GET ts.yowdenfalcial.com/rDwQTpfoIlIeWcu/71505
200 OK 20 B URL GET HTTP/1.1 ts.yowdenfalcial.com/rDwQTpfoIlIeWcu/71505
IP
Requested by https://cdn.totalsportek.space/embed77/?event=stack.html&link=1&domain=&force=https://streambtw.com/iframe/ch6.php&ask=1736974800&lgt=3&noplayer=0
Certificate IssuerLet's Encrypt
Subjectts.yowdenfalcial.com
Fingerprint7D:09:A8:57:48:21:46:7A:81:9A:D9:C3:46:F6:23:DA:5D:29:ED:90
ValidityThu, 05 Dec 2024 14:30:28 GMT - Wed, 05 Mar 2025 14:30:27 GMT
File type gzip compressed data, from Unix
Hash 7029066c27ac6f5ef18d660d5741979a
46c6643f07aa7f6bfe7118de926b86defc5087c4
59869db34853933b239f1e2219cf7d431da006aa919635478511fabbfc8849d2
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /rDwQTpfoIlIeWcu/71505 HTTP/1.1
Host: ts.yowdenfalcial.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cdn.totalsportek.space/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 15 Jan 2025 20:04:34 GMT
Content-Type: application/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=20
Accept-ch: sec-ch-ua-platform-version,sec-ch-ua-model,sec-ch-ua-full-version,sec-ch-ua-full-version-list
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://cdn.totalsportek.space
Access-Control-Allow-Headers: content-type, megageocheckolololo, x-forwarded-for, x-requested-with, cache-control, pragma, expires
Access-Control-Max-Age: 600
Access-Control-Allow-Methods: GET, POST, OPTIONS
Set-Cookie: GL_UI4=eJw9jUtug0AQRPljJ4akJQ7gIxgUjL3MJivfAQ0zDZ4Ypq1mjJ3bZxIp2dUrPVV5nhcUL%2BAvyRrCm6hhe1R9s5dYojyUVVW%2BHSrZ151o%2BlJVTVnvYK3n1opuRBvBap4E29YuEWwGNMhatpIUZvDqrL%2FmYuhuIog7FkZlEE%2FOGDNIO6b7jFyEEBkxIaQfmrGnhzPEJzEEx72L2rjo7yCguQjzJ4hP2twe%2BSbx8jzx4Pk6CtsTT61WDuOBhULw32ElhcWB%2BAtShfPF0hWARtX%2B%2B7%2Bf8fizBonCRUuHZM%2FI38wATrY%3D; expires=Thu, 16-Jan-2025 20:04:34 GMT; Max-Age=86400; path=/; secure; SameSite=None
GL_GI10=eJwViE0KgzAUBvMeJVAqhY96AE%2BQamsXbmuXRReewGopgZBIEvtz%2B%2BpiBmaEEJwmYD0hqQpV5ao8qeJSgl7gpgUPFrJx%2FtP%2FQB6cn8HeYtcG47LazTYuf8BmbZDG%2Fmr0N%2BucmaN2NoAXtnX%2FMM%2FjrbuDJkng6FaHMRWgtzz8AV7hHdE%3D; expires=Thu, 16-Jan-2025 20:04:34 GMT; Max-Age=86400; path=/; secure; SameSite=None
Content-Encoding: gzip
Vary: Accept-Encoding
Strict-Transport-Security: max-age=1
X-Content-Type-Options: nosniff
GET qd.myosoteruins.com/rUdcK8qZZxyOOpBmq/77025
200 OK 20 B URL GET HTTP/1.1 qd.myosoteruins.com/rUdcK8qZZxyOOpBmq/77025
IP
Requested by https://cdn.totalsportek.space/embed77/?event=stack.html&link=1&domain=&force=https://streambtw.com/iframe/ch6.php&ask=1736974800&lgt=3&noplayer=0
Certificate IssuerLet's Encrypt
Subjectqd.myosoteruins.com
Fingerprint5D:05:70:C1:65:21:AB:59:D3:3A:94:F7:7E:AA:81:F9:4D:31:13:51
ValidityThu, 05 Dec 2024 14:26:41 GMT - Wed, 05 Mar 2025 14:26:40 GMT
File type gzip compressed data, from Unix
Hash 7029066c27ac6f5ef18d660d5741979a
46c6643f07aa7f6bfe7118de926b86defc5087c4
59869db34853933b239f1e2219cf7d431da006aa919635478511fabbfc8849d2
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /rUdcK8qZZxyOOpBmq/77025 HTTP/1.1
Host: qd.myosoteruins.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cdn.totalsportek.space/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 15 Jan 2025 20:04:34 GMT
Content-Type: application/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=20
Accept-ch: sec-ch-ua-platform-version,sec-ch-ua-model,sec-ch-ua-full-version,sec-ch-ua-full-version-list
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://cdn.totalsportek.space
Access-Control-Allow-Headers: content-type, megageocheckolololo, x-forwarded-for, x-requested-with, cache-control, pragma, expires
Access-Control-Max-Age: 600
Access-Control-Allow-Methods: GET, POST, OPTIONS
Set-Cookie: GL_UI4=eJw9jUtug0AQRPljJ4akJQ7gIxgUjL3MJivfAQ0zDZ4Ypq1mjJ3bZxIp2dUrPVV5nhcUL%2BAvyRrCm6hhe1R9s5dYojyUVVW%2BHSrZ151o%2BlJVTVnvYK3n1opuRBvBap4E29YuEWwGNMhatpIUZvDqrL%2FmYuhuIog7FkZlEE%2FOGDNIO6b7jFyEEBkxIaQfmrGnhzPEJzEEx72L2rjo7yCguQjzJ4hP2twe%2BSbx8jzx4Pk6CtsTT61WDuOBhULw32ElhcWB%2BAtShfPF0hWARtX%2B%2B7%2Bf8fizBonCRUuHZM%2FI38wATrY%3D; expires=Thu, 16-Jan-2025 20:04:34 GMT; Max-Age=86400; path=/; secure; SameSite=None
GL_GI10=eJwViE0KgzAUBvMeJVAqhY96AE%2BQamsXbmuXRReewGopgZBIEvtz%2B%2BpiBmaEEJwmYD0hqQpV5ao8qeJSgl7gpgUPFrJx%2FtP%2FQB6cn8HeYtcG47LazTYuf8BmbZDG%2Fmr0N%2BucmaN2NoAXtnX%2FMM%2FjrbuDJkng6FaHMRWgtzz8AV7hHdE%3D; expires=Thu, 16-Jan-2025 20:04:34 GMT; Max-Age=86400; path=/; secure; SameSite=None
Content-Encoding: gzip
Vary: Accept-Encoding
Strict-Transport-Security: max-age=1
X-Content-Type-Options: nosniff
GET cdn.totalsportek.space/embed77/?event=stack.html&link=1&domain=&force=https://streambtw.com/iframe/ch6.php&ask=1736974800&lgt=3&noplayer=0
200 OK 0 B URL User Request GET HTTP/2 cdn.totalsportek.space/embed77/?event=stack.html&link=1&domain=&force=https://streambtw.com/iframe/ch6.php&ask=1736974800&lgt=3&noplayer=0
IP
Certificate IssuerGoogle Trust Services
Subjecttotalsportek.space
Fingerprint0D:35:D1:41:A9:1D:E9:79:0F:B4:68:C8:BA:01:3C:70:8C:19:5A:84
ValidityTue, 31 Dec 2024 08:29:00 GMT - Mon, 31 Mar 2025 09:27:15 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
HEAD /embed77/?event=stack.html&link=1&domain=&force=https://streambtw.com/iframe/ch6.php&ask=1736974800&lgt=3&noplayer=0 HTTP/1.1
Host: cdn.totalsportek.space
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cdn.totalsportek.space/embed77/?event=stack.html&link=1&domain=&force=https://streambtw.com/iframe/ch6.php&ask=1736974800&lgt=3&noplayer=0
