| sicantik.pro/video/vk-live-periscope-16x16-picture/?ysclid=lvcssfspvs648857255 |  104.21.71.64 | | 15 kB |
URL sicantik.pro/video/vk-live-periscope-16x16-picture/?ysclid=lvcssfspvs648857255 IP104.21.71.64:0
Hash4589991bdd2f0fc16ce69e415a4967ea d51fc5b12e10a92d00b06aff4a37f76a12c28acb fc123c2247844c23bfd00c1feea8f63c3b14c323254cd2820d1a7786133e8cf8
GET /video/vk-live-periscope-16x16-picture/?ysclid=lvcssfspvs648857255 HTTP/1.1
Host: sicantik.pro
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Wed, 24 Apr 2024 03:40:28 GMT
content-type: text/html; charset=UTF-8
location: https://sicantik.pro/video/vk-live-periscope-16x16-picture/
x-dns-prefetch-control: on
link: <https://sicantik.pro/wp-json/>; rel="https://api.w.org/"
x-litespeed-tag: be3_HTTP.200,be3_HTTP.302
x-redirect-by: WordPress
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=l2gl8h8xf1m0AtDwBE03U3yRxABQTeBx9gQK%2FmlOJWDB7%2BcEEWoCio8OBH%2B%2Bqy4Ah5%2B129O7j4vNJLs%2FCnGetOdIgTH2X0kVzLhgYES7fiB57RkCFxwJfrmMHpNF4yU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 879312711e9b5699-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| sicantik.pro/ |  172.67.170.2 | | 167 B |
IP172.67.170.2:0
File typeHTML document, ASCII text, with CRLF line terminators Hash0104c301c5e02bd6148b8703d19b3a73 7436e0b4b1f8c222c38069890b75fa2baf9ca620 446a6087825fa73eadb045e5a2e9e2adf7df241b571228187728191d961dda1f
GET / HTTP/1.1
Host: sicantik.pro
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Date: Wed, 24 Apr 2024 03:40:30 GMT
Content-Type: text/html
Content-Length: 167
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Wed, 24 Apr 2024 04:40:30 GMT
Location: https://sicantik.pro/
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kZFngxTYLNQt4bgSkHewG6TL2L1c8DlMM9980x1yLgK1oKYtya6eVCG1TYqRO9dF1hI7MXihOf62Kfzp%2FvnsjHSZ8CiYhlTINeJa0BIPmu89j%2FpOe%2F9Wk%2F7yNIuKlqI%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 879312832a3cb51d-OSL
alt-svc: h2=":443"; ma=60
|
|
| sicantik.pro/wp-content/uploads/2023/12/250logo.png | 104.21.71.64 | 200 OK | 19 kB |
URL GET HTTP/3sicantik.pro/wp-content/uploads/2023/12/250logo.png IP104.21.71.64:443
Requested byhttps://sicantik.pro/video/vk-live-periscope-16x16-picture/ CertificateIssuerGoogle Trust Services LLC Subjectsicantik.pro FingerprintC5:23:EF:A4:D1:09:03:7C:51:52:DC:24:7C:20:A9:1D:38:31:3E:32 ValidityFri, 15 Mar 2024 07:05:18 GMT - Thu, 13 Jun 2024 07:05:17 GMT
File typePNG image data, 250 x 93, 8-bit/color RGBA, non-interlaced Hash842c882b28e662f9c08b68201e4f7832 410ac81ff5315bc804a8d35ceb6af5b53e7f25ad 69bab52362878030bb973df332dac896207e0ceffe209c72d3451bc63e881528
GET /wp-content/uploads/2023/12/250logo.png HTTP/1.1
Host: sicantik.pro
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sicantik.pro/video/vk-live-periscope-16x16-picture/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 24 Apr 2024 03:40:30 GMT
content-type: image/png
content-length: 19113
vary: Accept-Encoding
last-modified: Sun, 24 Dec 2023 13:58:58 GMT
cache-control: public, max-age=10368000
expires: Sat, 20 Jul 2024 08:23:03 GMT
cf-cache-status: HIT
age: 968235
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=elVGQx2DxVH7FaLWwCSxf8gJUDIeSX5bJpxLi95t4wmyBGzchBkkIYcBgvU0bqOyyUQIK2%2B5Swi8y7yzMeEitwWOMeISfXHIToLLJln5L52nDHn8l%2BwBewDysv01tDY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 879312851b88b515-OSL
alt-svc: h3=":443"; ma=86400
|
|
| sicantik.pro/wp-content/uploads/2023/12/fav.png | 104.21.71.64 | 200 OK | 10 kB |
URL GET HTTP/3sicantik.pro/wp-content/uploads/2023/12/fav.png IP104.21.71.64:443
Requested byhttps://sicantik.pro/video/vk-live-periscope-16x16-picture/ CertificateIssuerGoogle Trust Services LLC Subjectsicantik.pro FingerprintC5:23:EF:A4:D1:09:03:7C:51:52:DC:24:7C:20:A9:1D:38:31:3E:32 ValidityFri, 15 Mar 2024 07:05:18 GMT - Thu, 13 Jun 2024 07:05:17 GMT
File typePNG image data, 86 x 86, 8-bit/color RGBA, non-interlaced Hashed5c880a296e0a8091d83ef5af0e25aa 2326710b4b937c9a7f0e5599a9ce652162a50f6a dafc4433053ffd14a5a94c0538bfd549ad43efe909be90b3d76eaf6db26036dd
GET /wp-content/uploads/2023/12/fav.png HTTP/1.1
Host: sicantik.pro
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sicantik.pro/video/vk-live-periscope-16x16-picture/
Cookie: bnState_1998535={"impressions":1,"delayStarted":0}
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 24 Apr 2024 03:40:31 GMT
content-type: image/png
content-length: 10189
vary: Accept-Encoding
last-modified: Sun, 24 Dec 2023 13:58:59 GMT
cache-control: public, max-age=10368000
expires: Sat, 20 Jul 2024 08:23:09 GMT
cf-cache-status: HIT
age: 2819173
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=96hWkykB4C8%2ByBzC7ptS9nO9Bu%2F6iosttRQ4VRiHlgqqNcmKN%2FdH%2FOqesd4ixaVZMCez8GV6v58uvGLJS7l4kUHokmT6EOTvE62LTtLDkdZI%2B3sh2XMPMpGJmsVa9As%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 879312878c21b515-OSL
alt-svc: h3=":443"; ma=86400
|
|
| sicantik.pro/wp-content/uploads/2023/12/fav-86x84.png | 104.21.71.64 | 200 OK | 12 kB |
URL GET HTTP/3sicantik.pro/wp-content/uploads/2023/12/fav-86x84.png IP104.21.71.64:443
Requested byhttps://sicantik.pro/video/vk-live-periscope-16x16-picture/ CertificateIssuerGoogle Trust Services LLC Subjectsicantik.pro FingerprintC5:23:EF:A4:D1:09:03:7C:51:52:DC:24:7C:20:A9:1D:38:31:3E:32 ValidityFri, 15 Mar 2024 07:05:18 GMT - Thu, 13 Jun 2024 07:05:17 GMT
File typePNG image data, 86 x 84, 8-bit/color RGBA, non-interlaced Hashd3c7b96972e4108b8def5eb6cbfceb50 83e0d898250063dec06379479b7f4cf120ddc5e5 ca12e667fb46ba2bc782f0abed3f59d92f409ebeb09be38d200308a534c22ca7
GET /wp-content/uploads/2023/12/fav-86x84.png HTTP/1.1
Host: sicantik.pro
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sicantik.pro/video/vk-live-periscope-16x16-picture/
Cookie: bnState_1998535={"impressions":1,"delayStarted":0}
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 24 Apr 2024 03:40:31 GMT
content-type: image/png
content-length: 11694
vary: Accept-Encoding
last-modified: Sun, 24 Dec 2023 13:59:00 GMT
cache-control: public, max-age=10368000
expires: Sat, 20 Jul 2024 08:23:09 GMT
cf-cache-status: HIT
age: 2815853
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=NL9XEq%2BtaMw62NsU4BFAq3aJNBD82fS7erCAj8REPkdxVZrxSrOsDU1o3A%2FBdQFD%2BRR8OR90xeNnLQqD6rZu1MJWVpE394Q8zG44tutLRYp%2BnSkCMlz8K1sFjOHisIg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 879312878c22b515-OSL
alt-svc: h3=":443"; ma=86400
|
|
| cdn.cloudfrale.com/bn/db1/fc8/a8d/db1fc8a8dadd8a66dc20bacce73a0d2e9e9e2807.mp4 | 45.133.44.20 | | 357 kB |
URL cdn.cloudfrale.com/bn/db1/fc8/a8d/db1fc8a8dadd8a66dc20bacce73a0d2e9e9e2807.mp4 IP45.133.44.20:0 ASN#39572 DataWeb Global Group B.V.
File typeISO Media, MP4 v2 [ISO 14496-14] Size357 kB (357139 bytes) Hashd4938e1a3b06ac9ac6dd49f43af75fc2 db1fc8a8dadd8a66dc20bacce73a0d2e9e9e2807 6bfb40cb5c5f9367a399aa9804488db58012b397688884903eb7da571f53f5bb
GET /bn/db1/fc8/a8d/db1fc8a8dadd8a66dc20bacce73a0d2e9e9e2807.mp4 HTTP/1.1
Host: cdn.cloudfrale.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 206 Partial Content
date: Wed, 24 Apr 2024 03:40:31 GMT
content-type: video/mp4
content-length: 357139
server: nginx/1.24.0
etag: d4938e1a3b06ac9ac6dd49f43af75fc2
last-modified: Sun, 05 Nov 2023 16:31:37 GMT
x-timestamp: 1699201896.46460
x-trans-id: txecfe0990e95840dcb961c-0065ca48c0
x-openstack-request-id: txecfe0990e95840dcb961c-0065ca48c0
access-control-allow-methods: HEAD,GET,POST,PUT,PATCH,DELETE,OPTIONS
access-control-allow-headers: Content-Type,X-Requested-With,X-Auth-Token,X-Openstack-Request-Id,X-Container-Meta-type,X-Container-Meta-Temp-URL-Key,Authorization
access-control-expose-headers: X-Container-Meta-Temp-Url-Key,X-Container-Bytes-Used,Last-Modified,X-Timestamp
expires: Fri, 26 Apr 2024 03:40:31 GMT
cache-control: max-age=172800
x-proxy-cache: HIT
access-control-allow-origin: *
content-range: bytes 0-357138/357139
X-Firefox-Spdy: h2
|
|
| go.xlivrdr.com/smartpop/c6913f01500457c0bdb8597e6d4286a54c12f8dc120ca06a0ab250733289acaa?userId=d100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca&sourceId=594409&memberId=k8X2gqV4afNiVfLr1JMe3Rwg7hFN9UclHN3ckU-4bOP9jW_EC1lBm4BCd23SdLsvMbXoxK0Bz7CNgGtfFFWfA7_UBu3Fb6o7JVN1sF43B4UdQAQ1_gUIDRUi&p1=4350989 | 172.64.147.206 | | 0 B |
URL go.xlivrdr.com/smartpop/c6913f01500457c0bdb8597e6d4286a54c12f8dc120ca06a0ab250733289acaa?userId=d100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca&sourceId=594409&memberId=k8X2gqV4afNiVfLr1JMe3Rwg7hFN9UclHN3ckU-4bOP9jW_EC1lBm4BCd23SdLsvMbXoxK0Bz7CNgGtfFFWfA7_UBu3Fb6o7JVN1sF43B4UdQAQ1_gUIDRUi&p1=4350989 IP172.64.147.206:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /smartpop/c6913f01500457c0bdb8597e6d4286a54c12f8dc120ca06a0ab250733289acaa?userId=d100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca&sourceId=594409&memberId=k8X2gqV4afNiVfLr1JMe3Rwg7hFN9UclHN3ckU-4bOP9jW_EC1lBm4BCd23SdLsvMbXoxK0Bz7CNgGtfFFWfA7_UBu3Fb6o7JVN1sF43B4UdQAQ1_gUIDRUi&p1=4350989 HTTP/1.1
Host: go.xlivrdr.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tsyndicate.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Wed, 24 Apr 2024 03:40:31 GMT
content-length: 0
location: https://creative.mnaspm.com/widgets/v4/Universal?action=sbSignupWithModel&campaignId=c6913f01500457c0bdb8597e6d4286a54c12f8dc120ca06a0ab250733289acaa&campaignType=smartpop&creativeId=6c0b1b4a99ba447f4bead9b76a7621269ec060b2297874834d7b37047f348300&iterationId=868050&masterSmartpopId=1605&memberId=k8X2gqV4afNiVfLr1JMe3Rwg7hFN9UclHN3ckU-4bOP9jW_EC1lBm4BCd23SdLsvMbXoxK0Bz7CNgGtfFFWfA7_UBu3Fb6o7JVN1sF43B4UdQAQ1_gUIDRUi&mlView=1&p1=4350989&quality=240p&ruleId=3&smartpopId=1062&sortBy=recommended&sourceId=594409&tag=girls&usePreroll=0&userId=d100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca&variationId=33204&webp=1
access-control-allow-credentials: true
access-control-allow-headers: Content-Type, Content-Length, Accept-Encoding, x-requested-with
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64
cf-cache-status: DYNAMIC
set-cookie: _var=775628.33204_YzRmMzYxZTI=; Path=/; Expires=Fri, 24 May 2024 03:40:31 GMT; HttpOnly; Secure; SameSite=None
__cflb=02DiuDFRFiBZBvMSLtr5TfCC2emAa5z1n1NydrJ9Srj64; SameSite=None; Secure; path=/; expires=Thu, 25-Apr-24 03:40:31 GMT; HttpOnly
server: cloudflare
cf-ray: 8793128a78dc56a5-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| video.ktkjmp.com/adsbygoogle.js | 104.18.53.225 | 200 OK | 16 B |
URL GET HTTP/3video.ktkjmp.com/adsbygoogle.js IP104.18.53.225:443
Requested byhttps://creative.mnaspm.com/widgets/v4/Universal?action=sbSignupWithModel&campaignId=c6913f01500457c0bdb8597e6d4286a54c12f8dc120ca06a0ab250733289acaa&campaignType=smartpop&creativeId=6c0b1b4a99ba447f4bead9b76a7621269ec060b2297874834d7b37047f348300&iterationId=868050&masterSmartpopId=1605&memberId=1iKm4C12dUFz0NsKwm42eoM25rdtnA73unIs2Bar773UB24TtkrjXwYPwhlevI3sx82-XQWbEXNv9WZUTSSexgIncQnJZSU4z0uLQsa71yynA5rQ_gUIDRUi&mlView=1&p1=4350989&quality=240p&ruleId=3&smartpopId=1062&sortBy=recommended&sourceId=594409&tag=girls&usePreroll=0&userId=d100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca&variationId=33204&webp=1 CertificateIssuerCloudflare, Inc. Subjectvideo.ktkjmp.com Fingerprint02:C1:75:9D:DD:6A:66:20:9E:A3:46:1B:5E:A4:87:83:5A:09:92:93 ValiditySun, 02 Jul 2023 00:00:00 GMT - Mon, 01 Jul 2024 23:59:59 GMT
Hash3d7f7a60216d40dea48e495fef6903c9 fecdb5184f55cf012563d78940eb97b10b9cc99b 96d83ac9f20fc0b88404f307f135e212642e02d6ea295c96b28aed0d771a224f
GET /adsbygoogle.js HTTP/1.1
Host: video.ktkjmp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://creative.mnaspm.com/
Origin: https://creative.mnaspm.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 24 Apr 2024 03:40:32 GMT
content-type: application/javascript
content-length: 16
x-amz-id-2: eOt3YX0Nm2YrsRFghHjY+ldPpZhMsRS8Tg9HXo+sQY2MfQ8piotah5MMqRgsIwcNTLmVbQ2iqoU=
x-amz-request-id: Y49M74J1R1NSP1TJ
last-modified: Thu, 10 Mar 2022 13:52:07 GMT
etag: "3d7f7a60216d40dea48e495fef6903c9"
x-amz-meta-s3cmd-attrs: atime:1646920284/ctime:1646920283/gid:20/gname:staff/md5:3d7f7a60216d40dea48e495fef6903c9/mode:33188/mtime:1646920283/uid:501/uname:mikhailchubar
x-amz-version-id: eIgLIBoMMcsEXtxOH6UDjWyfAquRpkIG
access-control-allow-origin: https://creative.mnaspm.com
access-control-allow-credentials: true
access-control-allow-headers: Content-Type, Content-Length, Accept-Encoding, x-requested-with
cf-cache-status: HIT
age: 5524
expires: Wed, 24 Apr 2024 07:40:32 GMT
cache-control: public, max-age=14400
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 8793128ceeeab4fa-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| pxl.tsyndicate.com/api/v1/p/p.js?p=APeIQFMmDJkycuaI0BGjBgsRYcbQWRjjIZ0zC0WMuWFmjI0bG1vIMAOyBQ0xM8y0yEGjRo6VZW7kiGFjTAySYWiIeBimzpiMOWTgEDPyhowWOGbgUNlyhg2kYW7caGGmxo0wVmWEwWGzxk6IZOxQpHEjBo6HcOqIWRh0howZPOHAWUiWBo2KIubAmaiDxowaMHLgyPFwTJu5OlzaDcyTjJmFMm48FOPGzcK_MgfbeNjGDUaGbmXAQNv5s40adx_WiZERDR06cOboePHizBsXeNiksSOHjBwXY960eTGnTRg5sN_AeeFxZkoYDWHAaAkShhgyYnC4vFHGBhkaQm1gpWFzJA4y5WGMCQNDPIwwRAHfmOF2cMQwYX7UmYMwCZkeZMQgHUmOxYCSdpGN4ZIZWkE3Rnc1nCeGGdmJYUMOF9KQQ3k20XAhTTSYQQMMONB0w3dhxLAeF3VIJ4MNc7xRhxwP-teDYiPmwKKLNrRRRhti9PffGjhgIcMZcVhBQxhmOJGGFWYwIUcMSjRRxgxS3HHGDWgY4UQOVYzBBhJOzDDGGlWYJMYTUOSgxhVfFDFEDGwI0QYNQgxBxltTkMHEHHY0IQYWb-CxBAxC6HHDEE6ccQQdZhhhxBVmBHHDF1UIUccMRlj4xg1KWOFEDHMY4ZcQNFRBRhRBRBHDF2dUkQQRUlSRxo4wvAhHDD34BZhgOXxFhnAZzZHGem7QkcYaLsAhxxtfrcfXFjPE0AVaNF7mQg432CBDGS3A4JAIEy4EgwvQFQZHG184-5MO5-Z6Q1Iz0PCQHHYgNsNoIpQxxrrmuhCDUKrVkQZQHeUAA4U0tMARdGoa2AJ8ZuAwMQ44CCVGTjLEkEOwD6WBmAgzbXsueAKj9pUcX4gMVAwmu4ByQzqpFkZGTbyhRxpssBHGCzWgCwIKWMQQww4gMJGGG3XgAQIeONjwhQ00II2vDhiimwIIR_i7xhsviCYgdNCBYEQacpRhRqEvZA1DtO-K4MQTX73B8hhxz_0VG3EX4YSwZdjxRdpsUGTVvE7hIN29Z1imgwwRSibCQYKLIcdCGD9E-RdtvEEGZFHj5Ru0OsAlwhsKPY5toXksNC4ZeThOhxx1lHGv2q29FttsxB0bRrLLNvvsC1_dkdHAin-FxvG51pwXvhk9S0cYdNjdQh1upEFHC_u6gN7Adc8BfekCujRTDfRpHvdBX3wvw1d0tEFRWTPksC8M1VrUxvsM0W-_dNWagUwaM7gy6OUL1JtfDOp3v_z1S3BhYANC6JC6LcRAMjS5FkTEwJfJqa0nbJgIWvhmrsJ8BgZ9UEBAAA%3D%3D&s=c3e346980514198ba555cf9808a942171bec17bb5683c0c1c99cca78c26a9fb81713930031&w=t&r=1&d=482&priv=true |  176.9.61.214 | | 24 B |
URL pxl.tsyndicate.com/api/v1/p/p.js?p=APeIQFMmDJkycuaI0BGjBgsRYcbQWRjjIZ0zC0WMuWFmjI0bG1vIMAOyBQ0xM8y0yEGjRo6VZW7kiGFjTAySYWiIeBimzpiMOWTgEDPyhowWOGbgUNlyhg2kYW7caGGmxo0wVmWEwWGzxk6IZOxQpHEjBo6HcOqIWRh0howZPOHAWUiWBo2KIubAmaiDxowaMHLgyPFwTJu5OlzaDcyTjJmFMm48FOPGzcK_MgfbeNjGDUaGbmXAQNv5s40adx_WiZERDR06cOboePHizBsXeNiksSOHjBwXY960eTGnTRg5sN_AeeFxZkoYDWHAaAkShhgyYnC4vFHGBhkaQm1gpWFzJA4y5WGMCQNDPIwwRAHfmOF2cMQwYX7UmYMwCZkeZMQgHUmOxYCSdpGN4ZIZWkE3Rnc1nCeGGdmJYUMOF9KQQ3k20XAhTTSYQQMMONB0w3dhxLAeF3VIJ4MNc7xRhxwP-teDYiPmwKKLNrRRRhti9PffGjhgIcMZcVhBQxhmOJGGFWYwIUcMSjRRxgxS3HHGDWgY4UQOVYzBBhJOzDDGGlWYJMYTUOSgxhVfFDFEDGwI0QYNQgxBxltTkMHEHHY0IQYWb-CxBAxC6HHDEE6ccQQdZhhhxBVmBHHDF1UIUccMRlj4xg1KWOFEDHMY4ZcQNFRBRhRBRBHDF2dUkQQRUlSRxo4wvAhHDD34BZhgOXxFhnAZzZHGem7QkcYaLsAhxxtfrcfXFjPE0AVaNF7mQg432CBDGS3A4JAIEy4EgwvQFQZHG184-5MO5-Z6Q1Iz0PCQHHYgNsNoIpQxxrrmuhCDUKrVkQZQHeUAA4U0tMARdGoa2AJ8ZuAwMQ44CCVGTjLEkEOwD6WBmAgzbXsueAKj9pUcX4gMVAwmu4ByQzqpFkZGTbyhRxpssBHGCzWgCwIKWMQQww4gMJGGG3XgAQIeONjwhQ00II2vDhiimwIIR_i7xhsviCYgdNCBYEQacpRhRqEvZA1DtO-K4MQTX73B8hhxz_0VG3EX4YSwZdjxRdpsUGTVvE7hIN29Z1imgwwRSibCQYKLIcdCGD9E-RdtvEEGZFHj5Ru0OsAlwhsKPY5toXksNC4ZeThOhxx1lHGv2q29FttsxB0bRrLLNvvsC1_dkdHAin-FxvG51pwXvhk9S0cYdNjdQh1upEFHC_u6gN7Adc8BfekCujRTDfRpHvdBX3wvw1d0tEFRWTPksC8M1VrUxvsM0W-_dNWagUwaM7gy6OUL1JtfDOp3v_z1S3BhYANC6JC6LcRAMjS5FkTEwJfJqa0nbJgIWvhmrsJ8BgZ9UEBAAA%3D%3D&s=c3e346980514198ba555cf9808a942171bec17bb5683c0c1c99cca78c26a9fb81713930031&w=t&r=1&d=482&priv=true IP176.9.61.214:0 ASN#24940 Hetzner Online GmbH
File typeASCII text, with no line terminators Hash0959ba36d476b6dc1994ba3c678b07c4 d30b94da72daa02766965206a85b7e0356375f5e 897410b87e27e3dfba3a7d6caab315a5e69cc941bb96d91fc74878a9b051843a
GET /api/v1/p/p.js?p=APeIQFMmDJkycuaI0BGjBgsRYcbQWRjjIZ0zC0WMuWFmjI0bG1vIMAOyBQ0xM8y0yEGjRo6VZW7kiGFjTAySYWiIeBimzpiMOWTgEDPyhowWOGbgUNlyhg2kYW7caGGmxo0wVmWEwWGzxk6IZOxQpHEjBo6HcOqIWRh0howZPOHAWUiWBo2KIubAmaiDxowaMHLgyPFwTJu5OlzaDcyTjJmFMm48FOPGzcK_MgfbeNjGDUaGbmXAQNv5s40adx_WiZERDR06cOboePHizBsXeNiksSOHjBwXY960eTGnTRg5sN_AeeFxZkoYDWHAaAkShhgyYnC4vFHGBhkaQm1gpWFzJA4y5WGMCQNDPIwwRAHfmOF2cMQwYX7UmYMwCZkeZMQgHUmOxYCSdpGN4ZIZWkE3Rnc1nCeGGdmJYUMOF9KQQ3k20XAhTTSYQQMMONB0w3dhxLAeF3VIJ4MNc7xRhxwP-teDYiPmwKKLNrRRRhti9PffGjhgIcMZcVhBQxhmOJGGFWYwIUcMSjRRxgxS3HHGDWgY4UQOVYzBBhJOzDDGGlWYJMYTUOSgxhVfFDFEDGwI0QYNQgxBxltTkMHEHHY0IQYWb-CxBAxC6HHDEE6ccQQdZhhhxBVmBHHDF1UIUccMRlj4xg1KWOFEDHMY4ZcQNFRBRhRBRBHDF2dUkQQRUlSRxo4wvAhHDD34BZhgOXxFhnAZzZHGem7QkcYaLsAhxxtfrcfXFjPE0AVaNF7mQg432CBDGS3A4JAIEy4EgwvQFQZHG184-5MO5-Z6Q1Iz0PCQHHYgNsNoIpQxxrrmuhCDUKrVkQZQHeUAA4U0tMARdGoa2AJ8ZuAwMQ44CCVGTjLEkEOwD6WBmAgzbXsueAKj9pUcX4gMVAwmu4ByQzqpFkZGTbyhRxpssBHGCzWgCwIKWMQQww4gMJGGG3XgAQIeONjwhQ00II2vDhiimwIIR_i7xhsviCYgdNCBYEQacpRhRqEvZA1DtO-K4MQTX73B8hhxz_0VG3EX4YSwZdjxRdpsUGTVvE7hIN29Z1imgwwRSibCQYKLIcdCGD9E-RdtvEEGZFHj5Ru0OsAlwhsKPY5toXksNC4ZeThOhxx1lHGv2q29FttsxB0bRrLLNvvsC1_dkdHAin-FxvG51pwXvhk9S0cYdNjdQh1upEFHC_u6gN7Adc8BfekCujRTDfRpHvdBX3wvw1d0tEFRWTPksC8M1VrUxvsM0W-_dNWagUwaM7gy6OUL1JtfDOp3v_z1S3BhYANC6JC6LcRAMjS5FkTEwJfJqa0nbJgIWvhmrsJ8BgZ9UEBAAA%3D%3D&s=c3e346980514198ba555cf9808a942171bec17bb5683c0c1c99cca78c26a9fb81713930031&w=t&r=1&d=482&priv=true HTTP/1.1
Host: pxl.tsyndicate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tsyndicate.com/
Cookie: ts_uid=9fc90fb4-7f01-4b1b-abf8-a8828ba42199; bfq=APeIECNCx5YZNW7kwJHDRhcWIsYU3BLjoYgyE2PciEEDRgwbNGZU7KMg
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 24 Apr 2024 03:40:32 GMT
content-type: text/plain; charset=utf-8
content-length: 24
x-robots-tag: noindex, nofollow
X-Firefox-Spdy: h2
|
|
| xhamsterlive.com/checkUrl | 104.17.112.106 | | 15 B |
URL xhamsterlive.com/checkUrl IP104.17.112.106:0
Hash7fb97eb7c8636552ad068f6d56b5ea34 b69679936779fb02503bc0fe1374a737cc762ecb e78008828abaa93c4462e326ef384dcda1443352a0f24bdeedada6a6fdbfd1d5
GET /checkUrl HTTP/1.1
Host: xhamsterlive.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en
Accept-Encoding: gzip, deflate, br
Referer: https://creative.mnaspm.com/
Origin: https://creative.mnaspm.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 24 Apr 2024 03:40:32 GMT
content-type: application/json
content-length: 15
access-control-allow-origin: https://creative.mnaspm.com
cf-cache-status: DYNAMIC
set-cookie: __cflb=02DiuFLvK1H1SdXppSyXNWFxMYZrPvd7au8Se8tgb7Nnp; SameSite=None; Secure; path=/; expires=Thu, 25-Apr-24 02:40:32 GMT; HttpOnly
_cfuvid=_nBH85dYSRyR8foemd3lgVK12AEE6LjlNEAZ9cLXQqQ-1713930032425-0.0.1.1-604800000; path=/; domain=.xhamsterlive.com; HttpOnly; Secure; SameSite=None
server: cloudflare
cf-ray: 8793128e7b83b503-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| img.strpst.com/thumbs/1713929970/138907472_webp | 104.17.11.106 | | 34 kB |
URL img.strpst.com/thumbs/1713929970/138907472_webp IP104.17.11.106:0
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 640x360, Scaling: [none]x[none], YUV color, decoders should clamp Hash8e247fec603bdb714229dea36230151c fede089114996714d88e72d58aa2f1d58e4082e5 1abe9fc794ee638e11ac2f06e6701df7e13db95c3173da2932de5f544c1edca4
GET /thumbs/1713929970/138907472_webp HTTP/1.1
Host: img.strpst.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://creative.mnaspm.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 24 Apr 2024 03:40:32 GMT
content-type: image/webp
content-length: 33930
etag: "8e247fec603bdb714229dea36230151c"
last-modified: Wed, 24 Apr 2024 03:38:41 GMT
cache-control: public, max-age=1800, s-maxage=1800
access-control-allow-origin: *
access-control-allow-methods: GET
cf-cache-status: HIT
age: 38
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 8793128eeeb356ca-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| img.strpst.com/thumbs/1713929970/153213803_webp | 104.17.11.106 | | 16 kB |
URL img.strpst.com/thumbs/1713929970/153213803_webp IP104.17.11.106:0
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 640x360, Scaling: [none]x[none], YUV color, decoders should clamp Hashe80052b748197116149ed77d863c00f6 b278c39e971a2f36ecd997a755b59ba4ba9ac39b d77399d2aae53238442dfab32e240d85ec61c95bcd0fa347338ba9f5ee502280
GET /thumbs/1713929970/153213803_webp HTTP/1.1
Host: img.strpst.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://creative.mnaspm.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 24 Apr 2024 03:40:32 GMT
content-type: image/webp
content-length: 15898
etag: "e80052b748197116149ed77d863c00f6"
last-modified: Wed, 24 Apr 2024 03:38:44 GMT
cache-control: public, max-age=1800, s-maxage=1800
access-control-allow-origin: *
access-control-allow-methods: GET
cf-cache-status: HIT
age: 38
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 8793128eeeb556ca-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| img.strpst.com/thumbs/1713929970/152401450_webp | 104.17.11.106 | | 28 kB |
URL img.strpst.com/thumbs/1713929970/152401450_webp IP104.17.11.106:0
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 640x360, Scaling: [none]x[none], YUV color, decoders should clamp Hash146b242e5503a0d8b3fc56c72650f0f7 b9f2a7dceca576b70471b37c9f8d7f54e6cfd259 4108d17aefefd98d7df27984240a761c17291ee329534f7204aaaf6af88f8b72
GET /thumbs/1713929970/152401450_webp HTTP/1.1
Host: img.strpst.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://creative.mnaspm.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 24 Apr 2024 03:40:32 GMT
content-type: image/webp
content-length: 28228
etag: "146b242e5503a0d8b3fc56c72650f0f7"
last-modified: Wed, 24 Apr 2024 03:38:34 GMT
cache-control: public, max-age=1800, s-maxage=1800
access-control-allow-origin: *
access-control-allow-methods: GET
cf-cache-status: HIT
age: 59
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 8793128eeeb456ca-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| img.strpst.com/thumbs/1713929970/153643729_webp | 104.17.11.106 | | 9.6 kB |
URL img.strpst.com/thumbs/1713929970/153643729_webp IP104.17.11.106:0
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 480x360, Scaling: [none]x[none], YUV color, decoders should clamp Hashb31850b9d74e636d8e4ddea9b5c17026 11421f3beb2f5410fd7cbc2abd590cdef18f44d4 ffc7c4a6fea5b8a54e5a8162ea5745ef5265c8fe0fb50497cd2afb1e0cf36313
GET /thumbs/1713929970/153643729_webp HTTP/1.1
Host: img.strpst.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://creative.mnaspm.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 24 Apr 2024 03:40:32 GMT
content-type: image/webp
content-length: 9630
etag: "b31850b9d74e636d8e4ddea9b5c17026"
last-modified: Wed, 24 Apr 2024 03:39:04 GMT
cache-control: public, max-age=1800, s-maxage=1800
access-control-allow-origin: *
access-control-allow-methods: GET
cf-cache-status: HIT
age: 38
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 8793128eeeb656ca-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| img.strpst.com/thumbs/1713929970/152644943_webp | 104.17.11.106 | | 26 kB |
URL img.strpst.com/thumbs/1713929970/152644943_webp IP104.17.11.106:0
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 640x360, Scaling: [none]x[none], YUV color, decoders should clamp Hashf9c05e5d888d09b7837c5144af4b4478 e1b96c69812e1c2dce39ce18e660965ab78d4dea 2097ace1a24b7f77a137405426a50a3e7a99c1cb1d7fce7ae7c6f52ab7041ae9
GET /thumbs/1713929970/152644943_webp HTTP/1.1
Host: img.strpst.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://creative.mnaspm.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 24 Apr 2024 03:40:32 GMT
content-type: image/webp
content-length: 25452
etag: "f9c05e5d888d09b7837c5144af4b4478"
last-modified: Wed, 24 Apr 2024 03:38:49 GMT
cache-control: public, max-age=1800, s-maxage=1800
access-control-allow-origin: *
access-control-allow-methods: GET
cf-cache-status: HIT
age: 69
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 8793128eeeb756ca-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| go.mnaspm.com/abc.gif?action=sbSignupWithModel&campaignId=c6913f01500457c0bdb8597e6d4286a54c12f8dc120ca06a0ab250733289acaa&campaignType=smartpop&creativeId=6c0b1b4a99ba447f4bead9b76a7621269ec060b2297874834d7b37047f348300&iterationId=868050&masterSmartpopId=1605&p1=4350989&quality=240p&ruleId=3&smartpopId=1062&sourceId=594409&userId=d100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca&variationId=33204&thumbSizeKey=big&language=en&thumbFit=cover&stripcashR=0&thumbType=default&kbLimit=0&modelsInWatchHistoryCount=-1&modelsInFavoritesCount=-1&userType=newuser&modelsCount=10&segment=hls-newAPI&landing=WidgetV4Universal&referrer=https%3A%2F%2Ftsyndicate.com%2F&i=0&ib=0&filtersMatch=0&m=%5B%7B%22type%22%3A%22navigation%22%2C%22startTime%22%3A0%2C%22duration%22%3A476%7D%2C%7B%22type%22%3A%22resource%22%2C%22startTime%22%3A325%2C%22duration%22%3A25%2C%22transferSize%22%3A82287%7D%2C%7B%22type%22%3A%22resource%22%2C%22startTime%22%3A325%2C%22duration%22%3A15%2C%22transferSize%22%3A4646%7D%5D&mh=-2041741174 | 104.18.40.50 | | 103 B |
URL go.mnaspm.com/abc.gif?action=sbSignupWithModel&campaignId=c6913f01500457c0bdb8597e6d4286a54c12f8dc120ca06a0ab250733289acaa&campaignType=smartpop&creativeId=6c0b1b4a99ba447f4bead9b76a7621269ec060b2297874834d7b37047f348300&iterationId=868050&masterSmartpopId=1605&p1=4350989&quality=240p&ruleId=3&smartpopId=1062&sourceId=594409&userId=d100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca&variationId=33204&thumbSizeKey=big&language=en&thumbFit=cover&stripcashR=0&thumbType=default&kbLimit=0&modelsInWatchHistoryCount=-1&modelsInFavoritesCount=-1&userType=newuser&modelsCount=10&segment=hls-newAPI&landing=WidgetV4Universal&referrer=https%3A%2F%2Ftsyndicate.com%2F&i=0&ib=0&filtersMatch=0&m=%5B%7B%22type%22%3A%22navigation%22%2C%22startTime%22%3A0%2C%22duration%22%3A476%7D%2C%7B%22type%22%3A%22resource%22%2C%22startTime%22%3A325%2C%22duration%22%3A25%2C%22transferSize%22%3A82287%7D%2C%7B%22type%22%3A%22resource%22%2C%22startTime%22%3A325%2C%22duration%22%3A15%2C%22transferSize%22%3A4646%7D%5D&mh=-2041741174 IP104.18.40.50:0
Hash8c99886486b9a004383cb4df29011c43 d79ca4754481fc59598bc08fcdf354900918bffe bda00b0f6892b1c6991e793b42654ad1807694e2ffabcbc4eb1399379737ef6c
GET /abc.gif?action=sbSignupWithModel&campaignId=c6913f01500457c0bdb8597e6d4286a54c12f8dc120ca06a0ab250733289acaa&campaignType=smartpop&creativeId=6c0b1b4a99ba447f4bead9b76a7621269ec060b2297874834d7b37047f348300&iterationId=868050&masterSmartpopId=1605&p1=4350989&quality=240p&ruleId=3&smartpopId=1062&sourceId=594409&userId=d100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca&variationId=33204&thumbSizeKey=big&language=en&thumbFit=cover&stripcashR=0&thumbType=default&kbLimit=0&modelsInWatchHistoryCount=-1&modelsInFavoritesCount=-1&userType=newuser&modelsCount=10&segment=hls-newAPI&landing=WidgetV4Universal&referrer=https%3A%2F%2Ftsyndicate.com%2F&i=0&ib=0&filtersMatch=0&m=%5B%7B%22type%22%3A%22navigation%22%2C%22startTime%22%3A0%2C%22duration%22%3A476%7D%2C%7B%22type%22%3A%22resource%22%2C%22startTime%22%3A325%2C%22duration%22%3A25%2C%22transferSize%22%3A82287%7D%2C%7B%22type%22%3A%22resource%22%2C%22startTime%22%3A325%2C%22duration%22%3A15%2C%22transferSize%22%3A4646%7D%5D&mh=-2041741174 HTTP/1.1
Host: go.mnaspm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://creative.mnaspm.com/
Cookie: __cflb=0H28upDCGznfDm9XVEL2Ezfg4QRCzSiTsMVahcbKCmr
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 24 Apr 2024 03:40:32 GMT
content-type: image/gif
content-length: 103
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 8793128ec9815699-OSL
alt-svc: h3=":443"; ma=86400
|
|
| img.strpst.com/thumbs/1713929970/143297964_webp | 104.17.11.106 | | 19 kB |
URL img.strpst.com/thumbs/1713929970/143297964_webp IP104.17.11.106:0
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 640x360, Scaling: [none]x[none], YUV color, decoders should clamp Hashf028980030c5d3c52ef807230225fcd6 45694bea44f3313b2074c375e96ccc6d15bdbeba 60ca825750f532ca48d2ecfae5577308a6eb254781370839401435d7b7801003
GET /thumbs/1713929970/143297964_webp HTTP/1.1
Host: img.strpst.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://creative.mnaspm.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 24 Apr 2024 03:40:32 GMT
content-type: image/webp
content-length: 19142
etag: "f028980030c5d3c52ef807230225fcd6"
last-modified: Wed, 24 Apr 2024 03:39:00 GMT
cache-control: public, max-age=1800, s-maxage=1800
access-control-allow-origin: *
access-control-allow-methods: GET
cf-cache-status: HIT
age: 38
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 8793128efebb56ca-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| img.strpst.com/thumbs/1713929970/88927355_webp | 104.17.11.106 | | 15 kB |
URL img.strpst.com/thumbs/1713929970/88927355_webp IP104.17.11.106:0
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 640x360, Scaling: [none]x[none], YUV color, decoders should clamp Hash89be8c95075db3f49a460607eba1a77b fdade77c9ce12e20097f01116ed70b77803f5bdb 765ffc2a2be54d41c2f19c31656ae6709eff7517b46f7ed8149798dea729ad35
GET /thumbs/1713929970/88927355_webp HTTP/1.1
Host: img.strpst.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://creative.mnaspm.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 24 Apr 2024 03:40:32 GMT
content-type: image/webp
content-length: 14876
etag: "89be8c95075db3f49a460607eba1a77b"
last-modified: Wed, 24 Apr 2024 03:39:22 GMT
cache-control: public, max-age=1800, s-maxage=1800
access-control-allow-origin: *
access-control-allow-methods: GET
cf-cache-status: HIT
age: 38
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 8793128efebd56ca-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| img.strpst.com/thumbs/1713929970/154187625_webp | 104.17.11.106 | | 20 kB |
URL img.strpst.com/thumbs/1713929970/154187625_webp IP104.17.11.106:0
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 640x360, Scaling: [none]x[none], YUV color, decoders should clamp Hash41bde542340603ceeebb04a5422549fb 8894124dff07bb4577387679fa89318d34534347 7491da28ab6708fe257eb79e2e683bc2a94d374027aa31486063c3e506c7124e
GET /thumbs/1713929970/154187625_webp HTTP/1.1
Host: img.strpst.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://creative.mnaspm.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 24 Apr 2024 03:40:32 GMT
content-type: image/webp
content-length: 19450
etag: "41bde542340603ceeebb04a5422549fb"
last-modified: Wed, 24 Apr 2024 03:38:44 GMT
cache-control: public, max-age=1800, s-maxage=1800
access-control-allow-origin: *
access-control-allow-methods: GET
cf-cache-status: HIT
age: 38
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 8793128efebe56ca-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| img.strpst.com/thumbs/1713929970/105124388_webp | 104.17.11.106 | | 16 kB |
URL img.strpst.com/thumbs/1713929970/105124388_webp IP104.17.11.106:0
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 640x360, Scaling: [none]x[none], YUV color, decoders should clamp Hashe65c2dbc727fdf2d7ee505b72921c7d2 7310c88e9995d0ae0a53019286ab328572f35629 c49b423d34b165ef677c1ec780804a217d9537e3332648b845fed9f98aac9ee9
GET /thumbs/1713929970/105124388_webp HTTP/1.1
Host: img.strpst.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://creative.mnaspm.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 24 Apr 2024 03:40:32 GMT
content-type: image/webp
content-length: 16416
etag: "e65c2dbc727fdf2d7ee505b72921c7d2"
last-modified: Wed, 24 Apr 2024 03:39:20 GMT
cache-control: public, max-age=1800, s-maxage=1800
access-control-allow-origin: *
access-control-allow-methods: GET
cf-cache-status: HIT
age: 38
