js.freestreams-live1.com/daznf1-esp0/
301 Moved Permanently 0 B URL HTTP/1.1 js.freestreams-live1.com/daznf1-esp0/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /daznf1-esp0/ HTTP/1.1
Host: js.freestreams-live1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Sun, 27 Nov 2022 15:54:13 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Sun, 27 Nov 2022 16:54:13 GMT
Location: https://js.freestreams-live1.com/daznf1-esp0/
Server-Timing: cf-q-config;dur=8.000002708286e-06
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=aHmcPH%2B5UFuzE8iYDcURN%2FJGk31V0%2Fzw4cmkB19%2BU5FbOIGBynLYQTZAJioj5ApCZhvfLpcEyMj5tL3xy8Iea8pROd%2FRUIm8V5A9CJCKcI1xdJEwX2zkI8GOo5qQf78QR6qtKiziwaBCwA%3D%3D"}],"group":"cf-nel","max_age":604800}, {"endpoints":[{"url":"https:\/\/csp-reporting.cloudflare.com\/cdn-cgi\/script_monitor\/report?m=2_80Jt4RjBXKWPubjID_deKO2e0RrvHvY5FghiOh._M-1669564453-0-AXlP6AHO-KyRirIWCb79I5MnxcU862pQwvSLYnXzirys3XaBOutStGzvg5YDNVdNtPXmrH_qJqbcOF5uSU-v594tpnknhs5bwQ5dUFgRaB1z"}],"group":"cf-csp-endpoint","max_age":86400}
Content-Security-Policy-Report-Only: script-src 'none'; connect-src 'none'; report-uri https://csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=2_80Jt4RjBXKWPubjID_deKO2e0RrvHvY5FghiOh._M-1669564453-0-AXlP6AHO-KyRirIWCb79I5MnxcU862pQwvSLYnXzirys3XaBOutStGzvg5YDNVdNtPXmrH_qJqbcOF5uSU-v594tpnknhs5bwQ5dUFgRaB1z; report-to cf-csp-endpoint
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 770c0a88687efac0-OSL
alt-svc: h2=":443"; ma=60
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash cdbad2434b7d127a4fc769807a9dc3e7
fa98cd9fc2309ab4423f33f683d17bdb17d76713
560cbbb751ab2884024da3b93fba6bc45c6434797dba72a98c05e7fc2bb94bc1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "560CBBB751AB2884024DA3B93FBA6BC45C6434797DBA72A98C05E7FC2BB94BC1"
Last-Modified: Sat, 26 Nov 2022 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2811
Expires: Sun, 27 Nov 2022 16:41:04 GMT
Date: Sun, 27 Nov 2022 15:54:13 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 471 B IP
Hash 64b2a23eab6e5ae8c010ec7242be930c
0673e4385ba01a5a245711bab96cafc34f765793
64751d193f7af72431e9689581faffcae1a30ff50ea425697b2b80ff61c87909
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5236
Cache-Control: max-age=158656
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 15:54:13 GMT
Etag: "63833c71-1d7"
Expires: Tue, 29 Nov 2022 11:58:29 GMT
Last-Modified: Sun, 27 Nov 2022 10:31:13 GMT
Server: ECS (ska/F70F)
X-Cache: HIT
Content-Length: 471
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 3b56944f0e5716fd4fad2ec18994d4be
61cafa4de31ba960d1145ec37272f6f6b6944e0c
4fd46b0b6a2ea24f5ce175985a3933c04b4c01bd3e32bee2e50a61a65eef7af4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4FD46B0B6A2EA24F5CE175985A3933C04B4C01BD3E32BEE2E50A61A65EEF7AF4"
Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2665
Expires: Sun, 27 Nov 2022 16:38:38 GMT
Date: Sun, 27 Nov 2022 15:54:13 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 567df7db606cf5d0871aa5bc9311b6da
4263faac7cbab2fcaf6661911dcad5091c06be17
e9650e1fdc46fc8678708ddcc37ab369c7a6d50489a004be896f20c7a3a644b0
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Retry-After, Content-Length, Alert, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sun, 27 Nov 2022 15:17:40 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 2193
alt-svc: clear
X-Firefox-Spdy: h2
e1.o.lencr.org/
200 OK 345 B IP
ASN #20940 Akamai International B.V.
Hash 30e24ee4580343fb0d8eb61cb5aed954
ccc52a12e4580aac995a3a65b0674fa5c4caccb1
e463e983d353aaba939ddc1b1a121b6aca6259c2f0dfd9ed2cd1ca41170780cf
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "E463E983D353AABA939DDC1B1A121B6ACA6259C2F0DFD9ED2CD1CA41170780CF"
Last-Modified: Sat, 26 Nov 2022 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=1488
Expires: Sun, 27 Nov 2022 16:19:01 GMT
Date: Sun, 27 Nov 2022 15:54:13 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
IP
File type PEM certificate\012- , ASCII text
Hash 9ebddc2b260d081ebbefee47c037cb28
492bad62a7ca6a74738921ef5ae6f0be5edebf39
74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: SC+8wZj1lsOuxamTKT2UwZWmRjnCrdASgo2yXE/154Ct6/FCd7HvLsY1U9Q3vxYXfWDKJf/AiUQ=
x-amz-request-id: KHB3CEDS6T6QK3S1
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sun, 27 Nov 2022 15:41:41 GMT
age: 752
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 27 Nov 2022 15:54:13 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Retry-After, Content-Length, Alert, Cache-Control, ETag, Pragma, Expires, Backoff, Last-Modified
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Sun, 27 Nov 2022 15:08:54 GMT
cache-control: public,max-age=3600
age: 2719
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
e1.o.lencr.org/
200 OK 345 B IP
ASN #20940 Akamai International B.V.
Hash 19214acc417cd2c9425f566009939d4e
aa6da995a94a556800ac827a7f0b191c688eda06
b5191d95adae00b6ec60510e06a57bd2526c81b82575db6a39db91db23fab106
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "B5191D95ADAE00B6EC60510E06A57BD2526C81B82575DB6A39DB91DB23FAB106"
Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4571
Expires: Sun, 27 Nov 2022 17:10:24 GMT
Date: Sun, 27 Nov 2022 15:54:13 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 471 B IP
Hash a6fee11dfe1b88cd768a0ca3e2bd0c89
59cec9a44a4a92467678afe65f347f68641a2174
50870c499aae4d5dfd6df25a36cd04b6d185b66ef0590e46933984bf52e2483f
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2952
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 15:54:14 GMT
Last-Modified: Sun, 27 Nov 2022 15:05:02 GMT
Server: ECS (ska/F70F)
X-Cache: HIT
Content-Length: 471
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: axudaxmXIiKyceEQ+MdX/w==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: lp2XsO1jm+tuqS4fu9KIjRYU6bA=
e1.o.lencr.org/
200 OK 345 B IP
ASN #20940 Akamai International B.V.
Hash a97313491f7abd8a20fc350d9eaf1847
b77a640c87271d2cccb469344f2d739fbf0fc637
abe9e268cca6223ff6d1d7145c946efd1e994daf70640706f476f2f23c099311
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "ABE9E268CCA6223FF6D1D7145C946EFD1E994DAF70640706F476F2F23C099311"
Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5499
Expires: Sun, 27 Nov 2022 17:25:53 GMT
Date: Sun, 27 Nov 2022 15:54:14 GMT
Connection: keep-alive
a.espncdn.com/combiner/i?img=/redesign/assets/img/icons/ESPN-icon-soccer.png&h=18&w=18&scale=crop&cquality=40
200 OK 678 B URL HTTP/2 a.espncdn.com/combiner/i?img=/redesign/assets/img/icons/ESPN-icon-soccer.png&h=18&w=18&scale=crop&cquality=40
IP
ASN #20940 Akamai International B.V.
File type PNG image data, 18 x 18, 8-bit/color RGBA, non-interlaced\012- data
Hash 8eb0a847f649865fe32bd2d776e75143
0c3076b7ce28aba79d1d70009dbcd3bbc18553de
c6cc721ccdb26fbfbf692820c0b7816d3b12218af9dedccaf4d57a32a86f8060
GET /combiner/i?img=/redesign/assets/img/icons/ESPN-icon-soccer.png&h=18&w=18&scale=crop&cquality=40 HTTP/1.1
Host: a.espncdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://js.freestreams-live1.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
last-modified: Mon, 12 Jul 2021 15:09:51 GMT
content-type: image/png
content-length: 678
accept-ranges: bytes
cache-control: max-age=10627
expires: Sun, 27 Nov 2022 18:51:22 GMT
date: Sun, 27 Nov 2022 15:54:15 GMT
access-control-allow-origin: *
X-Firefox-Spdy: h2
a.espncdn.com/combiner/i?img=/redesign/assets/img/icons/ESPN-icon-tennis.png&h=18&w=18&scale=crop&cquality=40
200 OK 651 B URL HTTP/2 a.espncdn.com/combiner/i?img=/redesign/assets/img/icons/ESPN-icon-tennis.png&h=18&w=18&scale=crop&cquality=40
IP
ASN #20940 Akamai International B.V.
File type PNG image data, 18 x 18, 8-bit/color RGBA, non-interlaced\012- data
Hash e4ea59e193eb7b7868f563e8d7ae5759
56cfa00df369e5c2e1793d6403036d04c56d9d27
5b4d5486a2bafacf7297c0c658c0a8763071d61d4b742ecf475a4eddd780ab80
GET /combiner/i?img=/redesign/assets/img/icons/ESPN-icon-tennis.png&h=18&w=18&scale=crop&cquality=40 HTTP/1.1
Host: a.espncdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://js.freestreams-live1.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 03 Aug 2021 15:56:55 GMT
x-datastream-cache-status: 1
content-type: image/png
accept-ranges: bytes
content-length: 651
cache-control: max-age=64835
expires: Mon, 28 Nov 2022 09:54:50 GMT
date: Sun, 27 Nov 2022 15:54:15 GMT
access-control-allow-origin: *
X-Firefox-Spdy: h2
freestreams-live1.com/wp-content/uploads/2018/12/donate.png
301 Moved Permanently 0 B URL HTTP/1.1 freestreams-live1.com/wp-content/uploads/2018/12/donate.png
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /wp-content/uploads/2018/12/donate.png HTTP/1.1
Host: freestreams-live1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
HTTP/1.1 301 Moved Permanently
Date: Sun, 27 Nov 2022 15:54:15 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Sun, 27 Nov 2022 16:54:15 GMT
Location: https://js.freestreams-live1.com/wp-content/uploads/2018/12/donate.png
Server-Timing: cf-q-config;dur=6.0000020312145e-06
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=IklgtVVgfG8UOj4cSadOyN%2FGX57W7dKC6QPiImHmM931gXe0mO1bxGZr8NhsnVrjfzevMJEBHtG2io1Qi8zPOI6pojt9gUNWyMpCCuPGuxVV4e05ZLHXNXUhaMEUyV%2FtpPBHQrqtKQ%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 770c0a93ca05b4f3-OSL
alt-svc: h2=":443"; ma=60
a.espncdn.com/combiner/i?img=/redesign/assets/img/icons/ESPN-icon-football-college.png&h=18&w=18&scale=crop&cquality=40
200 OK 614 B URL HTTP/2 a.espncdn.com/combiner/i?img=/redesign/assets/img/icons/ESPN-icon-football-college.png&h=18&w=18&scale=crop&cquality=40
IP
ASN #20940 Akamai International B.V.
File type PNG image data, 18 x 18, 8-bit/color RGBA, non-interlaced\012- data
Hash 9fc8b139ea1d1762fe49f8cbb53896b2
0ff53004feb30d89f09d6613b5a1c42c6038185f
ad52774512fd93761074980345fbaef0f9282bd2de7e7db0ecccb48d07500ec3
GET /combiner/i?img=/redesign/assets/img/icons/ESPN-icon-football-college.png&h=18&w=18&scale=crop&cquality=40 HTTP/1.1
Host: a.espncdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://js.freestreams-live1.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 03 Aug 2021 15:56:54 GMT
x-datastream-cache-status: 1
content-type: image/png
content-length: 614
accept-ranges: bytes
cache-control: max-age=68152
expires: Mon, 28 Nov 2022 10:50:07 GMT
date: Sun, 27 Nov 2022 15:54:15 GMT
access-control-allow-origin: *
X-Firefox-Spdy: h2
a.espncdn.com/combiner/i?img=/redesign/assets/img/icons/ESPN-icon-nascar.png&h=18&w=18&scale=crop&cquality=40
200 OK 526 B URL HTTP/2 a.espncdn.com/combiner/i?img=/redesign/assets/img/icons/ESPN-icon-nascar.png&h=18&w=18&scale=crop&cquality=40
IP
ASN #20940 Akamai International B.V.
File type PNG image data, 18 x 18, 8-bit/color RGBA, non-interlaced\012- data
Hash 35b83fc587b352ea1b9daaea1e44a69c
7d5265ba27809d8f95d4b5e1b1755c6d339450f6
7b5f1b1dec3f3aa4914e66d16dbbe9d1e219592e3d82287c2f39a0f6ab17c541
GET /combiner/i?img=/redesign/assets/img/icons/ESPN-icon-nascar.png&h=18&w=18&scale=crop&cquality=40 HTTP/1.1
Host: a.espncdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://js.freestreams-live1.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 03 Aug 2021 15:56:54 GMT
x-datastream-cache-status: 1
content-type: image/png
content-length: 526
accept-ranges: bytes
cache-control: max-age=5998
expires: Sun, 27 Nov 2022 17:34:13 GMT
date: Sun, 27 Nov 2022 15:54:15 GMT
access-control-allow-origin: *
X-Firefox-Spdy: h2
a.espncdn.com/combiner/i?img=/redesign/assets/img/icons/ESPN-icon-rugby.png&h=18&w=18&scale=crop&cquality=40
200 OK 642 B URL HTTP/2 a.espncdn.com/combiner/i?img=/redesign/assets/img/icons/ESPN-icon-rugby.png&h=18&w=18&scale=crop&cquality=40
IP
ASN #20940 Akamai International B.V.
File type PNG image data, 18 x 18, 8-bit/color RGBA, non-interlaced\012- data
Hash 3b0562e1242af9c44d84ee9a9b94a857
b8995fd674d357b148da3894303e9563661967c0
25af339ca916cf0fa6aa8bbefec5349e5c19c2f270f082dd13c887fa4dde014c
GET /combiner/i?img=/redesign/assets/img/icons/ESPN-icon-rugby.png&h=18&w=18&scale=crop&cquality=40 HTTP/1.1
Host: a.espncdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://js.freestreams-live1.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 12 Jul 2021 15:09:51 GMT
x-datastream-cache-status: 1
content-type: image/png
content-length: 642
accept-ranges: bytes
cache-control: max-age=22063
expires: Sun, 27 Nov 2022 22:01:58 GMT
date: Sun, 27 Nov 2022 15:54:15 GMT
access-control-allow-origin: *
X-Firefox-Spdy: h2
a.espncdn.com/combiner/i?img=/i/teamlogos/leagues/500/wwe.png&h=18&w=18&scale=crop&cquality=40
200 OK 605 B URL HTTP/2 a.espncdn.com/combiner/i?img=/i/teamlogos/leagues/500/wwe.png&h=18&w=18&scale=crop&cquality=40
IP
ASN #20940 Akamai International B.V.
File type PNG image data, 18 x 18, 8-bit/color RGBA, non-interlaced\012- data
Hash 62542856c4114cb8a63a5d6d1b640d67
3c524822c5c27b40dad71c15ae7349a791bd0c4f
357b937cf6ade2be65908f6a11f48029105c42b154987120fb2623f4f4f06255
GET /combiner/i?img=/i/teamlogos/leagues/500/wwe.png&h=18&w=18&scale=crop&cquality=40 HTTP/1.1
Host: a.espncdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://js.freestreams-live1.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 05 Jun 2018 12:07:32 GMT
content-type: image/png
content-length: 605
accept-ranges: bytes
cache-control: max-age=51828
expires: Mon, 28 Nov 2022 06:18:03 GMT
date: Sun, 27 Nov 2022 15:54:15 GMT
access-control-allow-origin: *
X-Firefox-Spdy: h2
a.espncdn.com/combiner/i?img=/redesign/assets/img/icons/ESPN-icon-basketball.png&h=18&w=18&scale=crop&cquality=40
200 OK 665 B URL HTTP/2 a.espncdn.com/combiner/i?img=/redesign/assets/img/icons/ESPN-icon-basketball.png&h=18&w=18&scale=crop&cquality=40
IP
ASN #20940 Akamai International B.V.
File type PNG image data, 18 x 18, 8-bit/color RGBA, non-interlaced\012- data
Hash 5f29467a1f3b70946c8671093c9ace4f
0376bb190d13fa09a309a430830ac004f077ecc3
762b8ab9b43d0e1574a90555af8dfeee86a77e7305bb13a8739a9310c48cedf7
GET /combiner/i?img=/redesign/assets/img/icons/ESPN-icon-basketball.png&h=18&w=18&scale=crop&cquality=40 HTTP/1.1
Host: a.espncdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://js.freestreams-live1.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 03 Aug 2021 15:56:53 GMT
content-type: image/png
content-length: 665
accept-ranges: bytes
cache-control: max-age=64080
expires: Mon, 28 Nov 2022 09:42:15 GMT
date: Sun, 27 Nov 2022 15:54:15 GMT
access-control-allow-origin: *
X-Firefox-Spdy: h2
a.espncdn.com/combiner/i?img=/redesign/assets/img/icons/ESPN-icon-golf.png&h=18&w=18&scale=crop&cquality=40
200 OK 568 B URL HTTP/2 a.espncdn.com/combiner/i?img=/redesign/assets/img/icons/ESPN-icon-golf.png&h=18&w=18&scale=crop&cquality=40
IP
ASN #20940 Akamai International B.V.