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 15 Jan 2025 20:04:34 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
cf-cache-status: DYNAMIC
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=NgYi8Ocp%2BkxxgCYX5fwEZQ%2F4oQ5yi5gwI8GHyvxCfRxcn%2Bk5cAGYZy%2B3dMOMyF6%2FcZUQhU5Vy99qnrdY6t63QiN%2Fbp1NGU8OjbCrTuPiGkLtJbAU2vNuIcH8UGHv9TH7grEd%2FG2tuovS"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 902879c6183eb4fd-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=14074&min_rtt=4148&rtt_var=8645&sent=13&recv=8&lost=0&retrans=0&sent_bytes=4175&recv_bytes=1332&delivery_rate=143167&cwnd=12000&unsent_bytes=0&cid=d221c151d98f6303&ts=531&x=1", cfExtPri, cfHdrFlush;dur=0
GET ptaixout.net/tag.min.js
200 OK 27 kB IP
Requested by https://cdn.totalsportek.space/embed77/?event=stack.html&link=1&domain=&force=https://streambtw.com/iframe/ch6.php&ask=1736974800&lgt=3&noplayer=0
Certificate IssuerLet's Encrypt
Subjectptaixout.net
FingerprintEE:B7:7A:A3:2E:F5:C1:DE:27:FC:A2:64:11:D8:AE:DF:54:E0:65:D4
ValidityWed, 13 Nov 2024 05:13:26 GMT - Tue, 11 Feb 2025 05:13:25 GMT
File type JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Hash ad52d5bb09d2068220fcdf07c91efad0
2088cdffd98a21c305a63c895eadbcbfd9c78487
463efaad6691975a46bf3a80cf8321ab36919995546fe987e17a2a9a5e9d04d9
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /tag.min.js HTTP/1.1
Host: ptaixout.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cdn.totalsportek.space/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 15 Jan 2025 20:04:35 GMT
content-type: text/javascript; charset=utf-8
content-length: 27356
content-encoding: br
x-trace-id: 08fc2ecef786a16c9a285c3ec77d3482
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
accept-ranges: bytes
last-modified: Wed, 15 Jan 2025 18:10:49 GMT
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace, favicon
access-control-max-age: 86400
pragma: no-cache
expires: Tue, 11 Jan 1994 10:00:00 GMT
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
GET www.googletagmanager.com/gtag/js?id=G-PQ1PJ56MMF
200 OK 112 kB URL GET HTTP/2 www.googletagmanager.com/gtag/js?id=G-PQ1PJ56MMF
IP
Requested by https://streambtw.com/iframe/ch6.php
Certificate IssuerGoogle Trust Services
Subject*.google-analytics.com
FingerprintBB:2E:7E:AD:26:E1:69:CA:59:9D:25:40:5F:20:4A:82:34:E8:D2:04
ValidityMon, 09 Dec 2024 08:36:18 GMT - Mon, 03 Mar 2025 08:36:17 GMT
File type JavaScript source, ASCII text, with very long lines (5960)
Size 112 kB (111815 bytes)
Hash 9e69ed7b81beb4b1a844372ef81e63cc
6557f468b847d99ff702c969a5b81d73f5480ad5
b9d3377da3d2300df3fad0c45f55fd68af8c99eacd34726475a9e5b1b33b0f22
GET /gtag/js?id=G-PQ1PJ56MMF HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://streambtw.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Wed, 15 Jan 2025 20:04:35 GMT
expires: Wed, 15 Jan 2025 20:04:35 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgcycc:838:0
cross-origin-opener-policy-report-only: same-origin; report-to=coop_reporting
report-to: {"group":"coop_reporting","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgcycc:838:0"}],}
server: Google Tag Manager
content-length: 111815
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET ptelsudsew.net/tag.min.js
200 OK 27 kB URL GET HTTP/2 ptelsudsew.net/tag.min.js
IP
Requested by https://streambtw.com/iframe/ch6.php
Certificate IssuerLet's Encrypt
Subjectptelsudsew.net
Fingerprint92:06:FF:0A:F3:47:94:18:6A:0F:B2:F6:AA:42:96:34:1B:FC:72:AA
ValiditySun, 12 Jan 2025 05:36:33 GMT - Sat, 12 Apr 2025 05:36:32 GMT
File type JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Hash ad52d5bb09d2068220fcdf07c91efad0
2088cdffd98a21c305a63c895eadbcbfd9c78487
463efaad6691975a46bf3a80cf8321ab36919995546fe987e17a2a9a5e9d04d9
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /tag.min.js HTTP/1.1
Host: ptelsudsew.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://streambtw.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 15 Jan 2025 20:04:37 GMT
content-type: text/javascript; charset=utf-8
content-length: 27356
content-encoding: br
x-trace-id: 18da08e9ad4912e79e7f9b96f0e2e408
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
accept-ranges: bytes
last-modified: Wed, 15 Jan 2025 18:10:49 GMT
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace, favicon
access-control-max-age: 86400
pragma: no-cache
expires: Tue, 11 Jan 1994 10:00:00 GMT
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
GET cdn.jsdelivr.net/npm/clappr@latest/dist/clappr.min.js
200 OK 145 kB URL GET HTTP/2 cdn.jsdelivr.net/npm/clappr@latest/dist/clappr.min.js
IP
Requested by https://streambtw.com/iframe/ch6.php
Certificate IssuerGlobalSign nv-sa
Subjectjsdelivr.net
Fingerprint6C:45:F5:9E:D3:37:60:0B:9C:A8:28:29:A4:E6:41:33:BB:2E:76:5C
ValidityTue, 30 Jul 2024 15:36:05 GMT - Sun, 31 Aug 2025 15:36:04 GMT
File type JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Size 145 kB (145133 bytes)
Hash f55c6c796275a41ce7d97bd160e648ff
936285f9c8c85a749a1ef8cfc4d5e84b7ea2bc89
db7ce4b1edd2c3701c3f2585f7cbd70857173195489a99703ab39de16fa45b6c
GET /npm/clappr@latest/dist/clappr.min.js HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://streambtw.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=604800, s-maxage=43200
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: application/javascript; charset=utf-8
x-jsd-version: 0.3.13
x-jsd-version-type: version
etag: W/"80319-k2KF+cjIWnSaHvjPxNXoS36ivIk"
