| r11.o.lencr.org/ | 23.33.119.27 | | 504 B |
IP 23.33.119.27:0
ASN#20940 Akamai International B.V.
Hashcc687a19f2854a47020b22f4aa1806ef 9d4058393445f64f6dda190557bf37686e19e7a0 df2db18fa10eeb1d535253183d68a561c6b52b77b539df6a0a36aec736a9da9c
POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "DF2DB18FA10EEB1D535253183D68A561C6B52B77B539DF6A0A36AEC736A9DA9C"
Last-Modified: Fri, 23 Aug 2024 14:37:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12088
Expires: Sat, 24 Aug 2024 02:10:52 GMT
Date: Fri, 23 Aug 2024 22:49:24 GMT
Connection: keep-alive
|
|
| r10.o.lencr.org/ | 23.33.119.27 | | 504 B |
IP 23.33.119.27:0
ASN#20940 Akamai International B.V.
Hash0116304cb4b20e1766015ee4e636662f c2b93f53852c06a7a9648a817818c0d5a7011898 8d8503dca377a8430cd883acdec16a62201f61ff923847bb95cd00b4b5b76dee
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "8D8503DCA377A8430CD883ACDEC16A62201F61FF923847BB95CD00B4B5B76DEE"
Last-Modified: Fri, 23 Aug 2024 14:36:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=18750
Expires: Sat, 24 Aug 2024 04:01:54 GMT
Date: Fri, 23 Aug 2024 22:49:24 GMT
Connection: keep-alive
|
|
| r10.o.lencr.org/ | 23.33.119.27 | | 504 B |
IP 23.33.119.27:0
ASN#20940 Akamai International B.V.
Hash5a54df7ab1a35ec424b9be7e9c3c9a4b e7cea7d874319740ce20d0b7c37e99b5e21461ff 38f07545bd30ef0b4adec907deb75c1cb2365d645a54b545486599117707e28b
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "38F07545BD30EF0B4ADEC907DEB75C1CB2365D645A54B545486599117707E28B"
Last-Modified: Fri, 23 Aug 2024 14:34:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12216
Expires: Sat, 24 Aug 2024 02:13:00 GMT
Date: Fri, 23 Aug 2024 22:49:24 GMT
Connection: keep-alive
|
|
| r10.o.lencr.org/ | 23.33.119.27 | | 504 B |
IP 23.33.119.27:0
ASN#20940 Akamai International B.V.
Hash44d2fa336203fefa7fcc2e369e453d16 71a006973afdbe2deb2374768a328cf9307fd4d1 cb3bf00db937121aa64ed4b8047093cd89cb7376a3c66cf46ecb6974ca047d4c
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "CB3BF00DB937121AA64ED4B8047093CD89CB7376A3C66CF46ECB6974CA047D4C"
Last-Modified: Fri, 23 Aug 2024 14:33:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9673
Expires: Sat, 24 Aug 2024 01:30:37 GMT
Date: Fri, 23 Aug 2024 22:49:24 GMT
Connection: keep-alive
|
|
| r10.o.lencr.org/ | 23.33.119.27 | | 504 B |
IP 23.33.119.27:0
ASN#20940 Akamai International B.V.
Hash78c7d3a73d5db7166676865d07ba2d87 4a0905bbd02711aad211d9c89e251d8bc3f109cb 9329d0373de60ab3215f85ce7f4f6655a9d60c1d837f1ae783c4b27b1f748f0d
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "9329D0373DE60AB3215F85CE7F4F6655A9D60C1D837F1AE783C4B27B1F748F0D"
Last-Modified: Fri, 23 Aug 2024 14:48:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14756
Expires: Sat, 24 Aug 2024 02:55:21 GMT
Date: Fri, 23 Aug 2024 22:49:25 GMT
Connection: keep-alive
|
|
| o.pki.goog/wr2 | 142.250.74.131 | | 471 B |
IP 142.250.74.131:0
Hasheba3d3b983f6008e5eb61ade5f72c489 f0073f28207f42cdfb10de0b9663136bc345e84c d6fe867082c32e40a9181fbf971ec54820e9fc597af1c629336eed1e5d70b70c
POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 23 Aug 2024 22:49:25 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| xg.valuatesharki.com/roLa9UneMVkY/LrNQV | 23.109.170.60 | 200 OK | 20 B |
URL GET HTTP/1.1xg.valuatesharki.com/roLa9UneMVkY/LrNQV IP 23.109.170.60:443
Requested byhttps://wecima.show/watch/%D9%81%D9%8A%D9%84%D9%85-blonde-2022-%D9%85%D8%AA%D8%B1%D8%AC%D9%85-3/ CertificateIssuerLet's Encrypt Subjectxg.valuatesharki.com Fingerprint7E:7A:A0:F3:06:E0:1E:24:BA:CE:12:2F:6D:D6:B3:3A:1A:9D:4F:6E ValidityWed, 31 Jul 2024 06:17:47 GMT - Tue, 29 Oct 2024 06:17:46 GMT
File typegzip compressed data, from Unix Hash7029066c27ac6f5ef18d660d5741979a 46c6643f07aa7f6bfe7118de926b86defc5087c4 59869db34853933b239f1e2219cf7d431da006aa919635478511fabbfc8849d2
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /roLa9UneMVkY/LrNQV HTTP/1.1
Host: xg.valuatesharki.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://wecima.show/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 23 Aug 2024 22:49:25 GMT
Content-Type: application/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=20
Accept-ch: sec-ch-ua-platform-version,sec-ch-ua-model,sec-ch-ua-full-version,sec-ch-ua-full-version-list
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://wecima.show
Access-Control-Allow-Headers: content-type, megageocheckolololo, x-forwarded-for, x-requested-with, cache-control, pragma, expires
Access-Control-Max-Age: 600
Access-Control-Allow-Methods: GET, POST, OPTIONS
Set-Cookie: GL_UI4=eJw9jUtug0AQRPljJ4akJQ7gIxgUjL3MJivfAQ0zDZ4Ypq1mjJ3bZxIp2dUrPVV5nhcUL%2BAvyRrCm6hhe1R9s5dYojyUVVW%2BHSrZ151o%2BlJVTVnvYK3n1opuRBvBap4E29YuEWwGNMhatpIUZvDqrL%2FmYuhuIog7FkZlEE%2FOGDNIO6b7jFyEEBkxIaQfmrGnhzPEJzEEx72L2rjo7yCguQjzJ4hP2twe%2BSbx8jzx4Pk6CtsTT61WDuOBhULw32ElhcWB%2BAtShfPF0hWARtX%2B%2B7%2Bf8fizBonCRUuHZM%2FI38wATrY%3D; expires=Sat, 24-Aug-2024 22:49:25 GMT; Max-Age=86400; path=/; secure; SameSite=None
GL_GI10=eJwVyM0KgkAUhuE5hxiIJPjIC%2FAKTMsWbrNl6MIrMIsYGObIzNjP3WeLd%2FG8SilOE7CZkNRlXhd5dcjLUwV6gtsOPDroVvx7%2BII8uDiCvcOmC1ayRmYXlz9i9TfIYHu25pP1YudoxAXw0roZbvaxv%2FRX0KQJHEUzONxTBXrp3Q9e7R3S; expires=Sat, 24-Aug-2024 22:49:25 GMT; Max-Age=86400; path=/; secure; SameSite=None
Content-Encoding: gzip
Vary: Accept-Encoding
Strict-Transport-Security: max-age=1
X-Content-Type-Options: nosniff
|
|
| o.pki.goog/wr2 | 142.250.74.131 | | 472 B |
IP 142.250.74.131:0
Hashd9ee401f669aa5ebb6254faebca53ac4 da1a59359ea36acc37fdc382aa413f43bdd1e9e4 c36f684fea0cc39b1d59c8c5e0f41d451870adaa85db09901a93fdad0d37e45c
POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 23 Aug 2024 22:49:25 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| fonts.gstatic.com/s/tajawal/v3/Iurf6YBj_oCad4k1l8KiHrRpiYlJ.woff2 | 216.58.207.227 | 200 OK | 8.5 kB |
URL GET HTTP/2fonts.gstatic.com/s/tajawal/v3/Iurf6YBj_oCad4k1l8KiHrRpiYlJ.woff2 IP 216.58.207.227:443
Requested byhttps://wecima.show/watch/%D9%81%D9%8A%D9%84%D9%85-blonde-2022-%D9%85%D8%AA%D8%B1%D8%AC%D9%85-3/ CertificateIssuerGoogle Trust Services Subject*.gstatic.com FingerprintF2:15:54:4E:F3:58:7F:5A:14:9D:F2:45:37:0E:B1:A6:48:C6:2B:14 ValidityTue, 30 Jul 2024 12:49:30 GMT - Tue, 22 Oct 2024 12:49:29 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 8488, version 1.0 Hashb405dddf4639fdf946fed00d4b91139c 5df4eb97753c51715b996fcec1dec7e55877404b b0d3610919043227b56c8d5130e2ead271a067bb1b930678d5af24bbbae7c16f
GET /s/tajawal/v3/Iurf6YBj_oCad4k1l8KiHrRpiYlJ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://wecima.show
DNT: 1
Connection: keep-alive
Referer: https://wecima.show/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 8488
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 22 Aug 2024 08:10:16 GMT
expires: Fri, 22 Aug 2025 08:10:16 GMT
cache-control: public, max-age=31536000
age: 139149
last-modified: Tue, 16 Jul 2019 03:31:11 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/tajawal/v3/Iurf6YBj_oCad4k1l5anHrRpiYlJ.woff2 | 216.58.207.227 | 200 OK | 8.9 kB |
URL GET HTTP/2fonts.gstatic.com/s/tajawal/v3/Iurf6YBj_oCad4k1l5anHrRpiYlJ.woff2 IP 216.58.207.227:443
Requested byhttps://wecima.show/watch/%D9%81%D9%8A%D9%84%D9%85-blonde-2022-%D9%85%D8%AA%D8%B1%D8%AC%D9%85-3/ CertificateIssuerGoogle Trust Services Subject*.gstatic.com FingerprintF2:15:54:4E:F3:58:7F:5A:14:9D:F2:45:37:0E:B1:A6:48:C6:2B:14 ValidityTue, 30 Jul 2024 12:49:30 GMT - Tue, 22 Oct 2024 12:49:29 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 8948, version 1.0 Hash3ca4aaa12ffa2e1f165db59f857ee5b0 1a72fa6677fa1b70f43d4a0abf3c309c211ee9fa d404f987f0d261c3eff16cd778fb138d5c604af7f361e609ef0b91bac16d7e67
GET /s/tajawal/v3/Iurf6YBj_oCad4k1l5anHrRpiYlJ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://wecima.show
DNT: 1
Connection: keep-alive
Referer: https://wecima.show/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 8948
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 20 Aug 2024 21:42:41 GMT
expires: Wed, 20 Aug 2025 21:42:41 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 16 Jul 2019 03:31:22 GMT
content-type: font/woff2
age: 263204
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| o.pki.goog/wr2 | 142.250.74.131 | | 472 B |
IP 142.250.74.131:0
Hashd9ee401f669aa5ebb6254faebca53ac4 da1a59359ea36acc37fdc382aa413f43bdd1e9e4 c36f684fea0cc39b1d59c8c5e0f41d451870adaa85db09901a93fdad0d37e45c
POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 23 Aug 2024 22:49:25 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| www.googletagmanager.com/gtag/js?id=G-6JHTFKY3P3 | 142.250.74.72 | 200 OK | 101 kB |
URL GET HTTP/2www.googletagmanager.com/gtag/js?id=G-6JHTFKY3P3 IP 142.250.74.72:443
Requested byhttps://wecima.show/watch/%D9%81%D9%8A%D9%84%D9%85-blonde-2022-%D9%85%D8%AA%D8%B1%D8%AC%D9%85-3/ CertificateIssuerGoogle Trust Services Subject*.google-analytics.com Fingerprint27:BF:6E:8E:D6:51:1C:C5:B2:CF:E2:E9:0F:87:D0:F3:33:23:E7:37 ValidityTue, 30 Jul 2024 12:32:47 GMT - Tue, 22 Oct 2024 12:32:46 GMT
File typeJavaScript source, ASCII text, with very long lines (3969) Size101 kB (101178 bytes) Hash3714282ab8ed44352dd81dcf0b48b8d7 ea2bdbd4af8122375011efa30392643afc2803a5 5a096f3cd9e4ae2d87c691df22a59abf7579ea7b05687ac00fa48701746cdd95
GET /gtag/js?id=G-6JHTFKY3P3 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://wecima.show/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Fri, 23 Aug 2024 22:49:25 GMT
expires: Fri, 23 Aug 2024 22:49:25 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 101178
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/bevan/v12/4iCj6KZ0a9NXjG8dWCs.woff2 | 216.58.207.227 | 200 OK | 20 kB |
URL GET HTTP/2fonts.gstatic.com/s/bevan/v12/4iCj6KZ0a9NXjG8dWCs.woff2 IP 216.58.207.227:443
Requested byhttps://wecima.show/watch/%D9%81%D9%8A%D9%84%D9%85-blonde-2022-%D9%85%D8%AA%D8%B1%D8%AC%D9%85-3/ CertificateIssuerGoogle Trust Services Subject*.gstatic.com FingerprintF2:15:54:4E:F3:58:7F:5A:14:9D:F2:45:37:0E:B1:A6:48:C6:2B:14 ValidityTue, 30 Jul 2024 12:49:30 GMT - Tue, 22 Oct 2024 12:49:29 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 19984, version 1.0 Hash0db10b5d1f471ef6c3a30158ff403106 ea993e87704687d1399a3b1fd79aa84c47659c82 e0e544b2864b4c3d7425f4eff9f9365b629abcbaf37f03d0bf5ba381f227d48a
