269e1faea4fb1ce80218a4c4d6a906022f06
6a6b080c0346d82cb2547b91a0b465cb7adae9c66258ab00d2bb30f7f128f8f9
GET /res/css/prod/videoembed/videoembed.9f06c2f1.css HTTP/1.1
Host: st.mycdn.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ok.ru/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: apache
date: Fri, 01 Dec 2023 16:18:19 GMT
content-type: text/css; charset=utf-8
content-length: 3193
last-modified: Wed, 29 Nov 2023 15:03:33 GMT
vary: Accept-Encoding
content-encoding: br
expires: Sat, 30 Nov 2024 16:18:19 GMT
cache-control: max-age=31536000
access-control-allow-origin: *
timing-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
youradexchange.com/script/i.php?t=1&stamat=m%257C%252C%252CQ3Eu4jMyoGU3B0-GH0dEdHP3xP.2a2%252Cfcc_UolaL95DEQfgrhYvssFaXKiZvIa-O_0YpTSdGaGcFonD79dgS_3t34NwjmsQoOx_ELILFj4oHLbbCGSrv2SXenorw_7jt1l0OpYrWsTvMegWgLCwME5ppGAfuFvlikV10hFNQe8-nT9tH-4-sIlTksqTQUyq0nmRVuw-hDjntqz65ik-MV_jf5iGJAHKbRKoQQlsDsYQe-OZtG8IMx-xbVW1gDz50oF_PS4-Qw758Frhe9GbqfPuoPDarKHNhrG-r3BrqMao4GpFTajzrcOUN94OrGe36bUvMhIkv3Ls_GIOBxOJJuI8Hgt-GtcYU6YBuuW4NtftnGneiKbez_XPTZpwKzKJEG9KpUuJrE5IrqZN4G-tFoLPgKfpxphJjAurMTF8e37HS14EvMtT8ZJV3Fnqs3bqFgoxK5iKYzRQPvdUHm9EmaTTrIctIyCzIdDlIFJMPH2O5H66s4rdm2Jzj_-KQhvrXFk65SqISt6VzFjyUDUkK72B0WJnpxVVi8Lezbo7lWcuUpIx-h1hT3wSRs_xgvxCoITkTmdi8LwGiwYUHS-u-Goy8YBJRKl68opxY4z6s-lLqHCt3yeLHp496nhNrCRdYPZbwJOxyCI%252C&utsid=ba217163011a234a8228ff668a453a7a&cbpage=https%3A%2F%2Fgnula.nu%2Fcomedia%2Fver-spoiler-alert-2022-online%2F&cbref=
204 No Content 0 B URL GET HTTP/3 youradexchange.com/script/i.php?t=1&stamat=m%257C%252C%252CQ3Eu4jMyoGU3B0-GH0dEdHP3xP.2a2%252Cfcc_UolaL95DEQfgrhYvssFaXKiZvIa-O_0YpTSdGaGcFonD79dgS_3t34NwjmsQoOx_ELILFj4oHLbbCGSrv2SXenorw_7jt1l0OpYrWsTvMegWgLCwME5ppGAfuFvlikV10hFNQe8-nT9tH-4-sIlTksqTQUyq0nmRVuw-hDjntqz65ik-MV_jf5iGJAHKbRKoQQlsDsYQe-OZtG8IMx-xbVW1gDz50oF_PS4-Qw758Frhe9GbqfPuoPDarKHNhrG-r3BrqMao4GpFTajzrcOUN94OrGe36bUvMhIkv3Ls_GIOBxOJJuI8Hgt-GtcYU6YBuuW4NtftnGneiKbez_XPTZpwKzKJEG9KpUuJrE5IrqZN4G-tFoLPgKfpxphJjAurMTF8e37HS14EvMtT8ZJV3Fnqs3bqFgoxK5iKYzRQPvdUHm9EmaTTrIctIyCzIdDlIFJMPH2O5H66s4rdm2Jzj_-KQhvrXFk65SqISt6VzFjyUDUkK72B0WJnpxVVi8Lezbo7lWcuUpIx-h1hT3wSRs_xgvxCoITkTmdi8LwGiwYUHS-u-Goy8YBJRKl68opxY4z6s-lLqHCt3yeLHp496nhNrCRdYPZbwJOxyCI%252C&utsid=ba217163011a234a8228ff668a453a7a&cbpage=https%3A%2F%2Fgnula.nu%2Fcomedia%2Fver-spoiler-alert-2022-online%2F&cbref=
IP
Requested by https://gnula.nu/comedia/ver-spoiler-alert-2022-online/
Certificate IssuerGoogle Trust Services LLC
Subjectyouradexchange.com
FingerprintFD:52:FD:E8:62:0A:DE:66:86:28:19:39:64:21:57:5C:CB:8A:59:D9
ValidityTue, 17 Oct 2023 07:21:58 GMT - Mon, 15 Jan 2024 07:21:57 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /script/i.php?t=1&stamat=m%257C%252C%252CQ3Eu4jMyoGU3B0-GH0dEdHP3xP.2a2%252Cfcc_UolaL95DEQfgrhYvssFaXKiZvIa-O_0YpTSdGaGcFonD79dgS_3t34NwjmsQoOx_ELILFj4oHLbbCGSrv2SXenorw_7jt1l0OpYrWsTvMegWgLCwME5ppGAfuFvlikV10hFNQe8-nT9tH-4-sIlTksqTQUyq0nmRVuw-hDjntqz65ik-MV_jf5iGJAHKbRKoQQlsDsYQe-OZtG8IMx-xbVW1gDz50oF_PS4-Qw758Frhe9GbqfPuoPDarKHNhrG-r3BrqMao4GpFTajzrcOUN94OrGe36bUvMhIkv3Ls_GIOBxOJJuI8Hgt-GtcYU6YBuuW4NtftnGneiKbez_XPTZpwKzKJEG9KpUuJrE5IrqZN4G-tFoLPgKfpxphJjAurMTF8e37HS14EvMtT8ZJV3Fnqs3bqFgoxK5iKYzRQPvdUHm9EmaTTrIctIyCzIdDlIFJMPH2O5H66s4rdm2Jzj_-KQhvrXFk65SqISt6VzFjyUDUkK72B0WJnpxVVi8Lezbo7lWcuUpIx-h1hT3wSRs_xgvxCoITkTmdi8LwGiwYUHS-u-Goy8YBJRKl68opxY4z6s-lLqHCt3yeLHp496nhNrCRdYPZbwJOxyCI%252C&utsid=ba217163011a234a8228ff668a453a7a&cbpage=https%3A%2F%2Fgnula.nu%2Fcomedia%2Fver-spoiler-alert-2022-online%2F&cbref= HTTP/1.1
Host: youradexchange.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gnula.nu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 204 No Content
date: Fri, 01 Dec 2023 16:18:19 GMT
access-control-allow-origin: *
via: 1.1 google
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=evTe8kzn6oJAxiYfq%2B34AP80RcyL4ScOK1H1goaa9SjLcpdQLP%2Bgy2Cox3TayCDOxqrNRomLSqUtJJykUz0msR66n0i9nWTHQ9vu%2FN4Rw082zELY73bkrdFn94JeGnIDWKySoDI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82eca5374e78887d-LHR
alt-svc: h3=":443"; ma=86400
acacdn.com/script/ut.js?cb=1701447502595
200 OK 99 kB URL GET HTTP/3 acacdn.com/script/ut.js?cb=1701447502595
IP
Requested by https://gnula.nu/comedia/ver-spoiler-alert-2022-online/
Certificate IssuerGoogle Trust Services LLC
Subjectacacdn.com
FingerprintA9:D8:CB:62:27:75:7B:F9:8D:A4:41:1D:37:D3:0B:52:45:40:83:EC
ValidityMon, 06 Nov 2023 04:04:26 GMT - Sun, 04 Feb 2024 04:04:25 GMT
File type Unicode text, UTF-8 text, with very long lines (65444)
Hash 8524ed50555070834018d14c28e292e5
8c7c3a057a4b58695f2367bdf828a82dfbf360e7
9720389cce25ec1cab24bdd9f5cf52654dbe8f80335d66b59655bc30c46760cc
GET /script/ut.js?cb=1701447502595 HTTP/1.1
Host: acacdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gnula.nu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 01 Dec 2023 16:18:17 GMT
content-type: text/javascript
x-guploader-uploadid: ABPtcPoMxnjoTECm23fSTshPvm-N8Uf2eh1psYScOlZgSQ-5WbSKIR2CPpTXXBPzLMrJAw5ibGUZIX9tLRcoawTw1pfvllmHqQhJ
x-goog-generation: 1701078201797678
x-goog-metageneration: 2
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 82099
x-goog-hash: crc32c=GKpGKQ==, md5=hSTtUFVQcINAGNFMKOKS5Q==
x-goog-storage-class: MULTI_REGIONAL
access-control-allow-origin: *
expires: Fri, 01 Dec 2023 16:31:50 GMT
cache-control: public, max-age=14400
age: 259
last-modified: Mon, 27 Nov 2023 09:43:21 GMT
etag: W/"8524ed50555070834018d14c28e292e5"
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=xrvPBPm%2BosnNlWxA9n9duwJaN0ASM5XPwtkanAZ6jbszZ5gqU%2FNGOTKrAlRig%2FVfssX5kM65BA%2FCny%2Ft%2BVOaCyNGyN9AOsUIFwf8y661cfcsF3Aje%2FzTnr9bFkgY"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82eca52d5991568b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
i.mycdn.me/videoPreview?id=5494078114419&type=37&idx=9&tkn=ipAKPafTwDLb81VCObF18vnOJCA&fn=external_8
70 kB URL i.mycdn.me/videoPreview?id=5494078114419&type=37&idx=9&tkn=ipAKPafTwDLb81VCObF18vnOJCA&fn=external_8
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 720x405, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 7f849bdf5de058bfe5dbe281387be089
887a1215707becb63a67eca053020107fbd9e9e4
7ab963bd52d14eafca773a2de8248fa1d09511069467d982a1173cd238bb0050
GET /videoPreview?id=5494078114419&type=37&idx=9&tkn=ipAKPafTwDLb81VCObF18vnOJCA&fn=external_8 HTTP/1.1
Host: i.mycdn.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ok.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: apache
date: Fri, 01 Dec 2023 16:18:19 GMT
content-type: image/webp
content-length: 70512
accept-ranges: bytes
last-modified: Mon, 02 Oct 2023 16:18:19 GMT
cache-control: private, max-age=100000000
expires: Tue, 27 Aug 2024 16:18:19 GMT
etag: "686897696a7c876b7e"
timing-allow-origin: *
access-control-allow-origin: *
x-ok-image: ?1
X-Firefox-Spdy: h2
unpkg.com/progressbar.js@1.1.0/dist/progressbar.min.js
200 OK 8.8 kB URL GET HTTP/2 unpkg.com/progressbar.js@1.1.0/dist/progressbar.min.js
IP
Requested by https://hqq.to/player/embed_player.php?vid=Jrrfq5trRPSh&autoplay=no
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintF7:B6:41:CA:15:FD:D1:0C:27:39:55:5D:C5:CE:3F:1C:A6:BB:9D:6F
ValidityTue, 02 May 2023 00:00:00 GMT - Wed, 01 May 2024 23:59:59 GMT
File type ASCII text, with very long lines (29325)
Hash 013916ab61482481d8de9742a0f95bee
546bb742502faa36f8c2bb954c2f028187660404
73cdea3ea0691f9ac4150be0c937dc2ee7eaa10205168a84e41ef5c9e05784b7
GET /progressbar.js@1.1.0/dist/progressbar.min.js HTTP/1.1
Host: unpkg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hqq.to/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 01 Dec 2023 16:18:19 GMT
content-type: application/javascript; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=31536000
last-modified: Sat, 26 Oct 1985 08:15:00 GMT
etag: W/"7315-VGu3QlAvqjb4wruVTC8CgYdmBAQ"
via: 1.1 fly.io
fly-request-id: 01HFTT9KCTZ41V3VWBXBAR6DX1-arn
cf-cache-status: HIT
age: 814198
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 82eca536499956b5-OSL
content-encoding: br
X-Firefox-Spdy: h2
commentsmodule.com/js/js.load.1.js?3291597114140557
200 OK 0 B URL GET HTTP/2 commentsmodule.com/js/js.load.1.js?3291597114140557
IP
Requested by https://hqq.to/player/embed_player.php?vid=TtgN5uxDI5uf&autoplay=no
Certificate IssuerGoogle Trust Services LLC
Subjectcommentsmodule.com
FingerprintFB:D4:66:A8:AE:18:5F:8C:FE:B0:5E:D5:8D:88:CA:1B:63:0A:16:67
ValidityThu, 12 Oct 2023 20:21:07 GMT - Wed, 10 Jan 2024 20:21:06 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /js/js.load.1.js?3291597114140557 HTTP/1.1
Host: commentsmodule.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://hqq.to/
Origin: https://hqq.to
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 01 Dec 2023 16:18:19 GMT
content-type: application/javascript; charset=UTF-8
content-length: 0
last-modified: Thu, 14 Apr 2022 12:20:52 GMT
etag: "625811a4-0"
access-control-allow-credentials: true
accessing-static: 1
cache-control: public, max-age=31536000, stale-while-revalidate=30, stale-if-error=30
pragma: cache
x-cache-status-inferno-s: HIT
x-inferno-location: static
cf-cache-status: HIT
age: 729021
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=hQ85QzYGsWxlbCP0tDsul8HuifIwlWK%2Bni7lN4yL7LAUHemmk4F9cQRgvVzB7Uevim1NBPaFyJ2FtdRgLSR4ooa1iQR0msc2AAxGgAnzHafe%2BCXFwSAU3ShZaHOw7koBHcAL6g8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
access-control-allow-origin: *
server: cloudflare
cf-ray: 82eca53a9a4556c7-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
i.mycdn.me/videoPreview?id=5494097513075&type=37&idx=9&tkn=6--J39Ons0gD3Ph_Go5AvbFVfzI&fn=external_8
200 OK 70 kB URL GET HTTP/2 i.mycdn.me/videoPreview?id=5494097513075&type=37&idx=9&tkn=6--J39Ons0gD3Ph_Go5AvbFVfzI&fn=external_8
IP
Requested by https://ok.ru/videoembed/6827677059699
Certificate IssuerGlobalSign nv-sa
Subject*.mycdn.me
Fingerprint2C:0D:42:85:CB:0F:CD:B4:CA:EB:41:5D:9E:4D:ED:2C:B5:0B:7C:E3
ValidityWed, 29 Mar 2023 13:11:03 GMT - Mon, 29 Apr 2024 13:11:02 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 720x405, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash ae6dd38065411e6f7e8f0505c0172463
54b152f4e0ad9ed8800e893fd60fba3c47911038
c305d9893a9edface0981e038e732941e1bc299ace238c558be1b9f96da871a7
GET /videoPreview?id=5494097513075&type=37&idx=9&tkn=6--J39Ons0gD3Ph_Go5AvbFVfzI&fn=external_8 HTTP/1.1
Host: i.mycdn.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ok.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: apache
date: Fri, 01 Dec 2023 16:18:19 GMT
content-type: image/webp
content-length: 70540
accept-ranges: bytes
last-modified: Mon, 02 Oct 2023 16:18:19 GMT
cache-control: private, max-age=100000000
expires: Tue, 27 Aug 2024 16:18:19 GMT
etag: "686897696a7c876b7e"
timing-allow-origin: *
access-control-allow-origin: *
x-ok-image: ?1
X-Firefox-Spdy: h2
gnula.nu/wp-content/uploads/2015/06/natsu_incono_gnula.jpg
2.8 kB URL gnula.nu/wp-content/uploads/2015/06/natsu_incono_gnula.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 59x45, components 3\012- data
Hash 00a0e9802138dd13d3433dc8a8892dc5
27f4b2b80e9fc682d63953d08ef14457dd8ae6ac
ad0ebb72ed8394e48ffaf5ef59244ccfe0f5af7a43df06fd7061b068f4a91df2
GET /wp-content/uploads/2015/06/natsu_incono_gnula.jpg HTTP/1.1
Host: gnula.nu
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: __ddg1_=7Q4TDzvvC5nreh7ivH5U; _ga_9Q8WZ8PMZM=GS1.1.1701447502.1.0.1701447502.60.0.0; _ga=GA1.1.913219656.1701447503
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Mon, 27 Nov 2023 17:10:37 GMT
content-type: image/jpeg
content-length: 2761
last-modified: Wed, 20 May 2020 00:19:16 GMT
cache-control: max-age=604800
accept-ranges: bytes
ddg-cache-status: HIT,HIT
etag: "5ec47784-ac9"
expires: Sun, 03 Dec 2023 13:06:34 GMT
age: 342463
X-Firefox-Spdy: h2
troyyourlead.com/s/css/site.min.css?fafb53e0462d00eec7ff40f80d0df8c5
36 kB URL troyyourlead.com/s/css/site.min.css?fafb53e0462d00eec7ff40f80d0df8c5
IP
ASN #262254 DDOS-GUARD CORP.
File type Unicode text, UTF-8 (with BOM) text, with very long lines (65268)
Hash 6f13352bb7b91f7e573ac01911905ce3
1e82bb82120cf4b20010b47ac4488f363df2dcb8
8657d45a86fadbc46a66bac9764412cda645996ff534e2b3600ae64ed902b2c9
GET /s/css/site.min.css?fafb53e0462d00eec7ff40f80d0df8c5 HTTP/1.1
Host: troyyourlead.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://troyyourlead.com/e/p4atwal5k7ib
Cookie: XSRF-TOKEN=eyJpdiI6IlZ5bmcrZkdFVTM2UEgxYWRCQXp4OFE9PSIsInZhbHVlIjoiRUdSOEZqSGJteDFpdyt4UFl5ajB3TnZLOTF0RXpTMkQ0d0QrK05wVWRRRS9BMHEwVmpsblRySGRlUkJ3aXV6T2NVMjNpZDZoazFpejJ4MVEzNHZGdFkzaEUrSmd5cEJGZlJRcDRkQlpoYThZRTQ1dlB6R0VEc3RXRjg1Zk55bkwiLCJtYWMiOiI1NjRjYmE0ZWJlYjVmMmJjZTE4MjI0Yjc3YjgxYjIyZDdiMDI4YTYwZGUxY2Q3N2I3ZjFhMTk1NjA1NDUyYTk2IiwidGFnIjoiIn0%3D; voe_session=eyJpdiI6Ikl1ZEJPRWs2dzJ3V1VacTlUNG9RRWc9PSIsInZhbHVlIjoiNEg4K3ROMS9aNTgycmt0R1JUMmMxajRvdDE5QW9KZDJxV1FaRUlvZnBybEtyM0czS3ZxaEZ4WVZkM29jVjdvdGlicXFMTGlTQk9FbGgrRWI1SHhZT1pqWnE5RGJTcHpXYjRWU0JtUlEwV1p1OVdyclRTTFZJSWNJVGIzVnIyT3ciLCJtYWMiOiJiMDFhNzg1ZDEwOTRiMzllYTgzMjYwNTJmNzQxNWIzMTgzZWQzMjg4ZDViODNkMTY3NzNjNmU5MmE0NTJkZmJjIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: ddos-guard
strict-transport-security: max-age=2628000
content-security-policy: upgrade-insecure-requests;
set-cookie: __ddg1_=aQITirNAKg7ApzQj8Rb6; Domain=.troyyourlead.com; HttpOnly; Path=/; Expires=Sat, 30-Nov-2024 16:18:20 GMT
date: Fri, 24 Nov 2023 16:36:46 GMT
content-type: text/css
last-modified: Mon, 18 Sep 2023 23:23:24 GMT
vary: Accept-Encoding
etag: W/"6508dbec-42b3d"
expires: Sun, 24 Dec 2023 16:36:46 GMT
cache-control: max-age=2592000
content-encoding: br
age: 603695
content-length: 36454
ddg-cache-status: HIT
X-Firefox-Spdy: h2
troyyourlead.com/s/js/site.min.js?fafb53e0462d00eec7ff40f80d0df8c5
200 OK 23 kB URL GET HTTP/2 troyyourlead.com/s/js/site.min.js?fafb53e0462d00eec7ff40f80d0df8c5
IP
ASN #262254 DDOS-GUARD CORP.