content-encoding: br
accept-ranges: bytes
date: Wed, 15 Jan 2025 20:04:37 GMT
age: 18766
x-served-by: cache-fra-etou8220029-FRA, cache-hel1410022-HEL
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 145133
X-Firefox-Spdy: h2
GET ptaixout.net/5/6320745/?oo=1&aab=1
200 OK 12 kB URL GET HTTP/2 ptaixout.net/5/6320745/?oo=1&aab=1
IP
Requested by https://cdn.totalsportek.space/embed77/?event=stack.html&link=1&domain=&force=https://streambtw.com/iframe/ch6.php&ask=1736974800&lgt=3&noplayer=0
Certificate IssuerLet's Encrypt
Subjectptaixout.net
FingerprintEE:B7:7A:A3:2E:F5:C1:DE:27:FC:A2:64:11:D8:AE:DF:54:E0:65:D4
ValidityWed, 13 Nov 2024 05:13:26 GMT - Tue, 11 Feb 2025 05:13:25 GMT
File type gzip compressed data, max speed, from Unix
Hash 29fda8b1a2912835055781c50a4f747c
c38cf48ee49894567e861e437965fc81e410f47e
ba62f7b92f98b4c629835cb129a059b533ae4c4e4f08d3f5c6b0179b8a53a639
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /5/6320745/?oo=1&aab=1 HTTP/1.1
Host: ptaixout.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://cdn.totalsportek.space
DNT: 1
Connection: keep-alive
Referer: https://cdn.totalsportek.space/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 15 Jan 2025 20:04:35 GMT
content-type: application/json
x-trace-id: 6b009dd16def8032739d70d207b928a2
link: <https://my.rtmark.net>; rel="preconnect dns-prefetch"
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
access-control-allow-origin: https://cdn.totalsportek.space
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace, favicon
access-control-max-age: 86400
timing-allow-origin: *
set-cookie: OAID=0081527f7229446cfef17345f21e2a17; expires=Thu, 15 Jan 2026 20:04:35 GMT; path=/; secure; SameSite=None
oaidts=1736971475; expires=Thu, 15 Jan 2026 20:04:35 GMT; path=/; secure; SameSite=None
syncedCookie=; expires=Tue, 10 Nov 2009 23:00:00 GMT
pragma: no-cache, no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT, Mon, 26 Jul 1997 05:00:00 GMT
content-encoding: gzip
X-Firefox-Spdy: h2
HEAD streambtw.com/iframe/ch6.php
200 OK 0 B URL HEAD HTTP/3 streambtw.com/iframe/ch6.php
IP
Requested by https://streambtw.com/iframe/ch6.php
Certificate IssuerGoogle Trust Services
Subjectstreambtw.com
Fingerprint5A:65:C2:B5:FD:84:93:DB:C9:9D:3B:8B:D9:ED:14:58:7C:9E:DE:A8
ValiditySat, 23 Nov 2024 09:55:53 GMT - Fri, 21 Feb 2025 09:55:52 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
HEAD /iframe/ch6.php HTTP/1.1
Host: streambtw.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://streambtw.com/iframe/ch6.php
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 15 Jan 2025 20:04:44 GMT
content-type: text/html; charset=UTF-8
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=E5Gs2XHGRIKpVQkpCHgYXY1eCXElPicKnYl8rostm2YZOZYl9h93tDA2Duk9%2FhOWYJT4HUaW0WAn2M7%2FfwfukbEsiBG9FCfDxIPMJrO9c0YqpW3obiYqU4%2BXyGztZib0"}],"group":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-cache-status: DYNAMIC
content-encoding: br
cf-ray: 90287a03495b56aa-OSL
server: cloudflare
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
GET cdn.jsdelivr.net/npm/clappr@latest/dist/38861cba61c66739c1452c3a71e39852.ttf
200 OK 20 kB URL GET HTTP/3 cdn.jsdelivr.net/npm/clappr@latest/dist/38861cba61c66739c1452c3a71e39852.ttf
IP
Requested by https://streambtw.com/iframe/ch6.php
Certificate IssuerGlobalSign nv-sa
Subjectjsdelivr.net
Fingerprint6C:45:F5:9E:D3:37:60:0B:9C:A8:28:29:A4:E6:41:33:BB:2E:76:5C
ValidityTue, 30 Jul 2024 15:36:05 GMT - Sun, 31 Aug 2025 15:36:04 GMT
File type TrueType Font data, 18 tables, 1st "GDEF", 7 names, Microsoft, language 0x409, type 1 string, RobotoRegularVersion 2.001101; 2014Roboto-Regularhttp://www.apache.org/licenses/LICENSE-2.0
Hash 38861cba61c66739c1452c3a71e39852
4b1ef58e476b789c97521834abdf7a2fd66d6caf
967e5cecfbfbf64099c3c1232273482dd7436f05714266953c4d2c8ee9c28af5
GET /npm/clappr@latest/dist/38861cba61c66739c1452c3a71e39852.ttf HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://streambtw.com
DNT: 1
Connection: keep-alive
Referer: https://streambtw.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 19464
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=604800, s-maxage=43200
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: font/ttf
x-jsd-version: 0.3.13
x-jsd-version-type: version
etag: W/"7f8c-Sx71jkdreJyXUhg0q996L9ZtbK8"
content-encoding: br
accept-ranges: bytes
date: Wed, 15 Jan 2025 20:04:44 GMT
age: 15515
x-served-by: cache-fra-eddf8230027-FRA, cache-hel1410024-HEL
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
GET streambtw.com/cdn-cgi/challenge-platform/scripts/jsd/main.js
302 Found 0 B URL GET HTTP/3 streambtw.com/cdn-cgi/challenge-platform/scripts/jsd/main.js
IP
Requested by https://streambtw.com/iframe/ch6.php
Certificate IssuerGoogle Trust Services
Subjectstreambtw.com
Fingerprint5A:65:C2:B5:FD:84:93:DB:C9:9D:3B:8B:D9:ED:14:58:7C:9E:DE:A8
ValiditySat, 23 Nov 2024 09:55:53 GMT - Fri, 21 Feb 2025 09:55:52 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1
Host: streambtw.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 302 Found
date: Wed, 15 Jan 2025 20:04:44 GMT
content-length: 0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5y4x2FJEY2byYxga%2BfVMsyFJhGzkquz22ljRiXTDzJhIOJwhYxLu5vMBwg5Q1dQwWlt%2BwyapGgFPX4dFWKrW%2BIMrSivhO8WZ9%2FiA0jq5SPV%2FONPCa2LJqTLZeiNB8X%2Bi"}],"group":"cf-nel","max_age":604800}
location: /cdn-cgi/challenge-platform/h/b/scripts/jsd/e0c90b6a3ed1/main.js?