GET /s/bevan/v12/4iCj6KZ0a9NXjG8dWCs.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://wecima.show
DNT: 1
Connection: keep-alive
Referer: https://wecima.show/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 19984
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 20 Aug 2024 13:18:02 GMT
expires: Wed, 20 Aug 2025 13:18:02 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 01 Sep 2020 03:51:37 GMT
content-type: font/woff2
age: 293483
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| o.pki.goog/wr2 | 142.250.74.131 | | 472 B |
IP 142.250.74.131:0
Hashd9ee401f669aa5ebb6254faebca53ac4 da1a59359ea36acc37fdc382aa413f43bdd1e9e4 c36f684fea0cc39b1d59c8c5e0f41d451870adaa85db09901a93fdad0d37e45c
POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 23 Aug 2024 22:49:25 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| fonts.gstatic.com/s/tajawal/v3/Iurf6YBj_oCad4k1l5anHrFpiQ.woff2 | 216.58.207.227 | 200 OK | 11 kB |
URL GET HTTP/2fonts.gstatic.com/s/tajawal/v3/Iurf6YBj_oCad4k1l5anHrFpiQ.woff2 IP 216.58.207.227:443
Requested byhttps://wecima.show/watch/%D9%81%D9%8A%D9%84%D9%85-blonde-2022-%D9%85%D8%AA%D8%B1%D8%AC%D9%85-3/ CertificateIssuerGoogle Trust Services Subject*.gstatic.com FingerprintF2:15:54:4E:F3:58:7F:5A:14:9D:F2:45:37:0E:B1:A6:48:C6:2B:14 ValidityTue, 30 Jul 2024 12:49:30 GMT - Tue, 22 Oct 2024 12:49:29 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 10580, version 1.0 Hash245d8f75ea8c5799e5de85a8a7bd4172 7f546a6c551e87bb224124789c11fdb2f6429479 2f96f4fd6fe569f64e044e0409274b2f2d79976497a9b275deb497dbbfc542b0
GET /s/tajawal/v3/Iurf6YBj_oCad4k1l5anHrFpiQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://wecima.show
DNT: 1
Connection: keep-alive
Referer: https://wecima.show/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 10580
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 22 Aug 2024 13:05:20 GMT
expires: Fri, 22 Aug 2025 13:05:20 GMT
cache-control: public, max-age=31536000
age: 121445
last-modified: Tue, 16 Jul 2019 03:31:01 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| o.pki.goog/wr2 | 142.250.74.131 | | 471 B |
IP 142.250.74.131:0
Hasheba3d3b983f6008e5eb61ade5f72c489 f0073f28207f42cdfb10de0b9663136bc345e84c d6fe867082c32e40a9181fbf971ec54820e9fc597af1c629336eed1e5d70b70c
POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 23 Aug 2024 22:49:25 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| fonts.gstatic.com/s/tajawal/v3/Iurf6YBj_oCad4k1l8KiHrFpiQ.woff2 | 216.58.207.227 | 200 OK | 9.9 kB |
URL GET HTTP/2fonts.gstatic.com/s/tajawal/v3/Iurf6YBj_oCad4k1l8KiHrFpiQ.woff2 IP 216.58.207.227:443
Requested byhttps://wecima.show/watch/%D9%81%D9%8A%D9%84%D9%85-blonde-2022-%D9%85%D8%AA%D8%B1%D8%AC%D9%85-3/ CertificateIssuerGoogle Trust Services Subject*.gstatic.com FingerprintF2:15:54:4E:F3:58:7F:5A:14:9D:F2:45:37:0E:B1:A6:48:C6:2B:14 ValidityTue, 30 Jul 2024 12:49:30 GMT - Tue, 22 Oct 2024 12:49:29 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 9864, version 1.0 Hash9751651b345afc0e49ca1a302c19a294 05393c6e747f5e8a3c7fbee5fe15cad4c80837e1 d5aa3e4c58493f8d3693be4962e94e08d14e178ef4f0be2a27369a8813498e54
GET /s/tajawal/v3/Iurf6YBj_oCad4k1l8KiHrFpiQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://wecima.show
DNT: 1
Connection: keep-alive
Referer: https://wecima.show/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 9864
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 21 Aug 2024 00:20:42 GMT
expires: Thu, 21 Aug 2025 00:20:42 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 16 Jul 2019 03:31:06 GMT
content-type: font/woff2
age: 253723
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| o.pki.goog/wr2 | 142.250.74.131 | | 472 B |
IP 142.250.74.131:0
Hashd9ee401f669aa5ebb6254faebca53ac4 da1a59359ea36acc37fdc382aa413f43bdd1e9e4 c36f684fea0cc39b1d59c8c5e0f41d451870adaa85db09901a93fdad0d37e45c
POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 23 Aug 2024 22:49:25 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| wecima.show/wp-content/themes/Mycima2021/components/packs/%23header/netflix.png | 172.67.194.252 | 200 OK | 3.5 kB |
URL GET HTTP/3wecima.show/wp-content/themes/Mycima2021/components/packs/%23header/netflix.png IP 172.67.194.252:443
Requested byhttps://wecima.show/watch/%D9%81%D9%8A%D9%84%D9%85-blonde-2022-%D9%85%D8%AA%D8%B1%D8%AC%D9%85-3/ CertificateIssuerGoogle Trust Services Subjectwecima.show FingerprintE9:02:58:60:9F:6E:2E:E5:E5:7E:4C:AA:6E:AF:5F:66:8D:ED:2B:23 ValiditySat, 03 Aug 2024 02:58:47 GMT - Fri, 01 Nov 2024 02:58:46 GMT
File typePNG image data, 60 x 60, 8-bit/color RGBA, non-interlaced Hash54110064037a44285faf10b2cbe55e87 b2677d46ed052bfda6eecbb61ee5539349f5603d c5b633a4f58b811923c6d41cbe24939af6aebb02e6796169c1797f0eeb31bdd4
GET /wp-content/themes/Mycima2021/components/packs/%23header/netflix.png HTTP/1.1
Host: wecima.show
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://wecima.show/watch/%D9%81%D9%8A%D9%84%D9%85-blonde-2022-%D9%85%D8%AA%D8%B1%D8%AC%D9%85-3/
Cookie: _ga_6JHTFKY3P3=GS1.1.1724453365.1.0.1724453365.0.0.0; _ga=GA1.1.1114194072.1724453366
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 23 Aug 2024 22:49:25 GMT
content-type: image/png
content-length: 3533
last-modified: Sun, 22 Aug 2021 16:56:59 GMT
etag: "612281db-dcd"
vary: Accept, Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 2920
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ijS6qs5cUfAXdSvOzaln74FPXpWYKNyVDrWhzUY%2B8lOLdGTGSYCEuF%2Bi1i2VZq4j102g%2FAQ8XKY8W%2BRxNH2nDFMQwinljTY%2Ft%2F53bKZhTdmtIw2FTC6DRS%2Fgur4X3Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8b7ea7e05d5656b4-OSL
alt-svc: h3=":443"; ma=86400
|
|
| wecima.show/wp-content/uploads/2022/09/Blonde-2022-351x520.jpg | 172.67.194.252 | 200 OK | 36 kB |
URL GET HTTP/3wecima.show/wp-content/uploads/2022/09/Blonde-2022-351x520.jpg IP 172.67.194.252:443
Requested byhttps://wecima.show/watch/%D9%81%D9%8A%D9%84%D9%85-blonde-2022-%D9%85%D8%AA%D8%B1%D8%AC%D9%85-3/ CertificateIssuerGoogle Trust Services Subjectwecima.show FingerprintE9:02:58:60:9F:6E:2E:E5:E5:7E:4C:AA:6E:AF:5F:66:8D:ED:2B:23 ValiditySat, 03 Aug 2024 02:58:47 GMT - Fri, 01 Nov 2024 02:58:46 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 351x520, components 3 Hash10c3b10a608ac09194669ee4d9ac5f7a e2b8fbc2171063b7c9ad04d692ef8853e5227b28 3df4809b537a01eed90b4dcbb8c8824ce99d0ba0c03823b74b6783334ba5116c
GET /wp-content/uploads/2022/09/Blonde-2022-351x520.jpg HTTP/1.1
Host: wecima.show
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://wecima.show/watch/%D9%81%D9%8A%D9%84%D9%85-blonde-2022-%D9%85%D8%AA%D8%B1%D8%AC%D9%85-3/
Cookie: _ga_6JHTFKY3P3=GS1.1.1724453365.1.0.1724453365.0.0.0; _ga=GA1.1.1114194072.1724453366
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 23 Aug 2024 22:49:25 GMT
content-type: image/jpeg
content-length: 36230
last-modified: Wed, 28 Sep 2022 07:51:14 GMT
etag: "6333fcf2-8d86"
vary: Accept, Accept-Encoding
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=c%2FjtaF5LYwRPhx6XFnrnkBrLpRUPtIWzMXnDOEWVsagCS2f0zPrWrjiR28bqQQtz22v15Cf%2BaRmRa6lz4ku8FRhzTFv0i1%2FXNZDgjlsNsSBDqqmkoqRXqAH4tUjrig%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8b7ea7e03d0f56b4-OSL
alt-svc: h3=":443"; ma=86400
|
|
| www.googletagmanager.com/gtag/js?id=UA-128370636-1&l=dataLayer&cx=c | 142.250.74.72 | 200 OK | 73 kB |
URL GET HTTP/3www.googletagmanager.com/gtag/js?id=UA-128370636-1&l=dataLayer&cx=c IP 142.250.74.72:443
Requested byhttps://wecima.show/watch/%D9%81%D9%8A%D9%84%D9%85-blonde-2022-%D9%85%D8%AA%D8%B1%D8%AC%D9%85-3/ CertificateIssuerGoogle Trust Services Subject*.google-analytics.com Fingerprint27:BF:6E:8E:D6:51:1C:C5:B2:CF:E2:E9:0F:87:D0:F3:33:23:E7:37 ValidityTue, 30 Jul 2024 12:32:47 GMT - Tue, 22 Oct 2024 12:32:46 GMT
File typeJavaScript source, ASCII text, with very long lines (2345) Hash3029eab19fc5ceecc94cdbea4c5326cb dcf3bb02628f17dfd0138b2cf1f24815efb83e5c f3e5dc19d68fe76073c58788ee5b57bc9e6a0778d91ac1d64a8609115128ab56
GET /gtag/js?id=UA-128370636-1&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://wecima.show/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Fri, 23 Aug 2024 22:49:26 GMT
expires: Fri, 23 Aug 2024 22:49:26 GMT
cache-control: private, max-age=900
last-modified: Fri, 23 Aug 2024 21:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 73097
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| bytogeticr.com/split_track?action=check_overlay&dlShown=false&zone=4796941 | 104.21.17.211 | 200 OK | 0 B |
URL GET HTTP/2bytogeticr.com/split_track?action=check_overlay&dlShown=false&zone=4796941 IP 104.21.17.211:443
Requested byhttps://wecima.show/watch/%D9%81%D9%8A%D9%84%D9%85-blonde-2022-%D9%85%D8%AA%D8%B1%D8%AC%D9%85-3/ CertificateIssuerGoogle Trust Services Subjectbytogeticr.com Fingerprint74:02:11:74:19:F1:87:59:A8:18:4D:36:67:85:B4:98:71:D8:A8:35 ValiditySat, 03 Aug 2024 02:40:49 GMT - Fri, 01 Nov 2024 02:40:48 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /split_track?action=check_overlay&dlShown=false&zone=4796941 HTTP/1.1
Host: bytogeticr.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://wecima.show/
Origin: https://wecima.show
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 23 Aug 2024 22:49:26 GMT
content-type: application/octet-stream
content-length: 0
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS, HEAD
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range
access-control-expose-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2FxpIyO3YeSiuXgi%2B6nvSuDXXyTC8Uxk08MjNAP8xTejDQnC8NCVviSYNVOJs8gVOsA9xEyT65diqVPPBtjVovHqEsjWkBAfCKe2B5vh3A1SkYrEQQ7ijE1Pvl8rOtPqiyg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8b7ea7e1cb421c16-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| r10.o.lencr.org/ | 23.33.119.27 | | 504 B |
IP 23.33.119.27:0
ASN#20940 Akamai International B.V.