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 8793128efebc56ca-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| img.strpst.com/thumbs/1713929970/90081523_webp | 104.17.11.106 | | 23 kB |
URL img.strpst.com/thumbs/1713929970/90081523_webp IP104.17.11.106:0
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 640x360, Scaling: [none]x[none], YUV color, decoders should clamp Hash821a1156fc08e26627869afd17c65cfe 5f05c1ebba6833027f4de64a280bfa02b1d8fa0b 76a878582985f899981376e69e338e4aeac4c483e3001162e58717cedd3631d5
GET /thumbs/1713929970/90081523_webp HTTP/1.1
Host: img.strpst.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://creative.mnaspm.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 24 Apr 2024 03:40:32 GMT
content-type: image/webp
content-length: 23436
etag: "821a1156fc08e26627869afd17c65cfe"
last-modified: Wed, 24 Apr 2024 03:38:49 GMT
cache-control: public, max-age=1800, s-maxage=1800
access-control-allow-origin: *
access-control-allow-methods: GET
cf-cache-status: HIT
age: 38
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 8793128f2ed956ca-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| www.googletagmanager.com/gtag/js?id=G-906YNDT860 | 142.250.74.168 | 200 OK | 101 kB |
URL GET HTTP/2www.googletagmanager.com/gtag/js?id=G-906YNDT860 IP142.250.74.168:443
Requested byhttps://sicantik.pro/video/vk-live-periscope-16x16-picture/ CertificateIssuerGoogle Trust Services LLC Subject*.google-analytics.com Fingerprint1E:33:2E:4B:C3:51:05:B7:73:DC:21:BF:3E:02:B3:16:D8:0B:AB:BB ValidityMon, 18 Mar 2024 19:37:14 GMT - Mon, 10 Jun 2024 19:37:13 GMT
File typeJavaScript source, ASCII text, with very long lines (5945) Size101 kB (100552 bytes) Hash6ef0469c800acc55141f9c916cdc8731 cff215a43276c549838b480d235ac07342fc3e5c bdf47f7afff0cfbc91797e8f2deb94e28d6dd055a594549e60955d7dc786b30f
GET /gtag/js?id=G-906YNDT860 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sicantik.pro/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Wed, 24 Apr 2024 03:40:32 GMT
expires: Wed, 24 Apr 2024 03:40:32 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 100552
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| bobabillydirect.org/v2/a/na/js/224644?container=clck_ntv1 |  88.208.22.1 | 200 OK | 37 kB |
URL GET HTTP/2bobabillydirect.org/v2/a/na/js/224644?container=clck_ntv1 IP88.208.22.1:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://sicantik.pro/video/vk-live-periscope-16x16-picture/ CertificateIssuerLet's Encrypt Subjectbobabillydirect.org FingerprintA7:D9:7A:CA:79:FE:C9:A6:BC:45:04:4F:46:5C:13:DD:61:40:C2:8D ValidityMon, 15 Apr 2024 11:27:14 GMT - Sun, 14 Jul 2024 11:27:13 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Hash4e7b69c0d70f7ec0b1de0525fdc39c34 4de12a7b954e9db1427e44256bb9fcde5158ab7e a6269dfd8d71ad71bcfba66f3e7fe03c13ec4f3233ef82179b75358870cb2edd
GET /v2/a/na/js/224644?container=clck_ntv1 HTTP/1.1
Host: bobabillydirect.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sicantik.pro/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 24 Apr 2024 03:40:32 GMT
content-type: application/javascript; charset=UTF-8
content-length: 37383
content-encoding: gzip
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-max-age: 86400
referrer-policy: unsafe-url
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Device-Memory
accept-ch-lifetime: 31536000
X-Firefox-Spdy: h2
|
|
| gsjln04hd.com/lv/esnk/1998535/code.js |  212.117.190.201 | | 44 kB |
URL gsjln04hd.com/lv/esnk/1998535/code.js IP212.117.190.201:0
File typegzip compressed data, max speed, from Unix Hashfa1268e9b56313c7e5dc384242d55be6 cb3c214e080cdf426da649ae484c28ebc64246c2 b1c42123f5fe6de22e9932fd27abfbe6a69aac7bd792f4cafb535892a07bf295
GET /lv/esnk/1998535/code.js HTTP/1.1
Host: gsjln04hd.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sicantik.pro/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 24 Apr 2024 03:40:30 GMT
content-type: application/javascript
last-modified: Tue, 23 Apr 2024 14:48:08 GMT
vary: Accept-Encoding
etag: W/"6627ca28-1cb59"
x-js-ab2: current
timing-allow-origin: *
accept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| sicantik.pro/wp-content/uploads/2023/12/250logo.png | 104.21.71.64 | 200 OK | 19 kB |
URL GET HTTP/3sicantik.pro/wp-content/uploads/2023/12/250logo.png IP104.21.71.64:443
Requested byhttps://sicantik.pro/video/vk-live-periscope-16x16-picture/ CertificateIssuerGoogle Trust Services LLC Subjectsicantik.pro FingerprintC5:23:EF:A4:D1:09:03:7C:51:52:DC:24:7C:20:A9:1D:38:31:3E:32 ValidityFri, 15 Mar 2024 07:05:18 GMT - Thu, 13 Jun 2024 07:05:17 GMT
File typePNG image data, 250 x 93, 8-bit/color RGBA, non-interlaced Hash842c882b28e662f9c08b68201e4f7832 410ac81ff5315bc804a8d35ceb6af5b53e7f25ad 69bab52362878030bb973df332dac896207e0ceffe209c72d3451bc63e881528
GET /wp-content/uploads/2023/12/250logo.png HTTP/1.1
Host: sicantik.pro
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sicantik.pro/video/vk-live-periscope-16x16-picture/
Cookie: bnState_1998535={"impressions":1,"delayStarted":0}; _lscache_vary=13c9df61d6ee8b9b08b77960336b8f8e
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 24 Apr 2024 03:40:32 GMT
content-type: image/png
content-length: 19113
vary: Accept-Encoding
last-modified: Sun, 24 Dec 2023 13:58:58 GMT
cache-control: public, max-age=10368000
expires: Sat, 20 Jul 2024 08:23:03 GMT
cf-cache-status: HIT
age: 968237
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=s9YFFYkfpQnDzm5FyKiA%2BIXu5UiIpZV76Tj54VscSFpwsRg8V0A3g5wDmZK9DtyeWyMYzlVfRaQo1kWSF%2FLw2YrKS7jydu4q%2F4TDWv2OHYzg5BhlUKX57k4x15hd8us%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 879312912f880b61-OSL
alt-svc: h3=":443"; ma=86400
|
|
| bobabillydirect.org/v2/a/na/js/224644?container=clck_ntv1 | 88.208.22.1 | 200 OK | 37 kB |
URL GET HTTP/2bobabillydirect.org/v2/a/na/js/224644?container=clck_ntv1 IP88.208.22.1:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://sicantik.pro/video/vk-live-periscope-16x16-picture/ CertificateIssuerLet's Encrypt Subjectbobabillydirect.org FingerprintA7:D9:7A:CA:79:FE:C9:A6:BC:45:04:4F:46:5C:13:DD:61:40:C2:8D ValidityMon, 15 Apr 2024 11:27:14 GMT - Sun, 14 Jul 2024 11:27:13 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Hash4e7b69c0d70f7ec0b1de0525fdc39c34 4de12a7b954e9db1427e44256bb9fcde5158ab7e a6269dfd8d71ad71bcfba66f3e7fe03c13ec4f3233ef82179b75358870cb2edd
GET /v2/a/na/js/224644?container=clck_ntv1 HTTP/1.1
Host: bobabillydirect.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sicantik.pro/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 24 Apr 2024 03:40:32 GMT
content-type: application/javascript; charset=UTF-8
content-length: 37383
content-encoding: gzip
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-max-age: 86400
referrer-policy: unsafe-url
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Device-Memory
accept-ch-lifetime: 31536000
X-Firefox-Spdy: h2
|
|
| predictivadnetwork.com/a/display.php?r=7655442 | 172.67.129.178 | 204 No Content | 0 B |
URL GET HTTP/3predictivadnetwork.com/a/display.php?r=7655442 IP172.67.129.178:443
Requested byhttps://sicantik.pro/video/vk-live-periscope-16x16-picture/ CertificateIssuerGoogle Trust Services LLC Subjectpredictivadnetwork.com FingerprintE8:80:62:A1:E4:50:EF:86:ED:7B:9D:A2:30:EA:7F:C0:24:E4:CA:47 ValiditySat, 02 Mar 2024 04:16:42 GMT - Fri, 31 May 2024 04:16:41 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /a/display.php?r=7655442 HTTP/1.1
Host: predictivadnetwork.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sicantik.pro/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 204 No Content
date: Wed, 24 Apr 2024 03:40:33 GMT
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Content-Type
via: 1.1 google
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=c04iD%2Fq48U1BXmD9ZaUPcbdT7H1u9jjVsdNtySKFEw8w5pW9eJJK7yvEvImq8BzQORWPrHD6K%2Fz%2FRCBLVTwW6jYGjGUzZh2vCPvGVhqfA90UClPL4iNRh0IW%2B%2Bo5jUQa9BA4YGnvWYjI"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87931291bf2cb50f-OSL
alt-svc: h3=":443"; ma=86400
|
|
| predictivadnetwork.com/a/display.php?r=7655442 | 172.67.129.178 | 204 No Content | 0 B |
URL GET HTTP/3predictivadnetwork.com/a/display.php?r=7655442 IP172.67.129.178:443
Requested byhttps://sicantik.pro/video/vk-live-periscope-16x16-picture/ CertificateIssuerGoogle Trust Services LLC Subjectpredictivadnetwork.com FingerprintE8:80:62:A1:E4:50:EF:86:ED:7B:9D:A2:30:EA:7F:C0:24:E4:CA:47 ValiditySat, 02 Mar 2024 04:16:42 GMT - Fri, 31 May 2024 04:16:41 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /a/display.php?r=7655442 HTTP/1.1
Host: predictivadnetwork.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sicantik.pro/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 204 No Content
date: Wed, 24 Apr 2024 03:40:33 GMT
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Content-Type
via: 1.1 google
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=uecJFVcVtaI%2BISf%2BLgjTBgbmTWp5UXVfIXp75EwfLTR%2BGwENbrhIuNFOiHa%2FByQ5YLABVONXwXhfbX7E%2FAI6q%2FxZObwglp5uxjyB68Mql4ElMIsRuTp61Va1YsuPaRSBjZAsF1AVwMON"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87931292af8ab50f-OSL
alt-svc: h3=":443"; ma=86400
|
|
| sicantik.pro/wp-content/uploads/2023/08/Bokep-Indo-Mbeb-Ukhty-Toge-Binal-Mango-Live.png | 104.21.71.64 | 200 OK | 53 kB |
URL GET HTTP/3sicantik.pro/wp-content/uploads/2023/08/Bokep-Indo-Mbeb-Ukhty-Toge-Binal-Mango-Live.png IP104.21.71.64:443
Requested byhttps://sicantik.pro/video/vk-live-periscope-16x16-picture/ CertificateIssuerGoogle Trust Services LLC Subjectsicantik.pro FingerprintC5:23:EF:A4:D1:09:03:7C:51:52:DC:24:7C:20:A9:1D:38:31:3E:32 ValidityFri, 15 Mar 2024 07:05:18 GMT - Thu, 13 Jun 2024 07:05:17 GMT
File typePNG image data, 366 x 652, 8-bit colormap, non-interlaced Hash03fd4d09aaac8cad94e71bc0c7d3b2d8 3b31b60a59ab5225cc4f89a7c09176b54996ccd2 e5f6093fba72c6a0faabbf3a51303a014a7a61fad5b2caa91e4544f723f60227
GET /wp-content/uploads/2023/08/Bokep-Indo-Mbeb-Ukhty-Toge-Binal-Mango-Live.png HTTP/1.1
Host: sicantik.pro
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sicantik.pro/video/vk-live-periscope-16x16-picture/
Cookie: bnState_1998535={"impressions":1,"delayStarted":0}; _lscache_vary=13c9df61d6ee8b9b08b77960336b8f8e
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 24 Apr 2024 03:40:33 GMT
content-type: image/png
content-length: 52791
last-modified: Mon, 27 Nov 2023 10:05:18 GMT
cache-control: max-age=10368000
expires: max-age=A10368000, public
cf-cache-status: HIT
age: 483596
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Hl%2FYgpFDvXrq0QcvjryWFfey%2FVheNLTBO3TBGujdRCxvL1rqkV00YZu01peZFFflq217%2FSNsUycX3XhuXqJJOOhuJ%2FiAb8NhYZy1cfzxQwM8%2F8VSetlvcv5%2BU2O%2Fw%2Bk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8793129608700b61-OSL
alt-svc: h3=":443"; ma=86400
|
|
| sicantik.pro/wp-content/uploads/2023/08/Bokep-Viral-ABG-Jilbab-Live-Colmek-Di-Group-Kelas-Telegrammm.png | 104.21.71.64 | 200 OK | 28 kB |
URL GET HTTP/3sicantik.pro/wp-content/uploads/2023/08/Bokep-Viral-ABG-Jilbab-Live-Colmek-Di-Group-Kelas-Telegrammm.png IP104.21.71.64:443
Requested byhttps://sicantik.pro/video/vk-live-periscope-16x16-picture/ CertificateIssuerGoogle Trust Services LLC Subjectsicantik.pro FingerprintC5:23:EF:A4:D1:09:03:7C:51:52:DC:24:7C:20:A9:1D:38:31:3E:32 ValidityFri, 15 Mar 2024 07:05:18 GMT - Thu, 13 Jun 2024 07:05:17 GMT
File typePNG image data, 700 x 392, 8-bit colormap, non-interlaced Hash3b66fbdebc9d1e07460cf45af770273b 95a46451bee6e42d2585e9d290c0ffd9edd37276 6e5f79e62d9305db0ba87fbca9039d89a0a3d712730f8f613f7d5f5fb0c8a0bf
GET /wp-content/uploads/2023/08/Bokep-Viral-ABG-Jilbab-Live-Colmek-Di-Group-Kelas-Telegrammm.png HTTP/1.1
Host: sicantik.pro
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sicantik.pro/video/vk-live-periscope-16x16-picture/
Cookie: bnState_1998535={"impressions":1,"delayStarted":0}; _lscache_vary=13c9df61d6ee8b9b08b77960336b8f8e
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 24 Apr 2024 03:40:33 GMT
content-type: image/png
content-length: 27469
last-modified: Mon, 27 Nov 2023 09:58:05 GMT
cache-control: max-age=10368000
expires: max-age=A10368000, public
cf-cache-status: HIT
age: 483596
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=sIojD%2F%2BUFYn4wNMLxh%2Bu4WVBdDQsCi%2BVYs%2BlQsCTmMNzFWHOKUluw4fKox3dBqHRVAgu74GQn33fIUC85ABRGBWiEGFtZ5EIZ61IdRGfpAkxeYcNDmVztVegqbTrV8U%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8793129628760b61-OSL
alt-svc: h3=":443"; ma=86400
|
|
| sicantik.pro/wp-content/uploads/2023/08/Bokep-Indo-Bocil-Toket-Bulat-Ome-Tv-Live-Ngeweee.png | 104.21.71.64 | 200 OK | 40 kB |
URL GET HTTP/3sicantik.pro/wp-content/uploads/2023/08/Bokep-Indo-Bocil-Toket-Bulat-Ome-Tv-Live-Ngeweee.png IP104.21.71.64:443
Requested byhttps://sicantik.pro/video/vk-live-periscope-16x16-picture/ CertificateIssuerGoogle Trust Services LLC Subjectsicantik.pro FingerprintC5:23:EF:A4:D1:09:03:7C:51:52:DC:24:7C:20:A9:1D:38:31:3E:32 ValidityFri, 15 Mar 2024 07:05:18 GMT - Thu, 13 Jun 2024 07:05:17 GMT
File typePNG image data, 700 x 401, 8-bit colormap, non-interlaced Hashfc4d6ac59e8967cfd449067ed00282ec 95f7ec6c8d3befae6b54d1b1ff06109bd2e9bec3 ed40dce41c8228d40cad85a5ba50b083f3d5fd88426909b9fde14fbc0efcfde0
GET /wp-content/uploads/2023/08/Bokep-Indo-Bocil-Toket-Bulat-Ome-Tv-Live-Ngeweee.png HTTP/1.1
Host: sicantik.pro
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sicantik.pro/video/vk-live-periscope-16x16-picture/
Cookie: bnState_1998535={"impressions":1,"delayStarted":0}; _lscache_vary=13c9df61d6ee8b9b08b77960336b8f8e
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 24 Apr 2024 03:40:33 GMT
content-type: image/png
content-length: 40015
vary: Accept-Encoding
last-modified: Mon, 27 Nov 2023 09:50:02 GMT
cache-control: public, max-age=10368000
expires: Sat, 20 Jul 2024 08:24:18 GMT
cf-cache-status: HIT
age: 923060
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=pePBQbiaXSGhQdq4hJnK6xN%2FT788XGhmVOBPozUnw6PxDX%2FdyQhwDSwmrU8UIUB3y0Wbqnv2eB4Y1j%2FzgIJrZCQW3tfKb40F0kxULzeUyLmlqrrsYP6pBcNgsj0KHVM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8793129628790b61-OSL
alt-svc: h3=":443"; ma=86400
|
|
| sicantik.pro/wp-content/uploads/2023/08/Nonton-Bokep-Indo-Live-Hijaber-Bareng-Ayanggg.png | 104.21.71.64 | 200 OK | 70 kB |
URL GET HTTP/3sicantik.pro/wp-content/uploads/2023/08/Nonton-Bokep-Indo-Live-Hijaber-Bareng-Ayanggg.png IP104.21.71.64:443
Requested byhttps://sicantik.pro/video/vk-live-periscope-16x16-picture/ CertificateIssuerGoogle Trust Services LLC Subjectsicantik.pro FingerprintC5:23:EF:A4:D1:09:03:7C:51:52:DC:24:7C:20:A9:1D:38:31:3E:32 ValidityFri, 15 Mar 2024 07:05:18 GMT - Thu, 13 Jun 2024 07:05:17 GMT
File typePNG image data, 364 x 654, 8-bit colormap, non-interlaced Hash4b1fdbfa01f14d24bb778a579b299d2f 743c421501792df0d1b7f425be08e7257359dcad a3843469afe70c43bff2f08d0a9ce3846249ca234264a696d3e6b86d49fc44e7
GET /wp-content/uploads/2023/08/Nonton-Bokep-Indo-Live-Hijaber-Bareng-Ayanggg.png HTTP/1.1
Host: sicantik.pro
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sicantik.pro/video/vk-live-periscope-16x16-picture/
Cookie: bnState_1998535={"impressions":1,"delayStarted":0}; _lscache_vary=13c9df61d6ee8b9b08b77960336b8f8e
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 24 Apr 2024 03:40:33 GMT
content-type: image/png
content-length: 70004
last-modified: Mon, 27 Nov 2023 09:02:56 GMT
cache-control: max-age=10368000
expires: max-age=A10368000, public
cf-cache-status: HIT
age: 483597
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=EuRz%2BuuuAAnYYJRpwfSIv2fqfoKirPXsXxJik0qAMG2psoMoTDZYmgjxnBv7PkMNzy5%2FpUBkzOaGO87b99tXAfS6IBpoxIHFP5JPJgwUxYnEPWgdSTBwa%2FY6oyjNpMo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87931296387c0b61-OSL
alt-svc: h3=":443"; ma=86400
|
|
| sicantik.pro/wp-content/uploads/2023/08/Bokep-Indo-Selebgram-Cantik-Toge-Live-Binal-Main-Dildo.png | 104.21.71.64 | 200 OK | 98 kB |
URL GET HTTP/3sicantik.pro/wp-content/uploads/2023/08/Bokep-Indo-Selebgram-Cantik-Toge-Live-Binal-Main-Dildo.png IP104.21.71.64:443
Requested byhttps://sicantik.pro/video/vk-live-periscope-16x16-picture/ CertificateIssuerGoogle Trust Services LLC Subjectsicantik.pro FingerprintC5:23:EF:A4:D1:09:03:7C:51:52:DC:24:7C:20:A9:1D:38:31:3E:32 ValidityFri, 15 Mar 2024 07:05:18 GMT - Thu, 13 Jun 2024 07:05:17 GMT
File typePNG image data, 436 x 700, 8-bit colormap, non-interlaced Hashb31132931351bc851c03483ef1f90e04 0afc04cfb82e9d88f4034447ff2be3bd37888a00 74923a12de8aac04bbcb59fd17f1abca49f48ca739ff0ab3dfb7e722a593d267
GET /wp-content/uploads/2023/08/Bokep-Indo-Selebgram-Cantik-Toge-Live-Binal-Main-Dildo.png HTTP/1.1
Host: sicantik.pro
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sicantik.pro/video/vk-live-periscope-16x16-picture/
Cookie: bnState_1998535={"impressions":1,"delayStarted":0}; _lscache_vary=13c9df61d6ee8b9b08b77960336b8f8e
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 24 Apr 2024 03:40:33 GMT
content-type: image/png
content-length: 97897
last-modified: Mon, 27 Nov 2023 09:46:03 GMT
cache-control: max-age=10368000
expires: max-age=A10368000, public
cf-cache-status: HIT
age: 483597
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=su%2FT0r%2FdJXd71ECairdYj0FXdXrDWQZh55LEUhJHZtD5OSoelaBTPmWOXOz9ZQLYDOpXW1TwqKKMNlB47IF7q%2BCO8hjGcycoiLMqxkpi62CwCMAv%2B%2F2hiZwVv0CJ6dw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87931296387b0b61-OSL
alt-svc: h3=":443"; ma=86400
|
|
| livid-inspector.com/bRXRVqsWd.GglA0pYdWud/izY/Wt5Eu/ZDXsIq/me/m-9xuEZ/UHlukaPxTYQg5EMQD/Yl3FNpDoU/t/NcDbkEwdNcjmcx0IN/gy | 88.85.69.211 | 200 OK | 5.1 kB |
URL GET HTTP/2livid-inspector.com/bRXRVqsWd.GglA0pYdWud/izY/Wt5Eu/ZDXsIq/me/m-9xuEZ/UHlukaPxTYQg5EMQD/Yl3FNpDoU/t/NcDbkEwdNcjmcx0IN/gy IP88.85.69.211:443
Requested byhttps://sicantik.pro/video/vk-live-periscope-16x16-picture/ CertificateIssuerLet's Encrypt Subjectlivid-inspector.com FingerprintAC:D9:4D:E1:0F:4A:E2:20:BB:9E:62:7B:B5:6A:81:28:73:FD:66:A5 ValiditySun, 14 Apr 2024 01:52:12 GMT - Sat, 13 Jul 2024 01:52:11 GMT
File typeJavaScript source, ASCII text, with very long lines (13006) Hash3b817f1147a6b99474f86565ee847565 d19b604b7d45a37bd47b5e6be82b22788c5a90c8 8ddd0afae3c88c78b55d972345f7fc3e4f7a5a0416c416aa5fe965bf4fdfd397
GET /bRXRVqsWd.GglA0pYdWud/izY/Wt5Eu/ZDXsIq/me/m-9xuEZ/UHlukaPxTYQg5EMQD/Yl3FNpDoU/t/NcDbkEwdNcjmcx0IN/gy HTTP/1.1
Host: livid-inspector.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sicantik.pro/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 24 Apr 2024 03:40:33 GMT
content-type: application/javascript
expires: Mon, 26 Jul 2011 05:00:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
accept-ch: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-WoW64
access-control-allow-origin: https://sicantik.pro
access-control-allow-methods: GET
access-control-allow-headers: Content-Type
access-control-allow-credentials: true
vary: Accept-Encoding, Origin
x-content-type-options: nosniff
content-encoding: br
X-Firefox-Spdy: h2
|
|
| creative.mnaspm.com/widgets/v4/Universal/main.a18e8b8a8680353599e1.js | 104.18.40.50 | 200 OK | 91 kB |
URL GET HTTP/3creative.mnaspm.com/widgets/v4/Universal/main.a18e8b8a8680353599e1.js IP104.18.40.50:443
Requested byhttps://creative.mnaspm.com/widgets/v4/Universal?action=sbSignupWithModel&campaignId=c6913f01500457c0bdb8597e6d4286a54c12f8dc120ca06a0ab250733289acaa&campaignType=smartpop&creativeId=6c0b1b4a99ba447f4bead9b76a7621269ec060b2297874834d7b37047f348300&iterationId=868050&masterSmartpopId=1605&memberId=1iKm4C12dUFz0NsKwm42eoM25rdtnA73unIs2Bar773UB24TtkrjXwYPwhlevI3sx82-XQWbEXNv9WZUTSSexgIncQnJZSU4z0uLQsa71yynA5rQ_gUIDRUi&mlView=1&p1=4350989&quality=240p&ruleId=3&smartpopId=1062&sortBy=recommended&sourceId=594409&tag=girls&usePreroll=0&userId=d100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca&variationId=33204&webp=1 CertificateIssuerGoogle Trust Services LLC Subjectmnaspm.com Fingerprint41:FC:20:C5:2D:89:14:17:87:EB:2D:BA:2E:DE:61:87:1E:53:19:CE ValiditySun, 14 Apr 2024 17:19:29 GMT - Sat, 13 Jul 2024 17:19:28 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (30670), with LF, NEL line terminators Hash97b247ca4279e4cd49903dd3ff0d9b6b e481bf8455de11bae819594efc1f659774571ae4 bdadac753275c3f7ea71a55e407d9d79d2f6dcd26dff8a6ab2b7fd35c09a7cea
GET /widgets/v4/Universal/main.a18e8b8a8680353599e1.js HTTP/1.1
Host: creative.mnaspm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://creative.mnaspm.com/widgets/v4/Universal?action=sbSignupWithModel&campaignId=c6913f01500457c0bdb8597e6d4286a54c12f8dc120ca06a0ab250733289acaa&campaignType=smartpop&creativeId=6c0b1b4a99ba447f4bead9b76a7621269ec060b2297874834d7b37047f348300&iterationId=868050&masterSmartpopId=1605&memberId=k8X2gqV4afNiVfLr1JMe3Rwg7hFN9UclHN3ckU-4bOP9jW_EC1lBm4BCd23SdLsvMbXoxK0Bz7CNgGtfFFWfA7_UBu3Fb6o7JVN1sF43B4UdQAQ1_gUIDRUi&mlView=1&p1=4350989&quality=240p&ruleId=3&smartpopId=1062&sortBy=recommended&sourceId=594409&tag=girls&usePreroll=0&userId=d100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca&variationId=33204&webp=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 24 Apr 2024 03:40:31 GMT
content-type: application/javascript; charset=utf-8
last-modified: Tue, 23 Apr 2024 08:32:01 GMT
etag: W/"66277201-4a230"
expires: Wed, 24 Apr 2024 03:40:37 GMT
cache-control: max-age=10
pragma: public
cf-cache-status: HIT
age: 3
vary: Accept-Encoding
server: cloudflare
cf-ray: 8793128be8835699-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| sicantik.pro/wp-content/uploads/2023/08/Screenshot-2023-08-15-212846.jpg | 104.21.71.64 | 200 OK | 24 kB |
URL GET HTTP/3sicantik.pro/wp-content/uploads/2023/08/Screenshot-2023-08-15-212846.jpg IP104.21.71.64:443
Requested byhttps://sicantik.pro/video/vk-live-periscope-16x16-picture/ CertificateIssuerGoogle Trust Services LLC Subjectsicantik.pro FingerprintC5:23:EF:A4:D1:09:03:7C:51:52:DC:24:7C:20:A9:1D:38:31:3E:32 ValidityFri, 15 Mar 2024 07:05:18 GMT - Thu, 13 Jun 2024 07:05:17 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 700x404, components 3 Hashd5a7b230eb35189c4de07bef001097b0 a279bfffce05a8b7d87ff3b8652fa42941b212e0 7952e6d329f9454b54509cd218e23b78f1b0b629e6b4a4de50fbb43761439e20
GET /wp-content/uploads/2023/08/Screenshot-2023-08-15-212846.jpg HTTP/1.1
Host: sicantik.pro
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sicantik.pro/video/vk-live-periscope-16x16-picture/
Cookie: bnState_1998535={"impressions":1,"delayStarted":0}; _lscache_vary=13c9df61d6ee8b9b08b77960336b8f8e
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 24 Apr 2024 03:40:33 GMT
content-type: image/jpeg
content-length: 23765
last-modified: Mon, 27 Nov 2023 12:02:14 GMT
cache-control: max-age=10368000
expires: max-age=A10368000, public
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=pPMN%2BChMrQORbdVxRBIfSiahia6g53x6ghPIS9nDinh0aAPLGBmI%2BxJJJ3lqugGl8FwuCfZlWboCXLwq%2FawwtMmpTe%2B4i36MQuBvhCsNqdIeTdoEcuENBB2YWKn%2Bhyg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87931296086f0b61-OSL
alt-svc: h3=":443"; ma=86400
|
|
| sicantik.pro/wp-content/uploads/2023/12/fav.png | 104.21.71.64 | 200 OK | 10 kB |
URL GET HTTP/3sicantik.pro/wp-content/uploads/2023/12/fav.png IP104.21.71.64:443
Requested byhttps://sicantik.pro/video/vk-live-periscope-16x16-picture/ CertificateIssuerGoogle Trust Services LLC Subjectsicantik.pro FingerprintC5:23:EF:A4:D1:09:03:7C:51:52:DC:24:7C:20:A9:1D:38:31:3E:32 ValidityFri, 15 Mar 2024 07:05:18 GMT - Thu, 13 Jun 2024 07:05:17 GMT
File typePNG image data, 86 x 86, 8-bit/color RGBA, non-interlaced Hashed5c880a296e0a8091d83ef5af0e25aa 2326710b4b937c9a7f0e5599a9ce652162a50f6a dafc4433053ffd14a5a94c0538bfd549ad43efe909be90b3d76eaf6db26036dd
GET /wp-content/uploads/2023/12/fav.png HTTP/1.1
Host: sicantik.pro
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sicantik.pro/video/vk-live-periscope-16x16-picture/
Cookie: bnState_1998535={"impressions":1,"delayStarted":0}; _lscache_vary=13c9df61d6ee8b9b08b77960336b8f8e; _ga_906YNDT860=GS1.1.1713930033.1.0.1713930033.0.0.0; _ga=GA1.1.297287176.1713930034
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 24 Apr 2024 03:40:33 GMT
content-type: image/png
content-length: 10189
vary: Accept-Encoding
last-modified: Sun, 24 Dec 2023 13:58:59 GMT
cache-control: public, max-age=10368000
expires: Sat, 20 Jul 2024 08:23:09 GMT
cf-cache-status: HIT
age: 2819175
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xzpCaPkPG7E6DEdrKslnw40LzF8mf%2BiOaQDa7%2BUfztUnQL3O8VP%2Fd01Q9Nt7V3BewA%2FOH%2FBgKE2JscAUN%2BACSJxpWI0nnDTVJ4o1qogkM95B0%2F7VmzQYCqXE5gsIfX4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8793129858d70b61-OSL
alt-svc: h3=":443"; ma=86400
|
|
| sicantik.pro/wp-content/uploads/2023/12/fav-86x84.png | 104.21.71.64 | 200 OK | 12 kB |
URL GET HTTP/3sicantik.pro/wp-content/uploads/2023/12/fav-86x84.png IP104.21.71.64:443
Requested byhttps://sicantik.pro/video/vk-live-periscope-16x16-picture/ CertificateIssuerGoogle Trust Services LLC Subjectsicantik.pro FingerprintC5:23:EF:A4:D1:09:03:7C:51:52:DC:24:7C:20:A9:1D:38:31:3E:32 ValidityFri, 15 Mar 2024 07:05:18 GMT - Thu, 13 Jun 2024 07:05:17 GMT
File typePNG image data, 86 x 84, 8-bit/color RGBA, non-interlaced Hashd3c7b96972e4108b8def5eb6cbfceb50 83e0d898250063dec06379479b7f4cf120ddc5e5 ca12e667fb46ba2bc782f0abed3f59d92f409ebeb09be38d200308a534c22ca7
GET /wp-content/uploads/2023/12/fav-86x84.png HTTP/1.1
Host: sicantik.pro
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sicantik.pro/video/vk-live-periscope-16x16-picture/
Cookie: bnState_1998535={"impressions":1,"delayStarted":0}; _lscache_vary=13c9df61d6ee8b9b08b77960336b8f8e; _ga_906YNDT860=GS1.1.1713930033.1.0.1713930033.0.0.0; _ga=GA1.1.297287176.1713930034
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 24 Apr 2024 03:40:33 GMT
content-type: image/png
content-length: 11694
vary: Accept-Encoding
last-modified: Sun, 24 Dec 2023 13:59:00 GMT
cache-control: public, max-age=10368000
expires: Sat, 20 Jul 2024 08:23:09 GMT
cf-cache-status: HIT
age: 2815855
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Wcv6TI4nOc3qZ0J8ettB0QZPKJgT0aM6ETmP2TFcyzmG30MlNTSz%2FmRsz6lsdfLSq04nhOukXe65dBCDVv5lOv0yzQZtbyKbr4WTxgwVGxl%2F3h7LvNOj1Ym5i79KfsY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8793129858d90b61-OSL
alt-svc: h3=":443"; ma=86400
|
|
| sicantik.pro/wp-content/plugins/advanced-ads-pro/assets/js/base.min.js | 104.21.71.64 | 200 OK | 88 kB |
URL GET HTTP/3sicantik.pro/wp-content/plugins/advanced-ads-pro/assets/js/base.min.js IP104.21.71.64:443
Requested byhttps://sicantik.pro/video/vk-live-periscope-16x16-picture/ CertificateIssuerGoogle Trust Services LLC Subjectsicantik.pro FingerprintC5:23:EF:A4:D1:09:03:7C:51:52:DC:24:7C:20:A9:1D:38:31:3E:32 ValidityFri, 15 Mar 2024 07:05:18 GMT - Thu, 13 Jun 2024 07:05:17 GMT
File typeJavaScript source, ASCII text, with very long lines (56872) Hashbaa2bced04ef58568fb6c29d6bc29a41 da215d64ecd8733920a6cc22fc4a2e22c4961d60 54fe41d2822054817fa4d8780612927bb2e2cead005a793355313968636d0683
GET /wp-content/plugins/advanced-ads-pro/assets/js/base.min.js HTTP/1.1
Host: sicantik.pro
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sicantik.pro/video/vk-live-periscope-16x16-picture/
Cookie: bnState_1998535={"impressions":1,"delayStarted":0}; _lscache_vary=13c9df61d6ee8b9b08b77960336b8f8e
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 24 Apr 2024 03:40:32 GMT
content-type: application/javascript
last-modified: Sat, 20 Apr 2024 11:28:04 GMT
vary: Accept-Encoding
etag: W/"6623a6c4-125bc"
expires: Wed, 24 Apr 2024 01:05:50 GMT
cache-control: max-age=43200
cf-cache-status: HIT
age: 22018
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=x2gZY%2BOs5dHXGkoKcoTK6awLOm6g8Z%2FjrtiUQrzshJqode3tMseS2jqrkcPqijvVNcA871RATl6NlBwJs2apEu6%2BiqFIHSiaefIQHE9FIqbDmzqbl9TTkKnSC9NLmyQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8793128ecee30b61-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| pagead2.googlesyndication.com/pagead/js/adsbygoogle.js | 142.250.74.34 | 200 OK | 0 B |
URL HEAD HTTP/2pagead2.googlesyndication.com/pagead/js/adsbygoogle.js IP142.250.74.34:443
Requested byhttps://sicantik.pro/video/vk-live-periscope-16x16-picture/ CertificateIssuerGoogle Trust Services LLC Subject*.g.doubleclick.net Fingerprint1B:FA:17:60:E2:34:D4:FA:D1:13:08:09:6E:8F:ED:E7:A8:8C:6E:7A ValidityMon, 18 Mar 2024 19:37:13 GMT - Mon, 10 Jun 2024 19:37:12 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
HEAD /pagead/js/adsbygoogle.js HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://sicantik.pro/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
link: <https://googleads.g.doubleclick.net>; rel="preconnect"; crossorigin
vary: Accept-Encoding
date: Wed, 24 Apr 2024 03:40:34 GMT
expires: Wed, 24 Apr 2024 03:40:34 GMT
cache-control: private, max-age=3600, stale-while-revalidate=3600
content-type: text/javascript; charset=UTF-8
etag: 8314382730603539945
access-control-allow-origin: *
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 51079
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| pagead2.googlesyndication.com/pagead/js/adsbygoogle.js | 142.250.74.34 | 200 OK | 0 B |
URL HEAD HTTP/2pagead2.googlesyndication.com/pagead/js/adsbygoogle.js IP142.250.74.34:443
Requested byhttps://sicantik.pro/video/vk-live-periscope-16x16-picture/ CertificateIssuerGoogle Trust Services LLC Subject*.g.doubleclick.net Fingerprint1B:FA:17:60:E2:34:D4:FA:D1:13:08:09:6E:8F:ED:E7:A8:8C:6E:7A ValidityMon, 18 Mar 2024 19:37:13 GMT - Mon, 10 Jun 2024 19:37:12 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
HEAD /pagead/js/adsbygoogle.js HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://sicantik.pro/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
link: <https://googleads.g.doubleclick.net>; rel="preconnect"; crossorigin
vary: Accept-Encoding
date: Wed, 24 Apr 2024 03:40:34 GMT
expires: Wed, 24 Apr 2024 03:40:34 GMT
cache-control: private, max-age=3600, stale-while-revalidate=3600
content-type: text/javascript; charset=UTF-8
etag: 3516304144752786999
access-control-allow-origin: *
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 51362
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| amusing-senior.com/cGDm9.6nbQ2d5qlMSnWdQy9LN/Degt3EMwDRE-4TOdSq0Y0/OqDgcUw_M/TckTwk | 88.85.69.212 | 200 OK | 0 B |
URL GET HTTP/2amusing-senior.com/cGDm9.6nbQ2d5qlMSnWdQy9LN/Degt3EMwDRE-4TOdSq0Y0/OqDgcUw_M/TckTwk IP88.85.69.212:443
Requested byhttps://sicantik.pro/video/vk-live-periscope-16x16-picture/ CertificateIssuerLet's Encrypt Subjectamusing-senior.com Fingerprint86:9A:DD:61:63:4D:09:32:BC:5B:AF:39:06:EA:99:47:E0:F9:1C:C9 ValiditySun, 17 Mar 2024 02:21:37 GMT - Sat, 15 Jun 2024 02:21:36 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cGDm9.6nbQ2d5qlMSnWdQy9LN/Degt3EMwDRE-4TOdSq0Y0/OqDgcUw_M/TckTwk HTTP/1.1
Host: amusing-senior.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sicantik.pro/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 24 Apr 2024 03:40:34 GMT
content-type: application/javascript
content-length: 0
expires: Mon, 26 Jul 2011 05:00:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
accept-ch: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-WoW64
access-control-allow-headers: Content-Type
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET
x-content-type-options: nosniff
X-Firefox-Spdy: h2
|
|
| cdn.2443march2024.com/24011/6df0b6b0-1553-11ec-ba28-5f54dd64648d.png |  185.244.209.62 | | 253 kB |
URL GET cdn.2443march2024.com/24011/6df0b6b0-1553-11ec-ba28-5f54dd64648d.png IP185.244.209.62:0 ASN#199524 G-Core Labs S.A.