Requested by https://troyyourlead.com/e/ymc7djflb6aw
Certificate IssuerLet's Encrypt
Subjecttroyyourlead.com
Fingerprint6B:7D:62:88:DA:D4:8D:82:59:3E:7F:32:8B:5E:E6:EE:08:8C:98:00
ValidityFri, 24 Nov 2023 15:34:59 GMT - Thu, 22 Feb 2024 15:34:58 GMT
File type Unicode text, UTF-8 text, with very long lines (65532), with no line terminators
Hash 57d25796443dc28be0f5d51a63e1d343
14b4a02dd5094a0e4dc0c89b297a6cc2d78f60a9
abd04059670970a996fe18184e02712bd1120a66e1ae186ee4a330f677594855
GET /s/js/site.min.js?fafb53e0462d00eec7ff40f80d0df8c5 HTTP/1.1
Host: troyyourlead.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://troyyourlead.com/e/p4atwal5k7ib
Cookie: XSRF-TOKEN=eyJpdiI6IlZ5bmcrZkdFVTM2UEgxYWRCQXp4OFE9PSIsInZhbHVlIjoiRUdSOEZqSGJteDFpdyt4UFl5ajB3TnZLOTF0RXpTMkQ0d0QrK05wVWRRRS9BMHEwVmpsblRySGRlUkJ3aXV6T2NVMjNpZDZoazFpejJ4MVEzNHZGdFkzaEUrSmd5cEJGZlJRcDRkQlpoYThZRTQ1dlB6R0VEc3RXRjg1Zk55bkwiLCJtYWMiOiI1NjRjYmE0ZWJlYjVmMmJjZTE4MjI0Yjc3YjgxYjIyZDdiMDI4YTYwZGUxY2Q3N2I3ZjFhMTk1NjA1NDUyYTk2IiwidGFnIjoiIn0%3D; voe_session=eyJpdiI6Ikl1ZEJPRWs2dzJ3V1VacTlUNG9RRWc9PSIsInZhbHVlIjoiNEg4K3ROMS9aNTgycmt0R1JUMmMxajRvdDE5QW9KZDJxV1FaRUlvZnBybEtyM0czS3ZxaEZ4WVZkM29jVjdvdGlicXFMTGlTQk9FbGgrRWI1SHhZT1pqWnE5RGJTcHpXYjRWU0JtUlEwV1p1OVdyclRTTFZJSWNJVGIzVnIyT3ciLCJtYWMiOiJiMDFhNzg1ZDEwOTRiMzllYTgzMjYwNTJmNzQxNWIzMTgzZWQzMjg4ZDViODNkMTY3NzNjNmU5MmE0NTJkZmJjIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: ddos-guard
strict-transport-security: max-age=2628000
content-security-policy: upgrade-insecure-requests;
set-cookie: __ddg1_=PwVOmD1aMBS3mYMDorSc; Domain=.troyyourlead.com; HttpOnly; Path=/; Expires=Sat, 30-Nov-2024 16:18:20 GMT
date: Fri, 24 Nov 2023 16:36:47 GMT
content-type: application/javascript
last-modified: Mon, 18 Sep 2023 23:23:22 GMT
etag: W/"6508dbea-181d2"
expires: Sun, 24 Dec 2023 16:36:47 GMT
cache-control: max-age=2592000
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
age: 603694
content-length: 22588
ddg-cache-status: HIT
X-Firefox-Spdy: h2
cdnjs.cloudflare.com/ajax/libs/jquery/3.7.1/jquery.min.js
200 OK 27 kB URL GET HTTP/2 cdnjs.cloudflare.com/ajax/libs/jquery/3.7.1/jquery.min.js
IP
Requested by https://troyyourlead.com/e/4pbc0k91o9jh
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D
ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT
File type ASCII text, with very long lines (65447)
Hash 2c872dbe60f4ba70fb85356113d8b35e
ee48592d1fff952fcf06ce0b666ed4785493afdc
fc9a93dd241f6b045cbff0481cf4e1901becd0e12fb45166a8f17f95823f0b1a
GET /ajax/libs/jquery/3.7.1/jquery.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://troyyourlead.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 01 Dec 2023 16:18:20 GMT
content-type: application/javascript; charset=utf-8
content-length: 27446
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "64ed75bb-6b36"
last-modified: Tue, 29 Aug 2023 04:36:11 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 394946
expires: Wed, 20 Nov 2024 16:18:20 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2FYn66zp09rYM1Zhtt3xK4sAuIOJSIhMUYqcg9TRM%2B6vTBhtA8fH0IJ5MCqX%2FUMD8vnUPN4%2FM5xC4nxsf3EdetCWtKg3A8qxtcpCd92Uga3Y6uMUZbVAAZIDz2MFVlb7ovRMuhHJq"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 82eca53c4ea01c06-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
hqq.to/js/d_check.js?35
200 OK 22 kB IP
ASN #262254 DDOS-GUARD CORP.
Requested by https://hqq.to/player/embed_player.php?vid=Jrrfq5trRPSh&autoplay=no
Certificate IssuerSectigo Limited
Subject*.hqq.to
Fingerprint3A:33:0A:E7:38:7D:10:B0:C1:D8:33:9C:C7:D0:F0:B0:9B:06:02:A0
ValidityThu, 23 Mar 2023 00:00:00 GMT - Sat, 23 Mar 2024 23:59:59 GMT
File type gzip compressed data, from Unix\012- data
Hash a3c6ce8947ac03448f72d6e8cbae29c1
d83097b193a4a07d87dfbfd17721b88d947471c9
56d127d0fca0cca7d7e39350f27a62b16f1fff69c8b1158c9e32d1d97789f72d
GET /js/d_check.js?35 HTTP/1.1
Host: hqq.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hqq.to/player/embed_player.php?vid=TtgN5uxDI5uf&autoplay=no
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 01 Dec 2023 16:18:18 GMT
content-type: application/javascript; charset=UTF-8
vary: Accept-Encoding
last-modified: Sun, 01 Oct 2023 06:10:30 GMT
etag: W/"65190d56-d80"
access-control-allow-origin: *
access-control-allow-credentials: true
accessing-static: 1
cache-control: public, max-age=31536000, stale-while-revalidate=30, stale-if-error=30
pragma: cache
content-encoding: gzip
server: Google Frontend
x-cache-status-inferno-s: HIT
x-inferno-location: static
X-Firefox-Spdy: h2
cdnjs.cloudflare.com/ajax/libs/jquery/3.7.1/jquery.min.js
200 OK 27 kB URL GET HTTP/2 cdnjs.cloudflare.com/ajax/libs/jquery/3.7.1/jquery.min.js
IP
Requested by https://troyyourlead.com/e/4pbc0k91o9jh
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D
ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT
File type ASCII text, with very long lines (65447)
Hash 2c872dbe60f4ba70fb85356113d8b35e
ee48592d1fff952fcf06ce0b666ed4785493afdc
fc9a93dd241f6b045cbff0481cf4e1901becd0e12fb45166a8f17f95823f0b1a
GET /ajax/libs/jquery/3.7.1/jquery.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://troyyourlead.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 01 Dec 2023 16:18:20 GMT
content-type: application/javascript; charset=utf-8
content-length: 27446
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "64ed75bb-6b36"
last-modified: Tue, 29 Aug 2023 04:36:11 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 394946
expires: Wed, 20 Nov 2024 16:18:20 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=TzdX7PNsJLQb88bRCRn5dDwBKnZHB1pxRk5WXn9Vr%2BMAaWv4iHXzXZvx9jNCMMUgzB4lsuDF%2F7jPI8BS5J25O1fO7jrqgmu1wJhEJvxpgJJbo4bDAXjyqOxZUcsufrc3%2BjOnE%2Fby"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 82eca53c5ea51c06-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
cdnjs.cloudflare.com/ajax/libs/simplebar/6.2.5/simplebar.min.js
200 OK 6.2 kB URL GET HTTP/2 cdnjs.cloudflare.com/ajax/libs/simplebar/6.2.5/simplebar.min.js
IP
Requested by https://troyyourlead.com/e/4pbc0k91o9jh
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D
ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT
File type ASCII text, with very long lines (26884)
Hash 4cbf4903e55851c81ff41f4c0a06ff25
fb7bdff45145bb9a81ecca8a265c6e8393ec226e
c95620ba4204d07af1f58e3cc5b90bc725ca896ccde5998195ca54c9939f8416
GET /ajax/libs/simplebar/6.2.5/simplebar.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://troyyourlead.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 01 Dec 2023 16:18:20 GMT
content-type: application/javascript; charset=utf-8
content-length: 6248
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "64c94e26-1868"
last-modified: Tue, 01 Aug 2023 18:25:42 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 636264
expires: Wed, 20 Nov 2024 16:18:20 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=9Z56ZbkjWCDLcZRf7tBhaygRKDh2YDjwnlkkCpOzTgpUeP5r0UEI60FKksZy1E9yCPGlBdoYuB8HerssTscDKO9eDSZdeEBnEH7gFQDCU5FZfbkiEgv3yzvj49OpQtTARZAH3dub"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 82eca53c5ea61c06-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
cdnjs.cloudflare.com/ajax/libs/hls.js/1.2.7/hls.min.js
200 OK 83 kB URL GET HTTP/2 cdnjs.cloudflare.com/ajax/libs/hls.js/1.2.7/hls.min.js
IP
Requested by https://troyyourlead.com/e/p4atwal5k7ib
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D
ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Hash 1e59b3a541bcfa025fdda12cbbaa9f6e
b04d134373a70c5c2c536e0246b99dabdde8db9d
88fa861d6c2d711a4a0e9c186234ab06f7e0f77b7bda6da22ae50eae6c892570
GET /ajax/libs/hls.js/1.2.7/hls.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://troyyourlead.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 01 Dec 2023 16:18:20 GMT
content-type: application/javascript; charset=utf-8
content-length: 82604
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "636ff6bc-142ac"
last-modified: Sat, 12 Nov 2022 19:40:44 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 722992
expires: Wed, 20 Nov 2024 16:18:20 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=95gFOwgbwtnO0NLwiTyurmhE6kM8GeRM5BTBqlIsiGj4o7qf2sqI0BkiWhBl9GFbYdDa97XC9p1qb3fNNvfsaO%2FAB9lydOx1UF20eO%2F%2BfDyKyIYsZ5gxqzGsaIV%2B6enP3dRk1EUX"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 82eca53c5ea71c06-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
troyyourlead.com/s/js/site.min.js?fafb53e0462d00eec7ff40f80d0df8c5
200 OK 23 kB URL GET HTTP/2 troyyourlead.com/s/js/site.min.js?fafb53e0462d00eec7ff40f80d0df8c5
IP
ASN #262254 DDOS-GUARD CORP.
Requested by https://troyyourlead.com/e/ymc7djflb6aw
Certificate IssuerLet's Encrypt
Subjecttroyyourlead.com
Fingerprint6B:7D:62:88:DA:D4:8D:82:59:3E:7F:32:8B:5E:E6:EE:08:8C:98:00
ValidityFri, 24 Nov 2023 15:34:59 GMT - Thu, 22 Feb 2024 15:34:58 GMT
File type Unicode text, UTF-8 text, with very long lines (65532), with no line terminators
Hash 57d25796443dc28be0f5d51a63e1d343
14b4a02dd5094a0e4dc0c89b297a6cc2d78f60a9
abd04059670970a996fe18184e02712bd1120a66e1ae186ee4a330f677594855
GET /s/js/site.min.js?fafb53e0462d00eec7ff40f80d0df8c5 HTTP/1.1
Host: troyyourlead.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://troyyourlead.com/e/4pbc0k91o9jh
Cookie: XSRF-TOKEN=eyJpdiI6IlZ5bmcrZkdFVTM2UEgxYWRCQXp4OFE9PSIsInZhbHVlIjoiRUdSOEZqSGJteDFpdyt4UFl5ajB3TnZLOTF0RXpTMkQ0d0QrK05wVWRRRS9BMHEwVmpsblRySGRlUkJ3aXV6T2NVMjNpZDZoazFpejJ4MVEzNHZGdFkzaEUrSmd5cEJGZlJRcDRkQlpoYThZRTQ1dlB6R0VEc3RXRjg1Zk55bkwiLCJtYWMiOiI1NjRjYmE0ZWJlYjVmMmJjZTE4MjI0Yjc3YjgxYjIyZDdiMDI4YTYwZGUxY2Q3N2I3ZjFhMTk1NjA1NDUyYTk2IiwidGFnIjoiIn0%3D; voe_session=eyJpdiI6Ikl1ZEJPRWs2dzJ3V1VacTlUNG9RRWc9PSIsInZhbHVlIjoiNEg4K3ROMS9aNTgycmt0R1JUMmMxajRvdDE5QW9KZDJxV1FaRUlvZnBybEtyM0czS3ZxaEZ4WVZkM29jVjdvdGlicXFMTGlTQk9FbGgrRWI1SHhZT1pqWnE5RGJTcHpXYjRWU0JtUlEwV1p1OVdyclRTTFZJSWNJVGIzVnIyT3ciLCJtYWMiOiJiMDFhNzg1ZDEwOTRiMzllYTgzMjYwNTJmNzQxNWIzMTgzZWQzMjg4ZDViODNkMTY3NzNjNmU5MmE0NTJkZmJjIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: ddos-guard
strict-transport-security: max-age=2628000
content-security-policy: upgrade-insecure-requests;
set-cookie: __ddg1_=R1ySeO9rGBV0dumUA80m; Domain=.troyyourlead.com; HttpOnly; Path=/; Expires=Sat, 30-Nov-2024 16:18:20 GMT
date: Fri, 24 Nov 2023 16:36:47 GMT
content-type: application/javascript
last-modified: Mon, 18 Sep 2023 23:23:22 GMT
etag: W/"6508dbea-181d2"
expires: Sun, 24 Dec 2023 16:36:47 GMT
cache-control: max-age=2592000
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
age: 603694
content-length: 22588
ddg-cache-status: HIT
X-Firefox-Spdy: h2
hqq.to/js/websocket_ip.min.js
200 OK 1.5 kB URL GET HTTP/2 hqq.to/js/websocket_ip.min.js
IP
ASN #262254 DDOS-GUARD CORP.
Requested by https://hqq.to/player/embed_player.php?vid=Jrrfq5trRPSh&autoplay=no
Certificate IssuerSectigo Limited
Subject*.hqq.to
Fingerprint3A:33:0A:E7:38:7D:10:B0:C1:D8:33:9C:C7:D0:F0:B0:9B:06:02:A0
ValidityThu, 23 Mar 2023 00:00:00 GMT - Sat, 23 Mar 2024 23:59:59 GMT
File type ASCII text, with very long lines (4292)
Hash 0e455c930eb772725553d8ab1f92fdc6
e3b6edf2d24bbf1ec3afeb8fae51bc25d4f18e52
419b600e2a3d2523ed458633a946a9a07fcf046077f0ea79f3e435f154f04ee7
GET /js/websocket_ip.min.js HTTP/1.1
Host: hqq.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hqq.to/player/embed_player.php?vid=TtgN5uxDI5uf&autoplay=no
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 01 Dec 2023 16:18:18 GMT
content-type: application/javascript; charset=UTF-8
vary: Accept-Encoding
last-modified: Fri, 20 Jan 2023 13:44:36 GMT
etag: W/"63ca9ac4-121c"
access-control-allow-origin: *
access-control-allow-credentials: true
accessing-static: 1
cache-control: public, max-age=31536000, stale-while-revalidate=30, stale-if-error=30
pragma: cache
content-encoding: gzip
server: Google Frontend
x-cache-status-inferno-s: HIT
x-inferno-location: static
X-Firefox-Spdy: h2
cdnjs.cloudflare.com/ajax/libs/plyr/3.7.2/plyr.polyfilled.min.js
200 OK 30 kB URL GET HTTP/2 cdnjs.cloudflare.com/ajax/libs/plyr/3.7.2/plyr.polyfilled.min.js
IP
Requested by https://troyyourlead.com/e/p4atwal5k7ib
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D
ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Hash bc8c3c73a182a07af65ec7bd4bdda51c
a1c3e1ec8335925ca79784f56c620d3fd55d854f
9ce180d4ba02144fe4d5444611bc1934b4f01f133554476b39bd4314f7507e70
GET /ajax/libs/plyr/3.7.2/plyr.polyfilled.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://troyyourlead.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 01 Dec 2023 16:18:20 GMT
content-type: application/javascript; charset=utf-8
content-length: 30395
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "62600438-76bb"
last-modified: Wed, 20 Apr 2022 13:01:44 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 476147
expires: Wed, 20 Nov 2024 16:18:20 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=9y7dEyIxnaRPWA4bjn0PhywS1psZJu%2FsNRDu9NLwrqRaxbvYakQSC37CW1sPhiOpyfNtCYj%2FSL8KNwFAL1bbCihrNXnwy7UYcflSYPIxImlsHNU7bvC13vyfq0JpFHMRmw7HZOBu"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 82eca53c8eb71c06-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
ok.ru/res/js/app/capture_5f689327.js
200 OK 675 B URL GET HTTP/2 ok.ru/res/js/app/capture_5f689327.js
IP
Requested by https://ok.ru/videoembed/6827666639475
Certificate IssuerGlobalSign nv-sa
Subject*.ok.ru
Fingerprint66:20:81:B9:D0:20:96:BF:13:93:E6:76:FF:C4:19:BD:F6:29:0E:A3
ValidityWed, 04 Oct 2023 08:36:03 GMT - Wed, 02 Oct 2024 09:21:02 GMT
File type ASCII text, with very long lines (1522)
Hash aaed395496fb7a8393688d1d21f9be54
56f451376f8a6bab2f37dc1329897beb66852a52
20e6474fa7c9f1e7f0d2caec481216ed7713c459730db9a441e5fc9a7e965ed3
GET /res/js/app/capture_5f689327.js HTTP/1.1
Host: ok.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://ok.ru/videoembed/6827656153715
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: apache
date: Fri, 01 Dec 2023 16:18:20 GMT
content-type: application/javascript
content-length: 675
last-modified: Wed, 29 Nov 2023 10:02:00 GMT
vary: Accept-Encoding
content-encoding: br
expires: Sat, 30 Nov 2024 16:18:20 GMT
cache-control: max-age=31536000
timing-allow-origin: *
X-Firefox-Spdy: h2
cdnjs.cloudflare.com/ajax/libs/bootstrap/5.3.2/js/bootstrap.bundle.min.js
200 OK 21 kB URL GET HTTP/2 cdnjs.cloudflare.com/ajax/libs/bootstrap/5.3.2/js/bootstrap.bundle.min.js
IP
Requested by https://troyyourlead.com/e/p4atwal5k7ib
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D
ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT
File type ASCII text, with very long lines (65299)
Hash 6baf57f25796c332144ed58a2a0cd9ee
f7fd0f3dc84b2cf93bf81e832505a673f354e0a3
82f64f62bb03c1bc1824b0f9c9e05f70dba33e146818e63cdf5c306c8cf3dedd
GET /ajax/libs/bootstrap/5.3.2/js/bootstrap.bundle.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://troyyourlead.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 01 Dec 2023 16:18:20 GMT
content-type: application/javascript; charset=utf-8
content-length: 21203
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "6503298b-52d3"
last-modified: Thu, 14 Sep 2023 15:40:59 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 654711
expires: Wed, 20 Nov 2024 16:18:20 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=5Diw7c8KALkSF0Phka8QVQcVAWVtXROWSQLqxQvwjRY1UKoaaG%2BL11HHsWbJ00p7N%2Fz2x%2FRdYrLp3SdKLvuzhFCDR2xg5UW%2Br5nsJlEjnLH%2Fee9%2FPqs0uD1b032VqmJkDm%2BOvGzW"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 82eca53c9ec21c06-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
cdnjs.cloudflare.com/ajax/libs/plyr/3.7.2/plyr.min.js
200 OK 29 kB URL GET HTTP/2 cdnjs.cloudflare.com/ajax/libs/plyr/3.7.2/plyr.min.js
IP
Requested by https://troyyourlead.com/e/p4atwal5k7ib
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D
ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Hash 25126b2c2f593f30f507bc4e9c2d233d
8298aa83d9b48f52954503e12fdc83ff8f92aa73
7c52a13dfc5530303daba3ec1cf306ebb96505e81fba44293f4d1632e32f0ec0
GET /ajax/libs/plyr/3.7.2/plyr.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://troyyourlead.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 01 Dec 2023 16:18:20 GMT
content-type: application/javascript; charset=utf-8
content-length: 28745
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "62600438-7049"
last-modified: Wed, 20 Apr 2022 13:01:44 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 306941
expires: Wed, 20 Nov 2024 16:18:20 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=TnobJDPVsQhRA1fbg3KgYiSSsw%2B3y2lehOssOBn6g2eNS3bDfjtbgS9EIo7bXdWTLQJJKNz2nsBKAgDEHeMyybRzbZTQY%2BXWsZYCtzyuwLh7QbgNircW7vCFg3icfqLSJ%2FT9CXkR"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 82eca53c9ec01c06-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
ok.ru/res/js/app/capture_5f689327.js
200 OK 675 B URL GET HTTP/2 ok.ru/res/js/app/capture_5f689327.js
IP
Requested by https://ok.ru/videoembed/6827666639475
Certificate IssuerGlobalSign nv-sa
Subject*.ok.ru
Fingerprint66:20:81:B9:D0:20:96:BF:13:93:E6:76:FF:C4:19:BD:F6:29:0E:A3
ValidityWed, 04 Oct 2023 08:36:03 GMT - Wed, 02 Oct 2024 09:21:02 GMT
File type ASCII text, with very long lines (1522)
Hash aaed395496fb7a8393688d1d21f9be54
56f451376f8a6bab2f37dc1329897beb66852a52
20e6474fa7c9f1e7f0d2caec481216ed7713c459730db9a441e5fc9a7e965ed3
GET /res/js/app/capture_5f689327.js HTTP/1.1