cache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=10800, public
access-control-allow-origin: *
cf-ray: 90287a05296656aa-OSL
server: cloudflare
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
GET pndax.love/script/ut.js?cb=1736971484969
200 OK 25 kB URL GET HTTP/2 pndax.love/script/ut.js?cb=1736971484969
IP
Requested by https://streambtw.com/iframe/ch6.php
Certificate IssuerGoogle Trust Services
Subjectpndax.love
Fingerprint41:64:E6:45:0A:52:65:D1:35:F1:C9:32:0F:F5:66:35:19:06:F1:B6
ValidityFri, 10 Jan 2025 02:03:13 GMT - Thu, 10 Apr 2025 03:00:16 GMT
File type JavaScript source, Unicode text, UTF-8 text, with very long lines (65493), with no line terminators
Hash 4afa2ac99f97331dc98263d49022a958
60bb7c7c45ff14e8df86ef9e0b9a7a55a7d2baca
a4beaec54247a9a3cb97821ecdb68d39cacdcdcc62ae872c13c2cca2d3d88e32
GET /script/ut.js?cb=1736971484969 HTTP/1.1
Host: pndax.love
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://streambtw.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 15 Jan 2025 20:04:45 GMT
content-type: text/javascript
x-goog-generation: 1733127707295818
x-goog-metageneration: 2
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 66473
x-goog-hash: crc32c=VBET1w==, md5=SvoqyZ+XMx3JgmPUkCKpWA==
x-goog-storage-class: MULTI_REGIONAL
access-control-allow-origin: *
x-guploader-uploadid: AFiumC4WFvuppx86DNaqI0RKRpwx1DI-f9KejUf0cMVbkaHqWLV9x2qnvnkNKX-VDndMwUQ
access-control-expose-headers: Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace
expires: Wed, 15 Jan 2025 20:25:59 GMT
cache-control: public, max-age=14400
age: 1506
last-modified: Mon, 02 Dec 2024 08:21:47 GMT
etag: W/"4afa2ac99f97331dc98263d49022a958"
alt-svc: h3=":443"; ma=86400
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=aEnBJ2lePf69mNF1j7TphpWVl50mMJdFP2JyErZxYUJmMM1kLqNSw916Kqt%2F5lIGV9X3XadmP6XqFr4ysQF%2B%2BADK7%2BOHmRZgdMqPULBceMXLA3sQ6yEUAr2TpoRh"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 90287a057aa50b45-OSL
content-encoding: br
server-timing: cfL4;desc="?proto=TCP&rtt=638&min_rtt=576&rtt_var=155&sent=7&recv=10&lost=0&retrans=0&sent_bytes=3197&recv_bytes=1067&delivery_rate=6067039&cwnd=254&unsent_bytes=0&cid=6c908e921c1f301f&ts=33&x=0"
X-Firefox-Spdy: h2
POST streambtw.com/cdn-cgi/rum?
204 No Content 0 B URL POST HTTP/3 streambtw.com/cdn-cgi/rum?
IP
Requested by https://streambtw.com/iframe/ch6.php
Certificate IssuerGoogle Trust Services
Subjectstreambtw.com
Fingerprint5A:65:C2:B5:FD:84:93:DB:C9:9D:3B:8B:D9:ED:14:58:7C:9E:DE:A8
ValiditySat, 23 Nov 2024 09:55:53 GMT - Fri, 21 Feb 2025 09:55:52 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /cdn-cgi/rum? HTTP/1.1
Host: streambtw.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
content-type: application/json
Content-Length: 1077
Origin: https://streambtw.com
DNT: 1
Connection: keep-alive
Referer: https://streambtw.com/iframe/ch6.php
Cookie: cf_clearance=VdYaxsixr0xEHUYURp3QEWiuLZnXhQrzeuAjpW5CQr0-1736971485-1.2.1.1-ppPpVxM_8IbXGvXgW_VimqgEymwaW_J0yB2qD8JAfrTFjRAYdfQfzNL9e8xYYZNz1IjCarBUqZp8BkVq5DV_OK5HjACEAGjKmUrvZwslclQEpiGvaRnI92xgqrJQDMUkpy9ZgNJlqO1KxL4BAqPga1EkEjJWSFy46thi954FA1QyFMhL5m3z6IaODr6N5Fhlk3UTm2.Qk1bJFYGl.1ZEsVrUovDibbgNZzxrucW6CQMCIYwkDTdg_lqUrt_Oa6wJd4bSlgbyEseDHnGfj5KPvDlUenRHkyPelAWLkJpmT00
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 204 No Content
date: Wed, 15 Jan 2025 20:04:45 GMT
x-content-type-options: nosniff
access-control-allow-origin: https://streambtw.com
access-control-allow-methods: POST,OPTIONS
access-control-max-age: 86400
vary: Origin
access-control-allow-credentials: true
server: cloudflare
cf-ray: 90287a07596c56aa-OSL
x-frame-options: DENY
POST streambtw.com/cdn-cgi/rum?
