| r10.o.lencr.org/ |  23.36.76.249 | | 504 B |
IP23.36.76.249:0 ASN#20940 Akamai International B.V.
Hashbeb9514dd5039f056420be97de2e8462 84d707ea13f9ebd73282b46ca1907bf273e8b441 aca60b59444da84471fdcaa5ee39b4f93b50ec54cc3c4056646a89b4b632bf3e
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "ACA60B59444DA84471FDCAA5EE39B4F93B50EC54CC3C4056646A89B4B632BF3E"
Last-Modified: Sat, 28 Sep 2024 18:50:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15805
Expires: Sun, 29 Sep 2024 22:46:48 GMT
Date: Sun, 29 Sep 2024 18:23:23 GMT
Connection: keep-alive
|
|
| 159.89.198.98/video/yr0kr27/corno-deixou-sua-esposa-puta-ir-para-o-motel-com-o-comedor-poderoso-e-ficou-em-casa-vendo-tudo-pelo-celular |  159.89.198.98 | | 8.5 kB |
URL 159.89.198.98/video/yr0kr27/corno-deixou-sua-esposa-puta-ir-para-o-motel-com-o-comedor-poderoso-e-ficou-em-casa-vendo-tudo-pelo-celular IP159.89.198.98:0 ASN#14061 DIGITALOCEAN-ASN
File typeHTML document, ASCII text, with very long lines (1704), with CRLF, LF line terminators Hash632e46d74f7452a6e78a9650259fc025 f29e7b77a7349107013d43f960f5696e2c5ad69a 3a8370479fea530652e495dbe9819ef772c2e6db18579fdc52410df10e9cb5d5
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /video/yr0kr27/corno-deixou-sua-esposa-puta-ir-para-o-motel-com-o-comedor-poderoso-e-ficou-em-casa-vendo-tudo-pelo-celular HTTP/1.1
Host: 159.89.198.98
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 29 Sep 2024 18:23:59 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Content-Encoding: gzip
Vary: Accept-Encoding
X-Powered-By: EasyEngine 3.8.1
|
|
| cdn.jsdelivr.net/npm/vanilla-lazyload@10.19.0/dist/lazyload.min.js |  104.18.187.31 | 200 OK | 2.2 kB |
URL GET HTTP/2cdn.jsdelivr.net/npm/vanilla-lazyload@10.19.0/dist/lazyload.min.js IP104.18.187.31:443
Requested byhttp://159.89.198.98/video/yr0kr27/corno-deixou-sua-esposa-puta-ir-para-o-motel-com-o-comedor-poderoso-e-ficou-em-casa-vendo-tudo-pelo-celular CertificateIssuerSectigo Limited Subject*.jsdelivr.net Fingerprint74:7A:63:DF:06:27:1E:52:8C:E8:0D:AD:1F:89:98:B5:EB:2D:49:EE ValiditySat, 04 May 2024 00:00:00 GMT - Sun, 04 May 2025 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (5459) Hashaa4be4d4db22516319b99e0a25ea2408 ee84931668058ddaf04949730d69811fd88c5c46 adf03f7ab87622faa77b4d12f97ff80466377950b805021a07a8c11804ceac14
GET /npm/vanilla-lazyload@10.19.0/dist/lazyload.min.js HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://159.89.198.98/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 29 Sep 2024 18:23:24 GMT
content-type: application/javascript; charset=utf-8
content-length: 2168
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-jsd-version: 10.19.0
x-jsd-version-type: version
etag: W/"157d-7oSTFmgFjdrwSUlzDWmBH9iMXEY"
content-encoding: gzip
x-served-by: cache-fra-eddf8230125-FRA, cache-lga21950-LGA
x-cache: HIT, HIT
vary: Accept-Encoding
cf-cache-status: HIT
age: 9366043
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=uYLbYrnra%2FWNfsLRJ%2BdvQn6dujpBle3aVjz%2BxHwPiekZCLQuN3lPp5WSBj04wvc3K8fQnaot6zKOZX8pUk1KbX8aqoLBzjfOwTakOVR4tf6Cge%2B77C3Z5zCjbWHVp2u9SoQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8cae0114ba0656ae-OSL
X-Firefox-Spdy: h2
|
|
| cdn.jsdelivr.net/npm/sidr@2.2.1/dist/jquery.sidr.min.js | 104.18.187.31 | 200 OK | 2.8 kB |
URL GET HTTP/2cdn.jsdelivr.net/npm/sidr@2.2.1/dist/jquery.sidr.min.js IP104.18.187.31:443
Requested byhttp://159.89.198.98/video/yr0kr27/corno-deixou-sua-esposa-puta-ir-para-o-motel-com-o-comedor-poderoso-e-ficou-em-casa-vendo-tudo-pelo-celular CertificateIssuerSectigo Limited Subject*.jsdelivr.net Fingerprint74:7A:63:DF:06:27:1E:52:8C:E8:0D:AD:1F:89:98:B5:EB:2D:49:EE ValiditySat, 04 May 2024 00:00:00 GMT - Sun, 04 May 2025 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (6911) Hash37ac88aac020d48f424ec4c64119f107 57c359f422507358cd667f4119bd54086a1e842d fd57ae7228574a83527cb8917ec5a0ff944aa787934ee5b85a7976f259b7ae31
GET /npm/sidr@2.2.1/dist/jquery.sidr.min.js HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://159.89.198.98/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 29 Sep 2024 18:23:24 GMT
content-type: application/javascript; charset=utf-8
content-length: 2765
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-jsd-version: 2.2.1
x-jsd-version-type: version
etag: W/"1b7a-V8NZ9CJQc1jNZn9BGb1UCGoehC0"
content-encoding: br
x-served-by: cache-fra-etou8220041-FRA, cache-lga21952-LGA
x-cache: HIT, HIT
vary: Accept-Encoding
cf-cache-status: HIT
age: 9355372
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8el2tRI0W5F6WPRxQvuNp0TDaOazaq9tG3n%2Br5U0tDg8pQs0%2FXhw1PQt2IKFOmfqw4mVtcYgFLdPB3L5rYDU9gNcysr6dPkYvvnxf1jhzciIEWOpitBpqWkAJdj6zLMXAzc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8cae0114ba0756ae-OSL
X-Firefox-Spdy: h2
|
|
| cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.min.css | 104.17.25.14 | | 5.6 kB |
URL cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.min.css IP104.17.25.14:0
File typeASCII text, with very long lines (30837) Hash269550530cc127b6aa5a35925a7de6ce 512c7d79033e3028a9be61b540cf1a6870c896f8 799aeb25cc0373fdee0e1b1db7ad6c2f6a0e058dfadaa3379689f583213190bd
GET /ajax/libs/font-awesome/4.7.0/css/font-awesome.min.css HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://159.89.198.98/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 29 Sep 2024 18:23:24 GMT
content-type: text/css; charset=utf-8
content-length: 5631
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03e5f-7918"
last-modified: Mon, 04 May 2020 16:10:07 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 174197
expires: Fri, 19 Sep 2025 18:23:24 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Hl8d1s5iEAQyYhXimZdBDwle8sDaoU4ztQNtj5Cn5p7rklLUURweii%2BFNOjntC83nTMkMcJTDCxPRF0oW8xzNwYiB7s0RTWNhrkbxIS7hYSNJ%2BRHZFJffwjQFYIK0lKwk3JPoKTy"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 8cae0114b8390b41-OSL
X-Firefox-Spdy: h2
|
|
| vjs.zencdn.net/7.4.1/video-js.css |  151.101.130.217 | 200 OK | 10 kB |
URL GET HTTP/2vjs.zencdn.net/7.4.1/video-js.css IP151.101.130.217:443
Requested byhttp://159.89.198.98/video/yr0kr27/corno-deixou-sua-esposa-puta-ir-para-o-motel-com-o-comedor-poderoso-e-ficou-em-casa-vendo-tudo-pelo-celular CertificateIssuerGlobalSign nv-sa Subjectvjs.zencdn.net Fingerprint6B:3F:11:07:D7:05:FD:AF:4D:46:B4:BA:1C:8A:60:70:95:37:35:17 ValidityWed, 06 Mar 2024 21:50:11 GMT - Mon, 07 Apr 2025 21:50:10 GMT
File typeASCII text, with very long lines (5636) Hash3590e6d49535539fe8c4504bac50c112 e51b9be26bb83261560d351d2aeace99e627465a dbd92c6a97303c4c9b21a28f3598b2567ecd663bfd6dfb927657c7ab8d833807
GET /7.4.1/video-js.css HTTP/1.1
Host: vjs.zencdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://159.89.198.98/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
last-modified: Fri, 28 Dec 2018 01:16:11 GMT
etag: "3590e6d49535539fe8c4504bac50c112"
cache-control: public, max-age=31536000
content-type: text/css; charset=utf-8
content-encoding: gzip
date: Sun, 29 Sep 2024 18:23:24 GMT
x-served-by: cache-hel1410020-HEL
x-cache: HIT
x-cache-hits: 735
vary: Accept-Encoding
access-control-allow-origin: *
timing-allow-origin: *
content-length: 10390
X-Firefox-Spdy: h2
|
|
| 159.89.198.98/include/style.css?v=1.0.0 | 159.89.198.98 | 200 OK | 3.4 kB |
URL GET HTTP/1.1159.89.198.98/include/style.css?v=1.0.0 IP159.89.198.98:80 ASN#14061 DIGITALOCEAN-ASN
Requested byhttp://159.89.198.98/video/yr0kr27/corno-deixou-sua-esposa-puta-ir-para-o-motel-com-o-comedor-poderoso-e-ficou-em-casa-vendo-tudo-pelo-celular
File typeASCII text, with very long lines (667), with CRLF line terminators Hash66b5d8f5a2459bd9df67fe3cc8fbe379 cec29ed346e0f895d70e6b5108dc49f373052f99 6c3566b6cfe84400e9bb82257116623eadc98a4aa7ab20fec459688fffda8fa1
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /include/style.css?v=1.0.0 HTTP/1.1
Host: 159.89.198.98
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://159.89.198.98/video/yr0kr27/corno-deixou-sua-esposa-puta-ir-para-o-motel-com-o-comedor-poderoso-e-ficou-em-casa-vendo-tudo-pelo-celular
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 29 Sep 2024 18:23:59 GMT
Content-Type: text/css
Last-Modified: Wed, 28 Apr 2021 06:54:52 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"608906bc-3712"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Access-Control-Allow-Origin: *
Content-Encoding: gzip
|
|
| 159.89.198.98/looppopup.js?v=1.1.1 | 159.89.198.98 | 200 OK | 1.2 kB |
URL GET HTTP/1.1159.89.198.98/looppopup.js?v=1.1.1 IP159.89.198.98:80 ASN#14061 DIGITALOCEAN-ASN
Requested byhttp://159.89.198.98/video/yr0kr27/corno-deixou-sua-esposa-puta-ir-para-o-motel-com-o-comedor-poderoso-e-ficou-em-casa-vendo-tudo-pelo-celular
File typeASCII text, with CRLF line terminators Hash5cd50f0de59f0374ac4fcedefe34c386 7adb24c9b26fd207f459ec2bfec3a3864a7afb90 50e276e3118f4bcf4249061ef7235ac981b9278977ba1d79a218ae1318dd2e11
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /looppopup.js?v=1.1.1 HTTP/1.1
Host: 159.89.198.98
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://159.89.198.98/video/yr0kr27/corno-deixou-sua-esposa-puta-ir-para-o-motel-com-o-comedor-poderoso-e-ficou-em-casa-vendo-tudo-pelo-celular
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 29 Sep 2024 18:24:00 GMT
Content-Type: application/javascript
Last-Modified: Mon, 14 Aug 2023 05:15:00 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"64d9b854-1039"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Access-Control-Allow-Origin: *
Content-Encoding: gzip
|
|
| cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/fonts/fontawesome-webfont.woff2?v=4.7.0 | 104.17.25.14 | 200 OK | 77 kB |
URL GET HTTP/2cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/fonts/fontawesome-webfont.woff2?v=4.7.0 IP104.17.25.14:443