Host: ok.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://ok.ru/videoembed/6827666639475
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: apache
date: Fri, 01 Dec 2023 16:18:20 GMT
content-type: application/javascript
content-length: 675
last-modified: Wed, 29 Nov 2023 10:02:00 GMT
vary: Accept-Encoding
content-encoding: br
expires: Sat, 30 Nov 2024 16:18:20 GMT
cache-control: max-age=31536000
timing-allow-origin: *
X-Firefox-Spdy: h2
cdnjs.cloudflare.com/ajax/libs/jquery/3.7.1/jquery.min.js
200 OK 27 kB URL GET HTTP/2 cdnjs.cloudflare.com/ajax/libs/jquery/3.7.1/jquery.min.js
IP
Requested by https://troyyourlead.com/e/4pbc0k91o9jh
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D
ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT
File type ASCII text, with very long lines (65447)
Hash 2c872dbe60f4ba70fb85356113d8b35e
ee48592d1fff952fcf06ce0b666ed4785493afdc
fc9a93dd241f6b045cbff0481cf4e1901becd0e12fb45166a8f17f95823f0b1a
GET /ajax/libs/jquery/3.7.1/jquery.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://troyyourlead.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 01 Dec 2023 16:18:20 GMT
content-type: application/javascript; charset=utf-8
content-length: 27446
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "64ed75bb-6b36"
last-modified: Tue, 29 Aug 2023 04:36:11 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 394946
expires: Wed, 20 Nov 2024 16:18:20 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=2CU7aApsnzBxqpAH4YM4w7c%2Bo7dcW1wu0gGruhERUWE5wbsFix%2F%2FM8OuiUCky9U8nyaXuXvbMYx0wt7ENRyA3%2B%2F%2Bl3Fi7%2FMmsd90MB7Y3qc7ZsRZJUdVYTHLREBHzuG9rMRVR8%2FO"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 82eca53c9ec31c06-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
cdnjs.cloudflare.com/ajax/libs/simplebar/6.2.5/simplebar.min.js
200 OK 6.2 kB URL GET HTTP/2 cdnjs.cloudflare.com/ajax/libs/simplebar/6.2.5/simplebar.min.js
IP
Requested by https://troyyourlead.com/e/4pbc0k91o9jh
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D
ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT
File type ASCII text, with very long lines (26884)
Hash 4cbf4903e55851c81ff41f4c0a06ff25
fb7bdff45145bb9a81ecca8a265c6e8393ec226e
c95620ba4204d07af1f58e3cc5b90bc725ca896ccde5998195ca54c9939f8416
GET /ajax/libs/simplebar/6.2.5/simplebar.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://troyyourlead.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 01 Dec 2023 16:18:20 GMT
content-type: application/javascript; charset=utf-8
content-length: 6248
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "64c94e26-1868"
last-modified: Tue, 01 Aug 2023 18:25:42 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 636264
expires: Wed, 20 Nov 2024 16:18:20 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=1n9pGdEwd3%2BPfRaFrQP85sW8Of3HRPQb34l8cEc2vBqco0JwDgw07WZvK%2BHwujl%2F4lGhuY0e9gZR%2Fag7i9%2FGvxp81aC%2BFLMuVfvS3XYpg%2F00QXtTGKwvXnzFntFL0d43Vrs%2Bt37N"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 82eca53c9ec41c06-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
youradexchange.com/script/suurl5.php?r=7091722&cbur=0.10108957883041736&cbiframe=0&cbWidth=1280&cbHeight=1024&cbtitle=Ver%20Spoiler%20Alert%20(2022)%20online&cbpage=https%3A%2F%2Fgnula.nu%2Fcomedia%2Fver-spoiler-alert-2022-online%2F&cbref=&cbdescription=opci%C3%B3n%202%2C%20castellano%2C%20br-r%20Opci%C3%B3n%201%20Opci%C3%B3n%202%20Opci%C3%B3n%203%20Online%2FDescarga%20opci%C3%B3n%201%2C%20vose%2C%20br-r%20Opci%C3%B3n%201%20Opci%C3%B3n%202%20Opci%C3%B3n%203%20Online%2FDescarga%20opci%C3%B3n%203%2C%20latino%2C%20br-r%20Opci%C3%B3n%201%20Opci%C3%B3n%202%20Opci%C3%B3n%203%20Online%2FDescarga%20Reportar%20Reportar%20enlace%20roto%20M%C3%A1s%20cosas%3A%20(1)%20Nos%20complace%20informar%20que%20ya%20se%20puede%20ver%20la%20pel%C3%ADcula%20Spoiler%20Alert%20de%20forma%20online&cbkeywords=&cbcdn=acacdn.com&ts=1701447502832&srs=ba217163011a234a8228ff668a453a7a&atv=38.3-sw-suv5
1.4 kB URL youradexchange.com/script/suurl5.php?r=7091722&cbur=0.10108957883041736&cbiframe=0&cbWidth=1280&cbHeight=1024&cbtitle=Ver%20Spoiler%20Alert%20(2022)%20online&cbpage=https%3A%2F%2Fgnula.nu%2Fcomedia%2Fver-spoiler-alert-2022-online%2F&cbref=&cbdescription=opci%C3%B3n%202%2C%20castellano%2C%20br-r%20Opci%C3%B3n%201%20Opci%C3%B3n%202%20Opci%C3%B3n%203%20Online%2FDescarga%20opci%C3%B3n%201%2C%20vose%2C%20br-r%20Opci%C3%B3n%201%20Opci%C3%B3n%202%20Opci%C3%B3n%203%20Online%2FDescarga%20opci%C3%B3n%203%2C%20latino%2C%20br-r%20Opci%C3%B3n%201%20Opci%C3%B3n%202%20Opci%C3%B3n%203%20Online%2FDescarga%20Reportar%20Reportar%20enlace%20roto%20M%C3%A1s%20cosas%3A%20(1)%20Nos%20complace%20informar%20que%20ya%20se%20puede%20ver%20la%20pel%C3%ADcula%20Spoiler%20Alert%20de%20forma%20online&cbkeywords=&cbcdn=acacdn.com&ts=1701447502832&srs=ba217163011a234a8228ff668a453a7a&atv=38.3-sw-suv5
IP
File type JSON data\012- , ASCII text, with very long lines (896)
Hash 7911b6daa808b3ff8d371665631711ab
31b306e54031500173d91cb5cec5fc490ced9eed
e6a63ee92be621bd6b759333a140eeeef45a6f89e7d98fd2c00085f92a38ec93
GET /script/suurl5.php?r=7091722&cbur=0.10108957883041736&cbiframe=0&cbWidth=1280&cbHeight=1024&cbtitle=Ver%20Spoiler%20Alert%20(2022)%20online&cbpage=https%3A%2F%2Fgnula.nu%2Fcomedia%2Fver-spoiler-alert-2022-online%2F&cbref=&cbdescription=opci%C3%B3n%202%2C%20castellano%2C%20br-r%20Opci%C3%B3n%201%20Opci%C3%B3n%202%20Opci%C3%B3n%203%20Online%2FDescarga%20opci%C3%B3n%201%2C%20vose%2C%20br-r%20Opci%C3%B3n%201%20Opci%C3%B3n%202%20Opci%C3%B3n%203%20Online%2FDescarga%20opci%C3%B3n%203%2C%20latino%2C%20br-r%20Opci%C3%B3n%201%20Opci%C3%B3n%202%20Opci%C3%B3n%203%20Online%2FDescarga%20Reportar%20Reportar%20enlace%20roto%20M%C3%A1s%20cosas%3A%20(1)%20Nos%20complace%20informar%20que%20ya%20se%20puede%20ver%20la%20pel%C3%ADcula%20Spoiler%20Alert%20de%20forma%20online&cbkeywords=&cbcdn=acacdn.com&ts=1701447502832&srs=ba217163011a234a8228ff668a453a7a&atv=38.3-sw-suv5 HTTP/1.1
Host: youradexchange.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://gnula.nu/
Origin: https://gnula.nu
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 01 Dec 2023 16:18:18 GMT
content-type: application/json; charset=utf-8
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Content-Type
via: 1.1 google
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=sb%2B3oe3L14VMy06jPqlxBM%2F0BdI12uzu0jXDJC%2F1%2Fct5Tq0Jp6OEITRt%2BNBL0ziQQqaPL0A4qMwoMPY84xnp%2BW2ainvMNzHHG%2FMBuJcLWQadtyRqKSwUDvhfti%2B%2BS7snm0SKZx8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82eca52ffb2263d7-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
hqq.to/js/video.jquery_plugs/modernizr.js?12
200 OK 23 kB URL GET HTTP/2 hqq.to/js/video.jquery_plugs/modernizr.js?12
IP
ASN #262254 DDOS-GUARD CORP.
Requested by https://hqq.to/player/embed_player.php?vid=Jrrfq5trRPSh&autoplay=no
Certificate IssuerSectigo Limited
Subject*.hqq.to
Fingerprint3A:33:0A:E7:38:7D:10:B0:C1:D8:33:9C:C7:D0:F0:B0:9B:06:02:A0
ValidityThu, 23 Mar 2023 00:00:00 GMT - Sat, 23 Mar 2024 23:59:59 GMT
File type gzip compressed data, from Unix\012- data
Hash 5f777f0c3e6882fa45593cf8b338e07e
94eff4ff2d4f2a13727d6e713139b50bdf85e5d0
cb506c05185f820ad193e7fd4a9fcd827e3bde1a8eaecbfc5b6ca0448e3eb846
GET /js/video.jquery_plugs/modernizr.js?12 HTTP/1.1
Host: hqq.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hqq.to/player/embed_player.php?vid=TtgN5uxDI5uf&autoplay=no
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 01 Dec 2023 16:18:18 GMT
content-type: application/javascript; charset=UTF-8
vary: Accept-Encoding
last-modified: Sun, 03 Jun 2018 17:19:35 GMT
etag: W/"5b142327-4cb"
access-control-allow-origin: *
access-control-allow-credentials: true
accessing-static: 1
cache-control: public, max-age=31536000, stale-while-revalidate=30, stale-if-error=30
pragma: cache
content-encoding: gzip
server: Google Frontend
x-cache-status-inferno-s: HIT
x-inferno-location: static
X-Firefox-Spdy: h2
cdnjs.cloudflare.com/ajax/libs/hls.js/1.2.7/hls.min.js
200 OK 83 kB URL GET HTTP/2 cdnjs.cloudflare.com/ajax/libs/hls.js/1.2.7/hls.min.js
IP
Requested by https://troyyourlead.com/e/p4atwal5k7ib
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D
ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Hash 1e59b3a541bcfa025fdda12cbbaa9f6e
b04d134373a70c5c2c536e0246b99dabdde8db9d
88fa861d6c2d711a4a0e9c186234ab06f7e0f77b7bda6da22ae50eae6c892570
GET /ajax/libs/hls.js/1.2.7/hls.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://troyyourlead.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 01 Dec 2023 16:18:20 GMT
content-type: application/javascript; charset=utf-8
content-length: 82604
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "636ff6bc-142ac"
last-modified: Sat, 12 Nov 2022 19:40:44 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 722992
expires: Wed, 20 Nov 2024 16:18:20 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Ou3cIwQytCfvuy5J42rEjgVasTWahLMEGYcngNUDHB7nYk%2BHh%2B92t5nxiVvJE12CVNy6WFGnY0P%2BetrgISYe2TRY4L7sZRD8C6rZbrlyWN7RDUXiFFXKCvV%2FHoP2s7SiMiXbyGDS"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 82eca53caec71c06-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
cdnjs.cloudflare.com/ajax/libs/plyr/3.7.2/plyr.polyfilled.min.js
200 OK 30 kB URL GET HTTP/2 cdnjs.cloudflare.com/ajax/libs/plyr/3.7.2/plyr.polyfilled.min.js
IP
Requested by https://troyyourlead.com/e/p4atwal5k7ib
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D
ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Hash bc8c3c73a182a07af65ec7bd4bdda51c
a1c3e1ec8335925ca79784f56c620d3fd55d854f
9ce180d4ba02144fe4d5444611bc1934b4f01f133554476b39bd4314f7507e70
GET /ajax/libs/plyr/3.7.2/plyr.polyfilled.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://troyyourlead.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 01 Dec 2023 16:18:20 GMT
content-type: application/javascript; charset=utf-8
content-length: 30395
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "62600438-76bb"
last-modified: Wed, 20 Apr 2022 13:01:44 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 476147
expires: Wed, 20 Nov 2024 16:18:20 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=uEaYe11HXB%2BNfU22AcFSHItDn40OzvbFId4dlAdkv6ZcV%2FIFGvzqNhGfBkqjTFfmH3rgjRSlKGZpdTHWZHIFBbpt64943DsAQu0MYKaJKF4fUUMSIzGFTE%2Bfh%2FdMyljFkNCnjyY6"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 82eca53cbedc1c06-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
unpkg.com/jquery@2.2.4/dist/jquery.min.js
200 OK 60 kB URL GET HTTP/2 unpkg.com/jquery@2.2.4/dist/jquery.min.js
IP
Requested by https://hqq.to/player/embed_player.php?vid=TtgN5uxDI5uf&autoplay=no
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintF7:B6:41:CA:15:FD:D1:0C:27:39:55:5D:C5:CE:3F:1C:A6:BB:9D:6F
ValidityTue, 02 May 2023 00:00:00 GMT - Wed, 01 May 2024 23:59:59 GMT
File type ASCII text, with very long lines (32065)
Hash 2f6b11a7e914718e0290410e85366fe9
69bb69e25ca7d5ef0935317584e6153f3fd9a88c
05b85d96f41fff14d8f608dad03ab71e2c1017c2da0914d7c59291bad7a54f8e
GET /jquery@2.2.4/dist/jquery.min.js HTTP/1.1
Host: unpkg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hqq.to/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 01 Dec 2023 16:18:19 GMT
content-type: application/javascript; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=31536000
last-modified: Fri, 20 May 2016 17:24:42 GMT
etag: W/"14e4a-abtp4lyn1e8JNTF1hOYVPz/ZqIw"
via: 1.1 fly.io
fly-request-id: 01HG7A5H86SEST4VJG58SVVY7Z-arn
cf-cache-status: HIT
age: 394902
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 82eca5399cba56b5-OSL
content-encoding: br
X-Firefox-Spdy: h2
hqq.to/js/adv/fuckadblock.js?2
200 OK 25 kB URL GET HTTP/2 hqq.to/js/adv/fuckadblock.js?2
IP
ASN #262254 DDOS-GUARD CORP.
Requested by https://hqq.to/player/embed_player.php?vid=Jrrfq5trRPSh&autoplay=no
Certificate IssuerSectigo Limited
Subject*.hqq.to
Fingerprint3A:33:0A:E7:38:7D:10:B0:C1:D8:33:9C:C7:D0:F0:B0:9B:06:02:A0
ValidityThu, 23 Mar 2023 00:00:00 GMT - Sat, 23 Mar 2024 23:59:59 GMT
File type gzip compressed data, from Unix\012- data
Hash aaea204c588c30b347f876a4beec7ee0
569cfbd3ac0dd7fa881200632c85f32011b22da9
de416fee2e5b73244562268a112ee6fcc2ecb4fbd59d0605ea1daa05a1f1d528
GET /js/adv/fuckadblock.js?2 HTTP/1.1
Host: hqq.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hqq.to/player/embed_player.php?vid=Jrrfq5trRPSh&autoplay=no
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 01 Dec 2023 16:18:19 GMT
content-type: application/javascript; charset=UTF-8
vary: Accept-Encoding
last-modified: Tue, 27 Aug 2019 17:39:04 GMT
etag: W/"5d656ab8-369e"
access-control-allow-origin: *
access-control-allow-credentials: true
accessing-static: 1
cache-control: public, max-age=31536000, stale-while-revalidate=30, stale-if-error=30
pragma: cache
content-encoding: gzip
server: Google Frontend
x-cache-status-inferno-s: HIT
x-inferno-location: static
X-Firefox-Spdy: h2
unpkg.com/jquery@2.2.4/dist/jquery.min.js
200 OK 37 kB URL GET HTTP/2 unpkg.com/jquery@2.2.4/dist/jquery.min.js
IP
Requested by https://hqq.to/player/embed_player.php?vid=TtgN5uxDI5uf&autoplay=no
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintF7:B6:41:CA:15:FD:D1:0C:27:39:55:5D:C5:CE:3F:1C:A6:BB:9D:6F
ValidityTue, 02 May 2023 00:00:00 GMT - Wed, 01 May 2024 23:59:59 GMT
File type ASCII text, with very long lines (32065)
Hash 2f6b11a7e914718e0290410e85366fe9
69bb69e25ca7d5ef0935317584e6153f3fd9a88c
05b85d96f41fff14d8f608dad03ab71e2c1017c2da0914d7c59291bad7a54f8e
GET /jquery@2.2.4/dist/jquery.min.js HTTP/1.1
Host: unpkg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hqq.to/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 01 Dec 2023 16:18:19 GMT
content-type: application/javascript; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=31536000
last-modified: Fri, 20 May 2016 17:24:42 GMT
etag: W/"14e4a-abtp4lyn1e8JNTF1hOYVPz/ZqIw"
via: 1.1 fly.io
fly-request-id: 01HG7A5H86SEST4VJG58SVVY7Z-arn
cf-cache-status: HIT
age: 394902
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 82eca53679e456b5-OSL
content-encoding: br
X-Firefox-Spdy: h2
cdnjs.cloudflare.com/ajax/libs/hls.js/1.2.7/hls.min.js
200 OK 83 kB URL GET HTTP/2 cdnjs.cloudflare.com/ajax/libs/hls.js/1.2.7/hls.min.js
IP
Requested by https://troyyourlead.com/e/p4atwal5k7ib
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D
ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Hash 1e59b3a541bcfa025fdda12cbbaa9f6e
b04d134373a70c5c2c536e0246b99dabdde8db9d
88fa861d6c2d711a4a0e9c186234ab06f7e0f77b7bda6da22ae50eae6c892570
GET /ajax/libs/hls.js/1.2.7/hls.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://troyyourlead.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 01 Dec 2023 16:18:20 GMT
content-type: application/javascript; charset=utf-8
content-length: 82604
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "636ff6bc-142ac"
last-modified: Sat, 12 Nov 2022 19:40:44 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 722992
expires: Wed, 20 Nov 2024 16:18:20 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=aPxSMGV8Xt63tMDM%2BsGXRakux%2BoYU2Y8TRIb%2FN7nd5sFwmu1injBqMFdcucXLe7Cm%2BRBMb%2BzssiA9akPQl9yKMVkYi%2FRV3AWM2GaP7zAUr%2Bs4pNl8WvlImQ95%2BIPu1H7gCpJy67O"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 82eca53d5f2c1c06-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
unpkg.com/jquery@2.2.4/dist/jquery.min.js
200 OK 61 kB URL GET HTTP/2 unpkg.com/jquery@2.2.4/dist/jquery.min.js
IP
Requested by https://hqq.to/player/embed_player.php?vid=TtgN5uxDI5uf&autoplay=no
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintF7:B6:41:CA:15:FD:D1:0C:27:39:55:5D:C5:CE:3F:1C:A6:BB:9D:6F
ValidityTue, 02 May 2023 00:00:00 GMT - Wed, 01 May 2024 23:59:59 GMT
File type ASCII text, with very long lines (32065)
Hash 2f6b11a7e914718e0290410e85366fe9
69bb69e25ca7d5ef0935317584e6153f3fd9a88c
05b85d96f41fff14d8f608dad03ab71e2c1017c2da0914d7c59291bad7a54f8e
GET /jquery@2.2.4/dist/jquery.min.js HTTP/1.1
Host: unpkg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hqq.to/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 01 Dec 2023 16:18:19 GMT
content-type: application/javascript; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=31536000
last-modified: Fri, 20 May 2016 17:24:42 GMT
etag: W/"14e4a-abtp4lyn1e8JNTF1hOYVPz/ZqIw"
via: 1.1 fly.io
fly-request-id: 01HG7A5H86SEST4VJG58SVVY7Z-arn
cf-cache-status: HIT
age: 394902
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 82eca5368a1b56b5-OSL
content-encoding: br
X-Firefox-Spdy: h2
unpkg.com/jquery.cookie@1.4.1/jquery.cookie.js
30 kB URL unpkg.com/jquery.cookie@1.4.1/jquery.cookie.js
IP
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintF7:B6:41:CA:15:FD:D1:0C:27:39:55:5D:C5:CE:3F:1C:A6:BB:9D:6F
ValidityTue, 02 May 2023 00:00:00 GMT - Wed, 01 May 2024 23:59:59 GMT
Hash d5528dde0006c78be04817327c2f9b6f
31e1bcc4cf805a2c2fee21f48ded1e598f64a2a8
b84161c9fbf7520cd14e7019f92120bd87a928a074156e91a992eba9fc9436e8
GET /jquery.cookie@1.4.1/jquery.cookie.js HTTP/1.1
Host: unpkg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hqq.to/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 01 Dec 2023 16:18:19 GMT
content-type: application/javascript; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=31536000
last-modified: Sun, 27 Apr 2014 20:04:54 GMT
etag: W/"c31-MeG8xM+AWiwv7iH0je0eWY9koqg"
via: 1.1 fly.io
fly-request-id: 01HFXFQD761P7QTCC22CPCK305-arn