Hash03e5445f8874e83a568ba36193b02564 71532708ef113cce2adf7487362ebd4559fafd86 49167e3ce42b6559708b15364c13e0ecba854cdd3509ff97df7bc67e00b4378f
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "49167E3CE42B6559708B15364C13E0ECBA854CDD3509FF97DF7BC67E00B4378F"
Last-Modified: Fri, 23 Aug 2024 14:34:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14175
Expires: Sat, 24 Aug 2024 02:45:41 GMT
Date: Fri, 23 Aug 2024 22:49:26 GMT
Connection: keep-alive
|
|
| inklinkor.com/tag.min.js | 172.67.211.29 | 200 OK | 39 kB |
IP 172.67.211.29:443
Requested byhttps://wecima.show/watch/%D9%81%D9%8A%D9%84%D9%85-blonde-2022-%D9%85%D8%AA%D8%B1%D8%AC%D9%85-3/ CertificateIssuerGoogle Trust Services Subjectinklinkor.com Fingerprint97:89:FB:AA:62:E4:1A:CA:4D:E6:7E:D4:6D:94:6B:D9:22:7C:4E:8B ValidityTue, 13 Aug 2024 20:33:57 GMT - Mon, 11 Nov 2024 20:33:56 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Hash01a074613fe2f267e156dc0e6d6cb34a ecb21050125cf9d9710401685995e80554f23639 dad11c0e5ff101cec53b3bea022482e746f889b15c581dda7c0e50d28f6d3a81
GET /tag.min.js HTTP/1.1
Host: inklinkor.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://wecima.show/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 23 Aug 2024 22:49:25 GMT
content-type: text/javascript; charset=utf-8
x-trace-id: e575e75c1793257a3a7caad906efc557
cache-control: max-age=86400
last-modified: Fri, 23 Aug 2024 09:42:32 GMT
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace, favicon
access-control-max-age: 86400
pragma: no-cache
expires: Sat, 24 Aug 2024 21:10:41 GMT
timing-allow-origin: *
cf-cache-status: HIT
age: 5924
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=MvJPBAI4uOYP4iy0U7nRDqMXn%2FUVNaUiuW6MMhWyXQbIROuyahaHsBVfAWR2EL%2F3Yjnc2pl10ntJzqLv%2BFK%2FO4F0AqLlXCNPwuR9Kqb7TUpdfvLPXuRQ00uXC9WZ%2Bd67"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8b7ea7df49d6b4f7-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| site-assets.fontawesome.com/releases/v6.0.0/webfonts/fa-brands-400.woff2 | 172.64.147.188 | 200 OK | 105 kB |
URL GET HTTP/2site-assets.fontawesome.com/releases/v6.0.0/webfonts/fa-brands-400.woff2 IP 172.64.147.188:443
Requested byhttps://wecima.show/watch/%D9%81%D9%8A%D9%84%D9%85-blonde-2022-%D9%85%D8%AA%D8%B1%D8%AC%D9%85-3/ CertificateIssuerDigiCert Inc Subject*.fontawesome.com FingerprintB1:69:23:88:5E:EA:EA:76:BC:90:A2:CE:D9:3B:3F:5D:FE:5F:13:09 ValidityTue, 30 Jul 2024 00:00:00 GMT - Mon, 27 Jan 2025 23:59:59 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 104740, version 768.256 Size105 kB (104740 bytes) Hash27ed7b486bfe3163c0d312b6d2aa9069 97cb3773774b591841557c859b0f1b4b1b1cde09 fb347c28258cfeeb9b0904c469d8049fcb2ad4d1bb5e4c9601e0edda3b76bb69
GET /releases/v6.0.0/webfonts/fa-brands-400.woff2 HTTP/1.1
Host: site-assets.fontawesome.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://wecima.show
DNT: 1
Connection: keep-alive
Referer: https://site-assets.fontawesome.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 23 Aug 2024 22:49:26 GMT
content-type: font/woff2
content-length: 104740
x-amz-id-2: WQhc7iefw+7n8tjesrCKJfuUjmpT+sVgEb9vFiXVC9f1FMzUoOpOC2hg2CdsuCqkGHgGnjPBYlGYPKMYhm7r8g==
x-amz-request-id: 1713ET5XKY9DAR56
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding
last-modified: Mon, 07 Feb 2022 20:26:45 GMT
etag: "27ed7b486bfe3163c0d312b6d2aa9069"
cache-control: max-age=31556926
cf-cache-status: HIT
age: 6175022
accept-ranges: bytes
server: cloudflare
cf-ray: 8b7ea7e3ec90568a-OSL
X-Firefox-Spdy: h2
|
|
| site-assets.fontawesome.com/releases/v6.0.0/webfonts/fa-light-300.woff2 | 172.64.147.188 | 200 OK | 392 kB |
URL GET HTTP/2site-assets.fontawesome.com/releases/v6.0.0/webfonts/fa-light-300.woff2 IP 172.64.147.188:443
Requested byhttps://wecima.show/watch/%D9%81%D9%8A%D9%84%D9%85-blonde-2022-%D9%85%D8%AA%D8%B1%D8%AC%D9%85-3/ CertificateIssuerDigiCert Inc Subject*.fontawesome.com FingerprintB1:69:23:88:5E:EA:EA:76:BC:90:A2:CE:D9:3B:3F:5D:FE:5F:13:09 ValidityTue, 30 Jul 2024 00:00:00 GMT - Mon, 27 Jan 2025 23:59:59 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 392136, version 768.256 Size392 kB (392136 bytes) Hash2cb9262f4870f225de120af23500828a 0330732496c970248a96c6df732b4b6e8407246f d9c0c73c3e6a75d59ff20ce5e1d4bdec5ee8c6f2724ff0deb6cddb8f7f207dbe
GET /releases/v6.0.0/webfonts/fa-light-300.woff2 HTTP/1.1
Host: site-assets.fontawesome.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://wecima.show
DNT: 1
Connection: keep-alive
Referer: https://site-assets.fontawesome.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 23 Aug 2024 22:49:26 GMT
content-type: font/woff2
content-length: 392136
x-amz-id-2: IQmaexACsIbUtHsKMFWY2TFhmpnRBQZZTOdOalRfshTUzepYfQFlYLtHcWqLOIMGwcXIq8XIDupHWHcy8wvNqg==
x-amz-request-id: 171BJ5DFJF707JXS
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding
last-modified: Mon, 07 Feb 2022 20:26:45 GMT
etag: "2cb9262f4870f225de120af23500828a"
cache-control: max-age=31556926
cf-cache-status: HIT
age: 6175089
accept-ranges: bytes
server: cloudflare
cf-ray: 8b7ea7e3fcac568a-OSL
X-Firefox-Spdy: h2
|
|
| site-assets.fontawesome.com/releases/v6.0.0/webfonts/fa-solid-900.woff2 | 172.64.147.188 | 200 OK | 304 kB |
URL GET HTTP/2site-assets.fontawesome.com/releases/v6.0.0/webfonts/fa-solid-900.woff2 IP 172.64.147.188:443
Requested byhttps://wecima.show/watch/%D9%81%D9%8A%D9%84%D9%85-blonde-2022-%D9%85%D8%AA%D8%B1%D8%AC%D9%85-3/ CertificateIssuerDigiCert Inc Subject*.fontawesome.com FingerprintB1:69:23:88:5E:EA:EA:76:BC:90:A2:CE:D9:3B:3F:5D:FE:5F:13:09 ValidityTue, 30 Jul 2024 00:00:00 GMT - Mon, 27 Jan 2025 23:59:59 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 303544, version 768.256 Size304 kB (303544 bytes) Hash78863e0f6e65fbe6175866e6d5b6f18a 8cda0fc2a701bd6dcfaa94261178fa78df1d15de 82877c6d33c5d786db4815f756437c3e853e08bf8c6c267fd246760d2a96d029
GET /releases/v6.0.0/webfonts/fa-solid-900.woff2 HTTP/1.1
Host: site-assets.fontawesome.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://wecima.show
DNT: 1
Connection: keep-alive
Referer: https://site-assets.fontawesome.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 23 Aug 2024 22:49:26 GMT
content-type: font/woff2
content-length: 303544
x-amz-id-2: 70AFYw5W6X/6B+UZSIr10/JYfahYDHUxNUMInPomCbew3adJ1a4DSF9S954plWfYCrlapxXd1wg=
x-amz-request-id: 1718WVNTCARH9CZE
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding
last-modified: Mon, 07 Feb 2022 20:26:45 GMT
etag: "78863e0f6e65fbe6175866e6d5b6f18a"
cache-control: max-age=31556926
cf-cache-status: HIT
age: 6175089
accept-ranges: bytes
server: cloudflare
cf-ray: 8b7ea7e3ec9b568a-OSL
X-Firefox-Spdy: h2
|
|
| site-assets.fontawesome.com/releases/v6.0.0/webfonts/fa-regular-400.woff2 | 172.64.147.188 | 200 OK | 358 kB |
URL GET HTTP/2site-assets.fontawesome.com/releases/v6.0.0/webfonts/fa-regular-400.woff2 IP 172.64.147.188:443
Requested byhttps://wecima.show/watch/%D9%81%D9%8A%D9%84%D9%85-blonde-2022-%D9%85%D8%AA%D8%B1%D8%AC%D9%85-3/ CertificateIssuerDigiCert Inc Subject*.fontawesome.com FingerprintB1:69:23:88:5E:EA:EA:76:BC:90:A2:CE:D9:3B:3F:5D:FE:5F:13:09 ValidityTue, 30 Jul 2024 00:00:00 GMT - Mon, 27 Jan 2025 23:59:59 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 357732, version 768.256 Size358 kB (357732 bytes) Hashaca950cc283a103f77e0001fb67043b7 bf0d2965fbc75a8a23ca081c7094a95535d46ca6 d2d786476ddb1827a07bc0ac83e78cee6d262a16092b6064c166091132f09b65
GET /releases/v6.0.0/webfonts/fa-regular-400.woff2 HTTP/1.1
Host: site-assets.fontawesome.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://wecima.show
DNT: 1
Connection: keep-alive
Referer: https://site-assets.fontawesome.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 23 Aug 2024 22:49:26 GMT
content-type: font/woff2
content-length: 357732
x-amz-id-2: Br9dLqYU+N0M21J3AdD3adYutgDrGYL4/h2kL9hHFdENBbKCgS68fYnRzA9lfTKQEVSWKKTqUwm0p6STsQ5Q+A==
x-amz-request-id: 171DZT9BFWTJYKHF
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding
last-modified: Mon, 07 Feb 2022 20:26:45 GMT
etag: "aca950cc283a103f77e0001fb67043b7"
cache-control: max-age=31556926
cf-cache-status: HIT
age: 6175089
accept-ranges: bytes
server: cloudflare
cf-ray: 8b7ea7e40cb7568a-OSL
X-Firefox-Spdy: h2
|
|
| wecima.show/run/4172d8226bd6336f599a3751a86edb90d1691c3946918da5609a1a59dd6c31ab745b679cdaf91142e56b3991f0bc6fdb7d48b5e4dc89198feca84c7f9e35c3869f205193b1a7c430ddbc7bfc3a5001b0c00e50ed9b5a7c964616a5bed37a8cf3df6a33?Key=RNnPf0AjSM0oGnPgG2oVVg&Expires=1724460516 | 172.67.194.252 | 301 Moved Permanently | 504 B |
URL GET HTTP/3wecima.show/run/4172d8226bd6336f599a3751a86edb90d1691c3946918da5609a1a59dd6c31ab745b679cdaf91142e56b3991f0bc6fdb7d48b5e4dc89198feca84c7f9e35c3869f205193b1a7c430ddbc7bfc3a5001b0c00e50ed9b5a7c964616a5bed37a8cf3df6a33?Key=RNnPf0AjSM0oGnPgG2oVVg&Expires=1724460516 IP 172.67.194.252:443
Requested byhttps://wecima.show/watch/%D9%81%D9%8A%D9%84%D9%85-blonde-2022-%D9%85%D8%AA%D8%B1%D8%AC%D9%85-3/ CertificateIssuerGoogle Trust Services Subjectwecima.show FingerprintE9:02:58:60:9F:6E:2E:E5:E5:7E:4C:AA:6E:AF:5F:66:8D:ED:2B:23 ValiditySat, 03 Aug 2024 02:58:47 GMT - Fri, 01 Nov 2024 02:58:46 GMT