Requested byhttp://159.89.198.98/video/yr0kr27/corno-deixou-sua-esposa-puta-ir-para-o-motel-com-o-comedor-poderoso-e-ficou-em-casa-vendo-tudo-pelo-celular CertificateIssuerGoogle Trust Services Subjectcdnjs.cloudflare.com FingerprintE6:47:BB:06:9C:32:48:7E:A6:0A:4B:62:53:7B:F0:35:5D:A9:A3:8A ValiditySat, 28 Sep 2024 05:35:05 GMT - Fri, 27 Dec 2024 05:35:04 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 77160, version 4.459 Hashaf7ae505a9eed503f8b8e6982036873e d6f48cba7d076fb6f2fd6ba993a75b9dc1ecbf0c 2adefcbc041e7d18fcf2d417879dc5a09997aa64d675b7a3c4b6ce33da13f3fe
GET /ajax/libs/font-awesome/4.7.0/fonts/fontawesome-webfont.woff2?v=4.7.0 HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://159.89.198.98
DNT: 1
Connection: keep-alive
Referer: https://cdnjs.cloudflare.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 29 Sep 2024 18:23:25 GMT
content-type: application/octet-stream; charset=utf-8
content-length: 77160
access-control-allow-origin: *
cache-control: public, max-age=30672000
etag: "5eb03e5f-12d68"
last-modified: Mon, 04 May 2020 16:10:07 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 825296
expires: Fri, 19 Sep 2025 18:23:25 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Zd1gBWEdXK5kZMrqBUrPcrIATEHpdRxK3JtEvgRF%2BQQCq25luFcA%2F2VBZ%2Fo874rWdv%2ByWYVsTiHqbIvRDY3JVVSlk0ubXcOiAtq%2FVyWxsVECg9EC%2FqZyu33R36aEBiYXofu1fqLa"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 8cae01176a67b503-OSL
X-Firefox-Spdy: h2
|
|
| 159.89.198.98/include/loading.gif | 159.89.198.98 | 200 OK | 43 B |
URL GET HTTP/1.1159.89.198.98/include/loading.gif IP159.89.198.98:80 ASN#14061 DIGITALOCEAN-ASN
Requested byhttp://159.89.198.98/video/yr0kr27/corno-deixou-sua-esposa-puta-ir-para-o-motel-com-o-comedor-poderoso-e-ficou-em-casa-vendo-tudo-pelo-celular
File typeGIF image data, version 89a, 1 x 1 Hash58b6eab85c3d693580ce3b2d5e559c37 894476fccd60af0e4842d8657a36d8186e34a382 39f08c4011ac739fb84eb16366fb23338e4df27d54a459327a95c99c03512ffd
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /include/loading.gif HTTP/1.1
Host: 159.89.198.98
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://159.89.198.98/video/yr0kr27/corno-deixou-sua-esposa-puta-ir-para-o-motel-com-o-comedor-poderoso-e-ficou-em-casa-vendo-tudo-pelo-celular
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 29 Sep 2024 18:24:00 GMT
Content-Type: image/gif
Content-Length: 43
Last-Modified: Wed, 28 Apr 2021 06:54:52 GMT
Connection: keep-alive
ETag: "608906bc-2b"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
|
|
| cdn77-pic.others-cdn.com/videos/thumbs169xnxxll/9f/c5/65/9fc56557c7186e3f6ee8881215063cc1-2/9fc56557c7186e3f6ee8881215063cc1.4.jpg |  195.181.166.15 | 200 OK | 11 kB |
URL GET HTTP/2cdn77-pic.others-cdn.com/videos/thumbs169xnxxll/9f/c5/65/9fc56557c7186e3f6ee8881215063cc1-2/9fc56557c7186e3f6ee8881215063cc1.4.jpg IP195.181.166.15:443 ASN#60068 Datacamp Limited
Requested byhttp://159.89.198.98/video/yr0kr27/corno-deixou-sua-esposa-puta-ir-para-o-motel-com-o-comedor-poderoso-e-ficou-em-casa-vendo-tudo-pelo-celular CertificateIssuerSectigo Limited Subjectxvideos.com FingerprintC8:79:F3:AC:85:D8:36:AC:8C:F2:30:0D:AF:6E:19:50:37:CC:C6:95 ValidityTue, 10 Oct 2023 00:00:00 GMT - Fri, 11 Oct 2024 23:59:59 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 100", progressive, precision 8, 352x198, components 3 Hash26c887172e5a7c5150fa123abb4c3e5f 1f50d882daba2f172e7d7602e9acc6a7cc63086d 1b72c8fb33cffe7ca181d634734ab629815d78288f67cec9c7ad44e56d0ef6a2
GET /videos/thumbs169xnxxll/9f/c5/65/9fc56557c7186e3f6ee8881215063cc1-2/9fc56557c7186e3f6ee8881215063cc1.4.jpg HTTP/1.1
Host: cdn77-pic.others-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://159.89.198.98/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 29 Sep 2024 18:23:25 GMT
content-type: image/jpeg
content-length: 11179
x-frame-options: sameorigin
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
last-modified: Mon, 18 Sep 2023 16:42:36 GMT
cache-control: max-age=10368000, public
access-control-allow-origin: *
x-77-nzt: A8O1pg03Nzf/aWRSACUTwkY3Nzf/vZGAAI/0Oow3Nzf/1DkAAA
x-77-nzt-ray: b1f3ea1bc3cd65d71d9bf966fa89011b
x-accel-expires: @1732601970
x-accel-date: 1722234548
x-77-cache: HIT
x-77-age: 5399657
server: CDN77-Turbo
x-accel-date-max: 1709938679
x-cache: HIT
x-age: 5399657
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| gcore-pic.others-cdn.com/videos/thumbs169xnxxll/13/f9/b0/13f9b0707a3343620b3b2bea47549dc0-2/13f9b0707a3343620b3b2bea47549dc0.18.jpg | 92.223.40.62 | 200 OK | 6.0 kB |
URL GET HTTP/2gcore-pic.others-cdn.com/videos/thumbs169xnxxll/13/f9/b0/13f9b0707a3343620b3b2bea47549dc0-2/13f9b0707a3343620b3b2bea47549dc0.18.jpg IP92.223.40.62:443
Requested byhttp://159.89.198.98/video/yr0kr27/corno-deixou-sua-esposa-puta-ir-para-o-motel-com-o-comedor-poderoso-e-ficou-em-casa-vendo-tudo-pelo-celular CertificateIssuerSectigo Limited Subjectxvideos.com FingerprintC8:79:F3:AC:85:D8:36:AC:8C:F2:30:0D:AF:6E:19:50:37:CC:C6:95 ValidityTue, 10 Oct 2023 00:00:00 GMT - Fri, 11 Oct 2024 23:59:59 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 100", progressive, precision 8, 352x198, components 3 Hash8868fe9abb78df43d30133d4899010b0 60cf12706a0d76fa7e41aea3bb8624bd962e6d7e 31e3c69b280a63eabb4d1e9889b2a8bf3c79f0e449b3d3be770457a1c9365ee3
GET /videos/thumbs169xnxxll/13/f9/b0/13f9b0707a3343620b3b2bea47549dc0-2/13f9b0707a3343620b3b2bea47549dc0.18.jpg HTTP/1.1
Host: gcore-pic.others-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://159.89.198.98/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 29 Sep 2024 18:23:25 GMT
content-type: image/jpeg
content-length: 6022
x-frame-options: sameorigin
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
last-modified: Fri, 02 Sep 2022 17:15:50 GMT
expires: Tue, 17 Dec 2024 20:07:26 GMT
cache-control: max-age=10368000, public
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc131
traceparent: 00-3820e360a0b39b5a772ef24a35bddc5a-9c87675425216846-01
x-id: fra8-hw-edge-gc6
age: 3536159
cache: HIT
x-cached-since: 2024-08-19T20:07:26+00:00
accept-ranges: bytes
x-shard: fra8-shard0-default_443
X-Firefox-Spdy: h2
|
|
| 159.89.198.98/include/loading-bert.gif | 159.89.198.98 | 200 OK | 2.9 kB |
URL GET HTTP/1.1159.89.198.98/include/loading-bert.gif IP159.89.198.98:80 ASN#14061 DIGITALOCEAN-ASN
Requested byhttp://159.89.198.98/video/yr0kr27/corno-deixou-sua-esposa-puta-ir-para-o-motel-com-o-comedor-poderoso-e-ficou-em-casa-vendo-tudo-pelo-celular
File typeGIF image data, version 89a, 128 x 15 Hashac520708d548e10714d308cfa33d32d8 b738b0363b8621a7ac59296de767f03e41dce2f8 a80fab8be10e5238cdf8127c9c2e5c8c0a3a365e14b3350c9257851ad2299f9a
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /include/loading-bert.gif HTTP/1.1
Host: 159.89.198.98
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://159.89.198.98/include/style.css?v=1.0.0
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 29 Sep 2024 18:24:00 GMT
Content-Type: image/gif
Content-Length: 2892
Last-Modified: Wed, 28 Apr 2021 06:54:51 GMT
Connection: keep-alive
ETag: "608906bb-b4c"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
|
|
| c.adsco.re/ | 104.17.167.186 | | 44 kB |
IP104.17.167.186:0
Requested byhttp://159.89.198.98/video/yr0kr27/corno-deixou-sua-esposa-puta-ir-para-o-motel-com-o-comedor-poderoso-e-ficou-em-casa-vendo-tudo-pelo-celular CertificateIssuerSectigo Limited Subject*.adsco.re Fingerprint3B:64:1C:DA:8C:64:22:01:36:0F:54:7A:99:6E:AD:26:C2:EF:59:8B ValidityMon, 23 Sep 2024 00:00:00 GMT - Mon, 29 Sep 2025 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (881) Hashcbe972671280dd64b057350aefce29fd ec89267ab82d3d84ab2088ccd64995c76b7b8e49 da5b70eed96d63b9d8e81402fac5503f8ac1bdbe0dc3aa873419144123d54b06
GET / HTTP/1.1
Host: c.adsco.re
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://159.89.198.98/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 29 Sep 2024 18:23:25 GMT
content-type: text/html
cache-control: public, max-age=2678400
accept-ch: Sec-CH-UA, Sec-CH-UA-Mobile, Sec-CH-UA-Full-Version, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Arch, Sec-CH-UA-Model, Device-Memory, Downlink, ECT, RTT, Width, Viewport-Width, DPR
permissions-policy: ch-ua=(self "https://adsco.re"),ch-ua-mobile=(self "https://adsco.re"),ch-ua-full-version=(self "https://adsco.re"),ch-ua-platform=(self "https://adsco.re"),ch-ua-platform-version=(self "https://adsco.re"),ch-ua-arch=(self "https://adsco.re"),ch-ua-model=(self "https://adsco.re"),ch-device-memory=(self "https://adsco.re"),ch-downlink=(self "https://adsco.re"),ch-ect=(self "https://adsco.re"),ch-rtt=(self "https://adsco.re"),ch-width=(self "https://adsco.re"),ch-viewport-width=(self "https://adsco.re"),ch-dpr=(self "https://adsco.re")
link: <//6.adsco.re/>;rel=prefetch;crossorigin;as=fetch,<//4.adsco.re/>;rel=prefetch;crossorigin;as=fetch,<//adsco.re/>;rel=preconnect
expires: Wed, 30 Oct 2024 18:23:25 GMT
etag: W/"cOaB0SIHOpvD9wT7D5aoLQ=="
content-encoding: gzip
cf-cache-status: HIT
age: 6737527
vary: Accept-Encoding
server: cloudflare
cf-ray: 8cae0118de7e56cc-OSL
X-Firefox-Spdy: h2
|
|
| cdn77-pic.others-cdn.com/videos/thumbs169xnxxll/fd/58/a1/fd58a1f67623ef0f0df2c0fcdedd23f8/fd58a1f67623ef0f0df2c0fcdedd23f8.13.jpg | 195.181.166.15 | 200 OK | 16 kB |
URL GET HTTP/2cdn77-pic.others-cdn.com/videos/thumbs169xnxxll/fd/58/a1/fd58a1f67623ef0f0df2c0fcdedd23f8/fd58a1f67623ef0f0df2c0fcdedd23f8.13.jpg IP195.181.166.15:443 ASN#60068 Datacamp Limited
Requested byhttps://misterindo.net/x/?id=yr0kr27 CertificateIssuerSectigo Limited Subjectxvideos.com FingerprintC8:79:F3:AC:85:D8:36:AC:8C:F2:30:0D:AF:6E:19:50:37:CC:C6:95 ValidityTue, 10 Oct 2023 00:00:00 GMT - Fri, 11 Oct 2024 23:59:59 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 100", progressive, precision 8, 352x198, components 3 Hashff33d12c6923eba8fb6a68fb6610c4bc af35b8fa941b9d348dcba8a37a4f1e8999ea180b 454886bd28080a0bc8bd0f08906c175b5dba9bf4368608c1cd2980578e41cefb
