js.streampsh.top/ps/ps.js?id=ynNaO0dc2EWSQnX-_cGx5A
200 OK 13 kB URL GET HTTP/2 js.streampsh.top/ps/ps.js?id=ynNaO0dc2EWSQnX-_cGx5A
IP
Requested by https://jpmeb4006.bobomama.eu/
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint02:54:95:46:BF:81:7A:AE:A7:E6:B7:1E:1A:22:51:FB:44:E3:DC:7E
ValiditySat, 25 Mar 2023 00:00:00 GMT - Sat, 23 Mar 2024 23:59:59 GMT
File type Unicode text, UTF-8 text, with very long lines (31354), with no line terminators
Hash 596c0db6d238844fa3e75bcf1fdb8efc
300f3452ec41cb2035d5524a67afe175fb0587d4
0812bd1b1f3424652d479b9a3fc48d32ea35c208384b901bcd9ccc3e4b14ea0c
GET /ps/ps.js?id=ynNaO0dc2EWSQnX-_cGx5A HTTP/1.1
Host: js.streampsh.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://jpmeb4006.bobomama.eu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 07 Dec 2023 03:55:33 GMT
content-type: application/javascript
cache-control: max-age=0, no-cache, no-store, must-revalidate
cf-cache-status: BYPASS
set-cookie: __psu=eeac6071-b775-40ce-9bc2-945d5f5c7785; expires=Sun, 07 Dec 2025 03:55:32 GMT; path=/; secure; samesite=none
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Z5cfXAWQ1vYMdLc%2BBgYsxPaq3Ugo4hbOCzjgNnRxK0WmgDu7D791YNGHj1296S1SYDRTEFRC4L2GON%2FAuFMHEPVMQ%2FeFtYuyOuZ4GQJyZk8EQqaBaEBjSCKAxIL0VfurC%2B0l"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8319d56ada8e417d-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
fonts.gstatic.com/s/robotocondensed/v27/ieVl2ZhZI2eCN5jzbjEETS9weq8-19K7DQ.woff2
200 OK 51 kB URL GET HTTP/2 fonts.gstatic.com/s/robotocondensed/v27/ieVl2ZhZI2eCN5jzbjEETS9weq8-19K7DQ.woff2
IP
Requested by https://jpmeb4006.bobomama.eu/
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 51404, version 1.0\012- data
Hash b904fcdf1c4c6059fadd6893a7bc7619
f41d1674f02616f03ef77d4e84b3ad8ba28a36fc
517edd119c5b2719e6ac4b30bf1fd864a6395179a41d273c0afc0696e7495d8e
GET /s/robotocondensed/v27/ieVl2ZhZI2eCN5jzbjEETS9weq8-19K7DQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://jpmeb4006.bobomama.eu
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 51404
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 05:22:05 GMT
expires: Fri, 29 Nov 2024 05:22:05 GMT
cache-control: public, max-age=31536000
age: 599608
last-modified: Wed, 18 Oct 2023 17:52:59 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.bobomama.eu/wp-content/themes/dt-the7/fonts/icomoon-the7-font/icomoon-the7-font.ttf?wi57p5
200 OK 47 kB URL GET HTTP/3 www.bobomama.eu/wp-content/themes/dt-the7/fonts/icomoon-the7-font/icomoon-the7-font.ttf?wi57p5
IP
Requested by https://jpmeb4006.bobomama.eu/
Certificate IssuerGoogle Trust Services LLC
Subjectbobomama.eu
Fingerprint05:4E:B1:BD:9C:AE:ED:BD:34:9A:2B:F5:4A:F2:5D:FC:4F:85:E9:83
ValidityWed, 01 Nov 2023 14:08:49 GMT - Tue, 30 Jan 2024 14:08:48 GMT
File type TrueType Font data, 11 tables, 1st "OS/2", 14 names, Macintosh, type 1 string, the7-default-font\012- data
Hash a227efc2cea70862639686f35af5dc6d
f6321e62a0214d7797643c0698189b8adc53d543
4250b8b052cf68c02281463a74a4ba3f8f749a0c00f2b22141d194b2bae808f2
GET /wp-content/themes/dt-the7/fonts/icomoon-the7-font/icomoon-the7-font.ttf?wi57p5 HTTP/1.1
Host: www.bobomama.eu
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://jpmeb4006.bobomama.eu
DNT: 1
Connection: keep-alive
Referer: https://www.bobomama.eu/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 07 Dec 2023 03:55:33 GMT
content-type: application/octet-stream
content-length: 46628
last-modified: Wed, 24 May 2023 19:14:36 GMT
etag: "646e621c-b624"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=tAxPsjFyCsTgg9fqu5VW5a%2Fk%2FE3fIuDbQAvt4Vt7YW5fS%2FIE0Um1ce6LfzzeonqBgx%2FqGvUyiFeRFxFPB40NYOJKd4FPNQpHWnkGw0rNqkD4HNBZ97%2BxXMcWpg0B%2Bu4zvbE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8319d56e4a39418b-LHR
alt-svc: h3=":443"; ma=86400
ibew520.org/wp-content/uploads/2020/09/IMG_1331-rotated.jpg
200 OK 448 kB URL GET HTTP/2 ibew520.org/wp-content/uploads/2020/09/IMG_1331-rotated.jpg
IP
Requested by https://jpmeb4006.bobomama.eu/
Certificate IssuerLet's Encrypt
Subjectibew520.org
Fingerprint0C:68:70:BC:30:8B:00:AA:A4:E9:60:C3:49:0A:38:12:DB:C0:24:38
ValidityTue, 24 Oct 2023 04:56:52 GMT - Mon, 22 Jan 2024 04:56:51 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 2016x1512, components 3\012- data
Size 448 kB (448379 bytes)
Hash 55a4c2b5e658e40c87999a3502b5dd5f
ae88896610011ec47493e7ef54662359283e7c36
bb9637b45bfdee1cab799a7a1aa2367215f590050e79941c4ef06ee5912efaab
GET /wp-content/uploads/2020/09/IMG_1331-rotated.jpg HTTP/1.1
Host: ibew520.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://jpmeb4006.bobomama.eu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 07 Dec 2023 03:55:33 GMT
content-type: image/jpeg
content-length: 448379
cache-control: public, max-age=604800
expires: Thu, 14 Dec 2023 03:55:33 GMT
last-modified: Tue, 01 Sep 2020 12:54:44 GMT
etag: "6d77b-5f4e4494-fd1ae97afc513f13;;;"
vary: User-Agent, Accept-Encoding
strict-transport-security: max-age=300
alt-svc: h3=":443"; ma=86400
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=gaSbvU7OxqhCE3W3gLsgTAV2QN46fnntLovwsS9RpWGjz%2FIW2CweABoSnTlFqyGQpdKBQjCXsGkqMY0LP1cGNKY77rbPazvDEDzdC3fBDGGSnufoXchxj%2FngZY8G%2BQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8319d56b18954179-LHR
X-Firefox-Spdy: h2
www.youtube.com/s/player/dee96cfa/player_ias.vflset/en_US/embed.js
200 OK 17 kB URL GET HTTP/3 www.youtube.com/s/player/dee96cfa/player_ias.vflset/en_US/embed.js
IP
Requested by https://www.youtube.com/embed/SG25-uBEtGU
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint4C:0D:17:8C:F1:30:7C:3A:6F:9B:8E:B4:83:0E:5C:BD:ED:17:3E:95
ValidityMon, 23 Oct 2023 11:18:24 GMT - Mon, 15 Jan 2024 11:18:23 GMT
File type ASCII text, with very long lines (3391)
Hash df85dab4bd2c9e763cb34bac44efd4fb
86f3f89a1257552c84d57e443f48a86e5f2659e2
611d7644cd2a2c305f04d2cd594aeb6e4ae81d2776ef4955f923e913f99bc615
GET /s/player/dee96cfa/player_ias.vflset/en_US/embed.js HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/SG25-uBEtGU
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: br
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 16903
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 06 Dec 2023 08:34:27 GMT
expires: Thu, 05 Dec 2024 08:34:27 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 06 Dec 2023 02:46:57 GMT