Requested byhttps://sicantik.pro/video/vk-live-periscope-16x16-picture/
File typePNG image data, 492 x 328, 8-bit/color RGB, non-interlaced Size253 kB (253321 bytes) Hashf0f9822609deae042d3f1d95c77ef6e9 b3baf901c67ef8eb6b6ae6ba9594f13397038fcd 438b6cf6fedf0d1a70db8db2fdb19f0f99cde5df25562550a5dc2b2454994c22
GET /24011/6df0b6b0-1553-11ec-ba28-5f54dd64648d.png HTTP/1.1
Host: cdn.2443march2024.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 24 Apr 2024 03:40:34 GMT
content-type: image/png
content-length: 253321
last-modified: Tue, 14 Sep 2021 12:01:01 GMT
etag: "61408efd-3dd89"
traceparent: 00-5803c564dd06ebb914c95ee62acd601a-8d96a9b0dacf31fd-01
x-id: osix-hw-edge-gc4
expires: Fri, 24 May 2024 03:40:34 GMT
cache-control: max-age=2592000
cache: HIT
x-cached-since: 2024-04-23T18:10:17+00:00
accept-ranges: bytes
x-id-fe: osix-hw-edge-gc4
X-Firefox-Spdy: h2
|
|
| cdn.2441march2024.com/24011/e6d17f8f-1553-11ec-ba28-5f54dd64648d.png | 185.244.209.62 | 200 OK | 208 kB |
URL GET HTTP/2cdn.2441march2024.com/24011/e6d17f8f-1553-11ec-ba28-5f54dd64648d.png IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://sicantik.pro/video/vk-live-periscope-16x16-picture/ CertificateIssuerLet's Encrypt Subject*.2441march2024.com FingerprintAD:F0:F4:CA:7F:23:1F:75:48:AA:ED:77:45:E9:26:22:E6:73:5D:E6 ValiditySat, 02 Mar 2024 14:27:24 GMT - Fri, 31 May 2024 14:27:23 GMT
File typePNG image data, 492 x 328, 8-bit/color RGB, non-interlaced Size208 kB (208084 bytes) Hash9a7ab927cb25c629dbad0b422ca4f3e7 b8e0daeda3a6556024c6bf4dd35406bf0b782026 400ba0b973c1edad6bc1b425001d813856b0cd6b3a5a5c7af8a3339fcc48dd49
GET /24011/e6d17f8f-1553-11ec-ba28-5f54dd64648d.png HTTP/1.1
Host: cdn.2441march2024.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 24 Apr 2024 03:40:34 GMT
content-type: image/png
content-length: 208084
last-modified: Tue, 14 Sep 2021 12:04:24 GMT
etag: "61408fc8-32cd4"
traceparent: 00-f543268ee6acd27c6669dc8553e41af1-771544d7e3ad3c81-01
x-id: osix-hw-edge-gc4
expires: Fri, 24 May 2024 03:40:34 GMT
cache-control: max-age=2592000
cache: HIT
x-cached-since: 2024-04-23T17:03:37+00:00
accept-ranges: bytes
x-id-fe: osix-hw-edge-gc4
X-Firefox-Spdy: h2
|
|
| 31803.fallclk.com/v2/a/na/image?d=BQ5qQHPer5XWrznZ0gQQ5dXYErS6Z4z0XSkWdE1SmjP32JXXJGBjZNDlbPRXUxT2AH0J5k11EVAaIbGjuosQySsOZEhKRaWv0GlDN7FhM1i3pih3cD4L5DuQ3dO5zs6lQgWLj3-PzIYEOZM6q_1NvT36Oj9mlmZlQfibVZXi886uCt-xgXZ3km6XSvsy3OKJkORx6qGPyIDDg90d0_U5yhSyrF6b30xcBh25SLWWL5EVOl6MQV_2zRX8ErQIW2RNiVitk06cXnVblv5FSDQpzznZwYIAGEEak4DNMYV6k8FfuKLvEAjvUsS8Wlv8qPYg-gOYFYKy5EI6kEp2u7wYaVcPtw1q04gCfoQz8Myoku8k62ogFjMTXfxOBndFhxXdfABRWQTaW2BRP2wsyMAIRkwPj6i-KJTDDcX4FEvsykBghj2YYxZKomviBvl1ZAR2h-wr1Nyr1hdHrcmXFIC41-IguawqwFi56b5YNYoSUPM3XEqnNQm3D0cm5QjpCznuEf-WpM7ducEkz_y4sLGvhHXvaQKMGq0YDi30ZyEGCCPQztkOzKIYHXjCPzzMZBnw1NyAMq6MThHRIg3eNiYH9_eDJi3eA5syYcUpfSMEMJD7k2jI49CKKVcuLBXrRle4sjI9AaC5RvAgq1ncAeUV30EJZbvhS7B6z800BBoMAWPtBD7_lOCLMg_SlUFuN4SVEoAIwsCUtp1MH1WpJ9IOYKd9vCtmD4OTnSou_-KZL2tW5FPqWeWseAK07S-4IFDwMNDmaU3SqqEYx6zb_-E3H_UGvbLQSk1pFhYNO4PmFQtrPr4mmBmO7eHS8p9Fgufjt5FqAYiEzVYgl6Cx5YsZAl1ZTdqZssEG5GQji7M8PpBrCgBTqnK6SkITcKm4ubooorrebskwgV3kpCvnsSkSe4T2Pbgh0jdcyLr5qtIdVXzwitBYMFJmdk7fJru0T98BQmezKW8cMhbdkLthoKaQtGQR2Ov9uZ0IDOJ2BjHuBT63hupYZAV9Emoe-vk-o48t3rFp97-gPRw_GfvBiFnrEsUxLnKyuA8L5od7YJinZ7RZqf6nNFCC0kiQYmjFsuU_eKhFnoe4qISHV0-4BszfQEydP3ZOsV3YtMQJ0nmmg6LuzxEi_PoJ-B09rThDHlFTVIZenXYd40uSTPw | 88.208.22.3 | 200 OK | 68 B |
URL GET HTTP/231803.fallclk.com/v2/a/na/image?d=BQ5qQHPer5XWrznZ0gQQ5dXYErS6Z4z0XSkWdE1SmjP32JXXJGBjZNDlbPRXUxT2AH0J5k11EVAaIbGjuosQySsOZEhKRaWv0GlDN7FhM1i3pih3cD4L5DuQ3dO5zs6lQgWLj3-PzIYEOZM6q_1NvT36Oj9mlmZlQfibVZXi886uCt-xgXZ3km6XSvsy3OKJkORx6qGPyIDDg90d0_U5yhSyrF6b30xcBh25SLWWL5EVOl6MQV_2zRX8ErQIW2RNiVitk06cXnVblv5FSDQpzznZwYIAGEEak4DNMYV6k8FfuKLvEAjvUsS8Wlv8qPYg-gOYFYKy5EI6kEp2u7wYaVcPtw1q04gCfoQz8Myoku8k62ogFjMTXfxOBndFhxXdfABRWQTaW2BRP2wsyMAIRkwPj6i-KJTDDcX4FEvsykBghj2YYxZKomviBvl1ZAR2h-wr1Nyr1hdHrcmXFIC41-IguawqwFi56b5YNYoSUPM3XEqnNQm3D0cm5QjpCznuEf-WpM7ducEkz_y4sLGvhHXvaQKMGq0YDi30ZyEGCCPQztkOzKIYHXjCPzzMZBnw1NyAMq6MThHRIg3eNiYH9_eDJi3eA5syYcUpfSMEMJD7k2jI49CKKVcuLBXrRle4sjI9AaC5RvAgq1ncAeUV30EJZbvhS7B6z800BBoMAWPtBD7_lOCLMg_SlUFuN4SVEoAIwsCUtp1MH1WpJ9IOYKd9vCtmD4OTnSou_-KZL2tW5FPqWeWseAK07S-4IFDwMNDmaU3SqqEYx6zb_-E3H_UGvbLQSk1pFhYNO4PmFQtrPr4mmBmO7eHS8p9Fgufjt5FqAYiEzVYgl6Cx5YsZAl1ZTdqZssEG5GQji7M8PpBrCgBTqnK6SkITcKm4ubooorrebskwgV3kpCvnsSkSe4T2Pbgh0jdcyLr5qtIdVXzwitBYMFJmdk7fJru0T98BQmezKW8cMhbdkLthoKaQtGQR2Ov9uZ0IDOJ2BjHuBT63hupYZAV9Emoe-vk-o48t3rFp97-gPRw_GfvBiFnrEsUxLnKyuA8L5od7YJinZ7RZqf6nNFCC0kiQYmjFsuU_eKhFnoe4qISHV0-4BszfQEydP3ZOsV3YtMQJ0nmmg6LuzxEi_PoJ-B09rThDHlFTVIZenXYd40uSTPw IP88.208.22.3:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://sicantik.pro/video/vk-live-periscope-16x16-picture/ CertificateIssuerLet's Encrypt Subject*.fallclk.com Fingerprint56:26:EB:CF:D7:29:FF:2C:B2:29:4A:FF:47:30:F5:7B:6C:B5:1E:2F ValidityFri, 22 Mar 2024 20:25:27 GMT - Thu, 20 Jun 2024 20:25:26 GMT
File typePNG image data, 1 x 1, 8-bit gray+alpha, non-interlaced Hash91e42db1c66c0b276abf6234dc50b2eb c1986af3c26609b8b7d8933f99c51c1a89e9ea6b 63ef318d96b5d0d0ceba6e04a4e622b1158335cdc67c49e27839132c6f655058
GET /v2/a/na/image?d=BQ5qQHPer5XWrznZ0gQQ5dXYErS6Z4z0XSkWdE1SmjP32JXXJGBjZNDlbPRXUxT2AH0J5k11EVAaIbGjuosQySsOZEhKRaWv0GlDN7FhM1i3pih3cD4L5DuQ3dO5zs6lQgWLj3-PzIYEOZM6q_1NvT36Oj9mlmZlQfibVZXi886uCt-xgXZ3km6XSvsy3OKJkORx6qGPyIDDg90d0_U5yhSyrF6b30xcBh25SLWWL5EVOl6MQV_2zRX8ErQIW2RNiVitk06cXnVblv5FSDQpzznZwYIAGEEak4DNMYV6k8FfuKLvEAjvUsS8Wlv8qPYg-gOYFYKy5EI6kEp2u7wYaVcPtw1q04gCfoQz8Myoku8k62ogFjMTXfxOBndFhxXdfABRWQTaW2BRP2wsyMAIRkwPj6i-KJTDDcX4FEvsykBghj2YYxZKomviBvl1ZAR2h-wr1Nyr1hdHrcmXFIC41-IguawqwFi56b5YNYoSUPM3XEqnNQm3D0cm5QjpCznuEf-WpM7ducEkz_y4sLGvhHXvaQKMGq0YDi30ZyEGCCPQztkOzKIYHXjCPzzMZBnw1NyAMq6MThHRIg3eNiYH9_eDJi3eA5syYcUpfSMEMJD7k2jI49CKKVcuLBXrRle4sjI9AaC5RvAgq1ncAeUV30EJZbvhS7B6z800BBoMAWPtBD7_lOCLMg_SlUFuN4SVEoAIwsCUtp1MH1WpJ9IOYKd9vCtmD4OTnSou_-KZL2tW5FPqWeWseAK07S-4IFDwMNDmaU3SqqEYx6zb_-E3H_UGvbLQSk1pFhYNO4PmFQtrPr4mmBmO7eHS8p9Fgufjt5FqAYiEzVYgl6Cx5YsZAl1ZTdqZssEG5GQji7M8PpBrCgBTqnK6SkITcKm4ubooorrebskwgV3kpCvnsSkSe4T2Pbgh0jdcyLr5qtIdVXzwitBYMFJmdk7fJru0T98BQmezKW8cMhbdkLthoKaQtGQR2Ov9uZ0IDOJ2BjHuBT63hupYZAV9Emoe-vk-o48t3rFp97-gPRw_GfvBiFnrEsUxLnKyuA8L5od7YJinZ7RZqf6nNFCC0kiQYmjFsuU_eKhFnoe4qISHV0-4BszfQEydP3ZOsV3YtMQJ0nmmg6LuzxEi_PoJ-B09rThDHlFTVIZenXYd40uSTPw HTTP/1.1
Host: 31803.fallclk.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sicantik.pro/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 24 Apr 2024 03:40:34 GMT
content-type: image/png
content-length: 68
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-max-age: 86400
referrer-policy: unsafe-url
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Device-Memory
accept-ch-lifetime: 31536000
X-Firefox-Spdy: h2
|
|
| 31803.fallclk.com/v2/a/na/image?d=BQ5qQHPer5XWrzlpEwMQ5dXYErS6Z4z0XSkWNJVW0-sQ2PhXLvcJ66UQAbUCelRcaylYoxhpEVAaIbFjuosQySsOZEhKRaWv0AmLSEuxUbEcOWvgy8pyhoHyFMhG4mzBpohksDCF5okIPQ1_n7hoN9ijZkwZf7E9z9r0fWIDsJ1f8JmDZwTKVSC_vZOF8Q7WB7MFnVlNV-HfiMQqXt9QSkz6v-TSNbLtZyLGDG-95Wrqo8aYtL6j3yC9UIWV8vS0LM8IIFLGyR2KUDHlHAysPs8v2YK-QgEKWXpkilvFlxjMyomUhI6HBSr9kpeSZqlQvAMMdEkCsSj6kcINAJKjOsbrGNVTnGKeAFF6ZJ5QFCiM1ZS8cAlrk7mRJHYQh5CabHzyKiARhzL_B8DaEDcXgaxZQnVXqZU0UBKiMxp4Fa3plk8ITr25l7gFcwHqBQhXkb2ziyynBx8GVVO8jb2xM8Kd3ea8I3Bmi9pYHyBBi2wddRhq9AW6FqC0fAtIaR0RG8DYRHusHYHrx-5tBUVRMuVgGnpFHUi8ZkKiMqmKZygei0Q7b5MKFbFpMPILutRI66-RhmwyLJiyYRfApkrTCutlci52V-v9tdqvJOERTuxMfhWwQbljq9Tw6PzTUfLlVmw52CnuF58NYl47t3OWhBiznCtY9KI8BXTeZ6nKzhtM3AUd1tOGp9aXBPnn3Vv9Vebw4dWKAT3Yxhb6TY6Lf26Af16-STzt9FizLkzxmh95VdjyCi4xFpCZiVSRv1uClTzzp3DM0gW9gojff7OclXHJvPbRaKzVl9HYHF6bqORTCJbBewAP1izhzxdmoQGaWgNHmKZQE6xfIptv8fs3Fjqt-EyNs0kbd0a51awoMzMfAWciPNcaYcY86XZnwgGJo7GzU_1EkEj1BdbNtT0IAn2I76xyR5e4ovM__wqJBHzeijBa6FJmdk7fJru0T98BQmezKW8cMhbdkLthoKaQtGQR2Ov9uZ0IDOJ2BjHuBT63hupYZAV9Emoe-vk-o48t3rFp97-gPRw_GfvBiFnrEsUxLnKyuA8L5od7YJinZ7RZqf6nNFCC0kiQYmjFsuU_eKhFnoe4qISHV0-4BszfQEydP3ZOsV3YtMQJ0nmmg6LuzxEi_PoJ_w3tNKVCVJVA7NUcOgcixhtUC2M | 88.208.22.3 | 200 OK | 68 B |
URL GET HTTP/231803.fallclk.com/v2/a/na/image?d=BQ5qQHPer5XWrzlpEwMQ5dXYErS6Z4z0XSkWNJVW0-sQ2PhXLvcJ66UQAbUCelRcaylYoxhpEVAaIbFjuosQySsOZEhKRaWv0AmLSEuxUbEcOWvgy8pyhoHyFMhG4mzBpohksDCF5okIPQ1_n7hoN9ijZkwZf7E9z9r0fWIDsJ1f8JmDZwTKVSC_vZOF8Q7WB7MFnVlNV-HfiMQqXt9QSkz6v-TSNbLtZyLGDG-95Wrqo8aYtL6j3yC9UIWV8vS0LM8IIFLGyR2KUDHlHAysPs8v2YK-QgEKWXpkilvFlxjMyomUhI6HBSr9kpeSZqlQvAMMdEkCsSj6kcINAJKjOsbrGNVTnGKeAFF6ZJ5QFCiM1ZS8cAlrk7mRJHYQh5CabHzyKiARhzL_B8DaEDcXgaxZQnVXqZU0UBKiMxp4Fa3plk8ITr25l7gFcwHqBQhXkb2ziyynBx8GVVO8jb2xM8Kd3ea8I3Bmi9pYHyBBi2wddRhq9AW6FqC0fAtIaR0RG8DYRHusHYHrx-5tBUVRMuVgGnpFHUi8ZkKiMqmKZygei0Q7b5MKFbFpMPILutRI66-RhmwyLJiyYRfApkrTCutlci52V-v9tdqvJOERTuxMfhWwQbljq9Tw6PzTUfLlVmw52CnuF58NYl47t3OWhBiznCtY9KI8BXTeZ6nKzhtM3AUd1tOGp9aXBPnn3Vv9Vebw4dWKAT3Yxhb6TY6Lf26Af16-STzt9FizLkzxmh95VdjyCi4xFpCZiVSRv1uClTzzp3DM0gW9gojff7OclXHJvPbRaKzVl9HYHF6bqORTCJbBewAP1izhzxdmoQGaWgNHmKZQE6xfIptv8fs3Fjqt-EyNs0kbd0a51awoMzMfAWciPNcaYcY86XZnwgGJo7GzU_1EkEj1BdbNtT0IAn2I76xyR5e4ovM__wqJBHzeijBa6FJmdk7fJru0T98BQmezKW8cMhbdkLthoKaQtGQR2Ov9uZ0IDOJ2BjHuBT63hupYZAV9Emoe-vk-o48t3rFp97-gPRw_GfvBiFnrEsUxLnKyuA8L5od7YJinZ7RZqf6nNFCC0kiQYmjFsuU_eKhFnoe4qISHV0-4BszfQEydP3ZOsV3YtMQJ0nmmg6LuzxEi_PoJ_w3tNKVCVJVA7NUcOgcixhtUC2M IP88.208.22.3:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://sicantik.pro/video/vk-live-periscope-16x16-picture/ CertificateIssuerLet's Encrypt Subject*.fallclk.com Fingerprint56:26:EB:CF:D7:29:FF:2C:B2:29:4A:FF:47:30:F5:7B:6C:B5:1E:2F ValidityFri, 22 Mar 2024 20:25:27 GMT - Thu, 20 Jun 2024 20:25:26 GMT
File typePNG image data, 1 x 1, 8-bit gray+alpha, non-interlaced Hash91e42db1c66c0b276abf6234dc50b2eb c1986af3c26609b8b7d8933f99c51c1a89e9ea6b 63ef318d96b5d0d0ceba6e04a4e622b1158335cdc67c49e27839132c6f655058
GET /v2/a/na/image?d=BQ5qQHPer5XWrzlpEwMQ5dXYErS6Z4z0XSkWNJVW0-sQ2PhXLvcJ66UQAbUCelRcaylYoxhpEVAaIbFjuosQySsOZEhKRaWv0AmLSEuxUbEcOWvgy8pyhoHyFMhG4mzBpohksDCF5okIPQ1_n7hoN9ijZkwZf7E9z9r0fWIDsJ1f8JmDZwTKVSC_vZOF8Q7WB7MFnVlNV-HfiMQqXt9QSkz6v-TSNbLtZyLGDG-95Wrqo8aYtL6j3yC9UIWV8vS0LM8IIFLGyR2KUDHlHAysPs8v2YK-QgEKWXpkilvFlxjMyomUhI6HBSr9kpeSZqlQvAMMdEkCsSj6kcINAJKjOsbrGNVTnGKeAFF6ZJ5QFCiM1ZS8cAlrk7mRJHYQh5CabHzyKiARhzL_B8DaEDcXgaxZQnVXqZU0UBKiMxp4Fa3plk8ITr25l7gFcwHqBQhXkb2ziyynBx8GVVO8jb2xM8Kd3ea8I3Bmi9pYHyBBi2wddRhq9AW6FqC0fAtIaR0RG8DYRHusHYHrx-5tBUVRMuVgGnpFHUi8ZkKiMqmKZygei0Q7b5MKFbFpMPILutRI66-RhmwyLJiyYRfApkrTCutlci52V-v9tdqvJOERTuxMfhWwQbljq9Tw6PzTUfLlVmw52CnuF58NYl47t3OWhBiznCtY9KI8BXTeZ6nKzhtM3AUd1tOGp9aXBPnn3Vv9Vebw4dWKAT3Yxhb6TY6Lf26Af16-STzt9FizLkzxmh95VdjyCi4xFpCZiVSRv1uClTzzp3DM0gW9gojff7OclXHJvPbRaKzVl9HYHF6bqORTCJbBewAP1izhzxdmoQGaWgNHmKZQE6xfIptv8fs3Fjqt-EyNs0kbd0a51awoMzMfAWciPNcaYcY86XZnwgGJo7GzU_1EkEj1BdbNtT0IAn2I76xyR5e4ovM__wqJBHzeijBa6FJmdk7fJru0T98BQmezKW8cMhbdkLthoKaQtGQR2Ov9uZ0IDOJ2BjHuBT63hupYZAV9Emoe-vk-o48t3rFp97-gPRw_GfvBiFnrEsUxLnKyuA8L5od7YJinZ7RZqf6nNFCC0kiQYmjFsuU_eKhFnoe4qISHV0-4BszfQEydP3ZOsV3YtMQJ0nmmg6LuzxEi_PoJ_w3tNKVCVJVA7NUcOgcixhtUC2M HTTP/1.1
Host: 31803.fallclk.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sicantik.pro/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 24 Apr 2024 03:40:34 GMT
content-type: image/png
content-length: 68
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-max-age: 86400
referrer-policy: unsafe-url
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Device-Memory
accept-ch-lifetime: 31536000
X-Firefox-Spdy: h2
|
|
| 3.bp.blogspot.com/-ZZSacDHLWlM/VhvlKTMjbLI/AAAAAAAAF2M/UDzU4rrvcaI/s1600/btn_close.gif | 142.250.74.161 | 200 OK | 362 B |
URL GET HTTP/23.bp.blogspot.com/-ZZSacDHLWlM/VhvlKTMjbLI/AAAAAAAAF2M/UDzU4rrvcaI/s1600/btn_close.gif IP142.250.74.161:443
Requested byhttps://sicantik.pro/video/vk-live-periscope-16x16-picture/ CertificateIssuerGoogle Trust Services LLC Subjectmisc-sni.blogspot.com FingerprintE8:F4:4F:CE:D1:E0:7B:C8:CD:18:45:AA:90:5A:35:8B:D5:CF:66:6B ValidityMon, 18 Mar 2024 20:01:08 GMT - Mon, 10 Jun 2024 20:01:07 GMT
File typeGIF image data, version 89a, 52 x 15 Hashfd2c05a8c327ace309722b0a5fc4faf3 f446e97c43f8830be9f60644563dd846abe6b8e8 0450e2e1aa3c8b5435690d841f3e573c4f521864e1f8e01a5b6dbcdac922c8b4
GET /-ZZSacDHLWlM/VhvlKTMjbLI/AAAAAAAAF2M/UDzU4rrvcaI/s1600/btn_close.gif HTTP/1.1
Host: 3.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sicantik.pro/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
content-disposition: inline;filename="btn_close.gif"
x-content-type-options: nosniff
server: fife
content-length: 362
x-xss-protection: 0
date: Wed, 24 Apr 2024 01:18:28 GMT
expires: Thu, 25 Apr 2024 01:18:28 GMT
cache-control: public, max-age=86400, no-transform
age: 8526
etag: "v1764"
content-type: image/gif
vary: Origin
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| acdn.tsyndicate.com/sdk/v1/b.b.js | 45.133.44.71 | 200 OK | 3.2 kB |
URL GET HTTP/2acdn.tsyndicate.com/sdk/v1/b.b.js IP45.133.44.71:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://tsyndicate.com/iframes2/0246aee575494bc89de6d47f4c0ca63d.html?keywords=sicantik.pro%20Video%20viral%20Streaming%20terbarukan%20Barat%20Indo%20Jepang%20Korea%2CVk%20live%20periscope%2016x16%20picture%2CVk%20live%20periscope%2016x16%20picture&adb=0&clientjs=1&w=1280&h=1024&tz=0 CertificateIssuerLet's Encrypt Subjectacdn.tsyndicate.com Fingerprint9A:AE:79:BE:2C:BB:CF:C7:A3:F0:FB:72:3D:0F:55:E4:E8:E3:4D:5F ValiditySat, 30 Mar 2024 03:00:48 GMT - Fri, 28 Jun 2024 03:00:47 GMT
File typeJavaScript source, ASCII text, with very long lines (5999) Hashd42c27f2f4d3b1e907fb19769fbb487e 48378f62ba9bb1bfc4adf74adf8e8ca5d33d05ae 10aa5af82d490e9beb3b1b4884132c8dc748cb4f09cf9573f2865b4c7afc5e83
GET /sdk/v1/b.b.js HTTP/1.1
Host: acdn.tsyndicate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tsyndicate.com/
Cookie: ts_uid=9fc90fb4-7f01-4b1b-abf8-a8828ba42199; bfq=APeIECNCx5YZNW7kwJHDRhcWIsYU3CLjoYgyE2PciEEDRgwbNGbE6NJH
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 24 Apr 2024 03:40:35 GMT
content-type: application/javascript; charset=utf-8
server: nginx
last-modified: Fri, 19 Apr 2024 10:07:39 GMT
etag: W/"6622426b-17bf"
x-robots-tag: noindex, nofollow
content-encoding: gzip
cache-control: max-age=172800
expires: Fri, 26 Apr 2024 03:40:35 GMT
vary: Accept-Encoding
x-proxy-cache: HIT
X-Firefox-Spdy: h2
|
|
| go.xlivrdr.com/smartpop/c6913f01500457c0bdb8597e6d4286a54c12f8dc120ca06a0ab250733289acaa?userId=d100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca&sourceId=594409&memberId=1iKm4C12dUFz0NsKwm42eoM25rdtnA73unIs2Bar773UB24TtkrjXwYPwhlevI3sx82-XQWbEXNv9WZUTSSexgIncQnJZSU4z0uLQsa71yynA5rQ_gUIDRUi&p1=4350989 | 172.64.147.206 | 302 Found | 0 B |
URL GET HTTP/3go.xlivrdr.com/smartpop/c6913f01500457c0bdb8597e6d4286a54c12f8dc120ca06a0ab250733289acaa?userId=d100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca&sourceId=594409&memberId=1iKm4C12dUFz0NsKwm42eoM25rdtnA73unIs2Bar773UB24TtkrjXwYPwhlevI3sx82-XQWbEXNv9WZUTSSexgIncQnJZSU4z0uLQsa71yynA5rQ_gUIDRUi&p1=4350989 IP172.64.147.206:443
Requested byhttps://tsyndicate.com/iframes2/0246aee575494bc89de6d47f4c0ca63d.html?keywords=sicantik.pro%20Video%20viral%20Streaming%20terbarukan%20Barat%20Indo%20Jepang%20Korea%2CVk%20live%20periscope%2016x16%20picture%2CVk%20live%20periscope%2016x16%20picture&adb=0&clientjs=1&w=1280&h=1024&tz=0 CertificateIssuerCloudflare, Inc. Subjectxlivrdr.com FingerprintDA:D9:AC:E4:B1:E8:44:C4:D9:A4:0E:1B:DF:33:4B:24:74:45:7D:0E ValidityWed, 03 May 2023 00:00:00 GMT - Wed, 01 May 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /smartpop/c6913f01500457c0bdb8597e6d4286a54c12f8dc120ca06a0ab250733289acaa?userId=d100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca&sourceId=594409&memberId=1iKm4C12dUFz0NsKwm42eoM25rdtnA73unIs2Bar773UB24TtkrjXwYPwhlevI3sx82-XQWbEXNv9WZUTSSexgIncQnJZSU4z0uLQsa71yynA5rQ_gUIDRUi&p1=4350989 HTTP/1.1
Host: go.xlivrdr.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tsyndicate.com/
Cookie: _var=775628.33204_YzRmMzYxZTI=; __cflb=02DiuDFRFiBZBvMSLtr5TfCC2emAa5z1n1NydrJ9Srj64
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 302 Found
date: Wed, 24 Apr 2024 03:40:35 GMT
content-length: 0
location: https://creative.mnaspm.com/widgets/v4/Universal?action=sbSignupWithModel&campaignId=c6913f01500457c0bdb8597e6d4286a54c12f8dc120ca06a0ab250733289acaa&campaignType=smartpop&creativeId=6c0b1b4a99ba447f4bead9b76a7621269ec060b2297874834d7b37047f348300&iterationId=868050&masterSmartpopId=1605&memberId=1iKm4C12dUFz0NsKwm42eoM25rdtnA73unIs2Bar773UB24TtkrjXwYPwhlevI3sx82-XQWbEXNv9WZUTSSexgIncQnJZSU4z0uLQsa71yynA5rQ_gUIDRUi&mlView=1&p1=4350989&quality=240p&ruleId=3&smartpopId=1062&sortBy=recommended&sourceId=594409&tag=girls&usePreroll=0&userId=d100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca&variationId=33204&webp=1
set-cookie: _var=775628.33204_YzRmMzYxZTI=; Path=/; Expires=Fri, 24 May 2024 03:40:35 GMT; HttpOnly; Secure; SameSite=None
access-control-allow-credentials: true
access-control-allow-headers: Content-Type, Content-Length, Accept-Encoding, x-requested-with
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 879312a16961b4f1-OSL
alt-svc: h3=":443"; ma=86400
|
|
| creative.mnaspm.com/widgets/v4/Universal?action=sbSignupWithModel&campaignId=c6913f01500457c0bdb8597e6d4286a54c12f8dc120ca06a0ab250733289acaa&campaignType=smartpop&creativeId=6c0b1b4a99ba447f4bead9b76a7621269ec060b2297874834d7b37047f348300&iterationId=868050&masterSmartpopId=1605&memberId=1iKm4C12dUFz0NsKwm42eoM25rdtnA73unIs2Bar773UB24TtkrjXwYPwhlevI3sx82-XQWbEXNv9WZUTSSexgIncQnJZSU4z0uLQsa71yynA5rQ_gUIDRUi&mlView=1&p1=4350989&quality=240p&ruleId=3&smartpopId=1062&sortBy=recommended&sourceId=594409&tag=girls&usePreroll=0&userId=d100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca&variationId=33204&webp=1 | 104.18.40.50 | 200 OK | 82 kB |
URL GET HTTP/3creative.mnaspm.com/widgets/v4/Universal?action=sbSignupWithModel&campaignId=c6913f01500457c0bdb8597e6d4286a54c12f8dc120ca06a0ab250733289acaa&campaignType=smartpop&creativeId=6c0b1b4a99ba447f4bead9b76a7621269ec060b2297874834d7b37047f348300&iterationId=868050&masterSmartpopId=1605&memberId=1iKm4C12dUFz0NsKwm42eoM25rdtnA73unIs2Bar773UB24TtkrjXwYPwhlevI3sx82-XQWbEXNv9WZUTSSexgIncQnJZSU4z0uLQsa71yynA5rQ_gUIDRUi&mlView=1&p1=4350989&quality=240p&ruleId=3&smartpopId=1062&sortBy=recommended&sourceId=594409&tag=girls&usePreroll=0&userId=d100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca&variationId=33204&webp=1 IP104.18.40.50:443
Requested byhttps://tsyndicate.com/iframes2/0246aee575494bc89de6d47f4c0ca63d.html?keywords=sicantik.pro%20Video%20viral%20Streaming%20terbarukan%20Barat%20Indo%20Jepang%20Korea%2CVk%20live%20periscope%2016x16%20picture%2CVk%20live%20periscope%2016x16%20picture&adb=0&clientjs=1&w=1280&h=1024&tz=0 CertificateIssuerGoogle Trust Services LLC Subjectmnaspm.com Fingerprint41:FC:20:C5:2D:89:14:17:87:EB:2D:BA:2E:DE:61:87:1E:53:19:CE ValiditySun, 14 Apr 2024 17:19:29 GMT - Sat, 13 Jul 2024 17:19:28 GMT
File typeHTML document, ASCII text Hash724b95a74ba01a187b1bb7616607a009 0e01cc46f5d2bd5e1a69a1dbaaa771ce7c25eb21 ea70d06d23a8fdfb333e3c28dd008ce8b0543b5d6cedcec9babc4a8daa9b3ef3
GET /widgets/v4/Universal?action=sbSignupWithModel&campaignId=c6913f01500457c0bdb8597e6d4286a54c12f8dc120ca06a0ab250733289acaa&campaignType=smartpop&creativeId=6c0b1b4a99ba447f4bead9b76a7621269ec060b2297874834d7b37047f348300&iterationId=868050&masterSmartpopId=1605&memberId=1iKm4C12dUFz0NsKwm42eoM25rdtnA73unIs2Bar773UB24TtkrjXwYPwhlevI3sx82-XQWbEXNv9WZUTSSexgIncQnJZSU4z0uLQsa71yynA5rQ_gUIDRUi&mlView=1&p1=4350989&quality=240p&ruleId=3&smartpopId=1062&sortBy=recommended&sourceId=594409&tag=girls&usePreroll=0&userId=d100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca&variationId=33204&webp=1 HTTP/1.1
Host: creative.mnaspm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://tsyndicate.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 24 Apr 2024 03:40:35 GMT
content-type: text/html
last-modified: Tue, 23 Apr 2024 08:30:42 GMT
expires: Wed, 24 Apr 2024 03:40:26 GMT
cache-control: max-age=10
strict-transport-security: max-age=15768000
pragma: public
report-to: { "endpoints":[{ "url": "https://go.stripchat.com/report" }], "group": "default", "max_age": 1048576 }
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64
cf-cache-status: HIT
age: 10
vary: Accept-Encoding
server: cloudflare
cf-ray: 879312a1a8f45699-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| 31803.fallclk.com/v2/a/na/224644?subId=&pageUri=https%3A%2F%2Fsicantik.pro%2Fvideo%2Fvk-live-periscope-16x16-picture%2F&referer=&av=1&abl=0&kws=live%2Cperiscope%2Cpicture&rtg=&bdd=%5B%22Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0%22%2C%22false%22%2C%22Linux%20x86_64%22%2C%22%22%2C%22%22%2C%22%22%2C%22%22%2C%22false%22%2C%22true%22%2C%221280%22%2C%221024%22%2C%221280%22%2C%221024%22%2C%221280%22%2C%221024%22%2C%221280%22%2C%221024%22%2C%221280%22%2C%221024%22%2C%22false%22%2C%221%22%2C%2248%22%2C%220%22%2C%22aaaaacccefiflmmprrsstlllecstaaahtscellllpss%22%2C%22Wed%20Apr%2024%202024%2003%3A40%3A32%20GMT%2B0000%20(GMT)%22%2C%220%22%2C%22en-US%22%2C%22en-US%2Cen%22%2C%22false%22%2C%22false%22%2C%22781877177%22%2C%222697903995%22%2C%223%22%2C%22false%22%2C%22%5B%5D%22%5D&dcid= | 88.208.22.3 | 200 OK | 84 kB |
URL GET HTTP/231803.fallclk.com/v2/a/na/224644?subId=&pageUri=https%3A%2F%2Fsicantik.pro%2Fvideo%2Fvk-live-periscope-16x16-picture%2F&referer=&av=1&abl=0&kws=live%2Cperiscope%2Cpicture&rtg=&bdd=%5B%22Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0%22%2C%22false%22%2C%22Linux%20x86_64%22%2C%22%22%2C%22%22%2C%22%22%2C%22%22%2C%22false%22%2C%22true%22%2C%221280%22%2C%221024%22%2C%221280%22%2C%221024%22%2C%221280%22%2C%221024%22%2C%221280%22%2C%221024%22%2C%221280%22%2C%221024%22%2C%22false%22%2C%221%22%2C%2248%22%2C%220%22%2C%22aaaaacccefiflmmprrsstlllecstaaahtscellllpss%22%2C%22Wed%20Apr%2024%202024%2003%3A40%3A32%20GMT%2B0000%20(GMT)%22%2C%220%22%2C%22en-US%22%2C%22en-US%2Cen%22%2C%22false%22%2C%22false%22%2C%22781877177%22%2C%222697903995%22%2C%223%22%2C%22false%22%2C%22%5B%5D%22%5D&dcid= IP88.208.22.3:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://sicantik.pro/video/vk-live-periscope-16x16-picture/ CertificateIssuerLet's Encrypt Subject*.fallclk.com Fingerprint56:26:EB:CF:D7:29:FF:2C:B2:29:4A:FF:47:30:F5:7B:6C:B5:1E:2F ValidityFri, 22 Mar 2024 20:25:27 GMT - Thu, 20 Jun 2024 20:25:26 GMT
File typegzip compressed data, from Unix Hash5568ec905513bf330f077f4920260e25 5023c657e630802f96c0d25768b41dd223430273 411b7ba13fd204e0063d8c66ef347cce656bac9fcca2da52ecce37f3a9509fd9
GET /v2/a/na/224644?subId=&pageUri=https%3A%2F%2Fsicantik.pro%2Fvideo%2Fvk-live-periscope-16x16-picture%2F&referer=&av=1&abl=0&kws=live%2Cperiscope%2Cpicture&rtg=&bdd=%5B%22Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0%22%2C%22false%22%2C%22Linux%20x86_64%22%2C%22%22%2C%22%22%2C%22%22%2C%22%22%2C%22false%22%2C%22true%22%2C%221280%22%2C%221024%22%2C%221280%22%2C%221024%22%2C%221280%22%2C%221024%22%2C%221280%22%2C%221024%22%2C%221280%22%2C%221024%22%2C%22false%22%2C%221%22%2C%2248%22%2C%220%22%2C%22aaaaacccefiflmmprrsstlllecstaaahtscellllpss%22%2C%22Wed%20Apr%2024%202024%2003%3A40%3A32%20GMT%2B0000%20(GMT)%22%2C%220%22%2C%22en-US%22%2C%22en-US%2Cen%22%2C%22false%22%2C%22false%22%2C%22781877177%22%2C%222697903995%22%2C%223%22%2C%22false%22%2C%22%5B%5D%22%5D&dcid= HTTP/1.1
Host: 31803.fallclk.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://sicantik.pro
DNT: 1
Connection: keep-alive
Referer: https://sicantik.pro/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 24 Apr 2024 03:40:34 GMT
content-type: application/json; charset=UTF-8
vary: Accept-Encoding
access-control-allow-origin: https://sicantik.pro
access-control-allow-credentials: true
access-control-max-age: 86400
referrer-policy: unsafe-url
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Device-Memory
accept-ch-lifetime: 31536000
p3p: CP="NOI DEVa TAIa OUR BUS UNI STA"
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
pragma: no-cache
last-modified: Wed, 24 Apr 2024 03:40:34 UTC
expires: Wed, 24 Apr 2024 03:40:34 UTC
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| video.ktkjmp.com/adsbygoogle.js | 104.18.53.225 | 200 OK | 16 B |
URL GET HTTP/3video.ktkjmp.com/adsbygoogle.js IP104.18.53.225:443
Requested byhttps://creative.mnaspm.com/widgets/v4/Universal?action=sbSignupWithModel&campaignId=c6913f01500457c0bdb8597e6d4286a54c12f8dc120ca06a0ab250733289acaa&campaignType=smartpop&creativeId=6c0b1b4a99ba447f4bead9b76a7621269ec060b2297874834d7b37047f348300&iterationId=868050&masterSmartpopId=1605&memberId=1iKm4C12dUFz0NsKwm42eoM25rdtnA73unIs2Bar773UB24TtkrjXwYPwhlevI3sx82-XQWbEXNv9WZUTSSexgIncQnJZSU4z0uLQsa71yynA5rQ_gUIDRUi&mlView=1&p1=4350989&quality=240p&ruleId=3&smartpopId=1062&sortBy=recommended&sourceId=594409&tag=girls&usePreroll=0&userId=d100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca&variationId=33204&webp=1 CertificateIssuerCloudflare, Inc. Subjectvideo.ktkjmp.com Fingerprint02:C1:75:9D:DD:6A:66:20:9E:A3:46:1B:5E:A4:87:83:5A:09:92:93 ValiditySun, 02 Jul 2023 00:00:00 GMT - Mon, 01 Jul 2024 23:59:59 GMT
Hash3d7f7a60216d40dea48e495fef6903c9 fecdb5184f55cf012563d78940eb97b10b9cc99b 96d83ac9f20fc0b88404f307f135e212642e02d6ea295c96b28aed0d771a224f
GET /adsbygoogle.js HTTP/1.1
Host: video.ktkjmp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://creative.mnaspm.com/
Origin: https://creative.mnaspm.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 24 Apr 2024 03:40:35 GMT
content-type: application/javascript
content-length: 16
x-amz-id-2: eOt3YX0Nm2YrsRFghHjY+ldPpZhMsRS8Tg9HXo+sQY2MfQ8piotah5MMqRgsIwcNTLmVbQ2iqoU=
x-amz-request-id: Y49M74J1R1NSP1TJ
last-modified: Thu, 10 Mar 2022 13:52:07 GMT
etag: "3d7f7a60216d40dea48e495fef6903c9"
x-amz-meta-s3cmd-attrs: atime:1646920284/ctime:1646920283/gid:20/gname:staff/md5:3d7f7a60216d40dea48e495fef6903c9/mode:33188/mtime:1646920283/uid:501/uname:mikhailchubar
x-amz-version-id: eIgLIBoMMcsEXtxOH6UDjWyfAquRpkIG
access-control-allow-origin: https://creative.mnaspm.com
access-control-allow-credentials: true
access-control-allow-headers: Content-Type, Content-Length, Accept-Encoding, x-requested-with
cf-cache-status: HIT
age: 5527
expires: Wed, 24 Apr 2024 07:40:35 GMT
cache-control: public, max-age=14400
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 879312a2f85f0b45-OSL
alt-svc: h3=":443"; ma=86400
|
|
| creative.mnaspm.com/widgets/v4/Universal/lang/en.json | 104.18.40.50 | 200 OK | 118 B |
URL GET HTTP/3creative.mnaspm.com/widgets/v4/Universal/lang/en.json IP104.18.40.50:443
Requested byhttps://creative.mnaspm.com/widgets/v4/Universal?action=sbSignupWithModel&campaignId=c6913f01500457c0bdb8597e6d4286a54c12f8dc120ca06a0ab250733289acaa&campaignType=smartpop&creativeId=6c0b1b4a99ba447f4bead9b76a7621269ec060b2297874834d7b37047f348300&iterationId=868050&masterSmartpopId=1605&memberId=hHqq9q1WmUAkzquHgxB45UWeS8FHTuFir1J5vRaRDeBfRVndLEmQX-FlQlDmfRWAdgWnzuEcbS8bL10IRCgzcjMpoHdh5bvAnOl5pHCEC4i0sT0g_gUIDRUi&mlView=1&p1=4350989&quality=240p&ruleId=3&smartpopId=1062&sortBy=recommended&sourceId=594409&tag=girls&usePreroll=0&userId=d100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca&variationId=33204&webp=1 CertificateIssuerGoogle Trust Services LLC Subjectmnaspm.com Fingerprint41:FC:20:C5:2D:89:14:17:87:EB:2D:BA:2E:DE:61:87:1E:53:19:CE ValiditySun, 14 Apr 2024 17:19:29 GMT - Sat, 13 Jul 2024 17:19:28 GMT
Hash69a54638b649d7ce4748bd42c4b6dade a2dfe9f8791952fbc5cc44d4757b031a6cee1731 0c25fbbff92c994866041b57d519aa22aa84d55b6b31bcf681dd5b74668cb750
GET /widgets/v4/Universal/lang/en.json HTTP/1.1
Host: creative.mnaspm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://creative.mnaspm.com/widgets/v4/Universal?action=sbSignupWithModel&campaignId=c6913f01500457c0bdb8597e6d4286a54c12f8dc120ca06a0ab250733289acaa&campaignType=smartpop&creativeId=6c0b1b4a99ba447f4bead9b76a7621269ec060b2297874834d7b37047f348300&iterationId=868050&masterSmartpopId=1605&memberId=1iKm4C12dUFz0NsKwm42eoM25rdtnA73unIs2Bar773UB24TtkrjXwYPwhlevI3sx82-XQWbEXNv9WZUTSSexgIncQnJZSU4z0uLQsa71yynA5rQ_gUIDRUi&mlView=1&p1=4350989&quality=240p&ruleId=3&smartpopId=1062&sortBy=recommended&sourceId=594409&tag=girls&usePreroll=0&userId=d100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca&variationId=33204&webp=1
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 24 Apr 2024 03:40:35 GMT
content-type: application/json
last-modified: Tue, 23 Apr 2024 08:30:42 GMT
etag: W/"662771b2-ac"
expires: Wed, 24 Apr 2024 03:40:38 GMT
cache-control: max-age=10
pragma: public
cf-cache-status: HIT
age: 4
vary: Accept-Encoding
server: cloudflare
cf-ray: 879312a2f9835699-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| img.strpst.com/thumbs/1713930000/138907472_webp | 104.17.11.106 | 200 OK | 34 kB |
URL GET HTTP/3img.strpst.com/thumbs/1713930000/138907472_webp IP104.17.11.106:443
Requested byhttps://creative.mnaspm.com/widgets/v4/Universal?action=sbSignupWithModel&campaignId=c6913f01500457c0bdb8597e6d4286a54c12f8dc120ca06a0ab250733289acaa&campaignType=smartpop&creativeId=6c0b1b4a99ba447f4bead9b76a7621269ec060b2297874834d7b37047f348300&iterationId=868050&masterSmartpopId=1605&memberId=hHqq9q1WmUAkzquHgxB45UWeS8FHTuFir1J5vRaRDeBfRVndLEmQX-FlQlDmfRWAdgWnzuEcbS8bL10IRCgzcjMpoHdh5bvAnOl5pHCEC4i0sT0g_gUIDRUi&mlView=1&p1=4350989&quality=240p&ruleId=3&smartpopId=1062&sortBy=recommended&sourceId=594409&tag=girls&usePreroll=0&userId=d100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca&variationId=33204&webp=1 CertificateIssuerCloudflare, Inc. Subjectimg.strpst.com Fingerprint15:3B:1E:F6:13:E2:CF:39:35:E5:C5:64:DA:91:8D:43:49:24:9E:A8 ValiditySun, 03 Mar 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 640x360, Scaling: [none]x[none], YUV color, decoders should clamp Hash8e247fec603bdb714229dea36230151c fede089114996714d88e72d58aa2f1d58e4082e5 1abe9fc794ee638e11ac2f06e6701df7e13db95c3173da2932de5f544c1edca4
GET /thumbs/1713930000/138907472_webp HTTP/1.1
Host: img.strpst.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://creative.mnaspm.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 24 Apr 2024 03:40:35 GMT
content-type: image/webp
content-length: 33930
etag: "8e247fec603bdb714229dea36230151c"
last-modified: Wed, 24 Apr 2024 03:38:41 GMT
cache-control: public, max-age=1800, s-maxage=1800
access-control-allow-origin: *
access-control-allow-methods: GET
cf-cache-status: HIT
age: 28
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 879312a399d1b52d-OSL
alt-svc: h3=":443"; ma=86400
|
|
| sicantik.pro/wp-content/themes/retrotube/assets/stylesheets/font-awesome/fonts/fontawesome-webfont.woff2?v=4.7.0 | 104.21.71.64 | 200 OK | 102 kB |
URL GET HTTP/3sicantik.pro/wp-content/themes/retrotube/assets/stylesheets/font-awesome/fonts/fontawesome-webfont.woff2?v=4.7.0 IP104.21.71.64:443
Requested byhttps://sicantik.pro/video/vk-live-periscope-16x16-picture/ CertificateIssuerGoogle Trust Services LLC Subjectsicantik.pro FingerprintC5:23:EF:A4:D1:09:03:7C:51:52:DC:24:7C:20:A9:1D:38:31:3E:32 ValidityFri, 15 Mar 2024 07:05:18 GMT - Thu, 13 Jun 2024 07:05:17 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 77160, version 4.459 Size102 kB (101833 bytes) Hash28f76b4159cbcd5ce5e482c1f8d605c9 83485f9d27e0d27792bf74553a081bfe96a5879d 099524a98c5d7efc1ac4f47870ddf247eb2eae32fc4ede2047599f4e7c36d2d8
GET /wp-content/themes/retrotube/assets/stylesheets/font-awesome/fonts/fontawesome-webfont.woff2?v=4.7.0 HTTP/1.1
Host: sicantik.pro
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://sicantik.pro/wp-content/litespeed/css/09c1a2a44c6ec09341366480bec11a49.css?ver=8427e
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 24 Apr 2024 03:40:31 GMT
content-type: font/woff2
vary: Accept-Encoding
last-modified: Mon, 27 Nov 2023 03:14:39 GMT
cache-control: max-age=10368000
expires: Sat, 20 Jul 2024 08:23:25 GMT
cf-cache-status: HIT
age: 968235
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=E5QnrPHtwbcN3AHhjL8wHgmjAPJCIqeH5pSs9Yvpg5O4rZMNBevHKv2aBqVzDWOf257%2BX6OM1G42HDCmvYmHuKfH6AyH8vBLquz%2BqMJXxfqrr094nI%2ByjW25F9wylGQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87931285ebbab515-OSL
alt-svc: h3=":443"; ma=86400
|
|