cf-cache-status: HIT
age: 724618
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 82eca536499556b5-OSL
content-encoding: br
X-Firefox-Spdy: h2
unpkg.com/jquery.cookie@1.4.1/jquery.cookie.js
5.9 kB URL unpkg.com/jquery.cookie@1.4.1/jquery.cookie.js
IP
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintF7:B6:41:CA:15:FD:D1:0C:27:39:55:5D:C5:CE:3F:1C:A6:BB:9D:6F
ValidityTue, 02 May 2023 00:00:00 GMT - Wed, 01 May 2024 23:59:59 GMT
Hash d5528dde0006c78be04817327c2f9b6f
31e1bcc4cf805a2c2fee21f48ded1e598f64a2a8
b84161c9fbf7520cd14e7019f92120bd87a928a074156e91a992eba9fc9436e8
GET /jquery.cookie@1.4.1/jquery.cookie.js HTTP/1.1
Host: unpkg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hqq.to/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 01 Dec 2023 16:18:19 GMT
content-type: application/javascript; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=31536000
last-modified: Sun, 27 Apr 2014 20:04:54 GMT
etag: W/"c31-MeG8xM+AWiwv7iH0je0eWY9koqg"
via: 1.1 fly.io
fly-request-id: 01HFXFQD761P7QTCC22CPCK305-arn
cf-cache-status: HIT
age: 724618
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 82eca5369a3256b5-OSL
content-encoding: br
X-Firefox-Spdy: h2
commentsmodule.com/js/js.load.1.js?2378500491032642
200 OK 0 B URL GET HTTP/3 commentsmodule.com/js/js.load.1.js?2378500491032642
IP
Requested by https://hqq.to/player/embed_player.php?vid=N6WTXDJGcpAT&autoplay=no
Certificate IssuerGoogle Trust Services LLC
Subjectcommentsmodule.com
FingerprintFB:D4:66:A8:AE:18:5F:8C:FE:B0:5E:D5:8D:88:CA:1B:63:0A:16:67
ValidityThu, 12 Oct 2023 20:21:07 GMT - Wed, 10 Jan 2024 20:21:06 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /js/js.load.1.js?2378500491032642 HTTP/1.1
Host: commentsmodule.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://hqq.to/
Origin: https://hqq.to
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 01 Dec 2023 16:18:20 GMT
content-type: application/javascript; charset=UTF-8
content-length: 0
last-modified: Thu, 14 Apr 2022 12:20:52 GMT
etag: "625811a4-0"
access-control-allow-credentials: true
accessing-static: 1
cache-control: public, max-age=31536000, stale-while-revalidate=30, stale-if-error=30
pragma: cache
x-cache-status-inferno-s: HIT
x-inferno-location: static
cf-cache-status: HIT
age: 729022
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=QGUc49NvswWuxLyIhff0d8OhKC3xIZR3vf%2BEc3mWD59DQ2gNpYrDas0pWeDks9ZyOKxxzdpgDcoBhbton0EbZuki%2BbKef6MCUqXLxuWYAR9QWDmuSbmN5SR%2BaKe77fNPvBPPCus%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
access-control-allow-origin: *
server: cloudflare
cf-ray: 82eca53ffb9756a2-OSL
alt-svc: h3=":443"; ma=86400
apis.google.com/js/rpc:shindig_random.js?onload=init
7.1 kB URL apis.google.com/js/rpc:shindig_random.js?onload=init
IP
File type ASCII text, with very long lines (2056)
Hash 84a5ff7df274c2aa0f5db3d0db8deb60
fe9d4e60961ea15195134fa043256585a3956984
0d3c50c1af81534edee9a430edb5d09c6068348173496657982a4546ff2ee231
GET /js/rpc:shindig_random.js?onload=init HTTP/1.1
Host: apis.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://accounts.google.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
access-control-allow-origin: *
content-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gapi-team
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="gapi-team"
report-to: {"group":"gapi-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gapi-team"}]}
timing-allow-origin: *
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
content-length: 7121
date: Fri, 01 Dec 2023 16:18:20 GMT
expires: Fri, 01 Dec 2023 16:18:20 GMT
cache-control: private, max-age=1800, stale-while-revalidate=1800
etag: "14543ead6f363f55"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
set-cookie: NID=511=rhHCD6jPx6ol_-IlPjIZHwJZO1ADqbEqCJA0vcsyqiRgvYVQNsjtP8mss11QNLGO9NeVoaxsVuW5bFnysxMw5vcbDy6L5yIRhMV-oK8FKHWLNdSR15KgXqC5E_Typihxg0OoLgH_wYOyl1zdC_EXMAVTIYcoDtTqbu3_V8gxOTA; expires=Sat, 01-Jun-2024 16:18:20 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
ok.ru/res/js/app/VideoEmbed_bc0da08a.js
200 OK 360 B URL GET HTTP/2 ok.ru/res/js/app/VideoEmbed_bc0da08a.js
IP
Requested by https://ok.ru/videoembed/6827677059699
Certificate IssuerGlobalSign nv-sa
Subject*.ok.ru
Fingerprint66:20:81:B9:D0:20:96:BF:13:93:E6:76:FF:C4:19:BD:F6:29:0E:A3
ValidityWed, 04 Oct 2023 08:36:03 GMT - Wed, 02 Oct 2024 09:21:02 GMT
File type ASCII text, with very long lines (825)
Hash 956818422a5b489c9dc53b4b8a70d40a
78d2d53d011d23c8c96474f5905bf23b7813a4aa
7bd98f7a6f655b3ed24d60c603470bcdd167df6f54057099a0cdd70f4b079084
GET /res/js/app/VideoEmbed_bc0da08a.js HTTP/1.1
Host: ok.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://ok.ru/videoembed/6827656153715
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: apache
date: Fri, 01 Dec 2023 16:18:20 GMT
content-type: application/javascript
content-length: 360
last-modified: Wed, 29 Nov 2023 10:02:00 GMT
vary: Accept-Encoding
content-encoding: br
expires: Sat, 30 Nov 2024 16:18:20 GMT
cache-control: max-age=31536000
timing-allow-origin: *
X-Firefox-Spdy: h2
ok.ru/res/js/app/OKVideo_de31ee45.js
200 OK 5.3 kB URL GET HTTP/2 ok.ru/res/js/app/OKVideo_de31ee45.js
IP
Requested by https://ok.ru/videoembed/6827677059699
Certificate IssuerGlobalSign nv-sa
Subject*.ok.ru
Fingerprint66:20:81:B9:D0:20:96:BF:13:93:E6:76:FF:C4:19:BD:F6:29:0E:A3
ValidityWed, 04 Oct 2023 08:36:03 GMT - Wed, 02 Oct 2024 09:21:02 GMT
File type ASCII text, with very long lines (16084)
Hash 67b0e39859af2910f56d7ebf1f770c12
6ee224018d9146fc46201310bae31e50b7c22e2e
c903bbb446395bd69fb0038cbd722e189e49c51228a0074092cc37c5c1e6d5c5
GET /res/js/app/OKVideo_de31ee45.js HTTP/1.1
Host: ok.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://ok.ru/videoembed/6827656153715
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: apache
date: Fri, 01 Dec 2023 16:18:20 GMT
content-type: application/javascript
content-length: 5334
last-modified: Wed, 29 Nov 2023 10:02:00 GMT
vary: Accept-Encoding
content-encoding: br
expires: Sat, 30 Nov 2024 16:18:20 GMT
cache-control: max-age=31536000
timing-allow-origin: *
X-Firefox-Spdy: h2
ok.ru/res/js/app/VideoEmbed_bc0da08a.js
200 OK 360 B URL GET HTTP/2 ok.ru/res/js/app/VideoEmbed_bc0da08a.js
IP
Requested by https://ok.ru/videoembed/6827677059699
Certificate IssuerGlobalSign nv-sa
Subject*.ok.ru
Fingerprint66:20:81:B9:D0:20:96:BF:13:93:E6:76:FF:C4:19:BD:F6:29:0E:A3
ValidityWed, 04 Oct 2023 08:36:03 GMT - Wed, 02 Oct 2024 09:21:02 GMT
File type ASCII text, with very long lines (825)
Hash 956818422a5b489c9dc53b4b8a70d40a
78d2d53d011d23c8c96474f5905bf23b7813a4aa
7bd98f7a6f655b3ed24d60c603470bcdd167df6f54057099a0cdd70f4b079084
GET /res/js/app/VideoEmbed_bc0da08a.js HTTP/1.1
Host: ok.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://ok.ru/videoembed/6827666639475
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: apache
date: Fri, 01 Dec 2023 16:18:20 GMT
content-type: application/javascript
content-length: 360
last-modified: Wed, 29 Nov 2023 10:02:00 GMT
vary: Accept-Encoding
content-encoding: br
expires: Sat, 30 Nov 2024 16:18:20 GMT
cache-control: max-age=31536000
timing-allow-origin: *
X-Firefox-Spdy: h2
ok.ru/res/js/app/OKVideo_de31ee45.js
200 OK 5.3 kB URL GET HTTP/2 ok.ru/res/js/app/OKVideo_de31ee45.js
IP
Requested by https://ok.ru/videoembed/6827677059699
Certificate IssuerGlobalSign nv-sa
Subject*.ok.ru
Fingerprint66:20:81:B9:D0:20:96:BF:13:93:E6:76:FF:C4:19:BD:F6:29:0E:A3
ValidityWed, 04 Oct 2023 08:36:03 GMT - Wed, 02 Oct 2024 09:21:02 GMT
File type ASCII text, with very long lines (16084)
Hash 67b0e39859af2910f56d7ebf1f770c12
6ee224018d9146fc46201310bae31e50b7c22e2e
c903bbb446395bd69fb0038cbd722e189e49c51228a0074092cc37c5c1e6d5c5
GET /res/js/app/OKVideo_de31ee45.js HTTP/1.1
Host: ok.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://ok.ru/videoembed/6827666639475
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: apache
date: Fri, 01 Dec 2023 16:18:20 GMT
content-type: application/javascript
content-length: 5334
last-modified: Wed, 29 Nov 2023 10:02:00 GMT
vary: Accept-Encoding
content-encoding: br
expires: Sat, 30 Nov 2024 16:18:20 GMT
cache-control: max-age=31536000
timing-allow-origin: *
X-Firefox-Spdy: h2
ok.ru/res/js/app/VideoEmbed_bc0da08a.js
200 OK 360 B URL GET HTTP/2 ok.ru/res/js/app/VideoEmbed_bc0da08a.js
IP
Requested by https://ok.ru/videoembed/6827677059699
Certificate IssuerGlobalSign nv-sa
Subject*.ok.ru
Fingerprint66:20:81:B9:D0:20:96:BF:13:93:E6:76:FF:C4:19:BD:F6:29:0E:A3
ValidityWed, 04 Oct 2023 08:36:03 GMT - Wed, 02 Oct 2024 09:21:02 GMT
File type ASCII text, with very long lines (825)
Hash 956818422a5b489c9dc53b4b8a70d40a
78d2d53d011d23c8c96474f5905bf23b7813a4aa
7bd98f7a6f655b3ed24d60c603470bcdd167df6f54057099a0cdd70f4b079084
GET /res/js/app/VideoEmbed_bc0da08a.js HTTP/1.1
Host: ok.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://ok.ru/videoembed/6827677059699
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: apache
date: Fri, 01 Dec 2023 16:18:20 GMT
content-type: application/javascript
content-length: 360
last-modified: Wed, 29 Nov 2023 10:02:00 GMT
vary: Accept-Encoding
content-encoding: br
expires: Sat, 30 Nov 2024 16:18:20 GMT
cache-control: max-age=31536000
timing-allow-origin: *
X-Firefox-Spdy: h2
ssl.gstatic.com/accounts/o/478691279-postmessagerelay.js
200 OK 5.2 kB URL GET HTTP/2 ssl.gstatic.com/accounts/o/478691279-postmessagerelay.js
IP
Requested by https://accounts.google.com/o/oauth2/postmessageRelay?parent=https%3A%2F%2Fgnula.nu&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.coKrc9A11Ng.O%2Fd%3D1%2Frs%3DAHpOoo_J8xjByIzBlcB6zLaAkxsUwdPdIw%2Fm%3D__features__#rpctoken=540844088&forcesecure=1
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type ASCII text, with very long lines (3496)
Hash 92169c8a0fbf6e404267d0705cdbdf42
a5cd88b74ca5ced239cdbfb458fe25540d671f46
dba668b49a111527aac8f616b9053ea57c944e01a84ebdcd02a13da921223384
GET /accounts/o/478691279-postmessagerelay.js HTTP/1.1
Host: ssl.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://accounts.google.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/federated-signon-mpm-access
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="federated-signon-mpm-access"
report-to: {"group":"federated-signon-mpm-access","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/federated-signon-mpm-access"}]}
content-length: 5186
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 29 Nov 2023 14:29:40 GMT
expires: Thu, 28 Nov 2024 14:29:40 GMT
cache-control: public, max-age=31536000
last-modified: Fri, 17 Nov 2023 17:06:44 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 179321
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ok.ru/res/js/app/OKVideo_de31ee45.js
200 OK 5.3 kB URL GET HTTP/2 ok.ru/res/js/app/OKVideo_de31ee45.js
IP
Requested by https://ok.ru/videoembed/6827677059699
Certificate IssuerGlobalSign nv-sa
Subject*.ok.ru
Fingerprint66:20:81:B9:D0:20:96:BF:13:93:E6:76:FF:C4:19:BD:F6:29:0E:A3
ValidityWed, 04 Oct 2023 08:36:03 GMT - Wed, 02 Oct 2024 09:21:02 GMT
File type ASCII text, with very long lines (16084)
Hash 67b0e39859af2910f56d7ebf1f770c12
6ee224018d9146fc46201310bae31e50b7c22e2e
c903bbb446395bd69fb0038cbd722e189e49c51228a0074092cc37c5c1e6d5c5
GET /res/js/app/OKVideo_de31ee45.js HTTP/1.1
Host: ok.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://ok.ru/videoembed/6827677059699
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: apache
date: Fri, 01 Dec 2023 16:18:20 GMT
content-type: application/javascript
content-length: 5334
last-modified: Wed, 29 Nov 2023 10:02:00 GMT
vary: Accept-Encoding
content-encoding: br
expires: Sat, 30 Nov 2024 16:18:20 GMT
cache-control: max-age=31536000
timing-allow-origin: *
X-Firefox-Spdy: h2
crrepo.com/extban/322843620/creatives/23657272/721d61204128e1a39af56a148092fe8f_4220.png
200 OK 156 kB URL GET HTTP/2 crrepo.com/extban/322843620/creatives/23657272/721d61204128e1a39af56a148092fe8f_4220.png
IP
Requested by https://gnula.nu/comedia/ver-spoiler-alert-2022-online/
Certificate IssuerGoogle Trust Services LLC
Subjectcrrepo.com
Fingerprint75:90:20:07:51:99:F7:F2:A9:7E:2F:3F:89:EB:3C:E9:ED:21:B5:65
ValidityWed, 08 Nov 2023 08:39:04 GMT - Tue, 06 Feb 2024 08:39:03 GMT
File type PNG image data, 328 x 328, 8-bit/color RGBA, non-interlaced\012- data
Size 156 kB (155671 bytes)
Hash d5304ba036374354b16c070a1c31e307
f2c0b49069979543deb7d062365241dd2ea2d231
6761468900f7c685f660241597ca643eaf083e2f3a2160d2df00e37790687f3c
GET /extban/322843620/creatives/23657272/721d61204128e1a39af56a148092fe8f_4220.png HTTP/1.1
Host: crrepo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gnula.nu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 01 Dec 2023 16:18:19 GMT
content-type: image/png
last-modified: Mon, 19 Jun 2023 16:23:33 GMT
etag: W/"64908105-22b10"
via: 1.1 google
cache-control: max-age=14400
cf-cache-status: HIT
age: 6284
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Jzpoibzs0770oNRqNVZdk1UkHi0%2FLSsu%2B2F11sGEKZrWYFqftwRmuWFz7NWrg0i9W2ow2iCcurLPXKWnNSX5Af7VCdV9zO%2F1s93GAzqstUE9pBC5UuJmK%2BtE3p%2Fr"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82eca5378d895693-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
fillingimpregnable.com/0e/d5/91/0ed591400877d316744c6353cd338f08.js
200 OK 14 kB URL GET HTTP/1.1 fillingimpregnable.com/0e/d5/91/0ed591400877d316744c6353cd338f08.js
IP
Requested by https://troyyourlead.com/e/ymc7djflb6aw
Certificate IssuerLet's Encrypt
Subjectfillingimpregnable.com
FingerprintE1:59:58:E6:E8:44:F3:54:74:F3:78:5E:BB:B6:13:99:A0:54:32:99
ValidityMon, 27 Nov 2023 14:34:50 GMT - Sun, 25 Feb 2024 14:34:49 GMT
File type ASCII text, with very long lines (37795), with no line terminators
Hash 57672b18a675fddae01d1c9b873d4724
7e9fc9651bf95211c1b7aa786c4ccd5c34de09c8
3e0a97e5d059f9e2e6488206c04b5f701df88eb69aa16a1029fa8910489abc74
GET /0e/d5/91/0ed591400877d316744c6353cd338f08.js HTTP/1.1
Host: fillingimpregnable.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://troyyourlead.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Fri, 01 Dec 2023 16:18:21 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: a2c8b9507eb5dbf03f55b3ea7b97965a
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
imasdk.googleapis.com/js/sdkloader/ima3.js
128 kB URL imasdk.googleapis.com/js/sdkloader/ima3.js
IP
File type ASCII text, with very long lines (2725)
Size 128 kB (128094 bytes)
Hash 865fefbe42a3df73ca64198c337b20e6
cd1304165333f9fc26d2aa716a4c50c8ce99fbae
4a32283aaba0418ac1b0953af32fbe71948d43e7cdc08abeca552a9373809087
GET /js/sdkloader/ima3.js HTTP/1.1
Host: imasdk.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://troyyourlead.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="ads-doubleclick-instream-static"
report-to: {"group":"ads-doubleclick-instream-static","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-instream-static"}]}
content-length: 128094
date: Fri, 01 Dec 2023 16:18:21 GMT
expires: Fri, 01 Dec 2023 16:18:21 GMT
cache-control: private, max-age=900, stale-while-revalidate=3600
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
imasdk.googleapis.com/js/sdkloader/ima3.js
128 kB URL imasdk.googleapis.com/js/sdkloader/ima3.js
IP
File type ASCII text, with very long lines (2725)
Size 128 kB (128094 bytes)
Hash 865fefbe42a3df73ca64198c337b20e6
cd1304165333f9fc26d2aa716a4c50c8ce99fbae
4a32283aaba0418ac1b0953af32fbe71948d43e7cdc08abeca552a9373809087
GET /js/sdkloader/ima3.js HTTP/1.1
Host: imasdk.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://troyyourlead.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="ads-doubleclick-instream-static"
report-to: {"group":"ads-doubleclick-instream-static","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-instream-static"}]}
content-length: 128094
date: Fri, 01 Dec 2023 16:18:21 GMT
expires: Fri, 01 Dec 2023 16:18:21 GMT
cache-control: private, max-age=900, stale-while-revalidate=3600
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
hqq.to/js/embed.232.js?736
200 OK 61 kB URL GET HTTP/2 hqq.to/js/embed.232.js?736
IP
ASN #262254 DDOS-GUARD CORP.
Requested by https://hqq.to/player/embed_player.php?vid=N6WTXDJGcpAT&autoplay=no
Certificate IssuerSectigo Limited
Subject*.hqq.to
Fingerprint3A:33:0A:E7:38:7D:10:B0:C1:D8:33:9C:C7:D0:F0:B0:9B:06:02:A0
ValidityThu, 23 Mar 2023 00:00:00 GMT - Sat, 23 Mar 2024 23:59:59 GMT
File type Unicode text, UTF-8 text, with very long lines (3159)
Hash 1f8ddc1c2d992850b230c42afa8362a0
7df109b270872ffb9a3416128506ca97f6b96a3a
b9d993712bfa7096a6011d34bae93ac92e21a293fd80a44de425ed767b42e5c9
GET /js/embed.232.js?736 HTTP/1.1
Host: hqq.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hqq.to/player/embed_player.php?vid=Jrrfq5trRPSh&autoplay=no
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 01 Dec 2023 16:18:19 GMT
content-type: application/javascript; charset=UTF-8
vary: Accept-Encoding
last-modified: Sat, 18 Nov 2023 19:14:49 GMT
etag: W/"65590d29-2a6ef"
access-control-allow-origin: *
access-control-allow-credentials: true
accessing-static: 1
cache-control: public, max-age=31536000, stale-while-revalidate=30, stale-if-error=30
pragma: cache
content-encoding: gzip
server: Google Frontend
x-cache-status-inferno-s: HIT
x-inferno-location: static
X-Firefox-Spdy: h2
hqq.to/cdn-cgi/trace
404 Not Found 146 B IP
ASN #262254 DDOS-GUARD CORP.