Hashb7db44d33198b8c41b1c979f0d2ea75b 169d29d8f93c67631adc900bf2b9d663c847e4a0 131ab058e143654d54ac349b180f027c8e2ba7bfbd2458729904924edad1324e
GET /run/4172d8226bd6336f599a3751a86edb90d1691c3946918da5609a1a59dd6c31ab745b679cdaf91142e56b3991f0bc6fdb7d48b5e4dc89198feca84c7f9e35c3869f205193b1a7c430ddbc7bfc3a5001b0c00e50ed9b5a7c964616a5bed37a8cf3df6a33?Key=RNnPf0AjSM0oGnPgG2oVVg&Expires=1724460516 HTTP/1.1
Host: wecima.show
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://wecima.show/watch/%D9%81%D9%8A%D9%84%D9%85-blonde-2022-%D9%85%D8%AA%D8%B1%D8%AC%D9%85-3/
Cookie: _ga_6JHTFKY3P3=GS1.1.1724453365.1.0.1724453365.0.0.0; _ga=GA1.1.1114194072.1724453366
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 301 Moved Permanently
date: Fri, 23 Aug 2024 22:49:26 GMT
content-type: text/html; charset=UTF-8
location: https://wecima.show/run/4172d8226bd6336f599a3751a86edb90d1691c3946918da5609a1a59dd6c31ab745b679cdaf91142e56b3991f0bc6fdb7d48b5e4dc89198feca84c7f9e35c3869f205193b1a7c430ddbc7bfc3a5001b0c00e50ed9b5a7c964616a5bed37a8cf3df6a33/?Key=RNnPf0AjSM0oGnPgG2oVVg&Expires=1724460516
expires: Fri, 23 Aug 2024 23:45:59 GMT
cache-control: max-age=3600
x-redirect-by: WordPress
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7xPVdiackhjvCTPllkDlovFW%2F1x7mB8OBltKF6bMstMPPwiuUUcH0TuZCpiygv%2FNitaVcx1PBCqXqZQrBgg9LKSaIFds0rtHmWunn%2FxFPA7ZhyUzTogOiAW1OE69jw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8b7ea7e11e3c56b4-OSL
alt-svc: h3=":443"; ma=86400
|
|
| my.rtmark.net/gid.js | 139.45.195.8 | 200 OK | 65 B |
IP 139.45.195.8:443
Requested byhttps://wecima.show/watch/%D9%81%D9%8A%D9%84%D9%85-blonde-2022-%D9%85%D8%AA%D8%B1%D8%AC%D9%85-3/ CertificateIssuerLet's Encrypt Subjectrtmark.net Fingerprint4B:EF:80:EB:90:B5:8C:01:82:25:B6:92:59:BE:A9:6A:C7:83:75:8E ValidityFri, 05 Jul 2024 22:30:11 GMT - Thu, 03 Oct 2024 22:30:10 GMT
Hashc38fde5d8a62fbe570d209ff38722fa4 03b90d15542c52ce8b7b82c6d205c0a8400b4438 e4146b0b5bc84f8763c4b34f533e83c27a7a3c66b93fec6c218aaab8f8a71fd2
GET /gid.js HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://wecima.show
DNT: 1
Connection: keep-alive
Referer: https://wecima.show/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 23 Aug 2024 22:49:26 GMT
content-type: application/json; charset=utf-8
content-length: 65
access-control-allow-origin: https://wecima.show
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
set-cookie: ID=0800c1fbc2e74a64ebcdf44477b79ce2; expires=Sat, 23 Aug 2025 22:49:26 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
|
|
| code.jquery.com/jquery-3.5.1.min.js | 151.101.2.137 | 200 OK | 31 kB |
URL GET HTTP/2code.jquery.com/jquery-3.5.1.min.js IP 151.101.2.137:443
Requested byhttps://wecima.show/run/4172d8226bd6336f599a3751a86edb90d1691c3946918da5609a1a59dd6c31ab745b679cdaf91142e56b3991f0bc6fdb7d48b5e4dc89198feca84c7f9e35c3869f205193b1a7c430ddbc7bfc3a5001b0c00e50ed9b5a7c964616a5bed37a8cf3df6a33/?Key=RNnPf0AjSM0oGnPgG2oVVg&Expires=1724460516 CertificateIssuerSectigo Limited Subject*.jquery.com FingerprintCD:B5:6E:05:85:0C:5A:AE:47:12:80:2A:5B:C6:E5:8F:11:72:E2:B5 ValidityTue, 25 Jun 2024 00:00:00 GMT - Wed, 25 Jun 2025 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (65451) Hashdc5e7f18c8d36ac1d3d4753a87c98d0a c8e1c8b386dc5b7a9184c763c88d19a346eb3342 f7f6a5894f1d19ddad6fa392b2ece2c5e578cbf7da4ea805b6885eb6985b6e3d
GET /jquery-3.5.1.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://wecima.show/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Fri, 18 Oct 1991 12:00:00 GMT
etag: W/"28feccc0-15d84"
cache-control: public, max-age=31536000, stale-while-revalidate=604800
access-control-allow-origin: *
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Fri, 23 Aug 2024 22:49:26 GMT
age: 5822635
x-served-by: cache-lga21981-LGA, cache-hel1410025-HEL
x-cache: HIT, HIT
x-cache-hits: 64, 674939
x-timer: S1724453367.764815,VS0,VE0
vary: Accept-Encoding
content-length: 30879
X-Firefox-Spdy: h2
|
|
| cdnjs.cloudflare.com/ajax/libs/video.js/7.0.0/video.min.js | 104.17.24.14 | 200 OK | 90 kB |
URL GET HTTP/2cdnjs.cloudflare.com/ajax/libs/video.js/7.0.0/video.min.js IP 104.17.24.14:443
Requested byhttps://wecima.show/run/4172d8226bd6336f599a3751a86edb90d1691c3946918da5609a1a59dd6c31ab745b679cdaf91142e56b3991f0bc6fdb7d48b5e4dc89198feca84c7f9e35c3869f205193b1a7c430ddbc7bfc3a5001b0c00e50ed9b5a7c964616a5bed37a8cf3df6a33/?Key=RNnPf0AjSM0oGnPgG2oVVg&Expires=1724460516 CertificateIssuerGoogle Trust Services Subjectcdnjs.cloudflare.com Fingerprint00:EC:C6:E9:D9:C1:6D:05:88:6E:33:AF:3B:E7:7B:86:81:20:66:CA ValidityWed, 31 Jul 2024 04:16:10 GMT - Tue, 29 Oct 2024 04:16:09 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (65141) Hash32803413b97579648bb6d086fde72f08 8a7d229a24879f094e80b78e417c90d07cdc4f13 8636f49e04c3b2b95dbdc4bc2dfff6d5babbfd642eab954087deaa7c2c2fae11
GET /ajax/libs/video.js/7.0.0/video.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://wecima.show/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 23 Aug 2024 22:49:26 GMT
content-type: application/javascript; charset=utf-8
content-length: 89934
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb0401f-6092d"
last-modified: Mon, 04 May 2020 16:17:35 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 3296576
expires: Wed, 13 Aug 2025 22:49:26 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Aa1fFd3qV3OE4LJWQXyEbHxYdSmnjVReJbkYzonssC8IEwvH4g%2BK8bBCQhB%2BSjm94QaqmngqSecr%2BxCQjWS%2BISRPSAAlCiU3RXvFDEQ3Oa2gAmb2tpr9sSglixpj9GdeVbUzcB2N"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 8b7ea7e62cbe1c0e-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| wecima.show/wp-content/uploads/2022/09/Blonde-2022.jpg | 172.67.194.252 | 200 OK | 761 kB |
URL GET HTTP/3wecima.show/wp-content/uploads/2022/09/Blonde-2022.jpg IP 172.67.194.252:443
Requested byhttps://wecima.show/run/4172d8226bd6336f599a3751a86edb90d1691c3946918da5609a1a59dd6c31ab745b679cdaf91142e56b3991f0bc6fdb7d48b5e4dc89198feca84c7f9e35c3869f205193b1a7c430ddbc7bfc3a5001b0c00e50ed9b5a7c964616a5bed37a8cf3df6a33/?Key=RNnPf0AjSM0oGnPgG2oVVg&Expires=1724460516 CertificateIssuerGoogle Trust Services Subjectwecima.show FingerprintE9:02:58:60:9F:6E:2E:E5:E5:7E:4C:AA:6E:AF:5F:66:8D:ED:2B:23 ValiditySat, 03 Aug 2024 02:58:47 GMT - Fri, 01 Nov 2024 02:58:46 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1500x2223, components 3 Size761 kB (761371 bytes) Hasha4c5e9b33aa7bf8864089bad24bd80eb 75458762123b574550a9e6c3bcde89aad2bc63ca 089f0867ea6ab229b52da688f4e263c5c9f56f04ece1c143ee9a0c29aa785c9f
GET /wp-content/uploads/2022/09/Blonde-2022.jpg HTTP/1.1
Host: wecima.show
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://wecima.show/run/4172d8226bd6336f599a3751a86edb90d1691c3946918da5609a1a59dd6c31ab745b679cdaf91142e56b3991f0bc6fdb7d48b5e4dc89198feca84c7f9e35c3869f205193b1a7c430ddbc7bfc3a5001b0c00e50ed9b5a7c964616a5bed37a8cf3df6a33/?Key=RNnPf0AjSM0oGnPgG2oVVg&Expires=1724460516
Cookie: _ga_6JHTFKY3P3=GS1.1.1724453365.1.0.1724453365.0.0.0; _ga=GA1.1.1114194072.1724453366
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 23 Aug 2024 22:49:26 GMT
content-type: image/jpeg
content-length: 761371
last-modified: Wed, 28 Sep 2022 07:51:13 GMT
etag: "6333fcf1-b9e1b"
vary: Accept, Accept-Encoding
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=nma0FKRRcHmycaCJwKew8TdomrgVfTINmhJiLwqmp4y85fRBz%2FC5oxgtofBuErNoS0i%2BiTwPOgt%2BfJx4M9b5ga2zHvsTZV69%2F1Bdq3HxFuCZaJtz9%2FMMvzkNDM33ww%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8b7ea7e58bf056b4-OSL
alt-svc: h3=":443"; ma=86400
|
|
| wecima.show/wp-content/uploads/2023/02/wecima-favicon-1.png | 172.67.194.252 | 200 OK | 5.5 kB |
URL GET HTTP/3wecima.show/wp-content/uploads/2023/02/wecima-favicon-1.png IP 172.67.194.252:443
Requested byhttps://wecima.show/watch/%D9%81%D9%8A%D9%84%D9%85-blonde-2022-%D9%85%D8%AA%D8%B1%D8%AC%D9%85-3/ CertificateIssuerGoogle Trust Services Subjectwecima.show FingerprintE9:02:58:60:9F:6E:2E:E5:E5:7E:4C:AA:6E:AF:5F:66:8D:ED:2B:23 ValiditySat, 03 Aug 2024 02:58:47 GMT - Fri, 01 Nov 2024 02:58:46 GMT
File typePNG image data, 271 x 211, 8-bit/color RGBA, non-interlaced Hashde6cab0eb34528ddc75c0bba91468367 805566b4421a52ccbc7ddea87282ce4df241f64e ab33b59200764ca718a5f977d0eccf57c27d02560c59ba3a9b12af1819b1f7fa
GET /wp-content/uploads/2023/02/wecima-favicon-1.png HTTP/1.1
Host: wecima.show
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://wecima.show/
DNT: 1
Connection: keep-alive
Cookie: _ga_6JHTFKY3P3=GS1.1.1724453365.1.0.1724453365.0.0.0; _ga=GA1.1.1114194072.1724453366
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 23 Aug 2024 22:49:26 GMT
content-type: image/png
content-length: 5499
last-modified: Mon, 13 Feb 2023 20:21:20 GMT
etag: "63ea9bc0-157b"
vary: Accept, Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 680
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=u35EDIAeGG0RnYKXFc8N3CbRhUSdE707l55auLUzaMG5O4AY3TQAn6GdJcCHRhjsLLi3iJymFtvL%2FkKuta1Gya0U9S9xTf8yaqWWqVsi9P1%2B1ACy5PdeY5kEPPgkNQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8b7ea7e74dc256b4-OSL
alt-svc: h3=":443"; ma=86400
|
|
| r11.o.lencr.org/ | 23.33.119.27 | | 504 B |
IP 23.33.119.27:0
ASN#20940 Akamai International B.V.