204 No Content 0 B URL POST HTTP/3 streambtw.com/cdn-cgi/rum?
IP
Requested by https://streambtw.com/iframe/ch6.php
Certificate IssuerGoogle Trust Services
Subjectstreambtw.com
Fingerprint5A:65:C2:B5:FD:84:93:DB:C9:9D:3B:8B:D9:ED:14:58:7C:9E:DE:A8
ValiditySat, 23 Nov 2024 09:55:53 GMT - Fri, 21 Feb 2025 09:55:52 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /cdn-cgi/rum? HTTP/1.1
Host: streambtw.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 512
Origin: https://streambtw.com
DNT: 1
Connection: keep-alive
Referer: https://streambtw.com/iframe/ch6.php
Cookie: cf_clearance=VdYaxsixr0xEHUYURp3QEWiuLZnXhQrzeuAjpW5CQr0-1736971485-1.2.1.1-ppPpVxM_8IbXGvXgW_VimqgEymwaW_J0yB2qD8JAfrTFjRAYdfQfzNL9e8xYYZNz1IjCarBUqZp8BkVq5DV_OK5HjACEAGjKmUrvZwslclQEpiGvaRnI92xgqrJQDMUkpy9ZgNJlqO1KxL4BAqPga1EkEjJWSFy46thi954FA1QyFMhL5m3z6IaODr6N5Fhlk3UTm2.Qk1bJFYGl.1ZEsVrUovDibbgNZzxrucW6CQMCIYwkDTdg_lqUrt_Oa6wJd4bSlgbyEseDHnGfj5KPvDlUenRHkyPelAWLkJpmT00
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/3 204 No Content
date: Wed, 15 Jan 2025 20:04:58 GMT
x-content-type-options: nosniff
access-control-allow-origin: https://streambtw.com
access-control-allow-methods: POST,OPTIONS
access-control-max-age: 86400
vary: Origin
access-control-allow-credentials: true
server: cloudflare
cf-ray: 90287a58daf456aa-OSL
x-frame-options: DENY
POST streambtw.com/cdn-cgi/challenge-platform/h/b/jsd/r/902879c5986e5684
200 OK 0 B URL POST HTTP/3 streambtw.com/cdn-cgi/challenge-platform/h/b/jsd/r/902879c5986e5684
IP
Requested by https://streambtw.com/iframe/ch6.php
Certificate IssuerGoogle Trust Services
Subjectstreambtw.com
Fingerprint5A:65:C2:B5:FD:84:93:DB:C9:9D:3B:8B:D9:ED:14:58:7C:9E:DE:A8
ValiditySat, 23 Nov 2024 09:55:53 GMT - Fri, 21 Feb 2025 09:55:52 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /cdn-cgi/challenge-platform/h/b/jsd/r/902879c5986e5684 HTTP/1.1
Host: streambtw.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 12150
Origin: https://streambtw.com
DNT: 1
Connection: keep-alive
Referer: https://streambtw.com/iframe/ch6.php
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 15 Jan 2025 20:04:45 GMT
content-type: text/plain; charset=UTF-8
content-length: 0
set-cookie: cf_clearance=; Path=/; Expires=Thu, 01-Jan-70 00:00:00 GMT; Domain=.streambtw.com; Priority=High; HttpOnly; Secure; SameSite=None
cf_clearance=VdYaxsixr0xEHUYURp3QEWiuLZnXhQrzeuAjpW5CQr0-1736971485-1.2.1.1-ppPpVxM_8IbXGvXgW_VimqgEymwaW_J0yB2qD8JAfrTFjRAYdfQfzNL9e8xYYZNz1IjCarBUqZp8BkVq5DV_OK5HjACEAGjKmUrvZwslclQEpiGvaRnI92xgqrJQDMUkpy9ZgNJlqO1KxL4BAqPga1EkEjJWSFy46thi954FA1QyFMhL5m3z6IaODr6N5Fhlk3UTm2.Qk1bJFYGl.1ZEsVrUovDibbgNZzxrucW6CQMCIYwkDTdg_lqUrt_Oa6wJd4bSlgbyEseDHnGfj5KPvDlUenRHkyPelAWLkJpmT00; Path=/; Expires=Thu, 15-Jan-26 20:04:45 GMT; Domain=.streambtw.com; Priority=High; HttpOnly; Secure; SameSite=None; Partitioned
cf-ray: 90287a06f96a56aa-OSL
server: cloudflare
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ZEdMYfptg2iUs%2BmJBEKt%2F2MyhhPuqO%2FpX0%2F3Wm4rn8kdTlA3Wcmqwll9xpjhzs9PltIoCcsGUh%2FHR2rObKvsQfH9RSd%2BLNIFlG0ZciD6Rqo8lLllTleJlGXIrcbvUugl"}],"group":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
GET my.rtmark.net/gid.js?userId=0081525958fd4f90fb0df62a46cf7743
200 OK 65 B URL GET HTTP/3 my.rtmark.net/gid.js?userId=0081525958fd4f90fb0df62a46cf7743
IP
Requested by https://streambtw.com/iframe/ch6.php
Certificate IssuerGoogle Trust Services
Subjectmy.rtmark.net
Fingerprint56:7F:53:10:57:2F:C3:F4:06:8B:DB:2F:C1:F7:6A:1D:68:59:14:3F
ValiditySat, 04 Jan 2025 10:02:11 GMT - Fri, 04 Apr 2025 11:00:33 GMT
File type troff or preprocessor input, ASCII text, with no line terminators
Hash 2bafca23b0103dc5410d17b6e888df24
60ace1ea305e4d58df7f6bc9f38e3ff8ae454e13
f819b11551c48b707fc333f5292d2b885e8ec7865099cf885c01f410fe93b8cc
GET /gid.js?userId=0081525958fd4f90fb0df62a46cf7743 HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://streambtw.com
DNT: 1
Connection: keep-alive
Referer: https://streambtw.com/
Cookie: ID=0081527f7229446cfef17345f21e2a17
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 15 Jan 2025 20:04:45 GMT
content-type: application/json; charset=utf-8
access-control-allow-origin: https://streambtw.com
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
timing-allow-origin: *, *
set-cookie: ID=0081527f7229446cfef17345f21e2a17; expires=Thu, 15 Jan 2026 20:04:45 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
priority: u=3,i=?0
server: cloudflare
cf-ray: 90287a073a400b3d-OSL
content-encoding: gzip
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
GET my.rtmark.net/gid.js?userId=0081527f7229446cfef17345f21e2a17
200 OK 65 B URL GET HTTP/2 my.rtmark.net/gid.js?userId=0081527f7229446cfef17345f21e2a17
IP
Requested by https://cdn.totalsportek.space/embed77/?event=stack.html&link=1&domain=&force=https://streambtw.com/iframe/ch6.php&ask=1736974800&lgt=3&noplayer=0
Certificate IssuerGoogle Trust Services
Subjectmy.rtmark.net
Fingerprint56:7F:53:10:57:2F:C3:F4:06:8B:DB:2F:C1:F7:6A:1D:68:59:14:3F