| go.mnaspm.com/abc.gif?action=sbSignupWithModel&campaignId=c6913f01500457c0bdb8597e6d4286a54c12f8dc120ca06a0ab250733289acaa&campaignType=smartpop&creativeId=6c0b1b4a99ba447f4bead9b76a7621269ec060b2297874834d7b37047f348300&iterationId=868050&masterSmartpopId=1605&p1=4350989&quality=240p&ruleId=3&smartpopId=1062&sourceId=594409&userId=d100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca&variationId=33204&thumbSizeKey=big&language=en&thumbFit=cover&stripcashR=0&thumbType=default&kbLimit=0&modelsInWatchHistoryCount=-1&modelsInFavoritesCount=-1&userType=newuser&modelsCount=2&segment=hls-newAPI&landing=WidgetV4Universal&referrer=https%3A%2F%2Ftsyndicate.com%2F&i=0&ib=0&filtersMatch=0&m=%5B%7B%22type%22%3A%22navigation%22%2C%22startTime%22%3A0%2C%22duration%22%3A208%7D%2C%7B%22type%22%3A%22resource%22%2C%22startTime%22%3A100%2C%22duration%22%3A23%2C%22transferSize%22%3A82287%7D%2C%7B%22type%22%3A%22resource%22%2C%22startTime%22%3A100%2C%22duration%22%3A15%2C%22transferSize%22%3A4646%7D%2C%7B%22type%22%3A%22first-contentful-paint%22%2C%22startTime%22%3A276%2C%22duration%22%3A0%7D%5D&mh=1419984915 | 104.18.40.50 | 200 OK | 103 B |
URL GET HTTP/3go.mnaspm.com/abc.gif?action=sbSignupWithModel&campaignId=c6913f01500457c0bdb8597e6d4286a54c12f8dc120ca06a0ab250733289acaa&campaignType=smartpop&creativeId=6c0b1b4a99ba447f4bead9b76a7621269ec060b2297874834d7b37047f348300&iterationId=868050&masterSmartpopId=1605&p1=4350989&quality=240p&ruleId=3&smartpopId=1062&sourceId=594409&userId=d100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca&variationId=33204&thumbSizeKey=big&language=en&thumbFit=cover&stripcashR=0&thumbType=default&kbLimit=0&modelsInWatchHistoryCount=-1&modelsInFavoritesCount=-1&userType=newuser&modelsCount=2&segment=hls-newAPI&landing=WidgetV4Universal&referrer=https%3A%2F%2Ftsyndicate.com%2F&i=0&ib=0&filtersMatch=0&m=%5B%7B%22type%22%3A%22navigation%22%2C%22startTime%22%3A0%2C%22duration%22%3A208%7D%2C%7B%22type%22%3A%22resource%22%2C%22startTime%22%3A100%2C%22duration%22%3A23%2C%22transferSize%22%3A82287%7D%2C%7B%22type%22%3A%22resource%22%2C%22startTime%22%3A100%2C%22duration%22%3A15%2C%22transferSize%22%3A4646%7D%2C%7B%22type%22%3A%22first-contentful-paint%22%2C%22startTime%22%3A276%2C%22duration%22%3A0%7D%5D&mh=1419984915 IP104.18.40.50:443
Requested byhttps://creative.mnaspm.com/widgets/v4/Universal?action=sbSignupWithModel&campaignId=c6913f01500457c0bdb8597e6d4286a54c12f8dc120ca06a0ab250733289acaa&campaignType=smartpop&creativeId=6c0b1b4a99ba447f4bead9b76a7621269ec060b2297874834d7b37047f348300&iterationId=868050&masterSmartpopId=1605&memberId=hHqq9q1WmUAkzquHgxB45UWeS8FHTuFir1J5vRaRDeBfRVndLEmQX-FlQlDmfRWAdgWnzuEcbS8bL10IRCgzcjMpoHdh5bvAnOl5pHCEC4i0sT0g_gUIDRUi&mlView=1&p1=4350989&quality=240p&ruleId=3&smartpopId=1062&sortBy=recommended&sourceId=594409&tag=girls&usePreroll=0&userId=d100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca&variationId=33204&webp=1 CertificateIssuerGoogle Trust Services LLC Subjectmnaspm.com Fingerprint41:FC:20:C5:2D:89:14:17:87:EB:2D:BA:2E:DE:61:87:1E:53:19:CE ValiditySun, 14 Apr 2024 17:19:29 GMT - Sat, 13 Jul 2024 17:19:28 GMT
Hash8c99886486b9a004383cb4df29011c43 d79ca4754481fc59598bc08fcdf354900918bffe bda00b0f6892b1c6991e793b42654ad1807694e2ffabcbc4eb1399379737ef6c
GET /abc.gif?action=sbSignupWithModel&campaignId=c6913f01500457c0bdb8597e6d4286a54c12f8dc120ca06a0ab250733289acaa&campaignType=smartpop&creativeId=6c0b1b4a99ba447f4bead9b76a7621269ec060b2297874834d7b37047f348300&iterationId=868050&masterSmartpopId=1605&p1=4350989&quality=240p&ruleId=3&smartpopId=1062&sourceId=594409&userId=d100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca&variationId=33204&thumbSizeKey=big&language=en&thumbFit=cover&stripcashR=0&thumbType=default&kbLimit=0&modelsInWatchHistoryCount=-1&modelsInFavoritesCount=-1&userType=newuser&modelsCount=2&segment=hls-newAPI&landing=WidgetV4Universal&referrer=https%3A%2F%2Ftsyndicate.com%2F&i=0&ib=0&filtersMatch=0&m=%5B%7B%22type%22%3A%22navigation%22%2C%22startTime%22%3A0%2C%22duration%22%3A208%7D%2C%7B%22type%22%3A%22resource%22%2C%22startTime%22%3A100%2C%22duration%22%3A23%2C%22transferSize%22%3A82287%7D%2C%7B%22type%22%3A%22resource%22%2C%22startTime%22%3A100%2C%22duration%22%3A15%2C%22transferSize%22%3A4646%7D%2C%7B%22type%22%3A%22first-contentful-paint%22%2C%22startTime%22%3A276%2C%22duration%22%3A0%7D%5D&mh=1419984915 HTTP/1.1
Host: go.mnaspm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://creative.mnaspm.com/
Cookie: __cflb=0H28upDCGznfDm9XVEL2Ezfg4QRCzSiTsMVahcbKCmr
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 24 Apr 2024 03:40:35 GMT
content-type: image/gif
content-length: 103
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 879312a3a9d35699-OSL
alt-svc: h3=":443"; ma=86400
|
|
| img.strpst.com/thumbs/1713930000/138907472_webp | 104.17.11.106 | 200 OK | 34 kB |
URL GET HTTP/3img.strpst.com/thumbs/1713930000/138907472_webp IP104.17.11.106:443
Requested byhttps://creative.mnaspm.com/widgets/v4/Universal?action=sbSignupWithModel&campaignId=c6913f01500457c0bdb8597e6d4286a54c12f8dc120ca06a0ab250733289acaa&campaignType=smartpop&creativeId=6c0b1b4a99ba447f4bead9b76a7621269ec060b2297874834d7b37047f348300&iterationId=868050&masterSmartpopId=1605&memberId=hHqq9q1WmUAkzquHgxB45UWeS8FHTuFir1J5vRaRDeBfRVndLEmQX-FlQlDmfRWAdgWnzuEcbS8bL10IRCgzcjMpoHdh5bvAnOl5pHCEC4i0sT0g_gUIDRUi&mlView=1&p1=4350989&quality=240p&ruleId=3&smartpopId=1062&sortBy=recommended&sourceId=594409&tag=girls&usePreroll=0&userId=d100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca&variationId=33204&webp=1 CertificateIssuerCloudflare, Inc. Subjectimg.strpst.com Fingerprint15:3B:1E:F6:13:E2:CF:39:35:E5:C5:64:DA:91:8D:43:49:24:9E:A8 ValiditySun, 03 Mar 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 640x360, Scaling: [none]x[none], YUV color, decoders should clamp Hash8e247fec603bdb714229dea36230151c fede089114996714d88e72d58aa2f1d58e4082e5 1abe9fc794ee638e11ac2f06e6701df7e13db95c3173da2932de5f544c1edca4
GET /thumbs/1713930000/138907472_webp HTTP/1.1
Host: img.strpst.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://creative.mnaspm.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 24 Apr 2024 03:40:35 GMT
content-type: image/webp
content-length: 33930
etag: "8e247fec603bdb714229dea36230151c"
last-modified: Wed, 24 Apr 2024 03:38:41 GMT
cache-control: public, max-age=1800, s-maxage=1800
access-control-allow-origin: *
access-control-allow-methods: GET
cf-cache-status: HIT
age: 28
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 879312a419f7b52d-OSL
alt-svc: h3=":443"; ma=86400
|
|
| img.strpst.com/thumbs/1713930000/90081523_webp | 104.17.11.106 | 200 OK | 24 kB |
URL GET HTTP/3img.strpst.com/thumbs/1713930000/90081523_webp IP104.17.11.106:443
Requested byhttps://creative.mnaspm.com/widgets/v4/Universal?action=sbSignupWithModel&campaignId=c6913f01500457c0bdb8597e6d4286a54c12f8dc120ca06a0ab250733289acaa&campaignType=smartpop&creativeId=6c0b1b4a99ba447f4bead9b76a7621269ec060b2297874834d7b37047f348300&iterationId=868050&masterSmartpopId=1605&memberId=hHqq9q1WmUAkzquHgxB45UWeS8FHTuFir1J5vRaRDeBfRVndLEmQX-FlQlDmfRWAdgWnzuEcbS8bL10IRCgzcjMpoHdh5bvAnOl5pHCEC4i0sT0g_gUIDRUi&mlView=1&p1=4350989&quality=240p&ruleId=3&smartpopId=1062&sortBy=recommended&sourceId=594409&tag=girls&usePreroll=0&userId=d100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca&variationId=33204&webp=1 CertificateIssuerCloudflare, Inc. Subjectimg.strpst.com Fingerprint15:3B:1E:F6:13:E2:CF:39:35:E5:C5:64:DA:91:8D:43:49:24:9E:A8 ValiditySun, 03 Mar 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 640x360, Scaling: [none]x[none], YUV color, decoders should clamp Hash27d750f1b8a228aea065e63c888f1dc0 3f7257fc497f07466e72831783c0080ee15e81c1 7d468f84727e081f318d81bc5b160c84e2a9f78a9563f340c69710338dfa5bae
GET /thumbs/1713930000/90081523_webp HTTP/1.1
Host: img.strpst.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://creative.mnaspm.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 24 Apr 2024 03:40:35 GMT
content-type: image/webp
content-length: 23810
etag: "27d750f1b8a228aea065e63c888f1dc0"
last-modified: Wed, 24 Apr 2024 03:39:49 GMT
cache-control: public, max-age=1800, s-maxage=1800
access-control-allow-origin: *
access-control-allow-methods: GET
cf-cache-status: HIT
age: 28
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 879312a419f8b52d-OSL
alt-svc: h3=":443"; ma=86400
|
|
| go.mnaspm.com/abc.gif?action=sbSignupWithModel&campaignId=c6913f01500457c0bdb8597e6d4286a54c12f8dc120ca06a0ab250733289acaa&campaignType=smartpop&creativeId=6c0b1b4a99ba447f4bead9b76a7621269ec060b2297874834d7b37047f348300&iterationId=868050&masterSmartpopId=1605&p1=4350989&quality=240p&ruleId=3&smartpopId=1062&sourceId=594409&userId=d100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca&variationId=33204&thumbSizeKey=big&language=en&thumbFit=cover&stripcashR=0&thumbType=default&kbLimit=0&modelsInWatchHistoryCount=-1&modelsInFavoritesCount=-1&userType=newuser&modelsCount=2&segment=hls-newAPI&landing=WidgetV4Universal&referrer=https%3A%2F%2Ftsyndicate.com%2F&i=0&ib=0&filtersMatch=0&m=%5B%7B%22type%22%3A%22navigation%22%2C%22startTime%22%3A0%2C%22duration%22%3A254%7D%2C%7B%22type%22%3A%22resource%22%2C%22startTime%22%3A94%2C%22duration%22%3A92%2C%22transferSize%22%3A82287%7D%2C%7B%22type%22%3A%22first-contentful-paint%22%2C%22startTime%22%3A313%2C%22duration%22%3A0%7D%5D&mh=-960032524 | 104.18.40.50 | 200 OK | 103 B |
URL GET HTTP/3go.mnaspm.com/abc.gif?action=sbSignupWithModel&campaignId=c6913f01500457c0bdb8597e6d4286a54c12f8dc120ca06a0ab250733289acaa&campaignType=smartpop&creativeId=6c0b1b4a99ba447f4bead9b76a7621269ec060b2297874834d7b37047f348300&iterationId=868050&masterSmartpopId=1605&p1=4350989&quality=240p&ruleId=3&smartpopId=1062&sourceId=594409&userId=d100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca&variationId=33204&thumbSizeKey=big&language=en&thumbFit=cover&stripcashR=0&thumbType=default&kbLimit=0&modelsInWatchHistoryCount=-1&modelsInFavoritesCount=-1&userType=newuser&modelsCount=2&segment=hls-newAPI&landing=WidgetV4Universal&referrer=https%3A%2F%2Ftsyndicate.com%2F&i=0&ib=0&filtersMatch=0&m=%5B%7B%22type%22%3A%22navigation%22%2C%22startTime%22%3A0%2C%22duration%22%3A254%7D%2C%7B%22type%22%3A%22resource%22%2C%22startTime%22%3A94%2C%22duration%22%3A92%2C%22transferSize%22%3A82287%7D%2C%7B%22type%22%3A%22first-contentful-paint%22%2C%22startTime%22%3A313%2C%22duration%22%3A0%7D%5D&mh=-960032524 IP104.18.40.50:443
Requested byhttps://creative.mnaspm.com/widgets/v4/Universal?action=sbSignupWithModel&campaignId=c6913f01500457c0bdb8597e6d4286a54c12f8dc120ca06a0ab250733289acaa&campaignType=smartpop&creativeId=6c0b1b4a99ba447f4bead9b76a7621269ec060b2297874834d7b37047f348300&iterationId=868050&masterSmartpopId=1605&memberId=1iKm4C12dUFz0NsKwm42eoM25rdtnA73unIs2Bar773UB24TtkrjXwYPwhlevI3sx82-XQWbEXNv9WZUTSSexgIncQnJZSU4z0uLQsa71yynA5rQ_gUIDRUi&mlView=1&p1=4350989&quality=240p&ruleId=3&smartpopId=1062&sortBy=recommended&sourceId=594409&tag=girls&usePreroll=0&userId=d100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca&variationId=33204&webp=1 CertificateIssuerGoogle Trust Services LLC Subjectmnaspm.com Fingerprint41:FC:20:C5:2D:89:14:17:87:EB:2D:BA:2E:DE:61:87:1E:53:19:CE ValiditySun, 14 Apr 2024 17:19:29 GMT - Sat, 13 Jul 2024 17:19:28 GMT
Hash8c99886486b9a004383cb4df29011c43 d79ca4754481fc59598bc08fcdf354900918bffe bda00b0f6892b1c6991e793b42654ad1807694e2ffabcbc4eb1399379737ef6c
GET /abc.gif?action=sbSignupWithModel&campaignId=c6913f01500457c0bdb8597e6d4286a54c12f8dc120ca06a0ab250733289acaa&campaignType=smartpop&creativeId=6c0b1b4a99ba447f4bead9b76a7621269ec060b2297874834d7b37047f348300&iterationId=868050&masterSmartpopId=1605&p1=4350989&quality=240p&ruleId=3&smartpopId=1062&sourceId=594409&userId=d100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca&variationId=33204&thumbSizeKey=big&language=en&thumbFit=cover&stripcashR=0&thumbType=default&kbLimit=0&modelsInWatchHistoryCount=-1&modelsInFavoritesCount=-1&userType=newuser&modelsCount=2&segment=hls-newAPI&landing=WidgetV4Universal&referrer=https%3A%2F%2Ftsyndicate.com%2F&i=0&ib=0&filtersMatch=0&m=%5B%7B%22type%22%3A%22navigation%22%2C%22startTime%22%3A0%2C%22duration%22%3A254%7D%2C%7B%22type%22%3A%22resource%22%2C%22startTime%22%3A94%2C%22duration%22%3A92%2C%22transferSize%22%3A82287%7D%2C%7B%22type%22%3A%22first-contentful-paint%22%2C%22startTime%22%3A313%2C%22duration%22%3A0%7D%5D&mh=-960032524 HTTP/1.1
Host: go.mnaspm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://creative.mnaspm.com/
Cookie: __cflb=0H28upDCGznfDm9XVEL2Ezfg4QRCzSiTsMVahcbKCmr
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 24 Apr 2024 03:40:35 GMT
content-type: image/gif
content-length: 103
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 879312a419f85699-OSL
alt-svc: h3=":443"; ma=86400
|
|
| xhlive.cam/checkUrl | 104.17.117.12 | 200 OK | 15 B |
IP104.17.117.12:443
Requested byhttps://creative.mnaspm.com/widgets/v4/Universal?action=sbSignupWithModel&campaignId=c6913f01500457c0bdb8597e6d4286a54c12f8dc120ca06a0ab250733289acaa&campaignType=smartpop&creativeId=6c0b1b4a99ba447f4bead9b76a7621269ec060b2297874834d7b37047f348300&iterationId=868050&masterSmartpopId=1605&memberId=1iKm4C12dUFz0NsKwm42eoM25rdtnA73unIs2Bar773UB24TtkrjXwYPwhlevI3sx82-XQWbEXNv9WZUTSSexgIncQnJZSU4z0uLQsa71yynA5rQ_gUIDRUi&mlView=1&p1=4350989&quality=240p&ruleId=3&smartpopId=1062&sortBy=recommended&sourceId=594409&tag=girls&usePreroll=0&userId=d100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca&variationId=33204&webp=1 CertificateIssuerCloudflare, Inc. Subjectxhlive.cam Fingerprint3C:33:D1:FA:EF:02:16:20:F6:51:FD:04:F8:BF:C2:82:08:1E:0A:DF ValidityTue, 22 Aug 2023 00:00:00 GMT - Tue, 20 Aug 2024 23:59:59 GMT
Hash7fb97eb7c8636552ad068f6d56b5ea34 b69679936779fb02503bc0fe1374a737cc762ecb e78008828abaa93c4462e326ef384dcda1443352a0f24bdeedada6a6fdbfd1d5
GET /checkUrl HTTP/1.1
Host: xhlive.cam
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en
Accept-Encoding: gzip, deflate, br
Referer: https://creative.mnaspm.com/
Origin: https://creative.mnaspm.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 24 Apr 2024 03:40:35 GMT
content-type: application/json
content-length: 15
access-control-allow-origin: https://creative.mnaspm.com
cf-cache-status: DYNAMIC
set-cookie: __cf_bm=YM.qnUtzvhEIP5A5BqmaRt_hegnGTwJBmW_hwtCnacQ-1713930035-1.0.1.1-okFdvJDuKqx8iMn05kEiD5rTFnr_xFvxze7RwE.T9uQbs0eBe3pjVk06XiLum4RpM6ZX0rEYKoXcNH.AeBho1kSseLp6.2r1fUTFAjL5I4E; path=/; expires=Wed, 24-Apr-24 04:10:35 GMT; domain=.xhlive.cam; HttpOnly; Secure; SameSite=None
__cflb=02DiuGyDLPvii6XBe55VL9ybMrjEzDagpSh87Zjd3sNKE; SameSite=None; Secure; path=/; expires=Thu, 25-Apr-24 03:40:35 GMT; HttpOnly
server: cloudflare
cf-ray: 879312a4bf685691-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| stripcash.com/checkUrl | 104.18.55.116 | 200 OK | 15 B |
IP104.18.55.116:443
Requested byhttps://creative.mnaspm.com/widgets/v4/Universal?action=sbSignupWithModel&campaignId=c6913f01500457c0bdb8597e6d4286a54c12f8dc120ca06a0ab250733289acaa&campaignType=smartpop&creativeId=6c0b1b4a99ba447f4bead9b76a7621269ec060b2297874834d7b37047f348300&iterationId=868050&masterSmartpopId=1605&memberId=hHqq9q1WmUAkzquHgxB45UWeS8FHTuFir1J5vRaRDeBfRVndLEmQX-FlQlDmfRWAdgWnzuEcbS8bL10IRCgzcjMpoHdh5bvAnOl5pHCEC4i0sT0g_gUIDRUi&mlView=1&p1=4350989&quality=240p&ruleId=3&smartpopId=1062&sortBy=recommended&sourceId=594409&tag=girls&usePreroll=0&userId=d100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca&variationId=33204&webp=1 CertificateIssuerGoogle Trust Services LLC Subjectstripcash.com FingerprintA5:66:AE:99:F4:14:78:FD:30:4E:BE:D1:39:4E:AB:1C:B6:9A:39:9B ValiditySun, 14 Apr 2024 00:39:00 GMT - Sat, 13 Jul 2024 00:38:59 GMT
Hash7fb97eb7c8636552ad068f6d56b5ea34 b69679936779fb02503bc0fe1374a737cc762ecb e78008828abaa93c4462e326ef384dcda1443352a0f24bdeedada6a6fdbfd1d5
GET /checkUrl HTTP/1.1
Host: stripcash.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en
Accept-Encoding: gzip, deflate, br
Referer: https://creative.mnaspm.com/
Origin: https://creative.mnaspm.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 24 Apr 2024 03:40:36 GMT
content-type: application/json
content-length: 15
access-control-allow-origin: https://creative.mnaspm.com
cf-cache-status: DYNAMIC
set-cookie: __cflb=0H28upDCGznfDm9XVD3SofQ5NjJpXSe9BNDjWiibthA; SameSite=None; Secure; path=/; expires=Thu, 25-Apr-24 03:40:36 GMT; HttpOnly
server: cloudflare
cf-ray: 879312a49d7856c9-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| go.mnaspm.com/app/domain-checker/check-result | 104.18.40.50 | 204 No Content | 0 B |
URL POST HTTP/3go.mnaspm.com/app/domain-checker/check-result IP104.18.40.50:443
Requested byhttps://creative.mnaspm.com/widgets/v4/Universal?action=sbSignupWithModel&campaignId=c6913f01500457c0bdb8597e6d4286a54c12f8dc120ca06a0ab250733289acaa&campaignType=smartpop&creativeId=6c0b1b4a99ba447f4bead9b76a7621269ec060b2297874834d7b37047f348300&iterationId=868050&masterSmartpopId=1605&memberId=1iKm4C12dUFz0NsKwm42eoM25rdtnA73unIs2Bar773UB24TtkrjXwYPwhlevI3sx82-XQWbEXNv9WZUTSSexgIncQnJZSU4z0uLQsa71yynA5rQ_gUIDRUi&mlView=1&p1=4350989&quality=240p&ruleId=3&smartpopId=1062&sortBy=recommended&sourceId=594409&tag=girls&usePreroll=0&userId=d100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca&variationId=33204&webp=1 CertificateIssuerGoogle Trust Services LLC Subjectmnaspm.com Fingerprint41:FC:20:C5:2D:89:14:17:87:EB:2D:BA:2E:DE:61:87:1E:53:19:CE ValiditySun, 14 Apr 2024 17:19:29 GMT - Sat, 13 Jul 2024 17:19:28 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /app/domain-checker/check-result HTTP/1.1
Host: go.mnaspm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://creative.mnaspm.com/
Content-Type: text/plain;charset=UTF-8
Content-Length: 237
Origin: https://creative.mnaspm.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 204 No Content
date: Wed, 24 Apr 2024 03:40:36 GMT
access-control-allow-origin: https://creative.mnaspm.com
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64
cf-cache-status: DYNAMIC
set-cookie: __cflb=02DiuDFRFiBZBvMSLtsgHAphT8dt9Y3eZZNvji2vR6uxQ; SameSite=None; Secure; path=/; expires=Thu, 25-Apr-24 03:40:36 GMT; HttpOnly
server: cloudflare
cf-ray: 879312a58a925699-OSL
alt-svc: h3=":443"; ma=86400
|
|
| go.mnaspm.com/app/domain-checker/get-check | 104.18.40.50 | 200 OK | 156 B |
URL POST HTTP/3go.mnaspm.com/app/domain-checker/get-check IP104.18.40.50:443
Requested byhttps://creative.mnaspm.com/widgets/v4/Universal?action=sbSignupWithModel&campaignId=c6913f01500457c0bdb8597e6d4286a54c12f8dc120ca06a0ab250733289acaa&campaignType=smartpop&creativeId=6c0b1b4a99ba447f4bead9b76a7621269ec060b2297874834d7b37047f348300&iterationId=868050&masterSmartpopId=1605&memberId=1iKm4C12dUFz0NsKwm42eoM25rdtnA73unIs2Bar773UB24TtkrjXwYPwhlevI3sx82-XQWbEXNv9WZUTSSexgIncQnJZSU4z0uLQsa71yynA5rQ_gUIDRUi&mlView=1&p1=4350989&quality=240p&ruleId=3&smartpopId=1062&sortBy=recommended&sourceId=594409&tag=girls&usePreroll=0&userId=d100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca&variationId=33204&webp=1 CertificateIssuerGoogle Trust Services LLC Subjectmnaspm.com Fingerprint41:FC:20:C5:2D:89:14:17:87:EB:2D:BA:2E:DE:61:87:1E:53:19:CE ValiditySun, 14 Apr 2024 17:19:29 GMT - Sat, 13 Jul 2024 17:19:28 GMT
Hashac719b410fe8e8bcd4287d0c2e2731bd e48dd770884e06d383f1c1ae1dffa3fa16a155b6 830baecb0db9d644b75d81b2dae6bb9684db25d968c68c55983239d14494cc34
POST /app/domain-checker/get-check HTTP/1.1
Host: go.mnaspm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://creative.mnaspm.com/
Origin: https://creative.mnaspm.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
Content-Length: 0
TE: trailers
HTTP/3 200 OK
date: Wed, 24 Apr 2024 03:40:35 GMT
content-type: application/json
access-control-allow-origin: https://creative.mnaspm.com
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64
cf-cache-status: DYNAMIC
set-cookie: __cflb=02DiuDFRFiBZBvMSLtr5H5kNY8wLqg6ry2Y1b7tyJAahS; SameSite=None; Secure; path=/; expires=Thu, 25-Apr-24 03:40:35 GMT; HttpOnly
server: cloudflare
cf-ray: 879312a3e9e95699-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| silldisappoint.com/75/47/b1/7547b1402f84a4c82c92a5095226e630.js | 172.240.108.76 | 200 OK | 31 kB |
URL GET HTTP/1.1silldisappoint.com/75/47/b1/7547b1402f84a4c82c92a5095226e630.js IP172.240.108.76:443
Requested byhttps://sicantik.pro/video/vk-live-periscope-16x16-picture/ CertificateIssuerLet's Encrypt Subjectsilldisappoint.com Fingerprint87:E4:38:87:27:09:D8:50:38:30:9F:B8:73:8A:28:42:00:CB:A4:74 ValidityTue, 05 Mar 2024 07:39:45 GMT - Mon, 03 Jun 2024 07:39:44 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Hash987a315cf89801a3dc1e765146a1616f 35f7ab72a134b0564907f63d06d1367d8dafea21 96a2de38f3cb9a6e5602fbf9400c0637bff4611af44ea6b11014c42d3d5e55c7
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /75/47/b1/7547b1402f84a4c82c92a5095226e630.js HTTP/1.1
Host: silldisappoint.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sicantik.pro/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Wed, 24 Apr 2024 03:40:37 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 2b963c34a50cd21ef3d6c2e17aceb03c
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
|
|
| silldisappoint.com/f0/f2/49/f0f24967afac632bbe38feb2aa6badf2.js | 172.240.108.76 | 200 OK | 16 kB |
URL GET HTTP/1.1silldisappoint.com/f0/f2/49/f0f24967afac632bbe38feb2aa6badf2.js IP172.240.108.76:443
Requested byhttps://sicantik.pro/video/vk-live-periscope-16x16-picture/ CertificateIssuerLet's Encrypt Subjectsilldisappoint.com Fingerprint87:E4:38:87:27:09:D8:50:38:30:9F:B8:73:8A:28:42:00:CB:A4:74 ValidityTue, 05 Mar 2024 07:39:45 GMT - Mon, 03 Jun 2024 07:39:44 GMT
File typeJavaScript source, ASCII text, with very long lines (44031), with no line terminators Hash6fd5d18483ba151d8ec591a3d74e3cf5 01cb1bd50cc3fa46160ee2b94d408026451e2e67 33450223685a2ee2542e4774b2e04b5603f5649ccb3a6aa13583ce59c8374fda
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /f0/f2/49/f0f24967afac632bbe38feb2aa6badf2.js HTTP/1.1
Host: silldisappoint.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sicantik.pro/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Wed, 24 Apr 2024 03:40:38 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: ba4092ec516bace689aa9dd6be78473b
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
|
|
| proftrafficcounter.com/stats | 35.158.46.84 | 200 OK | 40 B |
URL GET HTTP/2proftrafficcounter.com/stats IP35.158.46.84:443
Requested byhttps://sicantik.pro/video/vk-live-periscope-16x16-picture/ CertificateIssuerAmazon Subjectproftrafficcounter.com FingerprintE3:9F:79:6F:80:C0:BF:F8:C4:EB:45:F3:E9:0F:A7:41:F6:0C:05:E6 ValidityTue, 21 Nov 2023 00:00:00 GMT - Thu, 19 Dec 2024 23:59:59 GMT
File typeASCII text, with no line terminators Hashd1bc2cfb0a5f2520f25910f54f6be8a4 f12bff787c72c5de3400215a180275c5af27187e 213e4d5f000da5b62ed6ced17e4c613668cb25ba5ea29fdae1156936b1903fb4
GET /stats HTTP/1.1
Host: proftrafficcounter.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://sicantik.pro
DNT: 1
Connection: keep-alive
Referer: https://sicantik.pro/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 24 Apr 2024 03:40:38 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: https://sicantik.pro
vary: Origin
access-control-allow-credentials: true
set-cookie: uid_id2=27854a5e-ac65-45c0-a7b3-7f810238fb92:3:1; expires=Sat, 22 Apr 2034 03:40:38 GMT; secure; SameSite=None
X-Firefox-Spdy: h2
|
|
| proftrafficcounter.com/stats | 35.158.46.84 | 200 OK | 40 B |
URL GET HTTP/2proftrafficcounter.com/stats IP35.158.46.84:443
Requested byhttps://sicantik.pro/video/vk-live-periscope-16x16-picture/ CertificateIssuerAmazon Subjectproftrafficcounter.com FingerprintE3:9F:79:6F:80:C0:BF:F8:C4:EB:45:F3:E9:0F:A7:41:F6:0C:05:E6 ValidityTue, 21 Nov 2023 00:00:00 GMT - Thu, 19 Dec 2024 23:59:59 GMT
File typeASCII text, with no line terminators Hash31af2590b16c936181e3098b570b524b 7cbb79c929bf1bd59094c254e58d73f491822bea 149e8b016f57a326b64d178a4ad1a2433a7715f94b48c72e2d74010e18b5c10f
GET /stats HTTP/1.1
Host: proftrafficcounter.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://sicantik.pro
DNT: 1
Connection: keep-alive
Referer: https://sicantik.pro/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 24 Apr 2024 03:40:38 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: https://sicantik.pro
vary: Origin
access-control-allow-credentials: true
set-cookie: uid_id2=bcb1779e-362f-437c-afb1-ba89261c0459:2:1; expires=Sat, 22 Apr 2034 03:40:38 GMT; secure; SameSite=None
X-Firefox-Spdy: h2
|
|
| sicantik.pro/wp-content/themes/retrotube/assets/js/skip-link-focus-fix.js | 104.21.71.64 | 200 OK | 736 B |
URL GET HTTP/3sicantik.pro/wp-content/themes/retrotube/assets/js/skip-link-focus-fix.js IP104.21.71.64:443
Requested byhttps://sicantik.pro/video/vk-live-periscope-16x16-picture/ CertificateIssuerGoogle Trust Services LLC Subjectsicantik.pro FingerprintC5:23:EF:A4:D1:09:03:7C:51:52:DC:24:7C:20:A9:1D:38:31:3E:32 ValidityFri, 15 Mar 2024 07:05:18 GMT - Thu, 13 Jun 2024 07:05:17 GMT
File typeJavaScript source, ASCII text Hashfa2ce987f8db7686a86e81d3407acb43 2c0e064be7f6d1d273749ddaa289d09a0f7470c1 405a5e4943b97243440d632a958bb6e79f1d1929666745000a22ebaa5fa2d819
GET /wp-content/themes/retrotube/assets/js/skip-link-focus-fix.js HTTP/1.1
Host: sicantik.pro
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sicantik.pro/video/vk-live-periscope-16x16-picture/
Cookie: bnState_1998535={"impressions":1,"delayStarted":0}; _lscache_vary=13c9df61d6ee8b9b08b77960336b8f8e
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 24 Apr 2024 03:40:32 GMT
content-type: application/javascript
cache-control: max-age=43200
cf-bgj: minify
cf-polished: origSize=683
etag: W/"6623a6c6-2ab"
expires: Wed, 24 Apr 2024 01:01:14 GMT
last-modified: Sat, 20 Apr 2024 11:28:06 GMT
cf-cache-status: HIT
age: 23014
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Qk8JiD%2BgFwqgD8UOII3zUzOXlXSISvfwWQOgKxJtxYnGikXfoIGk2ffTSYNuRiWcivBlavAsdcde4hYXLCXlJ5CTmvyj%2BvvgVQzEVvsAc3YYfRo6uFWqMj72UJ5WfIE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8793128ecee20b61-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| acknowledgecalculated.com/pixel/purst?dl=0&th=0&sc=0&rs=6642&rd=6642&fd=905&bv=24.4.3467&tmpl=70 | 172.240.108.76 | 200 OK | 0 B |
URL GET HTTP/1.1acknowledgecalculated.com/pixel/purst?dl=0&th=0&sc=0&rs=6642&rd=6642&fd=905&bv=24.4.3467&tmpl=70 IP172.240.108.76:443
Requested byhttps://sicantik.pro/video/vk-live-periscope-16x16-picture/ CertificateIssuerLet's Encrypt Subjectacknowledgecalculated.com Fingerprint20:65:3B:35:64:3E:0C:63:EF:0A:BC:38:43:BE:15:6A:66:00:8B:61 ValidityTue, 23 Apr 2024 10:59:22 GMT - Mon, 22 Jul 2024 10:59:21 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pixel/purst?dl=0&th=0&sc=0&rs=6642&rd=6642&fd=905&bv=24.4.3467&tmpl=70 HTTP/1.1
Host: acknowledgecalculated.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sicantik.pro/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Wed, 24 Apr 2024 03:40:38 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
|
|
| capaciousdrewreligion.com/advertisers.js | 192.243.61.225 | 200 OK | 0 B |
URL GET HTTP/1.1capaciousdrewreligion.com/advertisers.js IP192.243.61.225:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://sicantik.pro/video/vk-live-periscope-16x16-picture/ CertificateIssuerLet's Encrypt Subjectcapaciousdrewreligion.com Fingerprint53:B6:ED:C6:B5:B6:60:3E:6D:02:5A:92:2E:C3:12:74:64:A1:23:DC ValidityWed, 06 Mar 2024 11:57:32 GMT - Tue, 04 Jun 2024 11:57:31 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /advertisers.js HTTP/1.1
Host: capaciousdrewreligion.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sicantik.pro/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Wed, 24 Apr 2024 03:40:38 GMT
Content-Type: application/javascript
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 2a63e81cfeb0aa15aa1d11b59dd30ea0
Strict-Transport-Security: max-age=0; includeSubdomains
|
|
| creative.mnaspm.com/widgets/v4/Universal?action=sbSignupWithModel&campaignId=c6913f01500457c0bdb8597e6d4286a54c12f8dc120ca06a0ab250733289acaa&campaignType=smartpop&creativeId=6c0b1b4a99ba447f4bead9b76a7621269ec060b2297874834d7b37047f348300&iterationId=868050&masterSmartpopId=1605&memberId=hHqq9q1WmUAkzquHgxB45UWeS8FHTuFir1J5vRaRDeBfRVndLEmQX-FlQlDmfRWAdgWnzuEcbS8bL10IRCgzcjMpoHdh5bvAnOl5pHCEC4i0sT0g_gUIDRUi&mlView=1&p1=4350989&quality=240p&ruleId=3&smartpopId=1062&sortBy=recommended&sourceId=594409&tag=girls&usePreroll=0&userId=d100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca&variationId=33204&webp=1 | 104.18.40.50 | 200 OK | 811 B |
URL GET HTTP/3creative.mnaspm.com/widgets/v4/Universal?action=sbSignupWithModel&campaignId=c6913f01500457c0bdb8597e6d4286a54c12f8dc120ca06a0ab250733289acaa&campaignType=smartpop&creativeId=6c0b1b4a99ba447f4bead9b76a7621269ec060b2297874834d7b37047f348300&iterationId=868050&masterSmartpopId=1605&memberId=hHqq9q1WmUAkzquHgxB45UWeS8FHTuFir1J5vRaRDeBfRVndLEmQX-FlQlDmfRWAdgWnzuEcbS8bL10IRCgzcjMpoHdh5bvAnOl5pHCEC4i0sT0g_gUIDRUi&mlView=1&p1=4350989&quality=240p&ruleId=3&smartpopId=1062&sortBy=recommended&sourceId=594409&tag=girls&usePreroll=0&userId=d100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca&variationId=33204&webp=1 IP104.18.40.50:443
Requested byhttps://tsyndicate.com/iframes2/0246aee575494bc89de6d47f4c0ca63d.html?keywords=sicantik.pro%20Video%20viral%20Streaming%20terbarukan%20Barat%20Indo%20Jepang%20Korea%2CVk%20live%20periscope%2016x16%20picture%2CVk%20live%20periscope%2016x16%20picture&adb=0&clientjs=1&w=1280&h=1024&tz=0 CertificateIssuerGoogle Trust Services LLC Subjectmnaspm.com Fingerprint41:FC:20:C5:2D:89:14:17:87:EB:2D:BA:2E:DE:61:87:1E:53:19:CE ValiditySun, 14 Apr 2024 17:19:29 GMT - Sat, 13 Jul 2024 17:19:28 GMT
File typeHTML document, ASCII text Hash724b95a74ba01a187b1bb7616607a009 0e01cc46f5d2bd5e1a69a1dbaaa771ce7c25eb21 ea70d06d23a8fdfb333e3c28dd008ce8b0543b5d6cedcec9babc4a8daa9b3ef3
GET /widgets/v4/Universal?action=sbSignupWithModel&campaignId=c6913f01500457c0bdb8597e6d4286a54c12f8dc120ca06a0ab250733289acaa&campaignType=smartpop&creativeId=6c0b1b4a99ba447f4bead9b76a7621269ec060b2297874834d7b37047f348300&iterationId=868050&masterSmartpopId=1605&memberId=hHqq9q1WmUAkzquHgxB45UWeS8FHTuFir1J5vRaRDeBfRVndLEmQX-FlQlDmfRWAdgWnzuEcbS8bL10IRCgzcjMpoHdh5bvAnOl5pHCEC4i0sT0g_gUIDRUi&mlView=1&p1=4350989&quality=240p&ruleId=3&smartpopId=1062&sortBy=recommended&sourceId=594409&tag=girls&usePreroll=0&userId=d100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca&variationId=33204&webp=1 HTTP/1.1
Host: creative.mnaspm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://tsyndicate.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 24 Apr 2024 03:40:35 GMT
content-type: text/html
last-modified: Tue, 23 Apr 2024 08:30:42 GMT
expires: Wed, 24 Apr 2024 03:40:26 GMT
cache-control: max-age=10
strict-transport-security: max-age=15768000
pragma: public
report-to: { "endpoints":[{ "url": "https://go.stripchat.com/report" }], "group": "default", "max_age": 1048576 }
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64
cf-cache-status: HIT
age: 10
vary: Accept-Encoding
server: cloudflare
cf-ray: 879312a188e25699-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| divetroubledloud.com/sbar.json?key=f0f24967afac632bbe38feb2aa6badf2&uuid=bcb1779e-362f-437c-afb1-ba89261c0459%3A2%3A1 | 172.240.127.234 | 200 OK | 8.2 kB |
URL GET HTTP/1.1divetroubledloud.com/sbar.json?key=f0f24967afac632bbe38feb2aa6badf2&uuid=bcb1779e-362f-437c-afb1-ba89261c0459%3A2%3A1 IP172.240.127.234:443
Requested byhttps://sicantik.pro/video/vk-live-periscope-16x16-picture/ CertificateIssuerLet's Encrypt Subjectdivetroubledloud.com FingerprintE2:97:B0:3F:E4:09:4D:50:49:F3:B5:05:BA:3D:B5:4C:5E:98:11:6D ValidityTue, 23 Apr 2024 10:57:50 GMT - Mon, 22 Jul 2024 10:57:49 GMT
Hash1a59546e45330cdb8271aafc166538ff 57155f16f58222bc934be8617cbcf0551c7d0efe 98e47418c49d3a4332790cac8000fdd54b2bfda11673243ba3160b6dc8bc7312
GET /sbar.json?key=f0f24967afac632bbe38feb2aa6badf2&uuid=bcb1779e-362f-437c-afb1-ba89261c0459%3A2%3A1 HTTP/1.1