Requested by https://hqq.to/player/embed_player.php?vid=TtgN5uxDI5uf&autoplay=no
Certificate IssuerSectigo Limited
Subject*.hqq.to
Fingerprint3A:33:0A:E7:38:7D:10:B0:C1:D8:33:9C:C7:D0:F0:B0:9B:06:02:A0
ValidityThu, 23 Mar 2023 00:00:00 GMT - Sat, 23 Mar 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 8eec510e57f5f732fd2cce73df7b73ef
3c0af39ecb3753c5fee3b53d063c7286019eac3b
55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0
GET /cdn-cgi/trace HTTP/1.1
Host: hqq.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: https://hqq.to/player/embed_player.php?vid=TtgN5uxDI5uf&autoplay=no
Cookie: uid=9-Ax0uoRvzJxY75Nt5S5_ukNacmhTKTv
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 404 Not Found
date: Fri, 01 Dec 2023 16:18:21 GMT
content-type: text/html; charset=UTF-8
content-length: 146
x-origin-location: /
server: Google Frontend
x-cache-status-inferno: MISS
x-inferno-location: /
X-Firefox-Spdy: h2
imasdk.googleapis.com/js/sdkloader/ima3.js
30 kB URL imasdk.googleapis.com/js/sdkloader/ima3.js
IP
Hash 7aedd74b68ecc9d1e0a05f8dc85ae204
5aa9bd99a0a4f0684ec3b4091e3cc94b61bf9c15
41f0972d71143cd8ac56c88ccb32b7abc23b1d30456770bae693147bbd1d6216
GET /js/sdkloader/ima3.js HTTP/1.1
Host: imasdk.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://troyyourlead.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="ads-doubleclick-instream-static"
report-to: {"group":"ads-doubleclick-instream-static","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-instream-static"}]}
content-length: 128094
date: Fri, 01 Dec 2023 16:18:21 GMT
expires: Fri, 01 Dec 2023 16:18:21 GMT
cache-control: private, max-age=900, stale-while-revalidate=3600
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
st.mycdn.me/static/MegaPlayer/10-12-1/okVideoPlayerUtils.min.js
200 OK 2.4 kB URL GET HTTP/2 st.mycdn.me/static/MegaPlayer/10-12-1/okVideoPlayerUtils.min.js
IP
Requested by https://ok.ru/videoembed/6827677059699
Certificate IssuerGlobalSign nv-sa
Subject*.mycdn.me
Fingerprint2E:0D:A0:C3:73:22:EE:41:29:80:7E:43:6C:5C:5D:00:00:D5:2B:4C
ValidityFri, 11 Aug 2023 04:51:21 GMT - Wed, 11 Sep 2024 04:51:20 GMT
File type ASCII text, with very long lines (5735)
Hash 3eda81a1ec63344c5d5786e4c43f7909
e84b9066d3cd235a892ec70314772aca6fd5d68f
b20ef25442f0ebdef70f31c54b73be55310f460bde777c7523a1aa4c5aa620cf
GET /static/MegaPlayer/10-12-1/okVideoPlayerUtils.min.js HTTP/1.1
Host: st.mycdn.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ok.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: apache
date: Fri, 01 Dec 2023 16:18:21 GMT
content-type: application/javascript; charset=utf-8
content-length: 2358
last-modified: Wed, 17 May 2023 19:25:57 GMT
vary: Accept-Encoding
content-encoding: br
expires: Sat, 30 Nov 2024 16:18:21 GMT
cache-control: max-age=31536000
access-control-allow-origin: *
timing-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
fonts.googleapis.com/css2?family=Inter:wght@400;500;700&display=swap
200 OK 29 kB URL GET HTTP/3 fonts.googleapis.com/css2?family=Inter:wght@400;500;700&display=swap
IP
Requested by https://troyyourlead.com/e/p4atwal5k7ib
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
FingerprintCC:96:E0:52:E0:9B:EA:A9:A0:F8:88:9A:90:20:11:47:61:00:3C:42
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type gzip compressed data, max compression\012- data
Hash f67c41200be7f30731f5a76308f7cba0
66dd0f17fffa24dfc9c991db1d145a1429a8bd61
35d0915abf2383a87c167755e1deb8cf8d15265e34bfdb2e14654df2df89ba3a
GET /css2?family=Inter:wght@400;500;700&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://troyyourlead.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 01 Dec 2023 16:18:20 GMT
date: Fri, 01 Dec 2023 16:18:20 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
st.mycdn.me/static/MegaPlayer/10-12-1/okVideoPlayerUtils.min.js
200 OK 2.4 kB URL GET HTTP/2 st.mycdn.me/static/MegaPlayer/10-12-1/okVideoPlayerUtils.min.js
IP
Requested by https://ok.ru/videoembed/6827677059699
Certificate IssuerGlobalSign nv-sa
Subject*.mycdn.me
Fingerprint2E:0D:A0:C3:73:22:EE:41:29:80:7E:43:6C:5C:5D:00:00:D5:2B:4C
ValidityFri, 11 Aug 2023 04:51:21 GMT - Wed, 11 Sep 2024 04:51:20 GMT
File type ASCII text, with very long lines (5735)
Hash 3eda81a1ec63344c5d5786e4c43f7909
e84b9066d3cd235a892ec70314772aca6fd5d68f
b20ef25442f0ebdef70f31c54b73be55310f460bde777c7523a1aa4c5aa620cf
GET /static/MegaPlayer/10-12-1/okVideoPlayerUtils.min.js HTTP/1.1
Host: st.mycdn.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ok.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: apache
date: Fri, 01 Dec 2023 16:18:21 GMT
content-type: application/javascript; charset=utf-8
content-length: 2358
last-modified: Wed, 17 May 2023 19:25:57 GMT
vary: Accept-Encoding
content-encoding: br
expires: Sat, 30 Nov 2024 16:18:21 GMT
cache-control: max-age=31536000
access-control-allow-origin: *
timing-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
ok.ru/res/js/b/music2_f49e9523.js
200 OK 5.8 kB URL GET HTTP/2 ok.ru/res/js/b/music2_f49e9523.js
IP
Requested by https://ok.ru/videoembed/6827656153715
Certificate IssuerGlobalSign nv-sa
Subject*.ok.ru
Fingerprint66:20:81:B9:D0:20:96:BF:13:93:E6:76:FF:C4:19:BD:F6:29:0E:A3
ValidityWed, 04 Oct 2023 08:36:03 GMT - Wed, 02 Oct 2024 09:21:02 GMT
File type ASCII text, with very long lines (19439)
Hash 543e9ad14f0245ea12083e476b8e0653
0dc3c70c3f59da19dfbf75e8554b52fc82641454
66e2d48bf20eaeb4aa1859334ef33885bc9b3b899ca5299c7c7be9221c422878
GET /res/js/b/music2_f49e9523.js HTTP/1.1
Host: ok.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://ok.ru/videoembed/6827656153715
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: apache
date: Fri, 01 Dec 2023 16:18:21 GMT
content-type: application/javascript
content-length: 5786
last-modified: Wed, 29 Nov 2023 10:02:00 GMT
vary: Accept-Encoding
content-encoding: br
expires: Sat, 30 Nov 2024 16:18:21 GMT
cache-control: max-age=31536000
timing-allow-origin: *
X-Firefox-Spdy: h2
apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.coKrc9A11Ng.O/m=rpc,shindig_random/rt=j/sv=1/d=1/ed=1/rs=AHpOoo_J8xjByIzBlcB6zLaAkxsUwdPdIw/cb=gapi.loaded_0?le=scs
23 kB URL apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.coKrc9A11Ng.O/m=rpc,shindig_random/rt=j/sv=1/d=1/ed=1/rs=AHpOoo_J8xjByIzBlcB6zLaAkxsUwdPdIw/cb=gapi.loaded_0?le=scs
IP
File type ASCII text, with very long lines (1505)
Hash 009832d077d8fc42d725066c2b774fd6
0994f8575917c4eeb66f6bdb0a65609aa8902cac
b1e012aaab4e65462b456ff6a07a6512c7b11d1682d228531d66b132dcf3d364
GET /_/scs/abc-static/_/js/k=gapi.lb.en.coKrc9A11Ng.O/m=rpc,shindig_random/rt=j/sv=1/d=1/ed=1/rs=AHpOoo_J8xjByIzBlcB6zLaAkxsUwdPdIw/cb=gapi.loaded_0?le=scs HTTP/1.1
Host: apis.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://accounts.google.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/social-frontend-mpm-access
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="social-frontend-mpm-access"
report-to: {"group":"social-frontend-mpm-access","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/social-frontend-mpm-access"}]}
content-length: 23431
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 02:51:23 GMT
expires: Fri, 29 Nov 2024 02:51:23 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 08 Nov 2023 22:37:21 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 134818
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
ok.ru/res/js/lib/jquery-1.8.3_9a61997f.js
30 kB URL ok.ru/res/js/lib/jquery-1.8.3_9a61997f.js
IP
Certificate IssuerGlobalSign nv-sa
Subject*.ok.ru
Fingerprint66:20:81:B9:D0:20:96:BF:13:93:E6:76:FF:C4:19:BD:F6:29:0E:A3
ValidityWed, 04 Oct 2023 08:36:03 GMT - Wed, 02 Oct 2024 09:21:02 GMT
File type Unicode text, UTF-8 text, with very long lines (36291)
Hash 6f84f817d2171348bad6f698e665727d
308c4b78ce059e113743244e24ddb9b320293e2e
9c6f796a442a19a17e46356c731d5883a8f2f5c2c45010e6d0694a3cad738134
GET /res/js/lib/jquery-1.8.3_9a61997f.js HTTP/1.1
Host: ok.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://ok.ru/videoembed/6827666639475
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: apache
date: Fri, 01 Dec 2023 16:18:21 GMT
content-type: application/javascript
content-length: 29956
last-modified: Wed, 29 Nov 2023 10:02:00 GMT
vary: Accept-Encoding
content-encoding: br
expires: Sat, 30 Nov 2024 16:18:21 GMT
cache-control: max-age=31536000
timing-allow-origin: *
X-Firefox-Spdy: h2
st.mycdn.me/static/MegaPlayer/10-12-1/okVideoPlayerUtils.min.js
200 OK 2.4 kB URL GET HTTP/2 st.mycdn.me/static/MegaPlayer/10-12-1/okVideoPlayerUtils.min.js
IP
Requested by https://ok.ru/videoembed/6827677059699
Certificate IssuerGlobalSign nv-sa
Subject*.mycdn.me
Fingerprint2E:0D:A0:C3:73:22:EE:41:29:80:7E:43:6C:5C:5D:00:00:D5:2B:4C
ValidityFri, 11 Aug 2023 04:51:21 GMT - Wed, 11 Sep 2024 04:51:20 GMT
File type ASCII text, with very long lines (5735)
Hash 3eda81a1ec63344c5d5786e4c43f7909
e84b9066d3cd235a892ec70314772aca6fd5d68f
b20ef25442f0ebdef70f31c54b73be55310f460bde777c7523a1aa4c5aa620cf
GET /static/MegaPlayer/10-12-1/okVideoPlayerUtils.min.js HTTP/1.1
Host: st.mycdn.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ok.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: apache
date: Fri, 01 Dec 2023 16:18:21 GMT
content-type: application/javascript; charset=utf-8
content-length: 2358
last-modified: Wed, 17 May 2023 19:25:57 GMT
vary: Accept-Encoding
content-encoding: br
expires: Sat, 30 Nov 2024 16:18:21 GMT
cache-control: max-age=31536000
access-control-allow-origin: *
timing-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
hqq.to/cdn-cgi/trace
404 Not Found 146 B IP
ASN #262254 DDOS-GUARD CORP.
Requested by https://hqq.to/player/embed_player.php?vid=TtgN5uxDI5uf&autoplay=no
Certificate IssuerSectigo Limited
Subject*.hqq.to
Fingerprint3A:33:0A:E7:38:7D:10:B0:C1:D8:33:9C:C7:D0:F0:B0:9B:06:02:A0
ValidityThu, 23 Mar 2023 00:00:00 GMT - Sat, 23 Mar 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 8eec510e57f5f732fd2cce73df7b73ef
3c0af39ecb3753c5fee3b53d063c7286019eac3b
55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0
GET /cdn-cgi/trace HTTP/1.1
Host: hqq.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: https://hqq.to/player/embed_player.php?vid=Jrrfq5trRPSh&autoplay=no
Cookie: uid=9-Ax0uoRvzJxY75Nt5S5_ukNacmhTKTv
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 404 Not Found
date: Fri, 01 Dec 2023 16:18:21 GMT
content-type: text/html; charset=UTF-8
content-length: 146
x-origin-location: /
server: Google Frontend
x-cache-status-inferno: MISS
x-inferno-location: /
X-Firefox-Spdy: h2
ok.ru/res/js/b/primary_ff6a4e9.js
200 OK 28 kB URL GET HTTP/2 ok.ru/res/js/b/primary_ff6a4e9.js
IP
Requested by https://ok.ru/videoembed/6827666639475
Certificate IssuerGlobalSign nv-sa
Subject*.ok.ru
Fingerprint66:20:81:B9:D0:20:96:BF:13:93:E6:76:FF:C4:19:BD:F6:29:0E:A3
ValidityWed, 04 Oct 2023 08:36:03 GMT - Wed, 02 Oct 2024 09:21:02 GMT
File type Unicode text, UTF-8 text, with very long lines (54831)
Hash 88f7c3f0ee1094d01f385f1564aa7e26
c2970012c12e6617dc0cba590206a9e58ac3df4a
24691f814e9e1f3a9ddf88e1d9dba41379b9f5cfdc58f7329478854064aa3c85
GET /res/js/b/primary_ff6a4e9.js HTTP/1.1
Host: ok.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://ok.ru/videoembed/6827666639475
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: apache
date: Fri, 01 Dec 2023 16:18:21 GMT
content-type: application/javascript
content-length: 27928
last-modified: Wed, 29 Nov 2023 10:02:00 GMT
vary: Accept-Encoding
content-encoding: br
expires: Sat, 30 Nov 2024 16:18:21 GMT
cache-control: max-age=31536000
timing-allow-origin: *
X-Firefox-Spdy: h2
ok.ru/res/js/b/music2_f49e9523.js
200 OK 5.8 kB URL GET HTTP/2 ok.ru/res/js/b/music2_f49e9523.js
IP
Requested by https://ok.ru/videoembed/6827656153715
Certificate IssuerGlobalSign nv-sa
Subject*.ok.ru
Fingerprint66:20:81:B9:D0:20:96:BF:13:93:E6:76:FF:C4:19:BD:F6:29:0E:A3
ValidityWed, 04 Oct 2023 08:36:03 GMT - Wed, 02 Oct 2024 09:21:02 GMT
File type ASCII text, with very long lines (19439)
Hash 543e9ad14f0245ea12083e476b8e0653
0dc3c70c3f59da19dfbf75e8554b52fc82641454
66e2d48bf20eaeb4aa1859334ef33885bc9b3b899ca5299c7c7be9221c422878
GET /res/js/b/music2_f49e9523.js HTTP/1.1
Host: ok.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://ok.ru/videoembed/6827666639475
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: apache
date: Fri, 01 Dec 2023 16:18:21 GMT
content-type: application/javascript
content-length: 5786
last-modified: Wed, 29 Nov 2023 10:02:00 GMT
vary: Accept-Encoding
content-encoding: br
expires: Sat, 30 Nov 2024 16:18:21 GMT
cache-control: max-age=31536000
timing-allow-origin: *
X-Firefox-Spdy: h2
troyyourlead.com/e/4pbc0k91o9jh
76 kB URL troyyourlead.com/e/4pbc0k91o9jh
IP
ASN #262254 DDOS-GUARD CORP.
File type gzip compressed data, from Unix\012- data
Hash 463243ffabe223d7c881d60faf691a3e
96a1fd3235f81a3d0365b82c954118523ff11f51
5838b7fd2bf56574a377f969cd071afce367a8ac9d9fefc5cc1ffd7996b325ca
GET /e/4pbc0k91o9jh HTTP/1.1
Host: troyyourlead.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://gnula.nu/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: ddos-guard
strict-transport-security: max-age=2628000
content-security-policy: upgrade-insecure-requests;
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
cache-control: no-cache, private
date: Fri, 01 Dec 2023 16:18:19 GMT
set-cookie: __ddg1_=ETlX3LZ2CfZeZHiSImv4; Domain=.troyyourlead.com; HttpOnly; Path=/; Expires=Sat, 30-Nov-2024 16:18:19 GMT
XSRF-TOKEN=eyJpdiI6IlZ5bmcrZkdFVTM2UEgxYWRCQXp4OFE9PSIsInZhbHVlIjoiRUdSOEZqSGJteDFpdyt4UFl5ajB3TnZLOTF0RXpTMkQ0d0QrK05wVWRRRS9BMHEwVmpsblRySGRlUkJ3aXV6T2NVMjNpZDZoazFpejJ4MVEzNHZGdFkzaEUrSmd5cEJGZlJRcDRkQlpoYThZRTQ1dlB6R0VEc3RXRjg1Zk55bkwiLCJtYWMiOiI1NjRjYmE0ZWJlYjVmMmJjZTE4MjI0Yjc3YjgxYjIyZDdiMDI4YTYwZGUxY2Q3N2I3ZjFhMTk1NjA1NDUyYTk2IiwidGFnIjoiIn0%3D; expires=Fri, 01 Dec 2023 17:48:19 GMT; Max-Age=5400; path=/; secure; samesite=none
voe_session=eyJpdiI6Ikl1ZEJPRWs2dzJ3V1VacTlUNG9RRWc9PSIsInZhbHVlIjoiNEg4K3ROMS9aNTgycmt0R1JUMmMxajRvdDE5QW9KZDJxV1FaRUlvZnBybEtyM0czS3ZxaEZ4WVZkM29jVjdvdGlicXFMTGlTQk9FbGgrRWI1SHhZT1pqWnE5RGJTcHpXYjRWU0JtUlEwV1p1OVdyclRTTFZJSWNJVGIzVnIyT3ciLCJtYWMiOiJiMDFhNzg1ZDEwOTRiMzllYTgzMjYwNTJmNzQxNWIzMTgzZWQzMjg4ZDViODNkMTY3NzNjNmU5MmE0NTJkZmJjIiwidGFnIjoiIn0%3D; expires=Fri, 01 Dec 2023 17:48:19 GMT; Max-Age=5400; path=/; secure; httponly; samesite=none
content-encoding: gzip
X-Firefox-Spdy: h2
accounts.google.com/o/oauth2/postmessageRelay?parent=https%3A%2F%2Fgnula.nu&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.coKrc9A11Ng.O%2Fd%3D1%2Frs%3DAHpOoo_J8xjByIzBlcB6zLaAkxsUwdPdIw%2Fm%3D__features__
28 kB URL accounts.google.com/o/oauth2/postmessageRelay?parent=https%3A%2F%2Fgnula.nu&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.coKrc9A11Ng.O%2Fd%3D1%2Frs%3DAHpOoo_J8xjByIzBlcB6zLaAkxsUwdPdIw%2Fm%3D__features__
IP
File type gzip compressed data, max compression\012- data
Hash 06802c70aa9d22b68d8d0af89cd44d9a
0d0b942ee0fd1fa3a4791af5db4b244c2475748c
0d3a70e783bf98615cb0785eeccca8bb05fb6a0f5ca5d812373e8782c2a030a7
GET /o/oauth2/postmessageRelay?parent=https%3A%2F%2Fgnula.nu&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.coKrc9A11Ng.O%2Fd%3D1%2Frs%3DAHpOoo_J8xjByIzBlcB6zLaAkxsUwdPdIw%2Fm%3D__features__ HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gnula.nu/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/html; charset=utf-8
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Fri, 01 Dec 2023 16:18:19 GMT
content-security-policy: require-trusted-types-for 'script';report-uri /o/cspreport, script-src 'nonce-E4KC1IwgR3p_f-03O7eX8Q' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /o/cspreport
cross-origin-resource-policy: same-site
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
hqq.to/js/script_33.10.js?16
200 OK 8.7 kB URL GET HTTP/2 hqq.to/js/script_33.10.js?16
IP
ASN #262254 DDOS-GUARD CORP.
Requested by https://hqq.to/player/embed_player.php?vid=Jrrfq5trRPSh&autoplay=no
Certificate IssuerSectigo Limited
Subject*.hqq.to
Fingerprint3A:33:0A:E7:38:7D:10:B0:C1:D8:33:9C:C7:D0:F0:B0:9B:06:02:A0
ValidityThu, 23 Mar 2023 00:00:00 GMT - Sat, 23 Mar 2024 23:59:59 GMT
File type gzip compressed data, from Unix\012- data
Hash a2a7075830c23871eaa1d89cb7042cbb
12177ddd1c23df552a4ad883c82e8d6c0d60aee9
ff5e94faa6f7bdbb8b91b40aee80e1ba53460d0f56d7505b62338c5679e5a1ec
GET /js/script_33.10.js?16 HTTP/1.1
Host: hqq.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hqq.to/player/embed_player.php?vid=Jrrfq5trRPSh&autoplay=no
Cookie: uid=9-Ax0uoRvzJxY75Nt5S5_ukNacmhTKTv
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 01 Dec 2023 16:18:21 GMT
content-type: application/javascript; charset=UTF-8
vary: Accept-Encoding
last-modified: Sat, 07 Oct 2023 10:41:14 GMT
etag: W/"652135ca-1b3c"
access-control-allow-origin: *
access-control-allow-credentials: true
accessing-static: 1
cache-control: public, max-age=31536000, stale-while-revalidate=30, stale-if-error=30
pragma: cache
content-encoding: gzip
server: Google Frontend
x-cache-status-inferno-s: HIT
x-inferno-location: static
X-Firefox-Spdy: h2
hqq.to/ad/banner/_adsense_/_adserver/_adview_.ad.json?adzone=top&adsize=300x250&advid=31309162
200 OK 2 B URL GET HTTP/2 hqq.to/ad/banner/_adsense_/_adserver/_adview_.ad.json?adzone=top&adsize=300x250&advid=31309162
IP
ASN #262254 DDOS-GUARD CORP.