GET /videos/thumbs169xnxxll/fd/58/a1/fd58a1f67623ef0f0df2c0fcdedd23f8/fd58a1f67623ef0f0df2c0fcdedd23f8.13.jpg HTTP/1.1
Host: cdn77-pic.others-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 29 Sep 2024 18:23:25 GMT
content-type: image/jpeg
content-length: 16189
x-frame-options: sameorigin
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
last-modified: Thu, 21 Jan 2021 11:22:31 GMT
cache-control: max-age=10368000, public
access-control-allow-origin: *
x-77-nzt: A8O1pg03Nzf/8MVUACUTwjo3Nzf/D6mBAI/0OpU3Nzf/kScAAA
x-77-nzt-ray: b1f3ea1bc3cd65d71d9bf9663bdfd826
x-accel-expires: @1732446440
x-accel-date: 1722078509
x-77-cache: HIT
x-77-age: 5555696
server: CDN77-Turbo
x-accel-date-max: 1709849968
x-cache: HIT
x-age: 5555696
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| vjs.zencdn.net/6.4.0/video.js | 151.101.130.217 | 200 OK | 159 kB |
URL GET HTTP/2vjs.zencdn.net/6.4.0/video.js IP151.101.130.217:443
Requested byhttps://misterindo.net/x/?id=yr0kr27 CertificateIssuerGlobalSign nv-sa Subjectvjs.zencdn.net Fingerprint6B:3F:11:07:D7:05:FD:AF:4D:46:B4:BA:1C:8A:60:70:95:37:35:17 ValidityWed, 06 Mar 2024 21:50:11 GMT - Mon, 07 Apr 2025 21:50:10 GMT
File typeJavaScript source, ASCII text, with very long lines (489) Size159 kB (158553 bytes) Hash64b06190934b953687249b6f22ca4b60 c9898f4da840827cc9387178af3488c2d35ad823 7d8e07f8fc2ab114cbee3767d1e2f3abfa1cc2148c9558371f1311e3c709057c
GET /6.4.0/video.js HTTP/1.1
Host: vjs.zencdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://misterindo.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 17 Nov 2017 20:14:33 GMT
etag: "64b06190934b953687249b6f22ca4b60"
cache-control: public, max-age=31536000
content-type: application/javascript; charset=utf-8
content-encoding: gzip
date: Sun, 29 Sep 2024 18:23:25 GMT
x-served-by: cache-hel1410020-HEL
x-cache: HIT
x-cache-hits: 1
vary: Accept-Encoding
access-control-allow-origin: *
timing-allow-origin: *
content-length: 158553
X-Firefox-Spdy: h2
|
|
| www.googletagmanager.com/gtag/js?id=G-GY11J1LV51 | 142.250.74.136 | 200 OK | 99 kB |
URL GET HTTP/2www.googletagmanager.com/gtag/js?id=G-GY11J1LV51 IP142.250.74.136:443
Requested byhttps://misterindo.net/x/?id=yr0kr27 CertificateIssuerGoogle Trust Services Subject*.google-analytics.com Fingerprint8F:FB:38:1E:52:FC:DC:A9:59:49:87:DE:AC:8B:98:2B:57:09:5D:BA ValidityMon, 26 Aug 2024 06:33:47 GMT - Mon, 18 Nov 2024 06:33:46 GMT
File typeJavaScript source, ASCII text, with very long lines (4345) Hash49b16a6d562c5e8e9e117c353c20541e be815effeb23cc370963916be34925b088891037 08bdd942fd652d501b489c40052c3d32432c0f284c2dbd95f5b786f006dc935a
GET /gtag/js?id=G-GY11J1LV51 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://misterindo.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sun, 29 Sep 2024 18:23:25 GMT
expires: Sun, 29 Sep 2024 18:23:25 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgcycc:838:0
cross-origin-opener-policy-report-only: same-origin; report-to=coop_reporting
report-to: {"group":"coop_reporting","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgcycc:838:0"}],}
server: Google Tag Manager
content-length: 99217
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| 159.89.198.98/include/favicon.ico | 159.89.198.98 | 200 OK | 341 B |
URL GET HTTP/1.1159.89.198.98/include/favicon.ico IP159.89.198.98:80 ASN#14061 DIGITALOCEAN-ASN
Requested byhttp://159.89.198.98/video/yr0kr27/corno-deixou-sua-esposa-puta-ir-para-o-motel-com-o-comedor-poderoso-e-ficou-em-casa-vendo-tudo-pelo-celular
File typeMS Windows icon resource - 1 icon, 16x16, 32 bits/pixel Hash74bcc9c72ca2e59f467b46d0d2b9f409 0f926f925453097124dbb534296c1958937de453 f8b1b30a7e4579a025ad3b20152f4f2dd96cbc4a028bb2fc226eb95af0868211
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /include/favicon.ico HTTP/1.1
Host: 159.89.198.98
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://159.89.198.98/video/yr0kr27/corno-deixou-sua-esposa-puta-ir-para-o-motel-com-o-comedor-poderoso-e-ficou-em-casa-vendo-tudo-pelo-celular
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 29 Sep 2024 18:24:00 GMT
Content-Type: image/x-icon
Last-Modified: Wed, 28 Apr 2021 06:54:50 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"608906ba-47e"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Access-Control-Allow-Origin: *
Content-Encoding: gzip
|
|
| 6.adsco.re:2087/ | 104.17.167.186 | 200 OK | 45 B |
IP104.17.167.186:2087
Requested byhttp://159.89.198.98/video/yr0kr27/corno-deixou-sua-esposa-puta-ir-para-o-motel-com-o-comedor-poderoso-e-ficou-em-casa-vendo-tudo-pelo-celular CertificateIssuerSectigo Limited Subject*.adsco.re Fingerprint3B:64:1C:DA:8C:64:22:01:36:0F:54:7A:99:6E:AD:26:C2:EF:59:8B ValidityMon, 23 Sep 2024 00:00:00 GMT - Mon, 29 Sep 2025 23:59:59 GMT
File typeASCII text, with no line terminators Hash5b41cb22f84f645a103acc7bfbf084ff bac3967b26d5ec4a0d09a580714e8219796816bd 709f0a0dfab9f9e074f4a4a348dcb09150838284d21e75cfb9e5ceaeeb2054bc
GET / HTTP/1.1
Host: 6.adsco.re:2087
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://159.89.198.98
DNT: 1
Connection: keep-alive
Referer: http://159.89.198.98/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 29 Sep 2024 18:23:26 GMT
content-type: text/plain;charset=UTF-8
content-length: 45
access-control-allow-origin: http://159.89.198.98
cache-control: private, max-age=10
access-control-allow-headers: Content-Type
access-control-allow-methods: GET, HEAD, OPTIONS
access-control-max-age: 2592000
vary: Accept-Encoding
server: cloudflare
cf-ray: 8cae011d7bd57127-OSL
alt-svc: h3=":2087"; ma=86400
X-Firefox-Spdy: h2
|
|
| 6.adsco.re/ | 104.17.167.186 | 200 OK | 45 B |
IP104.17.167.186:443
Requested byhttps://misterindo.net/x/?id=yr0kr27 CertificateIssuerSectigo Limited Subject*.adsco.re Fingerprint3B:64:1C:DA:8C:64:22:01:36:0F:54:7A:99:6E:AD:26:C2:EF:59:8B ValidityMon, 23 Sep 2024 00:00:00 GMT - Mon, 29 Sep 2025 23:59:59 GMT
File typeASCII text, with no line terminators Hash5b41cb22f84f645a103acc7bfbf084ff bac3967b26d5ec4a0d09a580714e8219796816bd 709f0a0dfab9f9e074f4a4a348dcb09150838284d21e75cfb9e5ceaeeb2054bc
GET / HTTP/1.1
Host: 6.adsco.re
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://159.89.198.98
DNT: 1
Connection: keep-alive
Referer: http://159.89.198.98/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 29 Sep 2024 18:23:26 GMT
content-type: text/plain;charset=UTF-8
content-length: 45
access-control-allow-origin: http://159.89.198.98
cache-control: private, max-age=10
access-control-allow-headers: Content-Type
access-control-allow-methods: GET, HEAD, OPTIONS
access-control-max-age: 2592000
vary: Accept-Encoding
server: cloudflare
cf-ray: 8cae011d9a0156ba-OSL
X-Firefox-Spdy: h2
|
|
| 4.adsco.re/ | 162.252.214.5 | | 62 B |
IP162.252.214.5:0
File typeASCII text, with no line terminators Hash5b41cb22f84f645a103acc7bfbf084ff bac3967b26d5ec4a0d09a580714e8219796816bd 709f0a0dfab9f9e074f4a4a348dcb09150838284d21e75cfb9e5ceaeeb2054bc
GET / HTTP/1.1
Host: 4.adsco.re
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://159.89.198.98
DNT: 1
Connection: keep-alive
Referer: http://159.89.198.98/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 29 Sep 2024 18:23:26 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Methods: GET, HEAD, OPTIONS
Access-Control-Allow-Headers: Content-Type
Access-Control-Allow-Origin: http://159.89.198.98
Access-Control-Max-Age: 2592000
Cache-Control: private, max-age=5
Content-Encoding: gzip
|
|
| 4.adsco.re:2087/ | 162.252.214.5 | 200 OK | 62 B |
IP162.252.214.5:2087
Requested byhttps://misterindo.net/x/?id=yr0kr27 CertificateIssuerSectigo Limited Subject*.adsco.re Fingerprint3B:64:1C:DA:8C:64:22:01:36:0F:54:7A:99:6E:AD:26:C2:EF:59:8B ValidityMon, 23 Sep 2024 00:00:00 GMT - Mon, 29 Sep 2025 23:59:59 GMT
File typeASCII text, with no line terminators Hash5b41cb22f84f645a103acc7bfbf084ff bac3967b26d5ec4a0d09a580714e8219796816bd 709f0a0dfab9f9e074f4a4a348dcb09150838284d21e75cfb9e5ceaeeb2054bc
GET / HTTP/1.1
Host: 4.adsco.re:2087
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://159.89.198.98
DNT: 1
Connection: keep-alive
Referer: http://159.89.198.98/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 29 Sep 2024 18:23:26 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Methods: GET, HEAD, OPTIONS
Access-Control-Allow-Headers: Content-Type
Access-Control-Allow-Origin: http://159.89.198.98
Access-Control-Max-Age: 2592000
Cache-Control: private, max-age=5
Content-Encoding: gzip
|
|
| c.adsco.re/ | 104.17.167.186 | | 30 kB |
IP104.17.167.186:0
Requested byhttp://159.89.198.98/video/yr0kr27/corno-deixou-sua-esposa-puta-ir-para-o-motel-com-o-comedor-poderoso-e-ficou-em-casa-vendo-tudo-pelo-celular CertificateIssuerSectigo Limited Subject*.adsco.re Fingerprint3B:64:1C:DA:8C:64:22:01:36:0F:54:7A:99:6E:AD:26:C2:EF:59:8B ValidityMon, 23 Sep 2024 00:00:00 GMT - Mon, 29 Sep 2025 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (881) Hashc335c4e6912ba9d40fbd807e3480d312 14b3de7ac0b1dba7dc0d9dc1f3099d49eaacc34a 42c6d28a92a59ae29ab8f69ef97985836a5a3911798ac129230383f61a661abf
GET / HTTP/1.1
Host: c.adsco.re
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://misterindo.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 29 Sep 2024 18:23:26 GMT
content-type: text/html
cache-control: public, max-age=2678400
accept-ch: Sec-CH-UA, Sec-CH-UA-Mobile, Sec-CH-UA-Full-Version, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Arch, Sec-CH-UA-Model, Device-Memory, Downlink, ECT, RTT, Width, Viewport-Width, DPR