Host: divetroubledloud.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://sicantik.pro
DNT: 1
Connection: keep-alive
Referer: https://sicantik.pro/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Wed, 24 Apr 2024 03:40:39 GMT
Content-Type: text/plain; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://sicantik.pro
Access-Control-Allow-Origin: https://sicantik.pro
Access-Control-Allow-Credentials: true
Set-Cookie: u_pl=21390183; expires=Thu, 25 Apr 2024 03:40:39 GMT; secure; SameSite=None
uid_id2=bcb1779e-362f-437c-afb1-ba89261c0459:2:1; expires=Wed, 01 May 2024 03:40:39 GMT; secure; SameSite=None
pdhtkv=true; expires=Thu, 25 Apr 2024 03:40:39 GMT; secure; SameSite=None
uncs=1; expires=Thu, 25 Apr 2024 03:40:39 GMT; secure; SameSite=None
pdhtkv29=true; expires=Thu, 25 Apr 2024 03:40:39 GMT; secure; SameSite=None
uncs29=1; expires=Thu, 25 Apr 2024 03:40:39 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: f179f8634f3d6c9379cb39cdadfd155e
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
|
|
| divetroubledloud.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSz4scRRSunuxNEA25hcAcPERwZ7t7ZrtnzCEY48rimg1JRG9Sv3pSTnVXU9U9PdmLwYDkOPgX9H6zyaIumlwFg8wGPCwIGU97cC%2F5DxRylhkHR9%2Bh3nv1fQVffe99vV%2BekRAlPb3%2BsdlTWtONzZbfvPxZEFxp7qisHDVH3ejzqHOlaYfv9qKW%2F3bzQ8kHZiP0A98P%2FKC5paxMzGhjDkLlR72g1fNbnbAVbHYwsv%2FvXenBUQ9ieEbOQ4nZ2nPvAhSfIkufXJduUJj8nQ%2FSUtPCWAzF4SfZIDNVhnRVJtZDkh0u2TDuxdYzmOzRQi7M8F8iUzPi%2FfoMLDtcigQbHix0Mg2ZgYnXUA2nkHoKRafg5gGUeEEALnBjF1n6%2BIaxFb33D0rn6IysvfoLqpqRtT8uIEt%2FuKbVqHnb6LJQJnMYJTXUaArVnyIvj1HsNaCqY%2FDiKyjxG9l4tYMsPdh12kCJ07cYZ0Ec9%2BR6OwqT9U475us0YcE6o91eGAXc72z2FgYpNYVKptByDOoaKJ2HUnkoEw9l7iEVp00eBEHsC079bo%2Fztogli4Qf0DgJaOBHXZR8%2FocxinwMrsfg9j5yex8DNYYtf4G7W8MJD64gGIoalSSoHEFFCSpFUBUE1bB%2BJLQLXf1YaFeyYJnDZW7XE1P09%2BkjU%2FRlRkDtGFbU%2B%2FkZeXNuoLfF%2BxjI02biJ2GnF8U0oTxqh4zJdjeRLKQ0YlQkIZyqoVwD1HnYUzOy8dIgVzNy%2FugSGD2G08fg6g3Q8hJoVYPerbGX%2FehUarLCDFyrMlYLCFMjL9ZQ3PP29Rm5uJji9u4TSH5y9WV7EeC2Rm5rfKGeE%2FT1w8ktU5GDW6Zy5OluXqhU7dH5hG8XtJDnvvtI3quMFdvX3fjb9%2FgcmJdHd6QrdmgmVNZ35PtrSghpt4zlkvy87T6V7Gbp7l4rbVbmOzff39pOcyudUyabgs6X9U8Lrmbk9Yt3Fst7%2BaddKDuFLWuk5QlZBpSZguf34fKVfmcIrF5xWO6hKuuJDdnqUisCLVc9ZTXcf3q2qieWzl9TVe%2B7h%2BjbBmjxAFlaY2hrDHUNqsdw5blJkduTq78vZTDdmDBtGwdMW%2F3Nwub58RROnTbjdtunUW8ziGMqY9YJu0kUCErDThRGEW2jcLPk8pfx3wAAAP%2F%2FAQAA%2F%2F8bM083lgQAAA%3D%3D | 172.240.127.234 | 200 OK | 7 B |
URL GET HTTP/1.1divetroubledloud.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSz4scRRSunuxNEA25hcAcPERwZ7t7ZrtnzCEY48rimg1JRG9Sv3pSTnVXU9U9PdmLwYDkOPgX9H6zyaIumlwFg8wGPCwIGU97cC%2F5DxRylhkHR9%2Bh3nv1fQVffe99vV%2BekRAlPb3%2BsdlTWtONzZbfvPxZEFxp7qisHDVH3ejzqHOlaYfv9qKW%2F3bzQ8kHZiP0A98P%2FKC5paxMzGhjDkLlR72g1fNbnbAVbHYwsv%2FvXenBUQ9ieEbOQ4nZ2nPvAhSfIkufXJduUJj8nQ%2FSUtPCWAzF4SfZIDNVhnRVJtZDkh0u2TDuxdYzmOzRQi7M8F8iUzPi%2FfoMLDtcigQbHix0Mg2ZgYnXUA2nkHoKRafg5gGUeEEALnBjF1n6%2BIaxFb33D0rn6IysvfoLqpqRtT8uIEt%2FuKbVqHnb6LJQJnMYJTXUaArVnyIvj1HsNaCqY%2FDiKyjxG9l4tYMsPdh12kCJ07cYZ0Ec9%2BR6OwqT9U475us0YcE6o91eGAXc72z2FgYpNYVKptByDOoaKJ2HUnkoEw9l7iEVp00eBEHsC079bo%2Fztogli4Qf0DgJaOBHXZR8%2FocxinwMrsfg9j5yex8DNYYtf4G7W8MJD64gGIoalSSoHEFFCSpFUBUE1bB%2BJLQLXf1YaFeyYJnDZW7XE1P09%2BkjU%2FRlRkDtGFbU%2B%2FkZeXNuoLfF%2BxjI02biJ2GnF8U0oTxqh4zJdjeRLKQ0YlQkIZyqoVwD1HnYUzOy8dIgVzNy%2FugSGD2G08fg6g3Q8hJoVYPerbGX%2FehUarLCDFyrMlYLCFMjL9ZQ3PP29Rm5uJji9u4TSH5y9WV7EeC2Rm5rfKGeE%2FT1w8ktU5GDW6Zy5OluXqhU7dH5hG8XtJDnvvtI3quMFdvX3fjb9%2FgcmJdHd6QrdmgmVNZ35PtrSghpt4zlkvy87T6V7Gbp7l4rbVbmOzff39pOcyudUyabgs6X9U8Lrmbk9Yt3Fst7%2BaddKDuFLWuk5QlZBpSZguf34fKVfmcIrF5xWO6hKuuJDdnqUisCLVc9ZTXcf3q2qieWzl9TVe%2B7h%2BjbBmjxAFlaY2hrDHUNqsdw5blJkduTq78vZTDdmDBtGwdMW%2F3Nwub58RROnTbjdtunUW8ziGMqY9YJu0kUCErDThRGEW2jcLPk8pfx3wAAAP%2F%2FAQAA%2F%2F8bM083lgQAAA%3D%3D IP172.240.127.234:443
Requested byhttps://sicantik.pro/video/vk-live-periscope-16x16-picture/ CertificateIssuerLet's Encrypt Subjectdivetroubledloud.com FingerprintE2:97:B0:3F:E4:09:4D:50:49:F3:B5:05:BA:3D:B5:4C:5E:98:11:6D ValidityTue, 23 Apr 2024 10:57:50 GMT - Mon, 22 Jul 2024 10:57:49 GMT
File typeASCII text, with no line terminators Hash132d6af1b46048b45cf86cdee7991d31 eb7007d03d59b65bc6da7e098c4d38fc6dfb6285 ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c
GET /ren.gif?sid=H4sIAAAAAAAC%2F1RSz4scRRSunuxNEA25hcAcPERwZ7t7ZrtnzCEY48rimg1JRG9Sv3pSTnVXU9U9PdmLwYDkOPgX9H6zyaIumlwFg8wGPCwIGU97cC%2F5DxRylhkHR9%2Bh3nv1fQVffe99vV%2BekRAlPb3%2BsdlTWtONzZbfvPxZEFxp7qisHDVH3ejzqHOlaYfv9qKW%2F3bzQ8kHZiP0A98P%2FKC5paxMzGhjDkLlR72g1fNbnbAVbHYwsv%2FvXenBUQ9ieEbOQ4nZ2nPvAhSfIkufXJduUJj8nQ%2FSUtPCWAzF4SfZIDNVhnRVJtZDkh0u2TDuxdYzmOzRQi7M8F8iUzPi%2FfoMLDtcigQbHix0Mg2ZgYnXUA2nkHoKRafg5gGUeEEALnBjF1n6%2BIaxFb33D0rn6IysvfoLqpqRtT8uIEt%2FuKbVqHnb6LJQJnMYJTXUaArVnyIvj1HsNaCqY%2FDiKyjxG9l4tYMsPdh12kCJ07cYZ0Ec9%2BR6OwqT9U475us0YcE6o91eGAXc72z2FgYpNYVKptByDOoaKJ2HUnkoEw9l7iEVp00eBEHsC079bo%2Fztogli4Qf0DgJaOBHXZR8%2FocxinwMrsfg9j5yex8DNYYtf4G7W8MJD64gGIoalSSoHEFFCSpFUBUE1bB%2BJLQLXf1YaFeyYJnDZW7XE1P09%2BkjU%2FRlRkDtGFbU%2B%2FkZeXNuoLfF%2BxjI02biJ2GnF8U0oTxqh4zJdjeRLKQ0YlQkIZyqoVwD1HnYUzOy8dIgVzNy%2FugSGD2G08fg6g3Q8hJoVYPerbGX%2FehUarLCDFyrMlYLCFMjL9ZQ3PP29Rm5uJji9u4TSH5y9WV7EeC2Rm5rfKGeE%2FT1w8ktU5GDW6Zy5OluXqhU7dH5hG8XtJDnvvtI3quMFdvX3fjb9%2FgcmJdHd6QrdmgmVNZ35PtrSghpt4zlkvy87T6V7Gbp7l4rbVbmOzff39pOcyudUyabgs6X9U8Lrmbk9Yt3Fst7%2BaddKDuFLWuk5QlZBpSZguf34fKVfmcIrF5xWO6hKuuJDdnqUisCLVc9ZTXcf3q2qieWzl9TVe%2B7h%2BjbBmjxAFlaY2hrDHUNqsdw5blJkduTq78vZTDdmDBtGwdMW%2F3Nwub58RROnTbjdtunUW8ziGMqY9YJu0kUCErDThRGEW2jcLPk8pfx3wAAAP%2F%2FAQAA%2F%2F8bM083lgQAAA%3D%3D HTTP/1.1
Host: divetroubledloud.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sicantik.pro/
Cookie: u_pl=21390183; uid_id2=bcb1779e-362f-437c-afb1-ba89261c0459:2:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Wed, 24 Apr 2024 03:40:39 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 1fb350ca0e233ec6931a4113bc88bd48
Strict-Transport-Security: max-age=0; includeSubdomains
|
|
| sicantik.pro/wp-content/themes/retrotube/assets/js/jquery.touchSwipe.min.js | 104.21.71.64 | 200 OK | 12 kB |
URL GET HTTP/3sicantik.pro/wp-content/themes/retrotube/assets/js/jquery.touchSwipe.min.js IP104.21.71.64:443
Requested byhttps://sicantik.pro/video/vk-live-periscope-16x16-picture/ CertificateIssuerGoogle Trust Services LLC Subjectsicantik.pro FingerprintC5:23:EF:A4:D1:09:03:7C:51:52:DC:24:7C:20:A9:1D:38:31:3E:32 ValidityFri, 15 Mar 2024 07:05:18 GMT - Thu, 13 Jun 2024 07:05:17 GMT
File typeJavaScript source, ASCII text, with very long lines (20018) Hash4cd5ea35543390c5fc4e9def651ab721 d360aa74dff157fcefda69336ecf420f04940f98 9167cb37ed21405ef9556646b83789a2099c15398f5cea867470df1e81752e17
GET /wp-content/themes/retrotube/assets/js/jquery.touchSwipe.min.js HTTP/1.1
Host: sicantik.pro
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sicantik.pro/video/vk-live-periscope-16x16-picture/
Cookie: bnState_1998535={"impressions":1,"delayStarted":0}; _lscache_vary=13c9df61d6ee8b9b08b77960336b8f8e
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 24 Apr 2024 03:40:32 GMT
content-type: application/javascript
last-modified: Sat, 20 Apr 2024 11:28:06 GMT
vary: Accept-Encoding
etag: W/"6623a6c6-4fce"
expires: Wed, 24 Apr 2024 01:01:14 GMT
cache-control: max-age=43200
cf-cache-status: HIT
age: 23013
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=SeeFlaNnKWSacSoOyUd7KuNxIU7J01e0JqkbgjbRx9JcB0ejbZQA0ahAzXVYPs5VOISJc1lYdG5K%2BrCT4FoigE1emXJUJaLBT3qoVmDGNRXorLzwnAPMrfHxiwhpXLs%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8793128ecedf0b61-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| divetroubledloud.com/pixel/sbls?bv=24.6.6370&tmpl=482&u=https%3A%2F%2Fcdn.barscreative1.com%2Fsb%2Fau%2F2f%2F33%2F17%2F2f3317da28d2a6ed09610d2d267aa136%2F1648542458.html&l=2977&fd=81 | 172.240.127.234 | 200 OK | 0 B |
URL GET HTTP/1.1divetroubledloud.com/pixel/sbls?bv=24.6.6370&tmpl=482&u=https%3A%2F%2Fcdn.barscreative1.com%2Fsb%2Fau%2F2f%2F33%2F17%2F2f3317da28d2a6ed09610d2d267aa136%2F1648542458.html&l=2977&fd=81 IP172.240.127.234:443
Requested byhttps://sicantik.pro/video/vk-live-periscope-16x16-picture/ CertificateIssuerLet's Encrypt Subjectdivetroubledloud.com FingerprintE2:97:B0:3F:E4:09:4D:50:49:F3:B5:05:BA:3D:B5:4C:5E:98:11:6D ValidityTue, 23 Apr 2024 10:57:50 GMT - Mon, 22 Jul 2024 10:57:49 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pixel/sbls?bv=24.6.6370&tmpl=482&u=https%3A%2F%2Fcdn.barscreative1.com%2Fsb%2Fau%2F2f%2F33%2F17%2F2f3317da28d2a6ed09610d2d267aa136%2F1648542458.html&l=2977&fd=81 HTTP/1.1
Host: divetroubledloud.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sicantik.pro/
Cookie: u_pl=21390183; uid_id2=bcb1779e-362f-437c-afb1-ba89261c0459:2:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Wed, 24 Apr 2024 03:40:39 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
|
|
| creative.mnaspm.com/widgets/v4/Universal?action=sbSignupWithModel&campaignId=c6913f01500457c0bdb8597e6d4286a54c12f8dc120ca06a0ab250733289acaa&campaignType=smartpop&creativeId=6c0b1b4a99ba447f4bead9b76a7621269ec060b2297874834d7b37047f348300&iterationId=868050&masterSmartpopId=1605&memberId=k8X2gqV4afNiVfLr1JMe3Rwg7hFN9UclHN3ckU-4bOP9jW_EC1lBm4BCd23SdLsvMbXoxK0Bz7CNgGtfFFWfA7_UBu3Fb6o7JVN1sF43B4UdQAQ1_gUIDRUi&mlView=1&p1=4350989&quality=240p&ruleId=3&smartpopId=1062&sortBy=recommended&sourceId=594409&tag=girls&usePreroll=0&userId=d100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca&variationId=33204&webp=1 | 104.18.40.50 | | 6.3 kB |
URL creative.mnaspm.com/widgets/v4/Universal?action=sbSignupWithModel&campaignId=c6913f01500457c0bdb8597e6d4286a54c12f8dc120ca06a0ab250733289acaa&campaignType=smartpop&creativeId=6c0b1b4a99ba447f4bead9b76a7621269ec060b2297874834d7b37047f348300&iterationId=868050&masterSmartpopId=1605&memberId=k8X2gqV4afNiVfLr1JMe3Rwg7hFN9UclHN3ckU-4bOP9jW_EC1lBm4BCd23SdLsvMbXoxK0Bz7CNgGtfFFWfA7_UBu3Fb6o7JVN1sF43B4UdQAQ1_gUIDRUi&mlView=1&p1=4350989&quality=240p&ruleId=3&smartpopId=1062&sortBy=recommended&sourceId=594409&tag=girls&usePreroll=0&userId=d100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca&variationId=33204&webp=1 IP104.18.40.50:0
CertificateIssuerGoogle Trust Services LLC Subjectmnaspm.com Fingerprint41:FC:20:C5:2D:89:14:17:87:EB:2D:BA:2E:DE:61:87:1E:53:19:CE ValiditySun, 14 Apr 2024 17:19:29 GMT - Sat, 13 Jul 2024 17:19:28 GMT
File typeHTML document, ASCII text Hash724b95a74ba01a187b1bb7616607a009 0e01cc46f5d2bd5e1a69a1dbaaa771ce7c25eb21 ea70d06d23a8fdfb333e3c28dd008ce8b0543b5d6cedcec9babc4a8daa9b3ef3
GET /widgets/v4/Universal?action=sbSignupWithModel&campaignId=c6913f01500457c0bdb8597e6d4286a54c12f8dc120ca06a0ab250733289acaa&campaignType=smartpop&creativeId=6c0b1b4a99ba447f4bead9b76a7621269ec060b2297874834d7b37047f348300&iterationId=868050&masterSmartpopId=1605&memberId=k8X2gqV4afNiVfLr1JMe3Rwg7hFN9UclHN3ckU-4bOP9jW_EC1lBm4BCd23SdLsvMbXoxK0Bz7CNgGtfFFWfA7_UBu3Fb6o7JVN1sF43B4UdQAQ1_gUIDRUi&mlView=1&p1=4350989&quality=240p&ruleId=3&smartpopId=1062&sortBy=recommended&sourceId=594409&tag=girls&usePreroll=0&userId=d100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca&variationId=33204&webp=1 HTTP/1.1
Host: creative.mnaspm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://tsyndicate.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 24 Apr 2024 03:40:31 GMT
content-type: text/html
last-modified: Tue, 23 Apr 2024 08:30:42 GMT
expires: Wed, 24 Apr 2024 03:40:26 GMT
cache-control: max-age=10
strict-transport-security: max-age=15768000
pragma: public
report-to: { "endpoints":[{ "url": "https://go.stripchat.com/report" }], "group": "default", "max_age": 1048576 }
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64
cf-cache-status: HIT
age: 6
vary: Accept-Encoding
server: cloudflare
cf-ray: 8793128b1867712d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| cdn.creative-bars1.com/sb/chat/mob/ssp/1/css/animate.css | 104.21.70.253 | 200 OK | 4.9 kB |
URL GET HTTP/2cdn.creative-bars1.com/sb/chat/mob/ssp/1/css/animate.css IP104.21.70.253:443
Requested byhttps://sicantik.pro/video/vk-live-periscope-16x16-picture/ CertificateIssuerGoogle Trust Services LLC Subjectcreative-bars1.com Fingerprint3D:29:39:2C:F1:E5:C6:EF:54:F5:70:B5:CF:A8:C2:75:4D:89:72:13 ValidityMon, 15 Apr 2024 15:02:18 GMT - Sun, 14 Jul 2024 15:02:17 GMT
Hashfc638645a938f69e69360c75335ffd1a 143132fb8361c3ad0acf88cb70bf0b07c0ecc2d4 7ef76aab275d0221c68602d18f81b4285b280756f0f71d535ed8b5b889bc2f90
GET /sb/chat/mob/ssp/1/css/animate.css HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://sicantik.pro
DNT: 1
Connection: keep-alive
Referer: https://sicantik.pro/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 24 Apr 2024 03:40:39 GMT
content-type: text/css
last-modified: Mon, 21 Feb 2022 08:25:04 GMT
etag: W/"62134c60-135d1"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 460728
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=GnFcSXGmazsYRmw8Gt0jexJ%2BHRmdYrEitA%2FKya1tytQtIb9yljh3FHEa0lQ7QCzJWf1iNI%2BAy%2BzJYh5htVq5CRzvzWtrRremmIVUcUXN%2BoaHVOeZwklE2H%2F%2BVo9rzyBQwx5fzere50zY"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879312ba3829b4fd-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| downstairsnegotiatebarren.com/sfp.js | 188.114.97.1 | 200 OK | 28 kB |
URL GET HTTP/2downstairsnegotiatebarren.com/sfp.js IP188.114.97.1:443
Requested byhttps://sicantik.pro/video/vk-live-periscope-16x16-picture/ CertificateIssuerLet's Encrypt Subjectdownstairsnegotiatebarren.com Fingerprint2C:6A:E1:8E:26:5B:1D:8B:86:CB:C1:72:4E:52:4B:8B:67:3A:D2:44 ValidityMon, 04 Mar 2024 21:53:07 GMT - Sun, 02 Jun 2024 21:53:06 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (65529), with no line terminators Hashf4a2f8f9f99541c6f105bbd0a025bd40 1f8e3eff12168fdd9e719adfc098d24a45b6916a b717cb04231a10d425fd55b73c85a5407119c6826a8bac94142fddfff6958716
GET /sfp.js HTTP/1.1
Host: downstairsnegotiatebarren.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sicantik.pro/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 24 Apr 2024 03:40:38 GMT
content-type: application/javascript; charset=utf-8
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
access-control-allow-origin: *
expires: Thu, 01 Jan 1970 00:00:01 GMT
cache-control: max-age=14400
x-request-id: 6de6d53f807b493f497c6611c6fcc893
strict-transport-security: max-age=0; includeSubdomains
cf-cache-status: EXPIRED
last-modified: Wed, 24 Apr 2024 03:40:37 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=OYUv19JIrxLHF8E3lb52TExy%2FlX7OEn6gabF4JKHcJg%2FFmkarYEmAaLjxJpvNK50S%2B4SzbaYGfa99wbw4iPI%2FN8oy2bb8rgWjZOciQpnEY0%2B3bJOCi0YwHWrWTn%2FkRBxXhAnB4mBLf3Krf2CgfIVrg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879312b2ed4a56ae-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| sicantik.pro/video/vk-live-periscope-16x16-picture/ | 104.21.71.64 | 200 OK | 70 kB |
URL User Request GET HTTP/2sicantik.pro/video/vk-live-periscope-16x16-picture/ IP104.21.71.64:443
CertificateIssuerGoogle Trust Services LLC Subjectsicantik.pro FingerprintC5:23:EF:A4:D1:09:03:7C:51:52:DC:24:7C:20:A9:1D:38:31:3E:32 ValidityFri, 15 Mar 2024 07:05:18 GMT - Thu, 13 Jun 2024 07:05:17 GMT
File typeHTML document, ASCII text, with very long lines (9779) Hashe19bd977fc2cca518a9d2dcc0fa7e8ae db727b93fdf6270b93cdd6470f0d71ee2fa2f34a 8fcaeb5f62386240989b489e5262dffb2962b5dc624b58acd4c3fefeb11ff765
GET /video/vk-live-periscope-16x16-picture/ HTTP/1.1
Host: sicantik.pro
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 24 Apr 2024 03:40:30 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
x-dns-prefetch-control: on
link: <https://sicantik.pro/wp-json/>; rel="https://api.w.org/"
x-litespeed-tag: be3_HTTP.200,be3_search,be3_URL.d3080eaa49009417df61f292dccf58f4,be3_guest,be3_,be3_MIN.09c1a2a44c6ec09341366480bec11a49.css,be3_MIN.8d5c0ab8511ee6b6c5e1c719c6d659e4.js
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=fJpfUEQ3L6OIJaNoihXbV8cH%2Fl3iy4ZFh1f1p1dwzCSMNJtXOuvAdFJPqSsFtFOSfSkN0Gqwf9qZvq%2B2QIn3uGVv7rnKwX77ZiTfSnAm2URSCrzZvx6udXA2S2wB7Vk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8793127879915699-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| sicantik.pro/wp-content/plugins/custom-search-base/css/csb-custom-style.css | 104.21.71.64 | 200 OK | 1.4 kB |
URL GET HTTP/3sicantik.pro/wp-content/plugins/custom-search-base/css/csb-custom-style.css IP104.21.71.64:443
Requested byhttps://sicantik.pro/video/vk-live-periscope-16x16-picture/ CertificateIssuerGoogle Trust Services LLC Subjectsicantik.pro FingerprintC5:23:EF:A4:D1:09:03:7C:51:52:DC:24:7C:20:A9:1D:38:31:3E:32 ValidityFri, 15 Mar 2024 07:05:18 GMT - Thu, 13 Jun 2024 07:05:17 GMT
File typeASCII text, with very long lines (938), with no line terminators Hash328035dcd3b5bac24c90dd7d5e713e7c 3ce4a29b523342cdd690e40e0fc02f42677c16fe 15ac2eccc34e365cac47822b6fb2f5b3d6dedf71d8116bfcef9782eb5eaef951
GET /wp-content/plugins/custom-search-base/css/csb-custom-style.css HTTP/1.1
Host: sicantik.pro
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sicantik.pro/video/vk-live-periscope-16x16-picture/
Cookie: bnState_1998535={"impressions":1,"delayStarted":0}; _lscache_vary=13c9df61d6ee8b9b08b77960336b8f8e
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 24 Apr 2024 03:40:32 GMT
content-type: text/css; charset=utf-8
cache-control: public, max-age=31536000
cf-bgj: minify
cf-polished: origSize=1332
expires: Sat, 22 Mar 2025 08:23:03 GMT
last-modified: Tue, 03 Oct 2023 17:22:04 GMT
vary: Accept-Encoding
cf-cache-status: HIT
age: 968237
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=N%2Ffo0h3fP7sDGc3En99gmF7xX39B0bma%2F4rcx%2FEKK7KoiyhA0tSCbwTbjCPlslczQObZMJyBCKZfQiQGaOHmKv%2BQmpFrK2qrTUcK3QQENJf1VFI48QgmJmi427pQskM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8793128eced50b61-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| divetroubledloud.com/pixel/sbls?bv=24.6.6370&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fchat%2Fmob%2Fssp%2F1%2Fjs%2Fscript.js&l=382&fd=328 | 172.240.127.234 | 200 OK | 0 B |
URL GET HTTP/1.1divetroubledloud.com/pixel/sbls?bv=24.6.6370&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fchat%2Fmob%2Fssp%2F1%2Fjs%2Fscript.js&l=382&fd=328 IP172.240.127.234:443
Requested byhttps://sicantik.pro/video/vk-live-periscope-16x16-picture/ CertificateIssuerLet's Encrypt Subjectdivetroubledloud.com FingerprintE2:97:B0:3F:E4:09:4D:50:49:F3:B5:05:BA:3D:B5:4C:5E:98:11:6D ValidityTue, 23 Apr 2024 10:57:50 GMT - Mon, 22 Jul 2024 10:57:49 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pixel/sbls?bv=24.6.6370&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fchat%2Fmob%2Fssp%2F1%2Fjs%2Fscript.js&l=382&fd=328 HTTP/1.1
Host: divetroubledloud.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sicantik.pro/
Cookie: u_pl=21390183; uid_id2=bcb1779e-362f-437c-afb1-ba89261c0459:2:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Wed, 24 Apr 2024 03:40:39 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
|
|
| fvcwqkkqmuv.com/aas/r45d/vki/1989014/7ad28ef5.js | 212.117.190.201 | 200 OK | 40 kB |
URL GET HTTP/2fvcwqkkqmuv.com/aas/r45d/vki/1989014/7ad28ef5.js IP212.117.190.201:443
Requested byhttps://sicantik.pro/video/vk-live-periscope-16x16-picture/ CertificateIssuerBuypass AS-983163327 Subject Fingerprint2F:0E:38:8C:F6:F7:9C:F2:22:33:5B:B6:E5:2E:EE:F0:6C:51:CC:F2 ValidityTue, 09 Jan 2024 13:22:33 GMT - Sat, 06 Jul 2024 21:59:00 GMT
File typegzip compressed data, max speed, from Unix Hash75e10e59afff9e4cfbcbaad861f5cce4 a1aa70fb8c91bfce42830588af2a8ec4c23bb4fe 470e37f544e4651d875beaf7960ebed986414409eae351dd3eb7355892cf507c
GET /aas/r45d/vki/1989014/7ad28ef5.js HTTP/1.1
Host: fvcwqkkqmuv.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sicantik.pro/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 24 Apr 2024 03:40:40 GMT
content-type: application/javascript
last-modified: Tue, 23 Apr 2024 14:48:08 GMT
vary: Accept-Encoding
etag: W/"6627ca28-199a7"
x-js-ab2: current
timing-allow-origin: *
accept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| divetroubledloud.com/impr.gif?sid=H4sIAAAAAAAC%2F1RSz4scRRSunuxNEA25hcAcPERwZ7t7fptDcF1XFtdsSCJ6k%2FrVs%2BVUdzVV3dOze3ExIDkO%2FgW93%2BxmURdNroJBZgMeFoSMpz24l%2FwHCjnLjIOj71Dvvfq%2Bgq%2B%2B974%2BzC9JiJxebHxs9pXWdK1Z86s3PwuCW9VtleTD6rDT%2BrzVuFW1g3e7rZr%2FdvVDyftmLfQD3w%2F8oLqprIzMcG0GQqWn3aDW9WuNsBY0Gxja%2F%2Fcu9%2BCoBzG4JFehxHTluXcNik%2BQxE82pOtnJn3ngzjXNDMWA3HySdJPTJEgXpaR9RAlJws2jHux%2BQwmOZ7LhRn8S2RqSrxfn4ElJwuRYIOjuU6mIRMw8RqKwQRST6DoBNw8hBIvCMAF7uwgiR%2FfMbage%2F%2BgdIZOycqrv6CKKVn54xqS%2BId1rYbV%2B0bnmTKJwzAqoYYTqN4EaX6GbL8CVZyBZ19Bid%2FI2qttJPHRjtMGSly8xTgL2u2uXK23wmi1UW%2FzVRqxYJXRTjdsBdxvNLtzg5SaQEUTaDkCdRXkzkOuPOSRhzz1EIuLKg%2BCoO0LTv1Ol%2FO6aEvWEn5A21FAA7%2FVQc5nfxghS0fgegRuD5DaA%2FTVCDb%2FBW63hBMeXEYwECUKSVA4goISFIqgyAiKQXkstAtd%2BVhol7NgkcNFrpdjk%2FUO6bHJejIhoHYEK8rD9JK8OTPQ2%2BQ99OVFNfKjsNFttWlEeaseMibrnUiykNIWoyIK4VQJ5SqgzsO%2BmpK1lwapmpKrpzfA6BmcPgNXb4DmN0CLEnS3xH7yo1OxSTLTd7XCWC0gTIk0W0G25x3qS3J9PsWtnSeQ%2FPz2y%2Fo8wG2J1Jb4Qj0n6OlH43umIEf3TOHI0500U7Hap7MJ389oJq9895HcK4wVWxtu9O17fAbMytMH0mXbNBEq6Tny%2FboSQtpNY7kkP2%2B5TyW7m7vd9dwmebp99%2F3NrTi10jllkgnobFn%2FtOBqSl6%2F%2FmC%2BvDd%2F2oGyE9i8RJyfk0VAmQl4egCXLvU7Q2D1ksNSD0Vejm3IlpdaEWi57Ckr4f7Ts2U9tnT2mqry0D1Cz1ZAs4dI4hIDW2KgS1A9gsuvjLPUnt%2F%2BfSGD6cqYaVs5Ytrqb%2BY2z46ncOqiWvdFm8lItplsNBuR5II1m8znEWd10elwZG4a3fyy%2FTcAAAD%2F%2FwEAAP%2F%2Fm%2Bea35YEAAA%3D | 172.240.127.234 | 200 OK | 7 B |
URL GET HTTP/1.1divetroubledloud.com/impr.gif?sid=H4sIAAAAAAAC%2F1RSz4scRRSunuxNEA25hcAcPERwZ7t7fptDcF1XFtdsSCJ6k%2FrVs%2BVUdzVV3dOze3ExIDkO%2FgW93%2BxmURdNroJBZgMeFoSMpz24l%2FwHCjnLjIOj71Dvvfq%2Bgq%2B%2B974%2BzC9JiJxebHxs9pXWdK1Z86s3PwuCW9VtleTD6rDT%2BrzVuFW1g3e7rZr%2FdvVDyftmLfQD3w%2F8oLqprIzMcG0GQqWn3aDW9WuNsBY0Gxja%2F%2Fcu9%2BCoBzG4JFehxHTluXcNik%2BQxE82pOtnJn3ngzjXNDMWA3HySdJPTJEgXpaR9RAlJws2jHux%2BQwmOZ7LhRn8S2RqSrxfn4ElJwuRYIOjuU6mIRMw8RqKwQRST6DoBNw8hBIvCMAF7uwgiR%2FfMbage%2F%2BgdIZOycqrv6CKKVn54xqS%2BId1rYbV%2B0bnmTKJwzAqoYYTqN4EaX6GbL8CVZyBZ19Bid%2FI2qttJPHRjtMGSly8xTgL2u2uXK23wmi1UW%2FzVRqxYJXRTjdsBdxvNLtzg5SaQEUTaDkCdRXkzkOuPOSRhzz1EIuLKg%2BCoO0LTv1Ol%2FO6aEvWEn5A21FAA7%2FVQc5nfxghS0fgegRuD5DaA%2FTVCDb%2FBW63hBMeXEYwECUKSVA4goISFIqgyAiKQXkstAtd%2BVhol7NgkcNFrpdjk%2FUO6bHJejIhoHYEK8rD9JK8OTPQ2%2BQ99OVFNfKjsNFttWlEeaseMibrnUiykNIWoyIK4VQJ5SqgzsO%2BmpK1lwapmpKrpzfA6BmcPgNXb4DmN0CLEnS3xH7yo1OxSTLTd7XCWC0gTIk0W0G25x3qS3J9PsWtnSeQ%2FPz2y%2Fo8wG2J1Jb4Qj0n6OlH43umIEf3TOHI0500U7Hap7MJ389oJq9895HcK4wVWxtu9O17fAbMytMH0mXbNBEq6Tny%2FboSQtpNY7kkP2%2B5TyW7m7vd9dwmebp99%2F3NrTi10jllkgnobFn%2FtOBqSl6%2F%2FmC%2BvDd%2F2oGyE9i8RJyfk0VAmQl4egCXLvU7Q2D1ksNSD0Vejm3IlpdaEWi57Ckr4f7Ts2U9tnT2mqry0D1Cz1ZAs4dI4hIDW2KgS1A9gsuvjLPUnt%2F%2BfSGD6cqYaVs5Ytrqb%2BY2z46ncOqiWvdFm8lItplsNBuR5II1m8znEWd10elwZG4a3fyy%2FTcAAAD%2F%2FwEAAP%2F%2Fm%2Bea35YEAAA%3D IP172.240.127.234:443
Requested byhttps://sicantik.pro/video/vk-live-periscope-16x16-picture/ CertificateIssuerLet's Encrypt Subjectdivetroubledloud.com FingerprintE2:97:B0:3F:E4:09:4D:50:49:F3:B5:05:BA:3D:B5:4C:5E:98:11:6D ValidityTue, 23 Apr 2024 10:57:50 GMT - Mon, 22 Jul 2024 10:57:49 GMT
File typeASCII text, with no line terminators Hash132d6af1b46048b45cf86cdee7991d31 eb7007d03d59b65bc6da7e098c4d38fc6dfb6285 ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c
GET /impr.gif?sid=H4sIAAAAAAAC%2F1RSz4scRRSunuxNEA25hcAcPERwZ7t7fptDcF1XFtdsSCJ6k%2FrVs%2BVUdzVV3dOze3ExIDkO%2FgW93%2BxmURdNroJBZgMeFoSMpz24l%2FwHCjnLjIOj71Dvvfq%2Bgq%2B%2B974%2BzC9JiJxebHxs9pXWdK1Z86s3PwuCW9VtleTD6rDT%2BrzVuFW1g3e7rZr%2FdvVDyftmLfQD3w%2F8oLqprIzMcG0GQqWn3aDW9WuNsBY0Gxja%2F%2Fcu9%2BCoBzG4JFehxHTluXcNik%2BQxE82pOtnJn3ngzjXNDMWA3HySdJPTJEgXpaR9RAlJws2jHux%2BQwmOZ7LhRn8S2RqSrxfn4ElJwuRYIOjuU6mIRMw8RqKwQRST6DoBNw8hBIvCMAF7uwgiR%2FfMbage%2F%2BgdIZOycqrv6CKKVn54xqS%2BId1rYbV%2B0bnmTKJwzAqoYYTqN4EaX6GbL8CVZyBZ19Bid%2FI2qttJPHRjtMGSly8xTgL2u2uXK23wmi1UW%2FzVRqxYJXRTjdsBdxvNLtzg5SaQEUTaDkCdRXkzkOuPOSRhzz1EIuLKg%2BCoO0LTv1Ol%2FO6aEvWEn5A21FAA7%2FVQc5nfxghS0fgegRuD5DaA%2FTVCDb%2FBW63hBMeXEYwECUKSVA4goISFIqgyAiKQXkstAtd%2BVhol7NgkcNFrpdjk%2FUO6bHJejIhoHYEK8rD9JK8OTPQ2%2BQ99OVFNfKjsNFttWlEeaseMibrnUiykNIWoyIK4VQJ5SqgzsO%2BmpK1lwapmpKrpzfA6BmcPgNXb4DmN0CLEnS3xH7yo1OxSTLTd7XCWC0gTIk0W0G25x3qS3J9PsWtnSeQ%2FPz2y%2Fo8wG2J1Jb4Qj0n6OlH43umIEf3TOHI0500U7Hap7MJ389oJq9895HcK4wVWxtu9O17fAbMytMH0mXbNBEq6Tny%2FboSQtpNY7kkP2%2B5TyW7m7vd9dwmebp99%2F3NrTi10jllkgnobFn%2FtOBqSl6%2F%2FmC%2BvDd%2F2oGyE9i8RJyfk0VAmQl4egCXLvU7Q2D1ksNSD0Vejm3IlpdaEWi57Ckr4f7Ts2U9tnT2mqry0D1Cz1ZAs4dI4hIDW2KgS1A9gsuvjLPUnt%2F%2BfSGD6cqYaVs5Ytrqb%2BY2z46ncOqiWvdFm8lItplsNBuR5II1m8znEWd10elwZG4a3fyy%2FTcAAAD%2F%2FwEAAP%2F%2Fm%2Bea35YEAAA%3D HTTP/1.1
Host: divetroubledloud.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sicantik.pro/
Cookie: u_pl=21390183; uid_id2=bcb1779e-362f-437c-afb1-ba89261c0459:2:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Wed, 24 Apr 2024 03:40:40 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 183b0e156a80b5d982c43806e6fceb40
Strict-Transport-Security: max-age=0; includeSubdomains
|
|
| go.mnaspm.com/app/domain-checker/get-check | 104.18.40.50 | 200 OK | 628 B |
URL POST HTTP/3go.mnaspm.com/app/domain-checker/get-check IP104.18.40.50:443
Requested byhttps://creative.mnaspm.com/widgets/v4/Universal?action=sbSignupWithModel&campaignId=c6913f01500457c0bdb8597e6d4286a54c12f8dc120ca06a0ab250733289acaa&campaignType=smartpop&creativeId=6c0b1b4a99ba447f4bead9b76a7621269ec060b2297874834d7b37047f348300&iterationId=868050&masterSmartpopId=1605&memberId=1iKm4C12dUFz0NsKwm42eoM25rdtnA73unIs2Bar773UB24TtkrjXwYPwhlevI3sx82-XQWbEXNv9WZUTSSexgIncQnJZSU4z0uLQsa71yynA5rQ_gUIDRUi&mlView=1&p1=4350989&quality=240p&ruleId=3&smartpopId=1062&sortBy=recommended&sourceId=594409&tag=girls&usePreroll=0&userId=d100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca&variationId=33204&webp=1 CertificateIssuerGoogle Trust Services LLC Subjectmnaspm.com Fingerprint41:FC:20:C5:2D:89:14:17:87:EB:2D:BA:2E:DE:61:87:1E:53:19:CE ValiditySun, 14 Apr 2024 17:19:29 GMT - Sat, 13 Jul 2024 17:19:28 GMT
Hash2ec385db4a58c9f8c7e067b91fe3dfdd b1217b4e98b42f1c1d5c05abc462dda54fc846d8 9d51f634db74ea1628424091fc1a0d54d6b3f74ac5496a78641b6ce25440341e
POST /app/domain-checker/get-check HTTP/1.1
Host: go.mnaspm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://creative.mnaspm.com/
Origin: https://creative.mnaspm.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
Content-Length: 0
TE: trailers
HTTP/3 200 OK
date: Wed, 24 Apr 2024 03:40:32 GMT
content-type: application/json
access-control-allow-origin: https://creative.mnaspm.com
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64
cf-cache-status: DYNAMIC
set-cookie: __cflb=02DiuDFRFiBZBvMSLtqFVqYSkiRXkWFVf3thJ1q4pfn9a; SameSite=None; Secure; path=/; expires=Thu, 25-Apr-24 03:40:32 GMT; HttpOnly
server: cloudflare
cf-ray: 8793128df9415699-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| cdn.creative-bars1.com/sb/chat/mob/ssp/1/js/jquery.min.js | 104.21.70.253 | 200 OK | 34 kB |
URL GET HTTP/3cdn.creative-bars1.com/sb/chat/mob/ssp/1/js/jquery.min.js IP104.21.70.253:443
Requested byhttps://sicantik.pro/video/vk-live-periscope-16x16-picture/ CertificateIssuerGoogle Trust Services LLC Subjectcreative-bars1.com Fingerprint3D:29:39:2C:F1:E5:C6:EF:54:F5:70:B5:CF:A8:C2:75:4D:89:72:13 ValidityMon, 15 Apr 2024 15:02:18 GMT - Sun, 14 Jul 2024 15:02:17 GMT
File typeJavaScript source, ASCII text, with very long lines (65451) Hash561acb3e541133bbdd2c0c19f8ee35a1 ffd1353cf3f77d25f801c84d8208613eb0d3d548 9fde6da568db31801e29243a903bf24f342256b41e3c01e7d018ff7c566ce7fc
GET /sb/chat/mob/ssp/1/js/jquery.min.js HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 24 Apr 2024 03:40:39 GMT
content-type: application/javascript
last-modified: Mon, 21 Feb 2022 08:25:09 GMT
etag: W/"62134c65-15d94"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 4740695
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=yzQhCgXZkeVWU34HpH8VcDqzSzBtJ6GtWedpYtmHqq3si2kBs%2BC7%2BY%2F539bKD%2BeCzdrRi271Nh40XhbdJ%2FjXIdAwxV%2FIT2DnBBRRoqnYLsx%2BIgyZi9DQCo92r2cpYVQ%2FB%2FsZ83h3pMKF"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879312bacf24b518-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 | 142.250.74.99 | 200 OK | 16 kB |
URL GET HTTP/2fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 IP142.250.74.99:443
Requested byhttps://sicantik.pro/video/vk-live-periscope-16x16-picture/ CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com FingerprintF5:5C:D9:68:C6:5F:A3:33:5A:73:C3:79:B6:83:FE:44:2E:A4:83:74 ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 15860, version 1.0 Hashe9f5aaf547f165386cd313b995dddd8e acdef5603c2387b0e5bffd744b679a24a8bc1968 f5aebdfea35d1e7656ef4acc5db1f243209755ae3300943ef8fc6280f363c860
GET /s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://sicantik.pro
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15860
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 23 Apr 2024 10:46:32 GMT
expires: Wed, 23 Apr 2025 10:46:32 GMT
cache-control: public, max-age=31536000
age: 60848
last-modified: Wed, 11 May 2022 19:24:42 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 | 142.250.74.99 | 200 OK | 16 kB |
URL GET HTTP/2fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 IP142.250.74.99:443
Requested byhttps://sicantik.pro/video/vk-live-periscope-16x16-picture/ CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com FingerprintF5:5C:D9:68:C6:5F:A3:33:5A:73:C3:79:B6:83:FE:44:2E:A4:83:74 ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 15744, version 1.0 Hash15d9f621c3bd1599f0169dcf0bd5e63e 7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52 f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://sicantik.pro
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 18 Apr 2024 02:37:01 GMT
expires: Fri, 18 Apr 2025 02:37:01 GMT
cache-control: public, max-age=31536000
age: 522219
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| go.mnaspm.com/thumbs/view | 104.18.40.50 | 200 OK | 6.1 kB |
URL POST HTTP/3go.mnaspm.com/thumbs/view IP104.18.40.50:443
Requested byhttps://creative.mnaspm.com/widgets/v4/Universal?action=sbSignupWithModel&campaignId=c6913f01500457c0bdb8597e6d4286a54c12f8dc120ca06a0ab250733289acaa&campaignType=smartpop&creativeId=6c0b1b4a99ba447f4bead9b76a7621269ec060b2297874834d7b37047f348300&iterationId=868050&masterSmartpopId=1605&memberId=hHqq9q1WmUAkzquHgxB45UWeS8FHTuFir1J5vRaRDeBfRVndLEmQX-FlQlDmfRWAdgWnzuEcbS8bL10IRCgzcjMpoHdh5bvAnOl5pHCEC4i0sT0g_gUIDRUi&mlView=1&p1=4350989&quality=240p&ruleId=3&smartpopId=1062&sortBy=recommended&sourceId=594409&tag=girls&usePreroll=0&userId=d100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca&variationId=33204&webp=1 CertificateIssuerGoogle Trust Services LLC Subjectmnaspm.com Fingerprint41:FC:20:C5:2D:89:14:17:87:EB:2D:BA:2E:DE:61:87:1E:53:19:CE ValiditySun, 14 Apr 2024 17:19:29 GMT - Sat, 13 Jul 2024 17:19:28 GMT
Hashdc8e5f06cfff76609849a46c374a2511 66786ed70fe272ba63fefbc3d2698ed0add09704 5c1f0bd6a621d7a4f998904d33e0916fcb3761d99f2608106dfeb206f6aa5315
POST /thumbs/view HTTP/1.1
Host: go.mnaspm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://creative.mnaspm.com/
Content-Type: text/plain;charset=UTF-8
Content-Length: 156
Origin: https://creative.mnaspm.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 24 Apr 2024 03:40:35 GMT
content-type: application/json
access-control-allow-origin: https://creative.mnaspm.com
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64
cf-cache-status: DYNAMIC
set-cookie: __cflb=0H28upDCGznfDm9XVE9CKHVnP1Wapb1wkcXtD8Qvgkt; SameSite=None; Secure; path=/; expires=Thu, 25-Apr-24 03:40:35 GMT; HttpOnly
server: cloudflare
cf-ray: 879312a49a275699-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| windyplentiful.com/3e/a4/bc/3ea4bc5b672179c60b727a1de2e91a83.js | 192.243.59.20 | 200 OK | 31 kB |
URL GET HTTP/1.1windyplentiful.com/3e/a4/bc/3ea4bc5b672179c60b727a1de2e91a83.js IP192.243.59.20:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://sicantik.pro/video/vk-live-periscope-16x16-picture/ CertificateIssuerLet's Encrypt Subjectwindyplentiful.com FingerprintE0:95:21:CE:21:F3:93:41:AA:8B:0E:C4:CF:50:2A:A3:32:F8:4E:32 ValiditySun, 17 Mar 2024 09:02:29 GMT - Sat, 15 Jun 2024 09:02:28 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Hash9d09c842d2e4dc15c93cc536cd42a7ad 882cf4513ad916e2364833f527a783465b1c55b7 6e286a8557487f0237f7c31e0a06d0cb555e69056a372bd1f363ec2316785097