Requested by https://hqq.to/player/embed_player.php?vid=TtgN5uxDI5uf&autoplay=no
Certificate IssuerSectigo Limited
Subject*.hqq.to
Fingerprint3A:33:0A:E7:38:7D:10:B0:C1:D8:33:9C:C7:D0:F0:B0:9B:06:02:A0
ValidityThu, 23 Mar 2023 00:00:00 GMT - Sat, 23 Mar 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash d751713988987e9331980363e24189ce
97d170e1550eee4afc0af065b78cda302a97674c
4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
GET /ad/banner/_adsense_/_adserver/_adview_.ad.json?adzone=top&adsize=300x250&advid=31309162 HTTP/1.1
Host: hqq.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hqq.to/player/embed_player.php?vid=TtgN5uxDI5uf&autoplay=no
Cookie: uid=9-Ax0uoRvzJxY75Nt5S5_ukNacmhTKTv
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 01 Dec 2023 16:18:21 GMT
content-type: application/json
content-length: 2
server: Google Frontend
access-control-allow-origin: *
x-inferno-location: banner
X-Firefox-Spdy: h2
hqq.to/js/script_33.10.js?16
200 OK 3.0 kB URL GET HTTP/2 hqq.to/js/script_33.10.js?16
IP
ASN #262254 DDOS-GUARD CORP.
Requested by https://hqq.to/player/embed_player.php?vid=Jrrfq5trRPSh&autoplay=no
Certificate IssuerSectigo Limited
Subject*.hqq.to
Fingerprint3A:33:0A:E7:38:7D:10:B0:C1:D8:33:9C:C7:D0:F0:B0:9B:06:02:A0
ValidityThu, 23 Mar 2023 00:00:00 GMT - Sat, 23 Mar 2024 23:59:59 GMT
File type gzip compressed data, from Unix\012- data
Hash 6ecfbe0179b6000ab80fe234ee2dcb07
4745f3476a760e07756c7e44283c57167d6c99bc
d4883c479f829441b10ffd6b99ff2161bb7d8b7df7f7e17ea07ef949b01f2bc7
GET /js/script_33.10.js?16 HTTP/1.1
Host: hqq.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hqq.to/player/embed_player.php?vid=TtgN5uxDI5uf&autoplay=no
Cookie: uid=9-Ax0uoRvzJxY75Nt5S5_ukNacmhTKTv
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 01 Dec 2023 16:18:21 GMT
content-type: application/javascript; charset=UTF-8
vary: Accept-Encoding
last-modified: Sat, 07 Oct 2023 10:41:14 GMT
etag: W/"652135ca-1b3c"
access-control-allow-origin: *
access-control-allow-credentials: true
accessing-static: 1
cache-control: public, max-age=31536000, stale-while-revalidate=30, stale-if-error=30
pragma: cache
content-encoding: gzip
server: Google Frontend
x-cache-status-inferno-s: HIT
x-inferno-location: static
X-Firefox-Spdy: h2
hqq.to/cdn-cgi/trace
404 Not Found 146 B IP
ASN #262254 DDOS-GUARD CORP.
Requested by https://hqq.to/player/embed_player.php?vid=TtgN5uxDI5uf&autoplay=no
Certificate IssuerSectigo Limited
Subject*.hqq.to
Fingerprint3A:33:0A:E7:38:7D:10:B0:C1:D8:33:9C:C7:D0:F0:B0:9B:06:02:A0
ValidityThu, 23 Mar 2023 00:00:00 GMT - Sat, 23 Mar 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 8eec510e57f5f732fd2cce73df7b73ef
3c0af39ecb3753c5fee3b53d063c7286019eac3b
55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0
GET /cdn-cgi/trace HTTP/1.1
Host: hqq.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: https://hqq.to/player/embed_player.php?vid=N6WTXDJGcpAT&autoplay=no
Cookie: uid=9-Ax0uoRvzJxY75Nt5S5_ukNacmhTKTv
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 404 Not Found
date: Fri, 01 Dec 2023 16:18:21 GMT
content-type: text/html; charset=UTF-8
content-length: 146
x-origin-location: /
server: Google Frontend
x-cache-status-inferno: MISS
x-inferno-location: /
X-Firefox-Spdy: h2
ok.ru/res/js/app/CurrentUserCfg_a412e224.js
200 OK 448 B URL GET HTTP/2 ok.ru/res/js/app/CurrentUserCfg_a412e224.js
IP
Requested by https://ok.ru/videoembed/6827656153715
Certificate IssuerGlobalSign nv-sa
Subject*.ok.ru
Fingerprint66:20:81:B9:D0:20:96:BF:13:93:E6:76:FF:C4:19:BD:F6:29:0E:A3
ValidityWed, 04 Oct 2023 08:36:03 GMT - Wed, 02 Oct 2024 09:21:02 GMT
File type ASCII text, with very long lines (1040)
Hash db9ed780c05b981a9e3c7e72cd15aadd
ff09939d7fe2a55267987a0de51d9c81544942ea
011b7516858ffe5359b854ea3653600ed2dc3b172645cdb2f478230a760cc86f
GET /res/js/app/CurrentUserCfg_a412e224.js HTTP/1.1
Host: ok.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://ok.ru/videoembed/6827656153715
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: apache
date: Fri, 01 Dec 2023 16:18:21 GMT
content-type: application/javascript
content-length: 448
last-modified: Wed, 29 Nov 2023 10:02:00 GMT
vary: Accept-Encoding
content-encoding: br
expires: Sat, 30 Nov 2024 16:18:21 GMT
cache-control: max-age=31536000
timing-allow-origin: *
X-Firefox-Spdy: h2
hqq.to/ad/banner/_adsense_/_adserver/_adview_.ad.json?adzone=top&adsize=300x250&advid=36879932
2 B URL hqq.to/ad/banner/_adsense_/_adserver/_adview_.ad.json?adzone=top&adsize=300x250&advid=36879932
IP
ASN #262254 DDOS-GUARD CORP.
File type JSON data\012- , ASCII text, with no line terminators
Hash d751713988987e9331980363e24189ce
97d170e1550eee4afc0af065b78cda302a97674c
4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
GET /ad/banner/_adsense_/_adserver/_adview_.ad.json?adzone=top&adsize=300x250&advid=36879932 HTTP/1.1
Host: hqq.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hqq.to/player/embed_player.php?vid=TtgN5uxDI5uf&autoplay=no
Cookie: uid=9-Ax0uoRvzJxY75Nt5S5_ukNacmhTKTv
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 01 Dec 2023 16:18:21 GMT
content-type: application/json
content-length: 2
server: Google Frontend
access-control-allow-origin: *
x-inferno-location: banner
X-Firefox-Spdy: h2
hqq.to/ad/banner/_adsense_/_adserver/_adview_.ad.json?adzone=top&adsize=300x250&advid=60223170
200 OK 2 B URL GET HTTP/2 hqq.to/ad/banner/_adsense_/_adserver/_adview_.ad.json?adzone=top&adsize=300x250&advid=60223170
IP
ASN #262254 DDOS-GUARD CORP.
Requested by https://hqq.to/player/embed_player.php?vid=Jrrfq5trRPSh&autoplay=no
Certificate IssuerSectigo Limited
Subject*.hqq.to
Fingerprint3A:33:0A:E7:38:7D:10:B0:C1:D8:33:9C:C7:D0:F0:B0:9B:06:02:A0
ValidityThu, 23 Mar 2023 00:00:00 GMT - Sat, 23 Mar 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash d751713988987e9331980363e24189ce
97d170e1550eee4afc0af065b78cda302a97674c
4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
GET /ad/banner/_adsense_/_adserver/_adview_.ad.json?adzone=top&adsize=300x250&advid=60223170 HTTP/1.1
Host: hqq.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hqq.to/player/embed_player.php?vid=Jrrfq5trRPSh&autoplay=no
Cookie: uid=9-Ax0uoRvzJxY75Nt5S5_ukNacmhTKTv
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 01 Dec 2023 16:18:21 GMT
content-type: application/json
content-length: 2
server: Google Frontend
access-control-allow-origin: *
x-inferno-location: banner
X-Firefox-Spdy: h2
ok.ru/res/js/app/CurrentUserCfg_a412e224.js
200 OK 448 B URL GET HTTP/2 ok.ru/res/js/app/CurrentUserCfg_a412e224.js
IP
Requested by https://ok.ru/videoembed/6827656153715
Certificate IssuerGlobalSign nv-sa
Subject*.ok.ru
Fingerprint66:20:81:B9:D0:20:96:BF:13:93:E6:76:FF:C4:19:BD:F6:29:0E:A3
ValidityWed, 04 Oct 2023 08:36:03 GMT - Wed, 02 Oct 2024 09:21:02 GMT
File type ASCII text, with very long lines (1040)
Hash db9ed780c05b981a9e3c7e72cd15aadd
ff09939d7fe2a55267987a0de51d9c81544942ea
011b7516858ffe5359b854ea3653600ed2dc3b172645cdb2f478230a760cc86f
GET /res/js/app/CurrentUserCfg_a412e224.js HTTP/1.1
Host: ok.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://ok.ru/videoembed/6827666639475
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: apache
date: Fri, 01 Dec 2023 16:18:21 GMT
content-type: application/javascript
content-length: 448
last-modified: Wed, 29 Nov 2023 10:02:00 GMT
vary: Accept-Encoding
content-encoding: br
expires: Sat, 30 Nov 2024 16:18:21 GMT
cache-control: max-age=31536000
timing-allow-origin: *
X-Firefox-Spdy: h2
youradexchange.com/script/suurl5.php?r=6888714&cbur=0.25650392154509627&cbiframe=0&cbWidth=1280&cbHeight=1024&cbtitle=Ver%20Spoiler%20Alert%20(2022)%20online&cbpage=https%3A%2F%2Fgnula.nu%2Fcomedia%2Fver-spoiler-alert-2022-online%2F&cbref=&cbdescription=opci%C3%B3n%202%2C%20castellano%2C%20br-r%20Opci%C3%B3n%201%20Opci%C3%B3n%202%20Opci%C3%B3n%203%20Online%2FDescarga%20opci%C3%B3n%201%2C%20vose%2C%20br-r%20Opci%C3%B3n%201%20Opci%C3%B3n%202%20Opci%C3%B3n%203%20Online%2FDescarga%20opci%C3%B3n%203%2C%20latino%2C%20br-r%20Opci%C3%B3n%201%20Opci%C3%B3n%202%20Opci%C3%B3n%203%20Online%2FDescarga%20Reportar%20Reportar%20enlace%20roto%20M%C3%A1s%20cosas%3A%20(1)%20Nos%20complace%20informar%20que%20ya%20se%20puede%20ver%20la%20pel%C3%ADcula%20Spoiler%20Alert%20de%20forma%20online&cbkeywords=&cbcdn=ashcdn.com&ts=1701447504991&srs=ba217163011a234a8228ff668a453a7a&atv=38.3-sw-suv5&pblcz=6887678
200 OK 715 B URL GET HTTP/3 youradexchange.com/script/suurl5.php?r=6888714&cbur=0.25650392154509627&cbiframe=0&cbWidth=1280&cbHeight=1024&cbtitle=Ver%20Spoiler%20Alert%20(2022)%20online&cbpage=https%3A%2F%2Fgnula.nu%2Fcomedia%2Fver-spoiler-alert-2022-online%2F&cbref=&cbdescription=opci%C3%B3n%202%2C%20castellano%2C%20br-r%20Opci%C3%B3n%201%20Opci%C3%B3n%202%20Opci%C3%B3n%203%20Online%2FDescarga%20opci%C3%B3n%201%2C%20vose%2C%20br-r%20Opci%C3%B3n%201%20Opci%C3%B3n%202%20Opci%C3%B3n%203%20Online%2FDescarga%20opci%C3%B3n%203%2C%20latino%2C%20br-r%20Opci%C3%B3n%201%20Opci%C3%B3n%202%20Opci%C3%B3n%203%20Online%2FDescarga%20Reportar%20Reportar%20enlace%20roto%20M%C3%A1s%20cosas%3A%20(1)%20Nos%20complace%20informar%20que%20ya%20se%20puede%20ver%20la%20pel%C3%ADcula%20Spoiler%20Alert%20de%20forma%20online&cbkeywords=&cbcdn=ashcdn.com&ts=1701447504991&srs=ba217163011a234a8228ff668a453a7a&atv=38.3-sw-suv5&pblcz=6887678
IP
Requested by https://gnula.nu/comedia/ver-spoiler-alert-2022-online/
Certificate IssuerGoogle Trust Services LLC
Subjectyouradexchange.com
FingerprintFD:52:FD:E8:62:0A:DE:66:86:28:19:39:64:21:57:5C:CB:8A:59:D9
ValidityTue, 17 Oct 2023 07:21:58 GMT - Mon, 15 Jan 2024 07:21:57 GMT
File type JSON data\012- , ASCII text, with very long lines (896)
Hash b6156f5ad2e361d0e40e3466f044df65
f8e80bdea3ff5da1189591902317a9c21cc0956e
57f6e231d652ae9328dc1c970da470acd62a0bad2c39a6f225757d98dd4ae616
GET /script/suurl5.php?r=6888714&cbur=0.25650392154509627&cbiframe=0&cbWidth=1280&cbHeight=1024&cbtitle=Ver%20Spoiler%20Alert%20(2022)%20online&cbpage=https%3A%2F%2Fgnula.nu%2Fcomedia%2Fver-spoiler-alert-2022-online%2F&cbref=&cbdescription=opci%C3%B3n%202%2C%20castellano%2C%20br-r%20Opci%C3%B3n%201%20Opci%C3%B3n%202%20Opci%C3%B3n%203%20Online%2FDescarga%20opci%C3%B3n%201%2C%20vose%2C%20br-r%20Opci%C3%B3n%201%20Opci%C3%B3n%202%20Opci%C3%B3n%203%20Online%2FDescarga%20opci%C3%B3n%203%2C%20latino%2C%20br-r%20Opci%C3%B3n%201%20Opci%C3%B3n%202%20Opci%C3%B3n%203%20Online%2FDescarga%20Reportar%20Reportar%20enlace%20roto%20M%C3%A1s%20cosas%3A%20(1)%20Nos%20complace%20informar%20que%20ya%20se%20puede%20ver%20la%20pel%C3%ADcula%20Spoiler%20Alert%20de%20forma%20online&cbkeywords=&cbcdn=ashcdn.com&ts=1701447504991&srs=ba217163011a234a8228ff668a453a7a&atv=38.3-sw-suv5&pblcz=6887678 HTTP/1.1
Host: youradexchange.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://gnula.nu/
Origin: https://gnula.nu
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 01 Dec 2023 16:18:20 GMT
content-type: application/json; charset=utf-8
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: GET, POST, OPTIONS
via: 1.1 google
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=JG2sbkatC%2FOIXqP%2FlysXcYKOaccrnxeiJ2PsplmONVWwMWepeS49WbmUn0w0kcD68ijCzuOe5GrWMvVN3sffbI%2F7NY6m3w7rFI6rAn6N40wtl36cuVKVX40mGpcl3KlzR5x9KgI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82eca5401d48887d-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
hqq.to/js/video.counters.2.js?117
200 OK 905 B URL GET HTTP/2 hqq.to/js/video.counters.2.js?117
IP
ASN #262254 DDOS-GUARD CORP.
Requested by https://hqq.to/player/embed_player.php?vid=N6WTXDJGcpAT&autoplay=no
Certificate IssuerSectigo Limited
Subject*.hqq.to
Fingerprint3A:33:0A:E7:38:7D:10:B0:C1:D8:33:9C:C7:D0:F0:B0:9B:06:02:A0
ValidityThu, 23 Mar 2023 00:00:00 GMT - Sat, 23 Mar 2024 23:59:59 GMT
File type gzip compressed data, from Unix\012- data
Hash e307ecfb16ebb5c77264a86ec7b5f445
4b2fe1cacac6729255fc80bdf5b8e2e873e6a79d
3f8055a1f9897a116c0f453883404eeb5df15b3c65ce229e8531937d3251a4eb
GET /js/video.counters.2.js?117 HTTP/1.1
Host: hqq.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hqq.to/player/embed_player.php?vid=Jrrfq5trRPSh&autoplay=no
Cookie: uid=9-Ax0uoRvzJxY75Nt5S5_ukNacmhTKTv
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 01 Dec 2023 16:18:21 GMT
content-type: application/javascript; charset=UTF-8
vary: Accept-Encoding
last-modified: Sun, 06 Feb 2022 19:35:56 GMT
etag: W/"6200231c-2b8"
access-control-allow-origin: *
access-control-allow-credentials: true
accessing-static: 1
cache-control: public, max-age=31536000, stale-while-revalidate=30, stale-if-error=30
pragma: cache
content-encoding: gzip
server: Google Frontend
x-cache-status-inferno-s: HIT
x-inferno-location: static
X-Firefox-Spdy: h2
hqq.to/ad/banner/_adsense_/_adserver/_adview_.ad.json?adzone=top&adsize=300x250&advid=4582674
2 B URL hqq.to/ad/banner/_adsense_/_adserver/_adview_.ad.json?adzone=top&adsize=300x250&advid=4582674
IP
ASN #262254 DDOS-GUARD CORP.
File type JSON data\012- , ASCII text, with no line terminators
Hash d751713988987e9331980363e24189ce
97d170e1550eee4afc0af065b78cda302a97674c
4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
GET /ad/banner/_adsense_/_adserver/_adview_.ad.json?adzone=top&adsize=300x250&advid=4582674 HTTP/1.1
Host: hqq.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hqq.to/player/embed_player.php?vid=N6WTXDJGcpAT&autoplay=no
Cookie: uid=9-Ax0uoRvzJxY75Nt5S5_ukNacmhTKTv
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 01 Dec 2023 16:18:21 GMT
content-type: application/json
content-length: 2
server: Google Frontend
access-control-allow-origin: *
x-inferno-location: banner
X-Firefox-Spdy: h2
hqq.to/js/video.counters.2.js?117
200 OK 1.4 kB URL GET HTTP/2 hqq.to/js/video.counters.2.js?117
IP
ASN #262254 DDOS-GUARD CORP.