content-type: text/javascript
vary: Accept-Encoding, Origin
age: 69667
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.youtube.com/s/player/dee96cfa/www-player.css
200 OK 48 kB URL GET HTTP/3 www.youtube.com/s/player/dee96cfa/www-player.css
IP
Requested by https://www.youtube.com/embed/SG25-uBEtGU
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint4C:0D:17:8C:F1:30:7C:3A:6F:9B:8E:B4:83:0E:5C:BD:ED:17:3E:95
ValidityMon, 23 Oct 2023 11:18:24 GMT - Mon, 15 Jan 2024 11:18:23 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Hash 845ee0ded13b742ad523443fddc5545f
577a5583a2cc9f7fbf229dbfffbecbe5439245f3
c8cf595211c3780ca984d79461caff6908401386ebb9894598ecadc396e22e1f
GET /s/player/dee96cfa/www-player.css HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/SG25-uBEtGU
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: br
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 48216
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 06 Dec 2023 08:32:18 GMT
expires: Thu, 05 Dec 2024 08:32:18 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 06 Dec 2023 02:46:57 GMT
content-type: text/css
vary: Accept-Encoding, Origin
age: 69796
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.youtube.com/s/player/dee96cfa/www-embed-player.vflset/www-embed-player.js
200 OK 99 kB URL GET HTTP/3 www.youtube.com/s/player/dee96cfa/www-embed-player.vflset/www-embed-player.js
IP
Requested by https://www.youtube.com/embed/SG25-uBEtGU
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint4C:0D:17:8C:F1:30:7C:3A:6F:9B:8E:B4:83:0E:5C:BD:ED:17:3E:95
ValidityMon, 23 Oct 2023 11:18:24 GMT - Mon, 15 Jan 2024 11:18:23 GMT
File type ASCII text, with very long lines (682)
Hash 1ec56351518b48128e4142b179f11741
3825a262c5751358078c8150ad125abed66a6d10
749b479a8548e5751006d04e185368e48db0d7ceac3ba359d25db43fd6c24089
GET /s/player/dee96cfa/www-embed-player.vflset/www-embed-player.js HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/SG25-uBEtGU
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: br
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 98658
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 06 Dec 2023 08:32:24 GMT
expires: Thu, 05 Dec 2024 08:32:24 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 06 Dec 2023 02:46:57 GMT
content-type: text/javascript
vary: Accept-Encoding, Origin
age: 69790
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.bobomama.eu/wp-content/themes/dt-the7/fonts/icomoon-the7-font/icomoon-the7-font.woff?wi57p5
200 OK 47 kB URL GET HTTP/3 www.bobomama.eu/wp-content/themes/dt-the7/fonts/icomoon-the7-font/icomoon-the7-font.woff?wi57p5
IP
Requested by https://jpmeb4006.bobomama.eu/
Certificate IssuerGoogle Trust Services LLC
Subjectbobomama.eu
Fingerprint05:4E:B1:BD:9C:AE:ED:BD:34:9A:2B:F5:4A:F2:5D:FC:4F:85:E9:83
ValidityWed, 01 Nov 2023 14:08:49 GMT - Tue, 30 Jan 2024 14:08:48 GMT
File type Web Open Font Format, TrueType, length 46704, version 2.0\012- data
Hash f2532fedbf266540bb4314c8da160e81
b24b3a92173eea8191e6600b47f913295025be88
59802ec349c014c0bf9df20a55e98f1484b4685703805a662615afef5c894eef
GET /wp-content/themes/dt-the7/fonts/icomoon-the7-font/icomoon-the7-font.woff?wi57p5 HTTP/1.1
Host: www.bobomama.eu
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://jpmeb4006.bobomama.eu
DNT: 1
Connection: keep-alive
Referer: https://www.bobomama.eu/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 07 Dec 2023 03:55:34 GMT
content-type: font/woff
content-length: 46704
last-modified: Wed, 24 May 2023 19:14:36 GMT
etag: "646e621c-b670"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=aavUssG1LhzHO%2FRTjjxiGzFVkDhTiDQDb0ztXo0ymvBJJBWQqZgXhPBNjIaJBXfwKetxfvdXMLw8f7JOEIErjYKplCpjNNEF5MrXrsrRT07JYqsyOqiruJ7xWcltxlLjPd8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8319d5713c15418b-LHR
alt-svc: h3=":443"; ma=86400
www.youtube.com/s/player/dee96cfa/player_ias.vflset/en_US/base.js
200 OK 785 kB URL GET HTTP/3 www.youtube.com/s/player/dee96cfa/player_ias.vflset/en_US/base.js
IP
Requested by https://www.youtube.com/embed/SG25-uBEtGU
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint4C:0D:17:8C:F1:30:7C:3A:6F:9B:8E:B4:83:0E:5C:BD:ED:17:3E:95
ValidityMon, 23 Oct 2023 11:18:24 GMT - Mon, 15 Jan 2024 11:18:23 GMT
File type ASCII text, with very long lines (555)
Size 785 kB (785445 bytes)
Hash 9459127d7e5023c6be7247a7ad4c0dfa
a1dff52b1aaaf8e7796b9d656a3cb6547ab0d3c0
3ff5693fee0b60651698141bd74761199a493fb834c1ceba6ceeb21d510de528
GET /s/player/dee96cfa/player_ias.vflset/en_US/base.js HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/SG25-uBEtGU
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-encoding: gzip
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 785445
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 06 Dec 2023 08:34:27 GMT
expires: Thu, 05 Dec 2024 08:34:27 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 06 Dec 2023 02:46:57 GMT
content-type: text/javascript
vary: Accept-Encoding, Origin
age: 69667
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
200 OK 15 kB URL GET HTTP/2 fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
Requested by https://www.youtube.com/embed/SG25-uBEtGU
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 15344, version 1.0\012- data
Hash 5d4aeb4e5f5ef754e307d7ffaef688bd
06db651cdf354c64a7383ea9c77024ef4fb4cef8
3e253b66056519aa065b00a453bac37ac5ed8f3e6fe7b542e93a9dcdcc11d0bc
GET /s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15344
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 05 Dec 2023 07:31:13 GMT
expires: Wed, 04 Dec 2024 07:31:13 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 16 Oct 2017 17:32:55 GMT
content-type: font/woff2
age: 159861
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
200 OK 16 kB URL GET HTTP/2 fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
IP
Requested by https://www.youtube.com/embed/SG25-uBEtGU
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 15552, version 1.0\012- data
Hash 285467176f7fe6bb6a9c6873b3dad2cc
ea04e4ff5142ddd69307c183def721a160e0a64e
5a8c1e7681318caa29e9f44e8a6e271f6a4067a2703e9916dfd4fe9099241db7
GET /s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15552
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 05 Dec 2023 03:26:41 GMT