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /3e/a4/bc/3ea4bc5b672179c60b727a1de2e91a83.js HTTP/1.1
Host: windyplentiful.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sicantik.pro/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Wed, 24 Apr 2024 03:40:44 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 175270580aa3f7fef90f5f0285060f35
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
|
|
| capaciousdrewreligion.com/advertisers.js | 192.243.61.225 | 200 OK | 0 B |
URL GET HTTP/1.1capaciousdrewreligion.com/advertisers.js IP192.243.61.225:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://sicantik.pro/video/vk-live-periscope-16x16-picture/ CertificateIssuerLet's Encrypt Subjectcapaciousdrewreligion.com Fingerprint53:B6:ED:C6:B5:B6:60:3E:6D:02:5A:92:2E:C3:12:74:64:A1:23:DC ValidityWed, 06 Mar 2024 11:57:32 GMT - Tue, 04 Jun 2024 11:57:31 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /advertisers.js HTTP/1.1
Host: capaciousdrewreligion.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sicantik.pro/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Wed, 24 Apr 2024 03:40:44 GMT
Content-Type: application/javascript
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 60b9f264d8b431460ca34f8a754d0c7e
Strict-Transport-Security: max-age=0; includeSubdomains
|
|
| phoneboothsabledomesticated.com/pixel/purst?dl=0&th=0&sc=0&rs=12767&rd=12767&fd=1010&bv=24.4.3467&tmpl=70 | 172.240.108.76 | 200 OK | 0 B |
URL GET HTTP/1.1phoneboothsabledomesticated.com/pixel/purst?dl=0&th=0&sc=0&rs=12767&rd=12767&fd=1010&bv=24.4.3467&tmpl=70 IP172.240.108.76:443
Requested byhttps://sicantik.pro/video/vk-live-periscope-16x16-picture/ CertificateIssuerLet's Encrypt Subjectphoneboothsabledomesticated.com Fingerprint81:A6:75:3C:1E:48:C4:29:1D:C9:0F:59:D3:DC:9A:2C:C7:07:B1:A3 ValidityTue, 23 Apr 2024 10:42:36 GMT - Mon, 22 Jul 2024 10:42:35 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pixel/purst?dl=0&th=0&sc=0&rs=12767&rd=12767&fd=1010&bv=24.4.3467&tmpl=70 HTTP/1.1
Host: phoneboothsabledomesticated.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sicantik.pro/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Wed, 24 Apr 2024 03:40:44 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
|
|
| bobabillydirect.org/v3/a/pop/js/228900 | 88.208.22.1 | 200 OK | 6.6 kB |
URL GET HTTP/2bobabillydirect.org/v3/a/pop/js/228900 IP88.208.22.1:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://sicantik.pro/video/vk-live-periscope-16x16-picture/ CertificateIssuerLet's Encrypt Subjectbobabillydirect.org FingerprintA7:D9:7A:CA:79:FE:C9:A6:BC:45:04:4F:46:5C:13:DD:61:40:C2:8D ValidityMon, 15 Apr 2024 11:27:14 GMT - Sun, 14 Jul 2024 11:27:13 GMT
File typeJavaScript source, ASCII text, with very long lines (16635), with no line terminators Hash3fff937e31640bc56a9aef5dabeed9eb a3e049ec7f1aa6bae5235721e36471183ab58535 20fae8facdd5feb9b99ce918774efcf6fb68456729adee757d7dfd9c91deffc9
GET /v3/a/pop/js/228900 HTTP/1.1
Host: bobabillydirect.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sicantik.pro/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 24 Apr 2024 03:40:46 GMT
content-type: application/javascript; charset=UTF-8
content-length: 6573
content-encoding: gzip
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-max-age: 86400
referrer-policy: unsafe-url
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Device-Memory
accept-ch-lifetime: 31536000
X-Firefox-Spdy: h2
|
|
| downstairsnegotiatebarren.com/sfp.js | 188.114.97.1 | 200 OK | 29 kB |
URL GET HTTP/2downstairsnegotiatebarren.com/sfp.js IP188.114.97.1:443
Requested byhttps://sicantik.pro/video/vk-live-periscope-16x16-picture/ CertificateIssuerLet's Encrypt Subjectdownstairsnegotiatebarren.com Fingerprint2C:6A:E1:8E:26:5B:1D:8B:86:CB:C1:72:4E:52:4B:8B:67:3A:D2:44 ValidityMon, 04 Mar 2024 21:53:07 GMT - Sun, 02 Jun 2024 21:53:06 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (65529), with no line terminators Hashf4a2f8f9f99541c6f105bbd0a025bd40 1f8e3eff12168fdd9e719adfc098d24a45b6916a b717cb04231a10d425fd55b73c85a5407119c6826a8bac94142fddfff6958716
GET /sfp.js HTTP/1.1
Host: downstairsnegotiatebarren.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sicantik.pro/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 24 Apr 2024 03:40:38 GMT
content-type: application/javascript; charset=utf-8
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
access-control-allow-origin: *
expires: Thu, 01 Jan 1970 00:00:01 GMT
cache-control: max-age=14400
x-request-id: 63943243c6454e9ddd16ab90f3453f22
strict-transport-security: max-age=0; includeSubdomains
cf-cache-status: EXPIRED
last-modified: Wed, 24 Apr 2024 03:40:37 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=lwhrRQDqhQrHxtbUmGKKTsSs2wpkWcJpHSKKduCXgLH4hwj5T4DSQsxF2MyLPryzwgt6mzPUSgvdG3VW%2FCedUlrBYQ7fiBqVHXgdWCzh6fx791izswZsA4OQePoaSNBnryEMi8%2BqTsfzYg2YWMJl2A%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879312b25d2156ae-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| vb.glowedhyalins.com/rkgFUWJ9OlANV/rORWG | 23.109.170.27 | 200 OK | 20 B |
URL GET HTTP/1.1vb.glowedhyalins.com/rkgFUWJ9OlANV/rORWG IP23.109.170.27:443
Requested byhttps://sicantik.pro/video/vk-live-periscope-16x16-picture/ CertificateIssuerLet's Encrypt Subjectvb.glowedhyalins.com FingerprintDF:73:FC:94:0C:EB:41:BA:42:98:C4:2A:45:27:76:5C:0B:2C:1E:8D ValidityThu, 28 Mar 2024 23:42:41 GMT - Wed, 26 Jun 2024 23:42:40 GMT
File typegzip compressed data, from Unix Hash7029066c27ac6f5ef18d660d5741979a 46c6643f07aa7f6bfe7118de926b86defc5087c4 59869db34853933b239f1e2219cf7d431da006aa919635478511fabbfc8849d2
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /rkgFUWJ9OlANV/rORWG HTTP/1.1
Host: vb.glowedhyalins.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sicantik.pro/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 24 Apr 2024 03:40:49 GMT
Content-Type: application/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=20
Accept-ch: sec-ch-ua-platform-version,sec-ch-ua-model,sec-ch-ua-full-version,sec-ch-ua-full-version-list
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://sicantik.pro
Access-Control-Allow-Headers: content-type, megageocheckolololo, x-forwarded-for, x-requested-with, cache-control, pragma, expires
Access-Control-Max-Age: 600
Access-Control-Allow-Methods: GET, POST, OPTIONS
Set-Cookie: GL_UI4=eJw9jUtug0AQRPljJ4akJQ7gIxgUjL3MJivfAQ0zDZ4Ypq1mjJ3bZxIp2dUrPVV5nhcUL%2BAvyRrCm6hhe1R9s5dYojyUVVW%2BHSrZ151o%2BlJVTVnvYK3n1opuRBvBap4E29YuEWwGNMhatpIUZvDqrL%2FmYuhuIog7FkZlEE%2FOGDNIO6b7jFyEEBkxIaQfmrGnhzPEJzEEx72L2rjo7yCguQjzJ4hP2twe%2BSbx8jzx4Pk6CtsTT61WDuOBhULw32ElhcWB%2BAtShfPF0hWARtX%2B%2B7%2Bf8fizBonCRUuHZM%2FI38wATrY%3D; expires=Thu, 25-Apr-2024 03:40:49 GMT; Max-Age=86400; path=/; secure; SameSite=None
GL_GI10=eJwVyM0KgkAUhuE5hxiIJPjIC%2FAKTMsWbrNl6MIrMIsYGObIzNjP3WeLd%2FG8SilOE7CZkNRlXhd5dcjLUwV6gtsOPDroVvx7%2BII8uDiCvcOmC1ayRmYXlz9i9TfIYHu25pP1YudoxAXw0roZbvaxv%2FRX0KQJHEUzONxTBXrp3Q9e7R3S; expires=Thu, 25-Apr-2024 03:40:49 GMT; Max-Age=86400; path=/; secure; SameSite=None
Content-Encoding: gzip
Vary: Accept-Encoding
Strict-Transport-Security: max-age=1
X-Content-Type-Options: nosniff
|
|
| amusing-senior.com/cGDm9.6nbQ2d5qlMSnWdQy9LN/Degt3EMwDRE-4TOdSq0Y0/OqDgcUw_M/TckTwk | 88.85.69.212 | 200 OK | 0 B |
URL GET HTTP/2amusing-senior.com/cGDm9.6nbQ2d5qlMSnWdQy9LN/Degt3EMwDRE-4TOdSq0Y0/OqDgcUw_M/TckTwk IP88.85.69.212:443
Requested byhttps://sicantik.pro/video/vk-live-periscope-16x16-picture/ CertificateIssuerLet's Encrypt Subjectamusing-senior.com Fingerprint86:9A:DD:61:63:4D:09:32:BC:5B:AF:39:06:EA:99:47:E0:F9:1C:C9 ValiditySun, 17 Mar 2024 02:21:37 GMT - Sat, 15 Jun 2024 02:21:36 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cGDm9.6nbQ2d5qlMSnWdQy9LN/Degt3EMwDRE-4TOdSq0Y0/OqDgcUw_M/TckTwk HTTP/1.1
Host: amusing-senior.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sicantik.pro/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 24 Apr 2024 03:40:52 GMT
content-type: application/javascript
content-length: 0
expires: Mon, 26 Jul 2011 05:00:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
accept-ch: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-WoW64
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-headers: Content-Type
x-content-type-options: nosniff
X-Firefox-Spdy: h2
|
|
| fvcwqkkqmuv.com/solid.gif?z=1989014&nojs=0&abvar=0&febuild=1.0.227&t=0&wcks=1&wgl=0&cnvs=1&os=0&tz=UTC&ss=1&ls=1&bb=0&cti=0&plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF&lang=en-US&pf=Linux%20x86_64&cd=24&ix=0&x=1280&y=1024&md=0&afid=8275098443710464&eclog=0&im=1 | 212.117.190.201 | 200 OK | 43 B |
URL POST HTTP/2fvcwqkkqmuv.com/solid.gif?z=1989014&nojs=0&abvar=0&febuild=1.0.227&t=0&wcks=1&wgl=0&cnvs=1&os=0&tz=UTC&ss=1&ls=1&bb=0&cti=0&plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF&lang=en-US&pf=Linux%20x86_64&cd=24&ix=0&x=1280&y=1024&md=0&afid=8275098443710464&eclog=0&im=1 IP212.117.190.201:443
Requested byhttps://sicantik.pro/video/vk-live-periscope-16x16-picture/ CertificateIssuerBuypass AS-983163327 Subject Fingerprint2F:0E:38:8C:F6:F7:9C:F2:22:33:5B:B6:E5:2E:EE:F0:6C:51:CC:F2 ValidityTue, 09 Jan 2024 13:22:33 GMT - Sat, 06 Jul 2024 21:59:00 GMT
File typeGIF image data, version 89a, 1 x 1 Hash28e463819a210071de3b45ebe7633613 6dccd571828ec0912629119cf7eabfea9f33ddbc 44251f61629e2bfeead421241a917f43ad047af351659f01cd8fd937f0417f84
POST /solid.gif?z=1989014&nojs=0&abvar=0&febuild=1.0.227&t=0&wcks=1&wgl=0&cnvs=1&os=0&tz=UTC&ss=1&ls=1&bb=0&cti=0&plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF&lang=en-US&pf=Linux%20x86_64&cd=24&ix=0&x=1280&y=1024&md=0&afid=8275098443710464&eclog=0&im=1 HTTP/1.1
Host: fvcwqkkqmuv.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://sicantik.pro
DNT: 1
Connection: keep-alive
Referer: https://sicantik.pro/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 200 OK
server: nginx
date: Wed, 24 Apr 2024 03:40:40 GMT
content-type: image/gif
content-length: 43
x-route-id: stats.tag.loaded
set-cookie: CHCK=1; Path=/; Expires=Wed, 28 May 2025 03:40:40 GMT; Secure; SameSite=None
UID=2404232240276c37066849499a883a5240da; Path=/; Expires=Wed, 28 May 2025 03:40:40 GMT; Secure; SameSite=None
timing-allow-origin: *
accept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
X-Firefox-Spdy: h2
|
|
| 31803.fallclk.com/jSVHCY04OgjlZtczvVjHJi9Ik9kRvoHRdq9VOcLNSZwVNZyS9dhXp5mMB9M2edSSl9sFIKV2jvq5euuzHOKnYRCKmKKlubqKdAEfTrtOJ2GVPyQ4PAmEQbMCQVD8Jw?kws=live%2Cperiscope%2Cpicture&abl=0&fsb=0&pageUri=https%3A%2F%2Fsicantik.pro%2Fvideo%2Fvk-live-periscope-16x16-picture%2F&referer=&bdd=%5B%22Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0%22%2C%22false%22%2C%22Linux%20x86_64%22%2C%22%22%2C%22%22%2C%22%22%2C%22%22%2C%22false%22%2C%22true%22%2C%221280%22%2C%221024%22%2C%221280%22%2C%221024%22%2C%221280%22%2C%221024%22%2C%221280%22%2C%221024%22%2C%221280%22%2C%221024%22%2C%22false%22%2C%221%22%2C%2248%22%2C%220%22%2C%22aaaaacccefiflmmprrsstlllecstaaahtscellllpss%22%2C%22Wed%20Apr%2024%202024%2003%3A40%3A46%20GMT%2B0000%20(GMT)%22%2C%220%22%2C%22en-US%22%2C%22en-US%2Cen%22%2C%22false%22%2C%22false%22%2C%22781877177%22%2C%222697903995%22%2C%223%22%2C%22false%22%2C%22%5B%5D%22%5D&prsl=1 | 88.208.22.3 | 200 OK | 1.7 kB |
URL GET HTTP/231803.fallclk.com/jSVHCY04OgjlZtczvVjHJi9Ik9kRvoHRdq9VOcLNSZwVNZyS9dhXp5mMB9M2edSSl9sFIKV2jvq5euuzHOKnYRCKmKKlubqKdAEfTrtOJ2GVPyQ4PAmEQbMCQVD8Jw?kws=live%2Cperiscope%2Cpicture&abl=0&fsb=0&pageUri=https%3A%2F%2Fsicantik.pro%2Fvideo%2Fvk-live-periscope-16x16-picture%2F&referer=&bdd=%5B%22Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0%22%2C%22false%22%2C%22Linux%20x86_64%22%2C%22%22%2C%22%22%2C%22%22%2C%22%22%2C%22false%22%2C%22true%22%2C%221280%22%2C%221024%22%2C%221280%22%2C%221024%22%2C%221280%22%2C%221024%22%2C%221280%22%2C%221024%22%2C%221280%22%2C%221024%22%2C%22false%22%2C%221%22%2C%2248%22%2C%220%22%2C%22aaaaacccefiflmmprrsstlllecstaaahtscellllpss%22%2C%22Wed%20Apr%2024%202024%2003%3A40%3A46%20GMT%2B0000%20(GMT)%22%2C%220%22%2C%22en-US%22%2C%22en-US%2Cen%22%2C%22false%22%2C%22false%22%2C%22781877177%22%2C%222697903995%22%2C%223%22%2C%22false%22%2C%22%5B%5D%22%5D&prsl=1 IP88.208.22.3:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://sicantik.pro/video/vk-live-periscope-16x16-picture/ CertificateIssuerLet's Encrypt Subject*.fallclk.com Fingerprint56:26:EB:CF:D7:29:FF:2C:B2:29:4A:FF:47:30:F5:7B:6C:B5:1E:2F ValidityFri, 22 Mar 2024 20:25:27 GMT - Thu, 20 Jun 2024 20:25:26 GMT
File typeASCII text, with very long lines (1655), with no line terminators Hash9b4f86b46d15fef56d222fed0d62cffd d4f8840f78046398461c7a593d1b63ec2fa6dbc1 722873a80c676988bb17571f16323211f9ef93bea7720d6c89106588a312a71b
GET /jSVHCY04OgjlZtczvVjHJi9Ik9kRvoHRdq9VOcLNSZwVNZyS9dhXp5mMB9M2edSSl9sFIKV2jvq5euuzHOKnYRCKmKKlubqKdAEfTrtOJ2GVPyQ4PAmEQbMCQVD8Jw?kws=live%2Cperiscope%2Cpicture&abl=0&fsb=0&pageUri=https%3A%2F%2Fsicantik.pro%2Fvideo%2Fvk-live-periscope-16x16-picture%2F&referer=&bdd=%5B%22Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0%22%2C%22false%22%2C%22Linux%20x86_64%22%2C%22%22%2C%22%22%2C%22%22%2C%22%22%2C%22false%22%2C%22true%22%2C%221280%22%2C%221024%22%2C%221280%22%2C%221024%22%2C%221280%22%2C%221024%22%2C%221280%22%2C%221024%22%2C%221280%22%2C%221024%22%2C%22false%22%2C%221%22%2C%2248%22%2C%220%22%2C%22aaaaacccefiflmmprrsstlllecstaaahtscellllpss%22%2C%22Wed%20Apr%2024%202024%2003%3A40%3A46%20GMT%2B0000%20(GMT)%22%2C%220%22%2C%22en-US%22%2C%22en-US%2Cen%22%2C%22false%22%2C%22false%22%2C%22781877177%22%2C%222697903995%22%2C%223%22%2C%22false%22%2C%22%5B%5D%22%5D&prsl=1 HTTP/1.1
Host: 31803.fallclk.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://sicantik.pro
DNT: 1
Connection: keep-alive
Referer: https://sicantik.pro/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 24 Apr 2024 03:40:49 GMT
content-type: text/plain; charset=UTF-8
vary: Accept-Encoding
access-control-allow-origin: https://sicantik.pro
access-control-allow-credentials: true
access-control-max-age: 86400
referrer-policy: unsafe-url
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Device-Memory
accept-ch-lifetime: 31536000
p3p: CP="NOI DEVa TAIa OUR BUS UNI STA"
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
pragma: no-cache
last-modified: Wed, 24 Apr 2024 03:40:49 UTC
expires: Wed, 24 Apr 2024 03:40:49 UTC
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| sicantik.pro/wp-content/plugins/advanced-ads-pro/assets/js/advanced-ads-pro.min.js | 104.21.71.64 | 200 OK | 7.9 kB |
URL GET HTTP/3sicantik.pro/wp-content/plugins/advanced-ads-pro/assets/js/advanced-ads-pro.min.js IP104.21.71.64:443
Requested byhttps://sicantik.pro/video/vk-live-periscope-16x16-picture/ CertificateIssuerGoogle Trust Services LLC Subjectsicantik.pro FingerprintC5:23:EF:A4:D1:09:03:7C:51:52:DC:24:7C:20:A9:1D:38:31:3E:32 ValidityFri, 15 Mar 2024 07:05:18 GMT - Thu, 13 Jun 2024 07:05:17 GMT
File typeJavaScript source, ASCII text, with very long lines (8114), with no line terminators Hash4c031411708f7f2d6b4aaf03b399a818 5d351ce8daf3a612127999796bed2724f5333fc3 cf0558158f4fee8031e6942d00b6a6cc10fa782cd6ee961764032400fae31508
GET /wp-content/plugins/advanced-ads-pro/assets/js/advanced-ads-pro.min.js HTTP/1.1
Host: sicantik.pro
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sicantik.pro/video/vk-live-periscope-16x16-picture/
Cookie: bnState_1998535={"impressions":1,"delayStarted":0}; _lscache_vary=13c9df61d6ee8b9b08b77960336b8f8e
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 24 Apr 2024 03:40:32 GMT
content-type: application/javascript
last-modified: Sat, 20 Apr 2024 11:28:04 GMT
vary: Accept-Encoding
etag: W/"6623a6c4-1ee6"
expires: Wed, 24 Apr 2024 01:01:14 GMT
cache-control: max-age=43200
cf-cache-status: HIT
age: 22018
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=IrqZx338fZLOOpLTzTsoxPaNs4Tyft7XVNkAQ9Bi1PHl3%2FdsVC65bZ8JXl2U8bxDy%2FYcohkamZPd3SF4b0Awre%2F265aObdXMY2K3%2BqkyXWnU55ddfUhzUOKxQhvZ1FY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8793128ecedc0b61-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| sicantik.pro/wp-content/themes/retrotube/assets/js/main.js | 104.21.71.64 | 200 OK | 29 kB |
URL GET HTTP/3sicantik.pro/wp-content/themes/retrotube/assets/js/main.js IP104.21.71.64:443
Requested byhttps://sicantik.pro/video/vk-live-periscope-16x16-picture/ CertificateIssuerGoogle Trust Services LLC Subjectsicantik.pro FingerprintC5:23:EF:A4:D1:09:03:7C:51:52:DC:24:7C:20:A9:1D:38:31:3E:32 ValidityFri, 15 Mar 2024 07:05:18 GMT - Thu, 13 Jun 2024 07:05:17 GMT
File typeJavaScript source, ASCII text, with very long lines (2119) Hash92195bb6603dcd31bd4fa83f12e66a60 a2af363db3d6d4ebb64bf898c86cacba45a8c301 23883d49c163ad2a6977dd3a94a9050f7453e35d17e9e1ab2310fcbc26c62206
GET /wp-content/themes/retrotube/assets/js/main.js HTTP/1.1
Host: sicantik.pro
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sicantik.pro/video/vk-live-periscope-16x16-picture/
Cookie: bnState_1998535={"impressions":1,"delayStarted":0}; _lscache_vary=13c9df61d6ee8b9b08b77960336b8f8e
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 24 Apr 2024 03:40:32 GMT
content-type: application/javascript
cache-control: max-age=43200
cf-bgj: minify
cf-polished: origSize=39275
etag: W/"6623a6c6-996b"
expires: Wed, 24 Apr 2024 01:01:14 GMT
last-modified: Sat, 20 Apr 2024 11:28:06 GMT
vary: Accept-Encoding
cf-cache-status: HIT
age: 23014
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=q9rOHjTYcaqdJKkGbNYzezWA3EuQ3qlaPwXzG7PRlm3mJzVtJ%2BZyC3qi7Bgy9%2FCLD3840ClD6%2B40DgvKAPUEWh%2BkSaNmbsoUc8TJgm0Bl3snov8AXUVDgLGHmbTi41o%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8793128ecee10b61-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| cdn.cloudimagesb.com/si/52/3a/8c/523a8ce104cfc3373cd17ab1c0e5131b/1701651901.png | 45.133.44.9 | 200 OK | 14 kB |
URL GET HTTP/2cdn.cloudimagesb.com/si/52/3a/8c/523a8ce104cfc3373cd17ab1c0e5131b/1701651901.png IP45.133.44.9:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://sicantik.pro/video/vk-live-periscope-16x16-picture/ CertificateIssuerLet's Encrypt Subjectcdn.cloudimagesb.com FingerprintC6:F3:21:F0:21:7D:7E:96:0F:E8:46:7A:5E:C5:3F:D1:52:B0:67:B0 ValidityFri, 22 Mar 2024 03:01:35 GMT - Thu, 20 Jun 2024 03:01:34 GMT
File typePNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced Hash962ac416cce3fad636d4904386c8d3d4 811166fceb971353dc6a9ea3a153367f20b47592 ec6c8e1c030499a846897265d0c1f66dedc6ece17c1ea6006b700faf37e73555
GET /si/52/3a/8c/523a8ce104cfc3373cd17ab1c0e5131b/1701651901.png HTTP/1.1
Host: cdn.cloudimagesb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 24 Apr 2024 03:40:39 GMT
content-type: image/png
content-length: 14496
server: nginx/1.21.6
last-modified: Mon, 04 Dec 2023 01:05:10 GMT
etag: "656d25c6-38a0"
expires: Fri, 26 Apr 2024 03:40:39 GMT
cache-control: max-age=172800
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| sicantik.pro/wp-includes/css/dist/block-library/style.min.css | 104.21.71.64 | 200 OK | 113 kB |
URL GET HTTP/3sicantik.pro/wp-includes/css/dist/block-library/style.min.css IP104.21.71.64:443
Requested byhttps://sicantik.pro/video/vk-live-periscope-16x16-picture/ CertificateIssuerGoogle Trust Services LLC Subjectsicantik.pro FingerprintC5:23:EF:A4:D1:09:03:7C:51:52:DC:24:7C:20:A9:1D:38:31:3E:32 ValidityFri, 15 Mar 2024 07:05:18 GMT - Thu, 13 Jun 2024 07:05:17 GMT
Size113 kB (113381 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /wp-includes/css/dist/block-library/style.min.css HTTP/1.1
Host: sicantik.pro
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sicantik.pro/video/vk-live-periscope-16x16-picture/
Cookie: bnState_1998535={"impressions":1,"delayStarted":0}; _lscache_vary=13c9df61d6ee8b9b08b77960336b8f8e
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 24 Apr 2024 03:40:32 GMT
content-type: text/css
last-modified: Sat, 20 Apr 2024 11:29:20 GMT
vary: Accept-Encoding
etag: W/"6623a710-1bae5"
expires: Wed, 24 Apr 2024 00:48:02 GMT
cache-control: max-age=43200
cf-cache-status: HIT
age: 23014
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=lAKTYGkMA4Mx7rqLKNNZ2DHWEtf6Q9f6lBxPrCwiNSeg6UELlt%2FzA71WWobI1n8gO9KIJRSNZy8sjTeVbehIJVcmo6T107j3m9JFaFdDTWwQnRhTlERrZgGLFJXx8Vk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8793128eced60b61-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| divetroubledloud.com/pixel/sbls?bv=24.6.6370&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fchat%2Fmob%2Fssp%2F1%2Fcss%2Fstyle.css&l=4617&fd=332 | 172.240.127.234 | 200 OK | 0 B |
URL GET HTTP/1.1divetroubledloud.com/pixel/sbls?bv=24.6.6370&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fchat%2Fmob%2Fssp%2F1%2Fcss%2Fstyle.css&l=4617&fd=332 IP172.240.127.234:443
Requested byhttps://sicantik.pro/video/vk-live-periscope-16x16-picture/ CertificateIssuerLet's Encrypt Subjectdivetroubledloud.com FingerprintE2:97:B0:3F:E4:09:4D:50:49:F3:B5:05:BA:3D:B5:4C:5E:98:11:6D ValidityTue, 23 Apr 2024 10:57:50 GMT - Mon, 22 Jul 2024 10:57:49 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pixel/sbls?bv=24.6.6370&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fchat%2Fmob%2Fssp%2F1%2Fcss%2Fstyle.css&l=4617&fd=332 HTTP/1.1
Host: divetroubledloud.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sicantik.pro/
Cookie: u_pl=21390183; uid_id2=bcb1779e-362f-437c-afb1-ba89261c0459:2:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Wed, 24 Apr 2024 03:40:39 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
|
|
| go.mnaspm.com/event/ml | 104.18.40.50 | 200 OK | 47 B |
IP104.18.40.50:443
Requested byhttps://creative.mnaspm.com/widgets/v4/Universal?action=sbSignupWithModel&campaignId=c6913f01500457c0bdb8597e6d4286a54c12f8dc120ca06a0ab250733289acaa&campaignType=smartpop&creativeId=6c0b1b4a99ba447f4bead9b76a7621269ec060b2297874834d7b37047f348300&iterationId=868050&masterSmartpopId=1605&memberId=hHqq9q1WmUAkzquHgxB45UWeS8FHTuFir1J5vRaRDeBfRVndLEmQX-FlQlDmfRWAdgWnzuEcbS8bL10IRCgzcjMpoHdh5bvAnOl5pHCEC4i0sT0g_gUIDRUi&mlView=1&p1=4350989&quality=240p&ruleId=3&smartpopId=1062&sortBy=recommended&sourceId=594409&tag=girls&usePreroll=0&userId=d100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca&variationId=33204&webp=1 CertificateIssuerGoogle Trust Services LLC Subjectmnaspm.com Fingerprint41:FC:20:C5:2D:89:14:17:87:EB:2D:BA:2E:DE:61:87:1E:53:19:CE ValiditySun, 14 Apr 2024 17:19:29 GMT - Sat, 13 Jul 2024 17:19:28 GMT
File typeASCII text, with no line terminators Hashc8d680ccc95fd0850faf9357f65bb15b ede7b4a88ff020697e8ceb0637ee56ff519c5733 34ab7f4442375b011493fd1f67ae33c0b665b87e40e2ae324f9f2c1191d6d4fd
POST /event/ml HTTP/1.1
Host: go.mnaspm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://creative.mnaspm.com/
Content-Type: text/plain;charset=UTF-8
Content-Length: 291
Origin: https://creative.mnaspm.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 24 Apr 2024 03:40:36 GMT
content-type: application/json
access-control-allow-origin: https://creative.mnaspm.com
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64
cf-cache-status: DYNAMIC
set-cookie: __cflb=0H28upDCGznfDm9XVD3SofQ5NjJpXSe9vBjw5NLsZBa; SameSite=None; Secure; path=/; expires=Thu, 25-Apr-24 03:40:36 GMT; HttpOnly
server: cloudflare
cf-ray: 879312a58a905699-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| creative.mnaspm.com/widgets/v4/Universal/main.a18e8b8a8680353599e1.css | 104.18.40.50 | 200 OK | 13 kB |
URL GET HTTP/3creative.mnaspm.com/widgets/v4/Universal/main.a18e8b8a8680353599e1.css IP104.18.40.50:443
Requested byhttps://creative.mnaspm.com/widgets/v4/Universal?action=sbSignupWithModel&campaignId=c6913f01500457c0bdb8597e6d4286a54c12f8dc120ca06a0ab250733289acaa&campaignType=smartpop&creativeId=6c0b1b4a99ba447f4bead9b76a7621269ec060b2297874834d7b37047f348300&iterationId=868050&masterSmartpopId=1605&memberId=hHqq9q1WmUAkzquHgxB45UWeS8FHTuFir1J5vRaRDeBfRVndLEmQX-FlQlDmfRWAdgWnzuEcbS8bL10IRCgzcjMpoHdh5bvAnOl5pHCEC4i0sT0g_gUIDRUi&mlView=1&p1=4350989&quality=240p&ruleId=3&smartpopId=1062&sortBy=recommended&sourceId=594409&tag=girls&usePreroll=0&userId=d100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca&variationId=33204&webp=1 CertificateIssuerGoogle Trust Services LLC Subjectmnaspm.com Fingerprint41:FC:20:C5:2D:89:14:17:87:EB:2D:BA:2E:DE:61:87:1E:53:19:CE ValiditySun, 14 Apr 2024 17:19:29 GMT - Sat, 13 Jul 2024 17:19:28 GMT
File typeASCII text, with very long lines (13312), with no line terminators Hashaa0f936bb3d7beb37fa4fc125e1d410d 0a93bcc3f9c1024eae6ffad33d9375dca852e0c9 9ebf719550e36d6eab7dbe337bca3cdfbea70f4cf988819ea45e63ea48b90334
GET /widgets/v4/Universal/main.a18e8b8a8680353599e1.css HTTP/1.1
Host: creative.mnaspm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://creative.mnaspm.com/widgets/v4/Universal?action=sbSignupWithModel&campaignId=c6913f01500457c0bdb8597e6d4286a54c12f8dc120ca06a0ab250733289acaa&campaignType=smartpop&creativeId=6c0b1b4a99ba447f4bead9b76a7621269ec060b2297874834d7b37047f348300&iterationId=868050&masterSmartpopId=1605&memberId=hHqq9q1WmUAkzquHgxB45UWeS8FHTuFir1J5vRaRDeBfRVndLEmQX-FlQlDmfRWAdgWnzuEcbS8bL10IRCgzcjMpoHdh5bvAnOl5pHCEC4i0sT0g_gUIDRUi&mlView=1&p1=4350989&quality=240p&ruleId=3&smartpopId=1062&sortBy=recommended&sourceId=594409&tag=girls&usePreroll=0&userId=d100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca&variationId=33204&webp=1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 24 Apr 2024 03:40:35 GMT
content-type: text/css
last-modified: Tue, 23 Apr 2024 08:32:01 GMT
etag: W/"66277201-3400"
expires: Wed, 24 Apr 2024 03:40:37 GMT
cache-control: max-age=10
pragma: public
cf-cache-status: HIT
age: 7
vary: Accept-Encoding
server: cloudflare
cf-ray: 879312a1e9125699-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| fvcwqkkqmuv.com/get/1989014?zoneid=1989014&jp=_clnas1e1efd7w9e8f7vcv&nojs=0&abvar=0&febuild=1.0.227&t=0&wcks=1&wgl=0&cnvs=1&os=0&tz=UTC&ss=1&ls=1&bb=0&cti=0&plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF&lang=en-US&pf=Linux%20x86_64&cd=24&ix=0&x=1280&y=1024&md=0&afid=8275098443710464&eclog=0&im=1&uf=0 | 212.117.190.201 | 200 OK | 3.1 kB |
URL GET HTTP/2fvcwqkkqmuv.com/get/1989014?zoneid=1989014&jp=_clnas1e1efd7w9e8f7vcv&nojs=0&abvar=0&febuild=1.0.227&t=0&wcks=1&wgl=0&cnvs=1&os=0&tz=UTC&ss=1&ls=1&bb=0&cti=0&plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF&lang=en-US&pf=Linux%20x86_64&cd=24&ix=0&x=1280&y=1024&md=0&afid=8275098443710464&eclog=0&im=1&uf=0 IP212.117.190.201:443
Requested byhttps://sicantik.pro/video/vk-live-periscope-16x16-picture/ CertificateIssuerBuypass AS-983163327 Subject Fingerprint2F:0E:38:8C:F6:F7:9C:F2:22:33:5B:B6:E5:2E:EE:F0:6C:51:CC:F2 ValidityTue, 09 Jan 2024 13:22:33 GMT - Sat, 06 Jul 2024 21:59:00 GMT
File typeASCII text, with very long lines (3457), with no line terminators Hash4e946468a68f5bc6ea4bba7db8080654 40bd1b37ad9462a21db9eb5d668f458fc866ba38 af3a31a00eb305e865284389a1e9eaccbe92b6121456179f166b181ae56e31b2
GET /get/1989014?zoneid=1989014&jp=_clnas1e1efd7w9e8f7vcv&nojs=0&abvar=0&febuild=1.0.227&t=0&wcks=1&wgl=0&cnvs=1&os=0&tz=UTC&ss=1&ls=1&bb=0&cti=0&plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF&lang=en-US&pf=Linux%20x86_64&cd=24&ix=0&x=1280&y=1024&md=0&afid=8275098443710464&eclog=0&im=1&uf=0 HTTP/1.1
Host: fvcwqkkqmuv.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sicantik.pro/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 24 Apr 2024 03:40:40 GMT
content-type: text/javascript; charset=utf-8
vary: Accept-Encoding
x-route-id: config
set-cookie: CHCK=1; Path=/; Expires=Wed, 28 May 2025 03:40:40 GMT; Secure; SameSite=None
UID=24042322401460d141ccae45979ee3ad84a9; Path=/; Expires=Wed, 28 May 2025 03:40:40 GMT; Secure; SameSite=None
content-encoding: gzip
timing-allow-origin: *
accept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
X-Firefox-Spdy: h2
|
|
| go.mnaspm.com/config?url=https%3A%2F%2Fcreative.mnaspm.com%2Fwidgets%2Fv4%2FUniversal%3Faction%3DsbSignupWithModel%26campaignId%3Dc6913f01500457c0bdb8597e6d4286a54c12f8dc120ca06a0ab250733289acaa%26campaignType%3Dsmartpop%26creativeId%3D6c0b1b4a99ba447f4bead9b76a7621269ec060b2297874834d7b37047f348300%26iterationId%3D868050%26masterSmartpopId%3D1605%26memberId%3DhHqq9q1WmUAkzquHgxB45UWeS8FHTuFir1J5vRaRDeBfRVndLEmQX-FlQlDmfRWAdgWnzuEcbS8bL10IRCgzcjMpoHdh5bvAnOl5pHCEC4i0sT0g_gUIDRUi%26mlView%3D1%26p1%3D4350989%26quality%3D240p%26ruleId%3D3%26smartpopId%3D1062%26sortBy%3Drecommended%26sourceId%3D594409%26tag%3Dgirls%26usePreroll%3D0%26userId%3Dd100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca%26variationId%3D33204%26webp%3D1 | 104.18.40.50 | 200 OK | 6.1 kB |
URL GET HTTP/3go.mnaspm.com/config?url=https%3A%2F%2Fcreative.mnaspm.com%2Fwidgets%2Fv4%2FUniversal%3Faction%3DsbSignupWithModel%26campaignId%3Dc6913f01500457c0bdb8597e6d4286a54c12f8dc120ca06a0ab250733289acaa%26campaignType%3Dsmartpop%26creativeId%3D6c0b1b4a99ba447f4bead9b76a7621269ec060b2297874834d7b37047f348300%26iterationId%3D868050%26masterSmartpopId%3D1605%26memberId%3DhHqq9q1WmUAkzquHgxB45UWeS8FHTuFir1J5vRaRDeBfRVndLEmQX-FlQlDmfRWAdgWnzuEcbS8bL10IRCgzcjMpoHdh5bvAnOl5pHCEC4i0sT0g_gUIDRUi%26mlView%3D1%26p1%3D4350989%26quality%3D240p%26ruleId%3D3%26smartpopId%3D1062%26sortBy%3Drecommended%26sourceId%3D594409%26tag%3Dgirls%26usePreroll%3D0%26userId%3Dd100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca%26variationId%3D33204%26webp%3D1 IP104.18.40.50:443
Requested byhttps://creative.mnaspm.com/widgets/v4/Universal?action=sbSignupWithModel&campaignId=c6913f01500457c0bdb8597e6d4286a54c12f8dc120ca06a0ab250733289acaa&campaignType=smartpop&creativeId=6c0b1b4a99ba447f4bead9b76a7621269ec060b2297874834d7b37047f348300&iterationId=868050&masterSmartpopId=1605&memberId=hHqq9q1WmUAkzquHgxB45UWeS8FHTuFir1J5vRaRDeBfRVndLEmQX-FlQlDmfRWAdgWnzuEcbS8bL10IRCgzcjMpoHdh5bvAnOl5pHCEC4i0sT0g_gUIDRUi&mlView=1&p1=4350989&quality=240p&ruleId=3&smartpopId=1062&sortBy=recommended&sourceId=594409&tag=girls&usePreroll=0&userId=d100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca&variationId=33204&webp=1 CertificateIssuerGoogle Trust Services LLC Subjectmnaspm.com Fingerprint41:FC:20:C5:2D:89:14:17:87:EB:2D:BA:2E:DE:61:87:1E:53:19:CE ValiditySun, 14 Apr 2024 17:19:29 GMT - Sat, 13 Jul 2024 17:19:28 GMT
File typeASCII text, with very long lines (7997), with no line terminators Hash80d402eb23d773cebd29cc2cbbcb3535 e8939cd17a9122456a77024649457636281f678c 33ecd5d89fd61c985f6b6b67fde90c27bccf624588e05854b5c1849bef785eef
GET /config?url=https%3A%2F%2Fcreative.mnaspm.com%2Fwidgets%2Fv4%2FUniversal%3Faction%3DsbSignupWithModel%26campaignId%3Dc6913f01500457c0bdb8597e6d4286a54c12f8dc120ca06a0ab250733289acaa%26campaignType%3Dsmartpop%26creativeId%3D6c0b1b4a99ba447f4bead9b76a7621269ec060b2297874834d7b37047f348300%26iterationId%3D868050%26masterSmartpopId%3D1605%26memberId%3DhHqq9q1WmUAkzquHgxB45UWeS8FHTuFir1J5vRaRDeBfRVndLEmQX-FlQlDmfRWAdgWnzuEcbS8bL10IRCgzcjMpoHdh5bvAnOl5pHCEC4i0sT0g_gUIDRUi%26mlView%3D1%26p1%3D4350989%26quality%3D240p%26ruleId%3D3%26smartpopId%3D1062%26sortBy%3Drecommended%26sourceId%3D594409%26tag%3Dgirls%26usePreroll%3D0%26userId%3Dd100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca%26variationId%3D33204%26webp%3D1 HTTP/1.1
Host: go.mnaspm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://creative.mnaspm.com/
Origin: https://creative.mnaspm.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 24 Apr 2024 03:40:35 GMT
content-type: application/json
access-control-allow-origin: https://creative.mnaspm.com
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64
last-modified: Wed, 24 Apr 2024 03:40:35 GMT
cf-cache-status: MISS
set-cookie: __cflb=02DiuDFRFiBZBvMSLtr4BTSnpWHamtv7KUbfrWpevbzP6; SameSite=None; Secure; path=/; expires=Thu, 25-Apr-24 03:40:35 GMT; HttpOnly
vary: Accept-Encoding
server: cloudflare
cf-ray: 879312a289635699-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| go.xlivrdr.com/smartpop/c6913f01500457c0bdb8597e6d4286a54c12f8dc120ca06a0ab250733289acaa?userId=d100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca&sourceId=594409&memberId=hHqq9q1WmUAkzquHgxB45UWeS8FHTuFir1J5vRaRDeBfRVndLEmQX-FlQlDmfRWAdgWnzuEcbS8bL10IRCgzcjMpoHdh5bvAnOl5pHCEC4i0sT0g_gUIDRUi&p1=4350989 | 172.64.147.206 | 302 Found | 811 B |