permissions-policy: ch-ua=(self "https://adsco.re"),ch-ua-mobile=(self "https://adsco.re"),ch-ua-full-version=(self "https://adsco.re"),ch-ua-platform=(self "https://adsco.re"),ch-ua-platform-version=(self "https://adsco.re"),ch-ua-arch=(self "https://adsco.re"),ch-ua-model=(self "https://adsco.re"),ch-device-memory=(self "https://adsco.re"),ch-downlink=(self "https://adsco.re"),ch-ect=(self "https://adsco.re"),ch-rtt=(self "https://adsco.re"),ch-width=(self "https://adsco.re"),ch-viewport-width=(self "https://adsco.re"),ch-dpr=(self "https://adsco.re")
link: <//6.adsco.re/>;rel=prefetch;crossorigin;as=fetch,<//4.adsco.re/>;rel=prefetch;crossorigin;as=fetch,<//adsco.re/>;rel=preconnect
expires: Wed, 30 Oct 2024 18:23:26 GMT
etag: W/"cOaB0SIHOpvD9wT7D5aoLQ=="
content-encoding: gzip
cf-cache-status: HIT
age: 6737528
vary: Accept-Encoding
server: cloudflare
cf-ray: 8cae011d1c0556cc-OSL
X-Firefox-Spdy: h2
|
|
| daw5yhguzt8z.l4.adsco.re/ |  185.200.118.62 | 200 OK | 0 B |
URL POST HTTP/2daw5yhguzt8z.l4.adsco.re/ IP185.200.118.62:443
Requested byhttp://159.89.198.98/video/yr0kr27/corno-deixou-sua-esposa-puta-ir-para-o-motel-com-o-comedor-poderoso-e-ficou-em-casa-vendo-tudo-pelo-celular CertificateIssuerLet's Encrypt Subject*.l4.adsco.re Fingerprint97:EE:6D:B0:A5:FE:25:8A:E5:5E:CD:C4:79:F4:83:80:7F:75:2F:ED ValidityThu, 19 Sep 2024 09:14:21 GMT - Wed, 18 Dec 2024 09:14:20 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST / HTTP/1.1
Host: daw5yhguzt8z.l4.adsco.re
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 0
Origin: http://159.89.198.98
DNT: 1
Connection: keep-alive
Referer: http://159.89.198.98/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 29 Sep 2024 18:23:26 GMT
content-type: text/html
content-length: 0
last-modified: Fri, 02 Jun 2023 14:03:32 GMT
etag: "6479f6b4-0"
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
access-control-expose-headers: Content-Length,Content-Range
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| c.adsco.re/ | 104.17.167.186 | | 30 kB |
IP104.17.167.186:0
Requested byhttp://159.89.198.98/video/yr0kr27/corno-deixou-sua-esposa-puta-ir-para-o-motel-com-o-comedor-poderoso-e-ficou-em-casa-vendo-tudo-pelo-celular CertificateIssuerSectigo Limited Subject*.adsco.re Fingerprint3B:64:1C:DA:8C:64:22:01:36:0F:54:7A:99:6E:AD:26:C2:EF:59:8B ValidityMon, 23 Sep 2024 00:00:00 GMT - Mon, 29 Sep 2025 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (881) Hash70e681d122073a9bc3f704fb0f96a82d 5916b6dea0ea58b5807287ca1cd4faf9c9f3aae5 73bfce45d382df02d75ef2ef688325cc973139931db445ee753c2af8a85f3965
GET / HTTP/1.1
Host: c.adsco.re
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://159.89.198.98/
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 29 Sep 2024 18:23:26 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: public, max-age=2678400
Accept-CH: Sec-CH-UA, Sec-CH-UA-Mobile, Sec-CH-UA-Full-Version, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Arch, Sec-CH-UA-Model, Device-Memory, Downlink, ECT, RTT, Width, Viewport-Width, DPR
Permissions-Policy: ch-ua=(self "https://adsco.re"),ch-ua-mobile=(self "https://adsco.re"),ch-ua-full-version=(self "https://adsco.re"),ch-ua-platform=(self "https://adsco.re"),ch-ua-platform-version=(self "https://adsco.re"),ch-ua-arch=(self "https://adsco.re"),ch-ua-model=(self "https://adsco.re"),ch-device-memory=(self "https://adsco.re"),ch-downlink=(self "https://adsco.re"),ch-ect=(self "https://adsco.re"),ch-rtt=(self "https://adsco.re"),ch-width=(self "https://adsco.re"),ch-viewport-width=(self "https://adsco.re"),ch-dpr=(self "https://adsco.re")
Link: <//6.adsco.re/>;rel=prefetch;crossorigin;as=fetch,<//4.adsco.re/>;rel=prefetch;crossorigin;as=fetch,<//adsco.re/>;rel=preconnect
Expires: Wed, 30 Oct 2024 18:23:26 GMT
ETag: W/"cOaB0SIHOpvD9wT7D5aoLQ=="
Content-Encoding: gzip
CF-Cache-Status: HIT
Age: 6737492
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 8cae011f6d235696-OSL
alt-svc: h2=":443"; ma=60
|
|
| daw5yhguzt8z.n4.adsco.re/ | 38.132.109.126 | 200 OK | 0 B |
URL POST HTTP/2daw5yhguzt8z.n4.adsco.re/ IP38.132.109.126:443
Requested byhttp://159.89.198.98/video/yr0kr27/corno-deixou-sua-esposa-puta-ir-para-o-motel-com-o-comedor-poderoso-e-ficou-em-casa-vendo-tudo-pelo-celular CertificateIssuerLet's Encrypt Subject*.n4.adsco.re FingerprintE3:73:B1:79:A1:04:DE:01:28:DD:46:7F:C0:B3:89:2B:FF:12:B0:32 ValidityThu, 19 Sep 2024 09:14:12 GMT - Wed, 18 Dec 2024 09:14:11 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST / HTTP/1.1
Host: daw5yhguzt8z.n4.adsco.re
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 0
Origin: http://159.89.198.98
DNT: 1
Connection: keep-alive
Referer: http://159.89.198.98/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 29 Sep 2024 18:23:26 GMT
content-type: text/html
content-length: 0
last-modified: Fri, 16 Jun 2023 08:37:42 GMT
etag: "648c1f56-0"
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
access-control-expose-headers: Content-Length,Content-Range
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| 4.adsco.re/ | 162.252.214.5 | | 62 B |
IP162.252.214.5:0
File typeASCII text, with no line terminators Hash5b41cb22f84f645a103acc7bfbf084ff bac3967b26d5ec4a0d09a580714e8219796816bd 709f0a0dfab9f9e074f4a4a348dcb09150838284d21e75cfb9e5ceaeeb2054bc
GET / HTTP/1.1
Host: 4.adsco.re
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://misterindo.net
DNT: 1
Connection: keep-alive
Referer: https://misterindo.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 29 Sep 2024 18:23:26 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Methods: GET, HEAD, OPTIONS
Access-Control-Allow-Headers: Content-Type
Access-Control-Allow-Origin: https://misterindo.net
Access-Control-Max-Age: 2592000
Cache-Control: private, max-age=5
Content-Encoding: gzip
|
|
| 6.adsco.re/ | 104.17.167.186 | 200 OK | 45 B |
IP104.17.167.186:443
Requested byhttps://misterindo.net/x/?id=yr0kr27 CertificateIssuerSectigo Limited Subject*.adsco.re Fingerprint3B:64:1C:DA:8C:64:22:01:36:0F:54:7A:99:6E:AD:26:C2:EF:59:8B ValidityMon, 23 Sep 2024 00:00:00 GMT - Mon, 29 Sep 2025 23:59:59 GMT
File typeASCII text, with no line terminators Hash5b41cb22f84f645a103acc7bfbf084ff bac3967b26d5ec4a0d09a580714e8219796816bd 709f0a0dfab9f9e074f4a4a348dcb09150838284d21e75cfb9e5ceaeeb2054bc
GET / HTTP/1.1
Host: 6.adsco.re
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://misterindo.net
DNT: 1
Connection: keep-alive
Referer: https://misterindo.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 29 Sep 2024 18:23:26 GMT
content-type: text/plain;charset=UTF-8
content-length: 45
access-control-allow-origin: https://misterindo.net
cache-control: private, max-age=10
access-control-allow-headers: Content-Type
access-control-allow-methods: GET, HEAD, OPTIONS
access-control-max-age: 2592000
vary: Accept-Encoding
server: cloudflare
cf-ray: 8cae01209d6f56ba-OSL
X-Firefox-Spdy: h2
|
|
| 4.adsco.re:2087/ | 162.252.214.5 | 200 OK | 62 B |
IP162.252.214.5:2087
Requested byhttps://misterindo.net/x/?id=yr0kr27 CertificateIssuerSectigo Limited Subject*.adsco.re Fingerprint3B:64:1C:DA:8C:64:22:01:36:0F:54:7A:99:6E:AD:26:C2:EF:59:8B ValidityMon, 23 Sep 2024 00:00:00 GMT - Mon, 29 Sep 2025 23:59:59 GMT
File typeASCII text, with no line terminators Hash5b41cb22f84f645a103acc7bfbf084ff bac3967b26d5ec4a0d09a580714e8219796816bd 709f0a0dfab9f9e074f4a4a348dcb09150838284d21e75cfb9e5ceaeeb2054bc
GET / HTTP/1.1
Host: 4.adsco.re:2087
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://misterindo.net
DNT: 1
Connection: keep-alive
Referer: https://misterindo.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 29 Sep 2024 18:23:26 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Methods: GET, HEAD, OPTIONS
Access-Control-Allow-Headers: Content-Type
Access-Control-Allow-Origin: https://misterindo.net
Access-Control-Max-Age: 2592000
Cache-Control: private, max-age=5
Content-Encoding: gzip
|
|
| 6.adsco.re:2087/ | 104.17.167.186 | 200 OK | 45 B |
IP104.17.167.186:2087
Requested byhttp://159.89.198.98/video/yr0kr27/corno-deixou-sua-esposa-puta-ir-para-o-motel-com-o-comedor-poderoso-e-ficou-em-casa-vendo-tudo-pelo-celular CertificateIssuerSectigo Limited Subject*.adsco.re Fingerprint3B:64:1C:DA:8C:64:22:01:36:0F:54:7A:99:6E:AD:26:C2:EF:59:8B ValidityMon, 23 Sep 2024 00:00:00 GMT - Mon, 29 Sep 2025 23:59:59 GMT
File typeASCII text, with no line terminators Hash5b41cb22f84f645a103acc7bfbf084ff bac3967b26d5ec4a0d09a580714e8219796816bd 709f0a0dfab9f9e074f4a4a348dcb09150838284d21e75cfb9e5ceaeeb2054bc
GET / HTTP/1.1
Host: 6.adsco.re:2087
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://misterindo.net
DNT: 1
Connection: keep-alive
Referer: https://misterindo.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 29 Sep 2024 18:23:26 GMT
content-type: text/plain;charset=UTF-8
content-length: 45
access-control-allow-origin: https://misterindo.net
cache-control: private, max-age=10
access-control-allow-headers: Content-Type
access-control-allow-methods: GET, HEAD, OPTIONS
access-control-max-age: 2592000
vary: Accept-Encoding
server: cloudflare
cf-ray: 8cae0120afa27127-OSL
X-Firefox-Spdy: h2
|
|
| misterindo.net/x/30384483225d547e3769cc6752e0175c.php?id=103dmd04 | 172.67.139.194 | | 30 kB |
URL GET misterindo.net/x/30384483225d547e3769cc6752e0175c.php?id=103dmd04 IP172.67.139.194:0
Requested byhttps://misterindo.net/x/?id=yr0kr27 CertificateIssuerGoogle Trust Services Subjectmisterindo.net Fingerprint1D:6F:9D:EA:6B:71:D6:6C:23:78:72:3C:9D:2A:55:2A:76:F1:29:94 ValiditySun, 15 Sep 2024 21:46:02 GMT - Sat, 14 Dec 2024 21:46:01 GMT
File typegzip compressed data, max speed, from Unix Hash307cc9c90b07960982452fd122fa89ca d3f42e1a37b7a5e959c39a58d2a0a0e052b49961 c6d11eb819da4a0881a7a97e06c203056dad988b7e2b7408c937956a1e454718
GET /x/30384483225d547e3769cc6752e0175c.php?id=103dmd04 HTTP/1.1
Host: misterindo.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