ValiditySat, 04 Jan 2025 10:02:11 GMT - Fri, 04 Apr 2025 11:00:33 GMT
File type troff or preprocessor input, ASCII text, with no line terminators
Hash 2bafca23b0103dc5410d17b6e888df24
60ace1ea305e4d58df7f6bc9f38e3ff8ae454e13
f819b11551c48b707fc333f5292d2b885e8ec7865099cf885c01f410fe93b8cc
GET /gid.js?userId=0081527f7229446cfef17345f21e2a17 HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://cdn.totalsportek.space
DNT: 1
Connection: keep-alive
Referer: https://cdn.totalsportek.space/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 15 Jan 2025 20:04:35 GMT
content-type: application/json; charset=utf-8
access-control-allow-origin: https://cdn.totalsportek.space
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
timing-allow-origin: *, *
set-cookie: ID=0081527f7229446cfef17345f21e2a17; expires=Thu, 15 Jan 2026 20:04:35 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 902879c89e370b69-OSL
content-encoding: gzip
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015
200 OK 20 kB URL GET HTTP/2 static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015
IP
Requested by https://streambtw.com/iframe/ch6.php
Certificate IssuerGoogle Trust Services
Subjectcloudflareinsights.com
Fingerprint68:D3:62:56:06:F9:32:39:3B:2D:19:7E:B1:45:4B:2C:76:5F:73:C6
ValidityMon, 30 Dec 2024 10:58:15 GMT - Sun, 30 Mar 2025 11:58:10 GMT
File type JavaScript source, ASCII text, with very long lines (19948), with no line terminators
Hash ec18af6d41f6f278b6aed3bdabffa7bc
62c9e2cab76b888829f3c5335e91c320b22329ae
8a18d13015336bc184819a5a768447462202ef3105ec511bf42ed8304a7ed94f
GET /beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015 HTTP/1.1
Host: static.cloudflareinsights.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://streambtw.com
DNT: 1
Connection: keep-alive
Referer: https://streambtw.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 15 Jan 2025 20:04:37 GMT
content-type: text/javascript;charset=UTF-8
access-control-allow-origin: *
cache-control: public, max-age=86400
etag: W/"2024.6.1"
last-modified: Thu, 06 Jun 2024 15:52:56 GMT
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
server: cloudflare
cf-ray: 902879d84fb20b45-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
GET streambtw.com/cdn-cgi/challenge-platform/h/b/scripts/jsd/e0c90b6a3ed1/main.js?
200 OK 8.7 kB URL GET HTTP/3 streambtw.com/cdn-cgi/challenge-platform/h/b/scripts/jsd/e0c90b6a3ed1/main.js?
IP
Requested by https://streambtw.com/iframe/ch6.php
Certificate IssuerGoogle Trust Services
Subjectstreambtw.com
Fingerprint5A:65:C2:B5:FD:84:93:DB:C9:9D:3B:8B:D9:ED:14:58:7C:9E:DE:A8
ValiditySat, 23 Nov 2024 09:55:53 GMT - Fri, 21 Feb 2025 09:55:52 GMT
File type JavaScript source, ASCII text, with very long lines (8699), with no line terminators
Hash 002197df3c2d1d9e43a75afc6ec8ca00
7e5bae3caba852c9606fedf4ee435f1f126fa8fd
8b31f9b588ef80ec930f3bd97d766f06b7d456738f6324ec6fa38914eb6e9e43
GET /cdn-cgi/challenge-platform/h/b/scripts/jsd/e0c90b6a3ed1/main.js? HTTP/1.1
Host: streambtw.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 15 Jan 2025 20:04:45 GMT
content-type: application/javascript; charset=UTF-8
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2HuBvl6TQEf4TEn6SUHcpu6mFliQofQgEArkYgxHYCm18w02hgmh%2B4sZ3xNkGsuD6sllGJttEABzIkKziZMp4GO1YexcHXMPc%2FEqBNdWP%2BRsRLeNpZgcKAKmt0eaFRre"}],"group":"cf-nel","max_age":604800}
cache-control: max-age=14400, stale-if-error=10800, stale-while-revalidate=10800, public
x-content-type-options: nosniff
content-encoding: br
cf-ray: 90287a05d96856aa-OSL
server: cloudflare
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
GET cdn.totalsportek.space/favicon.ico
404 Not Found 555 B URL GET HTTP/3 cdn.totalsportek.space/favicon.ico
IP
Requested by https://cdn.totalsportek.space/embed77/?event=stack.html&link=1&domain=&force=https://streambtw.com/iframe/ch6.php&ask=1736974800&lgt=3&noplayer=0
Certificate IssuerGoogle Trust Services
Subjecttotalsportek.space
Fingerprint0D:35:D1:41:A9:1D:E9:79:0F:B4:68:C8:BA:01:3C:70:8C:19:5A:84
ValidityTue, 31 Dec 2024 08:29:00 GMT - Mon, 31 Mar 2025 09:27:15 GMT
File type HTML document, ASCII text, with very long lines (581), with no line terminators
Hash e9e4f9c9480bb14ad8343f37e3fb9b99
628fcbc6080fd3e684d1def2e5f67e98133ffa3b
85e4b614933e56b4531289e0bc3d2665db1f2b9d04d2c756a4a72b867c059594
GET /favicon.ico HTTP/1.1
Host: cdn.totalsportek.space
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cdn.totalsportek.space/embed77/?event=stack.html&link=1&domain=&force=https://streambtw.com/iframe/ch6.php&ask=1736974800&lgt=3&noplayer=0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
date: Wed, 15 Jan 2025 20:04:35 GMT
content-type: text/html
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 51