Hash858eda022f9abab07abe65d5db47bdd7 50676984a7c33451e955b30f0c2796d8cbd39b37 d5d1370d54dbc79eef9d826334b31217d5b9823cfd1d012036b1bc4f38b724b4
POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "D5D1370D54DBC79EEF9D826334B31217D5B9823CFD1D012036B1BC4F38B724B4"
Last-Modified: Fri, 23 Aug 2024 14:37:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11294
Expires: Sat, 24 Aug 2024 01:57:41 GMT
Date: Fri, 23 Aug 2024 22:49:27 GMT
Connection: keep-alive
|
|
| unpkg.com/videojs-contrib-hls@5.15.0/dist/videojs-contrib-hls.js | 104.17.249.203 | 200 OK | 214 kB |
URL GET HTTP/2unpkg.com/videojs-contrib-hls@5.15.0/dist/videojs-contrib-hls.js IP 104.17.249.203:443
Requested byhttps://wecima.show/run/4172d8226bd6336f599a3751a86edb90d1691c3946918da5609a1a59dd6c31ab745b679cdaf91142e56b3991f0bc6fdb7d48b5e4dc89198feca84c7f9e35c3869f205193b1a7c430ddbc7bfc3a5001b0c00e50ed9b5a7c964616a5bed37a8cf3df6a33/?Key=RNnPf0AjSM0oGnPgG2oVVg&Expires=1724460516 CertificateIssuerGoogle Trust Services Subjectunpkg.com Fingerprint78:2B:78:78:28:26:0C:48:36:B0:F1:BE:16:37:48:76:93:BB:A7:42 ValiditySun, 28 Jul 2024 05:23:27 GMT - Sat, 26 Oct 2024 05:23:26 GMT
File typeJavaScript source, ASCII text, with very long lines (857) Size214 kB (214220 bytes) Hashf4cfc74056724c22c4841e1d085e51e2 c9d7412fe37b091832074ee9c5656849e87ef41c aa938226e6eddc96da5a52d7a9aba85c6b4eed0e56ad1ca66fd8f5ee8bb0acd1
GET /videojs-contrib-hls@5.15.0/dist/videojs-contrib-hls.js HTTP/1.1
Host: unpkg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://wecima.show/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 23 Aug 2024 22:49:27 GMT
content-type: application/javascript; charset=utf-8
access-control-allow-origin: *
content-encoding: br
cache-control: public, max-age=31536000
last-modified: Sat, 26 Oct 1985 08:15:00 GMT
etag: "af180-yddBL+N7CRgyB07pxWVoSeh+9Bw"
via: 1.1 fly.io
fly-request-id: 01J214N0KNJG95T26R59H1770S-arn
cf-cache-status: HIT
age: 4280526
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 8b7ea7e81fc056a9-OSL
X-Firefox-Spdy: h2
|
|
| unpkg.com/@videojs/themes@1/dist/forest/index.css | 104.17.249.203 | 302 Found | 574 B |
URL GET HTTP/2unpkg.com/@videojs/themes@1/dist/forest/index.css IP 104.17.249.203:443
Requested byhttps://wecima.show/run/4172d8226bd6336f599a3751a86edb90d1691c3946918da5609a1a59dd6c31ab745b679cdaf91142e56b3991f0bc6fdb7d48b5e4dc89198feca84c7f9e35c3869f205193b1a7c430ddbc7bfc3a5001b0c00e50ed9b5a7c964616a5bed37a8cf3df6a33/?Key=RNnPf0AjSM0oGnPgG2oVVg&Expires=1724460516 CertificateIssuerGoogle Trust Services Subjectunpkg.com Fingerprint78:2B:78:78:28:26:0C:48:36:B0:F1:BE:16:37:48:76:93:BB:A7:42 ValiditySun, 28 Jul 2024 05:23:27 GMT - Sat, 26 Oct 2024 05:23:26 GMT
File typeASCII text, with no line terminators Hasha0c45873abcf490e08dea28ec700a32b 59dbfe79533bbce749155f6ca998b4cc25ac4388 2cba5442f8102c3d1868e6ec2f6ea895e651e9ec7a498985d74ae7308ca5a578
GET /@videojs/themes@1/dist/forest/index.css HTTP/1.1
Host: unpkg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://wecima.show/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Fri, 23 Aug 2024 22:49:26 GMT
content-type: text/plain; charset=utf-8
access-control-allow-origin: *
cache-control: public, s-maxage=600, max-age=60
location: /@videojs/themes@1.0.1/dist/forest/index.css
vary: Accept, Accept-Encoding
content-encoding: br
via: 1.1 fly.io
fly-request-id: 01J60PWAZKX3P2VV7XHV157HWS-arn
cf-cache-status: EXPIRED
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 8b7ea7e62d5856a9-OSL
X-Firefox-Spdy: h2
|
|
| unpkg.com/videojs-flash/dist/videojs-flash.js | 104.17.249.203 | 302 Found | 572 B |
URL GET HTTP/2unpkg.com/videojs-flash/dist/videojs-flash.js IP 104.17.249.203:443
Requested byhttps://wecima.show/run/4172d8226bd6336f599a3751a86edb90d1691c3946918da5609a1a59dd6c31ab745b679cdaf91142e56b3991f0bc6fdb7d48b5e4dc89198feca84c7f9e35c3869f205193b1a7c430ddbc7bfc3a5001b0c00e50ed9b5a7c964616a5bed37a8cf3df6a33/?Key=RNnPf0AjSM0oGnPgG2oVVg&Expires=1724460516 CertificateIssuerGoogle Trust Services Subjectunpkg.com Fingerprint78:2B:78:78:28:26:0C:48:36:B0:F1:BE:16:37:48:76:93:BB:A7:42 ValiditySun, 28 Jul 2024 05:23:27 GMT - Sat, 26 Oct 2024 05:23:26 GMT
File typeASCII text, with no line terminators Hash2ced2e8647b952247f8ae91392678e19 68403d986be70f61663f2aa725975798c96fad5f 1aadc86da80d78f5feef1f889273cdd184113acbac847de723880b47b360c5be
GET /videojs-flash/dist/videojs-flash.js HTTP/1.1
Host: unpkg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://wecima.show/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Fri, 23 Aug 2024 22:49:26 GMT
content-type: text/plain; charset=utf-8
access-control-allow-origin: *
cache-control: public, s-maxage=600, max-age=60
location: /videojs-flash@2.2.1/dist/videojs-flash.js
vary: Accept, Accept-Encoding
content-encoding: br
via: 1.1 fly.io
fly-request-id: 01J60PCGJHR3F9Z8ZGSHRNR10A-arn
cf-cache-status: HIT
age: 518
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 8b7ea7e63d6956a9-OSL
X-Firefox-Spdy: h2
|
|
| unpkg.com/videojs-contrib-hls/dist/videojs-contrib-hls.js | 104.17.249.203 | 302 Found | 553 B |
URL GET HTTP/2unpkg.com/videojs-contrib-hls/dist/videojs-contrib-hls.js IP 104.17.249.203:443
Requested byhttps://wecima.show/run/4172d8226bd6336f599a3751a86edb90d1691c3946918da5609a1a59dd6c31ab745b679cdaf91142e56b3991f0bc6fdb7d48b5e4dc89198feca84c7f9e35c3869f205193b1a7c430ddbc7bfc3a5001b0c00e50ed9b5a7c964616a5bed37a8cf3df6a33/?Key=RNnPf0AjSM0oGnPgG2oVVg&Expires=1724460516 CertificateIssuerGoogle Trust Services Subjectunpkg.com Fingerprint78:2B:78:78:28:26:0C:48:36:B0:F1:BE:16:37:48:76:93:BB:A7:42 ValiditySun, 28 Jul 2024 05:23:27 GMT - Sat, 26 Oct 2024 05:23:26 GMT
File typeASCII text, with no line terminators Hash5daad76beef9a81dff11bddf0d9b65c3 7f6eb7561d339debcd2259b93bbc6ca8fe477303 ef533e8f223237b9901ab77086732014a71cdf2bed438c35c128c946a6ce333c
GET /videojs-contrib-hls/dist/videojs-contrib-hls.js HTTP/1.1
Host: unpkg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://wecima.show/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Fri, 23 Aug 2024 22:49:26 GMT
content-type: text/plain; charset=utf-8
access-control-allow-origin: *
cache-control: public, s-maxage=600, max-age=60
location: /videojs-contrib-hls@5.15.0/dist/videojs-contrib-hls.js
vary: Accept, Accept-Encoding
content-encoding: br
via: 1.1 fly.io
fly-request-id: 01J60PKM878BHXFKCP7FGKQCCF-arn
cf-cache-status: HIT
age: 285
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 8b7ea7e62d5b56a9-OSL
X-Firefox-Spdy: h2
|
|
| o.pki.goog/wr2 | 142.250.74.131 | | 472 B |
IP 142.250.74.131:0
Hashca089ae4cb5c9c06f3de930f9163eb94 92ef4800f0103b7fc1744be58bb8259c76d90f4f 2d09c25b7d254e7e41f86fb76e16b788e9af16dc5b35f86c60ad0a5bfaf8dbd5
POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 23 Aug 2024 22:49:27 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| unpkg.com/videojs-flash@2.2.1/dist/videojs-flash.js | 104.17.249.203 | 200 OK | 14 kB |
URL GET HTTP/2unpkg.com/videojs-flash@2.2.1/dist/videojs-flash.js IP 104.17.249.203:443
Requested byhttps://wecima.show/run/4172d8226bd6336f599a3751a86edb90d1691c3946918da5609a1a59dd6c31ab745b679cdaf91142e56b3991f0bc6fdb7d48b5e4dc89198feca84c7f9e35c3869f205193b1a7c430ddbc7bfc3a5001b0c00e50ed9b5a7c964616a5bed37a8cf3df6a33/?Key=RNnPf0AjSM0oGnPgG2oVVg&Expires=1724460516 CertificateIssuerGoogle Trust Services Subjectunpkg.com Fingerprint78:2B:78:78:28:26:0C:48:36:B0:F1:BE:16:37:48:76:93:BB:A7:42 ValiditySun, 28 Jul 2024 05:23:27 GMT - Sat, 26 Oct 2024 05:23:26 GMT
File typeJavaScript source, ASCII text Hashb671db9a73a06770313c1a05bcdc0b58 12280acce4192448e93e3b2ef9e1adf6c6eba94a 9162832cc3ed9507d8f869dd0d4fd0dacde05a078172d82a98b05e0aef1f1a34
GET /videojs-flash@2.2.1/dist/videojs-flash.js HTTP/1.1
Host: unpkg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://wecima.show/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 23 Aug 2024 22:49:27 GMT
content-type: application/javascript; charset=utf-8
access-control-allow-origin: *
content-encoding: br
cache-control: public, max-age=31536000
last-modified: Sat, 26 Oct 1985 08:15:00 GMT
etag: "99ef-EigKzOQZJEjpPjsu+eGt9sbrqUo"
via: 1.1 fly.io
fly-request-id: 01J214ZZTDBDCZWPCMD9VGFC36-arn
cf-cache-status: HIT
age: 4280167
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 8b7ea7e84ff556a9-OSL
X-Firefox-Spdy: h2
|
|
| wecima.show/wp-content/themes/Mycima2021/Style/fonts.css | 172.67.194.252 | 200 OK | 6.9 kB |
URL GET HTTP/3wecima.show/wp-content/themes/Mycima2021/Style/fonts.css IP 172.67.194.252:443
Requested byhttps://wecima.show/run/4172d8226bd6336f599a3751a86edb90d1691c3946918da5609a1a59dd6c31ab745b679cdaf91142e56b3991f0bc6fdb7d48b5e4dc89198feca84c7f9e35c3869f205193b1a7c430ddbc7bfc3a5001b0c00e50ed9b5a7c964616a5bed37a8cf3df6a33/?Key=RNnPf0AjSM0oGnPgG2oVVg&Expires=1724460516 CertificateIssuerGoogle Trust Services Subjectwecima.show FingerprintE9:02:58:60:9F:6E:2E:E5:E5:7E:4C:AA:6E:AF:5F:66:8D:ED:2B:23 ValiditySat, 03 Aug 2024 02:58:47 GMT - Fri, 01 Nov 2024 02:58:46 GMT
File typegzip compressed data, from Unix Hash398bc0da6945bd3240f9189b6ff088a8 1598b68b11cd71fe4a4d44ef14ed0a91cc132916 1a3e0fefe589395a844181c7b28c8a32cdae2581b5d055b677ee6fd8eb370022