DNT: 1
Connection: keep-alive
Referer: https://misterindo.net/x/?id=yr0kr27
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 302 Found
date: Sun, 29 Sep 2024 18:23:26 GMT
content-type: text/html; charset=UTF-8
location: https://cdn77-vid-mp4.others-cdn.com/lhjEglupf1XZucaoycyftA==,1727645006/videos/mp4/f/d/5/xvideos.com_fd58a1f67623ef0f0df2c0fcdedd23f8.mp4?ui=MTA0LjI0OC40NC4xNzEtL3ZpZGVvLTEwM2RtZDA0L2JpdGNoZXNfYWJyb2Fk
x-powered-by: EasyEngine 3.8.1
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ppbF1VK0S5XTd5SWx3GIvjEV%2FiPIvA5pHPM0i0U%2BC8kMrKFGiopoSCw6OjQ0hBm46QDjbwJLrjNj%2Fj6Ho6kWpZFIpoZe53dUBbxcklPYznfTwRDlgN3icEbN%2F%2Bt53xZv4Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
speculation-rules: "/cdn-cgi/speculation"
server: cloudflare
cf-ray: 8cae011c5c1448c5-LHR
|
|
| 6.adsco.re/ | 104.17.167.186 | 200 OK | 45 B |
IP104.17.167.186:443
Requested byhttps://misterindo.net/x/?id=yr0kr27 CertificateIssuerSectigo Limited Subject*.adsco.re Fingerprint3B:64:1C:DA:8C:64:22:01:36:0F:54:7A:99:6E:AD:26:C2:EF:59:8B ValidityMon, 23 Sep 2024 00:00:00 GMT - Mon, 29 Sep 2025 23:59:59 GMT
File typeASCII text, with no line terminators Hash5b41cb22f84f645a103acc7bfbf084ff bac3967b26d5ec4a0d09a580714e8219796816bd 709f0a0dfab9f9e074f4a4a348dcb09150838284d21e75cfb9e5ceaeeb2054bc
GET / HTTP/1.1
Host: 6.adsco.re
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: http://c.adsco.re/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 29 Sep 2024 18:23:26 GMT
Content-Type: text/plain;charset=UTF-8
Content-Length: 45
Connection: keep-alive
Access-Control-Allow-Origin: *
Cache-Control: private, max-age=10
Access-Control-Allow-Headers: Content-Type
Access-Control-Allow-Methods: GET, HEAD, OPTIONS
Access-Control-Max-Age: 2592000
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 8cae01218bf75684-OSL
alt-svc: h2=":443"; ma=60
|
|
| 4.adsco.re/ | 162.252.214.5 | | 62 B |
IP162.252.214.5:0
File typeASCII text, with no line terminators Hash5b41cb22f84f645a103acc7bfbf084ff bac3967b26d5ec4a0d09a580714e8219796816bd 709f0a0dfab9f9e074f4a4a348dcb09150838284d21e75cfb9e5ceaeeb2054bc
GET / HTTP/1.1
Host: 4.adsco.re
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: http://c.adsco.re/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 29 Sep 2024 18:23:26 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Methods: GET, HEAD, OPTIONS
Access-Control-Allow-Headers: Content-Type
Access-Control-Allow-Origin: *
Access-Control-Max-Age: 2592000
Cache-Control: private, max-age=5
Content-Encoding: gzip
|
|
| ftbutabgdfbb.l4.adsco.re/ | 185.200.118.62 | 200 OK | 0 B |
URL POST HTTP/2ftbutabgdfbb.l4.adsco.re/ IP185.200.118.62:443
Requested byhttps://misterindo.net/x/?id=yr0kr27 CertificateIssuerLet's Encrypt Subject*.l4.adsco.re Fingerprint97:EE:6D:B0:A5:FE:25:8A:E5:5E:CD:C4:79:F4:83:80:7F:75:2F:ED ValidityThu, 19 Sep 2024 09:14:21 GMT - Wed, 18 Dec 2024 09:14:20 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST / HTTP/1.1
Host: ftbutabgdfbb.l4.adsco.re
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 0
Origin: https://misterindo.net
DNT: 1
Connection: keep-alive
Referer: https://misterindo.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 29 Sep 2024 18:23:27 GMT
content-type: text/html
content-length: 0
last-modified: Fri, 02 Jun 2023 14:03:32 GMT
etag: "6479f6b4-0"
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
access-control-expose-headers: Content-Length,Content-Range
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| 6.adsco.re/ | 104.17.167.186 | 200 OK | 45 B |
IP104.17.167.186:443
Requested byhttps://misterindo.net/x/?id=yr0kr27 CertificateIssuerSectigo Limited Subject*.adsco.re Fingerprint3B:64:1C:DA:8C:64:22:01:36:0F:54:7A:99:6E:AD:26:C2:EF:59:8B ValidityMon, 23 Sep 2024 00:00:00 GMT - Mon, 29 Sep 2025 23:59:59 GMT
File typeASCII text, with no line terminators Hash5b41cb22f84f645a103acc7bfbf084ff bac3967b26d5ec4a0d09a580714e8219796816bd 709f0a0dfab9f9e074f4a4a348dcb09150838284d21e75cfb9e5ceaeeb2054bc
GET / HTTP/1.1
Host: 6.adsco.re
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://c.adsco.re/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 29 Sep 2024 18:23:27 GMT
content-type: text/plain;charset=UTF-8
content-length: 45
access-control-allow-origin: *
cache-control: private, max-age=10
access-control-allow-headers: Content-Type
access-control-allow-methods: GET, HEAD, OPTIONS
access-control-max-age: 2592000
vary: Accept-Encoding
server: cloudflare
cf-ray: 8cae0122dfbb56ba-OSL
X-Firefox-Spdy: h2
|
|
| adsco.re/p | 162.252.214.5 | 200 OK | 878 B |
IP162.252.214.5:443
Requested byhttps://misterindo.net/x/?id=yr0kr27 CertificateIssuerSectigo Limited Subject*.adsco.re Fingerprint3B:64:1C:DA:8C:64:22:01:36:0F:54:7A:99:6E:AD:26:C2:EF:59:8B ValidityMon, 23 Sep 2024 00:00:00 GMT - Mon, 29 Sep 2025 23:59:59 GMT
File typeASCII text, with very long lines (1106), with no line terminators Hash81dc57a5d2674f1d665610c2d4fefac0 0507711f86b38ef8ae5a2e63c64b46a86965e3c8 f18d3166edfacffbc284e709341bc93c18d0a0fc24f1f9be69cc70438942c5eb
POST /p HTTP/1.1
Host: adsco.re
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Length: 1731
Origin: http://159.89.198.98
DNT: 1
Connection: keep-alive
Referer: http://159.89.198.98/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 29 Sep 2024 18:23:27 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
AS-P-1: OK lon123
AS-P-2: OK
AS-P-3: OK
Access-Control-Max-Age: 2592000
Cache-Control: no-transform
Accept-CH: Sec-CH-UA, Sec-CH-UA-Mobile, Sec-CH-UA-Full-Version, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Arch, Sec-CH-UA-Model, Device-Memory, Downlink, ECT, RTT, Width, Viewport-Width, DPR
Access-Control-Allow-Origin: http://159.89.198.98
Access-Control-Allow-Credentials: true
Content-Encoding: gzip
|
|
| 4.adsco.re/ | 162.252.214.5 | | 62 B |
IP162.252.214.5:0
File typeASCII text, with no line terminators Hash5b41cb22f84f645a103acc7bfbf084ff bac3967b26d5ec4a0d09a580714e8219796816bd 709f0a0dfab9f9e074f4a4a348dcb09150838284d21e75cfb9e5ceaeeb2054bc
GET / HTTP/1.1
Host: 4.adsco.re
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://c.adsco.re/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 29 Sep 2024 18:23:27 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Methods: GET, HEAD, OPTIONS
Access-Control-Allow-Headers: Content-Type
Access-Control-Allow-Origin: *
Access-Control-Max-Age: 2592000
Cache-Control: private, max-age=5
Content-Encoding: gzip
|
|
| ftbutabgdfbb.n4.adsco.re/ | 38.132.109.126 | 200 OK | 0 B |
URL POST HTTP/2ftbutabgdfbb.n4.adsco.re/ IP38.132.109.126:443
Requested byhttps://misterindo.net/x/?id=yr0kr27 CertificateIssuerLet's Encrypt Subject*.n4.adsco.re FingerprintE3:73:B1:79:A1:04:DE:01:28:DD:46:7F:C0:B3:89:2B:FF:12:B0:32 ValidityThu, 19 Sep 2024 09:14:12 GMT - Wed, 18 Dec 2024 09:14:11 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST / HTTP/1.1
Host: ftbutabgdfbb.n4.adsco.re
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 0
Origin: https://misterindo.net
DNT: 1
Connection: keep-alive
Referer: https://misterindo.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 29 Sep 2024 18:23:27 GMT
content-type: text/html
content-length: 0
last-modified: Fri, 16 Jun 2023 08:37:42 GMT
etag: "648c1f56-0"
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
access-control-expose-headers: Content-Length,Content-Range
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| premiumvertising.com/agzdynrpgmwnhepcw?MJWBfidq=BQMyAAAAAAAACZUAAi4bk_kr69ruoQQPB4MX1sGyypJtxUA1GSpw31TMBUCYgjcNY1sFrftUQGqGVSHrxOodl-Qf7MIlOoShSt4Fh2HMpSqOXh62yttGNjiYrZLd9nC1aWSKbe8mA5worx4_ICH5hMpa31oreR5T4TnfbcCn_aVGNsXwk_S9iiqZe3Ooi8skDoKNtOxxXM1WoEKcQO6I1PVcGP9wpeGk7A22fCyku-qv4tq3lP-N49obNklldjjHthy1EB8e8Lej8GVDTs4-ONNOzKUCSJBMu73dAE2n6xgCr1RWbfcuHvGW51ikESMcqg-YLKXmN7Tb7DMqom5U1R7YOKeDqS3274hbtckXLYJnBbCdO3pE625Z-Zr6s-q0sjuw1iPzv2PN6bNEEN9exb4tURHz1fzGDdZrQiJpXzV6sbcJ1QT2aRw4LRqiccCvCn8y-UD9AFmhW_eFKG0GWE35gt0QFeYLvOcOGbS-2r4eVFBeK9F-O5gP3G8y6x_mM2Dt9r2SRqoK9crynJ0Q8TunoZdNsuJ9KpX-LnKDcBb38OSlGoeaffQxV4Uhsw3-NtQ2QFp3rbLGQE6ezPbZxCbslhPzgf88xpF3J4ffNRs_kxsVVATGtK59lyhGlbFcj1PyJUIsM-lsuf3ESyFc1GGWlVnpm4eao8HdRO8zuckmWxqdkbptPWyLhjVvAc-LvkIYgpUEvSIoi9y4SlJdHxbEqgutv_apuOgadcoApuq2YVJsKKr9_6PSD7hfSlcYhSDoOPcgJaQjsf1V_fQ2LGLOGJ-FX4sLN3yagKmDkEM02bHC4BWk25YtPo8TwC6znX0XOxZNNIlq4e6porpfvEDpgXCXhaAYctxro8AboWUxrsepc34GR7QNjE6s0rS17MjK3j9muNFXVoYj0lFcKU1BfQvPSa7iXMeukXMgeK_8MkoQxXe1PWIO8vC1ISTGZy6TWSotou_eLCFcFk-L3bHune1VvwMUHwirNgb2svs4bdfcYpIfsZr9qwVEmM9x6LDZqsg3-HBIp1LuS2JyxgKCSa-Qi49rQA8VNhwBeXyxDsfxXhajIJAMGpn-9NQ6ee1fgemBhgIxe8RPcQ&qPuKfNcX=4&rDSpPGCj=3212677&EljGiXTe=&ewhOrUgS=0,0&EGTKqnJu=&IoKvzMNQ=&s=1280,1024,1,1280,1024,0 | 162.252.214.11 | 200 OK | 44 B |
URL GET HTTP/1.1premiumvertising.com/agzdynrpgmwnhepcw?MJWBfidq=BQMyAAAAAAAACZUAAi4bk_kr69ruoQQPB4MX1sGyypJtxUA1GSpw31TMBUCYgjcNY1sFrftUQGqGVSHrxOodl-Qf7MIlOoShSt4Fh2HMpSqOXh62yttGNjiYrZLd9nC1aWSKbe8mA5worx4_ICH5hMpa31oreR5T4TnfbcCn_aVGNsXwk_S9iiqZe3Ooi8skDoKNtOxxXM1WoEKcQO6I1PVcGP9wpeGk7A22fCyku-qv4tq3lP-N49obNklldjjHthy1EB8e8Lej8GVDTs4-ONNOzKUCSJBMu73dAE2n6xgCr1RWbfcuHvGW51ikESMcqg-YLKXmN7Tb7DMqom5U1R7YOKeDqS3274hbtckXLYJnBbCdO3pE625Z-Zr6s-q0sjuw1iPzv2PN6bNEEN9exb4tURHz1fzGDdZrQiJpXzV6sbcJ1QT2aRw4LRqiccCvCn8y-UD9AFmhW_eFKG0GWE35gt0QFeYLvOcOGbS-2r4eVFBeK9F-O5gP3G8y6x_mM2Dt9r2SRqoK9crynJ0Q8TunoZdNsuJ9KpX-LnKDcBb38OSlGoeaffQxV4Uhsw3-NtQ2QFp3rbLGQE6ezPbZxCbslhPzgf88xpF3J4ffNRs_kxsVVATGtK59lyhGlbFcj1PyJUIsM-lsuf3ESyFc1GGWlVnpm4eao8HdRO8zuckmWxqdkbptPWyLhjVvAc-LvkIYgpUEvSIoi9y4SlJdHxbEqgutv_apuOgadcoApuq2YVJsKKr9_6PSD7hfSlcYhSDoOPcgJaQjsf1V_fQ2LGLOGJ-FX4sLN3yagKmDkEM02bHC4BWk25YtPo8TwC6znX0XOxZNNIlq4e6porpfvEDpgXCXhaAYctxro8AboWUxrsepc34GR7QNjE6s0rS17MjK3j9muNFXVoYj0lFcKU1BfQvPSa7iXMeukXMgeK_8MkoQxXe1PWIO8vC1ISTGZy6TWSotou_eLCFcFk-L3bHune1VvwMUHwirNgb2svs4bdfcYpIfsZr9qwVEmM9x6LDZqsg3-HBIp1LuS2JyxgKCSa-Qi49rQA8VNhwBeXyxDsfxXhajIJAMGpn-9NQ6ee1fgemBhgIxe8RPcQ&qPuKfNcX=4&rDSpPGCj=3212677&EljGiXTe=&ewhOrUgS=0,0&EGTKqnJu=&IoKvzMNQ=&s=1280,1024,1,1280,1024,0 IP162.252.214.11:80