File type PNG image data, 18 x 18, 8-bit/color RGBA, non-interlaced\012- data
Hash aac6702e60ab0a9a926cfcaa5937745e
9a8a3ac7acb55f80880b8374ee83a4b4bd4a8327
dd85ddf0da63890df9a60049201fa6f050f3782b8ea079baaa8c5134d77c3292
GET /combiner/i?img=/redesign/assets/img/icons/ESPN-icon-golf.png&h=18&w=18&scale=crop&cquality=40 HTTP/1.1
Host: a.espncdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://js.freestreams-live1.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 03 Aug 2021 15:56:54 GMT
x-datastream-cache-status: 1
content-type: image/png
content-length: 568
accept-ranges: bytes
cache-control: max-age=2647
expires: Sun, 27 Nov 2022 16:38:22 GMT
date: Sun, 27 Nov 2022 15:54:15 GMT
access-control-allow-origin: *
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 279 B IP
Hash ee17409532e8a5f62afa3c044dae2d5f
39147e92062e1f34b5f1fbbc4a7d0deda1492f06
b772c586fbe220673c29b0f908fa475f8744cb1796b134575da33237a4a73958
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6294
Cache-Control: max-age=86591
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 15:54:15 GMT
Etag: "63821ed0-117"
Expires: Mon, 28 Nov 2022 15:57:26 GMT
Last-Modified: Sat, 26 Nov 2022 14:12:32 GMT
Server: ECS (ska/F70F)
X-Cache: HIT
Content-Length: 279
a.espncdn.com/combiner/i?img=/i/teamlogos/leagues/500/mlb.png?w=18&h=18&transparent=true
200 OK 405 B URL HTTP/2 a.espncdn.com/combiner/i?img=/i/teamlogos/leagues/500/mlb.png?w=18&h=18&transparent=true
IP
ASN #20940 Akamai International B.V.
File type PNG image data, 18 x 18, 8-bit/color RGBA, non-interlaced\012- data
Hash d6868146ba9da75af5f10eb2526087c0
d4623e0d594b460b4606acc6b4060398ec78824c
7b44a3ecf72b7e948d92b39ebcb4ec12d4f157a9ff0d18766adcb1d872a6d796
GET /combiner/i?img=/i/teamlogos/leagues/500/mlb.png?w=18&h=18&transparent=true HTTP/1.1
Host: a.espncdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://js.freestreams-live1.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 05 Jun 2018 12:07:31 GMT
content-type: image/png
content-length: 405
accept-ranges: bytes
cache-control: max-age=78678
expires: Mon, 28 Nov 2022 13:45:33 GMT
date: Sun, 27 Nov 2022 15:54:15 GMT
access-control-allow-origin: *
X-Firefox-Spdy: h2
freestreams-live1.com/wp-content/uploads/2018/12/cflsch.png
301 Moved Permanently 0 B URL HTTP/1.1 freestreams-live1.com/wp-content/uploads/2018/12/cflsch.png
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /wp-content/uploads/2018/12/cflsch.png HTTP/1.1
Host: freestreams-live1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
HTTP/1.1 301 Moved Permanently
Date: Sun, 27 Nov 2022 15:54:15 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Sun, 27 Nov 2022 16:54:15 GMT
Location: https://js.freestreams-live1.com/wp-content/uploads/2018/12/cflsch.png
Server-Timing: cf-q-config;dur=5.0000089686364e-06
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Hv%2BvnXIfG76l1FLJKLZul%2Frc%2FoB%2FW9Qns284wi%2FJnQyvFoyUTziRVjreJpIyzpc6r%2Bsv1hyBTrBRvbDvp1hIMlfmApIF7V%2BtAPnwPq8zdgfQAkOAjGk%2BiLk2nFCb%2Fp2yYYZS6t6Vhw%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 770c0a93eac90b45-OSL
alt-svc: h2=":443"; ma=60
a.espncdn.com/combiner/i?img=/i/teamlogos/leagues/500/f1.png&w=18&h=18&cquality=40&scale=crop
200 OK 255 B URL HTTP/2 a.espncdn.com/combiner/i?img=/i/teamlogos/leagues/500/f1.png&w=18&h=18&cquality=40&scale=crop
IP
ASN #20940 Akamai International B.V.
File type PNG image data, 18 x 18, 8-bit/color RGBA, non-interlaced\012- data
Hash 5fae1bd63c59aa8f27957924320bb926
c92e030335660eb95c93672c0496dffdfcf1e359
5cf95cf0ecc9b42b133a9fd33c5ed5f11976f5bf9286b5864c4d1b5b65204dca
GET /combiner/i?img=/i/teamlogos/leagues/500/f1.png&w=18&h=18&cquality=40&scale=crop HTTP/1.1
Host: a.espncdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://js.freestreams-live1.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 30 Nov 2021 12:16:36 GMT
content-type: image/png
content-length: 255
accept-ranges: bytes
cache-control: max-age=46985
expires: Mon, 28 Nov 2022 04:57:20 GMT
date: Sun, 27 Nov 2022 15:54:15 GMT
access-control-allow-origin: *
X-Firefox-Spdy: h2
a.espncdn.com/combiner/i?img=/i/teamlogos/leagues/500/afl.png?w=18&h=18&transparent=true
200 OK 562 B URL HTTP/2 a.espncdn.com/combiner/i?img=/i/teamlogos/leagues/500/afl.png?w=18&h=18&transparent=true
IP
ASN #20940 Akamai International B.V.
File type PNG image data, 18 x 18, 8-bit/color RGBA, non-interlaced\012- data
Hash b4fcc65854469c2b985f7930a221bee6
aeecc4b0e89991fe6ed44a0b7be625bd9e62cf5e
3597c31cdf0b4f1dd9669b48fdb46d1350a97992c218f85524b23f326c8e0c47
GET /combiner/i?img=/i/teamlogos/leagues/500/afl.png?w=18&h=18&transparent=true HTTP/1.1
Host: a.espncdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://js.freestreams-live1.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 05 Jun 2018 12:07:31 GMT
x-datastream-cache-status: 1
content-type: image/png
content-length: 562
accept-ranges: bytes
cache-control: max-age=18706
expires: Sun, 27 Nov 2022 21:06:01 GMT
date: Sun, 27 Nov 2022 15:54:15 GMT
access-control-allow-origin: *
X-Firefox-Spdy: h2
a.espncdn.com/combiner/i?img=/i/teamlogos/leagues/500/nfl.png?w=18&h=18&transparent=true
200 OK 752 B URL HTTP/2 a.espncdn.com/combiner/i?img=/i/teamlogos/leagues/500/nfl.png?w=18&h=18&transparent=true
IP
ASN #20940 Akamai International B.V.
File type PNG image data, 18 x 18, 8-bit/color RGBA, non-interlaced\012- data
Hash 1845cf666b8657a440f90e67c06abd32
632fc9d49459342def474709bcc2a2356ffece24
374692572fd096e37495ffe5fcdb897498643357c239f9a2cf656098bfe8610a
GET /combiner/i?img=/i/teamlogos/leagues/500/nfl.png?w=18&h=18&transparent=true HTTP/1.1
Host: a.espncdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://js.freestreams-live1.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
last-modified: Tue, 05 Jun 2018 12:07:31 GMT
content-type: image/png
content-length: 752
accept-ranges: bytes
cache-control: max-age=23001
expires: Sun, 27 Nov 2022 22:17:36 GMT
date: Sun, 27 Nov 2022 15:54:15 GMT
access-control-allow-origin: *
X-Firefox-Spdy: h2
a.espncdn.com/combiner/i?img=/i/teamlogos/leagues/500/nba.png?w=18&h=18&transparent=true
200 OK 487 B URL HTTP/2 a.espncdn.com/combiner/i?img=/i/teamlogos/leagues/500/nba.png?w=18&h=18&transparent=true
IP
ASN #20940 Akamai International B.V.
File type PNG image data, 18 x 18, 8-bit/color RGBA, non-interlaced\012- data
Hash 50282bbb5fda57e0b3b14144e2718bea
a8cc915e85fd0f9b77954af5ebe7157aee571513
9c836ef97b2aa2e811ebfb77ccefb9c5aa69849bb59099af259d44c28ba677d9
GET /combiner/i?img=/i/teamlogos/leagues/500/nba.png?w=18&h=18&transparent=true HTTP/1.1
Host: a.espncdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://js.freestreams-live1.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
last-modified: Tue, 05 Jun 2018 12:07:31 GMT
x-datastream-cache-status: 1
content-type: image/png
content-length: 487
accept-ranges: bytes
cache-control: max-age=78787
expires: Mon, 28 Nov 2022 13:47:22 GMT
date: Sun, 27 Nov 2022 15:54:15 GMT
access-control-allow-origin: *
X-Firefox-Spdy: h2
a.espncdn.com/combiner/i?img=/redesign/assets/img/icons/ESPN-icon-mma.png&h=18&w=18&scale=crop&cquality=40
200 OK 685 B URL HTTP/2 a.espncdn.com/combiner/i?img=/redesign/assets/img/icons/ESPN-icon-mma.png&h=18&w=18&scale=crop&cquality=40
IP
ASN #20940 Akamai International B.V.
File type PNG image data, 18 x 18, 8-bit/color RGBA, non-interlaced\012- data
Hash 9f5773fba9e8e3164afbd373329825ba
f7c187319b95c05b5687da47e1e2fe50077fee1f
416ec152405745677f4cbeb70f7b79a88700a3c7bbcff79b4859bf3514d08577
GET /combiner/i?img=/redesign/assets/img/icons/ESPN-icon-mma.png&h=18&w=18&scale=crop&cquality=40 HTTP/1.1
Host: a.espncdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://js.freestreams-live1.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
last-modified: Tue, 03 Aug 2021 15:56:54 GMT
content-type: image/png
content-length: 685
accept-ranges: bytes
cache-control: max-age=57427
expires: Mon, 28 Nov 2022 07:51:22 GMT
date: Sun, 27 Nov 2022 15:54:15 GMT
access-control-allow-origin: *
X-Firefox-Spdy: h2
a.espncdn.com/combiner/i?img=/redesign/assets/img/icons/ESPN-icon-boxing.png&h=18&w=18&scale=crop&cquality=40
200 OK 517 B URL HTTP/2 a.espncdn.com/combiner/i?img=/redesign/assets/img/icons/ESPN-icon-boxing.png&h=18&w=18&scale=crop&cquality=40
IP
ASN #20940 Akamai International B.V.
File type PNG image data, 18 x 18, 8-bit/color RGBA, non-interlaced\012- data
Hash d0f9da1e9737f94a56d1c788f51e9725
f6e390f8a15c535ee2ac0b19aa142a90684da985
875137b0650034156ee4a5d377b380f73eb85b9361c04363b9b9b93f0527166e
GET /combiner/i?img=/redesign/assets/img/icons/ESPN-icon-boxing.png&h=18&w=18&scale=crop&cquality=40 HTTP/1.1
Host: a.espncdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://js.freestreams-live1.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
last-modified: Tue, 03 Aug 2021 15:56:54 GMT
content-type: image/png
content-length: 517
accept-ranges: bytes
cache-control: max-age=61936
expires: Mon, 28 Nov 2022 09:06:31 GMT
date: Sun, 27 Nov 2022 15:54:15 GMT
access-control-allow-origin: *
X-Firefox-Spdy: h2
a.espncdn.com/combiner/i?img=/i/teamlogos/leagues/500/nhl.png?w=18&h=18&transparent=true
200 OK 903 B URL HTTP/2 a.espncdn.com/combiner/i?img=/i/teamlogos/leagues/500/nhl.png?w=18&h=18&transparent=true
IP
ASN #20940 Akamai International B.V.
File type PNG image data, 18 x 18, 8-bit/color RGBA, non-interlaced\012- data
Hash 20860f3570570b63483900021505dd4b
dcadfe0cf16dc59ba282d782242a85d82bc9a17e
4ed0f3b7d3262358b51f4757f3a8c7953c3e5694c472221a17492686e33a3a97
GET /combiner/i?img=/i/teamlogos/leagues/500/nhl.png?w=18&h=18&transparent=true HTTP/1.1
Host: a.espncdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://js.freestreams-live1.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
last-modified: Tue, 05 Jun 2018 12:07:31 GMT
content-type: image/png
content-length: 903
accept-ranges: bytes
cache-control: max-age=68771
expires: Mon, 28 Nov 2022 11:00:26 GMT
date: Sun, 27 Nov 2022 15:54:15 GMT
access-control-allow-origin: *
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 279 B IP
Hash 46be323bc79f562de2849d93b20ae76e
8f39777956be6e476b5a1c9648e2c585d7ddeda7
55140433a1d1011107c4f18c87249ba048ac0993ad2be18e0a1255208ac4a5ce
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6156
Cache-Control: max-age=145860
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 15:54:15 GMT
Etag: "638306df-117"
Expires: Tue, 29 Nov 2022 08:25:15 GMT
Last-Modified: Sun, 27 Nov 2022 06:42:39 GMT
Server: ECS (ska/F70F)
X-Cache: HIT
Content-Length: 279
ocsp.digicert.com/
200 OK 279 B IP
Hash ee17409532e8a5f62afa3c044dae2d5f
39147e92062e1f34b5f1fbbc4a7d0deda1492f06
b772c586fbe220673c29b0f908fa475f8744cb1796b134575da33237a4a73958
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6294
Cache-Control: max-age=86591
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 15:54:15 GMT
Etag: "63821ed0-117"
Expires: Mon, 28 Nov 2022 15:57:26 GMT
Last-Modified: Sat, 26 Nov 2022 14:12:32 GMT
Server: ECS (ska/F70F)
X-Cache: HIT
Content-Length: 279
i.ibb.co/kSBs2tR/IPTV4-U-300x250.jpg
200 OK 13 kB URL HTTP/2 i.ibb.co/kSBs2tR/IPTV4-U-300x250.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 75", baseline, precision 8, 240x200, components 3\012- data
Hash 9ff47cc9b414917cb8ff1071da99e4dd
900b993a0cf7747a90699161954334b5a1aba1f8
dac61d29b0fc2fb340af59f54f5440093096cfefb9d1eeb595e54a4986e72303
GET /kSBs2tR/IPTV4-U-300x250.jpg HTTP/1.1
Host: i.ibb.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://js.freestreams-live1.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 27 Nov 2022 15:54:15 GMT
content-type: image/jpeg
content-length: 12714
last-modified: Mon, 13 Jun 2022 21:54:52 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS
accept-ranges: bytes
X-Firefox-Spdy: h2
e1.o.lencr.org/
200 OK 27 kB IP
ASN #20940 Akamai International B.V.
Hash f481ad76094f15f961ac733eaa725e44
648a772958cfe4fb03fa13d3f0106d461b247821
8b30b363acffe64573dc0396016406ba6c164e662ac2cd8cf2d03b02b8328d63
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "ABE9E268CCA6223FF6D1D7145C946EFD1E994DAF70640706F476F2F23C099311"
Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5498
Expires: Sun, 27 Nov 2022 17:25:53 GMT
Date: Sun, 27 Nov 2022 15:54:15 GMT
Connection: keep-alive
ocsp.sectigo.com/
200 OK 471 B IP
Hash 51fb06d06a7440009b06cffb3d8bfc1c
f63ff98f77737ccc9ec0dbc03123433c601508f7
5cbd9095c9a0cb757d40ad06ba46393faef56edaa5bab32662c01f624f4ea0db
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 27 Nov 2022 15:54:15 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Sat, 26 Nov 2022 17:22:25 GMT
Expires: Sat, 03 Dec 2022 17:22:24 GMT
Etag: "f63ff98f77737ccc9ec0dbc03123433c601508f7"
Cache-Control: max-age=523088,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 770c0a94dd2ab521-OSL
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 0ee1d1a60ec1770ec3e880a25c257f5d
015b05feff63bdcf8fae4d1a8c0c83c923a2ca67
b6845619444a37f322c044933a44cf3fd283a18a54d03bad4f76a2ed8c2cbaf6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 15:54:15 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
static.qksrv.cc/tabu/display.js
200 OK 3.8 kB URL HTTP/2 static.qksrv.cc/tabu/display.js
IP
File type HTML document, ASCII text, with very long lines (9325)
Hash d24a54239721e5e7c2f7667bf66bd3af
0043d29fdc28a135c596bb27cf93636361343d51
dc46eda8050088ad3c9b2e903aa606d04252c7915a54471100546ea7128f9037
GET /tabu/display.js HTTP/1.1
Host: static.qksrv.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://js.freestreams-live1.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 27 Nov 2022 15:54:15 GMT
content-encoding: gzip
content-length: 3771
content-type: application/javascript
last-modified: Tue, 08 Nov 2022 10:04:25 GMT
accept-ranges: bytes
server: nginx
etag: W/"636a29a9-24a2"
cache-control: max-age=86400
x-hw: 1669564455.cds221.sk1.hn,1669564455.cds208.sk1.c
access-control-allow-origin: *
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 770555aa8a0a52c611bafb289ca8a650
62504cadc49747f328e3c31ad3aa7a740043072c
6317c8530220392b1339be640b8c1181c468ff8e3f3d1d5692b39cb32404216f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 15:54:15 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.googletagmanager.com/gtag/js?id=UA-129691894-1
200 OK 45 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=UA-129691894-1
IP
File type ASCII text, with very long lines (1921)
Hash d5a959654ab94670650981bcf9b86f75
71302b91bcb5313690092471f4b9ad7492612050
2b483fd82907b1e331db5a43a7b683993d6e45216076d810b57a14aad8586dd1
GET /gtag/js?id=UA-129691894-1 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://js.freestreams-live1.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sun, 27 Nov 2022 15:54:15 GMT
expires: Sun, 27 Nov 2022 15:54:15 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 44712
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
securepubads.g.doubleclick.net/tag/js/gpt.js
200 OK 32 kB URL HTTP/2 securepubads.g.doubleclick.net/tag/js/gpt.js
IP
Hash ccb2f487da84847f76562d501c54ac95
093316eae29b90396d6f32438a74f7cb18ee0164
3c3e19314904628685592c671856d98ea2f04550a39d5633a9a54ccd81349202
GET /tag/js/gpt.js HTTP/1.1
Host: securepubads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://js.freestreams-live1.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="ads-gpt-scs"
report-to: {"group":"ads-gpt-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-gpt-scs"}]}
timing-allow-origin: *
content-length: 27210
date: Sun, 27 Nov 2022 15:54:15 GMT
expires: Sun, 27 Nov 2022 15:54:15 GMT
cache-control: private, max-age=900, stale-while-revalidate=3600
etag: "1404 / 260 of 1000 / last-modified: 1669244741"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
e1.o.lencr.org/
200 OK 345 B IP
ASN #20940 Akamai International B.V.