expires: Wed, 04 Dec 2024 03:26:41 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 16 Oct 2017 17:33:02 GMT
content-type: font/woff2
age: 174533
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
jpmeb4006.bobomama.eu/qhavnxf.js?get=1&q=ibew%2057%20job%20calls&s=&ua=Mozilla/5.0%20(Windows%20NT%2010.0;%20Win64;%20x64;%20rv:105.0)%20Gecko/20100101%20Firefox/105.0&0.7901100031406535
200 OK 11 kB URL GET HTTP/3 jpmeb4006.bobomama.eu/qhavnxf.js?get=1&q=ibew%2057%20job%20calls&s=&ua=Mozilla/5.0%20(Windows%20NT%2010.0;%20Win64;%20x64;%20rv:105.0)%20Gecko/20100101%20Firefox/105.0&0.7901100031406535
IP
Requested by https://jpmeb4006.bobomama.eu/
Certificate IssuerGoogle Trust Services LLC
Subjectbobomama.eu
Fingerprint05:4E:B1:BD:9C:AE:ED:BD:34:9A:2B:F5:4A:F2:5D:FC:4F:85:E9:83
ValidityWed, 01 Nov 2023 14:08:49 GMT - Tue, 30 Jan 2024 14:08:48 GMT
File type HTML document, ASCII text, with very long lines (844), with CRLF line terminators
Hash 55d8cb8affe1dde7890ace7a6f4d3a79
937ad0594566c00bd21f5f461d790eb9cc8440b1
fe68e5d626449416c38dda3a899d4ec098ebf5d0c74ee17683a16e0e3402ac75
GET /qhavnxf.js?get=1&q=ibew%2057%20job%20calls&s=&ua=Mozilla/5.0%20(Windows%20NT%2010.0;%20Win64;%20x64;%20rv:105.0)%20Gecko/20100101%20Firefox/105.0&0.7901100031406535 HTTP/1.1
Host: jpmeb4006.bobomama.eu
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://jpmeb4006.bobomama.eu/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 07 Dec 2023 03:55:34 GMT
content-type: application/javascript
vary: Accept-Encoding
x-powered-by: PHP/8.1.20
access-control-allow-origin: *
cache-control: max-age=14400
cf-cache-status: MISS
last-modified: Thu, 07 Dec 2023 03:55:34 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=rryUTYwF5FJvMRa0SjFHVSbDLQ%2FBxih4BDLdJg32tWF3cTEgbQB4AYcn4Zio6WP8WavKoPzTNkzH4H54eksqvCC%2F%2Fs5Byr52SPHxB9AaNtz3DWMFYw6OUsIKArfKp16ybRHOL0d1JuY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8319d572cd15418b-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
jpmeb4006.bobomama.eu/prize_en.png
200 OK 112 kB URL GET HTTP/3 jpmeb4006.bobomama.eu/prize_en.png
IP
Requested by https://jpmeb4006.bobomama.eu/
Certificate IssuerGoogle Trust Services LLC
Subjectbobomama.eu
Fingerprint05:4E:B1:BD:9C:AE:ED:BD:34:9A:2B:F5:4A:F2:5D:FC:4F:85:E9:83
ValidityWed, 01 Nov 2023 14:08:49 GMT - Tue, 30 Jan 2024 14:08:48 GMT
File type PNG image data, 934 x 617, 8-bit/color RGBA, non-interlaced\012- data
Size 112 kB (112349 bytes)
Hash ae783b2d4017d6617b4114e0e446e730
0017b17613118e786a05ff9893085ca3e30a0d7e
8f4492a3741b568b9efcc9e4a2794a03c81a30efab19596dad06841e4a293fc5
GET /prize_en.png HTTP/1.1
Host: jpmeb4006.bobomama.eu
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://jpmeb4006.bobomama.eu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 07 Dec 2023 03:55:34 GMT
content-type: image/png
content-length: 112349
last-modified: Thu, 17 Aug 2023 17:17:13 GMT
etag: "64de5619-1b6dd"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=V5gX1tfyg9aradWa7crBvTcvLez9%2FO0SbVjUK8LZpCblRi4nSAuzhYY7L0trKgJB%2BAXL%2FDrl5UHeJ0WkoIc4ljAMCEPNndAuQGfj0Zix6J9rWdNhau0oCIMRMlXlY4qFVYWbOAwVhk8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8319d573fdb4418b-LHR
alt-svc: h3=":443"; ma=86400
ibew1245.com/wp-content/uploads/2015/10/brent-donohue-local-57-e1445986495465-300x277.jpg
200 OK 16 kB URL GET HTTP/2 ibew1245.com/wp-content/uploads/2015/10/brent-donohue-local-57-e1445986495465-300x277.jpg
IP
Requested by https://jpmeb4006.bobomama.eu/
Certificate IssuerLet's Encrypt
Subjectibew1245.com
Fingerprint1B:ED:DC:18:60:EB:D5:6B:BD:AD:79:FF:3E:88:AA:83:0A:64:7F:08
ValidityMon, 06 Nov 2023 17:15:09 GMT - Sun, 04 Feb 2024 17:15:08 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 300x277, components 3\012- data
Hash 5df98f1785f4c4221d60b1b4df07e33b
6b4704f325c922e9e4fb30395fc0e87f0be90bf3
c06137c6496f6f08297c65a1aa27665ec530a2031e930e2a061c40ea4eb38d22
GET /wp-content/uploads/2015/10/brent-donohue-local-57-e1445986495465-300x277.jpg HTTP/1.1
Host: ibew1245.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://jpmeb4006.bobomama.eu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Thu, 07 Dec 2023 03:55:34 GMT
content-type: image/jpeg
content-length: 15952
last-modified: Tue, 27 Oct 2015 22:54:55 GMT
etag: "563000bf-3e50"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
www.gstatic.com/firebasejs/10.3.1/firebase-app-compat.js
200 OK 9.3 kB URL GET HTTP/2 www.gstatic.com/firebasejs/10.3.1/firebase-app-compat.js
IP
Requested by https://jpmeb4006.bobomama.eu/
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type ASCII text, with very long lines (28368)
Hash 9900403b65514fad7df39a4e788a6e45
75f9ba061ef4e72bb23528c700f2a11c56d637e9
a202b2051ea9810cd9ba592b3f9418a89e2062f5c185e29e288080b28eb64fe5
GET /firebasejs/10.3.1/firebase-app-compat.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://jpmeb4006.bobomama.eu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/firebase-js
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="firebase-js"
report-to: {"group":"firebase-js","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/firebase-js"}]}
content-length: 9308
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 05 Dec 2023 08:48:47 GMT
expires: Wed, 04 Dec 2024 08:48:47 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 31 Aug 2023 15:20:38 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 155208
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
200 OK 0 B URL POST HTTP/2 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
IP
Requested by https://www.youtube.com/embed/SG25-uBEtGU
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
FingerprintCC:96:E0:52:E0:9B:EA:A9:A0:F8:88:9A:90:20:11:47:61:00:3C:42
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /$rpc/google.internal.waa.v1.Waa/Create HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type,x-goog-api-key,x-user-agent
Referer: https://www.youtube.com/
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: https://www.youtube.com
vary: origin, referer, x-origin
access-control-allow-credentials: true
access-control-allow-methods: DELETE,GET,HEAD,OPTIONS,PATCH,POST,PUT
access-control-allow-headers: content-type,x-goog-api-key,x-user-agent
access-control-max-age: 3600
date: Thu, 07 Dec 2023 03:55:35 GMT
content-type: text/html