Requested by https://hqq.to/player/embed_player.php?vid=N6WTXDJGcpAT&autoplay=no
Certificate IssuerSectigo Limited
Subject*.hqq.to
Fingerprint3A:33:0A:E7:38:7D:10:B0:C1:D8:33:9C:C7:D0:F0:B0:9B:06:02:A0
ValidityThu, 23 Mar 2023 00:00:00 GMT - Sat, 23 Mar 2024 23:59:59 GMT
File type gzip compressed data, from Unix\012- data
Hash e812b8ec84ce5135afdf0c2381af4464
1cebd6089463d4909b9e10abee0c401e7cc2ea9f
53cc45739647564d9566b6afea3d7b47e5645b4bf5056ad5b65886fd76d731cd
GET /js/video.counters.2.js?117 HTTP/1.1
Host: hqq.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hqq.to/player/embed_player.php?vid=TtgN5uxDI5uf&autoplay=no
Cookie: uid=9-Ax0uoRvzJxY75Nt5S5_ukNacmhTKTv
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 01 Dec 2023 16:18:21 GMT
content-type: application/javascript; charset=UTF-8
vary: Accept-Encoding
last-modified: Sun, 06 Feb 2022 19:35:56 GMT
etag: W/"6200231c-2b8"
access-control-allow-origin: *
access-control-allow-credentials: true
accessing-static: 1
cache-control: public, max-age=31536000, stale-while-revalidate=30, stale-if-error=30
pragma: cache
content-encoding: gzip
server: Google Frontend
x-cache-status-inferno-s: HIT
x-inferno-location: static
X-Firefox-Spdy: h2
sadjklq.com/netu.php
200 OK 898 B IP
Requested by https://hqq.to/player/embed_player.php?vid=TtgN5uxDI5uf&autoplay=no
Certificate IssuerGoogle Trust Services LLC
Subjectsadjklq.com
Fingerprint72:69:F9:BF:D9:20:23:59:4D:E4:C9:75:C9:BA:4F:D7:3D:E8:70:27
ValidityWed, 22 Nov 2023 23:37:41 GMT - Tue, 20 Feb 2024 23:37:40 GMT
File type ASCII text, with very long lines (855), with CRLF line terminators
Hash df8c681bb73624ea8120e042a32699b3
3a7c73aee03c1e2b233944773914ee0865d0a2b4
f140ccf5cbd8bee72a1ccff6b05759fde131c9005e38169132fd1beb24aa3c00
GET /netu.php HTTP/1.1
Host: sadjklq.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hqq.to/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 01 Dec 2023 16:18:21 GMT
content-type: application/javascript
x-powered-by: PHP/7.1.33
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=rzvbemmVRUHOyfYPbTFMihvvjF1TLtUhrv9NkJ3EPmPu88VaLQlaxr5V50hVA3a8A2flwcPeBD%2BPcIbRboIlbuYrymswZZ%2BkcmvKCr%2FfLz3X2YO40Alff%2FiZyeGHKQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82eca543c81756c6-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
ok.ru/res/js/app/GwtConfig_828bddda.js
200 OK 335 B URL GET HTTP/2 ok.ru/res/js/app/GwtConfig_828bddda.js
IP
Requested by https://ok.ru/videoembed/6827677059699
Certificate IssuerGlobalSign nv-sa
Subject*.ok.ru
Fingerprint66:20:81:B9:D0:20:96:BF:13:93:E6:76:FF:C4:19:BD:F6:29:0E:A3
ValidityWed, 04 Oct 2023 08:36:03 GMT - Wed, 02 Oct 2024 09:21:02 GMT
File type ASCII text, with very long lines (564)
Hash 52abb011cb05ae817b45ccd2b0b19af5
618fbc86477af20933cc93bd0709ff40692377e6
11e74bb775c668e99f0f4236c28645a76a9d14f42a7f3f54ebe24ba7256b649b
GET /res/js/app/GwtConfig_828bddda.js HTTP/1.1
Host: ok.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://ok.ru/videoembed/6827677059699
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: apache
date: Fri, 01 Dec 2023 16:18:21 GMT
content-type: application/javascript
content-length: 335
last-modified: Wed, 29 Nov 2023 10:02:00 GMT
vary: Accept-Encoding
content-encoding: br
expires: Sat, 30 Nov 2024 16:18:21 GMT
cache-control: max-age=31536000
timing-allow-origin: *
X-Firefox-Spdy: h2
ok.ru/res/js/lib/noext_2f9c7b37.js
200 OK 293 B URL GET HTTP/2 ok.ru/res/js/lib/noext_2f9c7b37.js
IP
Requested by https://ok.ru/videoembed/6827656153715
Certificate IssuerGlobalSign nv-sa
Subject*.ok.ru
Fingerprint66:20:81:B9:D0:20:96:BF:13:93:E6:76:FF:C4:19:BD:F6:29:0E:A3
ValidityWed, 04 Oct 2023 08:36:03 GMT - Wed, 02 Oct 2024 09:21:02 GMT
Hash 49e131534b7bc45107a6a1f313522bf5
8a4ac5d7eae94949dbb47e0632ecc20e418f4518
c5a7c2b450ec11b8d4e5ec56c14aac3d96b1766c76ed8453437d5228395657dd
GET /res/js/lib/noext_2f9c7b37.js HTTP/1.1
Host: ok.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://ok.ru/videoembed/6827656153715
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: apache
date: Fri, 01 Dec 2023 16:18:21 GMT
content-type: application/javascript
content-length: 293
last-modified: Wed, 29 Nov 2023 10:02:00 GMT
vary: Accept-Encoding
content-encoding: br
expires: Sat, 30 Nov 2024 16:18:21 GMT
cache-control: max-age=31536000
timing-allow-origin: *
X-Firefox-Spdy: h2
unpkg.com/progressbar.js@1.1.0/dist/progressbar.min.js
200 OK 9.1 kB URL GET HTTP/2 unpkg.com/progressbar.js@1.1.0/dist/progressbar.min.js
IP
Requested by https://hqq.to/player/embed_player.php?vid=Jrrfq5trRPSh&autoplay=no
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintF7:B6:41:CA:15:FD:D1:0C:27:39:55:5D:C5:CE:3F:1C:A6:BB:9D:6F
ValidityTue, 02 May 2023 00:00:00 GMT - Wed, 01 May 2024 23:59:59 GMT
File type ASCII text, with very long lines (29325)
Hash 013916ab61482481d8de9742a0f95bee
546bb742502faa36f8c2bb954c2f028187660404
73cdea3ea0691f9ac4150be0c937dc2ee7eaa10205168a84e41ef5c9e05784b7
GET /progressbar.js@1.1.0/dist/progressbar.min.js HTTP/1.1
Host: unpkg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hqq.to/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 01 Dec 2023 16:18:19 GMT
content-type: application/javascript; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=31536000
last-modified: Sat, 26 Oct 1985 08:15:00 GMT
etag: W/"7315-VGu3QlAvqjb4wruVTC8CgYdmBAQ"
via: 1.1 fly.io
fly-request-id: 01HFTT9KCTZ41V3VWBXBAR6DX1-arn
cf-cache-status: HIT
age: 814198
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 82eca5398cb856b5-OSL
content-encoding: br
X-Firefox-Spdy: h2
ok.ru/res/js/lib/noext_2f9c7b37.js
200 OK 293 B URL GET HTTP/2 ok.ru/res/js/lib/noext_2f9c7b37.js
IP
Requested by https://ok.ru/videoembed/6827656153715
Certificate IssuerGlobalSign nv-sa
Subject*.ok.ru
Fingerprint66:20:81:B9:D0:20:96:BF:13:93:E6:76:FF:C4:19:BD:F6:29:0E:A3
ValidityWed, 04 Oct 2023 08:36:03 GMT - Wed, 02 Oct 2024 09:21:02 GMT
Hash 49e131534b7bc45107a6a1f313522bf5
8a4ac5d7eae94949dbb47e0632ecc20e418f4518
c5a7c2b450ec11b8d4e5ec56c14aac3d96b1766c76ed8453437d5228395657dd
GET /res/js/lib/noext_2f9c7b37.js HTTP/1.1
Host: ok.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://ok.ru/videoembed/6827677059699
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: apache
date: Fri, 01 Dec 2023 16:18:21 GMT
content-type: application/javascript
content-length: 293
last-modified: Wed, 29 Nov 2023 10:02:00 GMT
vary: Accept-Encoding
content-encoding: br
expires: Sat, 30 Nov 2024 16:18:21 GMT
cache-control: max-age=31536000
timing-allow-origin: *
X-Firefox-Spdy: h2
st.mycdn.me/static/music/0-4-26-29/model.js
200 OK 21 kB URL GET HTTP/2 st.mycdn.me/static/music/0-4-26-29/model.js
IP
Requested by https://ok.ru/videoembed/6827677059699
Certificate IssuerGlobalSign nv-sa
Subject*.mycdn.me
Fingerprint2E:0D:A0:C3:73:22:EE:41:29:80:7E:43:6C:5C:5D:00:00:D5:2B:4C
ValidityFri, 11 Aug 2023 04:51:21 GMT - Wed, 11 Sep 2024 04:51:20 GMT
File type ASCII text, with very long lines (55076)
Hash 1233f51d03360aacfa7b43003bd61014
2acf4a51c064c867d78a6335b201c7bab0b92afc
0e7539bdcb6a14a5e22f0afb3ec837ed9c5356794f1431072dfada76a8916762
GET /static/music/0-4-26-29/model.js HTTP/1.1
Host: st.mycdn.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ok.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: apache
date: Fri, 01 Dec 2023 16:18:24 GMT
content-type: application/javascript; charset=utf-8
content-length: 21051
last-modified: Tue, 14 Nov 2023 14:23:13 GMT
vary: Accept-Encoding
content-encoding: br
expires: Sat, 30 Nov 2024 16:18:24 GMT
cache-control: max-age=31536000
access-control-allow-origin: *
timing-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
st.mycdn.me/static/music/0-4-26-29/model.js
200 OK 21 kB URL GET HTTP/2 st.mycdn.me/static/music/0-4-26-29/model.js
IP
Requested by https://ok.ru/videoembed/6827677059699
Certificate IssuerGlobalSign nv-sa
Subject*.mycdn.me
Fingerprint2E:0D:A0:C3:73:22:EE:41:29:80:7E:43:6C:5C:5D:00:00:D5:2B:4C
ValidityFri, 11 Aug 2023 04:51:21 GMT - Wed, 11 Sep 2024 04:51:20 GMT
File type ASCII text, with very long lines (55076)
Hash 1233f51d03360aacfa7b43003bd61014
2acf4a51c064c867d78a6335b201c7bab0b92afc
0e7539bdcb6a14a5e22f0afb3ec837ed9c5356794f1431072dfada76a8916762
GET /static/music/0-4-26-29/model.js HTTP/1.1
Host: st.mycdn.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ok.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: apache
date: Fri, 01 Dec 2023 16:18:24 GMT
content-type: application/javascript; charset=utf-8
content-length: 21051
last-modified: Tue, 14 Nov 2023 14:23:13 GMT
vary: Accept-Encoding
content-encoding: br
expires: Sat, 30 Nov 2024 16:18:24 GMT
cache-control: max-age=31536000
access-control-allow-origin: *
timing-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
st.mycdn.me/static/music/0-4-26-29/model.js
200 OK 21 kB URL GET HTTP/2 st.mycdn.me/static/music/0-4-26-29/model.js
IP
Requested by https://ok.ru/videoembed/6827677059699
Certificate IssuerGlobalSign nv-sa
Subject*.mycdn.me
Fingerprint2E:0D:A0:C3:73:22:EE:41:29:80:7E:43:6C:5C:5D:00:00:D5:2B:4C
ValidityFri, 11 Aug 2023 04:51:21 GMT - Wed, 11 Sep 2024 04:51:20 GMT
File type ASCII text, with very long lines (55076)
Hash 1233f51d03360aacfa7b43003bd61014
2acf4a51c064c867d78a6335b201c7bab0b92afc
0e7539bdcb6a14a5e22f0afb3ec837ed9c5356794f1431072dfada76a8916762
GET /static/music/0-4-26-29/model.js HTTP/1.1
Host: st.mycdn.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ok.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: apache
date: Fri, 01 Dec 2023 16:18:24 GMT
content-type: application/javascript; charset=utf-8
content-length: 21051
last-modified: Tue, 14 Nov 2023 14:23:13 GMT
vary: Accept-Encoding
content-encoding: br
expires: Sat, 30 Nov 2024 16:18:24 GMT
cache-control: max-age=31536000
access-control-allow-origin: *
timing-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
youradexchange.com/ut/hb.php?cb=0.3898853850718683&v=1
0 B URL youradexchange.com/ut/hb.php?cb=0.3898853850718683&v=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /ut/hb.php?cb=0.3898853850718683&v=1 HTTP/1.1
Host: youradexchange.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain; charset=utf-8
Content-Length: 1307
Origin: https://gnula.nu
DNT: 1
Connection: keep-alive
Referer: https://gnula.nu/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/3 204 No Content
date: Fri, 01 Dec 2023 16:18:39 GMT
access-control-allow-origin: *
via: 1.1 google
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=xnSWqgpqYlg1QR4SnkuFkzuj%2FK5e8vm7OFWuIBNpW4u4sOrCH9mRRndUEdgU52lwddCwYMifGkbAvos6XLwuDK1WJIXGJxlPZtvqBBT7asnukb2v1BXdYeiFXXM4HVwgAmtz100%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82eca5b74a4f887d-LHR
alt-svc: h3=":443"; ma=86400
videocdnmetrika.com/f.php?sid=212040
200 OK 0 B URL GET HTTP/2 videocdnmetrika.com/f.php?sid=212040
IP
Requested by https://hqq.to/player/embed_player.php?vid=TtgN5uxDI5uf&autoplay=no
Certificate IssuerGoogle Trust Services LLC
Subjectvideocdnmetrika.com
Fingerprint65:C2:6F:7C:ED:59:22:15:7F:47:FD:32:BD:2B:DB:FB:34:68:26:E6
ValiditySun, 26 Nov 2023 13:44:21 GMT - Sat, 24 Feb 2024 13:44:20 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /f.php?sid=212040 HTTP/1.1
Host: videocdnmetrika.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hqq.to/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 01 Dec 2023 16:18:21 GMT
content-type: text/html; charset=UTF-8
x-powered-by: PHP/7.1.33
cache-control: no-store, no-cache, must-revalidate, max-age=0
x-robots-tag: noindex
pragma: no-cache
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=CFopZFLytEkb3Ym%2FmzmpSeFj16Jy4xplV0bRRxjc4oqdtRA8hp1E08LAyifUmd95M7SSf8U4eoTr5sVsmhbioT15EUoLhkC2FHUa7TXf69zluYeBV1sCsMql1O3bE2zITAbNiATn"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82eca5464aff52ea-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
videocdnmetrika.com/f.php?sid=212040
200 OK 0 B URL GET HTTP/2 videocdnmetrika.com/f.php?sid=212040
IP
Requested by https://hqq.to/player/embed_player.php?vid=Jrrfq5trRPSh&autoplay=no
Certificate IssuerGoogle Trust Services LLC
Subjectvideocdnmetrika.com
Fingerprint65:C2:6F:7C:ED:59:22:15:7F:47:FD:32:BD:2B:DB:FB:34:68:26:E6
ValiditySun, 26 Nov 2023 13:44:21 GMT - Sat, 24 Feb 2024 13:44:20 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /f.php?sid=212040 HTTP/1.1
Host: videocdnmetrika.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hqq.to/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 01 Dec 2023 16:18:21 GMT
content-type: text/html; charset=UTF-8
x-powered-by: PHP/7.1.33
cache-control: no-store, no-cache, must-revalidate, max-age=0
x-robots-tag: noindex
pragma: no-cache
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Riu%2FvOc56nsQB1oZ%2FLDduTPFx9%2BxGPRurg9fl9dLtjYY%2BaxU12NIcUsLnp6JbjHAnWWpPpSWjaTU%2FV%2B1enT7%2FQ23p2vkUI2Z3CZDyDHn78R3hvDYucuffHD%2B5XYxXS7RknfrnLoG"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82eca5463af052ea-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/favicon.ico
0 B URL GET duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/favicon.ico
IP
Requested by https://hqq.to/player/embed_player.php?vid=TtgN5uxDI5uf&autoplay=no
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /favicon.ico HTTP/1.1
Host: duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hqq.to/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/favicon.ico
0 B URL GET duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/favicon.ico
IP
Requested by https://hqq.to/player/embed_player.php?vid=N6WTXDJGcpAT&autoplay=no
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /favicon.ico HTTP/1.1
Host: duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hqq.to/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
hqq.to/ad/banner/_adsense_/_adserver/_adview_.ad.json?adzone=top&adsize=300x250&advid=55572252
200 OK 2 B URL GET HTTP/2 hqq.to/ad/banner/_adsense_/_adserver/_adview_.ad.json?adzone=top&adsize=300x250&advid=55572252
IP
ASN #262254 DDOS-GUARD CORP.
Requested by https://hqq.to/player/embed_player.php?vid=Jrrfq5trRPSh&autoplay=no
Certificate IssuerSectigo Limited
Subject*.hqq.to
Fingerprint3A:33:0A:E7:38:7D:10:B0:C1:D8:33:9C:C7:D0:F0:B0:9B:06:02:A0
ValidityThu, 23 Mar 2023 00:00:00 GMT - Sat, 23 Mar 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash d751713988987e9331980363e24189ce
97d170e1550eee4afc0af065b78cda302a97674c
4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
GET /ad/banner/_adsense_/_adserver/_adview_.ad.json?adzone=top&adsize=300x250&advid=55572252 HTTP/1.1
Host: hqq.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hqq.to/player/embed_player.php?vid=Jrrfq5trRPSh&autoplay=no
Cookie: uid=9-Ax0uoRvzJxY75Nt5S5_ukNacmhTKTv
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 01 Dec 2023 16:18:21 GMT
content-type: application/json
content-length: 2
server: Google Frontend
access-control-allow-origin: *
x-inferno-location: banner
X-Firefox-Spdy: h2
ashcdn.com/script/suv4.js
200 OK 203 kB URL GET HTTP/3 ashcdn.com/script/suv4.js
IP
Requested by https://gnula.nu/comedia/ver-spoiler-alert-2022-online/
Certificate IssuerLet's Encrypt
Subjectashcdn.com
Fingerprint0D:38:C3:F3:28:9B:4F:FF:80:0F:20:0D:06:A3:16:0E:77:78:02:3B
ValiditySat, 04 Nov 2023 11:25:53 GMT - Fri, 02 Feb 2024 11:25:52 GMT
Size 203 kB (202851 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /script/suv4.js HTTP/1.1
Host: ashcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gnula.nu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 01 Dec 2023 16:18:19 GMT
content-type: text/javascript
x-guploader-uploadid: ABPtcPqj4J0Stx6Fe-5LrooBAphoPiL3hwj9APR2BIRowKf_NyNBX-6x-eMLK0fZCPUqYD55r_erIJKoDXbLLHrjXleQOctATTQF
x-goog-generation: 1701078116653425
x-goog-metageneration: 2
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 202851
x-goog-hash: crc32c=U3QS7A==, md5=3lRpDtr/hi19RVmTJsWEng==
x-goog-storage-class: MULTI_REGIONAL
access-control-allow-origin: *
expires: Fri, 01 Dec 2023 16:58:41 GMT
cache-control: public, max-age=3600
last-modified: Mon, 27 Nov 2023 09:41:56 GMT
etag: W/"de54690edaff862d7d45599326c5849e"
age: 935
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=YKvQLP4RiyynofUBHP3ofSYZrSMXC2QYXxqbj3%2FIysBRVcgGRLz3bkkjxAIvVEtJVtL%2Ba7ZhEtZac3Fcr%2B7NrkFLasanzYQy%2FlFQP7F26SC0MD%2BL0YhCkkR6vSrv"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82eca536ecc05693-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
hqq.to/player/embed_player.php?vid=TtgN5uxDI5uf&autoplay=no
200 OK 148 kB URL GET HTTP/2 hqq.to/player/embed_player.php?vid=TtgN5uxDI5uf&autoplay=no
IP
ASN #262254 DDOS-GUARD CORP.
Requested by https://gnula.nu/comedia/ver-spoiler-alert-2022-online/
Certificate IssuerSectigo Limited
Subject*.hqq.to
Fingerprint3A:33:0A:E7:38:7D:10:B0:C1:D8:33:9C:C7:D0:F0:B0:9B:06:02:A0
ValidityThu, 23 Mar 2023 00:00:00 GMT - Sat, 23 Mar 2024 23:59:59 GMT
Size 148 kB (147912 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /player/embed_player.php?vid=TtgN5uxDI5uf&autoplay=no HTTP/1.1
Host: hqq.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 01 Dec 2023 16:18:18 GMT
content-type: text/html; charset=utf-8
vary: Accept-Encoding
x-robots-tag: 'none, noindex, nofollow, noarchive, nosnippet, noodp, notranslate, noimageindex'
x-content-type-options: nosniff
x-xss-protection: 1; mode=block;
p3p: policyref="http://www.example.com/w3c/p3p.xml", CP="CURa ADMa DEVa CONo HISa OUR IND DSP ALL COR"
link: <//hqq.to>; rel=preconnect; crossorigin, <//global.stun.twilio.com>; rel=dns-prefetch; crossorigin, <//counter.yadro.ru>; rel=preconnect; crossorigin, <//imasdk.googleapis.com>; rel=preconnect; crossorigin, <//stun2.l.google.com>; rel=dns-prefetch; crossorigin, <//unpkg.com>; rel=preconnect; crossorigin, <//mc.yandex.ru>; rel=preconnect; crossorigin, <//cdn.jsdelivr.net>; rel=preconnect; crossorigin, <//wss.commentsmodule.com>; rel=dns-prefetch; crossorigin, <//www.gstatic.com>; rel=preconnect; crossorigin, <//imasdk.googleapis.com>; rel=preconnect; crossorigin, <//storage.googleapis.com>; rel=preconnect; crossorigin, <//www.google.com>; rel=preconnect; crossorigin,<//a.labadena.com>; rel=preconnect; crossorigin, <//deliver.vkcdnservice.com>; rel=preconnect; crossorigin,<//vkcdnservice.appspot.com.storage.googleapis.com>; rel=preconnect; crossorigin, <//www.google.com>; rel=preconnect; crossorigin, <//www.recaptcha.net>; rel=preconnect; crossorigin, <//cdnjs.cloudflare.com>; rel=preconnect; crossorigin
pragma: no-cache
x-origin-location: player
cache-control: no-store, no-cache, must-revalidate, max-age=0, post-check=0, pre-check=0
content-encoding: gzip
server: Google Frontend
x-cache-status-inferno: MISS
x-inferno-location: player
x-inferno-limit-req: PASSED
X-Firefox-Spdy: h2
troyyourlead.com/e/p4atwal5k7ib
200 OK 117 kB URL GET HTTP/2 troyyourlead.com/e/p4atwal5k7ib
IP
ASN #262254 DDOS-GUARD CORP.