Hash c95ea5b6e677e762b040beab351ee168
2ff99de41ce2e79831dad4487f1ccd1a9cd2a59b
f24ccb8164116cb9ce66aa31f5ee648e695d1d5d4eb63eaa09304b39361d6c17
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "F24CCB8164116CB9CE66AA31F5EE648E695D1D5D4EB63EAA09304B39361D6C17"
Last-Modified: Sun, 27 Nov 2022 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8845
Expires: Sun, 27 Nov 2022 18:21:40 GMT
Date: Sun, 27 Nov 2022 15:54:15 GMT
Connection: keep-alive
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 0ee1d1a60ec1770ec3e880a25c257f5d
015b05feff63bdcf8fae4d1a8c0c83c923a2ca67
b6845619444a37f322c044933a44cf3fd283a18a54d03bad4f76a2ed8c2cbaf6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 15:54:15 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
r3.o.lencr.org/
200 OK 9.2 kB IP
ASN #20940 Akamai International B.V.
Hash b9490e75619b7ba6a64e23fc8b165148
9220749a16b574fb06db617bde88664657a36b85
fedf206748be18baf8951338977799f172dcf41ebf7d265e455225386993123f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C7C180B26A13DC22AE4BCC461A1B789E38AAD7F453A35E1E59EDFDAFC472F960"
Last-Modified: Sat, 26 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2042
Expires: Sun, 27 Nov 2022 16:28:17 GMT
Date: Sun, 27 Nov 2022 15:54:15 GMT
Connection: keep-alive
ocsp.pki.goog/gts1c3
200 OK 20 kB IP
Hash d795392d103480a1fdf6cee7c3f0be2c
4c547fb8a99164a06c522c2f34924052cfb6ac4c
fb3345f4cd4fcb0c441f38b8b547d3a722382babc04292fcdd1eaa50dd02cd06
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 15:54:15 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
js.freestreams-live1.com/daznf1-esp0/
301 Moved Permanently 1.3 kB URL HTTP/2 js.freestreams-live1.com/daznf1-esp0/
IP
File type gzip compressed data, from Unix\012- data
Hash aa15a4b4b2542d957aec158a64ade9d7
f547deddbe1a1e62b967627149a28576f760565a
a9a740946c55f7962cdc18bb6902d8005edf43171b33793e9af7ab3f7fb91ddd
GET /daznf1-esp0/ HTTP/1.1
Host: js.freestreams-live1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 301 Moved Permanently
date: Sun, 27 Nov 2022 15:54:13 GMT
content-type: text/html; charset=UTF-8
expires: Sun, 27 Nov 2022 16:54:14 GMT
cache-control: max-age=3600
x-litespeed-tag: 32e_HTTP.301,32e_HTTP.301
x-redirect-by: redirection
location: /daznf1-esp1/
x-litespeed-cache-control: no-cache
vary: User-Agent
x-turbo-charged-by: LiteSpeed
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=zYb%2BVWI%2Bm9hzXuqnFHXwQOvYhqiPDliZ9u%2BaY%2BWp1%2Fxa0Rp44qcnV7vJMtctIu2J4PgNg8qdR7r7avMV98Hj3c%2Bzmq36tnqxiXK6vqC206XALbnaGLMO5FTQLHvAj5SaKVHUqM6ifCdEgA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 770c0a8a3b5bb51d-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
footyhunter3.xyz/livefoot/stream-537.php
200 OK 22 kB URL HTTP/2 footyhunter3.xyz/livefoot/stream-537.php
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (59486)
Hash 3fda84710a0ce1b4504096f5655e000a
5327d0de0d3654180cee2fabc37ea339c0acbf85
e18587e65032f0037ddc1e9beb26682b6ac5cfd016cbaca5aceb6c184a7cb902
GET /livefoot/stream-537.php HTTP/1.1
Host: footyhunter3.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wikisport.click/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 27 Nov 2022 15:54:15 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
x-turbo-charged-by: LiteSpeed
greydedi: STALE
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=HbXYmwXicplX9PlwB1WaR180M9FJVhZULI2nRHtDYMtYEmygNF%2B3kNZufjkgrm9flMFrsP7AFA2284D88MLijeICmgrVK%2B%2BHZAo7ypxuesQDvX72FOwN4MOlej81xB5hFzJo"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 770c0a95bd65b511-OSL
content-encoding: br
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash aebda342a81ad83f60d2523f54ccda67
e590d9326e4a283e0929a8ffccb13cc4308af0e6
bd123fe3fce93216e2635f9dbc356f081b7599784fb6b67984032f11d82bc7cb
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BD123FE3FCE93216E2635F9DBC356F081B7599784FB6B67984032F11D82BC7CB"
Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=18178
Expires: Sun, 27 Nov 2022 20:57:13 GMT
Date: Sun, 27 Nov 2022 15:54:15 GMT
Connection: keep-alive
e1.o.lencr.org/
200 OK 345 B IP
ASN #20940 Akamai International B.V.
Hash 8d099c6b1b8b4d9a84247edc2d34e0fd
8a778aad302dcd045ceacaee8767d13aba2579ca
3ceb44c59bb5fe7e1d0e5a35857c994c078568b4ed739fcb2377df92b5e3b90c
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "3CEB44C59BB5FE7E1D0E5A35857C994C078568B4ED739FCB2377DF92B5E3B90C"
Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3124
Expires: Sun, 27 Nov 2022 16:46:19 GMT
Date: Sun, 27 Nov 2022 15:54:15 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash aebda342a81ad83f60d2523f54ccda67
e590d9326e4a283e0929a8ffccb13cc4308af0e6
bd123fe3fce93216e2635f9dbc356f081b7599784fb6b67984032f11d82bc7cb
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BD123FE3FCE93216E2635F9DBC356F081B7599784FB6B67984032F11D82BC7CB"
Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=18178
Expires: Sun, 27 Nov 2022 20:57:13 GMT
Date: Sun, 27 Nov 2022 15:54:15 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F34752db1-0be8-4784-9fa0-41e828e40e06.jpeg
200 OK 13 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F34752db1-0be8-4784-9fa0-41e828e40e06.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 1db6041a0bdb2319ae85afcc30caaeec
3b0ec6a7188dadf986f72fda8110296d9abd6f35
05f1f9b7834e7268dc34e3233434217f58cb68ee43a403cd08d0bb0ab4f37815
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F34752db1-0be8-4784-9fa0-41e828e40e06.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 13049
x-amzn-requestid: 2755f206-af23-4597-b4b9-7dae5001d6be
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cBsvpHDJoAMFhFQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637d5b30-600008f573bd7e0024585eb1;Sampled=0
x-amzn-remapped-date: Tue, 22 Nov 2022 23:28:48 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: MA_O50Lu6RRAFJpzXmVXhkxvYazdX5Lhk2Qa5k9fYUhBta-IWpVT1g==
via: 1.1 030fe0607711293dda988e571617a9f2.cloudfront.net (CloudFront), 1.1 7e87179efaa9e3c316bd3d3a74cfded8.cloudfront.net (CloudFront), 1.1 google
date: Sun, 27 Nov 2022 01:46:48 GMT
age: 50847
etag: "3b0ec6a7188dadf986f72fda8110296d9abd6f35"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdee4f5d4-5a5e-4a39-9681-50795cecc0f4.jpeg
200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdee4f5d4-5a5e-4a39-9681-50795cecc0f4.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 2cd887044e91d7ed0f1a8d7119ff7dd0
ae8aa4ce6ddaccba771fe65446926b60fc5628da
bad283c15531000b7a8c126d442154b64a880cc26196a46cbd2e6266a526db67
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdee4f5d4-5a5e-4a39-9681-50795cecc0f4.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10199
x-amzn-requestid: baee3bbe-7ded-425a-ae39-fccfc8169217
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cOo4iF1VIAMF09g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63828836-5522727b2f09b27e63b23270;Sampled=0
x-amzn-remapped-date: Sat, 26 Nov 2022 21:42:14 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: CXOqm7bjsSV0aJBTkTI7LsMovjgPeISPt3sZotEc7CjZnUL_y4_OoQ==
via: 1.1 01c28b52813cd0e82f810c492808b142.cloudfront.net (CloudFront), 1.1 d6b180eb367f7de26d67a9f3901b96a6.cloudfront.net (CloudFront), 1.1 google
date: Sat, 26 Nov 2022 21:51:41 GMT
age: 64954
etag: "ae8aa4ce6ddaccba771fe65446926b60fc5628da"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa57bc6cf-beaa-443b-9756-cf26e4fe3767.jpeg
200 OK 7.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa57bc6cf-beaa-443b-9756-cf26e4fe3767.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 2212cf75f99dc67fd45db47f7101d754
4b4a8c8e8aeccfff25d2748720dcef8fed287126
7b2d2e302faba8f273b51031fa48b444cb7839733b90e8c9d077ca63637320d8
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa57bc6cf-beaa-443b-9756-cf26e4fe3767.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6954
x-amzn-requestid: 94a02687-72f2-4796-a7ea-d3f28b412566
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: b1jHpGBVIAMFsSg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63787efd-22666b18283ae59b1348bf47;Sampled=0
x-amzn-remapped-date: Sat, 19 Nov 2022 07:00:13 GMT
x-amz-cf-pop: SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: feZayJeKq9jWHQ-rjutNr6buIjLVeIdY0A_ZeGo6NKgoQ6BBT3XQaw==
via: 1.1 470e3fe246a660ba6ace67a79f78d246.cloudfront.net (CloudFront), 1.1 0906d4887f6625f4a4467d8d4fd268d2.cloudfront.net (CloudFront), 1.1 google
date: Sun, 27 Nov 2022 08:55:33 GMT
age: 25122
etag: "4b4a8c8e8aeccfff25d2748720dcef8fed287126"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
www.intellipopup.com/feature.min.js
200 OK 22 kB URL HTTP/2 www.intellipopup.com/feature.min.js
IP
ASN #60068 Datacamp Limited
File type ASCII text, with very long lines (8486), with no line terminators
Hash 14cac1d8b2a5f54a4092ef8c3c36f76b
9c0c2e61802d586e266011c71e08aaf58ae8f0cc
9fb2a821ce63cdea4fb0a3538edeb6ed9e01ec2ed779e45e6e37c08f0a4d3481
GET /feature.min.js HTTP/1.1
Host: www.intellipopup.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://footyhunter3.xyz
Connection: keep-alive
Referer: https://footyhunter3.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 27 Nov 2022 15:54:15 GMT
content-type: application/x-javascript
alt-svc: quic="185.76.9.20:443"; ma=2592000; v="44,43,39"
expires: Fri, 02 Dec 2022 21:45:37 GMT
access-control-allow-origin: *
link: <https://intellipopup.com/>;rel=preconnect,<https://c.adsco.re/>;rel=preconnect,<https://adsco.re/>;rel=preconnect
cache-control: public, max-age=604800
x-accel-expires: @1670017537
server: CDN77-Turbo
x-77-nzt: AblMCRQGKiH/plACAA
x-77-nzt-ray: af585630ada6bb3c27888363932acd1b
x-cache: HIT
x-age: 151718
x-77-pop: stockholmSE
x-77-cache: HIT
content-encoding: br
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff0b2959f-9d1d-41c7-a7c1-b9f52a7766ac.jpeg
200 OK 7.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff0b2959f-9d1d-41c7-a7c1-b9f52a7766ac.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 76c00eceed956377d7469ef58b0815cb
97a135335f5b1b042adeb385718f8808cb78528b
81fb72ab752b2eb39ab6ee015055304490b3b6c3259968703fd07c2a2eed1e61
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff0b2959f-9d1d-41c7-a7c1-b9f52a7766ac.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7380
x-amzn-requestid: 18589644-299c-4a39-9376-db1bd1472009
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cOo4iEegIAMFeuQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63828836-23990acc0fdc599a75a534e3;Sampled=0
x-amzn-remapped-date: Sat, 26 Nov 2022 21:42:14 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: RqsZxAtbOkWBGbXJ3sZHxcS-ZvWOw7Yg2Qd4zj0QLhrp3wAXC8w6jA==
via: 1.1 c34da255183aa208dd1c722ff211f9b2.cloudfront.net (CloudFront), 1.1 aef00f14752da9aa504d392fd46eff94.cloudfront.net (CloudFront), 1.1 google
date: Sat, 26 Nov 2022 21:50:08 GMT
age: 65047
etag: "97a135335f5b1b042adeb385718f8808cb78528b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
js.freestreams-live1.com/daznf1-esp1/
301 Moved Permanently 4.8 kB URL HTTP/2 js.freestreams-live1.com/daznf1-esp1/
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash cc0a257323f882caff067adb86d906e4
cedf2f21be7cd366bd46055b62b5513db3011dfc
c16a9296d5e840a468fef7fb2764b9f7d4b3131d7ade2ce4999de1eead5469e0
GET /daznf1-esp1/ HTTP/1.1
Host: js.freestreams-live1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
TE: trailers
HTTP/2 301 Moved Permanently
date: Sun, 27 Nov 2022 15:54:14 GMT
content-type: text/html; charset=UTF-8
expires: Sun, 27 Nov 2022 16:54:15 GMT
cache-control: max-age=3600
x-litespeed-tag: 32e_HTTP.301,32e_HTTP.301
x-redirect-by: redirection
location: /daznf1-esp/
x-litespeed-cache-control: no-cache
vary: User-Agent
x-turbo-charged-by: LiteSpeed
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=2ycFci4I4AGJ%2FMZDWn%2F3T9QwXVk%2FdIRwpa9biQS%2BDfx0926DddgMaqWMIzEOHhrF8vV%2Fcr7%2Bww%2FDNpL%2Fe3YR4XL0nRdIT2id7bjAntMlzMqV79mLpFbaeGZXoiu6bNAjd%2FerZM9fvU2e8g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 770c0a8d2ee4b51d-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 20 kB IP
Hash 1364352fd3c7ddb6ef6f6829c652b6a7
db5be094e58caf0301e838e3485a05a3418b341c
0087a7e92bca452a24b2f20e249ccb84ccdcdb3582b0db74745d97ffa1c05275
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 27 Nov 2022 15:54:15 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Sat, 26 Nov 2022 06:12:19 GMT
Expires: Sat, 03 Dec 2022 06:12:18 GMT
Etag: "069e85ac6c3d06b9d1885ba98b6781922ed665ff"
Cache-Control: max-age=482882,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 770c0a96afadb521-OSL
ocsp.sectigo.com/
200 OK 471 B IP
Hash 51fb06d06a7440009b06cffb3d8bfc1c
f63ff98f77737ccc9ec0dbc03123433c601508f7
5cbd9095c9a0cb757d40ad06ba46393faef56edaa5bab32662c01f624f4ea0db
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 27 Nov 2022 15:54:15 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Sat, 26 Nov 2022 17:22:25 GMT
Expires: Sat, 03 Dec 2022 17:22:24 GMT
Etag: "f63ff98f77737ccc9ec0dbc03123433c601508f7"
Cache-Control: max-age=523088,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 770c0a96bfdfb4ff-OSL
e1.o.lencr.org/
200 OK 345 B IP
ASN #20940 Akamai International B.V.
Hash e64174d6c0df389b175576a8bbab754a
83019bb2d0f4197f0e86e4eb61d4c31a5a7f0026
09005863d67c620e5f17adcba0abc7d3443373c11bd87f572c33876cb18fe032
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "09005863D67C620E5F17ADCBA0ABC7D3443373C11BD87F572C33876CB18FE032"
Last-Modified: Sun, 27 Nov 2022 11:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8409
Expires: Sun, 27 Nov 2022 18:14:24 GMT
Date: Sun, 27 Nov 2022 15:54:15 GMT
Connection: keep-alive
e1.o.lencr.org/
200 OK 345 B IP
ASN #20940 Akamai International B.V.
Hash 8d099c6b1b8b4d9a84247edc2d34e0fd
8a778aad302dcd045ceacaee8767d13aba2579ca
3ceb44c59bb5fe7e1d0e5a35857c994c078568b4ed739fcb2377df92b5e3b90c
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "3CEB44C59BB5FE7E1D0E5A35857C994C078568B4ED739FCB2377DF92B5E3B90C"
Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3124
Expires: Sun, 27 Nov 2022 16:46:19 GMT
Date: Sun, 27 Nov 2022 15:54:15 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 924c7a59fd040bc705dbbfe15f733a07
301ed75264d40076e74fad043c7ab10883a29cd5
30c8c81b74a78f2c0e0f206ca5cdf72e1aff7b44de9a20210560f82fe1f667e0
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "30C8C81B74A78F2C0E0F206CA5CDF72E1AFF7B44DE9A20210560F82FE1F667E0"
Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10202
Expires: Sun, 27 Nov 2022 18:44:17 GMT
Date: Sun, 27 Nov 2022 15:54:15 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 924c7a59fd040bc705dbbfe15f733a07
301ed75264d40076e74fad043c7ab10883a29cd5
30c8c81b74a78f2c0e0f206ca5cdf72e1aff7b44de9a20210560f82fe1f667e0
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "30C8C81B74A78F2C0E0F206CA5CDF72E1AFF7B44DE9A20210560F82FE1F667E0"
Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10202
Expires: Sun, 27 Nov 2022 18:44:17 GMT
Date: Sun, 27 Nov 2022 15:54:15 GMT
Connection: keep-alive
e1.o.lencr.org/
200 OK 345 B IP
ASN #20940 Akamai International B.V.