server: ESF
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
jpmeb4006.bobomama.eu/favicon.ico
200 OK 0 B URL GET HTTP/3 jpmeb4006.bobomama.eu/favicon.ico
IP
Requested by https://jpmeb4006.bobomama.eu/
Certificate IssuerGoogle Trust Services LLC
Subjectbobomama.eu
Fingerprint05:4E:B1:BD:9C:AE:ED:BD:34:9A:2B:F5:4A:F2:5D:FC:4F:85:E9:83
ValidityWed, 01 Nov 2023 14:08:49 GMT - Tue, 30 Jan 2024 14:08:48 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1
Host: jpmeb4006.bobomama.eu
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://jpmeb4006.bobomama.eu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 07 Dec 2023 03:55:35 GMT
content-type: image/x-icon
content-length: 0
last-modified: Wed, 24 May 2023 19:14:36 GMT
etag: "646e621c-0"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=7bhAoGtqRvg3TzlJz0QGtA1KDAV%2BH8hKILs52GqDCs8%2FNEUglTnpZIdvA63PGYJSKrJO4CWspq2cqE%2BUwbXNzP0CnwxaOS0sJ49UhqIjOnVfZiSIlgZolN5Z96GpiUYgkDFWtHxIqzE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8319d577dfef418b-LHR
alt-svc: h3=":443"; ma=86400
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
200 OK 41 kB URL POST HTTP/2 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
IP
Requested by https://www.youtube.com/embed/SG25-uBEtGU
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
FingerprintCC:96:E0:52:E0:9B:EA:A9:A0:F8:88:9A:90:20:11:47:61:00:3C:42
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type JSON data\012- , ASCII text, with very long lines (65536), with no line terminators
Hash 75f0b8d2f359c64a5af7cd2769e3320f
a4ca99463e3e0f69f6be90e85ee1915d4970bc72
f679d6ea1d5b75e360354cff0ea60952d89d9448eca9781480969f87c5478c79
POST /$rpc/google.internal.waa.v1.Waa/Create HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Api-Key: AIzaSyDyT5W0Jh49F30Pqqtyfdf7pDLFKLJoAnw
Content-Type: application/json+protobuf
X-User-Agent: grpc-web-javascript/0.1
Content-Length: 24
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/json+protobuf; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: gzip
date: Thu, 07 Dec 2023 03:55:35 GMT
server: ESF
cache-control: private
content-length: 40639
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: https://www.youtube.com
access-control-allow-credentials: true
access-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.gstatic.com/firebasejs/10.3.1/firebase-messaging-compat.js
200 OK 9.9 kB URL GET HTTP/3 www.gstatic.com/firebasejs/10.3.1/firebase-messaging-compat.js
IP
Requested by https://jpmeb4006.bobomama.eu/
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type ASCII text, with very long lines (38231)
Hash 0541b823dfaf39162ef84cf075c9951b
e0934726455558cc1a59823efada9651e33aafaa
21f1d62f222007068c793f0947d98f4ccb7c1595adb68efeb783390fdd8b5522
GET /firebasejs/10.3.1/firebase-messaging-compat.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://jpmeb4006.bobomama.eu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/firebase-js
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="firebase-js"
report-to: {"group":"firebase-js","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/firebase-js"}]}
content-length: 9934
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 05:05:32 GMT
expires: Fri, 29 Nov 2024 05:05:32 GMT
cache-control: public, max-age=31536000
age: 600603
last-modified: Thu, 31 Aug 2023 15:20:50 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
i.ytimg.com/vi/SG25-uBEtGU/sddefault.jpg
200 OK 58 kB URL GET HTTP/2 i.ytimg.com/vi/SG25-uBEtGU/sddefault.jpg
IP
Requested by https://www.youtube.com/embed/SG25-uBEtGU
Certificate IssuerGoogle Trust Services LLC
Subjectedgestatic.com
FingerprintC8:30:4C:1A:A8:FF:83:E1:A2:7F:DB:02:8C:D9:05:46:C4:D6:CA:95
ValidityMon, 23 Oct 2023 11:18:19 GMT - Mon, 15 Jan 2024 11:18:18 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 640x480, components 3\012- data
Hash a2724d952fbe0ea010e94c7c5f4d9da0
7ccca147fe7b8372e3b1bbe294fb6f70428307d4
22b50a142e3a916697193d85dbe6649dfb4385947dfcaf9e3ef9344ee2ed598e
GET /vi/SG25-uBEtGU/sddefault.jpg HTTP/1.1
Host: i.ytimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
timing-allow-origin: *
content-length: 58384
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 07 Dec 2023 03:55:35 GMT
expires: Thu, 07 Dec 2023 05:55:35 GMT
cache-control: public, max-age=7200
etag: "1625750329"
content-type: image/jpeg
vary: Origin
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.youtube.com/s/player/dee96cfa/player_ias.vflset/en_US/remote.js
200 OK 34 kB URL GET HTTP/3 www.youtube.com/s/player/dee96cfa/player_ias.vflset/en_US/remote.js
IP
Requested by https://www.youtube.com/embed/SG25-uBEtGU
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint4C:0D:17:8C:F1:30:7C:3A:6F:9B:8E:B4:83:0E:5C:BD:ED:17:3E:95
ValidityMon, 23 Oct 2023 11:18:24 GMT - Mon, 15 Jan 2024 11:18:23 GMT
File type ASCII text, with very long lines (537)
Hash caf14ed40a162ce34e960f1349f2e0b0
8fdd2f3793b1cb775bc1d61c3b1689dc0a92a294
24fa2128f8460380865cf76881c0f6569aa2d9af6eea4aff5f6f01ad37702d34
GET /s/player/dee96cfa/player_ias.vflset/en_US/remote.js HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/SG25-uBEtGU
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: br
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 33462
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 06 Dec 2023 08:34:28 GMT
expires: Thu, 05 Dec 2024 08:34:28 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 06 Dec 2023 02:46:57 GMT
content-type: text/javascript
vary: Accept-Encoding, Origin
age: 69667
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
fonts.googleapis.com/css?family=Roboto%3A400%2C600%2C700%7CRoboto+Slab%3A400%2C600%2C700%7CRoboto+Condensed%3A400%2C600%2C700%7COswald:700%2C300%7CRoboto:400%2C700%7CRoboto+Condensed%3A300%2C300italic%2Cregular%2Citalic%2C700%2C700italic&display=swap
200 OK 22 kB URL GET HTTP/2 fonts.googleapis.com/css?family=Roboto%3A400%2C600%2C700%7CRoboto+Slab%3A400%2C600%2C700%7CRoboto+Condensed%3A400%2C600%2C700%7COswald:700%2C300%7CRoboto:400%2C700%7CRoboto+Condensed%3A300%2C300italic%2Cregular%2Citalic%2C700%2C700italic&display=swap
IP
Requested by https://jpmeb4006.bobomama.eu/
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
FingerprintCC:96:E0:52:E0:9B:EA:A9:A0:F8:88:9A:90:20:11:47:61:00:3C:42