priority: u=6,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=KyRBzPPEazCSg4H20RE4DkxTq82IUEy5ZnWNTn626ZI40wXkYHseC9IC839AAw%2Fkvm9Y22DXxe6MC9rFLDKFAJjr1hJqARGIOY1EWS%2B6iiYvMIWmLwHco02vAlBffpWu8HSiSuYBgdyK"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 902879c7dab6b4fd-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=15006&min_rtt=4148&rtt_var=8348&sent=15&recv=10&lost=0&retrans=0&sent_bytes=4907&recv_bytes=1740&delivery_rate=1336&cwnd=12000&unsent_bytes=0&cid=d221c151d98f6303&ts=785&x=1", cfExtPri, cfHdrFlush;dur=0
GET youradexchange.com/script/suurl5.php?r=7102142&cbur=0.45231298994275515&cbiframe=1&cbWidth=1100&cbHeight=619&cbtitle=&cbpage=https%3A%2F%2Fcdn.totalsportek.space%2F&cbref=&cbdescription=&cbkeywords=&cbcdn=pndax.love&ufp=Linux%20x86_64%2FMozilla%2FNetscape%2Ftrue%2Ffalse%2F1280x10240en-USunknown4824%20bits&ts=1736971484621&srs=e9baeb3baaf9134fb6b87e253da31769&atv=56.0&abtg=1&adbv=3-cdn-js
200 OK 910 B URL GET HTTP/2 youradexchange.com/script/suurl5.php?r=7102142&cbur=0.45231298994275515&cbiframe=1&cbWidth=1100&cbHeight=619&cbtitle=&cbpage=https%3A%2F%2Fcdn.totalsportek.space%2F&cbref=&cbdescription=&cbkeywords=&cbcdn=pndax.love&ufp=Linux%20x86_64%2FMozilla%2FNetscape%2Ftrue%2Ffalse%2F1280x10240en-USunknown4824%20bits&ts=1736971484621&srs=e9baeb3baaf9134fb6b87e253da31769&atv=56.0&abtg=1&adbv=3-cdn-js
IP
Requested by https://streambtw.com/iframe/ch6.php
Certificate IssuerGoogle Trust Services
Subjectyouradexchange.com
Fingerprint8B:14:37:06:AD:3B:34:24:D2:1C:2E:8F:85:18:45:17:CE:7A:8F:77
ValidityFri, 06 Dec 2024 14:16:45 GMT - Thu, 06 Mar 2025 14:16:44 GMT
File type troff or preprocessor input, ASCII text, with very long lines (939), with no line terminators
Hash 052d8b77da7d2fab837cc84ae2b3eed6
0de13605f315dc5baf506276d3ac02da4824e678
7538ce164d410d941a9fbf1438a442395ed410986961b18fa7b0ccf21570cf4b
GET /script/suurl5.php?r=7102142&cbur=0.45231298994275515&cbiframe=1&cbWidth=1100&cbHeight=619&cbtitle=&cbpage=https%3A%2F%2Fcdn.totalsportek.space%2F&cbref=&cbdescription=&cbkeywords=&cbcdn=pndax.love&ufp=Linux%20x86_64%2FMozilla%2FNetscape%2Ftrue%2Ffalse%2F1280x10240en-USunknown4824%20bits&ts=1736971484621&srs=e9baeb3baaf9134fb6b87e253da31769&atv=56.0&abtg=1&adbv=3-cdn-js HTTP/1.1
Host: youradexchange.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://streambtw.com/
Origin: https://streambtw.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 15 Jan 2025 20:04:44 GMT
content-type: application/json; charset=utf-8
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Content-Type
content-encoding: gzip
via: 1.1 google
cf-cache-status: DYNAMIC
vary: accept-encoding
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zqXMTCZM75OwJlmbyDPpNQWfxL6%2FDI0MLFQZEHjS3a938ndmdBtMWCsy0DzI7gS2Oq%2BTGDwmbd5h5Nbefl6pqCFx8OPHNYtEbi5b5gdKzzv%2Fb6IJTAjM0BCjpbVRNaCMEV8TZBI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 90287a031ee856c4-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=528&min_rtt=468&rtt_var=139&sent=7&recv=10&lost=0&retrans=0&sent_bytes=3295&recv_bytes=1474&delivery_rate=6552036&cwnd=254&unsent_bytes=0&cid=aa4ee56952d5727f&ts=223&x=0"
X-Firefox-Spdy: h2
GET doanaudabu.net/?rb=dOHWZS0bO6xITrbJ6ytHmw1hKext2UpEdTtBlpshyli071v4mfiH-47YdW8GXuuSGoS8e7_tNCxCe9hj26fde3zKfAIXk4mt0ZGFNpO5-FCW7kU-jXxRMlhiM-YSywfGJFlTS8hWM8D0LrPeva7SqNxj8HjOWyXWWAw34adaz70ZbsJQyqe5QgollJGr2VEjPj_FV2Et8HR3o7zycJ89TfdgBmVzs868cbamMy0MV9bCr8H-_PO4VunhBrRkKj0InM1TV3jg1gCQo4GRRGYDmWZ3QUU%3D&request_ab2=0&zoneid=6869446&js_build=iclick-v1.1039.0&jsp=1&fs=0&cf=0&sw=1280&sh=1024&wih=619&wiw=1100&ww=1280&wh=1024&sah=1024&wx=0&wy=0&cw=1100&wfc=3&pl=https%3A%2F%2Fstreambtw.com%2Fiframe%2Fch6.php&drf=https%3A%2F%2Fcdn.totalsportek.space%2F&np=1&pt=0&nb=1&ng=0&ix=1&nw=1&tb=false&btz=UTC&bto=0&tt=3&wgl=&js_build=iclick-v1.1039.0&navlng=en-US&vsbl=true&pnt=0&pnrc=0&bs=681ab9bb-b556-490e-9024-06328fa3930a&wasm=1&userId=0081527f7229446cfef17345f21e2a17&m=link
200 OK 2.3 kB URL GET HTTP/2 doanaudabu.net/?rb=dOHWZS0bO6xITrbJ6ytHmw1hKext2UpEdTtBlpshyli071v4mfiH-47YdW8GXuuSGoS8e7_tNCxCe9hj26fde3zKfAIXk4mt0ZGFNpO5-FCW7kU-jXxRMlhiM-YSywfGJFlTS8hWM8D0LrPeva7SqNxj8HjOWyXWWAw34adaz70ZbsJQyqe5QgollJGr2VEjPj_FV2Et8HR3o7zycJ89TfdgBmVzs868cbamMy0MV9bCr8H-_PO4VunhBrRkKj0InM1TV3jg1gCQo4GRRGYDmWZ3QUU%3D&request_ab2=0&zoneid=6869446&js_build=iclick-v1.1039.0&jsp=1&fs=0&cf=0&sw=1280&sh=1024&wih=619&wiw=1100&ww=1280&wh=1024&sah=1024&wx=0&wy=0&cw=1100&wfc=3&pl=https%3A%2F%2Fstreambtw.com%2Fiframe%2Fch6.php&drf=https%3A%2F%2Fcdn.totalsportek.space%2F&np=1&pt=0&nb=1&ng=0&ix=1&nw=1&tb=false&btz=UTC&bto=0&tt=3&wgl=&js_build=iclick-v1.1039.0&navlng=en-US&vsbl=true&pnt=0&pnrc=0&bs=681ab9bb-b556-490e-9024-06328fa3930a&wasm=1&userId=0081527f7229446cfef17345f21e2a17&m=link
IP
Requested by https://streambtw.com/iframe/ch6.php
Certificate IssuerLet's Encrypt
Subjectdoanaudabu.net
Fingerprint1B:0F:F1:E3:1C:B1:36:D1:8B:FB:04:EC:8F:DA:FD:51:EE:E1:4B:E3
ValidityThu, 14 Nov 2024 02:46:14 GMT - Wed, 12 Feb 2025 02:46:13 GMT
File type troff or preprocessor input, ASCII text, with very long lines (2284), with no line terminators
Hash 2e808ae8ec572dfa04b34ff433fafcdc
1424f1bb8fe7583316cc623747ecabf9e866d407