Hash e64174d6c0df389b175576a8bbab754a
83019bb2d0f4197f0e86e4eb61d4c31a5a7f0026
09005863d67c620e5f17adcba0abc7d3443373c11bd87f572c33876cb18fe032
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "09005863D67C620E5F17ADCBA0ABC7D3443373C11BD87F572C33876CB18FE032"
Last-Modified: Sun, 27 Nov 2022 11:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8409
Expires: Sun, 27 Nov 2022 18:14:24 GMT
Date: Sun, 27 Nov 2022 15:54:15 GMT
Connection: keep-alive
ocsp.pki.goog/s/gts1p5/DEG64W_zrfc
200 OK 471 B URL HTTP/1.1 ocsp.pki.goog/s/gts1p5/DEG64W_zrfc
IP
Hash ee0966abf62cbdfbaf2052dfe52f54dd
feb7fa8a3589bd65970061f8436ab9127cdb045b
1410373aa3aa118e8cb2bd05e9e5b09aaf82ffa2c79e003240f4a149f92d4a49
POST /s/gts1p5/DEG64W_zrfc HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 15:54:15 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
intorterraon.com/tag.min.js
200 OK 23 kB URL HTTP/2 intorterraon.com/tag.min.js
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash 09c6bc35f4808f91eef702f269b590ea
e684a310ca3a4f2fdfb24c5a99a34dd96d634ec5
f50dd06f8c62afb27e75aab75507ff7517b9f896a2f8dc489d458f4e45a14e02
Analyzer Verdict Alert quad9 Sinkholed
GET /tag.min.js HTTP/1.1
Host: intorterraon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://footyhunter3.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 27 Nov 2022 15:54:15 GMT
content-type: text/javascript; charset=utf-8
content-length: 23258
content-encoding: br
x-trace-id: a364a3eab86e65b8b42efbcab84a654e
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
accept-ranges: bytes
last-modified: Wed, 23 Nov 2022 10:03:42 GMT
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding
access-control-max-age: 86400
pragma: no-cache
expires: Tue, 11 Jan 1994 10:00:00 GMT
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 471 B IP
Hash c47566c984b255a89ed15f6dc7fdee95
43e4fe49339a5fda98cc2189d8f7d1674b13acab
e77a849fe4cac271f48468112c70bef3a3f9f62b5c371e7b09500a1424abe17b
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 27 Nov 2022 15:54:15 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Sun, 27 Nov 2022 12:04:33 GMT
Expires: Sun, 04 Dec 2022 12:04:32 GMT
Etag: "43e4fe49339a5fda98cc2189d8f7d1674b13acab"
Cache-Control: max-age=590416,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 770c0a97bb850b49-OSL
ocsp.digicert.com/
200 OK 279 B IP
Hash 8620cb50c13aa6595039feb6a940c719
87697510b8823d7312df41eaca3fd042a12bf96d
eda65270df7fee2cb4c1dcd7d5116c6e58918b7685ff2b2ef5e791c5b787a618
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6464
Cache-Control: max-age=151946
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 15:54:15 GMT
Etag: "63831d71-117"
Expires: Tue, 29 Nov 2022 10:06:41 GMT
Last-Modified: Sun, 27 Nov 2022 08:18:57 GMT
Server: ECS (ska/F70F)
X-Cache: HIT
Content-Length: 279
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash b55db84ff1e49ec685b1a55ebec72d3b
80a80d414ac7b8f97812f3912cddb6d6b2d95f43
9303fefdbcf6378dbf06668422bdb647768837a24669901c7e35ea8ed29d04d3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "9303FEFDBCF6378DBF06668422BDB647768837A24669901C7E35EA8ED29D04D3"
Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2061
Expires: Sun, 27 Nov 2022 16:28:36 GMT
Date: Sun, 27 Nov 2022 15:54:15 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 43dca8ebcf06bd09eb16b5516072ec48
84fe572e189c13383dc0a805a90c07de69c48ee6
be524e069364f1231ff9f6f8a5ca6ae8aa4353ba95fa7913c30c13ed008ab8fd
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BE524E069364F1231FF9F6F8A5CA6AE8AA4353BA95FA7913C30C13ED008AB8FD"
Last-Modified: Sat, 26 Nov 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11611
Expires: Sun, 27 Nov 2022 19:07:46 GMT
Date: Sun, 27 Nov 2022 15:54:15 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash c5f342612c575057b831001ee3439ecd
f37df10b7531abae2b781782d9f8190fc38c2c76
737b2bd3e23bc460073494e2c6db24deccef11391672cff144444771893ed010
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "737B2BD3E23BC460073494E2C6DB24DECCEF11391672CFF144444771893ED010"
Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11208
Expires: Sun, 27 Nov 2022 19:01:03 GMT
Date: Sun, 27 Nov 2022 15:54:15 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 279 B IP
Hash 8620cb50c13aa6595039feb6a940c719
87697510b8823d7312df41eaca3fd042a12bf96d
eda65270df7fee2cb4c1dcd7d5116c6e58918b7685ff2b2ef5e791c5b787a618
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6465
Cache-Control: max-age=151946
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 15:54:16 GMT
Etag: "63831d71-117"
Expires: Tue, 29 Nov 2022 10:06:42 GMT
Last-Modified: Sun, 27 Nov 2022 08:18:57 GMT
Server: ECS (ska/F70F)
X-Cache: HIT
Content-Length: 279
6.adsco.re/
200 OK 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: 6.adsco.re
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://footyhunter3.xyz
Connection: keep-alive
Referer: https://footyhunter3.xyz/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 27 Nov 2022 15:54:16 GMT
content-type: text/plain;charset=UTF-8
content-length: 0
access-control-allow-origin: https://footyhunter3.xyz
cache-control: private, max-age=10
access-control-allow-headers: Content-Type
access-control-allow-methods: GET, HEAD, OPTIONS
access-control-max-age: 2592000
vary: Accept-Encoding
server: cloudflare
cf-ray: 770c0a9a186f1c0a-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
st.chatango.com/js/gz/emb.js
200 OK 24 kB URL HTTP/1.1 st.chatango.com/js/gz/emb.js
IP
File type ASCII text, with very long lines (1651)
Hash 805df181036cf9e5d8afe0106e6742bd
d724decdd99a4ad9e94ed1995c385cad56d1aa1d
c8fb96eb9b2d14e8d0e359963ddd7a9cc8f1b2bb8e475d431a40d81a6bc0956e
GET /js/gz/emb.js HTTP/1.1
Host: st.chatango.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://js.freestreams-live1.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 27 Nov 2022 15:54:15 GMT
Content-Type: application/x-javascript
Content-Length: 23805
Last-Modified: Wed, 09 Nov 2022 23:08:23 GMT
Connection: keep-alive
ETag: "636c32e7-5cfd"
Expires: Sun, 27 Nov 2022 15:54:15 GMT
Cache-Control: max-age=0
Content-Encoding: gzip
Accept-Ranges: bytes
c.adsco.re/
200 OK 25 kB IP
File type HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (689)
Hash 6436d87b6be21819e2209a618728e787
9dfff169ce781a191b7fa7dfc9fc3a4111616da8
9fc21fede23dfb883f1a9cbbe65e44b464c97afde9b94ce231b24010213df7e0
GET / HTTP/1.1
Host: c.adsco.re
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://footyhunter3.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 27 Nov 2022 15:54:15 GMT
content-type: text/html
cache-control: public, max-age=2678400
accept-ch: Sec-CH-UA, Sec-CH-UA-Mobile, Sec-CH-UA-Full-Version, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Arch, Sec-CH-UA-Model, Device-Memory, Downlink, ECT, RTT, Width, Viewport-Width, DPR
permissions-policy: ch-ua=(self "https://adsco.re"),ch-ua-mobile=(self "https://adsco.re"),ch-ua-full-version=(self "https://adsco.re"),ch-ua-platform=(self "https://adsco.re"),ch-ua-platform-version=(self "https://adsco.re"),ch-ua-arch=(self "https://adsco.re"),ch-ua-model=(self "https://adsco.re"),ch-device-memory=(self "https://adsco.re"),ch-downlink=(self "https://adsco.re"),ch-ect=(self "https://adsco.re"),ch-rtt=(self "https://adsco.re"),ch-width=(self "https://adsco.re"),ch-viewport-width=(self "https://adsco.re"),ch-dpr=(self "https://adsco.re")
link: <//6.adsco.re/>;rel=prefetch;crossorigin;as=fetch,<//4.adsco.re/>;rel=prefetch;crossorigin;as=fetch,<//adsco.re/>;rel=preconnect
expires: Wed, 28 Dec 2022 15:54:15 GMT
etag: W/"n/ARilLrRVDeZNVpaPOsXg=="
cf-cache-status: HIT
age: 689705
vary: Accept-Encoding
server: cloudflare
cf-ray: 770c0a98fce7b505-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
onvictinitor.com/apu.php?zoneid=4938033
403 Forbidden 7 B URL HTTP/2 onvictinitor.com/apu.php?zoneid=4938033
IP
File type ASCII text, with no line terminators
Hash 758ff964ee78d0c90f3a14d8d4af8ab3
f248d30ac9849b0ead400537632beb02c9c703d1
00e3fbbf542561da72fdc5ea89cfd1405c17739dd49210252e611c3122018efe
GET /apu.php?zoneid=4938033 HTTP/1.1
Host: onvictinitor.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://footyhunter3.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 403 Forbidden
server: nginx
date: Sun, 27 Nov 2022 15:54:16 GMT
content-type: text/plain; charset=utf-8
content-length: 7
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding
access-control-max-age: 86400
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
timing-allow-origin: *
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 471 B IP
Hash c47566c984b255a89ed15f6dc7fdee95
43e4fe49339a5fda98cc2189d8f7d1674b13acab
e77a849fe4cac271f48468112c70bef3a3f9f62b5c371e7b09500a1424abe17b
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 27 Nov 2022 15:54:16 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Sun, 27 Nov 2022 12:04:33 GMT
Expires: Sun, 04 Dec 2022 12:04:32 GMT
Etag: "43e4fe49339a5fda98cc2189d8f7d1674b13acab"
Cache-Control: max-age=590415,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 770c0a992b50b521-OSL
4.adsco.re/
200 OK 62 B IP
File type ASCII text, with no line terminators
Hash adde5febc7b5b6c2c759ec735cce83a0
77ec17be8a9970ff04663294d41c590d0d24fde4
ce2b9f2e5005195de7add565505005be6f2ef0d37521771e15106d1e1b9260ff
GET / HTTP/1.1
Host: 4.adsco.re
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://footyhunter3.xyz
Connection: keep-alive
Referer: https://footyhunter3.xyz/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Sun, 27 Nov 2022 15:54:16 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Methods: GET, HEAD, OPTIONS
Access-Control-Allow-Headers: Content-Type
Access-Control-Allow-Origin: https://footyhunter3.xyz
Access-Control-Max-Age: 2592000
Cache-Control: private, max-age=5
Content-Encoding: gzip
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 18db75b0e5b6926f1dfadc75d7d3307b
ab815db60a45201f18402ecff5972a885be66ae6
792280128f223d23cece87293930d0170b67641286845c3442832c7313a4cde4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "792280128F223D23CECE87293930D0170B67641286845C3442832C7313A4CDE4"
Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10969
Expires: Sun, 27 Nov 2022 18:57:05 GMT
Date: Sun, 27 Nov 2022 15:54:16 GMT
Connection: keep-alive
ocsp.pki.goog/s/gts1p5/DEG64W_zrfc
200 OK 471 B URL HTTP/1.1 ocsp.pki.goog/s/gts1p5/DEG64W_zrfc
IP
Hash ee0966abf62cbdfbaf2052dfe52f54dd
feb7fa8a3589bd65970061f8436ab9127cdb045b
1410373aa3aa118e8cb2bd05e9e5b09aaf82ffa2c79e003240f4a149f92d4a49
POST /s/gts1p5/DEG64W_zrfc HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 15:54:16 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
s10.histats.com/js15_as.js
200 OK 4.4 kB URL HTTP/2 s10.histats.com/js15_as.js
IP
File type HTML document, ASCII text, with very long lines (11440), with no line terminators
Hash ed192092c129db6123a3397855f42619
067e9b8e26cf6246eb84c6b9cf3da0c192ce7b3e
998fff486a7fb38b6ed445edc36c9b317b70950cd39efcf4012ca641312fcee1
GET /js15_as.js HTTP/1.1
Host: s10.histats.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://footyhunter3.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 27 Nov 2022 15:44:48 GMT
etag: "-375139978"
last-modified: Thu, 16 Apr 2020 10:44:16 GMT
x-request-id: 361402623
content-type: application/javascript; charset=UTF-8
content-encoding: br
x-cdn-pop: sbg
x-cdn-pop-ip: 137.74.120.0/27
x-cacheable: Matched cache
accept-ranges: bytes
content-length: 4364
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 471 B IP
Hash c47566c984b255a89ed15f6dc7fdee95
43e4fe49339a5fda98cc2189d8f7d1674b13acab
e77a849fe4cac271f48468112c70bef3a3f9f62b5c371e7b09500a1424abe17b
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 27 Nov 2022 15:54:16 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Sun, 27 Nov 2022 12:04:33 GMT
Expires: Sun, 04 Dec 2022 12:04:32 GMT
Etag: "43e4fe49339a5fda98cc2189d8f7d1674b13acab"
Cache-Control: max-age=590415,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb3
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 770c0a9a4c16b4ff-OSL
code.jquery.com/jquery-3.6.0.min.js
200 OK 31 kB URL HTTP/2 code.jquery.com/jquery-3.6.0.min.js
IP
File type ASCII text, with very long lines (65447)
Hash 899f0189aaf034bbba5340f724d91dfa
210ea9de03968edb9d839ba4a0ce2d48666a8ab8
949b6597c5ea907a7ef3c8ca6d5ffc73be2352f9df485b78704e5c4dabac5d0f
GET /jquery-3.6.0.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://streamservicehd.click/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 27 Nov 2022 15:54:16 GMT
content-encoding: gzip
content-length: 30875
content-type: application/javascript; charset=utf-8
last-modified: Fri, 20 Aug 2021 17:47:53 GMT
accept-ranges: bytes
server: nginx
etag: W/"611feac9-15d9d"
cache-control: max-age=315360000, public
access-control-allow-origin: *
vary: Accept-Encoding
x-hw: 1669564456.dop204.sk1.t,1669564456.cds261.sk1.hn,1669564456.cds210.sk1.c
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 31c1ea9aa08f66659b0f1b004cb47ac9
7ba7ca1a0e4a630499802befa935c6d971515a85
c65675e2c5adcea4def47cc8dea76a8ddf1ba7a06a51256f7cc424307f5e1438
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C65675E2C5ADCEA4DEF47CC8DEA76A8DDF1BA7A06A51256F7CC424307F5E1438"
Last-Modified: Sat, 26 Nov 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11590
Expires: Sun, 27 Nov 2022 19:07:26 GMT
Date: Sun, 27 Nov 2022 15:54:16 GMT
Connection: keep-alive
streamservicehd.click/premiumtv/footyhunter2.php?id=537
200 OK 177 kB URL HTTP/2 streamservicehd.click/premiumtv/footyhunter2.php?id=537
IP
File type HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (64742), with CRLF line terminators
Size 177 kB (177306 bytes)
Hash 4d8de0a9e12389e8746f04446540c295
876a0bceb86cff56cc57aacbac81243dbc8f54e8
9f7f6ac8c56d2162120952bcda048242a57d8319d650703b4ace485e4c704ca5
GET /premiumtv/footyhunter2.php?id=537 HTTP/1.1
Host: streamservicehd.click
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://footyhunter3.xyz/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 27 Nov 2022 15:54:16 GMT
content-type: text/html; charset=UTF-8
cache-control: no-cache, no-store, must-revalidate
node: PHP
content-encoding: gzip
last-modified: Sun, 27 Nov 2022 14:02:44 GMT
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=nJcEEYbdAmif0b05NfSZqjsDOCTSVSElesFJoMy2E%2FkRVJ%2FKuC2u1O%2F0gM%2Fw3Lg76uS1vuily3qDvZpNbjx6n4Xw99H%2FcBqymKXar9l1eLlWDpXkQqasOHYIDKdGmL609ska2oEZPDM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
referrer-policy: unsafe-url
server: cloudflare
cf-ray: 770c0a988aa9b511-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q1
200 OK 1.5 kB URL HTTP/1.1 ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q1
IP
Hash f1c18cfd3a40487955ce9053442ec2e3
c8c20998fba84a1743fb5c6c80df5a901a30a9bb
29a17549c0c8097b0830c32af268ea01eaa81d042f2b44f3f3c70f770d6fe67c
POST /ca/gsatlasr3dvtlsca2022q1 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 27 Nov 2022 15:54:16 GMT
Content-Type: application/ocsp-response
Transfer-Encoding: chunked
Connection: keep-alive
Etag: "528A4DCDCD66638C0CB5DE7F54F211FC9D29A6B8"
Expires: Mon, 28 Nov 2022 02:00:00 GMT
Last-Modified: Sun, 27 Nov 2022 14:00:00 UTC
Cache-Control: s-maxage=3600, public, no-transform, must-revalidate
CF-Cache-Status: HIT
Age: 2841
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 770c0a9bdd090b69-OSL
u4qnpomkwnnj.n4.adsco.re/