URL GET HTTP/3go.xlivrdr.com/smartpop/c6913f01500457c0bdb8597e6d4286a54c12f8dc120ca06a0ab250733289acaa?userId=d100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca&sourceId=594409&memberId=hHqq9q1WmUAkzquHgxB45UWeS8FHTuFir1J5vRaRDeBfRVndLEmQX-FlQlDmfRWAdgWnzuEcbS8bL10IRCgzcjMpoHdh5bvAnOl5pHCEC4i0sT0g_gUIDRUi&p1=4350989 IP172.64.147.206:443
Requested byhttps://tsyndicate.com/iframes2/0246aee575494bc89de6d47f4c0ca63d.html?keywords=sicantik.pro%20Video%20viral%20Streaming%20terbarukan%20Barat%20Indo%20Jepang%20Korea%2CVk%20live%20periscope%2016x16%20picture%2CVk%20live%20periscope%2016x16%20picture&adb=0&clientjs=1&w=1280&h=1024&tz=0 CertificateIssuerCloudflare, Inc. Subjectxlivrdr.com FingerprintDA:D9:AC:E4:B1:E8:44:C4:D9:A4:0E:1B:DF:33:4B:24:74:45:7D:0E ValidityWed, 03 May 2023 00:00:00 GMT - Wed, 01 May 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /smartpop/c6913f01500457c0bdb8597e6d4286a54c12f8dc120ca06a0ab250733289acaa?userId=d100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca&sourceId=594409&memberId=hHqq9q1WmUAkzquHgxB45UWeS8FHTuFir1J5vRaRDeBfRVndLEmQX-FlQlDmfRWAdgWnzuEcbS8bL10IRCgzcjMpoHdh5bvAnOl5pHCEC4i0sT0g_gUIDRUi&p1=4350989 HTTP/1.1
Host: go.xlivrdr.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tsyndicate.com/
Cookie: _var=775628.33204_YzRmMzYxZTI=; __cflb=02DiuDFRFiBZBvMSLtr5TfCC2emAa5z1n1NydrJ9Srj64
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 302 Found
date: Wed, 24 Apr 2024 03:40:35 GMT
content-length: 0
location: https://creative.mnaspm.com/widgets/v4/Universal?action=sbSignupWithModel&campaignId=c6913f01500457c0bdb8597e6d4286a54c12f8dc120ca06a0ab250733289acaa&campaignType=smartpop&creativeId=6c0b1b4a99ba447f4bead9b76a7621269ec060b2297874834d7b37047f348300&iterationId=868050&masterSmartpopId=1605&memberId=hHqq9q1WmUAkzquHgxB45UWeS8FHTuFir1J5vRaRDeBfRVndLEmQX-FlQlDmfRWAdgWnzuEcbS8bL10IRCgzcjMpoHdh5bvAnOl5pHCEC4i0sT0g_gUIDRUi&mlView=1&p1=4350989&quality=240p&ruleId=3&smartpopId=1062&sortBy=recommended&sourceId=594409&tag=girls&usePreroll=0&userId=d100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca&variationId=33204&webp=1
set-cookie: _var=775628.33204_YzRmMzYxZTI=; Path=/; Expires=Fri, 24 May 2024 03:40:35 GMT; HttpOnly; Secure; SameSite=None
access-control-allow-credentials: true
access-control-allow-headers: Content-Type, Content-Length, Accept-Encoding, x-requested-with
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 879312a1495cb4f1-OSL
alt-svc: h3=":443"; ma=86400
|
|
| cdn.creative-bars1.com/sb/chat/mob/ssp/1/img/close.png | 104.21.70.253 | 200 OK | 6.0 kB |
URL GET HTTP/2cdn.creative-bars1.com/sb/chat/mob/ssp/1/img/close.png IP104.21.70.253:443
Requested byhttps://sicantik.pro/video/vk-live-periscope-16x16-picture/ CertificateIssuerGoogle Trust Services LLC Subjectcreative-bars1.com Fingerprint3D:29:39:2C:F1:E5:C6:EF:54:F5:70:B5:CF:A8:C2:75:4D:89:72:13 ValidityMon, 15 Apr 2024 15:02:18 GMT - Sun, 14 Jul 2024 15:02:17 GMT
File typePNG image data, 522 x 391, 8-bit/color RGBA, non-interlaced Hashc489ce2c491a22ee37a55e26a92dfd73 2fa588ab09e94dd902e5bd24b48f98ad1949c9d6 1eed147c7d5de6291c25fbc5274830c12d5549262fb144271576d4e15966e5bd
GET /sb/chat/mob/ssp/1/img/close.png HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 24 Apr 2024 03:40:39 GMT
content-type: image/png
content-length: 5982
last-modified: Mon, 21 Feb 2022 08:25:06 GMT
etag: "62134c62-175e"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 6010043
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=P8Xn5NLBf9cq2o1NqXX%2F%2FLJMoYRSAivml5S20nqYI70UGPFk9VvyddfMRa20jmBGcFBJKL5Gn5S%2Fwp%2FE1LaTcvRs%2FnNI0FRKbYQ66%2B%2F1FeD4BTDZbtTD3R0a%2BbqIQHiuiWjJYvSQ19XC"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879312bac84eb4fd-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| cdn.tsyndicate.com/sdk/v1/bi.js | 45.133.44.70 | 200 OK | 6.7 kB |
URL GET HTTP/2cdn.tsyndicate.com/sdk/v1/bi.js IP45.133.44.70:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://sicantik.pro/video/vk-live-periscope-16x16-picture/ CertificateIssuerLet's Encrypt Subjectcdn.tsyndicate.com Fingerprint27:B4:A1:69:D6:DF:AF:13:62:9C:06:AB:7A:E0:2F:B6:9B:08:43:75 ValidityTue, 09 Apr 2024 03:01:17 GMT - Mon, 08 Jul 2024 03:01:16 GMT
File typeJavaScript source, ASCII text, with very long lines (6919), with no line terminators Hash4ef7e3fce99f74f803b134ff847c22d8 7d4b71b2c7dea32e2e8ed0c697fd3f9ce287dd21 375184639cdf5cfb4ad4a5d93c4ac02710b057bfdaa226ca6bb67c96c28c244c
GET /sdk/v1/bi.js HTTP/1.1
Host: cdn.tsyndicate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sicantik.pro/
Cookie: ts_uid=9fc90fb4-7f01-4b1b-abf8-a8828ba42199; bfq=APeIECNCx5YZNW7kwJHDRhcWIsYU3BLjoYgyE2PciEEDRgwbNGZU7KMg
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 24 Apr 2024 03:40:35 GMT
content-type: application/javascript; charset=utf-8
server: nginx
last-modified: Tue, 23 Apr 2024 12:57:57 GMT
etag: W/"6627b055-1a1e"
x-robots-tag: noindex, nofollow
content-encoding: gzip
cache-control: max-age=172800
expires: Fri, 26 Apr 2024 03:40:35 GMT
vary: Accept-Encoding
x-proxy-cache: HIT
X-Firefox-Spdy: h2
|
|
| sicantik.pro/wp-content/themes/retrotube/assets/js/jquery.bxslider.min.js | 104.21.71.64 | 200 OK | 24 kB |
URL GET HTTP/3sicantik.pro/wp-content/themes/retrotube/assets/js/jquery.bxslider.min.js IP104.21.71.64:443
Requested byhttps://sicantik.pro/video/vk-live-periscope-16x16-picture/ CertificateIssuerGoogle Trust Services LLC Subjectsicantik.pro FingerprintC5:23:EF:A4:D1:09:03:7C:51:52:DC:24:7C:20:A9:1D:38:31:3E:32 ValidityFri, 15 Mar 2024 07:05:18 GMT - Thu, 13 Jun 2024 07:05:17 GMT
File typeJavaScript source, ASCII text, with very long lines (24063) Hashc675495748ef0df6858b93dd9e623c46 e1be723e4e25d37282821c50b7e12796d3df5f8d 9a32744fa4707d6ea1ad2b696c644c4f45d327509989b4625b8a980e4a45e271
GET /wp-content/themes/retrotube/assets/js/jquery.bxslider.min.js HTTP/1.1
Host: sicantik.pro
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sicantik.pro/video/vk-live-periscope-16x16-picture/
Cookie: bnState_1998535={"impressions":1,"delayStarted":0}; _lscache_vary=13c9df61d6ee8b9b08b77960336b8f8e
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 24 Apr 2024 03:40:32 GMT
content-type: application/javascript
last-modified: Sat, 20 Apr 2024 11:28:06 GMT
vary: Accept-Encoding
etag: W/"6623a6c6-5ebc"
expires: Wed, 24 Apr 2024 01:01:14 GMT
cache-control: max-age=43200
cf-cache-status: HIT
age: 23014
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7kj6WOwAJWbIBe%2BGlfOMkwnmTwupvU7ibJuQl67eHUrEy5%2BB38f9uaes1fvV617%2BL%2FpeCS9BKyRgsZphf53U6kvm%2Bb2BCNnSjB%2B2rl4mCIDFTSKiMhemOcroKdwuKNM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8793128ecede0b61-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| cdn.tsyndicate.com/sdk/v1/bi.js | 45.133.44.70 | 200 OK | 6.7 kB |
URL GET HTTP/2cdn.tsyndicate.com/sdk/v1/bi.js IP45.133.44.70:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://sicantik.pro/video/vk-live-periscope-16x16-picture/ CertificateIssuerLet's Encrypt Subjectcdn.tsyndicate.com Fingerprint27:B4:A1:69:D6:DF:AF:13:62:9C:06:AB:7A:E0:2F:B6:9B:08:43:75 ValidityTue, 09 Apr 2024 03:01:17 GMT - Mon, 08 Jul 2024 03:01:16 GMT
File typeJavaScript source, ASCII text, with very long lines (6919), with no line terminators Hash4ef7e3fce99f74f803b134ff847c22d8 7d4b71b2c7dea32e2e8ed0c697fd3f9ce287dd21 375184639cdf5cfb4ad4a5d93c4ac02710b057bfdaa226ca6bb67c96c28c244c
GET /sdk/v1/bi.js HTTP/1.1
Host: cdn.tsyndicate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sicantik.pro/
Cookie: ts_uid=9fc90fb4-7f01-4b1b-abf8-a8828ba42199; bfq=APeIECNCx5YZNW7kwJHDRhcWIsYU3BLjoYgyE2PciEEDRgwbNGZU7KMg
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 24 Apr 2024 03:40:34 GMT
content-type: application/javascript; charset=utf-8
server: nginx
last-modified: Tue, 23 Apr 2024 12:57:57 GMT
etag: W/"6627b055-1a1e"
x-robots-tag: noindex, nofollow
content-encoding: gzip
cache-control: max-age=172800
expires: Fri, 26 Apr 2024 03:40:34 GMT
vary: Accept-Encoding
x-proxy-cache: HIT
X-Firefox-Spdy: h2
|
|
| cdn.barscreative1.com/sb/au/2f/33/17/2f3317da28d2a6ed09610d2d267aa136/1648542458.html | 45.133.44.3 | 200 OK | 3.0 kB |
URL GET HTTP/2cdn.barscreative1.com/sb/au/2f/33/17/2f3317da28d2a6ed09610d2d267aa136/1648542458.html IP45.133.44.3:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://sicantik.pro/video/vk-live-periscope-16x16-picture/ CertificateIssuerLet's Encrypt Subjectcdn.barscreative1.com FingerprintF6:54:F4:B9:EB:AD:1E:FA:8F:76:B9:75:20:9B:41:57:32:37:94:E3 ValiditySun, 10 Mar 2024 03:01:32 GMT - Sat, 08 Jun 2024 03:01:31 GMT
File typeHTML document, ASCII text, with very long lines (3229), with no line terminators Hash0b579b1f5697d55d3bc0856975d08243 e68a8e8bc08f86086744aba736df40ca7bea6d01 8ac4909eb5c0efc3278c66a43990535925fb271226f96261415df027fe40cb0c
GET /sb/au/2f/33/17/2f3317da28d2a6ed09610d2d267aa136/1648542458.html HTTP/1.1
Host: cdn.barscreative1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://sicantik.pro
DNT: 1
Connection: keep-alive
Referer: https://sicantik.pro/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 24 Apr 2024 03:40:39 GMT
content-type: text/html; charset=utf-8
server: nginx/1.21.6
last-modified: Tue, 29 Mar 2022 08:27:42 GMT
etag: W/"6242c2fe-ba1"
cache-control: max-age=3600
access-control-allow-origin: *
access-control-expose-headers: Date
content-encoding: gzip
expires: Wed, 24 Apr 2024 04:40:39 GMT
x-proxy-cache: HIT
X-Firefox-Spdy: h2
|
|
| 31803.fallclk.com/v2/a/na/224644?subId=&pageUri=https%3A%2F%2Fsicantik.pro%2Fvideo%2Fvk-live-periscope-16x16-picture%2F&referer=&av=1&abl=0&kws=live%2Cperiscope%2Cpicture&rtg=&bdd=%5B%22Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0%22%2C%22false%22%2C%22Linux%20x86_64%22%2C%22%22%2C%22%22%2C%22%22%2C%22%22%2C%22false%22%2C%22true%22%2C%221280%22%2C%221024%22%2C%221280%22%2C%221024%22%2C%221280%22%2C%221024%22%2C%221280%22%2C%221024%22%2C%221280%22%2C%221024%22%2C%22false%22%2C%221%22%2C%2248%22%2C%220%22%2C%22aaaaacccefiflmmprrsstlllecstaaahtscellllpss%22%2C%22Wed%20Apr%2024%202024%2003%3A40%3A33%20GMT%2B0000%20(GMT)%22%2C%220%22%2C%22en-US%22%2C%22en-US%2Cen%22%2C%22false%22%2C%22false%22%2C%22781877177%22%2C%222697903995%22%2C%223%22%2C%22false%22%2C%22%5B%5D%22%5D&dcid= | 88.208.22.3 | 200 OK | 3.9 kB |
URL GET HTTP/231803.fallclk.com/v2/a/na/224644?subId=&pageUri=https%3A%2F%2Fsicantik.pro%2Fvideo%2Fvk-live-periscope-16x16-picture%2F&referer=&av=1&abl=0&kws=live%2Cperiscope%2Cpicture&rtg=&bdd=%5B%22Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0%22%2C%22false%22%2C%22Linux%20x86_64%22%2C%22%22%2C%22%22%2C%22%22%2C%22%22%2C%22false%22%2C%22true%22%2C%221280%22%2C%221024%22%2C%221280%22%2C%221024%22%2C%221280%22%2C%221024%22%2C%221280%22%2C%221024%22%2C%221280%22%2C%221024%22%2C%22false%22%2C%221%22%2C%2248%22%2C%220%22%2C%22aaaaacccefiflmmprrsstlllecstaaahtscellllpss%22%2C%22Wed%20Apr%2024%202024%2003%3A40%3A33%20GMT%2B0000%20(GMT)%22%2C%220%22%2C%22en-US%22%2C%22en-US%2Cen%22%2C%22false%22%2C%22false%22%2C%22781877177%22%2C%222697903995%22%2C%223%22%2C%22false%22%2C%22%5B%5D%22%5D&dcid= IP88.208.22.3:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://sicantik.pro/video/vk-live-periscope-16x16-picture/ CertificateIssuerLet's Encrypt Subject*.fallclk.com Fingerprint56:26:EB:CF:D7:29:FF:2C:B2:29:4A:FF:47:30:F5:7B:6C:B5:1E:2F ValidityFri, 22 Mar 2024 20:25:27 GMT - Thu, 20 Jun 2024 20:25:26 GMT
File typetroff or preprocessor input, ASCII text, with very long lines (3972), with no line terminators Hash761ba12a31a75d492c781d8f02d0c070 39c1db73138a6832c0c11030fc99a245f880de9e 701a6983ede50293c45d99ec564a5f41d9c327fdf548bd8b5a9b171c66edbf09
GET /v2/a/na/224644?subId=&pageUri=https%3A%2F%2Fsicantik.pro%2Fvideo%2Fvk-live-periscope-16x16-picture%2F&referer=&av=1&abl=0&kws=live%2Cperiscope%2Cpicture&rtg=&bdd=%5B%22Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0%22%2C%22false%22%2C%22Linux%20x86_64%22%2C%22%22%2C%22%22%2C%22%22%2C%22%22%2C%22false%22%2C%22true%22%2C%221280%22%2C%221024%22%2C%221280%22%2C%221024%22%2C%221280%22%2C%221024%22%2C%221280%22%2C%221024%22%2C%221280%22%2C%221024%22%2C%22false%22%2C%221%22%2C%2248%22%2C%220%22%2C%22aaaaacccefiflmmprrsstlllecstaaahtscellllpss%22%2C%22Wed%20Apr%2024%202024%2003%3A40%3A33%20GMT%2B0000%20(GMT)%22%2C%220%22%2C%22en-US%22%2C%22en-US%2Cen%22%2C%22false%22%2C%22false%22%2C%22781877177%22%2C%222697903995%22%2C%223%22%2C%22false%22%2C%22%5B%5D%22%5D&dcid= HTTP/1.1
Host: 31803.fallclk.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://sicantik.pro
DNT: 1
Connection: keep-alive
Referer: https://sicantik.pro/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 24 Apr 2024 03:40:34 GMT
content-type: application/json; charset=UTF-8
vary: Accept-Encoding
access-control-allow-origin: https://sicantik.pro
access-control-allow-credentials: true
access-control-max-age: 86400
referrer-policy: unsafe-url
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Device-Memory
accept-ch-lifetime: 31536000
p3p: CP="NOI DEVa TAIa OUR BUS UNI STA"
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
pragma: no-cache
last-modified: Wed, 24 Apr 2024 03:40:34 UTC
expires: Wed, 24 Apr 2024 03:40:34 UTC
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| tsyndicate.com/iframes2/0246aee575494bc89de6d47f4c0ca63d.html?keywords=sicantik.pro%20Video%20viral%20Streaming%20terbarukan%20Barat%20Indo%20Jepang%20Korea%2CVk%20live%20periscope%2016x16%20picture%2CVk%20live%20periscope%2016x16%20picture&adb=0&clientjs=1&w=1280&h=1024&tz=0 | 136.243.81.150 | 200 OK | 8.9 kB |
URL GET HTTP/2tsyndicate.com/iframes2/0246aee575494bc89de6d47f4c0ca63d.html?keywords=sicantik.pro%20Video%20viral%20Streaming%20terbarukan%20Barat%20Indo%20Jepang%20Korea%2CVk%20live%20periscope%2016x16%20picture%2CVk%20live%20periscope%2016x16%20picture&adb=0&clientjs=1&w=1280&h=1024&tz=0 IP136.243.81.150:443 ASN#24940 Hetzner Online GmbH
Requested byhttps://sicantik.pro/video/vk-live-periscope-16x16-picture/ CertificateIssuerLet's Encrypt Subjecttsyndicate.com FingerprintF5:9F:1F:89:8F:08:CD:46:43:4B:55:0A:42:66:52:21:16:57:43:31 ValidityFri, 12 Apr 2024 09:06:37 GMT - Thu, 11 Jul 2024 09:06:36 GMT
File typeHTML document, ASCII text, with very long lines (8962), with no line terminators Hashaeb1381ab1a5ff2461b5952c91efaaf5 8222d329b2cf6618a7089bb7279b5bf611abf458 77b0315a9a4113cf2ff61b9fbc88e5448270a77dc8c3f680fc74d0baa6a1f488
GET /iframes2/0246aee575494bc89de6d47f4c0ca63d.html?keywords=sicantik.pro%20Video%20viral%20Streaming%20terbarukan%20Barat%20Indo%20Jepang%20Korea%2CVk%20live%20periscope%2016x16%20picture%2CVk%20live%20periscope%2016x16%20picture&adb=0&clientjs=1&w=1280&h=1024&tz=0 HTTP/1.1
Host: tsyndicate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sicantik.pro/
Cookie: ts_uid=9fc90fb4-7f01-4b1b-abf8-a8828ba42199; bfq=APeIECNCx5YZNW7kwJHDRhcWIsYU3BLjoYgyE2PciEEDRgwbNGZU7KMg
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 24 Apr 2024 03:40:35 GMT
content-type: text/html; charset=utf-8
pragma: no-cache
expires: 0
vary: Accept-Encoding, *
x-api-version: 2
link: <https://acdn.tsyndicate.com/sdk/v1/b.b.js>; rel=preload; as=script
x-request-id: 11108cb712c18b58
set-cookie: ts_uid=9fc90fb4-7f01-4b1b-abf8-a8828ba42199; expires=Thu, 24 Oct 2024 03:40:35 GMT; domain=.tsyndicate.com; path=/; HttpOnly; secure; SameSite=None
bfq=APeIECNCx5YZNW7kwJHDRhcWIsYU3CLjoYgyE2PciEEDRgwbNGbE6NJH; expires=Thu, 25 Apr 2024 03:40:35 GMT; domain=.tsyndicate.com; path=/; secure; SameSite=None
cache-control: no-cache, no-store, no-transform, must-revalidate, no-transform
x-robots-tag: none, noindex, nofollow
report-to: { "url": "https://pxl.tsyndicate.com/api/v1/heavy-ad/report", "max_age": 86401 }
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| cdn.creative-bars1.com/sb/chat/mob/ssp/1/css/style.css | 104.21.70.253 | 200 OK | 4.6 kB |
URL GET HTTP/2cdn.creative-bars1.com/sb/chat/mob/ssp/1/css/style.css IP104.21.70.253:443
Requested byhttps://sicantik.pro/video/vk-live-periscope-16x16-picture/ CertificateIssuerGoogle Trust Services LLC Subjectcreative-bars1.com Fingerprint3D:29:39:2C:F1:E5:C6:EF:54:F5:70:B5:CF:A8:C2:75:4D:89:72:13 ValidityMon, 15 Apr 2024 15:02:18 GMT - Sun, 14 Jul 2024 15:02:17 GMT
File typeASCII text, with very long lines (4886), with no line terminators Hash1230b98f01a549572edcd2bf3bdcb4ad ac87a2a752ffb8b5167566183fddd531d7971be9 9a2954fc66ebbb9adf18c2ea4403d2a0a5dedf2928f9905e1fc656f5dc1b208d
GET /sb/chat/mob/ssp/1/css/style.css HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://sicantik.pro
DNT: 1
Connection: keep-alive
Referer: https://sicantik.pro/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 24 Apr 2024 03:40:39 GMT
content-type: text/css
last-modified: Mon, 21 Feb 2022 08:25:04 GMT
etag: W/"62134c60-1209"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=EYfota1RG43UsAk4hMh4Uz7mKOHqRa58gjQ3Dqd7kcucMAVyQN9TaSH%2B6JDDa9wWGLwdBobaXZVf9wVXrkoMYb2oafKmkcc6duNfOgwtsHN9%2F5twduc10xK%2Fp72douOgSpB3sX%2FJG5o7"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879312ba3828b4fd-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| pxl.tsyndicate.com/api/v1/p/p.js?p=APeIQFMmDJkycuaI0DEjBgsRYcbQWehQBJ0zC0XksHGwBg4yZlrckDGGTAsaZmyUaRHmRpmVY26YgSHjBo0ZM8TQGCPiYZg6PHWIoEHDBo0aDXO0qEFUzMkwZpyGwWHjRgsyY2KUNJNjjBgbMsL0hEjGDkUaN2LgeAinjpiFOWTMkOsTDpyFaIlWnANnoo6bNWDkwJHj4Zg2d3XUyEFUsE-QC2s-FOPGzcIZNW4M3viwjRuMOmLMlQGDrWfQNphWrBMjIxo6dODM0fHixZk3LvCwSWNHDhk5Lsa8afNiTpswcmK_gfNijI0comfGCAzj6I0xMMSQEYNjsUuONGRQDcM0qwwzH83DGBMGho32YcTICHwDp_gcEcOE-VFnDsIkZPRARgwwwGDGDSDFIMYM3dU0xmJmhAWDVmWk9pEYUeHw1UaMdRUDSTEUBZ1RZtAAAw4xVEUGDWFoFQYXdRQogw1zvFGHHGOUAWAPizWWA4wy2tBGGW2I8V-AMaSxRBs0DPEhGVUYoQcMTsyxxB1MylDGG03M5xsdbgRRXx1uJDGHDEIgd0N9VQghAw1U0LGGHGpgcUcWUNyBBhtl2JHEDHPggYMMLWARxRViFIGFE3bkcIUWVVAxxRRl4HFGEm6MEYUbSmgxRRU0TFkHE1HM0VIMeeQRZg1yRPHFGVUkQYQUVaQBJE02wBFDD4AJRthYZAyX0RxpsOcGHWms4QIccrwxFnt-bdFQF2zhiJcLMjBGw0ow1DCZGQvB4MKEhsHRxhfMBiUuDDMUaMOJD8lhR2LtPlTGGOaG68KHa4lQRx1pZJSDGWPkYKBOIkl3khgKsoQhDizhMKiGYYQXQw45jJVGYhrF4ILBLoS3L1NjyfHFxgJ7DLLI09EwVh1iCdXEG3qkwQYbYbxQw7ggoIBFDDHsAAITabhRBx4gCGrDF0YJLa8OG42bAghH3LvGGy-QRuCEE4JgRBpylGHGG3i8EDUMzwYlghNPjPWGyWOozfZYbKhdhBPA9vlF2GxQlNkNOMxgAw4FxnuGZTrMh8MNDx1kxxdiyLGQxI3r3cYbZERGVUW_OcvQQ28olHi1ZOexkLcikKHqQnTIUUcZ8YrtGmyy0VZcsWEcm-yyzb4w1h0Z8Yv2Q2gET5PLD80hb0bN0hEGHW-3QGYadCwlLlYfuq28WQxVNVdVmhWWutoHfYG9DGPR0QZFac2QQ7vsoq4--qG1_36BmGXbr0F7l8HXF89jn2juFz97PS4MfEqO6LYQA8aliFoQEYNfUie2n7BhImypW7gMAxoY9EEBAQE%3D&s=fe32b3de89654eeb65e0843acce9687457d6de1e2673be2c3467e06cd9ff23391713930035&w=t&r=1&d=260&priv=true | 176.9.61.214 | 200 OK | 24 B |
URL GET HTTP/2pxl.tsyndicate.com/api/v1/p/p.js?p=APeIQFMmDJkycuaI0DEjBgsRYcbQWehQBJ0zC0XksHGwBg4yZlrckDGGTAsaZmyUaRHmRpmVY26YgSHjBo0ZM8TQGCPiYZg6PHWIoEHDBo0aDXO0qEFUzMkwZpyGwWHjRgsyY2KUNJNjjBgbMsL0hEjGDkUaN2LgeAinjpiFOWTMkOsTDpyFaIlWnANnoo6bNWDkwJHj4Zg2d3XUyEFUsE-QC2s-FOPGzcIZNW4M3viwjRuMOmLMlQGDrWfQNphWrBMjIxo6dODM0fHixZk3LvCwSWNHDhk5Lsa8afNiTpswcmK_gfNijI0comfGCAzj6I0xMMSQEYNjsUuONGRQDcM0qwwzH83DGBMGho32YcTICHwDp_gcEcOE-VFnDsIkZPRARgwwwGDGDSDFIMYM3dU0xmJmhAWDVmWk9pEYUeHw1UaMdRUDSTEUBZ1RZtAAAw4xVEUGDWFoFQYXdRQogw1zvFGHHGOUAWAPizWWA4wy2tBGGW2I8V-AMaSxRBs0DPEhGVUYoQcMTsyxxB1MylDGG03M5xsdbgRRXx1uJDGHDEIgd0N9VQghAw1U0LGGHGpgcUcWUNyBBhtl2JHEDHPggYMMLWARxRViFIGFE3bkcIUWVVAxxRRl4HFGEm6MEYUbSmgxRRU0TFkHE1HM0VIMeeQRZg1yRPHFGVUkQYQUVaQBJE02wBFDD4AJRthYZAyX0RxpsOcGHWms4QIccrwxFnt-bdFQF2zhiJcLMjBGw0ow1DCZGQvB4MKEhsHRxhfMBiUuDDMUaMOJD8lhR2LtPlTGGOaG68KHa4lQRx1pZJSDGWPkYKBOIkl3khgKsoQhDizhMKiGYYQXQw45jJVGYhrF4ILBLoS3L1NjyfHFxgJ7DLLI09EwVh1iCdXEG3qkwQYbYbxQw7ggoIBFDDHsAAITabhRBx4gCGrDF0YJLa8OG42bAghH3LvGGy-QRuCEE4JgRBpylGHGG3i8EDUMzwYlghNPjPWGyWOozfZYbKhdhBPA9vlF2GxQlNkNOMxgAw4FxnuGZTrMh8MNDx1kxxdiyLGQxI3r3cYbZERGVUW_OcvQQ28olHi1ZOexkLcikKHqQnTIUUcZ8YrtGmyy0VZcsWEcm-yyzb4w1h0Z8Yv2Q2gET5PLD80hb0bN0hEGHW-3QGYadCwlLlYfuq28WQxVNVdVmhWWutoHfYG9DGPR0QZFac2QQ7vsoq4--qG1_36BmGXbr0F7l8HXF89jn2juFz97PS4MfEqO6LYQA8aliFoQEYNfUie2n7BhImypW7gMAxoY9EEBAQE%3D&s=fe32b3de89654eeb65e0843acce9687457d6de1e2673be2c3467e06cd9ff23391713930035&w=t&r=1&d=260&priv=true IP176.9.61.214:443 ASN#24940 Hetzner Online GmbH
Requested byhttps://tsyndicate.com/iframes2/0246aee575494bc89de6d47f4c0ca63d.html?keywords=sicantik.pro%20Video%20viral%20Streaming%20terbarukan%20Barat%20Indo%20Jepang%20Korea%2CVk%20live%20periscope%2016x16%20picture%2CVk%20live%20periscope%2016x16%20picture&adb=0&clientjs=1&w=1280&h=1024&tz=0 CertificateIssuerLet's Encrypt Subjecttsyndicate.com FingerprintF5:9F:1F:89:8F:08:CD:46:43:4B:55:0A:42:66:52:21:16:57:43:31 ValidityFri, 12 Apr 2024 09:06:37 GMT - Thu, 11 Jul 2024 09:06:36 GMT
File typeASCII text, with no line terminators Hash0959ba36d476b6dc1994ba3c678b07c4 d30b94da72daa02766965206a85b7e0356375f5e 897410b87e27e3dfba3a7d6caab315a5e69cc941bb96d91fc74878a9b051843a
GET /api/v1/p/p.js?p=APeIQFMmDJkycuaI0DEjBgsRYcbQWehQBJ0zC0XksHGwBg4yZlrckDGGTAsaZmyUaRHmRpmVY26YgSHjBo0ZM8TQGCPiYZg6PHWIoEHDBo0aDXO0qEFUzMkwZpyGwWHjRgsyY2KUNJNjjBgbMsL0hEjGDkUaN2LgeAinjpiFOWTMkOsTDpyFaIlWnANnoo6bNWDkwJHj4Zg2d3XUyEFUsE-QC2s-FOPGzcIZNW4M3viwjRuMOmLMlQGDrWfQNphWrBMjIxo6dODM0fHixZk3LvCwSWNHDhk5Lsa8afNiTpswcmK_gfNijI0comfGCAzj6I0xMMSQEYNjsUuONGRQDcM0qwwzH83DGBMGho32YcTICHwDp_gcEcOE-VFnDsIkZPRARgwwwGDGDSDFIMYM3dU0xmJmhAWDVmWk9pEYUeHw1UaMdRUDSTEUBZ1RZtAAAw4xVEUGDWFoFQYXdRQogw1zvFGHHGOUAWAPizWWA4wy2tBGGW2I8V-AMaSxRBs0DPEhGVUYoQcMTsyxxB1MylDGG03M5xsdbgRRXx1uJDGHDEIgd0N9VQghAw1U0LGGHGpgcUcWUNyBBhtl2JHEDHPggYMMLWARxRViFIGFE3bkcIUWVVAxxRRl4HFGEm6MEYUbSmgxRRU0TFkHE1HM0VIMeeQRZg1yRPHFGVUkQYQUVaQBJE02wBFDD4AJRthYZAyX0RxpsOcGHWms4QIccrwxFnt-bdFQF2zhiJcLMjBGw0ow1DCZGQvB4MKEhsHRxhfMBiUuDDMUaMOJD8lhR2LtPlTGGOaG68KHa4lQRx1pZJSDGWPkYKBOIkl3khgKsoQhDizhMKiGYYQXQw45jJVGYhrF4ILBLoS3L1NjyfHFxgJ7DLLI09EwVh1iCdXEG3qkwQYbYbxQw7ggoIBFDDHsAAITabhRBx4gCGrDF0YJLa8OG42bAghH3LvGGy-QRuCEE4JgRBpylGHGG3i8EDUMzwYlghNPjPWGyWOozfZYbKhdhBPA9vlF2GxQlNkNOMxgAw4FxnuGZTrMh8MNDx1kxxdiyLGQxI3r3cYbZERGVUW_OcvQQ28olHi1ZOexkLcikKHqQnTIUUcZ8YrtGmyy0VZcsWEcm-yyzb4w1h0Z8Yv2Q2gET5PLD80hb0bN0hEGHW-3QGYadCwlLlYfuq28WQxVNVdVmhWWutoHfYG9DGPR0QZFac2QQ7vsoq4--qG1_36BmGXbr0F7l8HXF89jn2juFz97PS4MfEqO6LYQA8aliFoQEYNfUie2n7BhImypW7gMAxoY9EEBAQE%3D&s=fe32b3de89654eeb65e0843acce9687457d6de1e2673be2c3467e06cd9ff23391713930035&w=t&r=1&d=260&priv=true HTTP/1.1
Host: pxl.tsyndicate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tsyndicate.com/
Cookie: ts_uid=9fc90fb4-7f01-4b1b-abf8-a8828ba42199; bfq=APeIECNCx5YZNW7kwJHDRhcWIsYU3CLjoYgyE2PciEEDRgwbNGbE6NJH
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 24 Apr 2024 03:40:35 GMT
content-type: text/plain; charset=utf-8
content-length: 24
x-robots-tag: noindex, nofollow
X-Firefox-Spdy: h2
|
|
| sicantik.pro/video/vk+live+periscope+16x16+picture/page/2/ | 0.0.0.0 | | 0 B |
URL GET sicantik.pro/video/vk+live+periscope+16x16+picture/page/2/ IP0.0.0.0:0
Requested byhttps://sicantik.pro/video/vk-live-periscope-16x16-picture/ CertificateIssuerGoogle Trust Services LLC Subjectsicantik.pro FingerprintC5:23:EF:A4:D1:09:03:7C:51:52:DC:24:7C:20:A9:1D:38:31:3E:32 ValidityFri, 15 Mar 2024 07:05:18 GMT - Thu, 13 Jun 2024 07:05:17 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /video/vk+live+periscope+16x16+picture/page/2/ HTTP/1.1
Host: sicantik.pro
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://sicantik.pro/video/vk-live-periscope-16x16-picture/
Cookie: bnState_1998535={"impressions":1,"delayStarted":0}; _lscache_vary=13c9df61d6ee8b9b08b77960336b8f8e; _ga_906YNDT860=GS1.1.1713930033.1.0.1713930033.0.0.0; _ga=GA1.1.297287176.1713930034
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
|
|
| tsyndicate.com/iframes2/0246aee575494bc89de6d47f4c0ca63d.html?keywords=sicantik.pro%20Video%20viral%20Streaming%20terbarukan%20Barat%20Indo%20Jepang%20Korea%2CVk%20live%20periscope%2016x16%20picture%2CVk%20live%20periscope%2016x16%20picture&adb=0&clientjs=1&w=1280&h=1024&tz=0 | 136.243.81.150 | 200 OK | 9.0 kB |
URL GET HTTP/2tsyndicate.com/iframes2/0246aee575494bc89de6d47f4c0ca63d.html?keywords=sicantik.pro%20Video%20viral%20Streaming%20terbarukan%20Barat%20Indo%20Jepang%20Korea%2CVk%20live%20periscope%2016x16%20picture%2CVk%20live%20periscope%2016x16%20picture&adb=0&clientjs=1&w=1280&h=1024&tz=0 IP136.243.81.150:443 ASN#24940 Hetzner Online GmbH
Requested byhttps://sicantik.pro/video/vk-live-periscope-16x16-picture/ CertificateIssuerLet's Encrypt Subjecttsyndicate.com FingerprintF5:9F:1F:89:8F:08:CD:46:43:4B:55:0A:42:66:52:21:16:57:43:31 ValidityFri, 12 Apr 2024 09:06:37 GMT - Thu, 11 Jul 2024 09:06:36 GMT
File typeHTML document, ASCII text, with very long lines (9034), with no line terminators Hash48c4fec65c4fefc1c69a0f879550a053 e2e3476cf2bb59a04a493ecfd5493a6814d49fe0 6175c3773e01ff1ad3237deec96b17bb8bfcfddab67bdb72596140b50fe54fe4
GET /iframes2/0246aee575494bc89de6d47f4c0ca63d.html?keywords=sicantik.pro%20Video%20viral%20Streaming%20terbarukan%20Barat%20Indo%20Jepang%20Korea%2CVk%20live%20periscope%2016x16%20picture%2CVk%20live%20periscope%2016x16%20picture&adb=0&clientjs=1&w=1280&h=1024&tz=0 HTTP/1.1
Host: tsyndicate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sicantik.pro/
Cookie: ts_uid=9fc90fb4-7f01-4b1b-abf8-a8828ba42199; bfq=APeIECNCx5YZNW7kwJHDRhcWIsYU3BLjoYgyE2PciEEDRgwbNGZU7KMg
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 24 Apr 2024 03:40:35 GMT
content-type: text/html; charset=utf-8
pragma: no-cache
expires: 0
vary: Accept-Encoding, *
x-api-version: 2
link: <https://acdn.tsyndicate.com/sdk/v1/b.b.js>; rel=preload; as=script
x-request-id: b12be96ea036939e
set-cookie: ts_uid=9fc90fb4-7f01-4b1b-abf8-a8828ba42199; expires=Thu, 24 Oct 2024 03:40:35 GMT; domain=.tsyndicate.com; path=/; HttpOnly; secure; SameSite=None
bfq=APeIECNCx5YZNW7kwJHDRhcWIsYU3CLjoYgyE2PciEEDRgwbNGbE6NJH; expires=Thu, 25 Apr 2024 03:40:35 GMT; domain=.tsyndicate.com; path=/; secure; SameSite=None
cache-control: no-cache, no-store, no-transform, must-revalidate, no-transform
x-robots-tag: none, noindex, nofollow
report-to: { "url": "https://pxl.tsyndicate.com/api/v1/heavy-ad/report", "max_age": 86401 }
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| sicantik.pro/wp-includes/js/jquery/jquery.min.js | 104.21.71.64 | 200 OK | 88 kB |
URL GET HTTP/3sicantik.pro/wp-includes/js/jquery/jquery.min.js IP104.21.71.64:443
Requested byhttps://sicantik.pro/video/vk-live-periscope-16x16-picture/ CertificateIssuerGoogle Trust Services LLC Subjectsicantik.pro FingerprintC5:23:EF:A4:D1:09:03:7C:51:52:DC:24:7C:20:A9:1D:38:31:3E:32 ValidityFri, 15 Mar 2024 07:05:18 GMT - Thu, 13 Jun 2024 07:05:17 GMT
File typeJavaScript source, ASCII text, with very long lines (65447) Hash826eb77e86b02ab7724fe3d0141ff87c 79cd3587d565afe290076a8d36c31c305a573d18 cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf
GET /wp-includes/js/jquery/jquery.min.js HTTP/1.1
Host: sicantik.pro
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sicantik.pro/video/vk-live-periscope-16x16-picture/
Cookie: bnState_1998535={"impressions":1,"delayStarted":0}; _lscache_vary=13c9df61d6ee8b9b08b77960336b8f8e
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 24 Apr 2024 03:40:32 GMT
content-type: application/javascript
last-modified: Sat, 20 Apr 2024 11:29:20 GMT
vary: Accept-Encoding
etag: W/"6623a710-15601"
expires: Wed, 24 Apr 2024 01:05:51 GMT
cache-control: max-age=43200
cf-cache-status: HIT
age: 23016
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0TjP8YqIi%2BbTC28NDHO2OR1JX5IZ20tgRrZRauVEtOSBnh8oMc8UdWkby8tGTuzt59mdenUfAe9xJlrxgWUZMG47NyWbA%2BLe4QLqzls8yS6XJfUE5pBGnIP4GHHqHUU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8793128eced90b61-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| pxl.tsyndicate.com/api/v1/p/p.js?p=APeIQFMmDJkycuaI0DEjBgsRYcbQWehQBJ0zCyGOEUMjzA0zOVrcwAEjJI0cNMS0yBEmx4wWMWDYoFEGBo4bN2rYCCPiYZg6YzLCmHGjDA4zYkLmMGOjTAsaH820CBOmjI0WMmiMuQFjDA4aOKrC6AmRjB2KUGPgeAinjpiFOWTMkOsTDpyFUGnQqDgHzkQdNGbUKIkjx8Mxbe7qqIGSRkmfZMwslHHjoRg3bhYKvpGjsI2Hbdxg1BFjrgwYbEOPtlFj78M6MTKioUMHzhwdL16ceeMCD5s0duSQkeNizJs2L-a0CSOn9hs4L8bYyFHaDIwYg2HQqHFjDAwxZMTgYFzUBhkaMnDsbD0mhgwzOMi0Pz0mjEz7YcTIGHxjxtzCEVH1Qx1zIJQEGT2QERMMZtwQWQxizDAeZWMwZoYM9sUwhlU1xCcGUjiIMd10J83XHg3TxTCTGY7hoKKDHWkYBhd1wACDDDbM8UYdcmx4YA-M6VUSjTbi2EYZbYhhIIJoIBFHHDnEEcMVbVQRxBp6xFEHEmfgIcR2VVxRxhQ4GIEEFXUYkYYcMShRgx1ShCEFEWUIYYYUVrhBBhNFtBEFFi0YwUYUbBDRxp1XBEHGGVe4oUcdRWxEphhMxJSEFEOcoccYajQBxxtIkIFGDWLYEYQbT7BRAxxIDFHEEDSkAcMcVMBwxhdnVJEEEVJUkQaRN9oARww9BDZYZzmQRcZxGc2RRn1u0JHGGi7AIccbZNX31xYNdcFWj5q5MJ5aTsFQg2WS6QCDC9cdBkcbX1gblLrs4piDDTg-JIcdis2AmghljPHuQuu6t5YIddSRRkZLjZEDgxyJZF0MT4kB4VQf4jAVDjikJ0YY6MWQQ7IPpaGYCNS58LAL6LmAHQ1kyfGFyQzHoPK6Lb9MVh086SBCE2_okQYbbITxQg3sgoACFjHEsAMITKThRh14gICHel_M9PS-OtzLbgogHBHwGm-8cNqCMcUAgppylGHGG3i84PVYh80rghNPkPWGzGPYjTdZbNhdhBPKlmHHF22zQRF3I81gA0n_ynFGZjrsd9NDBx0uhhwLcYy54V-08QYZk6lX0XDYMvTQGwpV_i3ceSx0rghk5EE5HXLUUYa-bstGm224JfdsGNFOW-21L5B1R0YG0z0Q8zfC_NAc-2Z0LR1h0LF3C3W4kQYdT9ksn3t6U38WQzZtJ5jjn9Fu90FfjC8DWXS0QdENpblko2AP1T8_afibgf6GUgMZPAwyiCtDX76Qvfvlz18EfAjowsAGhNChdVuIQWVU5C2IiOEvtHPbT9gwEbYEjmCHGQ0M-qCAgAA%3D&s=68f05da67024e01475f56ce3af37d25bcf8991135378b189f146f41353e1140b1713930035&w=t&r=1&d=215&priv=true | 176.9.61.214 | 200 OK | 24 B |
URL GET HTTP/2pxl.tsyndicate.com/api/v1/p/p.js?p=APeIQFMmDJkycuaI0DEjBgsRYcbQWehQBJ0zCyGOEUMjzA0zOVrcwAEjJI0cNMS0yBEmx4wWMWDYoFEGBo4bN2rYCCPiYZg6YzLCmHGjDA4zYkLmMGOjTAsaH820CBOmjI0WMmiMuQFjDA4aOKrC6AmRjB2KUGPgeAinjpiFOWTMkOsTDpyFUGnQqDgHzkQdNGbUKIkjx8Mxbe7qqIGSRkmfZMwslHHjoRg3bhYKvpGjsI2Hbdxg1BFjrgwYbEOPtlFj78M6MTKioUMHzhwdL16ceeMCD5s0duSQkeNizJs2L-a0CSOn9hs4L8bYyFHaDIwYg2HQqHFjDAwxZMTgYFzUBhkaMnDsbD0mhgwzOMi0Pz0mjEz7YcTIGHxjxtzCEVH1Qx1zIJQEGT2QERMMZtwQWQxizDAeZWMwZoYM9sUwhlU1xCcGUjiIMd10J83XHg3TxTCTGY7hoKKDHWkYBhd1wACDDDbM8UYdcmx4YA-M6VUSjTbi2EYZbYhhIIJoIBFHHDnEEcMVbVQRxBp6xFEHEmfgIcR2VVxRxhQ4GIEEFXUYkYYcMShRgx1ShCEFEWUIYYYUVrhBBhNFtBEFFi0YwUYUbBDRxp1XBEHGGVe4oUcdRWxEphhMxJSEFEOcoccYajQBxxtIkIFGDWLYEYQbT7BRAxxIDFHEEDSkAcMcVMBwxhdnVJEEEVJUkQaRN9oARww9BDZYZzmQRcZxGc2RRn1u0JHGGi7AIccbZNX31xYNdcFWj5q5MJ5aTsFQg2WS6QCDC9cdBkcbX1gblLrs4piDDTg-JIcdis2AmghljPHuQuu6t5YIddSRRkZLjZEDgxyJZF0MT4kB4VQf4jAVDjikJ0YY6MWQQ7IPpaGYCNS58LAL6LmAHQ1kyfGFyQzHoPK6Lb9MVh086SBCE2_okQYbbITxQg3sgoACFjHEsAMITKThRh14gICHel_M9PS-OtzLbgogHBHwGm-8cNqCMcUAgppylGHGG3i84PVYh80rghNPkPWGzGPYjTdZbNhdhBPKlmHHF22zQRF3I81gA0n_ynFGZjrsd9NDBx0uhhwLcYy54V-08QYZk6lX0XDYMvTQGwpV_i3ceSx0rghk5EE5HXLUUYa-bstGm224JfdsGNFOW-21L5B1R0YG0z0Q8zfC_NAc-2Z0LR1h0LF3C3W4kQYdT9ksn3t6U38WQzZtJ5jjn9Fu90FfjC8DWXS0QdENpblko2AP1T8_afibgf6GUgMZPAwyiCtDX76Qvfvlz18EfAjowsAGhNChdVuIQWVU5C2IiOEvtHPbT9gwEbYEjmCHGQ0M-qCAgAA%3D&s=68f05da67024e01475f56ce3af37d25bcf8991135378b189f146f41353e1140b1713930035&w=t&r=1&d=215&priv=true IP176.9.61.214:443 ASN#24940 Hetzner Online GmbH
Requested byhttps://tsyndicate.com/iframes2/0246aee575494bc89de6d47f4c0ca63d.html?keywords=sicantik.pro%20Video%20viral%20Streaming%20terbarukan%20Barat%20Indo%20Jepang%20Korea%2CVk%20live%20periscope%2016x16%20picture%2CVk%20live%20periscope%2016x16%20picture&adb=0&clientjs=1&w=1280&h=1024&tz=0 CertificateIssuerLet's Encrypt Subjecttsyndicate.com FingerprintF5:9F:1F:89:8F:08:CD:46:43:4B:55:0A:42:66:52:21:16:57:43:31 ValidityFri, 12 Apr 2024 09:06:37 GMT - Thu, 11 Jul 2024 09:06:36 GMT
File typeASCII text, with no line terminators Hash0959ba36d476b6dc1994ba3c678b07c4 d30b94da72daa02766965206a85b7e0356375f5e 897410b87e27e3dfba3a7d6caab315a5e69cc941bb96d91fc74878a9b051843a