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type gzip compressed data, max compression\012- data
Hash be8b3c26bb1955d4df7faba56d18f198
8160fdaa47f60b3da5b9907e9d407f80437e16fd
290f630bd1adaa01eeaaf5015bf3b9923285efa2d30fd524510eab385fdced7b
GET /css?family=Roboto%3A400%2C600%2C700%7CRoboto+Slab%3A400%2C600%2C700%7CRoboto+Condensed%3A400%2C600%2C700%7COswald:700%2C300%7CRoboto:400%2C700%7CRoboto+Condensed%3A300%2C300italic%2Cregular%2Citalic%2C700%2C700italic&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://jpmeb4006.bobomama.eu/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Thu, 07 Dec 2023 03:55:32 GMT
date: Thu, 07 Dec 2023 03:55:32 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
200 OK 0 B URL OPTIONS HTTP/2 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
IP
Requested by https://www.youtube.com/embed/SG25-uBEtGU
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
FingerprintCC:96:E0:52:E0:9B:EA:A9:A0:F8:88:9A:90:20:11:47:61:00:3C:42
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /$rpc/google.internal.waa.v1.Waa/GenerateIT HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type,x-goog-api-key,x-user-agent
Referer: https://www.youtube.com/
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: https://www.youtube.com
vary: origin, referer, x-origin
access-control-allow-credentials: true
access-control-allow-methods: DELETE,GET,HEAD,OPTIONS,PATCH,POST,PUT
access-control-allow-headers: content-type,x-goog-api-key,x-user-agent
access-control-max-age: 3600
date: Thu, 07 Dec 2023 03:55:35 GMT
content-type: text/html
server: ESF
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
200 OK 114 B URL OPTIONS HTTP/2 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
IP
Requested by https://www.youtube.com/embed/SG25-uBEtGU
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
FingerprintCC:96:E0:52:E0:9B:EA:A9:A0:F8:88:9A:90:20:11:47:61:00:3C:42
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash c32bb4af81bb82b63e7c9281c5633faa
d02b6828de71129c64603ad818fea5d2667d48d8
abe1a1894800d761f7fe41757c50301b6d7ad44afbef26cc4cb0387e7f529ae6
POST /$rpc/google.internal.waa.v1.Waa/GenerateIT HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Api-Key: AIzaSyDyT5W0Jh49F30Pqqtyfdf7pDLFKLJoAnw
Content-Type: application/json+protobuf
X-User-Agent: grpc-web-javascript/0.1
Content-Length: 1278
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/json+protobuf; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: gzip
date: Thu, 07 Dec 2023 03:55:35 GMT
server: ESF
cache-control: private
content-length: 114
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: https://www.youtube.com
access-control-allow-credentials: true
access-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
yt3.ggpht.com/eim6gF6sH1HBLxdmCKcnaVKNhR_uFMgrsreeVrNbWPziwSD078Atrm2eTh7QW7xfIvGfNf4igEM=s68-c-k-c0x00ffffff-no-rj
200 OK 3.7 kB URL GET HTTP/2 yt3.ggpht.com/eim6gF6sH1HBLxdmCKcnaVKNhR_uFMgrsreeVrNbWPziwSD078Atrm2eTh7QW7xfIvGfNf4igEM=s68-c-k-c0x00ffffff-no-rj
IP
Requested by https://www.youtube.com/embed/SG25-uBEtGU
Certificate IssuerGoogle Trust Services LLC
Subject*.googleusercontent.com
Fingerprint2E:01:38:64:37:3C:F9:F4:3C:95:49:F1:9E:D9:61:5F:63:48:CF:CE
ValidityMon, 23 Oct 2023 11:23:50 GMT - Mon, 15 Jan 2024 11:23:49 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 68x68, components 3\012- data
Hash 18f220f08b352f12627354304719f2de
7086bcb48798a82c74ab5ca5e4e8cdbe4d5cba5e
12160f7c9898e7cdc034781c5bc11deb2e59821600a61a6edf7adf4e2c6de528
GET /eim6gF6sH1HBLxdmCKcnaVKNhR_uFMgrsreeVrNbWPziwSD078Atrm2eTh7QW7xfIvGfNf4igEM=s68-c-k-c0x00ffffff-no-rj HTTP/1.1
Host: yt3.ggpht.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
content-disposition: inline;filename="channels4_profile.jpg"
x-content-type-options: nosniff
server: fife
content-length: 3658
x-xss-protection: 0
date: Thu, 07 Dec 2023 03:55:35 GMT
expires: Fri, 08 Dec 2023 03:55:35 GMT
cache-control: public, max-age=86400, no-transform
etag: "v1"
content-type: image/jpeg
vary: Origin
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.youtube.com/generate_204?B3B2fA
204 No Content 0 B URL GET HTTP/3 www.youtube.com/generate_204?B3B2fA
IP
Requested by https://www.youtube.com/embed/SG25-uBEtGU
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint4C:0D:17:8C:F1:30:7C:3A:6F:9B:8E:B4:83:0E:5C:BD:ED:17:3E:95
ValidityMon, 23 Oct 2023 11:18:24 GMT - Mon, 15 Jan 2024 11:18:23 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /generate_204?B3B2fA HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/SG25-uBEtGU
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 204 No Content
content-length: 0
cross-origin-resource-policy: cross-origin
date: Thu, 07 Dec 2023 03:55:35 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.ibew756.org/yardsign.png
200 OK 111 kB URL GET HTTP/2 www.ibew756.org/yardsign.png
IP
Requested by https://jpmeb4006.bobomama.eu/
Certificate IssuerGoDaddy.com, Inc.
Subjectssl4.unions-america.com
FingerprintB9:E2:AE:A2:3A:CA:D8:FB:2A:42:E2:80:17:B9:02:01:1D:19:88:53
ValidityThu, 15 Jun 2023 16:27:29 GMT - Mon, 24 Jun 2024 18:53:37 GMT
File type PNG image data, 1021 x 1291, 8-bit/color RGBA, non-interlaced\012- data
Size 111 kB (110873 bytes)
Hash 4ea3546e8d495bfc10d357b7abd7dcfa
25f2ffca9f74145ef5ec0b8549938414eac97a4b
a7d54635c5c6c3bb0c9358d15e7ba003f10a5de621e033f3b0e4d9d7908c689a
GET /yardsign.png HTTP/1.1
Host: www.ibew756.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://jpmeb4006.bobomama.eu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/png
last-modified: Fri, 04 May 2018 19:54:18 GMT
accept-ranges: bytes
etag: "a0d359b0e1e3d31:0"
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
date: Thu, 07 Dec 2023 03:53:44 GMT
content-length: 110873
X-Firefox-Spdy: h2
www.youtube.com/youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8
200 OK 31 B URL POST HTTP/3 www.youtube.com/youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8
IP
Requested by https://www.youtube.com/embed/SG25-uBEtGU
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint4C:0D:17:8C:F1:30:7C:3A:6F:9B:8E:B4:83:0E:5C:BD:ED:17:3E:95
ValidityMon, 23 Oct 2023 11:18:24 GMT - Mon, 15 Jan 2024 11:18:23 GMT
File type JSON data\012- , ASCII text
Hash 5e1fa6fd9abd549a576f3f24b1d3c8d4