Requested byhttp://159.89.198.98/video/yr0kr27/corno-deixou-sua-esposa-puta-ir-para-o-motel-com-o-comedor-poderoso-e-ficou-em-casa-vendo-tudo-pelo-celular
File typeASCII text, with no line terminators Hashd5f0a25e4d3522d56d48ce7bc3e518fb 86794caff58f7fee6e684c2ba7195f970a8d6f4c 9d781128a8ece413b003d5612b8398bf9340ef7f5b751d12bd125ba523d3ceb5
GET /agzdynrpgmwnhepcw?MJWBfidq=BQMyAAAAAAAACZUAAi4bk_kr69ruoQQPB4MX1sGyypJtxUA1GSpw31TMBUCYgjcNY1sFrftUQGqGVSHrxOodl-Qf7MIlOoShSt4Fh2HMpSqOXh62yttGNjiYrZLd9nC1aWSKbe8mA5worx4_ICH5hMpa31oreR5T4TnfbcCn_aVGNsXwk_S9iiqZe3Ooi8skDoKNtOxxXM1WoEKcQO6I1PVcGP9wpeGk7A22fCyku-qv4tq3lP-N49obNklldjjHthy1EB8e8Lej8GVDTs4-ONNOzKUCSJBMu73dAE2n6xgCr1RWbfcuHvGW51ikESMcqg-YLKXmN7Tb7DMqom5U1R7YOKeDqS3274hbtckXLYJnBbCdO3pE625Z-Zr6s-q0sjuw1iPzv2PN6bNEEN9exb4tURHz1fzGDdZrQiJpXzV6sbcJ1QT2aRw4LRqiccCvCn8y-UD9AFmhW_eFKG0GWE35gt0QFeYLvOcOGbS-2r4eVFBeK9F-O5gP3G8y6x_mM2Dt9r2SRqoK9crynJ0Q8TunoZdNsuJ9KpX-LnKDcBb38OSlGoeaffQxV4Uhsw3-NtQ2QFp3rbLGQE6ezPbZxCbslhPzgf88xpF3J4ffNRs_kxsVVATGtK59lyhGlbFcj1PyJUIsM-lsuf3ESyFc1GGWlVnpm4eao8HdRO8zuckmWxqdkbptPWyLhjVvAc-LvkIYgpUEvSIoi9y4SlJdHxbEqgutv_apuOgadcoApuq2YVJsKKr9_6PSD7hfSlcYhSDoOPcgJaQjsf1V_fQ2LGLOGJ-FX4sLN3yagKmDkEM02bHC4BWk25YtPo8TwC6znX0XOxZNNIlq4e6porpfvEDpgXCXhaAYctxro8AboWUxrsepc34GR7QNjE6s0rS17MjK3j9muNFXVoYj0lFcKU1BfQvPSa7iXMeukXMgeK_8MkoQxXe1PWIO8vC1ISTGZy6TWSotou_eLCFcFk-L3bHune1VvwMUHwirNgb2svs4bdfcYpIfsZr9qwVEmM9x6LDZqsg3-HBIp1LuS2JyxgKCSa-Qi49rQA8VNhwBeXyxDsfxXhajIJAMGpn-9NQ6ee1fgemBhgIxe8RPcQ&qPuKfNcX=4&rDSpPGCj=3212677&EljGiXTe=&ewhOrUgS=0,0&EGTKqnJu=&IoKvzMNQ=&s=1280,1024,1,1280,1024,0 HTTP/1.1
Host: premiumvertising.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://159.89.198.98/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
popads-node: wb11
access-control-allow-origin: *
asf: 9
popads-ec: ASB
content-type: text/javascript;charset=UTF-8
content-length: 44
date: Sun, 29 Sep 2024 18:23:27 GMT
|
|
| daw5yhguzt8z.s4.adsco.re/ | 185.200.116.60 | | 0 B |
URL daw5yhguzt8z.s4.adsco.re/ IP185.200.116.60:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST / HTTP/1.1
Host: daw5yhguzt8z.s4.adsco.re
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 0
Origin: http://159.89.198.98
DNT: 1
Connection: keep-alive
Referer: http://159.89.198.98/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 29 Sep 2024 18:23:27 GMT
content-type: text/html
content-length: 0
last-modified: Tue, 03 Oct 2023 13:29:59 GMT
etag: "651c1757-0"
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
access-control-expose-headers: Content-Length,Content-Range
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| adsco.re/p | 162.252.214.5 | 200 OK | 876 B |
IP162.252.214.5:443
Requested byhttps://misterindo.net/x/?id=yr0kr27 CertificateIssuerSectigo Limited Subject*.adsco.re Fingerprint3B:64:1C:DA:8C:64:22:01:36:0F:54:7A:99:6E:AD:26:C2:EF:59:8B ValidityMon, 23 Sep 2024 00:00:00 GMT - Mon, 29 Sep 2025 23:59:59 GMT
File typeASCII text, with very long lines (1106), with no line terminators Hash4f6cacb56e2843df27c5105f66e6e45e 96da10f99d2b30d0766ff5f2d6ceea8f4251b0f5 03c0878ea8dd46bcbf48e3e0f92c96a8350acf54d18d4a51c5807dd8907ff1aa
POST /p HTTP/1.1
Host: adsco.re
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Length: 1980
Origin: https://misterindo.net
DNT: 1
Connection: keep-alive
Referer: https://misterindo.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 29 Sep 2024 18:23:27 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
AS-P-1: OK lon123
AS-P-2: OK
AS-P-3: OK
Access-Control-Max-Age: 2592000
Cache-Control: no-transform
Accept-CH: Sec-CH-UA, Sec-CH-UA-Mobile, Sec-CH-UA-Full-Version, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Arch, Sec-CH-UA-Model, Device-Memory, Downlink, ECT, RTT, Width, Viewport-Width, DPR
Access-Control-Allow-Origin: https://misterindo.net
Access-Control-Allow-Credentials: true
Content-Encoding: gzip
|
|
| premiumvertising.com/dppmefudlykxhemz?DXRFVsOf=BQMyAAAAAAAACZUAAii0ZCkB_O4iBXbTIHxW5iDOIxqlp_tqead4qoqvsxwvpj4NeTqVaIHFI2C3RUYz64EPz5rSuBgwgoGrC8jwWNoKbrHH0S-EYF3GmqxMTJkQenkxCibTTOillmeBC76vtNAw5vVXnw5uo8FNlaTHQjGcqPnAFRgCtpTrPcPhYAy37RWTv3an2iaJt-IwhEmALGzHSHB-Hbcr8_aKx9wn_GbO_xJsErwK3mOhfGLi2iNMW1Q3hFtHVTQwwyElYRFipzidNw-1Cc-zpupqUuzG1oG-FErWMGL-9eLVxy0GUL7tKFtgXWNmxfMMhLOkO-iIeSgnH4FZ7WYakzyrQLoe5AGcFkDM--GYXropdFVH5NTA5w0M-U0c9PJcQILXZxWZPRbTsbcAfPCNb5NkENmVgZz10VVjbjEp_sF6t49E5FBtkbq1oBYyqopjXjDAFqCWJ70AfMOZfT64EX4k8V_C4NF91uHZA3506AhmntD5kLeZTsAn4yOfMdDGeBBBJiKbfhziVlKRr3Z4bcKZoSV8_EnRbeSoyfL0mFlM1q2KZ8u1B9a7-GQKTxU-CcKmC8x63i0S7etf4N1ESkooFi313nGaGU-Y2UW9zGeNn9laeRikZX_1sJLY1hcCGqorM8gXUOflKigBFMOu7aQluBbQZPfYfIwZOVhBuFxaRtv24Swfjr8YgJy8LQATIwjvYejpYhMePkorWxAfP2SzaK07EAitTrrTApJx_OH_XpWtx9xe6v2ojHex4m0GOehRicNrEXZjDxPGCKDs7tPqbb6045Ddtw9XTo7V07z1PxZBwlg2_y5Z1hQjSxcMGUhSyt4tAdUaQ54GQHwNrCWwun7Vx6E2C72vEFbbRRDQTOZN1l0njbbRzr3tuuOkCyaPa6juN4I29DGJ8MgCVO6o6vqBAqnoPbqV428PhZwnCRp6xPV9Zm1JkivuoqhK6eHOz1Zdfngr4aZJ1sG3Mx6XDiv27GiCSrLzfbnqpmORs-neGWdMp8pQK2SMVPpmzkABYBqqVeV4JWDOAeO_9_h5nCXnHINFtRseChjPLSG6aOfEqK-MtGV5BHZKMUlHcbkIsjZmjw&IryZlhom=4&WfVZKHXz=2583764&iSVFOIZs=&rhXlpSsn=0,0&VfTUHKjA=&sqXdfpwt=http%3A%2F%2F159.89.198.98%2F&s=1280,1024,1,1280,1024,1 | 162.252.214.11 | | 44 B |
URL premiumvertising.com/dppmefudlykxhemz?DXRFVsOf=BQMyAAAAAAAACZUAAii0ZCkB_O4iBXbTIHxW5iDOIxqlp_tqead4qoqvsxwvpj4NeTqVaIHFI2C3RUYz64EPz5rSuBgwgoGrC8jwWNoKbrHH0S-EYF3GmqxMTJkQenkxCibTTOillmeBC76vtNAw5vVXnw5uo8FNlaTHQjGcqPnAFRgCtpTrPcPhYAy37RWTv3an2iaJt-IwhEmALGzHSHB-Hbcr8_aKx9wn_GbO_xJsErwK3mOhfGLi2iNMW1Q3hFtHVTQwwyElYRFipzidNw-1Cc-zpupqUuzG1oG-FErWMGL-9eLVxy0GUL7tKFtgXWNmxfMMhLOkO-iIeSgnH4FZ7WYakzyrQLoe5AGcFkDM--GYXropdFVH5NTA5w0M-U0c9PJcQILXZxWZPRbTsbcAfPCNb5NkENmVgZz10VVjbjEp_sF6t49E5FBtkbq1oBYyqopjXjDAFqCWJ70AfMOZfT64EX4k8V_C4NF91uHZA3506AhmntD5kLeZTsAn4yOfMdDGeBBBJiKbfhziVlKRr3Z4bcKZoSV8_EnRbeSoyfL0mFlM1q2KZ8u1B9a7-GQKTxU-CcKmC8x63i0S7etf4N1ESkooFi313nGaGU-Y2UW9zGeNn9laeRikZX_1sJLY1hcCGqorM8gXUOflKigBFMOu7aQluBbQZPfYfIwZOVhBuFxaRtv24Swfjr8YgJy8LQATIwjvYejpYhMePkorWxAfP2SzaK07EAitTrrTApJx_OH_XpWtx9xe6v2ojHex4m0GOehRicNrEXZjDxPGCKDs7tPqbb6045Ddtw9XTo7V07z1PxZBwlg2_y5Z1hQjSxcMGUhSyt4tAdUaQ54GQHwNrCWwun7Vx6E2C72vEFbbRRDQTOZN1l0njbbRzr3tuuOkCyaPa6juN4I29DGJ8MgCVO6o6vqBAqnoPbqV428PhZwnCRp6xPV9Zm1JkivuoqhK6eHOz1Zdfngr4aZJ1sG3Mx6XDiv27GiCSrLzfbnqpmORs-neGWdMp8pQK2SMVPpmzkABYBqqVeV4JWDOAeO_9_h5nCXnHINFtRseChjPLSG6aOfEqK-MtGV5BHZKMUlHcbkIsjZmjw&IryZlhom=4&WfVZKHXz=2583764&iSVFOIZs=&rhXlpSsn=0,0&VfTUHKjA=&sqXdfpwt=http%3A%2F%2F159.89.198.98%2F&s=1280,1024,1,1280,1024,1 IP162.252.214.11:0
File typeASCII text, with no line terminators Hashd5f0a25e4d3522d56d48ce7bc3e518fb 86794caff58f7fee6e684c2ba7195f970a8d6f4c 9d781128a8ece413b003d5612b8398bf9340ef7f5b751d12bd125ba523d3ceb5
GET /dppmefudlykxhemz?DXRFVsOf=BQMyAAAAAAAACZUAAii0ZCkB_O4iBXbTIHxW5iDOIxqlp_tqead4qoqvsxwvpj4NeTqVaIHFI2C3RUYz64EPz5rSuBgwgoGrC8jwWNoKbrHH0S-EYF3GmqxMTJkQenkxCibTTOillmeBC76vtNAw5vVXnw5uo8FNlaTHQjGcqPnAFRgCtpTrPcPhYAy37RWTv3an2iaJt-IwhEmALGzHSHB-Hbcr8_aKx9wn_GbO_xJsErwK3mOhfGLi2iNMW1Q3hFtHVTQwwyElYRFipzidNw-1Cc-zpupqUuzG1oG-FErWMGL-9eLVxy0GUL7tKFtgXWNmxfMMhLOkO-iIeSgnH4FZ7WYakzyrQLoe5AGcFkDM--GYXropdFVH5NTA5w0M-U0c9PJcQILXZxWZPRbTsbcAfPCNb5NkENmVgZz10VVjbjEp_sF6t49E5FBtkbq1oBYyqopjXjDAFqCWJ70AfMOZfT64EX4k8V_C4NF91uHZA3506AhmntD5kLeZTsAn4yOfMdDGeBBBJiKbfhziVlKRr3Z4bcKZoSV8_EnRbeSoyfL0mFlM1q2KZ8u1B9a7-GQKTxU-CcKmC8x63i0S7etf4N1ESkooFi313nGaGU-Y2UW9zGeNn9laeRikZX_1sJLY1hcCGqorM8gXUOflKigBFMOu7aQluBbQZPfYfIwZOVhBuFxaRtv24Swfjr8YgJy8LQATIwjvYejpYhMePkorWxAfP2SzaK07EAitTrrTApJx_OH_XpWtx9xe6v2ojHex4m0GOehRicNrEXZjDxPGCKDs7tPqbb6045Ddtw9XTo7V07z1PxZBwlg2_y5Z1hQjSxcMGUhSyt4tAdUaQ54GQHwNrCWwun7Vx6E2C72vEFbbRRDQTOZN1l0njbbRzr3tuuOkCyaPa6juN4I29DGJ8MgCVO6o6vqBAqnoPbqV428PhZwnCRp6xPV9Zm1JkivuoqhK6eHOz1Zdfngr4aZJ1sG3Mx6XDiv27GiCSrLzfbnqpmORs-neGWdMp8pQK2SMVPpmzkABYBqqVeV4JWDOAeO_9_h5nCXnHINFtRseChjPLSG6aOfEqK-MtGV5BHZKMUlHcbkIsjZmjw&IryZlhom=4&WfVZKHXz=2583764&iSVFOIZs=&rhXlpSsn=0,0&VfTUHKjA=&sqXdfpwt=http%3A%2F%2F159.89.198.98%2F&s=1280,1024,1,1280,1024,1 HTTP/1.1
Host: premiumvertising.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://misterindo.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
popads-node: wb11
access-control-allow-origin: *
asf: 9
popads-ec: ASB
content-type: text/javascript;charset=UTF-8
content-length: 44
date: Sun, 29 Sep 2024 18:23:27 GMT
X-Firefox-Spdy: h2
|
|
| ftbutabgdfbb.s4.adsco.re/ | 185.200.116.60 | 200 OK | 0 B |
URL POST HTTP/2ftbutabgdfbb.s4.adsco.re/ IP185.200.116.60:443
Requested byhttps://misterindo.net/x/?id=yr0kr27 CertificateIssuerLet's Encrypt Subject*.s4.adsco.re Fingerprint22:5D:98:D0:BB:80:5F:1E:49:6B:29:EF:5A:9B:92:84:CA:ED:5E:CE ValidityThu, 19 Sep 2024 09:14:11 GMT - Wed, 18 Dec 2024 09:14:10 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST / HTTP/1.1
Host: ftbutabgdfbb.s4.adsco.re
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 0
Origin: https://misterindo.net
DNT: 1
Connection: keep-alive
Referer: https://misterindo.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 29 Sep 2024 18:23:28 GMT
content-type: text/html
content-length: 0
last-modified: Tue, 03 Oct 2023 13:29:59 GMT
etag: "651c1757-0"
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
access-control-expose-headers: Content-Length,Content-Range
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| 209.97.171.113/ | 209.97.171.113 | | 7.4 kB |
IP209.97.171.113:0 ASN#14061 DIGITALOCEAN-ASN
File typeHTML document, Unicode text, UTF-8 text, with very long lines (1276), with CRLF, LF line terminators Hash11e7ce7b61f4ecede2ba7f96181f917b a8f2f9ea24bc793abab3f1e6919668906db0950a 6d2caab73a490ea92ce2cff05fd7bfcee6eed2961ae25a79e23c2540d4adf9ff