GET /wp-content/themes/Mycima2021/Style/fonts.css HTTP/1.1
Host: wecima.show
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://wecima.show/run/4172d8226bd6336f599a3751a86edb90d1691c3946918da5609a1a59dd6c31ab745b679cdaf91142e56b3991f0bc6fdb7d48b5e4dc89198feca84c7f9e35c3869f205193b1a7c430ddbc7bfc3a5001b0c00e50ed9b5a7c964616a5bed37a8cf3df6a33/?Key=RNnPf0AjSM0oGnPgG2oVVg&Expires=1724460516
Cookie: _ga_6JHTFKY3P3=GS1.1.1724453365.1.0.1724453365.0.0.0; _ga=GA1.1.1114194072.1724453366
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 23 Aug 2024 22:49:26 GMT
content-type: text/css
last-modified: Fri, 31 Jan 2020 22:37:49 GMT
etag: W/"5e34ac3d-40b"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: HIT
age: 2734
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=pUwr7v8YLVHdeagtFqkJBffFm8G4O6i3y9OR4oS7IxeNpCqLsBly2tOAO20SBcd80viLj1i%2BoTKseGixXM%2BCaw03h3e%2FJavyECqNTP780w8ZUrcIV71Y33dpNv6X7A%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8b7ea7e58bea56b4-OSL
alt-svc: h3=":443"; ma=86400
|
|
| maipseeg.net/5/4796941/?abt_opts=1&oo=1&js_build=iclick-v1.903.0&dmn=inklinkor.com&userId=0800c1fbc2e74a64ebcdf44477b79ce2 | 139.45.197.244 | 200 OK | 13 kB |
URL GET HTTP/2maipseeg.net/5/4796941/?abt_opts=1&oo=1&js_build=iclick-v1.903.0&dmn=inklinkor.com&userId=0800c1fbc2e74a64ebcdf44477b79ce2 IP 139.45.197.244:443
Requested byhttps://wecima.show/watch/%D9%81%D9%8A%D9%84%D9%85-blonde-2022-%D9%85%D8%AA%D8%B1%D8%AC%D9%85-3/ CertificateIssuerLet's Encrypt Subjectmaipseeg.net FingerprintAF:01:49:B6:D4:A6:61:75:0F:69:5A:B3:22:39:5A:3B:7E:11:92:C9 ValidityThu, 22 Aug 2024 22:23:12 GMT - Wed, 20 Nov 2024 22:23:11 GMT
File typegzip compressed data, max speed, from Unix Hash708aa3100024cea09d01ec14b6c33124 b3fa908aaff5bec53686d8ebc4d609a557f7a726 f35a9eca9e34b2b9f4892dd391fa273ed39b80c883d35ff4b98e49fbea8de361
GET /5/4796941/?abt_opts=1&oo=1&js_build=iclick-v1.903.0&dmn=inklinkor.com&userId=0800c1fbc2e74a64ebcdf44477b79ce2 HTTP/1.1
Host: maipseeg.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://wecima.show
DNT: 1
Connection: keep-alive
Referer: https://wecima.show/
Cookie: OAID=0080c16a94bb4d69e7bf650e55d1394b; oaidts=1724453366
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 23 Aug 2024 22:49:26 GMT
content-type: application/json
x-trace-id: 60177c832ca3d7cb5bcc1ad76892736f
link: <https://my.rtmark.net>; rel="preconnect dns-prefetch",<https://yonmewon.com>; rel="preconnect dns-prefetch",<https://e2ertt.com>; rel="preconnect dns-prefetch",<https://sr7pv7n5x.com>; rel="preconnect dns-prefetch"
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
access-control-allow-origin: https://wecima.show
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace, favicon
access-control-max-age: 86400
timing-allow-origin: *
set-cookie: OAID=0800c1fbc2e74a64ebcdf44477b79ce2; expires=Sat, 23 Aug 2025 22:49:26 GMT; path=/; secure; SameSite=None
oaidts=1724453366; expires=Sat, 23 Aug 2025 22:49:26 GMT; path=/; secure; SameSite=None
syncedCookie=true; expires=Fri, 30 Aug 2024 22:49:26 GMT; path=/; secure; SameSite=None
pragma: no-cache, no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT, Mon, 26 Jul 1997 05:00:00 GMT
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| maipseeg.net/5/4796941/?oo=1&js_build=iclick-v1.903.0&dmn=inklinkor.com | 139.45.197.244 | 200 OK | 201 B |
URL GET HTTP/2maipseeg.net/5/4796941/?oo=1&js_build=iclick-v1.903.0&dmn=inklinkor.com IP 139.45.197.244:443
Requested byhttps://wecima.show/watch/%D9%81%D9%8A%D9%84%D9%85-blonde-2022-%D9%85%D8%AA%D8%B1%D8%AC%D9%85-3/ CertificateIssuerLet's Encrypt Subjectmaipseeg.net FingerprintAF:01:49:B6:D4:A6:61:75:0F:69:5A:B3:22:39:5A:3B:7E:11:92:C9 ValidityThu, 22 Aug 2024 22:23:12 GMT - Wed, 20 Nov 2024 22:23:11 GMT
File typetroff or preprocessor input, ASCII text, with no line terminators Hashd26a51b2b18ca7296a4a56fefe576996 d779db4d67fe4ac4fbed212c4179aac98ff1500e 20540a71927ca3d91d312e54577d37a6d721c31ad49fc4d9e1527df2c378b91a
GET /5/4796941/?oo=1&js_build=iclick-v1.903.0&dmn=inklinkor.com HTTP/1.1
Host: maipseeg.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://wecima.show
DNT: 1
Connection: keep-alive
Referer: https://wecima.show/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 23 Aug 2024 22:49:26 GMT
content-type: application/json
content-length: 201
x-trace-id: 437bdf81e55f07ab7577c617ec1057c5
link: <https://my.rtmark.net>; rel="preconnect dns-prefetch",<https://yonmewon.com>; rel="preconnect dns-prefetch",<https://sr7pv7n5x.com>; rel="preconnect dns-prefetch"
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
access-control-allow-origin: https://wecima.show
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace, favicon
access-control-max-age: 86400
timing-allow-origin: *
set-cookie: OAID=0080c16a94bb4d69e7bf650e55d1394b; expires=Sat, 23 Aug 2025 22:49:26 GMT; path=/; secure; SameSite=None
oaidts=1724453366; expires=Sat, 23 Aug 2025 22:49:26 GMT; path=/; secure; SameSite=None
syncedCookie=; expires=Tue, 10 Nov 2009 23:00:00 GMT
pragma: no-cache, no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT, Mon, 26 Jul 1997 05:00:00 GMT
X-Firefox-Spdy: h2
|
|
| wecima.show/AjaxCenter/RightBar/ | 172.67.194.252 | 200 OK | 91 kB |
URL GET HTTP/3wecima.show/AjaxCenter/RightBar/ IP 172.67.194.252:443
Requested byhttps://wecima.show/watch/%D9%81%D9%8A%D9%84%D9%85-blonde-2022-%D9%85%D8%AA%D8%B1%D8%AC%D9%85-3/ CertificateIssuerGoogle Trust Services Subjectwecima.show FingerprintE9:02:58:60:9F:6E:2E:E5:E5:7E:4C:AA:6E:AF:5F:66:8D:ED:2B:23 ValiditySat, 03 Aug 2024 02:58:47 GMT - Fri, 01 Nov 2024 02:58:46 GMT
Hash3280b9fd2aab6d78af8a427ee65d2434 041bf187feaaed07510320c77b8a1bc0d5c3c96b 8b4abdd996e3299fc21348f593efe85591e317773e1d3fe56636b1260eacf34a
GET /AjaxCenter/RightBar/ HTTP/1.1
Host: wecima.show
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: https://wecima.show/watch/%D9%81%D9%8A%D9%84%D9%85-blonde-2022-%D9%85%D8%AA%D8%B1%D8%AC%D9%85-3/
Cookie: _ga_6JHTFKY3P3=GS1.1.1724453365.1.0.1724453365.0.0.0; _ga=GA1.1.1114194072.1724453366
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 23 Aug 2024 22:49:25 GMT
content-type: text/html; charset=UTF-8
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=IpDXQwmTaYPpqpQa8ZPSjvqj8bmCpucxxVeJYf%2BD9vGM2eaPiyKF7Ube6EFRQM3lBZqQNRnyClMDIt8JdbncvvV2DPigXC3jOBJWwDYTX8Zv%2FjOwFeXylKcgD%2FLrPw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8b7ea7e01cef56b4-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| wecima.show/wp-content/themes/Mycima2021/components/packs/%23footer/js/owl.carousel.min.js?ver=6.4.3 | 172.67.194.252 | 200 OK | 95 kB |
URL GET HTTP/3wecima.show/wp-content/themes/Mycima2021/components/packs/%23footer/js/owl.carousel.min.js?ver=6.4.3 IP 172.67.194.252:443
Requested byhttps://wecima.show/watch/%D9%81%D9%8A%D9%84%D9%85-blonde-2022-%D9%85%D8%AA%D8%B1%D8%AC%D9%85-3/ CertificateIssuerGoogle Trust Services Subjectwecima.show FingerprintE9:02:58:60:9F:6E:2E:E5:E5:7E:4C:AA:6E:AF:5F:66:8D:ED:2B:23 ValiditySat, 03 Aug 2024 02:58:47 GMT - Fri, 01 Nov 2024 02:58:46 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Hashfcdee094e98d38fe380e1b5aad9bf444 d0ea8bb98673c7daa2da3af292eeea39a4f7479a ab97310577a6474ae4b0bd9bb8ef5267698bb9fa61127cb358d4512676d90488
GET /wp-content/themes/Mycima2021/components/packs/%23footer/js/owl.carousel.min.js?ver=6.4.3 HTTP/1.1
Host: wecima.show
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://wecima.show/watch/%D9%81%D9%8A%D9%84%D9%85-blonde-2022-%D9%85%D8%AA%D8%B1%D8%AC%D9%85-3/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 23 Aug 2024 22:49:25 GMT
content-type: application/javascript; charset=utf-8
last-modified: Sun, 22 Aug 2021 16:57:00 GMT
etag: W/"612281dc-17394"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: HIT
age: 2978
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2BGktA7jlhWyEfHOW0Iyrp3ssXYH2eW66hkwwuF9lCjPoAVmr0iY7k2cuLLnneAM6Lfadr9d58U84z7r2JOsWdRRpnnTiUHIfZeRQZk88XmtmGsiYWC7tz1Z6fybsZA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8b7ea7dc2fb256b4-OSL
alt-svc: h3=":443"; ma=86400
|
|
| wecima.show/wp-content/themes/Mycima2021/Style/Font/Ionicons/ionicons.min.css | 172.67.194.252 | 200 OK | 45 kB |
URL GET HTTP/3wecima.show/wp-content/themes/Mycima2021/Style/Font/Ionicons/ionicons.min.css IP 172.67.194.252:443
Requested byhttps://wecima.show/run/4172d8226bd6336f599a3751a86edb90d1691c3946918da5609a1a59dd6c31ab745b679cdaf91142e56b3991f0bc6fdb7d48b5e4dc89198feca84c7f9e35c3869f205193b1a7c430ddbc7bfc3a5001b0c00e50ed9b5a7c964616a5bed37a8cf3df6a33/?Key=RNnPf0AjSM0oGnPgG2oVVg&Expires=1724460516 CertificateIssuerGoogle Trust Services Subjectwecima.show FingerprintE9:02:58:60:9F:6E:2E:E5:E5:7E:4C:AA:6E:AF:5F:66:8D:ED:2B:23 ValiditySat, 03 Aug 2024 02:58:47 GMT - Fri, 01 Nov 2024 02:58:46 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /wp-content/themes/Mycima2021/Style/Font/Ionicons/ionicons.min.css HTTP/1.1
Host: wecima.show
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://wecima.show/wp-content/themes/Mycima2021/Style/fonts.css
Cookie: _ga_6JHTFKY3P3=GS1.1.1724453365.1.0.1724453365.0.0.0; _ga=GA1.1.1114194072.1724453366
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 23 Aug 2024 22:49:26 GMT