d5335d7f7d33be6a0b663f03b2df4df2521c4a87
d7d5e54ad1e33d7ab49c664323ced79cb9723ff15e9764cd0edc3e15208e8336
POST /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Request-Time: 1701921343511
Content-Type: application/json
X-Goog-Visitor-Id: Cgs3SFRScjVWT255USi1hMWrBjIICgJOTxICEgA%3D
X-YouTube-Client-Name: 56
X-YouTube-Client-Version: 1.20231128.01.01
X-YouTube-Utc-Offset: 0
X-YouTube-Time-Zone: UTC
X-YouTube-Ad-Signals: dt=1701921340550&flash=0&frm=2&u_tz&u_his=2&u_h=1024&u_w=1280&u_ah=1024&u_aw=1280&u_cd=24&bc=31&bih=-12245933&biw=-12245933&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C1024%2C377%2C315&vis=1&wgl=true&ca_type=image
Content-Length: 16609
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/SG25-uBEtGU
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/json; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: br
date: Thu, 07 Dec 2023 03:55:37 GMT
server: scaffolding on HTTPServer2
content-length: 31
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
set-cookie: CONSENT=PENDING+171; expires=Sat, 06-Dec-2025 03:55:37 GMT; path=/; domain=.youtube.com; Secure
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
expires: Thu, 07 Dec 2023 03:55:37 GMT
cache-control: private
www.youtube.com/youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8
200 OK 31 B URL POST HTTP/3 www.youtube.com/youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8
IP
Requested by https://www.youtube.com/embed/SG25-uBEtGU
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint4C:0D:17:8C:F1:30:7C:3A:6F:9B:8E:B4:83:0E:5C:BD:ED:17:3E:95
ValidityMon, 23 Oct 2023 11:18:24 GMT - Mon, 15 Jan 2024 11:18:23 GMT
File type JSON data\012- , ASCII text
Hash 5e1fa6fd9abd549a576f3f24b1d3c8d4
d5335d7f7d33be6a0b663f03b2df4df2521c4a87
d7d5e54ad1e33d7ab49c664323ced79cb9723ff15e9764cd0edc3e15208e8336
POST /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Request-Time: 1701921355232
Content-Type: application/json
X-Goog-Visitor-Id: Cgs3SFRScjVWT255USi1hMWrBjIICgJOTxICEgA%3D
X-YouTube-Client-Name: 56
X-YouTube-Client-Version: 1.20231128.01.01
X-YouTube-Utc-Offset: 0
X-YouTube-Time-Zone: UTC
X-YouTube-Ad-Signals: dt=1701921340550&flash=0&frm=2&u_tz&u_his=2&u_h=1024&u_w=1280&u_ah=1024&u_aw=1280&u_cd=24&bc=31&bih=-12245933&biw=-12245933&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C1024%2C377%2C315&vis=1&wgl=true&ca_type=image
Content-Length: 827
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/SG25-uBEtGU
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/json; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: br
date: Thu, 07 Dec 2023 03:55:49 GMT
server: scaffolding on HTTPServer2
content-length: 31
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
set-cookie: CONSENT=PENDING+130; expires=Sat, 06-Dec-2025 03:55:49 GMT; path=/; domain=.youtube.com; Secure
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
expires: Thu, 07 Dec 2023 03:55:49 GMT
cache-control: private
www.google.com/js/th/UhAHYkQc59SMm3ILQvX2LV9pHtXm_t6HT06w3DJ-zT8.js
200 OK 52 kB URL GET HTTP/2 www.google.com/js/th/UhAHYkQc59SMm3ILQvX2LV9pHtXm_t6HT06w3DJ-zT8.js
IP
Requested by https://www.youtube.com/embed/SG25-uBEtGU
Certificate IssuerGoogle Trust Services LLC
Subjectwww.google.com
FingerprintB0:8E:97:10:7E:30:90:F6:42:A1:32:63:5C:78:27:D3:A8:F1:05:D1
ValidityMon, 23 Oct 2023 11:24:57 GMT - Mon, 15 Jan 2024 11:24:56 GMT
File type ASCII text, with very long lines (50467)
Hash 02ef8df4172d6fad17d1bf1142bfc1d1
3baa1986da7954c8f577eac04b1f4af063e8d58a
52100762441ce7d48c9b720b42f5f62d5f691ed5e6fede874f4eb0dc327ecd3f
GET /js/th/UhAHYkQc59SMm3ILQvX2LV9pHtXm_t6HT06w3DJ-zT8.js HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: br
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/botguard-scs
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="botguard-scs"
report-to: {"group":"botguard-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/botguard-scs"}]}
content-length: 19757
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 06 Dec 2023 14:36:41 GMT
expires: Thu, 05 Dec 2024 14:36:41 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 28 Nov 2023 18:30:00 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 47934
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
200 OK 40 kB URL User Request GET HTTP/2 IP
Certificate IssuerGoogle Trust Services LLC
Subjectbobomama.eu
Fingerprint05:4E:B1:BD:9C:AE:ED:BD:34:9A:2B:F5:4A:F2:5D:FC:4F:85:E9:83
ValidityWed, 01 Nov 2023 14:08:49 GMT - Tue, 30 Jan 2024 14:08:48 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: jpmeb4006.bobomama.eu
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 07 Dec 2023 03:55:32 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
x-powered-by: PHP/8.1.20
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=hRw693cBM7MadL5oy6KNngEezM4%2BYPzfrYskeRpCLm6TcSOXilWme7mkwgPdM5iGbZmP91%2Fooosd4JhO9NZpOXZFLAM9Wprnou2UT3ssy84MxulTkSDNAqWkXmoX9r8xATllBa9bGQo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8319d564ea7c386a-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
nxt-psh.com/ps/config.js?id=ynNaO0dc2EWSQnX-_cGx5A
200 OK 360 B URL GET HTTP/2 nxt-psh.com/ps/config.js?id=ynNaO0dc2EWSQnX-_cGx5A
IP
Requested by https://jpmeb4006.bobomama.eu/
Certificate IssuerGoogle Trust Services LLC
Subjectnxt-psh.com
Fingerprint94:51:87:1F:CB:41:39:32:6B:DB:A1:60:02:36:C8:8E:F3:1E:A5:B5
ValiditySun, 22 Oct 2023 10:39:04 GMT - Sat, 20 Jan 2024 10:39:03 GMT
File type ASCII text, with very long lines (376), with no line terminators
Hash a3090b286c4b4c3e8f4466fe310ab971
167ab67f26cb1ee7a23572c369473d12642e9098
245a0da99f5a0430b63bd180f24e59ea46895d3c7a3a84794a2937cb7c7f9398
GET /ps/config.js?id=ynNaO0dc2EWSQnX-_cGx5A HTTP/1.1
Host: nxt-psh.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://jpmeb4006.bobomama.eu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 07 Dec 2023 03:55:33 GMT
content-type: application/javascript
cache-control: max-age=0, no-cache, no-store, must-revalidate
cf-cache-status: BYPASS
set-cookie: __psu=0c3054df-5a23-4ee9-b20a-1f66f29e0b19; expires=Sun, 07 Dec 2025 03:55:33 GMT; path=/; secure; samesite=none
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=R0js4qiR3Zecgu3IvC6kaaf3vSU6RZI50avd44IwLJW0EQixYtZrNXcJPMT0keqnYPCZY3o%2FOkoY9StycWtlyjXHCV7CqXfojavJJt3n5UJgnkL8vgSEgc66XmjM9w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8319d56e8d1e3697-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