200 OK 0 B URL HTTP/1.1 u4qnpomkwnnj.n4.adsco.re/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST / HTTP/1.1
Host: u4qnpomkwnnj.n4.adsco.re
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 0
Origin: https://footyhunter3.xyz
Connection: keep-alive
Referer: https://footyhunter3.xyz/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Sun, 27 Nov 2022 15:54:16 GMT
Content-Type: text/html
Content-Length: 0
Last-Modified: Mon, 30 Jul 2018 15:32:42 GMT
Connection: close
ETag: "5b5f2f9a-0"
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
Access-Control-Expose-Headers: Content-Length,Content-Range
Accept-Ranges: bytes
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash d033c43683f237124dc406bf0aa56b2b
65dae7877faef0e60455f6136801b2220fe77639
44bebe1083f53f4dbf853240c3f664460916054e391d5f86bbc6402f4bcee980
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "44BEBE1083F53F4DBF853240C3F664460916054E391D5F86BBC6402F4BCEE980"
Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4736
Expires: Sun, 27 Nov 2022 17:13:12 GMT
Date: Sun, 27 Nov 2022 15:54:16 GMT
Connection: keep-alive
st.chatango.com/cfg/nc/r.json?7158520020000252302633472
200 OK 20 B URL HTTP/1.1 st.chatango.com/cfg/nc/r.json?7158520020000252302633472
IP
File type JSON data\012- , ASCII text
Hash 4b3e762cf64b26396adead3f3611a76c
893c563f825c4b4bdf3cef86fef6222829d9dfd7
fbcb52aa5b5af5183d2787df206bc50a2a057fb4f04d004fa95072ed42beb3d0
GET /cfg/nc/r.json?7158520020000252302633472 HTTP/1.1
Host: st.chatango.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://js.freestreams-live1.com
Connection: keep-alive
Referer: https://js.freestreams-live1.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 27 Nov 2022 15:54:16 GMT
Content-Type: application/octet-stream
Content-Length: 20
Last-Modified: Wed, 09 Nov 2022 23:08:23 GMT
Connection: keep-alive
ETag: "636c32e7-14"
Cache-Control: max-age=0, no-cache, no-store, must-revalidate
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
s4.histats.com/stats/0.php?1985777&@f16&@g1&@h0&@i0&@j0&@k0&@l0&@mFootyHunter&@n0&@ohttps%3A%2F%2Fwikisport.click%2F&@q0&@r0&@s0&@ten-US&@u1280&@b1:132505187&@b3:1669564456&@b4:js15_as.js&@b5:0&@a-_0.2.1&@vhttps%3A%2F%2Ffootyhunter3.xyz%2Flivefoot%2Fstream-537.php&@w
200 OK 53 B URL HTTP/1.1 s4.histats.com/stats/0.php?1985777&@f16&@g1&@h0&@i0&@j0&@k0&@l0&@mFootyHunter&@n0&@ohttps%3A%2F%2Fwikisport.click%2F&@q0&@r0&@s0&@ten-US&@u1280&@b1:132505187&@b3:1669564456&@b4:js15_as.js&@b5:0&@a-_0.2.1&@vhttps%3A%2F%2Ffootyhunter3.xyz%2Flivefoot%2Fstream-537.php&@w
IP
File type ASCII text, with no line terminators
Hash 9daa55e7a201e43b18a10eee9c87f6f1
7871410806b63f7fda0ba07d53ed1d77fce6e41c
9f0cf5db051a8e1e2b87a14faa347e3b3f97fa6b04d9ef4963f2bf4e31db1754
GET /stats/0.php?1985777&@f16&@g1&@h0&@i0&@j0&@k0&@l0&@mFootyHunter&@n0&@ohttps%3A%2F%2Fwikisport.click%2F&@q0&@r0&@s0&@ten-US&@u1280&@b1:132505187&@b3:1669564456&@b4:js15_as.js&@b5:0&@a-_0.2.1&@vhttps%3A%2F%2Ffootyhunter3.xyz%2Flivefoot%2Fstream-537.php&@w HTTP/1.1
Host: s4.histats.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://footyhunter3.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Sun, 27 Nov 2022 15:54:16 GMT
Content-Type: text/html;charset=UTF-8
Content-Length: 53
Connection: close
st.chatango.com/h5/gz/r1109221504/id.html
200 OK 224 kB URL HTTP/1.1 st.chatango.com/h5/gz/r1109221504/id.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (54430), with CRLF, LF line terminators
Size 224 kB (224208 bytes)
Hash b5e55978fc6de5b845040e267bfa4de0
6fd166bb4fc22482e5c2b7ceca0e165ce2277a96
b246b03701578765cdfc5fde2324acb491a9ca1b279d84119a98e537799800a0
GET /h5/gz/r1109221504/id.html HTTP/1.1
Host: st.chatango.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://js.freestreams-live1.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 27 Nov 2022 15:54:16 GMT
Content-Type: text/html
Content-Length: 224208
Last-Modified: Wed, 09 Nov 2022 23:08:23 GMT
Connection: keep-alive
ETag: "636c32e7-36bd0"
Expires: Mon, 27 Nov 2023 15:54:16 GMT
Cache-Control: max-age=31536000
Content-Encoding: gzip
P3P: CP="Chatango does not have a P3P policy. Please see our privacy policy: http://chatango.com/page?full_privacy"
Accept-Ranges: bytes
nanouwho.com/9?z=5150086&ng=1&ix=1&pt=0&np=1&gp=-1&bp=-1&nw=1&nb=1&sw=1280&sh=1024&pl=https%3A%2F%2Ffootyhunter3.xyz%2Flivefoot%2Fstream-537.php&wy=0&wx=0&ww=1280&wh=1024&cw=889&wiw=889&wih=550&wfc=4&sah=1002&drf=https%3A%2F%2Fwikisport.click%2F&hil=1&ist=0&oaid=q0lo874634en074558948m5b7dewt827
204 No Content 0 B URL HTTP/2 nanouwho.com/9?z=5150086&ng=1&ix=1&pt=0&np=1&gp=-1&bp=-1&nw=1&nb=1&sw=1280&sh=1024&pl=https%3A%2F%2Ffootyhunter3.xyz%2Flivefoot%2Fstream-537.php&wy=0&wx=0&ww=1280&wh=1024&cw=889&wiw=889&wih=550&wfc=4&sah=1002&drf=https%3A%2F%2Fwikisport.click%2F&hil=1&ist=0&oaid=q0lo874634en074558948m5b7dewt827
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
OPTIONS /9?z=5150086&ng=1&ix=1&pt=0&np=1&gp=-1&bp=-1&nw=1&nb=1&sw=1280&sh=1024&pl=https%3A%2F%2Ffootyhunter3.xyz%2Flivefoot%2Fstream-537.php&wy=0&wx=0&ww=1280&wh=1024&cw=889&wiw=889&wih=550&wfc=4&sah=1002&drf=https%3A%2F%2Fwikisport.click%2F&hil=1&ist=0&oaid=q0lo874634en074558948m5b7dewt827 HTTP/1.1
Host: nanouwho.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://footyhunter3.xyz/
Origin: https://footyhunter3.xyz
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Sun, 27 Nov 2022 15:54:16 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://footyhunter3.xyz
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-Sc, CVERSION, VERSION
pragma: no-cache
cache-control: no-store, no-cache, must-revalidate, max-age=0
expires: Mon, 26 Jul 1997 05:00:00 GMT
X-Firefox-Spdy: h2
nanouwho.com/9?z=5150086&ng=1&ix=1&pt=0&np=1&gp=-1&bp=-1&nw=1&nb=1&sw=1280&sh=1024&pl=https%3A%2F%2Ffootyhunter3.xyz%2Flivefoot%2Fstream-537.php&wy=0&wx=0&ww=1280&wh=1024&cw=889&wiw=889&wih=550&wfc=4&sah=1002&drf=https%3A%2F%2Fwikisport.click%2F&hil=1&ist=0&oaid=q0lo874634en074558948m5b7dewt827
200 OK 7 B URL HTTP/2 nanouwho.com/9?z=5150086&ng=1&ix=1&pt=0&np=1&gp=-1&bp=-1&nw=1&nb=1&sw=1280&sh=1024&pl=https%3A%2F%2Ffootyhunter3.xyz%2Flivefoot%2Fstream-537.php&wy=0&wx=0&ww=1280&wh=1024&cw=889&wiw=889&wih=550&wfc=4&sah=1002&drf=https%3A%2F%2Fwikisport.click%2F&hil=1&ist=0&oaid=q0lo874634en074558948m5b7dewt827
IP
File type ASCII text, with no line terminators
Hash a97eb6fbe6f13b601d5d48c0eba8baae
736efb938caf3d0edec406932ada889f1a4f2268
a04bf061f53e0011fd2f43bdf081526344f003c50146c88c42c2d95ef22c1821
Analyzer Verdict Alert quad9 Sinkholed
POST /9?z=5150086&ng=1&ix=1&pt=0&np=1&gp=-1&bp=-1&nw=1&nb=1&sw=1280&sh=1024&pl=https%3A%2F%2Ffootyhunter3.xyz%2Flivefoot%2Fstream-537.php&wy=0&wx=0&ww=1280&wh=1024&cw=889&wiw=889&wih=550&wfc=4&sah=1002&drf=https%3A%2F%2Fwikisport.click%2F&hil=1&ist=0&oaid=q0lo874634en074558948m5b7dewt827 HTTP/1.1
Host: nanouwho.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 54
Origin: https://footyhunter3.xyz
Connection: keep-alive
Referer: https://footyhunter3.xyz/
Cookie: scm=1; OAID=e3125c86a0d3406db799ea320d7ee629; oaidts=1669564456
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 27 Nov 2022 15:54:16 GMT
content-type: application/javascript
content-length: 7
access-control-allow-credentials: true
access-control-allow-origin: https://footyhunter3.xyz
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-Sc, CVERSION, VERSION
x-trace-id: a40661de7e926a008ea1f9d11a703c06
access-control-expose-headers: X-Sc
set-cookie: OAID=q0lo874634en074558948m5b7dewt827; expires=Mon, 27 Nov 2023 15:54:16 GMT; secure; SameSite=None
oaidts=1669564456; expires=Mon, 27 Nov 2023 15:54:16 GMT; secure; SameSite=None
pragma: no-cache
cache-control: no-store, no-cache, must-revalidate, max-age=0
expires: Mon, 26 Jul 1997 05:00:00 GMT
X-Firefox-Spdy: h2
middayexcessive.com/a7/2e/3f/a72e3fd4d90706e38afbd039886259b1.js
200 OK 21 kB URL HTTP/1.1 middayexcessive.com/a7/2e/3f/a72e3fd4d90706e38afbd039886259b1.js
IP
File type HTML document, ASCII text, with very long lines (60171), with no line terminators
Hash e688a82995ddca2259d27849dfff2efe
c463047cbcdfbdfb26ff1d152e34225cb8e66219
1f73404f45834c0948aadefc0d5bc021c43b5eddfca6ad6720d974c6c278bd04
Analyzer Verdict Alert quad9 Sinkholed
GET /a7/2e/3f/a72e3fd4d90706e38afbd039886259b1.js HTTP/1.1
Host: middayexcessive.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://streamservicehd.click/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Sun, 27 Nov 2022 15:54:16 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: fd406ab1476d52286878352f9a702590
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
my.rtmark.net/gid.js?userId=q0lo874634en074558948m5b7dewt827
200 OK 65 B URL HTTP/2 my.rtmark.net/gid.js?userId=q0lo874634en074558948m5b7dewt827
IP
File type JSON data\012- , ASCII text
Hash 8a7b7d8f6a7901e9433f3186ccf2e9c0
b898f290509e988fbf2223b6ff4dddbb3b06f8a6
4a111e7a52dd2af8e4a26a319b32ef12e8c0739d7bc1ed21748062c77c0175dd
GET /gid.js?userId=q0lo874634en074558948m5b7dewt827 HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://footyhunter3.xyz
Connection: keep-alive
Referer: https://footyhunter3.xyz/
Cookie: ID=13b6f576e5a5479f809420a9479f9331
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 27 Nov 2022 15:54:16 GMT
content-type: application/json; charset=utf-8
content-length: 65
access-control-allow-origin: https://footyhunter3.xyz
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
set-cookie: ID=13b6f576e5a5479f809420a9479f9331; expires=Mon, 27 Nov 2023 15:54:16 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
www.google-analytics.com/analytics.js
200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP
File type ASCII text, with very long lines (1325)
Hash 47e6f374ca946fddd5b59871b325736c
baa9282efc8785e84d247c3bff518eaa45f101c4
16580b5c87c58e5702e411f1888fdef511094e4cd6d62bb47d16291ffb25985e
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://st.chatango.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20039
date: Sun, 27 Nov 2022 14:41:08 GMT
expires: Sun, 27 Nov 2022 16:41:08 GMT
cache-control: public, max-age=7200
age: 4389
last-modified: Tue, 27 Sep 2022 22:01:05 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
adsco.re/p
200 OK 169 B IP
File type ASCII text, with no line terminators
Hash 401246c9596850950824a778d0fb1e7a
38e8ea9c10817b249fcaa5b90df66650ebbb522d
8dc4e22ceeb41aeb3cda6d5275521d6407662151a70501119b43bf8398afa06b
POST /p HTTP/1.1
Host: adsco.re
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Length: 1970
Origin: https://footyhunter3.xyz
Connection: keep-alive
Referer: https://footyhunter3.xyz/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Sun, 27 Nov 2022 15:54:17 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
AS-P-1: OK lon123
AS-P-2: OK
AS-P-3: OK
Access-Control-Max-Age: 2592000
Cache-Control: no-transform
Access-Control-Allow-Origin: https://footyhunter3.xyz
Access-Control-Allow-Credentials: true
Content-Encoding: gzip
intorterraon.com/?rb=VYc1VzpDrXTfa4A0yCcJTs580gVa75kgmtH_562n05zfsPcQqWTdgk0aWTrsszlNBC3H1tkaZQr5UX6-m1106MTghw5gxF7MHQDmiBZxkDVWUHx9w3nRecMjbOx_JUUfW2mXFH3gzytL03H72YobZK-HeP-TYOq-Qh4PfttVj6g-PxDdasN82ASl6CaEA2L9ozK8-uWjTiHwyFCWoDTg6poo9lNY47PDAb5XExqnNjPM0c1iW_GkFA%3D%3D&request_ab2=96001&zoneid=4284414&js_build=iclick-v1.454.0&fs=0&cf=0&sw=1280&sh=1024&sah=1002&wx=0&wy=0&ww=1280&wh=1024&cw=889&wih=550&wiw=889&wfc=2&pl=https%3A%2F%2Ffootyhunter3.xyz%2Flivefoot%2Fstream-537.php&drf=https%3A%2F%2Fwikisport.click%2F&np=0&pt=0&nb=1&ng=1&ix=1&nw=1&tb=false&js_build=iclick-v1.454.0&bs=13c75265-37a2-4473-99ff-9dd12beeab72&userId=q0lo874634en074558948m5b7dewt827&m=link
200 OK 23 kB URL HTTP/2 intorterraon.com/?rb=VYc1VzpDrXTfa4A0yCcJTs580gVa75kgmtH_562n05zfsPcQqWTdgk0aWTrsszlNBC3H1tkaZQr5UX6-m1106MTghw5gxF7MHQDmiBZxkDVWUHx9w3nRecMjbOx_JUUfW2mXFH3gzytL03H72YobZK-HeP-TYOq-Qh4PfttVj6g-PxDdasN82ASl6CaEA2L9ozK8-uWjTiHwyFCWoDTg6poo9lNY47PDAb5XExqnNjPM0c1iW_GkFA%3D%3D&request_ab2=96001&zoneid=4284414&js_build=iclick-v1.454.0&fs=0&cf=0&sw=1280&sh=1024&sah=1002&wx=0&wy=0&ww=1280&wh=1024&cw=889&wih=550&wiw=889&wfc=2&pl=https%3A%2F%2Ffootyhunter3.xyz%2Flivefoot%2Fstream-537.php&drf=https%3A%2F%2Fwikisport.click%2F&np=0&pt=0&nb=1&ng=1&ix=1&nw=1&tb=false&js_build=iclick-v1.454.0&bs=13c75265-37a2-4473-99ff-9dd12beeab72&userId=q0lo874634en074558948m5b7dewt827&m=link
IP
File type JSON data\012- , ASCII text, with very long lines (63207)
Hash 1a95ac9fca7eed6608d9a25406587adf
a4bf78a9e0fc0eeaaaca4776a4c5ac6e68d45681
ee91d831a3b33a3e6a3fba082e5d001345fc18153da036283c499ae2954dcbc5
Analyzer Verdict Alert quad9 Sinkholed
GET /?rb=VYc1VzpDrXTfa4A0yCcJTs580gVa75kgmtH_562n05zfsPcQqWTdgk0aWTrsszlNBC3H1tkaZQr5UX6-m1106MTghw5gxF7MHQDmiBZxkDVWUHx9w3nRecMjbOx_JUUfW2mXFH3gzytL03H72YobZK-HeP-TYOq-Qh4PfttVj6g-PxDdasN82ASl6CaEA2L9ozK8-uWjTiHwyFCWoDTg6poo9lNY47PDAb5XExqnNjPM0c1iW_GkFA%3D%3D&request_ab2=96001&zoneid=4284414&js_build=iclick-v1.454.0&fs=0&cf=0&sw=1280&sh=1024&sah=1002&wx=0&wy=0&ww=1280&wh=1024&cw=889&wih=550&wiw=889&wfc=2&pl=https%3A%2F%2Ffootyhunter3.xyz%2Flivefoot%2Fstream-537.php&drf=https%3A%2F%2Fwikisport.click%2F&np=0&pt=0&nb=1&ng=1&ix=1&nw=1&tb=false&js_build=iclick-v1.454.0&bs=13c75265-37a2-4473-99ff-9dd12beeab72&userId=q0lo874634en074558948m5b7dewt827&m=link HTTP/1.1
Host: intorterraon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://footyhunter3.xyz
Connection: keep-alive
Referer: https://footyhunter3.xyz/
Cookie: OAID=13b6f576e5a5479f809420a9479f9331; oaidts=1669564455
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 27 Nov 2022 15:54:16 GMT
content-type: application/json
x-trace-id: 5ad284ec12b2796666e551f9f9167df9
access-control-allow-origin: https://footyhunter3.xyz
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding
access-control-max-age: 86400
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
set-cookie: OAID=q0lo874634en074558948m5b7dewt827; expires=Mon, 27 Nov 2023 15:54:16 GMT; path=/; secure; SameSite=None
oaidts=1669564456; expires=Mon, 27 Nov 2023 15:54:16 GMT; path=/; secure; SameSite=None
syncedCookie=true; expires=Sun, 04 Dec 2022 15:54:16 GMT; path=/; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
content-encoding: gzip
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 471 B IP
Hash c910a44bf58b708c25d146fd52adb8e9
374a72c3026ea1fa5defd1e8eb7be2ca7184dfd5
3cf34029e6a112320130d154ac1291e49bcb4a80f0caaf84309456986f0adc77
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 27 Nov 2022 15:54:17 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Fri, 25 Nov 2022 13:33:17 GMT
Expires: Fri, 02 Dec 2022 13:33:16 GMT
Etag: "374a72c3026ea1fa5defd1e8eb7be2ca7184dfd5"
Cache-Control: max-age=422938,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 770c0a9ffbdd0b49-OSL
intorterraon.com/5/4284414/?oo=1&aab=1
200 OK 8.2 kB URL HTTP/2 intorterraon.com/5/4284414/?oo=1&aab=1
IP
Hash 565b9c9f4967d9644cbf6a1e92b8a7d8
bde3341c4029f69289d221dc0fc6354bee82bbe0
7d8038df7c7419b0240e9c0af36e41148ca65f037d5820d9635b6b97d8494401
Analyzer Verdict Alert quad9 Sinkholed
GET /5/4284414/?oo=1&aab=1 HTTP/1.1
Host: intorterraon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://footyhunter3.xyz
Connection: keep-alive
Referer: https://footyhunter3.xyz/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 27 Nov 2022 15:54:15 GMT
content-type: application/json
x-trace-id: 70ac4cf8cb3bd0ecfa11c40b0155ae74