Requested by https://gnula.nu/comedia/ver-spoiler-alert-2022-online/
Certificate IssuerLet's Encrypt
Subjecttroyyourlead.com
Fingerprint6B:7D:62:88:DA:D4:8D:82:59:3E:7F:32:8B:5E:E6:EE:08:8C:98:00
ValidityFri, 24 Nov 2023 15:34:59 GMT - Thu, 22 Feb 2024 15:34:58 GMT
Size 117 kB (117272 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /e/p4atwal5k7ib HTTP/1.1
Host: troyyourlead.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://gnula.nu/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: ddos-guard
strict-transport-security: max-age=2628000
content-security-policy: upgrade-insecure-requests;
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
cache-control: no-cache, private
date: Fri, 01 Dec 2023 16:18:19 GMT
set-cookie: __ddg1_=nkemFi6fy7iRTUNzLiqf; Domain=.troyyourlead.com; HttpOnly; Path=/; Expires=Sat, 30-Nov-2024 16:18:19 GMT
XSRF-TOKEN=eyJpdiI6IlJzSUJtbmdYR1hwZzZ3cmI4ampudlE9PSIsInZhbHVlIjoiMExMMnR3dThVNVZlM04yeFcweGxXRFA1STM2QVRJVklIdDlaN0R3OWhzNE9yeklqRzJ0a1lyb0NGT2g5VS8zYjVOWkpSaFBCVWN2M29MTGMrM1o2Tkdpd1ZlWDJrN0prd1FxTkMvcGROL1AxTWpVZzh3TDkrenJXazJVWGIvb1ciLCJtYWMiOiI4NTQxZjgyMWM5N2VhYzZjYzViOWFiMzNhNWZlMTAzNTg3M2ZmZmEyYjAwOGY5OTZhYWRlM2U4MmVhMDFhOTg5IiwidGFnIjoiIn0%3D; expires=Fri, 01 Dec 2023 17:48:19 GMT; Max-Age=5400; path=/; secure; samesite=none
voe_session=eyJpdiI6IjJFNjd3ZHNZaWp1dUxnMXNqV1VsMGc9PSIsInZhbHVlIjoiYUErNDFqQk90bnNzU3cxeDdjMTh2UWRzckdtOGdWTDBCL1BnelY4ZEJLeTFKYmw4Q2tPaVRGRU1jTTlzUEtYb0ZWVm02aThpMG5hUHo1cXNzakVLemN1Z1NGc0ZWWiswczdxdDRlU1NXeW82RkQvQ2d3OHRrWmR5YlBtUjFYSzgiLCJtYWMiOiI0MzIyOTE4NWY4OGE2OTg0NGI2Njc2ZDczYTE1MjY0OTFiMGZmNGVhZDRkMTYxYTgyMWFjMzU5MmIxNmVjZjU0IiwidGFnIjoiIn0%3D; expires=Fri, 01 Dec 2023 17:48:19 GMT; Max-Age=5400; path=/; secure; httponly; samesite=none
content-encoding: gzip
X-Firefox-Spdy: h2
ok.ru/web-api/pts/video.player/en
200 OK 5.1 kB URL GET HTTP/2 ok.ru/web-api/pts/video.player/en
IP
Requested by https://ok.ru/videoembed/6827656153715
Certificate IssuerGlobalSign nv-sa
Subject*.ok.ru
Fingerprint66:20:81:B9:D0:20:96:BF:13:93:E6:76:FF:C4:19:BD:F6:29:0E:A3
ValidityWed, 04 Oct 2023 08:36:03 GMT - Wed, 02 Oct 2024 09:21:02 GMT
File type Unicode text, UTF-8 text, with very long lines (5670), with no line terminators
Hash 186b13f627c89d7e7e962d96b5d11cbf
77eec48dfcb050f489b125edfde33c105159e2ec
a0e8065dae117f2ac770840cf138304761b17521944c6acc5d58ef1178753de9
GET /web-api/pts/video.player/en HTTP/1.1
Host: ok.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://ok.ru/videoembed/6827656153715
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: apache
date: Fri, 01 Dec 2023 16:18:21 GMT
content-type: text/javascript;charset=UTF-8
vary: Accept-Encoding
cache-control: no-cache, no-store
pragma: no-cache
expires: Mon, 26 Jul 1997 05:00:00 GMT
set-cookie: bci=8946956520183238507; Domain=.ok.ru; Expires=Wed, 19 Dec 2091 19:32:28 GMT; Path=/; Secure; HttpOnly
_statid=eaa42dcb-9fd5-4fa3-8edd-5937c6cb70bc; Domain=.ok.ru; Expires=Wed, 19 Dec 2091 19:32:28 GMT; Path=/; Secure; HttpOnly
content-security-policy: default-src data: 'self' 'unsafe-inline' 'unsafe-eval' ok.ru *.ok.ru odnoklassniki.ru *.odnoklassniki.ru mycdn.me http://*.mycdn.me https://*.mycdn.me wss://ad.mail.ru *.mail.ru *.imgsmail.ru *.mradx.net *.serving-sys.com *.googleapis.com *.gstatic.com www.google.com https://api-maps.yandex.ru yastatic.net yandex.st *.doubleverify.com *.adsafeprotected.com https://consentmanager.mgr.consensu.org https://cdn.consentmanager.mgr.consensu.org https://football.sportmail.ru *.google.ru *.google.com *.googlesyndication.com *.yandex.ru blob:; script-src 'unsafe-inline' 'unsafe-eval' *.mail.ru https://*.mail.ru *.imgsmail.ru *.mradx.net ok.ru *.ok.ru odnoklassniki.ru *.odnoklassniki.ru mycdn.me http://*.mycdn.me https://*.mycdn.me mc.yandex.ru an.yandex.ru yastatic.net yandex.st *.google-analytics.com api-maps.yandex.ru https://api-maps.yandex.ru https://clck.yandex.ru *.googleapis.com *.gstatic.com www.google.com www.youtube.com https://www.youtube.com *.ytimg.com https://*.ytimg.com *.doubleverify.com *.dvtps.com *.doubleclick.net *.googletagservices.com *.googlesyndication.com *.googleadservices.com *.goodgame.ru https://*.goodgame.ru https://*.moatads.com *.adlooxtracking.com *.adlooxtracking.ru *.adsafeprotected.com *.serving-sys.com *.serving-sys.ru *.weborama.fr *.weborama-tech.ru https://enterprise.api-maps.yandex.ru https://suggest-maps.yandex.ru https://*.hit.gemius.pl https://consentmanager.mgr.consensu.org https://cdn.consentmanager.mgr.consensu.org https://gum.criteo.com https://football.sportmail.ru *.googletagmanager.com connect.facebook.net *.google.ru *.google.com *.googlesyndication.com yandex.ru; worker-src blob: 'self'; connect-src * wss: blob: data:; font-src * data: blob:; frame-src * blob: 'self'; img-src * data: blob: about:; media-src * data: blob:; object-src *; report-uri /csp/report;
content-security-policy-report-only: default-src data: blob: about: 'self' 'unsafe-inline' 'unsafe-eval' https: wss:; report-uri /csp/report?always;
etag: W/"3c30877ed2c34ff56d1ec5e88e157638"
content-encoding: br
X-Firefox-Spdy: h2
accounts.google.com/o/oauth2/postmessageRelay?parent=https%3A%2F%2Fgnula.nu&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.coKrc9A11Ng.O%2Fd%3D1%2Frs%3DAHpOoo_J8xjByIzBlcB6zLaAkxsUwdPdIw%2Fm%3D__features__
200 OK 565 B URL GET HTTP/2 accounts.google.com/o/oauth2/postmessageRelay?parent=https%3A%2F%2Fgnula.nu&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.coKrc9A11Ng.O%2Fd%3D1%2Frs%3DAHpOoo_J8xjByIzBlcB6zLaAkxsUwdPdIw%2Fm%3D__features__
IP
Requested by https://gnula.nu/comedia/ver-spoiler-alert-2022-online/
Certificate IssuerGoogle Trust Services LLC
Subjectaccounts.google.com
Fingerprint1E:A9:E1:96:78:1D:08:FC:96:C8:C2:34:4F:02:D3:3D:FA:9A:D2:6B
ValidityMon, 23 Oct 2023 11:25:04 GMT - Mon, 15 Jan 2024 11:25:03 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (585), with no line terminators
Hash 7ff610fc51fa2eb4100ee2b08043df69
184340f3643696826db2192e82fd1f87c93c9925
93299a386588213ded2bc960acca4e98f1820b33fd2347422aef53fc430f2c8a
GET /o/oauth2/postmessageRelay?parent=https%3A%2F%2Fgnula.nu&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.coKrc9A11Ng.O%2Fd%3D1%2Frs%3DAHpOoo_J8xjByIzBlcB6zLaAkxsUwdPdIw%2Fm%3D__features__ HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gnula.nu/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/html; charset=utf-8
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Fri, 01 Dec 2023 16:18:19 GMT
content-security-policy: require-trusted-types-for 'script';report-uri /o/cspreport, script-src 'nonce-E4KC1IwgR3p_f-03O7eX8Q' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /o/cspreport
cross-origin-resource-policy: same-site
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ok.ru/videoembed/6827677059699
200 OK 81 kB URL GET HTTP/2 ok.ru/videoembed/6827677059699
IP
Requested by https://gnula.nu/comedia/ver-spoiler-alert-2022-online/
Certificate IssuerGlobalSign nv-sa
Subject*.ok.ru
Fingerprint66:20:81:B9:D0:20:96:BF:13:93:E6:76:FF:C4:19:BD:F6:29:0E:A3
ValidityWed, 04 Oct 2023 08:36:03 GMT - Wed, 02 Oct 2024 09:21:02 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (62876)
Hash 6a7de3d2628f4a19a64ae9a3724ea334
bdcf65e404cea2023cd2dd87a002723e1e6e7919
3c923d8761447fb84aac634d99b30192d79226d80d8068c9f0e0c55da7208e4d
GET /videoembed/6827677059699 HTTP/1.1
Host: ok.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: apache
date: Fri, 01 Dec 2023 16:18:18 GMT
content-type: text/html;charset=UTF-8
vary: Accept-Encoding
set-cookie: bci=-5416369232671889681; Domain=.ok.ru; Expires=Wed, 19 Dec 2091 19:32:25 GMT; Path=/; Secure; HttpOnly
_statid=a5102efd-ada8-4eb6-b50d-8cce4053322f; Domain=.ok.ru; Expires=Wed, 19 Dec 2091 19:32:25 GMT; Path=/; Secure; HttpOnly
__last_online=1701447498179; Expires=Wed, 19 Dec 2091 19:32:25 GMT; Path=/; Secure
content-security-policy: default-src data: 'self' 'unsafe-inline' 'unsafe-eval' ok.ru *.ok.ru odnoklassniki.ru *.odnoklassniki.ru mycdn.me http://*.mycdn.me https://*.mycdn.me wss://ad.mail.ru *.mail.ru *.imgsmail.ru *.mradx.net *.serving-sys.com *.googleapis.com *.gstatic.com www.google.com https://api-maps.yandex.ru yastatic.net yandex.st *.doubleverify.com *.adsafeprotected.com https://consentmanager.mgr.consensu.org https://cdn.consentmanager.mgr.consensu.org https://football.sportmail.ru *.google.ru *.google.com *.googlesyndication.com *.yandex.ru blob:; script-src 'unsafe-inline' 'unsafe-eval' *.mail.ru https://*.mail.ru *.imgsmail.ru *.mradx.net ok.ru *.ok.ru odnoklassniki.ru *.odnoklassniki.ru mycdn.me http://*.mycdn.me https://*.mycdn.me mc.yandex.ru an.yandex.ru yastatic.net yandex.st *.google-analytics.com api-maps.yandex.ru https://api-maps.yandex.ru https://clck.yandex.ru *.googleapis.com *.gstatic.com www.google.com www.youtube.com https://www.youtube.com *.ytimg.com https://*.ytimg.com *.doubleverify.com *.dvtps.com *.doubleclick.net *.googletagservices.com *.googlesyndication.com *.googleadservices.com *.goodgame.ru https://*.goodgame.ru https://*.moatads.com *.adlooxtracking.com *.adlooxtracking.ru *.adsafeprotected.com *.serving-sys.com *.serving-sys.ru *.weborama.fr *.weborama-tech.ru https://enterprise.api-maps.yandex.ru https://suggest-maps.yandex.ru https://*.hit.gemius.pl https://consentmanager.mgr.consensu.org https://cdn.consentmanager.mgr.consensu.org https://gum.criteo.com https://football.sportmail.ru *.googletagmanager.com connect.facebook.net *.google.ru *.google.com *.googlesyndication.com yandex.ru; worker-src blob: 'self'; connect-src * wss: blob: data:; font-src * data: blob:; frame-src * blob: 'self'; img-src * data: blob: about:; media-src * data: blob:; object-src *; report-uri /csp/report;
content-security-policy-report-only: default-src data: blob: about: 'self' 'unsafe-inline' 'unsafe-eval' https: wss:; report-uri /csp/report?always;
last-modified: Sat, 30 Sep 2023 13:08:55 GMT
cache-control: no-cache, no-store
pragma: no-cache
expires: Mon, 26 Jul 1997 05:00:00 GMT
content-encoding: br
X-Firefox-Spdy: h2
duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/favicon.ico
0 B URL GET duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/favicon.ico
IP
Requested by https://hqq.to/player/embed_player.php?vid=N6WTXDJGcpAT&autoplay=no
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /favicon.ico HTTP/1.1
Host: duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hqq.to/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
gnula.nu/wp-content/uploads/2023/11/The_Holdovers3.gif
200 OK 4.5 kB URL GET HTTP/2 gnula.nu/wp-content/uploads/2023/11/The_Holdovers3.gif
IP
Requested by https://gnula.nu/comedia/ver-spoiler-alert-2022-online/
Certificate IssuerLet's Encrypt
Subjectgnula.nu
FingerprintF0:71:98:32:BE:CF:19:29:10:5C:9C:E7:79:AB:E9:8F:53:2D:D1:DA
ValidityWed, 08 Nov 2023 10:13:46 GMT - Tue, 06 Feb 2024 10:13:45 GMT
File type GIF image data, version 89a, 54 x 83\012- data
Hash ea36b726f4df9cd91282fc42a3183202
7ee1f2fe240c26470919381de80ecf0cdc8b6203
e9b0ffc49f1c3c6472a2fbe09395d6a4e56bb6e05833ef70019a6c241164e721
GET /wp-content/uploads/2023/11/The_Holdovers3.gif HTTP/1.1
Host: gnula.nu
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: __ddg1_=7Q4TDzvvC5nreh7ivH5U
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Thu, 30 Nov 2023 03:57:50 GMT
content-type: image/gif
content-length: 4536
last-modified: Sun, 19 Nov 2023 19:51:45 GMT
etag: "655a6751-11b8"
expires: Thu, 07 Dec 2023 03:57:50 GMT
cache-control: max-age=604800
accept-ranges: bytes
age: 130827
ddg-cache-status: HIT,HIT
X-Firefox-Spdy: h2
apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.coKrc9A11Ng.O/m=plusone/rt=j/sv=1/d=1/ed=1/rs=AHpOoo_J8xjByIzBlcB6zLaAkxsUwdPdIw/cb=gapi.loaded_0?le=scs
200 OK 161 kB URL GET HTTP/3 apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.coKrc9A11Ng.O/m=plusone/rt=j/sv=1/d=1/ed=1/rs=AHpOoo_J8xjByIzBlcB6zLaAkxsUwdPdIw/cb=gapi.loaded_0?le=scs
IP
Requested by https://gnula.nu/comedia/ver-spoiler-alert-2022-online/
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint4C:0D:17:8C:F1:30:7C:3A:6F:9B:8E:B4:83:0E:5C:BD:ED:17:3E:95
ValidityMon, 23 Oct 2023 11:18:24 GMT - Mon, 15 Jan 2024 11:18:23 GMT
File type ASCII text, with very long lines (1505)
Size 161 kB (161398 bytes)
Hash 4a256001cbbe7af37c71afbd89ba1656
4760f1dee9f6ff6db6f33eeee3dc7ec76155f7dd
5b683a525a2a814b27fc09152ee8030b6d542cd24a61de371bbe5e8815e9d0b1
GET /_/scs/abc-static/_/js/k=gapi.lb.en.coKrc9A11Ng.O/m=plusone/rt=j/sv=1/d=1/ed=1/rs=AHpOoo_J8xjByIzBlcB6zLaAkxsUwdPdIw/cb=gapi.loaded_0?le=scs HTTP/1.1
Host: apis.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gnula.nu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/social-frontend-mpm-access
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="social-frontend-mpm-access"
report-to: {"group":"social-frontend-mpm-access","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/social-frontend-mpm-access"}]}
content-length: 55751
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 04:12:01 GMT
expires: Fri, 29 Nov 2024 04:12:01 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 08 Nov 2023 22:37:21 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 129977
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
videocdnmetrika.com/f.php?sid=212040
200 OK 0 B URL GET HTTP/2 videocdnmetrika.com/f.php?sid=212040
IP
Requested by https://hqq.to/player/embed_player.php?vid=N6WTXDJGcpAT&autoplay=no
Certificate IssuerGoogle Trust Services LLC
Subjectvideocdnmetrika.com
Fingerprint65:C2:6F:7C:ED:59:22:15:7F:47:FD:32:BD:2B:DB:FB:34:68:26:E6
ValiditySun, 26 Nov 2023 13:44:21 GMT - Sat, 24 Feb 2024 13:44:20 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /f.php?sid=212040 HTTP/1.1
Host: videocdnmetrika.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hqq.to/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 01 Dec 2023 16:18:21 GMT
content-type: text/html; charset=UTF-8
x-powered-by: PHP/7.1.33
cache-control: no-store, no-cache, must-revalidate, max-age=0
x-robots-tag: noindex
pragma: no-cache
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=PVQ0x9usJ9QH1PxkwJhC4IKYsJGMKM7cXbw5J4Id3zpni09XjlqhmwruawENeb1kiPqAY04%2Bv%2Fcr46I6OBEYqWMf47tbPOvI5suzANj%2Bdco8tWuzp%2FlJxwtaWYf%2FPV4hEtOEV3GL"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82eca5464b1a52ea-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
troyyourlead.com/e/ymc7djflb6aw
200 OK 117 kB URL GET HTTP/2 troyyourlead.com/e/ymc7djflb6aw
IP
ASN #262254 DDOS-GUARD CORP.
Requested by https://gnula.nu/comedia/ver-spoiler-alert-2022-online/
Certificate IssuerLet's Encrypt
Subjecttroyyourlead.com
Fingerprint6B:7D:62:88:DA:D4:8D:82:59:3E:7F:32:8B:5E:E6:EE:08:8C:98:00
ValidityFri, 24 Nov 2023 15:34:59 GMT - Thu, 22 Feb 2024 15:34:58 GMT
Size 117 kB (117248 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /e/ymc7djflb6aw HTTP/1.1
Host: troyyourlead.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://gnula.nu/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: ddos-guard
strict-transport-security: max-age=2628000
content-security-policy: upgrade-insecure-requests;
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
cache-control: no-cache, private
date: Fri, 01 Dec 2023 16:18:19 GMT
set-cookie: __ddg1_=BMdDiQW0R8SgwhHA2Bv0; Domain=.troyyourlead.com; HttpOnly; Path=/; Expires=Sat, 30-Nov-2024 16:18:19 GMT
XSRF-TOKEN=eyJpdiI6ImdWQXkzc09DYU9STFlXblR5T3BQNFE9PSIsInZhbHVlIjoiTG9OWFhJVXFtYmlNWksyMTdCL0NobXJ0VHRxRkpvNy9XM0tYYTBCRXg0d1k1N3FIVXc2MDQ1STJxSk5Fb3VCYWJnNmFxYWJqWUs4S3JYZC9qNHBXQU42Z010VHUwdjI3NE8vVi82NlJMM09UVHZvcWFZY3hneXg1S1ZlWk1wWnMiLCJtYWMiOiI5YmRjZGVjNDZiNzQzYzQyOWJjODhlZWY4N2M3MWI5MDBkN2IwMWIxZmM0MjdjNDlmMjk3NjE5YWY0MjQ5MmY2IiwidGFnIjoiIn0%3D; expires=Fri, 01 Dec 2023 17:48:19 GMT; Max-Age=5400; path=/; secure; samesite=none
voe_session=eyJpdiI6ImtkZm9jU0lOZnpzWnlyTnMySTArN0E9PSIsInZhbHVlIjoiSVVxWUpGNTRmYVdGUkhGeTF4N2V5eUhjYllHS0x1S0FEVVJQbDJMRHN1ZEN3eVRiQ1B5dkhtdWVhY1RkMmNLTngxQSthZjNuNXlFU0NyenZjQjhxbm0wYjhFY240QlVZNkRMS2NPcTIrYzBqMEdUejRXZU52SkRJMWQwVHhxNEQiLCJtYWMiOiJmODRlNGI2MDI5ZWZkZmRkNmY1ZDI1NGU3MDc3ZWY1Mzk5M2QwMDI3OWNjYmE4YjAxOTE4NmY0MTUwZmE3NTM2IiwidGFnIjoiIn0%3D; expires=Fri, 01 Dec 2023 17:48:19 GMT; Max-Age=5400; path=/; secure; httponly; samesite=none
content-encoding: gzip
X-Firefox-Spdy: h2
185.178.208.130
216.58.211.3
188.114.97.1
104.17.24.14
186.2.163.208
190.115.19.71
0.0.0.0