content-type: text/css
last-modified: Mon, 13 Apr 2020 00:29:44 GMT
etag: W/"5e93b278-ae5d"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: HIT
age: 2734
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=BXu5oY%2BaEo3H8fC2mX%2FWJolJRGOPj9MgN5SSv%2FbM1sDcK7dBywQZbkXcllgodE%2BuECafD9iTtwxEw%2BFKP2d9PHeDsOgj1HMVHjmSHApbmODt%2Bap5mnuRCvRMhMSLfA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8b7ea7e79e1956b4-OSL
alt-svc: h3=":443"; ma=86400
|
|
| unpkg.com/@videojs/themes@1.0.1/dist/forest/index.css | 104.17.249.203 | 200 OK | 4.7 kB |
URL GET HTTP/2unpkg.com/@videojs/themes@1.0.1/dist/forest/index.css IP 104.17.249.203:443
Requested byhttps://wecima.show/run/4172d8226bd6336f599a3751a86edb90d1691c3946918da5609a1a59dd6c31ab745b679cdaf91142e56b3991f0bc6fdb7d48b5e4dc89198feca84c7f9e35c3869f205193b1a7c430ddbc7bfc3a5001b0c00e50ed9b5a7c964616a5bed37a8cf3df6a33/?Key=RNnPf0AjSM0oGnPgG2oVVg&Expires=1724460516 CertificateIssuerGoogle Trust Services Subjectunpkg.com Fingerprint78:2B:78:78:28:26:0C:48:36:B0:F1:BE:16:37:48:76:93:BB:A7:42 ValiditySun, 28 Jul 2024 05:23:27 GMT - Sat, 26 Oct 2024 05:23:26 GMT
File typeASCII text, with very long lines (4713), with no line terminators Hashf4eae9a8afcd9abd6c0a15a152e1bce8 9ab77953e7fe073c1e4075e3196613b9c8a06d60 0dc7cd97035d0073354825aa89d32ad41d8c0a3422226be471831cc28d8d024d
GET /@videojs/themes@1.0.1/dist/forest/index.css HTTP/1.1
Host: unpkg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://wecima.show/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 23 Aug 2024 22:49:27 GMT
content-type: text/css; charset=utf-8
access-control-allow-origin: *
content-encoding: br
cache-control: public, max-age=31536000
last-modified: Wed, 28 Oct 2020 04:24:35 GMT
etag: "1261-TREtap8czYudjMboZWzHkoZFOgs"
via: 1.1 fly.io
fly-request-id: 01J08NKYFKN2GX3V5CTBE1BXQY-arn
cf-cache-status: HIT
age: 6175339
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 8b7ea7e8580456a9-OSL
X-Firefox-Spdy: h2
|
|
| varcdnx20xvx2-12.erea12.shop:82/d/nnr4obqgbgeyf3tkc4ozllqgod57vmxas2gz6mqr3qe5j2gzt2gqnigft224zydtxfybjoj4/Blonde.2022.1080p.NF.WEB-DL.MyCima.world.mp4 | 194.110.207.42 | 206 Partial Content | 9.7 MB |
URL GET HTTP/1.1varcdnx20xvx2-12.erea12.shop:82/d/nnr4obqgbgeyf3tkc4ozllqgod57vmxas2gz6mqr3qe5j2gzt2gqnigft224zydtxfybjoj4/Blonde.2022.1080p.NF.WEB-DL.MyCima.world.mp4 IP 194.110.207.42:82
Requested byhttps://wecima.show/run/4172d8226bd6336f599a3751a86edb90d1691c3946918da5609a1a59dd6c31ab745b679cdaf91142e56b3991f0bc6fdb7d48b5e4dc89198feca84c7f9e35c3869f205193b1a7c430ddbc7bfc3a5001b0c00e50ed9b5a7c964616a5bed37a8cf3df6a33/?Key=RNnPf0AjSM0oGnPgG2oVVg&Expires=1724460516 CertificateIssuerLet's Encrypt Subject*.erea12.shop Fingerprint91:54:26:A3:22:42:15:6B:3A:37:95:53:7C:A8:09:99:91:D1:A4:A3 ValidityTue, 20 Aug 2024 12:29:09 GMT - Mon, 18 Nov 2024 12:29:08 GMT
Size9.7 MB (9731700 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /d/nnr4obqgbgeyf3tkc4ozllqgod57vmxas2gz6mqr3qe5j2gzt2gqnigft224zydtxfybjoj4/Blonde.2022.1080p.NF.WEB-DL.MyCima.world.mp4 HTTP/1.1
Host: varcdnx20xvx2-12.erea12.shop:82
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br, identity
Range: bytes=0-
Referer: https://wecima.show/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 206 Partial Content
Server: nginx
Date: Fri, 23 Aug 2024 22:42:22 GMT
Content-Type: application/octet-stream
Content-Length: 2192379238
Last-Modified: Mon, 20 Mar 2023 13:50:42 GMT
Connection: close
Content-Disposition: attachment
ETag: "641864b2-82ad0d66"
Content-Range: bytes 0-2192379237/2192379238
|
|
| wecima.show/wp-content/themes/Mycima2021/components/packs/%23footer/js/jquery-3.4.1.min.js?ver=6.4.3 | 172.67.194.252 | 200 OK | 88 kB |
URL GET HTTP/3wecima.show/wp-content/themes/Mycima2021/components/packs/%23footer/js/jquery-3.4.1.min.js?ver=6.4.3 IP 172.67.194.252:443
Requested byhttps://wecima.show/watch/%D9%81%D9%8A%D9%84%D9%85-blonde-2022-%D9%85%D8%AA%D8%B1%D8%AC%D9%85-3/ CertificateIssuerGoogle Trust Services Subjectwecima.show FingerprintE9:02:58:60:9F:6E:2E:E5:E5:7E:4C:AA:6E:AF:5F:66:8D:ED:2B:23 ValiditySat, 03 Aug 2024 02:58:47 GMT - Fri, 01 Nov 2024 02:58:46 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Hashb4999cbb6a73a9b312f635cff75e5a53 c7b683fc72d06eac129185c3e60362f5c1adc2a8 736173659d4431b8a53a08aacc1bec3ad3a2f44df5209c09d76c265374698302
GET /wp-content/themes/Mycima2021/components/packs/%23footer/js/jquery-3.4.1.min.js?ver=6.4.3 HTTP/1.1
Host: wecima.show
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://wecima.show/watch/%D9%81%D9%8A%D9%84%D9%85-blonde-2022-%D9%85%D8%AA%D8%B1%D8%AC%D9%85-3/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 23 Aug 2024 22:49:25 GMT
content-type: application/javascript; charset=utf-8
last-modified: Sun, 22 Aug 2021 16:57:00 GMT
etag: W/"612281dc-157fb"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: HIT
age: 2984
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RlvvyZIJK1V9Vtd%2Bgj2iUriBgZfQKNS82KQCGNOhr6GgwlqxSiQ8uGp1g%2BbBjnuJMth1JSVwqd1Scc4NbI7g1h%2FxFHV%2Bwn8eYYVRHQehjlZD1%2BhGhmakN4V1d%2BEGUw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8b7ea7dc2fb056b4-OSL
alt-svc: h3=":443"; ma=86400
|
|
| site-assets.fontawesome.com/releases/v6.0.0/css/all.css | 172.64.147.188 | 200 OK | 466 kB |
URL GET HTTP/2site-assets.fontawesome.com/releases/v6.0.0/css/all.css IP 172.64.147.188:443
Requested byhttps://wecima.show/watch/%D9%81%D9%8A%D9%84%D9%85-blonde-2022-%D9%85%D8%AA%D8%B1%D8%AC%D9%85-3/ CertificateIssuerDigiCert Inc Subject*.fontawesome.com FingerprintB1:69:23:88:5E:EA:EA:76:BC:90:A2:CE:D9:3B:3F:5D:FE:5F:13:09 ValidityTue, 30 Jul 2024 00:00:00 GMT - Mon, 27 Jan 2025 23:59:59 GMT
File typeASCII text, with very long lines (65360) Size466 kB (465728 bytes) Hashc8ccf9786058107114b343d52efb40bc f690727a3f4aede7f2287320db4a07874381c10c 7ef19507353beb14a0415f80892c79742e8bd5072cfafd0e8806b12baeb7ef2d
GET /releases/v6.0.0/css/all.css HTTP/1.1
Host: site-assets.fontawesome.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://wecima.show/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 23 Aug 2024 22:49:25 GMT
content-type: text/css
x-amz-id-2: kMts6lFk375420qO3pr8/pgncg9KdJXO2mycrjfjiw9JKdxKdw7G+FRNrNX/EjNilTSOj1jW0LG9ktV5W0uoEQ==
x-amz-request-id: WXY6M1MVYE64C3HD
last-modified: Mon, 07 Feb 2022 20:23:49 GMT
etag: W/"c8ccf9786058107114b343d52efb40bc"
cache-control: max-age=31556926
cf-cache-status: HIT
age: 6175107
vary: Accept-Encoding
server: cloudflare
cf-ray: 8b7ea7e0ddd0b503-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| tgb4.top15top.shop/t2xn7c8w9xk2/Blonde.2022.1080p.NF.WEB-DL.MyCima.world.mp4.html?Key=evDHRwGX0Tlr_teDjFNOKg&Expires=1724463959 | 104.21.41.189 | 302 Found | 9.7 MB |
URL GET HTTP/2tgb4.top15top.shop/t2xn7c8w9xk2/Blonde.2022.1080p.NF.WEB-DL.MyCima.world.mp4.html?Key=evDHRwGX0Tlr_teDjFNOKg&Expires=1724463959 IP 104.21.41.189:443
Requested byhttps://wecima.show/run/4172d8226bd6336f599a3751a86edb90d1691c3946918da5609a1a59dd6c31ab745b679cdaf91142e56b3991f0bc6fdb7d48b5e4dc89198feca84c7f9e35c3869f205193b1a7c430ddbc7bfc3a5001b0c00e50ed9b5a7c964616a5bed37a8cf3df6a33/?Key=RNnPf0AjSM0oGnPgG2oVVg&Expires=1724460516 CertificateIssuerGoogle Trust Services Subjecttop15top.shop Fingerprint78:04:F0:0E:17:09:B3:40:57:10:CA:4C:AC:2B:E1:18:E6:D9:C3:88 ValidityFri, 09 Aug 2024 21:49:09 GMT - Thu, 07 Nov 2024 21:49:08 GMT
Size9.7 MB (9731700 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /t2xn7c8w9xk2/Blonde.2022.1080p.NF.WEB-DL.MyCima.world.mp4.html?Key=evDHRwGX0Tlr_teDjFNOKg&Expires=1724463959 HTTP/1.1
Host: tgb4.top15top.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
DNT: 1
Connection: keep-alive
Referer: https://wecima.show/
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Fri, 23 Aug 2024 22:49:27 GMT
content-length: 0
location: https://varcdnx20xvx2-12.erea12.shop:82/d/nnr4obqgbgeyf3tkc4ozllqgod57vmxas2gz6mqr3qe5j2gzt2gqnigft224zydtxfybjoj4/Blonde.2022.1080p.NF.WEB-DL.MyCima.world.mp4
set-cookie: lang=english; domain=.tgb4.top15top.shop; path=/
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=pjppbQDU7rdtP5JB9ylcyf3CCzjFL6cKSq3rTU9mu1pLlFlCraZm73vR9%2FCLNWd2KUm4YjCiIeDQEuZYNj9z0HNySRc%2BrCugWF%2B%2B%2BIyDW7ptDfvn2gFiV5cQtM3ZFUQLUmuRFlM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8b7ea7ecba6e56a2-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| wecima.show/watch/%D9%81%D9%8A%D9%84%D9%85-blonde-2022-%D9%85%D8%AA%D8%B1%D8%AC%D9%85-3/ | 172.67.194.252 | 200 OK | 341 kB |
URL User Request GET HTTP/2wecima.show/watch/%D9%81%D9%8A%D9%84%D9%85-blonde-2022-%D9%85%D8%AA%D8%B1%D8%AC%D9%85-3/ IP 172.67.194.252:443
CertificateIssuerGoogle Trust Services Subjectwecima.show FingerprintE9:02:58:60:9F:6E:2E:E5:E5:7E:4C:AA:6E:AF:5F:66:8D:ED:2B:23 ValiditySat, 03 Aug 2024 02:58:47 GMT - Fri, 01 Nov 2024 02:58:46 GMT
Size341 kB (341044 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /watch/%D9%81%D9%8A%D9%84%D9%85-blonde-2022-%D9%85%D8%AA%D8%B1%D8%AC%D9%85-3/ HTTP/1.1
Host: wecima.show
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 23 Aug 2024 22:49:24 GMT
content-type: text/html; charset=UTF-8