link: <https://my.rtmark.net>; rel="preconnect dns-prefetch",<https://propeller-tracking.com>; rel="preconnect dns-prefetch",<https://diromalxx.com>; rel="preconnect dns-prefetch"
access-control-allow-origin: https://footyhunter3.xyz
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding
access-control-max-age: 86400
timing-allow-origin: *
set-cookie: OAID=13b6f576e5a5479f809420a9479f9331; expires=Mon, 27 Nov 2023 15:54:15 GMT; path=/; secure; SameSite=None
oaidts=1669564455; expires=Mon, 27 Nov 2023 15:54:15 GMT; path=/; secure; SameSite=None
syncedCookie=; expires=Tue, 10 Nov 2009 23:00:00 GMT
pragma: no-cache, no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT, Mon, 26 Jul 1997 05:00:00 GMT
content-encoding: gzip
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 8781ef7b81ea378c87b9b75e52115397
df3106ed152971215d454459c4e7ad93559aa4ca
e44e3b4621bc2e63c4b7a69aee8cf240a496c5d1cdef6b26f5a6036c0e3007a1
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Sun, 27 Nov 2022 15:54:17 GMT
Last-Modified: Sun, 27 Nov 2022 15:27:55 GMT
Server: ECS (bsa/EB16)
X-Cache: Miss from cloudfront
Via: 1.1 814e8c24454087e83cd261a6cf477166.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: Lz0yDUJlsDssMvZnnk7dCIFug4SEwwFYA1P8vrBfGJlOexhX-OhPVQ==
Age: 1583
cdn.taboola.com/libtrc/impl.20221124-3-RELEASE.js
200 OK 147 kB URL HTTP/2 cdn.taboola.com/libtrc/impl.20221124-3-RELEASE.js
IP
File type ASCII text, with very long lines (65509)
Size 147 kB (146642 bytes)
Hash 3050e0701b831671635744943e6b2cfc
b607f968e9b1224d9e266b3c352ba93d81b3d508
23a0d988d9f6d486c8ff64488cfe45ad098d31b1b8aa0368f554fd0429cf6dc1
GET /libtrc/impl.20221124-3-RELEASE.js HTTP/1.1
Host: cdn.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://st.chatango.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: LRQ6iAIE4qlOGT+4Aa4qcXF5mav1dYbmkTF8Tr/F684sFgjhX2igbmTLFQjQ5uQ+fOyT09vI5YM=
x-amz-request-id: AWMM5KXX4BB1DSQS
last-modified: Thu, 24 Nov 2022 10:45:55 GMT
etag: "3050e0701b831671635744943e6b2cfc"
content-encoding: br
x-amz-version-id: m908zDE.aY_GttR3lwFHQ_YgZ94gsCA5
content-type: application/javascript
accept-ranges: bytes
date: Sun, 27 Nov 2022 15:54:17 GMT
via: 1.1 varnish
age: 18499
x-served-by: cache-bma1674-BMA
x-cache: HIT
x-cache-hits: 10565
x-timer: S1669564457.262364,VS0,VE0
cache-control: private,max-age=31536000
vary: Accept-Encoding
abp: 55
server: AmazonS3-br
content-length: 146642
X-Firefox-Spdy: h2
simplewebanalysis.com/stats
200 OK 40 B URL HTTP/2 simplewebanalysis.com/stats
IP
File type ASCII text, with no line terminators
Hash 56c0677841738bd3051e7c8f75130dd9
688818f27b0d58ee7ae6fd59286d047b8b554395
9e7a4f3c1dd275961ea6c80d789f5eb3270396bf7ff325888864325401393eb2
GET /stats HTTP/1.1
Host: simplewebanalysis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://streamservicehd.click
Connection: keep-alive
Referer: https://streamservicehd.click/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 27 Nov 2022 15:54:17 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: https://streamservicehd.click
access-control-allow-credentials: true
set-cookie: uid_id2=dad65dd4-8032-4e21-84fd-fd192d89a84a:2:1; expires=Wed, 24 Nov 2032 15:54:17 GMT; secure; SameSite=None
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 41681abf2383b66862ccf79d20cafe70
e22a0c879539158a378ffdbdd1cab935e05008a6
0c3ddfeeb9ac40e786ca138a0b3b7041b174e3ad45eca531a344d41c2185b3b3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0C3DDFEEB9AC40E786CA138A0B3B7041B174E3AD45ECA531A344D41C2185B3B3"
Last-Modified: Fri, 25 Nov 2022 13:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10619
Expires: Sun, 27 Nov 2022 18:51:16 GMT
Date: Sun, 27 Nov 2022 15:54:17 GMT
Connection: keep-alive
sb.scorecardresearch.com/b?c1=7&c2=34354936&c3=1&cs_it=b3&cv=3.8.0.210223&ns__t=1669564457009&ns_c=windows-1252&ns_if=1&c7=https%3A%2F%2Fst.chatango.com%2Fh5%2Fgz%2Fr1109221504%2Fid.html&c8=&c9=https%3A%2F%2Fjs.freestreams-live1.com%2F
204 No Content 0 B URL HTTP/2 sb.scorecardresearch.com/b?c1=7&c2=34354936&c3=1&cs_it=b3&cv=3.8.0.210223&ns__t=1669564457009&ns_c=windows-1252&ns_if=1&c7=https%3A%2F%2Fst.chatango.com%2Fh5%2Fgz%2Fr1109221504%2Fid.html&c8=&c9=https%3A%2F%2Fjs.freestreams-live1.com%2F
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /b?c1=7&c2=34354936&c3=1&cs_it=b3&cv=3.8.0.210223&ns__t=1669564457009&ns_c=windows-1252&ns_if=1&c7=https%3A%2F%2Fst.chatango.com%2Fh5%2Fgz%2Fr1109221504%2Fid.html&c8=&c9=https%3A%2F%2Fjs.freestreams-live1.com%2F HTTP/1.1
Host: sb.scorecardresearch.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://st.chatango.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Sun, 27 Nov 2022 15:54:17 GMT
set-cookie: UID=1C93a1940b5d18c8c83b3421669564457; domain=.scorecardresearch.com; path=/; max-age=62208000
x-cache: Miss from cloudfront
via: 1.1 41dc61beb3fe8e8c2c299a2522d8330c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: JA1lKGnxpXOSkC83BJK2V0KFiZBT5Eu73xJUFyT_4Oqw1cD1Rb7dYw==
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 313 B IP
Hash fccdc9d595df75bfa103ba6c111345e1
55f48f6d8e5ed539b8feaa9fbeceb23edf23561b
15b3fb717cf37be0bf3a9da7e5fdf720b1124d2ea13c2afa01e9edc37c5c5b2e
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3860
Cache-Control: max-age=159410
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 15:54:17 GMT
Etag: "638344c7-139"
Expires: Tue, 29 Nov 2022 12:11:07 GMT
Last-Modified: Sun, 27 Nov 2022 11:06:47 GMT
Server: ECS (ska/F70F)
X-Cache: HIT
Content-Length: 313
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash e57e0410a74b098d75d7bae2c84c51c2
89db68eb922661858b491f0e8f7d65f4b79de117
319fef462e6c4a5e24df4b27b763fcd229ecd9df804339cabb097fdb216a4920
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "319FEF462E6C4A5E24DF4B27B763FCD229ECD9DF804339CABB097FDB216A4920"
Last-Modified: Sat, 26 Nov 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16635
Expires: Sun, 27 Nov 2022 20:31:32 GMT
Date: Sun, 27 Nov 2022 15:54:17 GMT
Connection: keep-alive
tractorfoolproofstandard.com/pixel/purst?dl=0&th=0&sc=0&rs=1382&rd=1382&fd=770&bv=22.10.v.9&tmpl=70
200 OK 0 B URL HTTP/1.1 tractorfoolproofstandard.com/pixel/purst?dl=0&th=0&sc=0&rs=1382&rd=1382&fd=770&bv=22.10.v.9&tmpl=70
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /pixel/purst?dl=0&th=0&sc=0&rs=1382&rd=1382&fd=770&bv=22.10.v.9&tmpl=70 HTTP/1.1
Host: tractorfoolproofstandard.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://streamservicehd.click/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Sun, 27 Nov 2022 15:54:17 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
trc-events.taboola.com/chatango-chatango1/log/2/debug?tim=15%3A54%3A17.097&type=usage&msg=rtus&llvl=2&id=5831&cv=20221124-3-RELEASE<=deflated&uuid=8879811e5b54fedbeaf9f7a20900ebbfb6162fe0e529856a2aa74bcb61bf98df&dcc=1&file=rtus.js&method=injectRtus&position=default&extraData=%7B%7D
204 No Content 0 B URL HTTP/2 trc-events.taboola.com/chatango-chatango1/log/2/debug?tim=15%3A54%3A17.097&type=usage&msg=rtus&llvl=2&id=5831&cv=20221124-3-RELEASE<=deflated&uuid=8879811e5b54fedbeaf9f7a20900ebbfb6162fe0e529856a2aa74bcb61bf98df&dcc=1&file=rtus.js&method=injectRtus&position=default&extraData=%7B%7D
IP
ASN #200478 Taboola.com ltd
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /chatango-chatango1/log/2/debug?tim=15%3A54%3A17.097&type=usage&msg=rtus&llvl=2&id=5831&cv=20221124-3-RELEASE<=deflated&uuid=8879811e5b54fedbeaf9f7a20900ebbfb6162fe0e529856a2aa74bcb61bf98df&dcc=1&file=rtus.js&method=injectRtus&position=default&extraData=%7B%7D HTTP/1.1
Host: trc-events.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://st.chatango.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
server: nginx
date: Sun, 27 Nov 2022 15:54:17 GMT
x-fastly-to-nlb-rtt: 21928
access-control-allow-credentials: true
X-Firefox-Spdy: h2
gum.criteo.com/sync?c=72&r=2&j=TRC.getRTUS
200 OK 9.1 kB URL HTTP/2 gum.criteo.com/sync?c=72&r=2&j=TRC.getRTUS
IP
Hash 45a09b4914e01f86f0dce250ee0ab051
60b2fb16d631bca3fae01b9367966688e17cf37f
175061ceb53d9e3b5c588cc75e3ff6af75e9e282654b8386e10584825f97b283
GET /sync?c=72&r=2&j=TRC.getRTUS HTTP/1.1
Host: gum.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://st.chatango.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 27 Nov 2022 15:54:17 GMT
content-type: text/javascript; charset=utf-8
server: Kestrel
cache-control: private, max-age=3600
expires: 60
server-processing-duration-in-ticks: 555955
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
my.rtmark.net/gid.js?userId=q0lo874634en074558948m5b7dewt827
200 OK 65 B URL HTTP/2 my.rtmark.net/gid.js?userId=q0lo874634en074558948m5b7dewt827
IP
File type JSON data\012- , ASCII text
Hash 8a7b7d8f6a7901e9433f3186ccf2e9c0
b898f290509e988fbf2223b6ff4dddbb3b06f8a6
4a111e7a52dd2af8e4a26a319b32ef12e8c0739d7bc1ed21748062c77c0175dd
GET /gid.js?userId=q0lo874634en074558948m5b7dewt827 HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://footyhunter3.xyz
Connection: keep-alive
Referer: https://footyhunter3.xyz/
Cookie: ID=13b6f576e5a5479f809420a9479f9331
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 27 Nov 2022 15:54:17 GMT
content-type: application/json; charset=utf-8
content-length: 65
access-control-allow-origin: https://footyhunter3.xyz
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
set-cookie: ID=13b6f576e5a5479f809420a9479f9331; expires=Mon, 27 Nov 2023 15:54:17 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
gum.criteo.com/syncframe?origin=rtus&topUrl=js.freestreams-live1.com
200 OK 5.6 kB URL HTTP/2 gum.criteo.com/syncframe?origin=rtus&topUrl=js.freestreams-live1.com
IP
Hash 6a3688496c137e60098835cf5e8657c1
fd272e4879b712839228c305f6335a3c81304bc2
8d9cc87d6060d9f361b09a3087c92e2cbf62805f466c2cb4d25d18af5a084fe6
GET /syncframe?origin=rtus&topUrl=js.freestreams-live1.com HTTP/1.1
Host: gum.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://st.chatango.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 27 Nov 2022 15:54:16 GMT
content-type: text/html; charset=utf-8
server: Kestrel
cache-control: private, max-age=3600
set-cookie: uid=fa8253d8-f32a-47cb-9a04-a80ee9f6ac9f; expires=Fri, 22 Dec 2023 15:54:16 GMT; domain=.criteo.com; path=/; secure; samesite=none
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy: require-corp
server-processing-duration-in-ticks: 787799
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
dnacdn.net/dna
200 OK 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /dna HTTP/1.1
Host: dnacdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://gum.criteo.com/
Origin: https://gum.criteo.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 27 Nov 2022 15:54:17 GMT
server: Kestrel
content-length: 0
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
set-cookie: browser_data=dUZ_4l80M0RITmhlJTJCZkMwOUJGQlhaMUN2czdKTDN3TjJBY2l4Zk5weVhVMXI0Z2VNRXltZjg3dVJWeEdyZERKRWpiOHg; expires=Fri, 22 Dec 2023 15:54:17 GMT; domain=dnacdn.net; path=/; secure; samesite=none
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-origin: https://gum.criteo.com
server-processing-duration-in-ticks: 244270
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 312 B IP
Hash dea991c1d09c99b91ba05fad7b52c62f
1abc5b534af33b0f18342a4783be8bcbf733b797
cb6e2ab43549e6794412d0ea9b1ffe314cf203f5234939c5acdd88b36262e63e
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5474
Cache-Control: max-age=157079
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 15:54:17 GMT
Etag: "6383355e-138"
Expires: Tue, 29 Nov 2022 11:32:16 GMT
Last-Modified: Sun, 27 Nov 2022 10:01:02 GMT
Server: ECS (ska/F70F)
X-Cache: HIT
Content-Length: 312
ocsp.digicert.com/
200 OK 312 B IP
Hash dea991c1d09c99b91ba05fad7b52c62f
1abc5b534af33b0f18342a4783be8bcbf733b797
cb6e2ab43549e6794412d0ea9b1ffe314cf203f5234939c5acdd88b36262e63e
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5474
Cache-Control: max-age=157079
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 15:54:17 GMT
Etag: "6383355e-138"
Expires: Tue, 29 Nov 2022 11:32:16 GMT
Last-Modified: Sun, 27 Nov 2022 10:01:02 GMT
Server: ECS (ska/F70F)
X-Cache: HIT
Content-Length: 312
banquetunarmedgrater.com/advertisers.js
200 OK 0 B URL HTTP/1.1 banquetunarmedgrater.com/advertisers.js
IP
ASN #39572 DataWeb Global Group B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /advertisers.js HTTP/1.1
Host: banquetunarmedgrater.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://streamservicehd.click/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.22.0
Date: Sun, 27 Nov 2022 15:54:18 GMT
Content-Type: application/javascript
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: e79ca0506292b43dc589861d7a917a6b
Strict-Transport-Security: max-age=0; includeSubdomains
gum.criteo.com/sync?c=72&r=2&j=TRC.getRTUS
200 OK 0 B URL HTTP/2 gum.criteo.com/sync?c=72&r=2&j=TRC.getRTUS
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /sync?c=72&r=2&j=TRC.getRTUS HTTP/1.1
Host: gum.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: x-crto-bundle
Referer: https://st.chatango.com/
Origin: https://st.chatango.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 27 Nov 2022 15:54:17 GMT
server: Kestrel
content-length: 0
cache-control: private, max-age=3600
expires: 60
access-control-allow-credentials: true
access-control-allow-headers: X-CRTO-SID, X-CRTO-IDCPY, X-CRTO-OPTOUT, X-CRTO-BUNDLE
access-control-allow-origin: https://st.chatango.com
server-processing-duration-in-ticks: 498887
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 472 B IP
Hash 97e6c542b8bd3dbb41cd3e3306825417
914fee19fb552cb806c2062595253c3d566e14a3
2fd2a028e28a13bc544c48f90105fbc9168170dff4a0d9a8ae0e8b00d624bd9e
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 27 Nov 2022 15:54:18 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Thu, 24 Nov 2022 06:35:56 GMT
Expires: Thu, 01 Dec 2022 06:35:55 GMT
Etag: "914fee19fb552cb806c2062595253c3d566e14a3"
Cache-Control: max-age=311496,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 770c0aa73fdeb521-OSL
u4qnpomkwnnj.s4.adsco.re/
200 OK 0 B URL HTTP/1.1 u4qnpomkwnnj.s4.adsco.re/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST / HTTP/1.1
Host: u4qnpomkwnnj.s4.adsco.re
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 0
Origin: https://footyhunter3.xyz
Connection: keep-alive
Referer: https://footyhunter3.xyz/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Sun, 27 Nov 2022 15:54:18 GMT
Content-Type: text/html
Content-Length: 0
Last-Modified: Mon, 30 Jul 2018 15:38:01 GMT
Connection: close
ETag: "5b5f30d9-0"
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
Access-Control-Expose-Headers: Content-Length,Content-Range
Accept-Ranges: bytes
intellipopup.com/an.aspx?_=BAYAY4OIKQFjg4gpgAGBAsAAIFosMEjUgWnJQjac6rJqckV1AwyFKyOVQme4Zk1eggqawQBIMEYCIQC0pJXnW1vqKirwX8I3ryzfbErMP8riOuWrT5fTTj6EQQIhAO4vItBk2ziyVQfK4OpyD1OxQj6tepUnyFx2woSvGGX7&v=4&HpjRenFx=4447331&minBid=&OFVlDAwg=0,0&GPyhSUQE=&kDMgBapv=https%3A%2F%2Fwikisport.click%2F&s=1280,1024,1,1280,1024,1
200 OK 44 B URL HTTP/2 intellipopup.com/an.aspx?_=BAYAY4OIKQFjg4gpgAGBAsAAIFosMEjUgWnJQjac6rJqckV1AwyFKyOVQme4Zk1eggqawQBIMEYCIQC0pJXnW1vqKirwX8I3ryzfbErMP8riOuWrT5fTTj6EQQIhAO4vItBk2ziyVQfK4OpyD1OxQj6tepUnyFx2woSvGGX7&v=4&HpjRenFx=4447331&minBid=&OFVlDAwg=0,0&GPyhSUQE=&kDMgBapv=https%3A%2F%2Fwikisport.click%2F&s=1280,1024,1,1280,1024,1
IP
File type ASCII text, with no line terminators
Hash d5f0a25e4d3522d56d48ce7bc3e518fb
86794caff58f7fee6e684c2ba7195f970a8d6f4c