GET /api/v1/p/p.js?p=APeIQFMmDJkycuaI0DEjBgsRYcbQWehQBJ0zCyGOEUMjzA0zOVrcwAEjJI0cNMS0yBEmx4wWMWDYoFEGBo4bN2rYCCPiYZg6YzLCmHGjDA4zYkLmMGOjTAsaH820CBOmjI0WMmiMuQFjDA4aOKrC6AmRjB2KUGPgeAinjpiFOWTMkOsTDpyFUGnQqDgHzkQdNGbUKIkjx8Mxbe7qqIGSRkmfZMwslHHjoRg3bhYKvpGjsI2Hbdxg1BFjrgwYbEOPtlFj78M6MTKioUMHzhwdL16ceeMCD5s0duSQkeNizJs2L-a0CSOn9hs4L8bYyFHaDIwYg2HQqHFjDAwxZMTgYFzUBhkaMnDsbD0mhgwzOMi0Pz0mjEz7YcTIGHxjxtzCEVH1Qx1zIJQEGT2QERMMZtwQWQxizDAeZWMwZoYM9sUwhlU1xCcGUjiIMd10J83XHg3TxTCTGY7hoKKDHWkYBhd1wACDDDbM8UYdcmx4YA-M6VUSjTbi2EYZbYhhIIJoIBFHHDnEEcMVbVQRxBp6xFEHEmfgIcR2VVxRxhQ4GIEEFXUYkYYcMShRgx1ShCEFEWUIYYYUVrhBBhNFtBEFFi0YwUYUbBDRxp1XBEHGGVe4oUcdRWxEphhMxJSEFEOcoccYajQBxxtIkIFGDWLYEYQbT7BRAxxIDFHEEDSkAcMcVMBwxhdnVJEEEVJUkQaRN9oARww9BDZYZzmQRcZxGc2RRn1u0JHGGi7AIccbZNX31xYNdcFWj5q5MJ5aTsFQg2WS6QCDC9cdBkcbX1gblLrs4piDDTg-JIcdis2AmghljPHuQuu6t5YIddSRRkZLjZEDgxyJZF0MT4kB4VQf4jAVDjikJ0YY6MWQQ7IPpaGYCNS58LAL6LmAHQ1kyfGFyQzHoPK6Lb9MVh086SBCE2_okQYbbITxQg3sgoACFjHEsAMITKThRh14gICHel_M9PS-OtzLbgogHBHwGm-8cNqCMcUAgppylGHGG3i84PVYh80rghNPkPWGzGPYjTdZbNhdhBPKlmHHF22zQRF3I81gA0n_ynFGZjrsd9NDBx0uhhwLcYy54V-08QYZk6lX0XDYMvTQGwpV_i3ceSx0rghk5EE5HXLUUYa-bstGm224JfdsGNFOW-21L5B1R0YG0z0Q8zfC_NAc-2Z0LR1h0LF3C3W4kQYdT9ksn3t6U38WQzZtJ5jjn9Fu90FfjC8DWXS0QdENpblko2AP1T8_afibgf6GUgMZPAwyiCtDX76Qvfvlz18EfAjowsAGhNChdVuIQWVU5C2IiOEvtHPbT9gwEbYEjmCHGQ0M-qCAgAA%3D&s=68f05da67024e01475f56ce3af37d25bcf8991135378b189f146f41353e1140b1713930035&w=t&r=1&d=215&priv=true HTTP/1.1
Host: pxl.tsyndicate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tsyndicate.com/
Cookie: ts_uid=9fc90fb4-7f01-4b1b-abf8-a8828ba42199; bfq=APeIECNCx5YZNW7kwJHDRhcWIsYU3CLjoYgyE2PciEEDRgwbNGbE6NJH
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 24 Apr 2024 03:40:35 GMT
content-type: text/plain; charset=utf-8
content-length: 24
x-robots-tag: noindex, nofollow
X-Firefox-Spdy: h2
|
|
| cdn.creative-bars1.com/sb/chat/mob/ssp/1/js/script.js | 104.21.70.253 | 200 OK | 382 B |
URL GET HTTP/3cdn.creative-bars1.com/sb/chat/mob/ssp/1/js/script.js IP104.21.70.253:443
Requested byhttps://sicantik.pro/video/vk-live-periscope-16x16-picture/ CertificateIssuerGoogle Trust Services LLC Subjectcreative-bars1.com Fingerprint3D:29:39:2C:F1:E5:C6:EF:54:F5:70:B5:CF:A8:C2:75:4D:89:72:13 ValidityMon, 15 Apr 2024 15:02:18 GMT - Sun, 14 Jul 2024 15:02:17 GMT
File typeASCII text, with very long lines (411), with no line terminators Hash9ffae600059bf4e6adb35ebb274ae385 6130e466c04551baa2a5d650e6bd5a87daba73a7 a7d15e051fb3d3c31494683306bb7752478354894825b110d26d333cbeaaeb39
GET /sb/chat/mob/ssp/1/js/script.js HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://sicantik.pro
DNT: 1
Connection: keep-alive
Referer: https://sicantik.pro/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 24 Apr 2024 03:40:39 GMT
content-type: application/javascript
last-modified: Mon, 21 Feb 2022 08:25:08 GMT
etag: W/"62134c64-17e"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xyQXX4vCLpgDTlw0d20qGGMcGORtpQQkYL3I28TqKmhdR4OfmFmX1Nk%2Fbj%2Fh9vhLBs3T%2BNV0tFPI%2FyAkClCBKqbqGEft5Vz2eU%2B6ZY6jyqnoyujXvaJRr7NVFdVzMPPW0WzKNveiglTr"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879312bb5f49b518-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| sicantik.pro/wp-content/themes/retrotube/assets/js/lazyload.js | 104.21.71.64 | 200 OK | 5.8 kB |
URL GET HTTP/3sicantik.pro/wp-content/themes/retrotube/assets/js/lazyload.js IP104.21.71.64:443
Requested byhttps://sicantik.pro/video/vk-live-periscope-16x16-picture/ CertificateIssuerGoogle Trust Services LLC Subjectsicantik.pro FingerprintC5:23:EF:A4:D1:09:03:7C:51:52:DC:24:7C:20:A9:1D:38:31:3E:32 ValidityFri, 15 Mar 2024 07:05:18 GMT - Thu, 13 Jun 2024 07:05:17 GMT
File typeJavaScript source, ASCII text, with very long lines (5897), with no line terminators Hashdf6d1e6c2c8f32d0d77c43c6498df5c4 24376f92d546b43949b30261656f2aa5e15657b5 5bb298cb36c3785b2a1d28ca6db6c30403eb7690c440dd4f3c25f6cbfeb3101b
GET /wp-content/themes/retrotube/assets/js/lazyload.js HTTP/1.1
Host: sicantik.pro
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sicantik.pro/video/vk-live-periscope-16x16-picture/
Cookie: bnState_1998535={"impressions":1,"delayStarted":0}; _lscache_vary=13c9df61d6ee8b9b08b77960336b8f8e
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 24 Apr 2024 03:40:32 GMT
content-type: application/javascript
cache-control: max-age=43200
cf-bgj: minify
cf-polished: origSize=5755
etag: W/"6623a6c6-167b"
expires: Wed, 24 Apr 2024 01:01:14 GMT
last-modified: Sat, 20 Apr 2024 11:28:06 GMT
vary: Accept-Encoding
cf-cache-status: HIT
age: 23013
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=DBasOdXVe%2BgebhdmHLv4pImtAM5zI6vqGE3iOjXmDTVv8nQLmK1aS0wMLQrd2e9NhfoiISwZ5nJSLwdLbnGwfOIj25Ba%2FP9ZptUVdjiadfWkUIGSoI8lRStkpwJOt3I%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8793128ecee00b61-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| livid-inspector.com/aAWBZ.yCP_2EQF9GMHT-cJxKMLzMk_zOMPDQARz-MTzUcVxWM_jYMZwaNbj-QdxeOfSgZ_tidjWkxl0-anXoRphqZ_2sJthubvm-5xlyczjA1_0CcDnEVFl-JHnIpJvKb_mMVNpOZPD-0R0SOTTUA_2WNXzYUZz-?iframeId=caztqr | 88.85.69.211 | 200 OK | 0 B |
URL GET HTTP/2livid-inspector.com/aAWBZ.yCP_2EQF9GMHT-cJxKMLzMk_zOMPDQARz-MTzUcVxWM_jYMZwaNbj-QdxeOfSgZ_tidjWkxl0-anXoRphqZ_2sJthubvm-5xlyczjA1_0CcDnEVFl-JHnIpJvKb_mMVNpOZPD-0R0SOTTUA_2WNXzYUZz-?iframeId=caztqr IP88.85.69.211:443
Requested byhttps://sicantik.pro/video/vk-live-periscope-16x16-picture/ CertificateIssuerLet's Encrypt Subjectlivid-inspector.com FingerprintAC:D9:4D:E1:0F:4A:E2:20:BB:9E:62:7B:B5:6A:81:28:73:FD:66:A5 ValiditySun, 14 Apr 2024 01:52:12 GMT - Sat, 13 Jul 2024 01:52:11 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /aAWBZ.yCP_2EQF9GMHT-cJxKMLzMk_zOMPDQARz-MTzUcVxWM_jYMZwaNbj-QdxeOfSgZ_tidjWkxl0-anXoRphqZ_2sJthubvm-5xlyczjA1_0CcDnEVFl-JHnIpJvKb_mMVNpOZPD-0R0SOTTUA_2WNXzYUZz-?iframeId=caztqr HTTP/1.1
Host: livid-inspector.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sicantik.pro/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 24 Apr 2024 03:40:33 GMT
content-type: text/html;charset=UTF-8
content-length: 0
expires: Mon, 26 Jul 2011 05:00:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
accept-ch: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-WoW64
x-content-type-options: nosniff
X-Firefox-Spdy: h2
|
|
| divetroubledloud.com/pixel/sbls?bv=24.6.6370&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fchat%2Fmob%2Fssp%2F1%2Fcss%2Fanimate.css&l=79313&fd=46 | 172.240.127.234 | 200 OK | 0 B |
URL GET HTTP/1.1divetroubledloud.com/pixel/sbls?bv=24.6.6370&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fchat%2Fmob%2Fssp%2F1%2Fcss%2Fanimate.css&l=79313&fd=46 IP172.240.127.234:443
Requested byhttps://sicantik.pro/video/vk-live-periscope-16x16-picture/ CertificateIssuerLet's Encrypt Subjectdivetroubledloud.com FingerprintE2:97:B0:3F:E4:09:4D:50:49:F3:B5:05:BA:3D:B5:4C:5E:98:11:6D ValidityTue, 23 Apr 2024 10:57:50 GMT - Mon, 22 Jul 2024 10:57:49 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pixel/sbls?bv=24.6.6370&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fchat%2Fmob%2Fssp%2F1%2Fcss%2Fanimate.css&l=79313&fd=46 HTTP/1.1
Host: divetroubledloud.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sicantik.pro/
Cookie: u_pl=21390183; uid_id2=bcb1779e-362f-437c-afb1-ba89261c0459:2:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Wed, 24 Apr 2024 03:40:39 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
|
|
| sicantik.pro/wp-content/themes/retrotube/assets/stylesheets/font-awesome/css/font-awesome.min.css | 104.21.71.64 | 200 OK | 31 kB |
URL GET HTTP/3sicantik.pro/wp-content/themes/retrotube/assets/stylesheets/font-awesome/css/font-awesome.min.css IP104.21.71.64:443
Requested byhttps://sicantik.pro/video/vk-live-periscope-16x16-picture/ CertificateIssuerGoogle Trust Services LLC Subjectsicantik.pro FingerprintC5:23:EF:A4:D1:09:03:7C:51:52:DC:24:7C:20:A9:1D:38:31:3E:32 ValidityFri, 15 Mar 2024 07:05:18 GMT - Thu, 13 Jun 2024 07:05:17 GMT
File typeASCII text, with very long lines (30837) Hash269550530cc127b6aa5a35925a7de6ce 512c7d79033e3028a9be61b540cf1a6870c896f8 799aeb25cc0373fdee0e1b1db7ad6c2f6a0e058dfadaa3379689f583213190bd
GET /wp-content/themes/retrotube/assets/stylesheets/font-awesome/css/font-awesome.min.css HTTP/1.1
Host: sicantik.pro
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sicantik.pro/video/vk-live-periscope-16x16-picture/
Cookie: bnState_1998535={"impressions":1,"delayStarted":0}; _lscache_vary=13c9df61d6ee8b9b08b77960336b8f8e
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 24 Apr 2024 03:40:32 GMT
content-type: text/css
last-modified: Sat, 20 Apr 2024 11:28:06 GMT
vary: Accept-Encoding
etag: W/"6623a6c6-7918"
expires: Wed, 24 Apr 2024 01:01:14 GMT
cache-control: max-age=43200
cf-cache-status: HIT
age: 23014
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=M1zAqsbcDCjxHMD2PnpQSkRVS%2Bsv0fOE4S9tF8nppO%2BMCdUpJZi9beH8%2Fc%2BhQJNTC%2BQ%2BtPBS1B9sltJD96xPR16i962Wve%2F6oER1mKNR3KJEHtZeQX%2Bu7y9%2BgdeHsS8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8793128eced70b61-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| sicantik.pro/wp-content/plugins/advanced-ads/public/assets/js/advanced.min.js | 104.21.71.64 | 200 OK | 7.6 kB |
URL GET HTTP/3sicantik.pro/wp-content/plugins/advanced-ads/public/assets/js/advanced.min.js IP104.21.71.64:443
Requested byhttps://sicantik.pro/video/vk-live-periscope-16x16-picture/ CertificateIssuerGoogle Trust Services LLC Subjectsicantik.pro FingerprintC5:23:EF:A4:D1:09:03:7C:51:52:DC:24:7C:20:A9:1D:38:31:3E:32 ValidityFri, 15 Mar 2024 07:05:18 GMT - Thu, 13 Jun 2024 07:05:17 GMT
File typeJavaScript source, ASCII text, with very long lines (7829), with no line terminators Hash4349251c0193fbbdb1269cbeca1d0e85 de6b8597cafd8ae306ecbac993e6652824f0f045 8241e2cc994d17255e2aeef0db9167bb2d269e69debb0c3f5a6fda90d2a7d6ca
GET /wp-content/plugins/advanced-ads/public/assets/js/advanced.min.js HTTP/1.1
Host: sicantik.pro
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sicantik.pro/video/vk-live-periscope-16x16-picture/
Cookie: bnState_1998535={"impressions":1,"delayStarted":0}; _lscache_vary=13c9df61d6ee8b9b08b77960336b8f8e
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 24 Apr 2024 03:40:32 GMT
content-type: application/javascript
last-modified: Sat, 20 Apr 2024 11:28:04 GMT
vary: Accept-Encoding
etag: W/"6623a6c4-1d9d"
expires: Wed, 24 Apr 2024 00:15:29 GMT
cache-control: max-age=43200
cf-cache-status: HIT
age: 22018
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=DySMZA%2F7DQaJ17GkawaUquDRb9itS8mqq9%2Frc8qPEBl9aUcHJCqkG55XQCjo10vEWWCZHJNKkDb5Caseg5yCvgCIevdcqLFLK2AyMpC5W4Ck7AwJIQM5lb0ctUcuwLc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8793128ecedb0b61-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| sicantik.pro/wp-content/themes/retrotube/assets/js/navigation.js | 104.21.71.64 | 200 OK | 1.4 kB |
URL GET HTTP/3sicantik.pro/wp-content/themes/retrotube/assets/js/navigation.js IP104.21.71.64:443
Requested byhttps://sicantik.pro/video/vk-live-periscope-16x16-picture/ CertificateIssuerGoogle Trust Services LLC Subjectsicantik.pro FingerprintC5:23:EF:A4:D1:09:03:7C:51:52:DC:24:7C:20:A9:1D:38:31:3E:32 ValidityFri, 15 Mar 2024 07:05:18 GMT - Thu, 13 Jun 2024 07:05:17 GMT
File typeJavaScript source, ASCII text, with very long lines (1373), with no line terminators Hash7ea2a9fcd1063a76eb3d66b7907ecc1b 73f3ec71fd5fc56446bfea8a7dc922b546dbd5f7 a996ba80cb6cab85a1c06cf4c613cfefa898cec5ef143985dda0f65c37224439
GET /wp-content/themes/retrotube/assets/js/navigation.js HTTP/1.1
Host: sicantik.pro
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sicantik.pro/video/vk-live-periscope-16x16-picture/
Cookie: bnState_1998535={"impressions":1,"delayStarted":0}; _lscache_vary=13c9df61d6ee8b9b08b77960336b8f8e
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 24 Apr 2024 03:40:32 GMT
content-type: application/javascript
cache-control: max-age=43200
cf-bgj: minify
cf-polished: origSize=4500
etag: W/"6623a6c6-1194"
expires: Wed, 24 Apr 2024 01:01:14 GMT
last-modified: Sat, 20 Apr 2024 11:28:06 GMT
vary: Accept-Encoding
cf-cache-status: HIT
age: 23013
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RdCz1AYce6Ps3M0GLYahe2trmTmhrlgX2TK0LGlwFXctUcgY1isoYg2EjNQCD7kigC8%2BmrvcNSFdI0KsL4QQOyWPQxJ8CxEnVWxmjJtwTlghPk7ZPBaPSO7VB2tMR4U%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8793128ecedd0b61-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| go.mnaspm.com/api/models?landing=WidgetV4Universal&masterSmartpopId=1605&quality=240p&smartpopId=1062&sortBy=recommended&tag=girls&webp=1&forceClient=1&stripcashR=0&limit=2&usePreroll=0 | 104.18.40.50 | 200 OK | 3.8 kB |
URL GET HTTP/3go.mnaspm.com/api/models?landing=WidgetV4Universal&masterSmartpopId=1605&quality=240p&smartpopId=1062&sortBy=recommended&tag=girls&webp=1&forceClient=1&stripcashR=0&limit=2&usePreroll=0 IP104.18.40.50:443
Requested byhttps://creative.mnaspm.com/widgets/v4/Universal?action=sbSignupWithModel&campaignId=c6913f01500457c0bdb8597e6d4286a54c12f8dc120ca06a0ab250733289acaa&campaignType=smartpop&creativeId=6c0b1b4a99ba447f4bead9b76a7621269ec060b2297874834d7b37047f348300&iterationId=868050&masterSmartpopId=1605&memberId=1iKm4C12dUFz0NsKwm42eoM25rdtnA73unIs2Bar773UB24TtkrjXwYPwhlevI3sx82-XQWbEXNv9WZUTSSexgIncQnJZSU4z0uLQsa71yynA5rQ_gUIDRUi&mlView=1&p1=4350989&quality=240p&ruleId=3&smartpopId=1062&sortBy=recommended&sourceId=594409&tag=girls&usePreroll=0&userId=d100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca&variationId=33204&webp=1 CertificateIssuerGoogle Trust Services LLC Subjectmnaspm.com Fingerprint41:FC:20:C5:2D:89:14:17:87:EB:2D:BA:2E:DE:61:87:1E:53:19:CE ValiditySun, 14 Apr 2024 17:19:29 GMT - Sat, 13 Jul 2024 17:19:28 GMT
File typetroff or preprocessor input, ASCII text, with very long lines (4062), with no line terminators Hash1bf8d82cb67296c2214ad58e0637327c 2690e49c149b5888603a64fd02050cdbeb5f200d cd906ea98efac24c38f94cdc1cea5a3611a1e290229294dddacec34a2e4fa2b3
GET /api/models?landing=WidgetV4Universal&masterSmartpopId=1605&quality=240p&smartpopId=1062&sortBy=recommended&tag=girls&webp=1&forceClient=1&stripcashR=0&limit=2&usePreroll=0 HTTP/1.1
Host: go.mnaspm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://creative.mnaspm.com/
Origin: https://creative.mnaspm.com
DNT: 1
Connection: keep-alive
Cookie: __cflb=0H28upDCGznfDm9XVEL2Ezfg4QRCzSiTsMVahcbKCmr
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 24 Apr 2024 03:40:35 GMT
content-type: application/json
access-control-allow-origin: https://creative.mnaspm.com
access-control-allow-credentials: true
vary: Origin, Accept-Encoding
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64
last-modified: Wed, 24 Apr 2024 03:40:35 GMT
cf-cache-status: HIT
server: cloudflare
cf-ray: 879312a369b15699-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| sicantik.pro/wp-content/themes/retrotube/style.css | 104.21.71.64 | 200 OK | 53 kB |
URL GET HTTP/3sicantik.pro/wp-content/themes/retrotube/style.css IP104.21.71.64:443
Requested byhttps://sicantik.pro/video/vk-live-periscope-16x16-picture/ CertificateIssuerGoogle Trust Services LLC Subjectsicantik.pro FingerprintC5:23:EF:A4:D1:09:03:7C:51:52:DC:24:7C:20:A9:1D:38:31:3E:32 ValidityFri, 15 Mar 2024 07:05:18 GMT - Thu, 13 Jun 2024 07:05:17 GMT
File typeASCII text, with very long lines (52553), with no line terminators Hashd7e1d25af35cbeaeda2bd4167f20793f 3f66eb3cb08d20e9dc1629ae3fc83ffe23270a32 1fb6136323a89965592bf655d7542d97eb58f4b4c2feb473895374def3eac70a
GET /wp-content/themes/retrotube/style.css HTTP/1.1
Host: sicantik.pro
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sicantik.pro/video/vk-live-periscope-16x16-picture/
Cookie: bnState_1998535={"impressions":1,"delayStarted":0}; _lscache_vary=13c9df61d6ee8b9b08b77960336b8f8e
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 24 Apr 2024 03:40:32 GMT
content-type: text/css
cache-control: max-age=43200
cf-bgj: minify
cf-polished: origSize=75271
etag: W/"6623a6c6-12607"
expires: Wed, 24 Apr 2024 01:01:14 GMT
last-modified: Sat, 20 Apr 2024 11:28:06 GMT
vary: Accept-Encoding
cf-cache-status: HIT
age: 23015
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=eC5WhQrbv6J9lu%2BUQJ%2Fk%2BZNFLb4Xw1yfQWF5ilyb%2FSoQvClGne%2BYruFoMkvibJMhnTuXiFnT6UWu4riyN8TdtSPpCWGcdCQRgbd6NtFlPjGwk4Lccz87WaVWQwkN61M%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8793128eced80b61-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| go.mnaspm.com/config?url=https%3A%2F%2Fcreative.mnaspm.com%2Fwidgets%2Fv4%2FUniversal%3Faction%3DsbSignupWithModel%26campaignId%3Dc6913f01500457c0bdb8597e6d4286a54c12f8dc120ca06a0ab250733289acaa%26campaignType%3Dsmartpop%26creativeId%3D6c0b1b4a99ba447f4bead9b76a7621269ec060b2297874834d7b37047f348300%26iterationId%3D868050%26masterSmartpopId%3D1605%26memberId%3D1iKm4C12dUFz0NsKwm42eoM25rdtnA73unIs2Bar773UB24TtkrjXwYPwhlevI3sx82-XQWbEXNv9WZUTSSexgIncQnJZSU4z0uLQsa71yynA5rQ_gUIDRUi%26mlView%3D1%26p1%3D4350989%26quality%3D240p%26ruleId%3D3%26smartpopId%3D1062%26sortBy%3Drecommended%26sourceId%3D594409%26tag%3Dgirls%26usePreroll%3D0%26userId%3Dd100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca%26variationId%3D33204%26webp%3D1 | 104.18.40.50 | 200 OK | 6.1 kB |
URL GET HTTP/3go.mnaspm.com/config?url=https%3A%2F%2Fcreative.mnaspm.com%2Fwidgets%2Fv4%2FUniversal%3Faction%3DsbSignupWithModel%26campaignId%3Dc6913f01500457c0bdb8597e6d4286a54c12f8dc120ca06a0ab250733289acaa%26campaignType%3Dsmartpop%26creativeId%3D6c0b1b4a99ba447f4bead9b76a7621269ec060b2297874834d7b37047f348300%26iterationId%3D868050%26masterSmartpopId%3D1605%26memberId%3D1iKm4C12dUFz0NsKwm42eoM25rdtnA73unIs2Bar773UB24TtkrjXwYPwhlevI3sx82-XQWbEXNv9WZUTSSexgIncQnJZSU4z0uLQsa71yynA5rQ_gUIDRUi%26mlView%3D1%26p1%3D4350989%26quality%3D240p%26ruleId%3D3%26smartpopId%3D1062%26sortBy%3Drecommended%26sourceId%3D594409%26tag%3Dgirls%26usePreroll%3D0%26userId%3Dd100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca%26variationId%3D33204%26webp%3D1 IP104.18.40.50:443
Requested byhttps://creative.mnaspm.com/widgets/v4/Universal?action=sbSignupWithModel&campaignId=c6913f01500457c0bdb8597e6d4286a54c12f8dc120ca06a0ab250733289acaa&campaignType=smartpop&creativeId=6c0b1b4a99ba447f4bead9b76a7621269ec060b2297874834d7b37047f348300&iterationId=868050&masterSmartpopId=1605&memberId=1iKm4C12dUFz0NsKwm42eoM25rdtnA73unIs2Bar773UB24TtkrjXwYPwhlevI3sx82-XQWbEXNv9WZUTSSexgIncQnJZSU4z0uLQsa71yynA5rQ_gUIDRUi&mlView=1&p1=4350989&quality=240p&ruleId=3&smartpopId=1062&sortBy=recommended&sourceId=594409&tag=girls&usePreroll=0&userId=d100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca&variationId=33204&webp=1 CertificateIssuerGoogle Trust Services LLC Subjectmnaspm.com Fingerprint41:FC:20:C5:2D:89:14:17:87:EB:2D:BA:2E:DE:61:87:1E:53:19:CE ValiditySun, 14 Apr 2024 17:19:29 GMT - Sat, 13 Jul 2024 17:19:28 GMT
File typeASCII text, with very long lines (7997), with no line terminators Hash3b371947add80f928784ef2ddb31a867 0c4d3b4b25af74159ce85a8f3dd8ba5044c43825 ada28f98f326bd9514cd80e0e1e3699448f5e69fe9b22a9b2191a711579e1545
GET /config?url=https%3A%2F%2Fcreative.mnaspm.com%2Fwidgets%2Fv4%2FUniversal%3Faction%3DsbSignupWithModel%26campaignId%3Dc6913f01500457c0bdb8597e6d4286a54c12f8dc120ca06a0ab250733289acaa%26campaignType%3Dsmartpop%26creativeId%3D6c0b1b4a99ba447f4bead9b76a7621269ec060b2297874834d7b37047f348300%26iterationId%3D868050%26masterSmartpopId%3D1605%26memberId%3D1iKm4C12dUFz0NsKwm42eoM25rdtnA73unIs2Bar773UB24TtkrjXwYPwhlevI3sx82-XQWbEXNv9WZUTSSexgIncQnJZSU4z0uLQsa71yynA5rQ_gUIDRUi%26mlView%3D1%26p1%3D4350989%26quality%3D240p%26ruleId%3D3%26smartpopId%3D1062%26sortBy%3Drecommended%26sourceId%3D594409%26tag%3Dgirls%26usePreroll%3D0%26userId%3Dd100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca%26variationId%3D33204%26webp%3D1 HTTP/1.1
Host: go.mnaspm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://creative.mnaspm.com/
Origin: https://creative.mnaspm.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 24 Apr 2024 03:40:35 GMT
content-type: application/json
access-control-allow-origin: https://creative.mnaspm.com
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64
last-modified: Wed, 24 Apr 2024 03:40:35 GMT
cf-cache-status: MISS
set-cookie: __cflb=02DiuDFRFiBZBvMSLtqFVkgfjmU48Q4QEbG6towdmKke8; SameSite=None; Secure; path=/; expires=Thu, 25-Apr-24 03:40:35 GMT; HttpOnly
vary: Accept-Encoding
server: cloudflare
cf-ray: 879312a2f9865699-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| go.mnaspm.com/api/models?landing=WidgetV4Universal&masterSmartpopId=1605&quality=240p&smartpopId=1062&sortBy=recommended&tag=girls&webp=1&forceClient=1&stripcashR=0&limit=2&usePreroll=0 | 104.18.40.50 | 200 OK | 3.8 kB |
URL GET HTTP/3go.mnaspm.com/api/models?landing=WidgetV4Universal&masterSmartpopId=1605&quality=240p&smartpopId=1062&sortBy=recommended&tag=girls&webp=1&forceClient=1&stripcashR=0&limit=2&usePreroll=0 IP104.18.40.50:443
Requested byhttps://creative.mnaspm.com/widgets/v4/Universal?action=sbSignupWithModel&campaignId=c6913f01500457c0bdb8597e6d4286a54c12f8dc120ca06a0ab250733289acaa&campaignType=smartpop&creativeId=6c0b1b4a99ba447f4bead9b76a7621269ec060b2297874834d7b37047f348300&iterationId=868050&masterSmartpopId=1605&memberId=hHqq9q1WmUAkzquHgxB45UWeS8FHTuFir1J5vRaRDeBfRVndLEmQX-FlQlDmfRWAdgWnzuEcbS8bL10IRCgzcjMpoHdh5bvAnOl5pHCEC4i0sT0g_gUIDRUi&mlView=1&p1=4350989&quality=240p&ruleId=3&smartpopId=1062&sortBy=recommended&sourceId=594409&tag=girls&usePreroll=0&userId=d100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca&variationId=33204&webp=1 CertificateIssuerGoogle Trust Services LLC Subjectmnaspm.com Fingerprint41:FC:20:C5:2D:89:14:17:87:EB:2D:BA:2E:DE:61:87:1E:53:19:CE ValiditySun, 14 Apr 2024 17:19:29 GMT - Sat, 13 Jul 2024 17:19:28 GMT
File typetroff or preprocessor input, ASCII text, with very long lines (4062), with no line terminators Hash1bf8d82cb67296c2214ad58e0637327c 2690e49c149b5888603a64fd02050cdbeb5f200d cd906ea98efac24c38f94cdc1cea5a3611a1e290229294dddacec34a2e4fa2b3
GET /api/models?landing=WidgetV4Universal&masterSmartpopId=1605&quality=240p&smartpopId=1062&sortBy=recommended&tag=girls&webp=1&forceClient=1&stripcashR=0&limit=2&usePreroll=0 HTTP/1.1
Host: go.mnaspm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://creative.mnaspm.com/
Origin: https://creative.mnaspm.com
DNT: 1
Connection: keep-alive
Cookie: __cflb=0H28upDCGznfDm9XVEL2Ezfg4QRCzSiTsMVahcbKCmr
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 24 Apr 2024 03:40:35 GMT
content-type: application/json
access-control-allow-origin: https://creative.mnaspm.com
access-control-allow-credentials: true
vary: Origin, Accept-Encoding
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64
last-modified: Wed, 24 Apr 2024 03:34:51 GMT
cf-cache-status: EXPIRED
server: cloudflare
cf-ray: 879312a329995699-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| go.mnaspm.com/event/ml | 104.18.40.50 | 200 OK | 47 B |
IP104.18.40.50:443
Requested byhttps://creative.mnaspm.com/widgets/v4/Universal?action=sbSignupWithModel&campaignId=c6913f01500457c0bdb8597e6d4286a54c12f8dc120ca06a0ab250733289acaa&campaignType=smartpop&creativeId=6c0b1b4a99ba447f4bead9b76a7621269ec060b2297874834d7b37047f348300&iterationId=868050&masterSmartpopId=1605&memberId=1iKm4C12dUFz0NsKwm42eoM25rdtnA73unIs2Bar773UB24TtkrjXwYPwhlevI3sx82-XQWbEXNv9WZUTSSexgIncQnJZSU4z0uLQsa71yynA5rQ_gUIDRUi&mlView=1&p1=4350989&quality=240p&ruleId=3&smartpopId=1062&sortBy=recommended&sourceId=594409&tag=girls&usePreroll=0&userId=d100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca&variationId=33204&webp=1 CertificateIssuerGoogle Trust Services LLC Subjectmnaspm.com Fingerprint41:FC:20:C5:2D:89:14:17:87:EB:2D:BA:2E:DE:61:87:1E:53:19:CE ValiditySun, 14 Apr 2024 17:19:29 GMT - Sat, 13 Jul 2024 17:19:28 GMT
File typeASCII text, with no line terminators Hashc8d680ccc95fd0850faf9357f65bb15b ede7b4a88ff020697e8ceb0637ee56ff519c5733 34ab7f4442375b011493fd1f67ae33c0b665b87e40e2ae324f9f2c1191d6d4fd
POST /event/ml HTTP/1.1
Host: go.mnaspm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://creative.mnaspm.com/
Content-Type: text/plain;charset=UTF-8
Content-Length: 291
Origin: https://creative.mnaspm.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 24 Apr 2024 03:40:36 GMT
content-type: application/json
access-control-allow-origin: https://creative.mnaspm.com
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64
cf-cache-status: DYNAMIC
set-cookie: __cflb=02DiuDFRFiBZBvMSLtrth8k2gcTaYMvv6y4kbt33Pbt52; SameSite=None; Secure; path=/; expires=Thu, 25-Apr-24 03:40:36 GMT; HttpOnly
server: cloudflare
cf-ray: 879312a5aa9d5699-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| divetroubledloud.com/pixel/sbs?c=1 | 192.243.59.13 | 200 OK | 0 B |
URL GET HTTP/1.1divetroubledloud.com/pixel/sbs?c=1 IP192.243.59.13:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://sicantik.pro/video/vk-live-periscope-16x16-picture/ CertificateIssuerLet's Encrypt Subjectdivetroubledloud.com FingerprintE2:97:B0:3F:E4:09:4D:50:49:F3:B5:05:BA:3D:B5:4C:5E:98:11:6D ValidityTue, 23 Apr 2024 10:57:50 GMT - Mon, 22 Jul 2024 10:57:49 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pixel/sbs?c=1 HTTP/1.1
Host: divetroubledloud.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sicantik.pro/
Cookie: u_pl=21390183; uid_id2=bcb1779e-362f-437c-afb1-ba89261c0459:2:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Wed, 24 Apr 2024 03:40:40 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
|
|
| livid-inspector.com/YE2_xGpHZ.WI5J0-ZLGMFN0OY_TQ9RyScTm-lVkWPXTYU_5aNbzcUd2-MfTgch3iY_zkJljmZnT-FpiqZrmsY_yuOvGwMx4-MzGAVBkCZ_WEIF5GMHm-UJ1KZLDMQ_wO | 88.85.69.211 | 200 OK | 0 B |
URL POST HTTP/2livid-inspector.com/YE2_xGpHZ.WI5J0-ZLGMFN0OY_TQ9RyScTm-lVkWPXTYU_5aNbzcUd2-MfTgch3iY_zkJljmZnT-FpiqZrmsY_yuOvGwMx4-MzGAVBkCZ_WEIF5GMHm-UJ1KZLDMQ_wO IP88.85.69.211:443
Requested byhttps://sicantik.pro/video/vk-live-periscope-16x16-picture/ CertificateIssuerLet's Encrypt Subjectlivid-inspector.com FingerprintAC:D9:4D:E1:0F:4A:E2:20:BB:9E:62:7B:B5:6A:81:28:73:FD:66:A5 ValiditySun, 14 Apr 2024 01:52:12 GMT - Sat, 13 Jul 2024 01:52:11 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /YE2_xGpHZ.WI5J0-ZLGMFN0OY_TQ9RyScTm-lVkWPXTYU_5aNbzcUd2-MfTgch3iY_zkJljmZnT-FpiqZrmsY_yuOvGwMx4-MzGAVBkCZ_WEIF5GMHm-UJ1KZLDMQ_wO HTTP/1.1
Host: livid-inspector.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 72
Origin: https://sicantik.pro
DNT: 1
Connection: keep-alive
Referer: https://sicantik.pro/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 24 Apr 2024 03:40:33 GMT
content-length: 0
pragma: no-cache
accept-ch: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-WoW64
expires: Mon, 26 Jul 2011 05:00:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
x-content-type-options: nosniff
X-Firefox-Spdy: h2
|
|
| fonts.googleapis.com/css?family=Roboto:300,400,700&display=swap | 142.250.74.170 | 200 OK | 7.0 kB |
URL GET HTTP/2fonts.googleapis.com/css?family=Roboto:300,400,700&display=swap IP142.250.74.170:443
Requested byhttps://sicantik.pro/video/vk-live-periscope-16x16-picture/ CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint15:CB:F7:AC:18:3F:DC:1E:F9:4E:94:D1:98:40:40:61:53:17:28:F2 ValidityMon, 18 Mar 2024 20:35:28 GMT - Mon, 10 Jun 2024 20:35:27 GMT
File typeASCII text, with very long lines (7193), with no line terminators Hash16b49a99486594c0b42d9bd7821deb2c 2fb46e5e86d6b37d4497cc04bfd89b3cb33a276a 3f3540952441e06ef81189cf63d46bac242804e386779dbb0cdd78ed10025c21
GET /css?family=Roboto:300,400,700&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 24 Apr 2024 03:40:39 GMT
date: Wed, 24 Apr 2024 03:40:39 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| sicantik.pro/wp-content/uploads/2023/08/Bokep-Indo-Nissa-Bugil-Live-Pamerin-Toket-Bulat.png | 104.21.71.64 | 200 OK | 63 kB |
URL GET HTTP/3sicantik.pro/wp-content/uploads/2023/08/Bokep-Indo-Nissa-Bugil-Live-Pamerin-Toket-Bulat.png IP104.21.71.64:443
Requested byhttps://sicantik.pro/video/vk-live-periscope-16x16-picture/ CertificateIssuerGoogle Trust Services LLC Subjectsicantik.pro FingerprintC5:23:EF:A4:D1:09:03:7C:51:52:DC:24:7C:20:A9:1D:38:31:3E:32 ValidityFri, 15 Mar 2024 07:05:18 GMT - Thu, 13 Jun 2024 07:05:17 GMT
File typePNG image data, 454 x 665, 8-bit colormap, non-interlaced Hashf72e4539c084963fbd5633ae0ac770a6 aa4860f00ab60476bbe9ef79154882f41bfaedb9 85b6ceb86dd7202a4d9d2ef3ac0005b8ca67488221d3241b778722a9bc573936
GET /wp-content/uploads/2023/08/Bokep-Indo-Nissa-Bugil-Live-Pamerin-Toket-Bulat.png HTTP/1.1
Host: sicantik.pro
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sicantik.pro/video/vk-live-periscope-16x16-picture/
Cookie: bnState_1998535={"impressions":1,"delayStarted":0}; _lscache_vary=13c9df61d6ee8b9b08b77960336b8f8e
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 24 Apr 2024 03:40:34 GMT
content-type: image/png
content-length: 62980
last-modified: Mon, 27 Nov 2023 09:47:47 GMT
cache-control: max-age=10368000
expires: max-age=A10368000, public
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6mTndqbP68vviU%2BBqZcjboWf0nMdJ4UXmA7OaXDtTRyRYQlgk%2BzJVUDFp9jj%2BUTxRPdk0BH%2Fs3ESJu14koocEzJXPpibkrr07OxRNYp5co5WtJKbURN3QBtzqsfh1e4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8793129618720b61-OSL
alt-svc: h3=":443"; ma=86400
|
|
| sicantik.pro/wp-admin/admin-ajax.php | 104.21.71.64 | 200 OK | 3.7 kB |
URL POST HTTP/3sicantik.pro/wp-admin/admin-ajax.php IP104.21.71.64:443
Requested byhttps://sicantik.pro/video/vk-live-periscope-16x16-picture/ CertificateIssuerGoogle Trust Services LLC Subjectsicantik.pro FingerprintC5:23:EF:A4:D1:09:03:7C:51:52:DC:24:7C:20:A9:1D:38:31:3E:32 ValidityFri, 15 Mar 2024 07:05:18 GMT - Thu, 13 Jun 2024 07:05:17 GMT
File typeJavaScript source, ASCII text, with very long lines (4029), with no line terminators Hashb0844522a041509481688c34ef312ab6 c972e0a8f73346bb5bee443fb629b320b2291cb7 db9cbf3531966ae3b5f374086f8b4a103e438a033149f43c0b4993b45f7bd032
POST /wp-admin/admin-ajax.php HTTP/1.1
Host: sicantik.pro
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 1974
Origin: https://sicantik.pro
DNT: 1
Connection: keep-alive
Referer: https://sicantik.pro/video/vk-live-periscope-16x16-picture/
Cookie: bnState_1998535={"impressions":1,"delayStarted":0}; _lscache_vary=13c9df61d6ee8b9b08b77960336b8f8e; _ga_906YNDT860=GS1.1.1713930033.1.0.1713930033.0.0.0; _ga=GA1.1.297287176.1713930034
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 24 Apr 2024 03:40:34 GMT
content-type: application/json; charset: utf-8
set-cookie: advanced_ads_visitor=%7B%22vc_cache_reset%22%3A0%7D; expires=Fri, 24-May-2024 03:40:34 GMT; Max-Age=2592000; path=/
access-control-allow-origin: https://sicantik.pro
access-control-allow-credentials: true
x-robots-tag: noindex
x-content-type-options: nosniff
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: no-cache, must-revalidate, max-age=0
referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=E8lt5cRYuHvj7KqR7RZrDII4%2Fg5m2wP%2BeM0V4xvNPCYCayU0SzV%2FolmmWBTw0a%2FerHH06Gt9HywzUP7CujQCfIIlGf205SKnqNAf3tFFvDelBSE8jg1qxM%2F9%2FidLBwQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8793129978fd0b61-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| sicantik.pro/wp-includes/js/jquery/jquery-migrate.min.js | 104.21.71.64 | 200 OK | 14 kB |
URL GET HTTP/3sicantik.pro/wp-includes/js/jquery/jquery-migrate.min.js IP104.21.71.64:443
Requested byhttps://sicantik.pro/video/vk-live-periscope-16x16-picture/ CertificateIssuerGoogle Trust Services LLC Subjectsicantik.pro FingerprintC5:23:EF:A4:D1:09:03:7C:51:52:DC:24:7C:20:A9:1D:38:31:3E:32 ValidityFri, 15 Mar 2024 07:05:18 GMT - Thu, 13 Jun 2024 07:05:17 GMT
File typeJavaScript source, ASCII text, with very long lines (13479) Hash9ffeb32e2d9efbf8f70caabded242267 3ad0c10e501ac2a9bfa18f9cd7e700219b378738 5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89
GET /wp-includes/js/jquery/jquery-migrate.min.js HTTP/1.1
Host: sicantik.pro
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sicantik.pro/video/vk-live-periscope-16x16-picture/
Cookie: bnState_1998535={"impressions":1,"delayStarted":0}; _lscache_vary=13c9df61d6ee8b9b08b77960336b8f8e
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 24 Apr 2024 03:40:32 GMT
content-type: application/javascript
last-modified: Sat, 20 Apr 2024 11:29:20 GMT
vary: Accept-Encoding
etag: W/"6623a710-3509"
expires: Wed, 24 Apr 2024 00:48:02 GMT
cache-control: max-age=43200
cf-cache-status: HIT
age: 23014
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=BegKH2RyXM4XRl2%2F1q1abKoCNn4JxSUjbe2OAzpZcY8dZL6cWJfyBx1hqVdnF3dSYR24pjFRWIw%2BvFhpKgRyaC1vR0qJaJZBcSyW3YbLFe04K3kXMBg8s7tGp6X1Zf8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8793128eceda0b61-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|