902e8f8e20f804e554d4df9b02520432a126bd9e996f2e65bae8d6d3e050e143
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /?rb=dOHWZS0bO6xITrbJ6ytHmw1hKext2UpEdTtBlpshyli071v4mfiH-47YdW8GXuuSGoS8e7_tNCxCe9hj26fde3zKfAIXk4mt0ZGFNpO5-FCW7kU-jXxRMlhiM-YSywfGJFlTS8hWM8D0LrPeva7SqNxj8HjOWyXWWAw34adaz70ZbsJQyqe5QgollJGr2VEjPj_FV2Et8HR3o7zycJ89TfdgBmVzs868cbamMy0MV9bCr8H-_PO4VunhBrRkKj0InM1TV3jg1gCQo4GRRGYDmWZ3QUU%3D&request_ab2=0&zoneid=6869446&js_build=iclick-v1.1039.0&jsp=1&fs=0&cf=0&sw=1280&sh=1024&wih=619&wiw=1100&ww=1280&wh=1024&sah=1024&wx=0&wy=0&cw=1100&wfc=3&pl=https%3A%2F%2Fstreambtw.com%2Fiframe%2Fch6.php&drf=https%3A%2F%2Fcdn.totalsportek.space%2F&np=1&pt=0&nb=1&ng=0&ix=1&nw=1&tb=false&btz=UTC&bto=0&tt=3&wgl=&js_build=iclick-v1.1039.0&navlng=en-US&vsbl=true&pnt=0&pnrc=0&bs=681ab9bb-b556-490e-9024-06328fa3930a&wasm=1&userId=0081527f7229446cfef17345f21e2a17&m=link HTTP/1.1
Host: doanaudabu.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://streambtw.com/
Origin: https://streambtw.com
DNT: 1
Connection: keep-alive
Cookie: OAID=0081525958fd4f90fb0df62a46cf7743; oaidts=1736971485
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 15 Jan 2025 20:04:45 GMT
content-type: application/json
x-trace-id: 21bcc1f74a6f843eaa9586c19df87a46
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
access-control-allow-origin: https://streambtw.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace, favicon
access-control-max-age: 86400
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
set-cookie: OAID=0081527f7229446cfef17345f21e2a17; expires=Thu, 15 Jan 2026 20:04:45 GMT; path=/; secure; SameSite=None
oaidts=1736971485; expires=Thu, 15 Jan 2026 20:04:45 GMT; path=/; secure; SameSite=None
syncedCookie=true; expires=Wed, 22 Jan 2025 20:04:45 GMT; path=/; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
content-encoding: gzip
X-Firefox-Spdy: h2
GET streambtw.com/js/aclib.js
200 OK 173 kB URL GET HTTP/3 streambtw.com/js/aclib.js
IP
Requested by https://streambtw.com/iframe/ch6.php
Certificate IssuerGoogle Trust Services
Subjectstreambtw.com
Fingerprint5A:65:C2:B5:FD:84:93:DB:C9:9D:3B:8B:D9:ED:14:58:7C:9E:DE:A8
ValiditySat, 23 Nov 2024 09:55:53 GMT - Fri, 21 Feb 2025 09:55:52 GMT
Size 173 kB (172869 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /js/aclib.js HTTP/1.1
Host: streambtw.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://streambtw.com/iframe/ch6.php
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 15 Jan 2025 20:04:35 GMT
content-type: application/javascript; charset=utf-8
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ODc%2B8hFoBIZTbxTV6x1CeqN1Rmj791bScXzgphycFrJBA4PO6WirNIHORjJXefCmgPJT2CexQI%2FSfVeBCkNGNrcgF%2FAeAgZrM0hlSgFd4HtgIxTQkEDGp%2BPnl718peqW"}],"group":"cf-nel","max_age":604800}
last-modified: Sat, 21 Dec 2024 06:54:50 GMT
vary: Accept-Encoding
etag: W/"6766663a-2a345"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
content-encoding: gzip
cf-cache-status: HIT
age: 97662
cf-ray: 902879ca184356aa-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
GET doanaudabu.net/5/6869446/?oo=1&js_build=iclick-v1.1039.0&dmn=ptelsudsew.net&tt=2&ix=1
200 OK 3.9 kB URL GET HTTP/2 doanaudabu.net/5/6869446/?oo=1&js_build=iclick-v1.1039.0&dmn=ptelsudsew.net&tt=2&ix=1
IP
Requested by https://streambtw.com/iframe/ch6.php
Certificate IssuerLet's Encrypt
Subjectdoanaudabu.net
Fingerprint1B:0F:F1:E3:1C:B1:36:D1:8B:FB:04:EC:8F:DA:FD:51:EE:E1:4B:E3
ValidityThu, 14 Nov 2024 02:46:14 GMT - Wed, 12 Feb 2025 02:46:13 GMT
File type troff or preprocessor input, ASCII text, with very long lines (3905), with no line terminators
Hash 98429d12b918e32507a0cd7be2526a7c
6ca1794dc97aa9ba34de6cc2550776baca03fe8c
53e4bcdc92f6ddbe51a167dbb775a2a89caca7a8354228aea05dfe927a37a91d
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /5/6869446/?oo=1&js_build=iclick-v1.1039.0&dmn=ptelsudsew.net&tt=2&ix=1 HTTP/1.1
Host: doanaudabu.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://streambtw.com
DNT: 1
Connection: keep-alive
Referer: https://streambtw.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 15 Jan 2025 20:04:45 GMT
content-type: application/json
x-trace-id: 64b450972df962a1a991f94d35bfc02a
link: <https://my.rtmark.net>; rel="preconnect dns-prefetch"
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
access-control-allow-origin: https://streambtw.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace, favicon
access-control-max-age: 86400
timing-allow-origin: *
set-cookie: OAID=0081525958fd4f90fb0df62a46cf7743; expires=Thu, 15 Jan 2026 20:04:45 GMT; path=/; secure; SameSite=None
oaidts=1736971485; expires=Thu, 15 Jan 2026 20:04:45 GMT; path=/; secure; SameSite=None
syncedCookie=; expires=Tue, 10 Nov 2009 23:00:00 GMT
pragma: no-cache, no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT, Mon, 26 Jul 1997 05:00:00 GMT
content-encoding: gzip
X-Firefox-Spdy: h2
172.67.158.139
23.109.170.209
139.45.197.107
172.67.130.90
0.0.0.0