jpmeb4006.bobomama.eu/puimgso.js?0.7240345830810623&q=ibew+57+job+calls
200 OK 1.2 kB URL GET HTTP/3 jpmeb4006.bobomama.eu/puimgso.js?0.7240345830810623&q=ibew+57+job+calls
IP
Requested by https://jpmeb4006.bobomama.eu/
Certificate IssuerGoogle Trust Services LLC
Subjectbobomama.eu
Fingerprint05:4E:B1:BD:9C:AE:ED:BD:34:9A:2B:F5:4A:F2:5D:FC:4F:85:E9:83
ValidityWed, 01 Nov 2023 14:08:49 GMT - Tue, 30 Jan 2024 14:08:48 GMT
File type ASCII text, with very long lines (1193), with no line terminators
Hash 26b1552e6be8fef3cf29ad03ecd41960
b0998c2ef23f565501d4176868497796a4edb5a0
9d06a99f82e3dfd5d2c6935cbc92ed3c6465c06935386ffb25326aa2f6919324
GET /puimgso.js?0.7240345830810623&q=ibew+57+job+calls HTTP/1.1
Host: jpmeb4006.bobomama.eu
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://jpmeb4006.bobomama.eu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 07 Dec 2023 03:55:33 GMT
content-type: application/javascript
vary: Accept-Encoding
x-powered-by: PHP/8.1.20
access-control-allow-origin: *
cache-control: max-age=14400
cf-cache-status: MISS
last-modified: Thu, 07 Dec 2023 03:55:33 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=XbHob5Zrua2aWuaQbZS6FJC%2B2SXOtrJh9V99h4Cnocu6zoH2eHI0kvmDRyOmqHwbDFOUnimg11O2jh6mqobUPYyxTu0BQ7h%2BtfNdjXy9Ze86ymwwq7DocupzcZx3uuQqJsKXJllvS2E%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8319d56e0a05418b-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
www.bobomama.eu/wp-content/cache/autoptimize/css/autoptimize_b116041862ab1ae5d7a0e38a5238e3d9.css
200 OK 1.2 MB URL GET HTTP/3 www.bobomama.eu/wp-content/cache/autoptimize/css/autoptimize_b116041862ab1ae5d7a0e38a5238e3d9.css
IP
Requested by https://jpmeb4006.bobomama.eu/
Certificate IssuerGoogle Trust Services LLC
Subjectbobomama.eu
Fingerprint05:4E:B1:BD:9C:AE:ED:BD:34:9A:2B:F5:4A:F2:5D:FC:4F:85:E9:83
ValidityWed, 01 Nov 2023 14:08:49 GMT - Tue, 30 Jan 2024 14:08:48 GMT
Size 1.2 MB (1178455 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /wp-content/cache/autoptimize/css/autoptimize_b116041862ab1ae5d7a0e38a5238e3d9.css HTTP/1.1
Host: www.bobomama.eu
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://jpmeb4006.bobomama.eu/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 07 Dec 2023 03:55:33 GMT
content-type: text/css
last-modified: Wed, 24 May 2023 19:14:36 GMT
vary: Accept-Encoding
etag: W/"646e621c-11fb57"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=r5H6dntRp9fCtruskVNaIruQUmM9p7MqujhX7r2Y7HgbgmrHX0PTf2jiC1V3siqGqieMaUowmfMNP380RgGrj7S%2FxDpkmPl8UNVlkcWokqbgZ%2B0eM%2FbJZgVFpzwWsRWWJNQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8319d56a2fbb418b-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
www.ibew665.org/_assets/Homepage
404 Not Found 0 B URL GET HTTP/2 www.ibew665.org/_assets/Homepage
IP
Requested by https://jpmeb4006.bobomama.eu/
Certificate IssuerLet's Encrypt
Subjectwww.ibew665.org
FingerprintB8:C5:65:F9:5D:0C:55:5F:D3:8A:1B:C3:8D:1C:0F:D0:C4:2E:17:48
ValidityFri, 03 Nov 2023 08:48:25 GMT - Thu, 01 Feb 2024 08:48:24 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /_assets/Homepage HTTP/1.1
Host: www.ibew665.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://jpmeb4006.bobomama.eu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
server: nginx/1.18.0 (Ubuntu)
date: Thu, 07 Dec 2023 03:55:34 GMT
content-type: text/html; charset=utf-8
access-control-allow-origin:
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
620835.smushcdn.com/1866352/wp-content/uploads/2020/05/cropped-IBEW-logo_2012-480x480.png?lossy=1&strip=1&webp=1
0 B URL GET 620835.smushcdn.com/1866352/wp-content/uploads/2020/05/cropped-IBEW-logo_2012-480x480.png?lossy=1&strip=1&webp=1
IP
Requested by https://jpmeb4006.bobomama.eu/
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /1866352/wp-content/uploads/2020/05/cropped-IBEW-logo_2012-480x480.png?lossy=1&strip=1&webp=1 HTTP/1.1
Host: 620835.smushcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://jpmeb4006.bobomama.eu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
jpmeb4006.bobomama.eu/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js
200 OK 1.2 kB URL GET HTTP/3 jpmeb4006.bobomama.eu/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js
IP
Requested by https://jpmeb4006.bobomama.eu/
Certificate IssuerGoogle Trust Services LLC
Subjectbobomama.eu
Fingerprint05:4E:B1:BD:9C:AE:ED:BD:34:9A:2B:F5:4A:F2:5D:FC:4F:85:E9:83
ValidityWed, 01 Nov 2023 14:08:49 GMT - Tue, 30 Jan 2024 14:08:48 GMT
File type HTML document, ASCII text, with very long lines (1271), with no line terminators
Hash 40d981045a7516cdadd00e8dccc9c58d
8b8d9a48c6b9d2fba596034ef5db3dd0f2f781c3
71c7d5fc630ff38080f71945be1e8b0c43140d8c25338056b752495e18739c0c
GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1
Host: jpmeb4006.bobomama.eu
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://jpmeb4006.bobomama.eu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 07 Dec 2023 03:55:32 GMT
content-type: application/javascript
last-modified: Tue, 28 Nov 2023 16:06:21 GMT
etag: W/"65660ffd-4d7"
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=6Lt71s%2FWsnnCkp6C50Yth5NI0u4JZPoBVyKQeAkhAnSW9CvYQ57fM1PesucBbVsbsG2EQEzTNT%2BfYFBNz7wNUUnS2OczKaX8gdAKhT1504K%2BwkXGShGTsCtWXVSK%2BlGAJIjA%2BBCE%2BZQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8319d56a5fd4418b-LHR
x-frame-options: DENY
x-content-type-options: nosniff
expires: Sat, 09 Dec 2023 03:55:32 GMT
cache-control: max-age=172800, public
content-encoding: gzip
jpmeb4006.bobomama.eu/bsxxtcx.gif?ref=&url=https%3A//jpmeb4006.bobomama.eu/&scr=1280x1024&q=ibew%2057%20job%20calls&s=&ua=Mozilla/5.0%20(Windows%20NT%2010.0;%20Win64;%20x64;%20rv:105.0)%20Gecko/20100101%20Firefox/105.0&0.3036436024681268
404 Not Found 209 B URL GET HTTP/3 jpmeb4006.bobomama.eu/bsxxtcx.gif?ref=&url=https%3A//jpmeb4006.bobomama.eu/&scr=1280x1024&q=ibew%2057%20job%20calls&s=&ua=Mozilla/5.0%20(Windows%20NT%2010.0;%20Win64;%20x64;%20rv:105.0)%20Gecko/20100101%20Firefox/105.0&0.3036436024681268
IP
Requested by https://jpmeb4006.bobomama.eu/
Certificate IssuerGoogle Trust Services LLC
Subjectbobomama.eu
Fingerprint05:4E:B1:BD:9C:AE:ED:BD:34:9A:2B:F5:4A:F2:5D:FC:4F:85:E9:83