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET / HTTP/1.1
Host: 209.97.171.113
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://159.89.198.98/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 29 Sep 2024 17:27:11 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Content-Encoding: gzip
Vary: Accept-Encoding
X-Powered-By: EasyEngine 3.8.1
|
|
| cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.min.css | 104.17.25.14 | | 5.6 kB |
URL cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.min.css IP104.17.25.14:0
File typeASCII text, with very long lines (30837) Hash269550530cc127b6aa5a35925a7de6ce 512c7d79033e3028a9be61b540cf1a6870c896f8 799aeb25cc0373fdee0e1b1db7ad6c2f6a0e058dfadaa3379689f583213190bd
GET /ajax/libs/font-awesome/4.7.0/css/font-awesome.min.css HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://209.97.171.113/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 29 Sep 2024 18:23:31 GMT
content-type: text/css; charset=utf-8
content-length: 5631
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03e5f-7918"
last-modified: Mon, 04 May 2020 16:10:07 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 174204
expires: Fri, 19 Sep 2025 18:23:31 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=AwY0lYr3br%2BBatHXuh0IISnGlqfr8CQGFdBOBDbb3Zj841zL2P0ahuyX63%2Fqn14%2FT4Iu5ROQw3ap8z0g6yVu7TKF5N0kYCLwOxl7qIDgN9JEhOkircOxKKxyOdNBLoWeGKtVDe1e"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 8cae0140dbac568a-OSL
X-Firefox-Spdy: h2
|
|
| cdn.jsdelivr.net/npm/sidr@2.2.1/dist/jquery.sidr.min.js | 104.18.186.31 | 200 OK | 2.8 kB |
URL GET HTTP/2cdn.jsdelivr.net/npm/sidr@2.2.1/dist/jquery.sidr.min.js IP104.18.186.31:443
Requested byhttp://159.89.198.98/video/yr0kr27/corno-deixou-sua-esposa-puta-ir-para-o-motel-com-o-comedor-poderoso-e-ficou-em-casa-vendo-tudo-pelo-celular CertificateIssuerSectigo Limited Subject*.jsdelivr.net Fingerprint74:7A:63:DF:06:27:1E:52:8C:E8:0D:AD:1F:89:98:B5:EB:2D:49:EE ValiditySat, 04 May 2024 00:00:00 GMT - Sun, 04 May 2025 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (6911) Hash37ac88aac020d48f424ec4c64119f107 57c359f422507358cd667f4119bd54086a1e842d fd57ae7228574a83527cb8917ec5a0ff944aa787934ee5b85a7976f259b7ae31
GET /npm/sidr@2.2.1/dist/jquery.sidr.min.js HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://209.97.171.113/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 29 Sep 2024 18:23:31 GMT
content-type: application/javascript; charset=utf-8
content-length: 2765
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-jsd-version: 2.2.1
x-jsd-version-type: version
etag: W/"1b7a-V8NZ9CJQc1jNZn9BGb1UCGoehC0"
content-encoding: br
x-served-by: cache-fra-etou8220041-FRA, cache-lga21952-LGA
x-cache: HIT, HIT
vary: Accept-Encoding
cf-cache-status: HIT
age: 9355379
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=PUp1%2BpqV08LaM3C5fQMU4sTYQtUY9jBjoKdF6%2Fuiz2kvskSLUm0lk0dGuxmvPJFuwazefYGyLQugxHZdY1GIl9bf64nRLJ3cx5GCdyi5BNghQKEkPBTyJTiOuR8qARM1FBw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8cae0140ebecb50b-OSL
X-Firefox-Spdy: h2
|
|
| cdn.jsdelivr.net/npm/vanilla-lazyload@10.19.0/dist/lazyload.min.js | 104.18.186.31 | 200 OK | 2.2 kB |
URL GET HTTP/2cdn.jsdelivr.net/npm/vanilla-lazyload@10.19.0/dist/lazyload.min.js IP104.18.186.31:443
Requested byhttp://159.89.198.98/video/yr0kr27/corno-deixou-sua-esposa-puta-ir-para-o-motel-com-o-comedor-poderoso-e-ficou-em-casa-vendo-tudo-pelo-celular CertificateIssuerSectigo Limited Subject*.jsdelivr.net Fingerprint74:7A:63:DF:06:27:1E:52:8C:E8:0D:AD:1F:89:98:B5:EB:2D:49:EE ValiditySat, 04 May 2024 00:00:00 GMT - Sun, 04 May 2025 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (5459) Hashaa4be4d4db22516319b99e0a25ea2408 ee84931668058ddaf04949730d69811fd88c5c46 adf03f7ab87622faa77b4d12f97ff80466377950b805021a07a8c11804ceac14
GET /npm/vanilla-lazyload@10.19.0/dist/lazyload.min.js HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://209.97.171.113/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 29 Sep 2024 18:23:31 GMT
content-type: application/javascript; charset=utf-8
content-length: 2168
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-jsd-version: 10.19.0
x-jsd-version-type: version
etag: W/"157d-7oSTFmgFjdrwSUlzDWmBH9iMXEY"
content-encoding: gzip
x-served-by: cache-fra-eddf8230125-FRA, cache-lga21950-LGA
x-cache: HIT, HIT
vary: Accept-Encoding
cf-cache-status: HIT
age: 9366050
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=aRPNo5WXs9mhivygHXn8rW%2B1%2Fpvk1GUUG9UhhCHw%2FPwLthST5E0RAkqepXNRM21UNRAvp%2BO5PCUrAXdU5VTpsXD1h8kYyv5f3ATb4h6cR8iVBqSGxG8sxCiNTORpKxP7PRM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8cae0140ebf1b50b-OSL
X-Firefox-Spdy: h2
|
|
| vjs.zencdn.net/7.4.1/video-js.css | 151.101.130.217 | 200 OK | 10 kB |
URL GET HTTP/2vjs.zencdn.net/7.4.1/video-js.css IP151.101.130.217:443
Requested byhttp://159.89.198.98/video/yr0kr27/corno-deixou-sua-esposa-puta-ir-para-o-motel-com-o-comedor-poderoso-e-ficou-em-casa-vendo-tudo-pelo-celular CertificateIssuerGlobalSign nv-sa Subjectvjs.zencdn.net Fingerprint6B:3F:11:07:D7:05:FD:AF:4D:46:B4:BA:1C:8A:60:70:95:37:35:17 ValidityWed, 06 Mar 2024 21:50:11 GMT - Mon, 07 Apr 2025 21:50:10 GMT
File typeASCII text, with very long lines (5636) Hash3590e6d49535539fe8c4504bac50c112 e51b9be26bb83261560d351d2aeace99e627465a dbd92c6a97303c4c9b21a28f3598b2567ecd663bfd6dfb927657c7ab8d833807
GET /7.4.1/video-js.css HTTP/1.1
Host: vjs.zencdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://209.97.171.113/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
last-modified: Fri, 28 Dec 2018 01:16:11 GMT
etag: "3590e6d49535539fe8c4504bac50c112"
cache-control: public, max-age=31536000
content-type: text/css; charset=utf-8
content-encoding: gzip
date: Sun, 29 Sep 2024 18:23:31 GMT
x-served-by: cache-hel1410023-HEL
x-cache: HIT
x-cache-hits: 343
vary: Accept-Encoding
access-control-allow-origin: *
timing-allow-origin: *
content-length: 10390
X-Firefox-Spdy: h2
|
|
| 209.97.171.113/include/style.css?v=1.0.0 | 209.97.171.113 | | 3.4 kB |
URL 209.97.171.113/include/style.css?v=1.0.0 IP209.97.171.113:0 ASN#14061 DIGITALOCEAN-ASN
File typeASCII text, with very long lines (667), with CRLF line terminators Hash66b5d8f5a2459bd9df67fe3cc8fbe379 cec29ed346e0f895d70e6b5108dc49f373052f99 6c3566b6cfe84400e9bb82257116623eadc98a4aa7ab20fec459688fffda8fa1
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /include/style.css?v=1.0.0 HTTP/1.1
Host: 209.97.171.113
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://209.97.171.113/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 29 Sep 2024 17:27:12 GMT
Content-Type: text/css
Last-Modified: Mon, 14 Aug 2023 04:19:53 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"64d9ab69-3712"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Access-Control-Allow-Origin: *
Content-Encoding: gzip
|
|
| 209.97.171.113/include/looppopup.js?v=1 | 209.97.171.113 | | 1.2 kB |
URL 209.97.171.113/include/looppopup.js?v=1 IP209.97.171.113:0 ASN#14061 DIGITALOCEAN-ASN
File typeASCII text, with CRLF line terminators Hashf46bede1be418aa3109accfb2262dd24 83f8fbdde071d01cf9a1e4caf8ca4d81e9711605 026fd061fb92946c9e08847d4d2fe9d2dd79aa0eb2a327223e82f6cf63928411
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /include/looppopup.js?v=1 HTTP/1.1
Host: 209.97.171.113
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://209.97.171.113/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 29 Sep 2024 17:27:12 GMT
Content-Type: application/javascript
Last-Modified: Wed, 10 Jul 2024 23:24:45 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"668f183d-1036"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Access-Control-Allow-Origin: *
Content-Encoding: gzip
|
|
| cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/fonts/fontawesome-webfont.woff2?v=4.7.0 | 104.17.25.14 | 200 OK | 77 kB |
URL GET HTTP/2cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/fonts/fontawesome-webfont.woff2?v=4.7.0 IP104.17.25.14:443
Requested byhttp://159.89.198.98/video/yr0kr27/corno-deixou-sua-esposa-puta-ir-para-o-motel-com-o-comedor-poderoso-e-ficou-em-casa-vendo-tudo-pelo-celular CertificateIssuerGoogle Trust Services Subjectcdnjs.cloudflare.com FingerprintE6:47:BB:06:9C:32:48:7E:A6:0A:4B:62:53:7B:F0:35:5D:A9:A3:8A ValiditySat, 28 Sep 2024 05:35:05 GMT - Fri, 27 Dec 2024 05:35:04 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 77160, version 4.459 Hashaf7ae505a9eed503f8b8e6982036873e d6f48cba7d076fb6f2fd6ba993a75b9dc1ecbf0c 2adefcbc041e7d18fcf2d417879dc5a09997aa64d675b7a3c4b6ce33da13f3fe
GET /ajax/libs/font-awesome/4.7.0/fonts/fontawesome-webfont.woff2?v=4.7.0 HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://209.97.171.113
DNT: 1
Connection: keep-alive
Referer: https://cdnjs.cloudflare.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 29 Sep 2024 18:23:32 GMT
content-type: application/octet-stream; charset=utf-8
content-length: 77160
access-control-allow-origin: *
cache-control: public, max-age=30672000
etag: "5eb03e5f-12d68"
last-modified: Mon, 04 May 2020 16:10:07 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 825303
expires: Fri, 19 Sep 2025 18:23:32 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mOlIb15StYHmk9uzAmY06HBz5%2FnfUIeG8uURQLAVrwjUC4jWl7UdrqFL940lnB3lHVCiVGr%2Fkv6Zv2361HHQFlEBugvj4GVmGkMB5JFqlK2k%2F7mfQDwVHaYFNQeTNoE6NotyZCXf"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 8cae01432d07569a-OSL
X-Firefox-Spdy: h2
|
|
| cdn77-pic.others-cdn.com/videos/thumbs169xnxxll/e6/5f/79/e65f7904f0dc468b40423e43a31b2b6e/e65f7904f0dc468b40423e43a31b2b6e.4.jpg | 195.181.166.15 | | 8.9 kB |
URL cdn77-pic.others-cdn.com/videos/thumbs169xnxxll/e6/5f/79/e65f7904f0dc468b40423e43a31b2b6e/e65f7904f0dc468b40423e43a31b2b6e.4.jpg IP195.181.166.15:0 ASN#60068 Datacamp Limited