9d781128a8ece413b003d5612b8398bf9340ef7f5b751d12bd125ba523d3ceb5
GET /an.aspx?_=BAYAY4OIKQFjg4gpgAGBAsAAIFosMEjUgWnJQjac6rJqckV1AwyFKyOVQme4Zk1eggqawQBIMEYCIQC0pJXnW1vqKirwX8I3ryzfbErMP8riOuWrT5fTTj6EQQIhAO4vItBk2ziyVQfK4OpyD1OxQj6tepUnyFx2woSvGGX7&v=4&HpjRenFx=4447331&minBid=&OFVlDAwg=0,0&GPyhSUQE=&kDMgBapv=https%3A%2F%2Fwikisport.click%2F&s=1280,1024,1,1280,1024,1 HTTP/1.1
Host: intellipopup.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://footyhunter3.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
asf: 9
popads-ec: ASB
content-type: text/javascript;charset=UTF-8
content-length: 44
date: Sun, 27 Nov 2022 15:54:18 GMT
X-Firefox-Spdy: h2
ust.chatango.com/groupinfo/f/1/f1-fsl/gprofile.xml
200 OK 46 B URL HTTP/1.1 ust.chatango.com/groupinfo/f/1/f1-fsl/gprofile.xml
IP
File type XML 1.0 document text\012- XML document text\012- HTML document, ASCII text, with no line terminators
Hash 489a85ae9059fbab14c176e10bdceae7
23a167e15ff489c149a1c1f633bfcd4597d9c0bd
2bf0b59a7518f8b73db880ecb0e510763231b2a8ef3a789504c9ab98e549904a
GET /groupinfo/f/1/f1-fsl/gprofile.xml HTTP/1.1
Host: ust.chatango.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://st.chatango.com
Connection: keep-alive
Referer: https://st.chatango.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 27 Nov 2022 15:54:18 GMT
Content-Type: text/xml
Content-Length: 46
Last-Modified: Thu, 12 Mar 2020 19:13:39 GMT
Connection: keep-alive
Expires: Sun, 27 Nov 2022 15:54:18 GMT
Cache-Control: max-age=0
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
ocsp.digicert.com/
200 OK 313 B IP
Hash 3315ccb482664a069ef68952616491f8
bf38520640a845ef517fa98c363d172c69e85934
56c77c54f3eec06b7ee8d617d9c40b15a3c3c2bf0feb9ee3fb3fa9982d4c868c
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1456
Cache-Control: max-age=143340
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 15:54:18 GMT
Etag: "63830f66-139"
Expires: Tue, 29 Nov 2022 07:43:18 GMT
Last-Modified: Sun, 27 Nov 2022 07:19:02 GMT
Server: ECS (ska/F70F)
X-Cache: HIT
Content-Length: 313
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 5af61422c4eaa1b995ec63e463abda26
db75634681ed688840773ce828c169ac9da7d131
506791493bb08d458008ad072ac34a26c2170c1e775b83f55f20cd8af97aa895
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 15:54:18 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
csm.nl.eu.criteo.net/iev?entry=c~Idfs.Rtus.72.Events.StartInit~1&entry=c~Idfs.Rtus.72.Events.SyncframeDropped~1&entry=c~Idfs.Rtus.72.Origin.FromSyncframeBundle~1&entry=c~Idfs.Rtus.72.Headers.Bundle~1&entry=c~Idfs.Rtus.72.Events.InitiateFetch~1
200 OK 43 B URL HTTP/2 csm.nl.eu.criteo.net/iev?entry=c~Idfs.Rtus.72.Events.StartInit~1&entry=c~Idfs.Rtus.72.Events.SyncframeDropped~1&entry=c~Idfs.Rtus.72.Origin.FromSyncframeBundle~1&entry=c~Idfs.Rtus.72.Headers.Bundle~1&entry=c~Idfs.Rtus.72.Events.InitiateFetch~1
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash b4491705564909da7f9eaf749dbbfbb1
279315d507855c6a4351e1e2c2f39dd9cd2fccd8
4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49
GET /iev?entry=c~Idfs.Rtus.72.Events.StartInit~1&entry=c~Idfs.Rtus.72.Events.SyncframeDropped~1&entry=c~Idfs.Rtus.72.Origin.FromSyncframeBundle~1&entry=c~Idfs.Rtus.72.Headers.Bundle~1&entry=c~Idfs.Rtus.72.Events.InitiateFetch~1 HTTP/1.1
Host: csm.nl.eu.criteo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://st.chatango.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 27 Nov 2022 15:54:17 GMT
pragma: no-cache
server: Finatra
expires: 0
content-type: image/gif
cache-control: no-cache, no-store, must-revalidate
content-length: 43
cross-origin-resource-policy: cross-origin
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
gum.criteo.com/sync?c=72&r=2&j=TRC.getRTUS
200 OK 8.9 kB URL HTTP/2 gum.criteo.com/sync?c=72&r=2&j=TRC.getRTUS
IP
File type C source, ASCII text, with very long lines (29462)
Hash 8d75bf5548433ffcc7b4f48302fef7a5
cd97f319210e5a9ac0cbd077f28b809b21377acc
1ab0d3f499383558a4f3c378b41d5915bcda233ecbe19b7d740f6908806f07dc
GET /sync?c=72&r=2&j=TRC.getRTUS HTTP/1.1
Host: gum.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://st.chatango.com/
x-crto-bundle: fp4nhV9wSnpkU2dieWxHWkk2U0t5enNMMEx0OTRHeU1GViUyQnp1UDJPWWJreHprNk1XcDdWMnNLS0FUT2ZLNkNnZVVKVk91MXkydFhEWiUyQkpPendKckNlTDV3aXgwWU9rcWxsS2R5c3gyVXhkbGglMkZaNmp1YnFlVSUyRk9hak9jblh0SHFOTCUyRnlzSGlnVldLT0NORDQ2Q3RuUFNWYU53JTNEJTNE
Origin: https://st.chatango.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 27 Nov 2022 15:54:17 GMT
content-type: text/javascript; charset=utf-8
server: Kestrel
cache-control: private, max-age=3600
expires: 60
access-control-allow-credentials: true
access-control-allow-origin: https://st.chatango.com
server-processing-duration-in-ticks: 3155522
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
ad.kubiadserv.icu/deliver/token/3a3641fd182d55a?loc=https%3A%2F%2Fjs.freestreams-live1.com%2Fdaznf1-esp%2F&vid=ccb5122d-47fb-49fa-a98b-617e92516a22
200 OK 5.6 kB URL HTTP/1.1 ad.kubiadserv.icu/deliver/token/3a3641fd182d55a?loc=https%3A%2F%2Fjs.freestreams-live1.com%2Fdaznf1-esp%2F&vid=ccb5122d-47fb-49fa-a98b-617e92516a22
IP
ASN #24940 Hetzner Online GmbH
Hash f043060271ad19fc3f504043c2c5385f
a5058008d4bad7078e217f0204cbfe9ac29e60ab
90b026e2119f51de29576b05aee4ff64f316c263aeb3cad38bb6e5358f0f369f
GET /deliver/token/3a3641fd182d55a?loc=https%3A%2F%2Fjs.freestreams-live1.com%2Fdaznf1-esp%2F&vid=ccb5122d-47fb-49fa-a98b-617e92516a22 HTTP/1.1
Host: ad.kubiadserv.icu
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://js.freestreams-live1.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 27 Nov 2022 15:54:18 GMT
Content-Type: text/javascript; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Cache-Control: max-age=0, must-revalidate, private
Pragma: no-cache
Expires: Sun, 27 Nov 2022 15:54:18 GMT
Set-Cookie: uuid=aca2694c-5b5a2a9a-6383882a-7031-cee5900c; expires=Wed, 24-Nov-2032 15:54:18 GMT; path=/; domain=ad.kubiadserv.icu; secure; httponly; samesite=none
Content-Encoding: gzip
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 5af61422c4eaa1b995ec63e463abda26
db75634681ed688840773ce828c169ac9da7d131
506791493bb08d458008ad072ac34a26c2170c1e775b83f55f20cd8af97aa895
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 15:54:18 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash e9895464b828d538dc654c678c82b181
af5791cd48761cb3f3f979b481c23e1508692823
c93a71d276aa3f386bef66ed2b4d69e041cccc9a4df5024b14d54ce2569948f0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 15:54:18 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash e9895464b828d538dc654c678c82b181
af5791cd48761cb3f3f979b481c23e1508692823
c93a71d276aa3f386bef66ed2b4d69e041cccc9a4df5024b14d54ce2569948f0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 15:54:18 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/sortsmillgoudy/v15/Qw3GZR9MED_6PSuS_50nEaVrfzgEbHoEjw.woff2
200 OK 23 kB URL HTTP/2 fonts.gstatic.com/s/sortsmillgoudy/v15/Qw3GZR9MED_6PSuS_50nEaVrfzgEbHoEjw.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 22788, version 1.0\012- data
Hash 56d038e744088ad498d45f4d80c62959
8eaecdc0dfed2557744fec0fe3bcf39b1c54a98c
0d14e7dd5f7801ffb9db452f40335da58a6a428cd36031c4a353d3ab82311032
GET /s/sortsmillgoudy/v15/Qw3GZR9MED_6PSuS_50nEaVrfzgEbHoEjw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://js.freestreams-live1.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 22788
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 22 Nov 2022 01:22:42 GMT
expires: Wed, 22 Nov 2023 01:22:42 GMT
cache-control: public, max-age=31536000
age: 484296
last-modified: Wed, 27 Apr 2022 16:00:43 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash e9895464b828d538dc654c678c82b181
af5791cd48761cb3f3f979b481c23e1508692823
c93a71d276aa3f386bef66ed2b4d69e041cccc9a4df5024b14d54ce2569948f0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 15:54:18 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash e9895464b828d538dc654c678c82b181
af5791cd48761cb3f3f979b481c23e1508692823
c93a71d276aa3f386bef66ed2b4d69e041cccc9a4df5024b14d54ce2569948f0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 15:54:18 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/yanonekaffeesatz/v24/3y976aknfjLm_3lMKjiMgmUUYBs04Y8bH-o.woff2
200 OK 26 kB URL HTTP/2 fonts.gstatic.com/s/yanonekaffeesatz/v24/3y976aknfjLm_3lMKjiMgmUUYBs04Y8bH-o.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 25540, version 1.0\012- data
Hash 3dc72cae1a32e87b38144a702ba627e0
bfbc729a34b987cd06d20842c5049ac275ea4139
1c57101bb57275c8c8cafc5d6216131a378c4388a52656ed3770068cd0ab10b9
GET /s/yanonekaffeesatz/v24/3y976aknfjLm_3lMKjiMgmUUYBs04Y8bH-o.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://js.freestreams-live1.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 25540
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 22 Nov 2022 20:47:49 GMT
expires: Wed, 22 Nov 2023 20:47:49 GMT
cache-control: public, max-age=31536000
age: 414389
last-modified: Tue, 23 Aug 2022 18:11:50 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/yanonekaffeesatz/v24/3y976aknfjLm_3lMKjiMgmUUYBs04Y8VH-qVHQ.woff2
200 OK 13 kB URL HTTP/2 fonts.gstatic.com/s/yanonekaffeesatz/v24/3y976aknfjLm_3lMKjiMgmUUYBs04Y8VH-qVHQ.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 13112, version 1.0\012- data
Hash 268013803ee271fc8d98de420e8359f0
18ce79c46ff256bd5ea4f3b43c06463abe850558
3e1530ee4d26145ccdf21bc6c8346d1089a92a8aabb6823718c647206f5d0325
GET /s/yanonekaffeesatz/v24/3y976aknfjLm_3lMKjiMgmUUYBs04Y8VH-qVHQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://js.freestreams-live1.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 13112
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 23 Nov 2022 02:38:24 GMT
expires: Thu, 23 Nov 2023 02:38:24 GMT
cache-control: public, max-age=31536000
age: 393354
last-modified: Tue, 23 Aug 2022 18:21:13 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash e9895464b828d538dc654c678c82b181
af5791cd48761cb3f3f979b481c23e1508692823
c93a71d276aa3f386bef66ed2b4d69e041cccc9a4df5024b14d54ce2569948f0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 15:54:18 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ad.kubiadserv.icu/images/delivery/7406bc68db304d21cf36.gif
200 OK 137 kB URL HTTP/1.1 ad.kubiadserv.icu/images/delivery/7406bc68db304d21cf36.gif
IP
ASN #24940 Hetzner Online GmbH
File type GIF image data, version 89a, 300 x 250\012- data
Size 137 kB (136949 bytes)
Hash 40fdd99a40816da16f8ad7f74d634b80
3ec4ff1c4e964a4157b47673d668b4ed40185955
15aa6769a141f1e0e5c90e1ef9928b0857364b3275bd23e9f99343ee7b557d9c
GET /images/delivery/7406bc68db304d21cf36.gif HTTP/1.1
Host: ad.kubiadserv.icu
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://js.freestreams-live1.com/
Cookie: uuid=aca2694c-5b5a2a9a-6383882a-7031-cee5900c
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 27 Nov 2022 15:54:18 GMT
Content-Type: image/gif
Content-Length: 136949
Last-Modified: Fri, 18 Nov 2022 13:33:30 GMT
Connection: keep-alive
ETag: "637789aa-216f5"
Expires: Tue, 29 Nov 2022 15:54:18 GMT
Pragma: public
Cache-Control: max-age=172800, public, must-revalidate, proxy-revalidate
Accept-Ranges: bytes
fonts.gstatic.com/s/sortsmillgoudy/v15/Qw3AZR9MED_6PSuS_50nEaVrfzgEbH80jbs_.woff2
200 OK 25 kB URL HTTP/2 fonts.gstatic.com/s/sortsmillgoudy/v15/Qw3AZR9MED_6PSuS_50nEaVrfzgEbH80jbs_.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 24656, version 1.0\012- data
Hash ae2477b5a60e15d750d26c067f438efa
b90b3feeb4e1c28703686b541e2bcab19b2d6497
24c8cce528358710b1d826794caa3fcf2b129a7efcde51edf3cdc84e11d7e430
GET /s/sortsmillgoudy/v15/Qw3AZR9MED_6PSuS_50nEaVrfzgEbH80jbs_.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://js.freestreams-live1.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 24656
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 23 Nov 2022 20:57:17 GMT
expires: Thu, 23 Nov 2023 20:57:17 GMT
cache-control: public, max-age=31536000
age: 327422
last-modified: Wed, 27 Apr 2022 15:50:21 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-129691894-1&cid=1710097307.1669564459&jid=1819526352&gjid=1841469591&_gid=1403356615.1669564459&_u=YEBAAUAAAAAAACAAI~&z=2030634476
200 OK 1 B URL HTTP/2 stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-129691894-1&cid=1710097307.1669564459&jid=1819526352&gjid=1841469591&_gid=1403356615.1669564459&_u=YEBAAUAAAAAAACAAI~&z=2030634476
IP
File type very short file (no magic)
Hash c4ca4238a0b923820dcc509a6f75849b
356a192b7913b04c54574d18c28d46e6395428ab
6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b
POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-129691894-1&cid=1710097307.1669564459&jid=1819526352&gjid=1841469591&_gid=1403356615.1669564459&_u=YEBAAUAAAAAAACAAI~&z=2030634476 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://js.freestreams-live1.com
Connection: keep-alive
Referer: https://js.freestreams-live1.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://js.freestreams-live1.com
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Sun, 27 Nov 2022 15:54:19 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 1
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
region1.google-analytics.com/g/collect?v=2&tid=G-RLWTKVWT12>m=2oeb90&_p=1529995269&cid=1710097307.1669564459&ul=en-us&sr=1280x1024&_s=1&sid=1669564459&sct=1&seg=0&dl=https%3A%2F%2Fjs.freestreams-live1.com%2Fdaznf1-esp%2F&dt=DAZN%20F1%20en%20directo%20gratis%20por%20internet%20%7C%20DAZN%20F1%20Spain%20Live%20Stream%20Free&en=page_view&_fv=1&_ss=1
204 No Content 0 B URL HTTP/2 region1.google-analytics.com/g/collect?v=2&tid=G-RLWTKVWT12>m=2oeb90&_p=1529995269&cid=1710097307.1669564459&ul=en-us&sr=1280x1024&_s=1&sid=1669564459&sct=1&seg=0&dl=https%3A%2F%2Fjs.freestreams-live1.com%2Fdaznf1-esp%2F&dt=DAZN%20F1%20en%20directo%20gratis%20por%20internet%20%7C%20DAZN%20F1%20Spain%20Live%20Stream%20Free&en=page_view&_fv=1&_ss=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-RLWTKVWT12>m=2oeb90&_p=1529995269&cid=1710097307.1669564459&ul=en-us&sr=1280x1024&_s=1&sid=1669564459&sct=1&seg=0&dl=https%3A%2F%2Fjs.freestreams-live1.com%2Fdaznf1-esp%2F&dt=DAZN%20F1%20en%20directo%20gratis%20por%20internet%20%7C%20DAZN%20F1%20Spain%20Live%20Stream%20Free&en=page_view&_fv=1&_ss=1 HTTP/1.1
Host: region1.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://js.freestreams-live1.com
Connection: keep-alive
Referer: https://js.freestreams-live1.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://js.freestreams-live1.com
date: Sun, 27 Nov 2022 15:54:20 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
sb.scorecardresearch.com/beacon.js
200 OK 0 B URL HTTP/2 sb.scorecardresearch.com/beacon.js
IP
GET /beacon.js HTTP/1.1
Host: sb.scorecardresearch.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://st.chatango.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
last-modified: Tue, 28 Jun 2022 13:19:23 GMT
x-amz-server-side-encryption: AES256
server: AmazonS3
content-encoding: gzip
date: Sun, 27 Nov 2022 01:57:23 GMT
cache-control: max-age=86400
etag: W/"eaf85c1c6758e84acfe134efd70e9373"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 41dc61beb3fe8e8c2c299a2522d8330c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: H7ZC1DT7Jon1WLpIaNkfcOetS8aAknvn_Q16ykB02Ii-pXevWn7EIA==
age: 50217
X-Firefox-Spdy: h2
ag.gbc.criteo.com/newidsd
200 OK 0 B URL HTTP/2 ag.gbc.criteo.com/newidsd
IP
GET /newidsd HTTP/1.1