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4I9%2FvmCuKHeiiTx%2FhvGP1guTPjkXFS5F1O8ecl5ECQsy%2Bb%2BuO758E7oR38DEarDaIta1C2KJG%2FZBqyCIBKWTUtMXB3kEyFLcPG4FoJSJ8GscpEPY%2FfhZy5rRFslAug%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8b7ea7d90ac7b509-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| wecima.show/wp-content/themes/Mycima2021/components/packs/%23footer/js/setup.js?1399179826&ver=6.4.3 | 172.67.194.252 | 200 OK | 152 kB |
URL GET HTTP/3wecima.show/wp-content/themes/Mycima2021/components/packs/%23footer/js/setup.js?1399179826&ver=6.4.3 IP 172.67.194.252:443
Requested byhttps://wecima.show/watch/%D9%81%D9%8A%D9%84%D9%85-blonde-2022-%D9%85%D8%AA%D8%B1%D8%AC%D9%85-3/ CertificateIssuerGoogle Trust Services Subjectwecima.show FingerprintE9:02:58:60:9F:6E:2E:E5:E5:7E:4C:AA:6E:AF:5F:66:8D:ED:2B:23 ValiditySat, 03 Aug 2024 02:58:47 GMT - Fri, 01 Nov 2024 02:58:46 GMT
Size152 kB (152437 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /wp-content/themes/Mycima2021/components/packs/%23footer/js/setup.js?1399179826&ver=6.4.3 HTTP/1.1
Host: wecima.show
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://wecima.show/watch/%D9%81%D9%8A%D9%84%D9%85-blonde-2022-%D9%85%D8%AA%D8%B1%D8%AC%D9%85-3/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 23 Aug 2024 22:49:25 GMT
content-type: application/javascript; charset=utf-8
last-modified: Wed, 14 Aug 2024 00:44:14 GMT
etag: W/"66bbfdde-25375"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9jb9yjSy7Az338sbkY4Do3pNHAfKAoC84UyuIvp2MHX2lkKSF8gPVUszex07LFJxLN3TJlUklv0ZUZRCdkYK0BK7tHAyKsrZIn8o1rKZkCKK9O0KChO6Vn%2F9yK5TLw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8b7ea7dc2fb756b4-OSL
alt-svc: h3=":443"; ma=86400
|
|
| wecima.show/insights.php | 172.67.194.252 | 200 OK | 35 B |
IP 172.67.194.252:443
Requested byhttps://wecima.show/watch/%D9%81%D9%8A%D9%84%D9%85-blonde-2022-%D9%85%D8%AA%D8%B1%D8%AC%D9%85-3/ CertificateIssuerGoogle Trust Services Subjectwecima.show FingerprintE9:02:58:60:9F:6E:2E:E5:E5:7E:4C:AA:6E:AF:5F:66:8D:ED:2B:23 ValiditySat, 03 Aug 2024 02:58:47 GMT - Fri, 01 Nov 2024 02:58:46 GMT
File typetroff or preprocessor input, ASCII text, with no line terminators Hash6b652cac01878c3fd56eb6144f8ec758 2fb0dbad10a7c55b807ebc198e20ed61e8e1569f 95eff1092198a47f11a7261d5419945c9b7745f457589fc3c9f1cbac4cd5fe95
POST /insights.php HTTP/1.1
Host: wecima.show
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 12
Origin: https://wecima.show
DNT: 1
Connection: keep-alive
Referer: https://wecima.show/watch/%D9%81%D9%8A%D9%84%D9%85-blonde-2022-%D9%85%D8%AA%D8%B1%D8%AC%D9%85-3/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 23 Aug 2024 22:49:25 GMT
content-type: application/json
content-encoding: gzip
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Bz7J3P1n9MXukpLrqb4FMk%2B7FW8x7QUfIoKdXRnUwg6sERNDNTNgvA3Pm1XQbIOaHRkh3gEnddcjeve7CbjbE94eiiQVU96BJ6pF5n3lhUSRd7ImbRE6C5BHvt8WYw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8b7ea7defb9556b4-OSL
alt-svc: h3=":443"; ma=86400
|
|
| wecima.tube/wp-content/uploads/2023/02/wecima-favicon-1.png | 172.67.184.130 | 301 Moved Permanently | 5.5 kB |
URL GET HTTP/2wecima.tube/wp-content/uploads/2023/02/wecima-favicon-1.png IP 172.67.184.130:443
Requested byhttps://wecima.show/watch/%D9%81%D9%8A%D9%84%D9%85-blonde-2022-%D9%85%D8%AA%D8%B1%D8%AC%D9%85-3/ CertificateIssuerGoogle Trust Services Subjectwecima.tube FingerprintBC:BA:61:CC:36:E9:30:41:85:02:CA:8A:5B:0E:DC:83:ED:F4:DD:FD ValidityFri, 28 Jun 2024 02:18:53 GMT - Thu, 26 Sep 2024 02:18:52 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /wp-content/uploads/2023/02/wecima-favicon-1.png HTTP/1.1
Host: wecima.tube
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://wecima.show/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 301 Moved Permanently
date: Fri, 23 Aug 2024 22:49:25 GMT
content-type: text/html
location: https://wecima.show/wp-content/uploads/2023/02/wecima-favicon-1.png
cache-control: max-age=31536000
cf-cache-status: HIT
age: 94
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=yGmZyjvjWsBqs0Y9eL90gKWfojcEZNSDeL7SVYmsbmfi%2FMPGbnbpoyCtZtX9Q2YoBBIK%2FwuVcfL2JjX%2FBxy6kEPhwejrg6B6kGUvKpavZKSZq7y5HlsW1xYNn9iA%2Fw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8b7ea7e03c49b515-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| fonts.googleapis.com/css?family=Tajawal:500,800&subset=arabic | 216.58.207.234 | 200 OK | 2.5 kB |
URL GET HTTP/2fonts.googleapis.com/css?family=Tajawal:500,800&subset=arabic IP 216.58.207.234:443
Requested byhttps://wecima.show/run/4172d8226bd6336f599a3751a86edb90d1691c3946918da5609a1a59dd6c31ab745b679cdaf91142e56b3991f0bc6fdb7d48b5e4dc89198feca84c7f9e35c3869f205193b1a7c430ddbc7bfc3a5001b0c00e50ed9b5a7c964616a5bed37a8cf3df6a33/?Key=RNnPf0AjSM0oGnPgG2oVVg&Expires=1724460516 CertificateIssuerGoogle Trust Services Subjectupload.video.google.com FingerprintC4:3F:12:39:D2:EC:4C:2C:1C:0A:A6:18:8E:2A:97:2C:D8:C2:7E:AF ValidityTue, 30 Jul 2024 12:49:45 GMT - Tue, 22 Oct 2024 12:49:44 GMT
File typeASCII text, with very long lines (2490), with no line terminators Hashd266e99d5b8ef952d56e7be30dbcc447 65129b2d730622a40d84cb7cc19aa4a78e458800 97086504a6b107e479864f72417648abbee8acaacf01ede542e2e8dbd6bfc2ef
GET /css?family=Tajawal:500,800&subset=arabic HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://wecima.show/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 23 Aug 2024 22:49:27 GMT
date: Fri, 23 Aug 2024 22:49:27 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| wecima.show/wp-content/themes/Mycima2021/js/vidjs-2.js | 172.67.194.252 | 200 OK | 27 kB |
URL GET HTTP/3wecima.show/wp-content/themes/Mycima2021/js/vidjs-2.js IP 172.67.194.252:443
Requested byhttps://wecima.show/run/4172d8226bd6336f599a3751a86edb90d1691c3946918da5609a1a59dd6c31ab745b679cdaf91142e56b3991f0bc6fdb7d48b5e4dc89198feca84c7f9e35c3869f205193b1a7c430ddbc7bfc3a5001b0c00e50ed9b5a7c964616a5bed37a8cf3df6a33/?Key=RNnPf0AjSM0oGnPgG2oVVg&Expires=1724460516 CertificateIssuerGoogle Trust Services Subjectwecima.show FingerprintE9:02:58:60:9F:6E:2E:E5:E5:7E:4C:AA:6E:AF:5F:66:8D:ED:2B:23 ValiditySat, 03 Aug 2024 02:58:47 GMT - Fri, 01 Nov 2024 02:58:46 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /wp-content/themes/Mycima2021/js/vidjs-2.js HTTP/1.1
Host: wecima.show
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://wecima.show/run/4172d8226bd6336f599a3751a86edb90d1691c3946918da5609a1a59dd6c31ab745b679cdaf91142e56b3991f0bc6fdb7d48b5e4dc89198feca84c7f9e35c3869f205193b1a7c430ddbc7bfc3a5001b0c00e50ed9b5a7c964616a5bed37a8cf3df6a33/?Key=RNnPf0AjSM0oGnPgG2oVVg&Expires=1724460516
Cookie: _ga_6JHTFKY3P3=GS1.1.1724453365.1.0.1724453365.0.0.0; _ga=GA1.1.1114194072.1724453366
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 23 Aug 2024 22:49:26 GMT
content-type: application/javascript; charset=utf-8
last-modified: Tue, 06 Jun 2023 18:43:27 GMT
etag: W/"647f7e4f-6a93"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: HIT
age: 2733
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=evZ9c99kqTXwHjmpU1CrwlbjzrK6dzXMVxlQx%2FYGHObgDbpaB3TRAw%2BTzKFgL%2Braxokr%2BTJMcWsW1BrruJOBh%2FGS9%2BxXFT9lBdgGrJlZDaHfDcBvuGMVbQT0I2x8%2Bg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8b7ea7e58beb56b4-OSL
alt-svc: h3=":443"; ma=86400
|
|
| wecima.show/run/4172d8226bd6336f599a3751a86edb90d1691c3946918da5609a1a59dd6c31ab745b679cdaf91142e56b3991f0bc6fdb7d48b5e4dc89198feca84c7f9e35c3869f205193b1a7c430ddbc7bfc3a5001b0c00e50ed9b5a7c964616a5bed37a8cf3df6a33/?Key=RNnPf0AjSM0oGnPgG2oVVg&Expires=1724460516 | 172.67.194.252 | 200 OK | 1.1 MB |
URL GET HTTP/3wecima.show/run/4172d8226bd6336f599a3751a86edb90d1691c3946918da5609a1a59dd6c31ab745b679cdaf91142e56b3991f0bc6fdb7d48b5e4dc89198feca84c7f9e35c3869f205193b1a7c430ddbc7bfc3a5001b0c00e50ed9b5a7c964616a5bed37a8cf3df6a33/?Key=RNnPf0AjSM0oGnPgG2oVVg&Expires=1724460516 IP 172.67.194.252:443
Requested byhttps://wecima.show/watch/%D9%81%D9%8A%D9%84%D9%85-blonde-2022-%D9%85%D8%AA%D8%B1%D8%AC%D9%85-3/ CertificateIssuerGoogle Trust Services Subjectwecima.show FingerprintE9:02:58:60:9F:6E:2E:E5:E5:7E:4C:AA:6E:AF:5F:66:8D:ED:2B:23 ValiditySat, 03 Aug 2024 02:58:47 GMT - Fri, 01 Nov 2024 02:58:46 GMT
Size1.1 MB (1087846 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /run/4172d8226bd6336f599a3751a86edb90d1691c3946918da5609a1a59dd6c31ab745b679cdaf91142e56b3991f0bc6fdb7d48b5e4dc89198feca84c7f9e35c3869f205193b1a7c430ddbc7bfc3a5001b0c00e50ed9b5a7c964616a5bed37a8cf3df6a33/?Key=RNnPf0AjSM0oGnPgG2oVVg&Expires=1724460516 HTTP/1.1
Host: wecima.show
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://wecima.show/watch/%D9%81%D9%8A%D9%84%D9%85-blonde-2022-%D9%85%D8%AA%D8%B1%D8%AC%D9%85-3/
DNT: 1
Connection: keep-alive
Cookie: _ga_6JHTFKY3P3=GS1.1.1724453365.1.0.1724453365.0.0.0; _ga=GA1.1.1114194072.1724453366
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 23 Aug 2024 22:49:26 GMT
content-type: text/html; charset=UTF-8
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=URZJYaP6eYIAso78m7X%2FAjyGgHi2fub8bSAkV6yVLRcsoiHwAIXlrk7UIP825iET81yRSuxPpPyh5Rt5yKSNKzgF6OzTE9N%2By4uNTiUUEpwra7L8EOHdVnfSqRG8yg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8b7ea7e1cf1e56b4-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|