ValidityWed, 01 Nov 2023 14:08:49 GMT - Tue, 30 Jan 2024 14:08:48 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with no line terminators
Hash 9369049af2a14a49b17b75a36a4780c1
6456b6ff851e6ff7a46b521e272fc97a780412ea
afca09c6cc79a549a46bf3705649bffea785c36f00a6b83f64f53513be1a806d
GET /bsxxtcx.gif?ref=&url=https%3A//jpmeb4006.bobomama.eu/&scr=1280x1024&q=ibew%2057%20job%20calls&s=&ua=Mozilla/5.0%20(Windows%20NT%2010.0;%20Win64;%20x64;%20rv:105.0)%20Gecko/20100101%20Firefox/105.0&0.3036436024681268 HTTP/1.1
Host: jpmeb4006.bobomama.eu
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://jpmeb4006.bobomama.eu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
date: Thu, 07 Dec 2023 03:55:34 GMT
content-type: text/html; charset=iso-8859-1
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=0d1WHLDmGr4DMUwNd87Ui7oNKAYnc%2FvOBfSNDDVBMUvq2so9PY39VJEQJasTz8f9o44EqoX7fS6IRVhrU7EUKaunJVRIciw%2FsxbfXn6J3O9RhN0nYl7GpCebuoexBnm4fnSR0QR5AYk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8319d5713c26418b-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
jpmeb4006.bobomama.eu/cloudflare_bot.png
200 OK 10 kB URL GET HTTP/3 jpmeb4006.bobomama.eu/cloudflare_bot.png
IP
Requested by https://jpmeb4006.bobomama.eu/
Certificate IssuerGoogle Trust Services LLC
Subjectbobomama.eu
Fingerprint05:4E:B1:BD:9C:AE:ED:BD:34:9A:2B:F5:4A:F2:5D:FC:4F:85:E9:83
ValidityWed, 01 Nov 2023 14:08:49 GMT - Tue, 30 Jan 2024 14:08:48 GMT
File type PNG image data, 457 x 302, 8-bit/color RGBA, non-interlaced\012- data
Hash 37bd13d5c7731bbba1d7b9abb64832a1
0c8a4cfd75ed0ae99a22a7f352d3044a129549cc
d6197af0d65fd9492e6087e8d7157a185f19ff6bfe519c58d03ad03632cbc616
GET /cloudflare_bot.png HTTP/1.1
Host: jpmeb4006.bobomama.eu
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://jpmeb4006.bobomama.eu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 07 Dec 2023 03:55:34 GMT
content-type: image/png
content-length: 10050
last-modified: Fri, 07 Jul 2023 16:49:33 GMT
etag: "64a8421d-2742"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=LouOyJI5ehAB1SkHuywHrjiDmHXXeGv0QeadezF35RisYv5cruiBQI0Tx8Mt7eSjMCOmL3XcGdLHRTaFOFfHEv%2FvAmieAwhStROlempwUG1FDORyIpNZpmXxCda0e9aGbxyMxLQUCaI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8319d573fdb1418b-LHR
alt-svc: h3=":443"; ma=86400
jpmeb4006.bobomama.eu/2575868.css?1701921332
200 OK 839 B URL GET HTTP/3 jpmeb4006.bobomama.eu/2575868.css?1701921332
IP
Requested by https://jpmeb4006.bobomama.eu/
Certificate IssuerGoogle Trust Services LLC
Subjectbobomama.eu
Fingerprint05:4E:B1:BD:9C:AE:ED:BD:34:9A:2B:F5:4A:F2:5D:FC:4F:85:E9:83
ValidityWed, 01 Nov 2023 14:08:49 GMT - Tue, 30 Jan 2024 14:08:48 GMT
File type ASCII text, with very long lines (931), with no line terminators
Hash 21a3e432e9751b4990f1405756aadb8e
9bde17a301a140f3c43562c54f3e5157a47774ee
0483a30c5cd96ef23f8561d26b1f02dd77d332cdeb3923767114a836045746d1
GET /2575868.css?1701921332 HTTP/1.1
Host: jpmeb4006.bobomama.eu
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://jpmeb4006.bobomama.eu/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 07 Dec 2023 03:55:32 GMT
content-type: text/css;charset=UTF-8
vary: Accept-Encoding
x-powered-by: PHP/8.1.20
cache-control: max-age=14400
cf-cache-status: MISS
last-modified: Thu, 07 Dec 2023 03:55:32 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=YsjP2d%2BUsb7ctjVm48WF2LlK6cB9RAguys9thHQLZMSPUAbebGeWq8qywNBUD8kX8Y3VLdkPJ7Mps5cXZeYdVcxk8DutU9ckLytvAFDaTe2DvklmlQHtSHq34uBJ%2Bz4aUJBUj2ahzBM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8319d56a2fba418b-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
620835.smushcdn.com/1866352/wp-content/uploads/2020/05/cropped-IBEW-logo_2012-480x480.png?lossy=1&strip=1&webp=1
0 B URL GET 620835.smushcdn.com/1866352/wp-content/uploads/2020/05/cropped-IBEW-logo_2012-480x480.png?lossy=1&strip=1&webp=1
IP
Requested by https://jpmeb4006.bobomama.eu/
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /1866352/wp-content/uploads/2020/05/cropped-IBEW-logo_2012-480x480.png?lossy=1&strip=1&webp=1 HTTP/1.1
Host: 620835.smushcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://jpmeb4006.bobomama.eu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
www.youtube.com/embed/SG25-uBEtGU
200 OK 93 kB URL GET HTTP/2 www.youtube.com/embed/SG25-uBEtGU
IP
Requested by https://jpmeb4006.bobomama.eu/
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint4C:0D:17:8C:F1:30:7C:3A:6F:9B:8E:B4:83:0E:5C:BD:ED:17:3E:95
ValidityMon, 23 Oct 2023 11:18:24 GMT - Mon, 15 Jan 2024 11:18:23 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /embed/SG25-uBEtGU HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://jpmeb4006.bobomama.eu/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/html; charset=utf-8
x-content-type-options: nosniff
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Thu, 07 Dec 2023 03:55:33 GMT
strict-transport-security: max-age=31536000
cross-origin-opener-policy-report-only: same-origin; report-to="youtube_main"
origin-trial: AvC9UlR6RDk2crliDsFl66RWLnTbHrDbp+DiY6AYz/PNQ4G4tdUTjrHYr2sghbkhGQAVxb7jaPTHpEVBz0uzQwkAAAB4eyJvcmlnaW4iOiJodHRwczovL3lvdXR1YmUuY29tOjQ0MyIsImZlYXR1cmUiOiJXZWJWaWV3WFJlcXVlc3RlZFdpdGhEZXByZWNhdGlvbiIsImV4cGlyeSI6MTcxOTUzMjc5OSwiaXNTdWJkb21haW4iOnRydWV9
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factor=*, ch-ua-platform=*, ch-ua-platform-version=*
report-to: {"group":"youtube_main","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube_main"}]}
content-security-policy-report-only: require-trusted-types-for 'script';report-uri /cspreport
cross-origin-resource-policy: cross-origin
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657?hl=en for more info."
content-encoding: br
server: ESF
x-xss-protection: 0
set-cookie: YSC=KWEKklw_QwE; Domain=.youtube.com; Path=/; Secure; HttpOnly; SameSite=none
VISITOR_INFO1_LIVE=7HTRr5VOnyQ; Domain=.youtube.com; Expires=Tue, 04-Jun-2024 03:55:33 GMT; Path=/; Secure; HttpOnly; SameSite=none
VISITOR_PRIVACY_METADATA=CgJOTxICEgA%3D; Domain=.youtube.com; Expires=Tue, 04-Jun-2024 03:55:33 GMT; Path=/; Secure; HttpOnly; SameSite=lax
CONSENT=PENDING+421; expires=Sat, 06-Dec-2025 03:55:33 GMT; path=/; domain=.youtube.com; Secure
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
188.114.97.1
69.64.226.238
104.21.63.217