Host: ag.gbc.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://gum.criteo.com/
Origin: https://gum.criteo.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
date: Sun, 27 Nov 2022 15:54:17 GMT
content-type: application/json; charset=utf-8
server: Kestrel
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-origin: https://gum.criteo.com
server-processing-duration-in-ticks: 106123
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
static.cloudflareinsights.com/beacon.min.js/vaafb692b2aea4879b33c060e79fe94621666317369993
200 OK 0 B URL HTTP/2 static.cloudflareinsights.com/beacon.min.js/vaafb692b2aea4879b33c060e79fe94621666317369993
IP
GET /beacon.min.js/vaafb692b2aea4879b33c060e79fe94621666317369993 HTTP/1.1
Host: static.cloudflareinsights.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://js.freestreams-live1.com
Connection: keep-alive
Referer: https://js.freestreams-live1.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 27 Nov 2022 15:54:15 GMT
content-type: text/javascript;charset=UTF-8
access-control-allow-origin: *
cache-control: public, max-age=86400
etag: W/2022.10.1
last-modified: Fri, 21 Oct 2022 01:56:09 GMT
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
server: cloudflare
cf-ray: 770c0a944dd80afa-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
abould.com/script/bootstrap.js
200 OK 0 B URL HTTP/2 abould.com/script/bootstrap.js
IP
GET /script/bootstrap.js HTTP/1.1
Host: abould.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://footyhunter3.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 27 Nov 2022 15:54:15 GMT
content-type: application/javascript
x-guploader-uploadid: ADPycdutEEASCkeRjOKbpALrs7tnL5omwxHJWnRSfcCiU9ksf1bzj--MCdpVjja0CSM3uWd53UmwJCvEsnhaQHYywpIWlKC-kMfG
x-goog-generation: 1669191375948071
x-goog-metageneration: 2
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 100584
x-goog-hash: crc32c=mktFgA==, md5=WKNwY2lJNJOzygA6Intvpg==
x-goog-storage-class: MULTI_REGIONAL
access-control-allow-origin: *
expires: Sun, 27 Nov 2022 15:55:12 GMT
cache-control: public, max-age=14400
age: 2333
last-modified: Wed, 23 Nov 2022 08:16:16 GMT
etag: W/"58a3706369493493b3ca003a227b6fa6"
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=iHwgznmHtVIQQQqLCkw0KOa2mTkEeRWqL5kCDamcewwWnVNtMKaTv%2BLubLLdOG2SL4KeurK7l%2Fefva6jxqBRNpVmdOywyqM99VT6VLTIuaXUrwlUr1GceKg6FHe7"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 770c0a982fe00b02-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
nanouwho.com/27/22b0ff6d446d45dfe24f0ae457b1c7db
200 OK 0 B URL HTTP/2 nanouwho.com/27/22b0ff6d446d45dfe24f0ae457b1c7db
IP
Analyzer Verdict Alert quad9 Sinkholed
GET /27/22b0ff6d446d45dfe24f0ae457b1c7db HTTP/1.1
Host: nanouwho.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://footyhunter3.xyz/
Cookie: scm=1; OAID=e3125c86a0d3406db799ea320d7ee629; oaidts=1669564456
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 27 Nov 2022 15:54:16 GMT
content-type: application/javascript
access-control-allow-credentials: true
access-control-allow-origin:
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-Sc, CVERSION, VERSION
cache-control: max-age:290304000, public
last-modified: Fri, 25 Nov 2022 08:14:39 GMT
expires: Fri, 25 Dec 2082 08:14:39 GMT
strict-transport-security: max-age=1
x-content-type-options: nosniff
content-encoding: gzip
X-Firefox-Spdy: h2
streamservicehd.click/blast.js
200 OK 0 B URL HTTP/2 streamservicehd.click/blast.js
IP
GET /blast.js HTTP/1.1
Host: streamservicehd.click
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://streamservicehd.click/premiumtv/footyhunter2.php?id=537
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 27 Nov 2022 15:54:16 GMT
content-type: application/javascript
last-modified: Sat, 08 Oct 2022 11:49:59 GMT
etag: W/"634163e7-13040"
cache-control: no-cache, no-store, must-revalidate
cf-cache-status: HIT
age: 6896
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=hiPlaLUoG79HCdVMuOSqHCKjoh3I0RBLqarNVRp6y5RiBM9XV4cX2QshPZHnYOsECCFsg9NYQSQMrJLDwmmXaL8FtKyzwnf%2FHfgBfadCITikgNIbG7%2FpBnwRYM8EmaEWeghuIHhueFY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
referrer-policy: unsafe-url
server: cloudflare
cf-ray: 770c0a9b4e7cb511-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
gum.criteo.com/sid/json?origin=rtus&domain=st.chatango.com&sn=FirefoxSyncframe&so=0&topUrl=js.freestreams-live1.com&info=zr0wjF80M0RITmhlJTJCZkMwOUJGQlhaMUN2czdKTDN3TjJBY2l4Zk5weVhVMXI0Z2VPaUhjVWZxMyUyQlJSUnZCaW41SXdqNg&idsd=-926013448,-1630570278&rtusCallerId=72&lsw=1
200 OK 0 B URL HTTP/2 gum.criteo.com/sid/json?origin=rtus&domain=st.chatango.com&sn=FirefoxSyncframe&so=0&topUrl=js.freestreams-live1.com&info=zr0wjF80M0RITmhlJTJCZkMwOUJGQlhaMUN2czdKTDN3TjJBY2l4Zk5weVhVMXI0Z2VPaUhjVWZxMyUyQlJSUnZCaW41SXdqNg&idsd=-926013448,-1630570278&rtusCallerId=72&lsw=1
IP
GET /sid/json?origin=rtus&domain=st.chatango.com&sn=FirefoxSyncframe&so=0&topUrl=js.freestreams-live1.com&info=zr0wjF80M0RITmhlJTJCZkMwOUJGQlhaMUN2czdKTDN3TjJBY2l4Zk5weVhVMXI0Z2VPaUhjVWZxMyUyQlJSUnZCaW41SXdqNg&idsd=-926013448,-1630570278&rtusCallerId=72&lsw=1 HTTP/1.1
Host: gum.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://gum.criteo.com/syncframe?origin=rtus&topUrl=js.freestreams-live1.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 27 Nov 2022 15:54:17 GMT
content-type: application/json; charset=utf-8
server: Kestrel
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
server-processing-duration-in-ticks: 868226
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
acacdn.com/script/suv4.js
200 OK 0 B URL HTTP/2 acacdn.com/script/suv4.js
IP
GET /script/suv4.js HTTP/1.1
Host: acacdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://js.freestreams-live1.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 27 Nov 2022 15:54:15 GMT
content-type: application/javascript
x-guploader-uploadid: ADPycdsa0kWv_m4fDoeBr2GW94C4wN_euw5XsRJIM5U6eweLO6G63BWjDR_FaNedEAF5NLnNG46AdHKaGJkf0Qh1_c7olg
x-goog-generation: 1669191527960820
x-goog-metageneration: 2
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 100584
x-goog-hash: crc32c=mktFgA==, md5=WKNwY2lJNJOzygA6Intvpg==
x-goog-storage-class: MULTI_REGIONAL
access-control-allow-origin: *
expires: Sun, 27 Nov 2022 16:10:45 GMT
cache-control: public, max-age=14400
age: 691
last-modified: Wed, 23 Nov 2022 08:18:48 GMT
etag: W/"58a3706369493493b3ca003a227b6fa6"
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Y6jx5YCxigLEO1qqkouJI3hy8MG53HMDZo0cDIHwV6olpAa5yuNfWD7J7UfMkiUG8%2FXoEG0hCCt3JZN%2B1egJr4gaYsVhNG6w90d4CtRZKfJMzvR6e9qXNaX330cH"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 770c0a942c51b518-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
dnacdn.net/dna
200 OK 0 B IP
GET /dna HTTP/1.1
Host: dnacdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://gum.criteo.com/
Origin: https://gum.criteo.com
Connection: keep-alive
Cookie: browser_data=dUZ_4l80M0RITmhlJTJCZkMwOUJGQlhaMUN2czdKTDN3TjJBY2l4Zk5weVhVMXI0Z2VNRXltZjg3dVJWeEdyZERKRWpiOHg
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 27 Nov 2022 15:54:17 GMT
content-type: application/json; charset=utf-8
server: Kestrel
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
set-cookie: browser_data=zr0wjF80M0RITmhlJTJCZkMwOUJGQlhaMUN2czdKTDN3TjJBY2l4Zk5weVhVMXI0Z2VPaUhjVWZxMyUyQlJSUnZCaW41SXdqNg; expires=Fri, 22 Dec 2023 15:54:17 GMT; domain=dnacdn.net; path=/; secure; samesite=none
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-origin: https://gum.criteo.com
server-processing-duration-in-ticks: 269416
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Yanone+Kaffeesatz:200,300,regular,700%7CSorts+Mill+Goudy:regular,italic
200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Yanone+Kaffeesatz:200,300,regular,700%7CSorts+Mill+Goudy:regular,italic
IP
GET /css?family=Yanone+Kaffeesatz:200,300,regular,700%7CSorts+Mill+Goudy:regular,italic HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://js.freestreams-live1.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sun, 27 Nov 2022 15:54:18 GMT
date: Sun, 27 Nov 2022 15:54:18 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
tzegilo.com/stattag.js
200 OK 0 B IP
GET /stattag.js HTTP/1.1
Host: tzegilo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://footyhunter3.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 27 Nov 2022 15:54:15 GMT
content-type: application/javascript
last-modified: Wed, 23 Nov 2022 15:07:42 GMT
etag: W/"637e373e-32a6"
link: <https://flerap.com/>; rel=preconnect; crossorigin, <https://fleraprt.com/>; rel=preconnect; crossorigin
cache-control: max-age=14400
cf-cache-status: HIT
age: 5901
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=338eC6qH2rOUWErA07MhCJ6HLOCymhMp3BjYQfWWHEIP%2FSQMK%2FAMHnMg0en67fb6YkBYEHnEK6iXp2UU3ZcPjCZi9RCDq6R79m0EVq2HppleayLawcuRHsV2aWf%2BXg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 770c0a99487bb509-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
gem.gbc.criteo.com/newidsd
200 OK 0 B URL HTTP/2 gem.gbc.criteo.com/newidsd
IP
GET /newidsd HTTP/1.1
Host: gem.gbc.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://gum.criteo.com/
Origin: https://gum.criteo.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
date: Sun, 27 Nov 2022 15:54:17 GMT
content-type: application/json; charset=utf-8
server: Kestrel
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-origin: https://gum.criteo.com
server-processing-duration-in-ticks: 81813
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
wikisport.click/fsl/daznf1s1.php
200 OK 0 B URL HTTP/2 wikisport.click/fsl/daznf1s1.php
IP
GET /fsl/daznf1s1.php HTTP/1.1
Host: wikisport.click
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://js.freestreams-live1.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 27 Nov 2022 15:54:15 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ZCbqv7MXlDLwUcP6o%2BclGDDTppKDWWkXKbh88sKgU7TjrmP1dYUv%2B%2Btfkzff2eJnmNR3G7WKBGMrx8%2BnZ7aF1IRqU31r5z34BznigN8Y2ykJ7iVfoG17adqYpg6xmGIt6Is%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 770c0a9388680afe-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
footyhunter3.xyz/livefoot/adsblock.php
200 OK 0 B URL HTTP/2 footyhunter3.xyz/livefoot/adsblock.php
IP
GET /livefoot/adsblock.php HTTP/1.1
Host: footyhunter3.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://footyhunter3.xyz/livefoot/stream-537.php
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 27 Nov 2022 15:54:15 GMT
content-type: application/javascript
vary: Accept-Encoding
cache-control: public, max-age=604800
expires: Sun, 04 Dec 2022 15:53:28 GMT
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
x-turbo-charged-by: LiteSpeed
greydedi: HIT
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=GKnlvoFBRmDoDNy%2BxgSwuoHJ7pxqenei9udHLUIUT9bYP8Bx9QM%2BZihIh%2B0RcRcAmPE6S9rEPEi2jxpVgn%2BjqC5HhTQQ0FR3vpdifveH3%2BhLGxNPmH2shQ19YeF%2F%2BOz4p%2BO0"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 770c0a966ea7b511-OSL
content-encoding: br
X-Firefox-Spdy: h2
youradexchange.com/script/suurl4.php?r=6414778&cbur=0.6358750556525172&cbiframe=1&cbWidth=889&cbHeight=550&cbtitle=&cbpage=https%3A%2F%2Fwikisport.click%2F&cbref=&cbdescription=&cbkeywords=&cbcdn=superfastcdn.com&aggr=0
200 OK 0 B URL HTTP/2 youradexchange.com/script/suurl4.php?r=6414778&cbur=0.6358750556525172&cbiframe=1&cbWidth=889&cbHeight=550&cbtitle=&cbpage=https%3A%2F%2Fwikisport.click%2F&cbref=&cbdescription=&cbkeywords=&cbcdn=superfastcdn.com&aggr=0
IP
GET /script/suurl4.php?r=6414778&cbur=0.6358750556525172&cbiframe=1&cbWidth=889&cbHeight=550&cbtitle=&cbpage=https%3A%2F%2Fwikisport.click%2F&cbref=&cbdescription=&cbkeywords=&cbcdn=superfastcdn.com&aggr=0 HTTP/1.1
Host: youradexchange.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://footyhunter3.xyz
Connection: keep-alive
Referer: https://footyhunter3.xyz/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Sun, 27 Nov 2022 15:54:15 GMT
content-type: application/json; charset=utf-8
access-control-allow-origin: *
content-encoding: gzip
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
youradexchange.com/script/suurl4.php?r=3558843&cbur=0.11130405142059985&cbiframe=0&cbWidth=1280&cbHeight=939&cbtitle=DAZN%20F1%20en%20directo%20gratis%20por%20internet%20%7C%20DAZN%20F1%20Spain%20Live%20Stream%20Free&cbpage=https%3A%2F%2Fjs.freestreams-live1.com%2Fdaznf1-esp%2F&cbref=&cbdescription=Watch%20DAZN%20f1%20Live%20Stream%20Online.%20DAZN%20f1%20en%20directo%20gratis%20por%20internet.%20Watch%20DAZN%20f1%20Spain%20Live%20Stream%2024%2F7.%20F1%20races%20in%20Spanish%20on%20DAZN%20f1.&cbkeywords=&cbcdn=acacdn.com&aggr=0
200 OK 0 B URL HTTP/2 youradexchange.com/script/suurl4.php?r=3558843&cbur=0.11130405142059985&cbiframe=0&cbWidth=1280&cbHeight=939&cbtitle=DAZN%20F1%20en%20directo%20gratis%20por%20internet%20%7C%20DAZN%20F1%20Spain%20Live%20Stream%20Free&cbpage=https%3A%2F%2Fjs.freestreams-live1.com%2Fdaznf1-esp%2F&cbref=&cbdescription=Watch%20DAZN%20f1%20Live%20Stream%20Online.%20DAZN%20f1%20en%20directo%20gratis%20por%20internet.%20Watch%20DAZN%20f1%20Spain%20Live%20Stream%2024%2F7.%20F1%20races%20in%20Spanish%20on%20DAZN%20f1.&cbkeywords=&cbcdn=acacdn.com&aggr=0
IP
GET /script/suurl4.php?r=3558843&cbur=0.11130405142059985&cbiframe=0&cbWidth=1280&cbHeight=939&cbtitle=DAZN%20F1%20en%20directo%20gratis%20por%20internet%20%7C%20DAZN%20F1%20Spain%20Live%20Stream%20Free&cbpage=https%3A%2F%2Fjs.freestreams-live1.com%2Fdaznf1-esp%2F&cbref=&cbdescription=Watch%20DAZN%20f1%20Live%20Stream%20Online.%20DAZN%20f1%20en%20directo%20gratis%20por%20internet.%20Watch%20DAZN%20f1%20Spain%20Live%20Stream%2024%2F7.%20F1%20races%20in%20Spanish%20on%20DAZN%20f1.&cbkeywords=&cbcdn=acacdn.com&aggr=0 HTTP/1.1
Host: youradexchange.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://js.freestreams-live1.com/
Origin: https://js.freestreams-live1.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: openresty
date: Sun, 27 Nov 2022 15:54:15 GMT
content-type: application/json; charset=utf-8
access-control-allow-origin: *
content-encoding: gzip
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
superfastcdn.com/script/bootstrap.js
200 OK 0 B URL HTTP/2 superfastcdn.com/script/bootstrap.js
IP
GET /script/bootstrap.js HTTP/1.1
Host: superfastcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://footyhunter3.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 27 Nov 2022 15:54:15 GMT
content-type: application/javascript
x-guploader-uploadid: ADPycdvIUdmCDAiwgcKmc4Qwx-Qcq3X7eskQQkfxeK-0DoegbjYlpXNrmqnyibxJgNBz5BZw6l4XRjrWPEW9ZnyAs28W7A
x-goog-generation: 1669191375948071
x-goog-metageneration: 2
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 100584
x-goog-hash: crc32c=mktFgA==, md5=WKNwY2lJNJOzygA6Intvpg==
x-goog-storage-class: MULTI_REGIONAL
access-control-allow-origin: *
expires: Sun, 27 Nov 2022 15:52:09 GMT
cache-control: public, max-age=14400
age: 1310
last-modified: Wed, 23 Nov 2022 08:16:16 GMT
etag: W/"58a3706369493493b3ca003a227b6fa6"
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=lAtJuFaASO%2FfK%2BKeE3%2FKZKhczFUwqVXYwopzE7VgW0%2F4AuLMjxtd0clRUJjkf7viVIvMVDaA0ezkUixu4AnxBY%2BjGUg%2BW6WEG%2BDROeQPYR4jWpTzTJjlDgOrA64sKXQdr6Bo"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 770c0a9789c175bd-LHR
content-encoding: br
X-Firefox-Spdy: h2
104.27.203.88
178.250.2.150
185.76.9.24
139.45.197.242
52.28.211.11
23.36.76.226
104.21.84.149
141.226.228.48
192.99.8.34
185.200.116.90