CertificateIssuerSectigo Limited Subjectxvideos.com FingerprintC8:79:F3:AC:85:D8:36:AC:8C:F2:30:0D:AF:6E:19:50:37:CC:C6:95 ValidityTue, 10 Oct 2023 00:00:00 GMT - Fri, 11 Oct 2024 23:59:59 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 100", progressive, precision 8, 352x198, components 3 Hash4e3b43fea521db7e8b0adda6e9c1d5af 47a0e269d97a34cef2a196177876a9128565c993 a2a9d603dce0aa14f17f6cef8cb28edf45d816ec50c5b77ca5709da180254a8b
GET /videos/thumbs169xnxxll/e6/5f/79/e65f7904f0dc468b40423e43a31b2b6e/e65f7904f0dc468b40423e43a31b2b6e.4.jpg HTTP/1.1
Host: cdn77-pic.others-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://209.97.171.113/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 29 Sep 2024 18:23:32 GMT
content-type: image/jpeg
content-length: 8877
x-frame-options: sameorigin
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
last-modified: Tue, 24 Sep 2024 16:58:55 GMT
cache-control: max-age=10368000, public
access-control-allow-origin: *
x-77-nzt: EwwBw7WmDQH3WYQFAAwBT3/TFQH3n/sAAAgBj/Q6jAGB
x-77-nzt-ray: b1f3ea1b01d8520c249bf96649b7a919
x-accel-expires: @1737576236
x-77-cache: HIT
x-accel-date: 1727272651
x-77-age: 361561
server: CDN77-Turbo
x-accel-date-max: 1727272651
x-cache: HIT
x-age: 361561
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| cdn77-pic.others-cdn.com/videos/thumbs169xnxxll/2d/d1/7b/2dd17bbeec765d234a3b96624875ec9e/2dd17bbeec765d234a3b96624875ec9e.12.jpg | 195.181.166.15 | | 24 kB |
URL cdn77-pic.others-cdn.com/videos/thumbs169xnxxll/2d/d1/7b/2dd17bbeec765d234a3b96624875ec9e/2dd17bbeec765d234a3b96624875ec9e.12.jpg IP195.181.166.15:0 ASN#60068 Datacamp Limited
CertificateIssuerSectigo Limited Subjectxvideos.com FingerprintC8:79:F3:AC:85:D8:36:AC:8C:F2:30:0D:AF:6E:19:50:37:CC:C6:95 ValidityTue, 10 Oct 2023 00:00:00 GMT - Fri, 11 Oct 2024 23:59:59 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 100", progressive, precision 8, 352x198, components 3 Hashb2bec7386ef77f5fc3fa05d135d0dedf 222baad3c1078d010585a8ce736ece232fad2c57 586a0713aa5c253f6d6f4286d374a905922432b4f3f003f041b22c9afa703942
GET /videos/thumbs169xnxxll/2d/d1/7b/2dd17bbeec765d234a3b96624875ec9e/2dd17bbeec765d234a3b96624875ec9e.12.jpg HTTP/1.1
Host: cdn77-pic.others-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://209.97.171.113/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 29 Sep 2024 18:23:32 GMT
content-type: image/jpeg
content-length: 23756
x-frame-options: sameorigin
last-modified: Wed, 12 Apr 2023 00:20:05 GMT
cache-control: max-age=10368000, public
access-control-allow-origin: *
x-77-nzt: A8O1pg03Nzf/D8kQANRmOAn/rRD/Uj8FAI/0OsilTDWh
x-77-nzt-ray: b1f3ea1b01d8520c249bf9660173081a
x-77-cache: HIT
x-accel-expires: @1736901971
x-cache-lb: HIT
x-age-lb: 343890
server: CDN77-Turbo
x-accel-date: 1726534165
x-accel-date-max: 1681627291
x-cache: HIT
x-age: 1100047
x-77-age: 1100047
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| cdn77-pic.others-cdn.com/videos/thumbs169xnxxll/ee/f4/49/eef4492612bf7658a8aa1c2af005dcbd/eef4492612bf7658a8aa1c2af005dcbd.4.jpg | 195.181.166.15 | | 8.2 kB |
URL cdn77-pic.others-cdn.com/videos/thumbs169xnxxll/ee/f4/49/eef4492612bf7658a8aa1c2af005dcbd/eef4492612bf7658a8aa1c2af005dcbd.4.jpg IP195.181.166.15:0 ASN#60068 Datacamp Limited
CertificateIssuerSectigo Limited Subjectxvideos.com FingerprintC8:79:F3:AC:85:D8:36:AC:8C:F2:30:0D:AF:6E:19:50:37:CC:C6:95 ValidityTue, 10 Oct 2023 00:00:00 GMT - Fri, 11 Oct 2024 23:59:59 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 100", progressive, precision 8, 352x198, components 3 Hasheb6490912197764930efae7d86aca92d 14ddbb3cee909a793101b186857f76e22a782231 d9a2016ff338015751e1574317ff701e1f3bb6c335ee77804beca4f8c35f2a1d
GET /videos/thumbs169xnxxll/ee/f4/49/eef4492612bf7658a8aa1c2af005dcbd/eef4492612bf7658a8aa1c2af005dcbd.4.jpg HTTP/1.1
Host: cdn77-pic.others-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://209.97.171.113/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 29 Sep 2024 18:23:32 GMT
content-type: image/jpeg
content-length: 8208
x-frame-options: sameorigin
last-modified: Wed, 18 May 2022 07:30:01 GMT
cache-control: max-age=10368000, public
access-control-allow-origin: *
x-accel-expires: @1736020963
x-77-nzt: A8O1pg03Nzf/AzseANRmOBEc997vJrBSAI/0Ot1iOdX/LgAAAA
x-77-nzt-ray: b1f3ea1b01d8520c249bf96633a1591a
x-77-cache: HIT
x-cache-lb: HIT
x-age-lb: 5419046
server: CDN77-Turbo
x-accel-date: 1725653025
x-accel-date-max: 1672137356
x-cache: HIT
x-age: 1981187
x-77-age: 1981187
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| 209.97.171.113/include/loading.gif | 209.97.171.113 | | 43 B |
URL 209.97.171.113/include/loading.gif IP209.97.171.113:0 ASN#14061 DIGITALOCEAN-ASN
File typeGIF image data, version 89a, 1 x 1 Hash58b6eab85c3d693580ce3b2d5e559c37 894476fccd60af0e4842d8657a36d8186e34a382 39f08c4011ac739fb84eb16366fb23338e4df27d54a459327a95c99c03512ffd
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /include/loading.gif HTTP/1.1
Host: 209.97.171.113
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://209.97.171.113/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 29 Sep 2024 17:27:12 GMT
Content-Type: image/gif
Content-Length: 43
Last-Modified: Mon, 14 Aug 2023 04:19:52 GMT
Connection: keep-alive
ETag: "64d9ab68-2b"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
|
|
| 209.97.171.113/include/favicon.ico | 209.97.171.113 | | 341 B |
URL 209.97.171.113/include/favicon.ico IP209.97.171.113:0 ASN#14061 DIGITALOCEAN-ASN
File typeMS Windows icon resource - 1 icon, 16x16, 32 bits/pixel Hash74bcc9c72ca2e59f467b46d0d2b9f409 0f926f925453097124dbb534296c1958937de453 f8b1b30a7e4579a025ad3b20152f4f2dd96cbc4a028bb2fc226eb95af0868211
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /include/favicon.ico HTTP/1.1
Host: 209.97.171.113
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://209.97.171.113/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 29 Sep 2024 17:27:12 GMT
Content-Type: image/x-icon
Last-Modified: Mon, 14 Aug 2023 04:19:52 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"64d9ab68-47e"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Access-Control-Allow-Origin: *
Content-Encoding: gzip
|
|
| c.adsco.re/ | 104.17.167.186 | | 30 kB |
IP104.17.167.186:0
Requested byhttp://159.89.198.98/video/yr0kr27/corno-deixou-sua-esposa-puta-ir-para-o-motel-com-o-comedor-poderoso-e-ficou-em-casa-vendo-tudo-pelo-celular CertificateIssuerSectigo Limited Subject*.adsco.re Fingerprint3B:64:1C:DA:8C:64:22:01:36:0F:54:7A:99:6E:AD:26:C2:EF:59:8B ValidityMon, 23 Sep 2024 00:00:00 GMT - Mon, 29 Sep 2025 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (881) Hash70e681d122073a9bc3f704fb0f96a82d 5916b6dea0ea58b5807287ca1cd4faf9c9f3aae5 73bfce45d382df02d75ef2ef688325cc973139931db445ee753c2af8a85f3965
GET / HTTP/1.1
Host: c.adsco.re
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://209.97.171.113/
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 29 Sep 2024 18:23:32 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: public, max-age=2678400
Accept-CH: Sec-CH-UA, Sec-CH-UA-Mobile, Sec-CH-UA-Full-Version, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Arch, Sec-CH-UA-Model, Device-Memory, Downlink, ECT, RTT, Width, Viewport-Width, DPR
Permissions-Policy: ch-ua=(self "https://adsco.re"),ch-ua-mobile=(self "https://adsco.re"),ch-ua-full-version=(self "https://adsco.re"),ch-ua-platform=(self "https://adsco.re"),ch-ua-platform-version=(self "https://adsco.re"),ch-ua-arch=(self "https://adsco.re"),ch-ua-model=(self "https://adsco.re"),ch-device-memory=(self "https://adsco.re"),ch-downlink=(self "https://adsco.re"),ch-ect=(self "https://adsco.re"),ch-rtt=(self "https://adsco.re"),ch-width=(self "https://adsco.re"),ch-viewport-width=(self "https://adsco.re"),ch-dpr=(self "https://adsco.re")
Link: <//6.adsco.re/>;rel=prefetch;crossorigin;as=fetch,<//4.adsco.re/>;rel=prefetch;crossorigin;as=fetch,<//adsco.re/>;rel=preconnect
Expires: Wed, 30 Oct 2024 18:23:32 GMT
ETag: W/"cOaB0SIHOpvD9wT7D5aoLQ=="
Content-Encoding: gzip
CF-Cache-Status: HIT
Age: 6737498
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 8cae0145da56b4f7-OSL
alt-svc: h2=":443"; ma=60
|
|
| 6.adsco.re/ | 104.17.166.186 | 200 OK | 45 B |
IP104.17.166.186:443
Requested byhttps://misterindo.net/x/?id=yr0kr27 CertificateIssuerSectigo Limited Subject*.adsco.re Fingerprint3B:64:1C:DA:8C:64:22:01:36:0F:54:7A:99:6E:AD:26:C2:EF:59:8B ValidityMon, 23 Sep 2024 00:00:00 GMT - Mon, 29 Sep 2025 23:59:59 GMT
File typeASCII text, with no line terminators Hash5b41cb22f84f645a103acc7bfbf084ff bac3967b26d5ec4a0d09a580714e8219796816bd 709f0a0dfab9f9e074f4a4a348dcb09150838284d21e75cfb9e5ceaeeb2054bc
GET / HTTP/1.1
Host: 6.adsco.re
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://209.97.171.113
DNT: 1
Connection: keep-alive
Referer: http://209.97.171.113/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 29 Sep 2024 18:23:32 GMT
content-type: text/plain;charset=UTF-8
content-length: 45
access-control-allow-origin: http://209.97.171.113
cache-control: private, max-age=10
access-control-allow-headers: Content-Type
access-control-allow-methods: GET, HEAD, OPTIONS
access-control-max-age: 2592000
vary: Accept-Encoding
server: cloudflare
cf-ray: 8cae0145eb03b51d-OSL
X-Firefox-Spdy: h2
|
|
| c.adsco.re/ | 104.17.167.186 | | 30 kB |
IP104.17.167.186:0
Requested byhttp://159.89.198.98/video/yr0kr27/corno-deixou-sua-esposa-puta-ir-para-o-motel-com-o-comedor-poderoso-e-ficou-em-casa-vendo-tudo-pelo-celular CertificateIssuerSectigo Limited Subject*.adsco.re Fingerprint3B:64:1C:DA:8C:64:22:01:36:0F:54:7A:99:6E:AD:26:C2:EF:59:8B ValidityMon, 23 Sep 2024 00:00:00 GMT - Mon, 29 Sep 2025 23:59:59 GMT
File typegzip compressed data, max speed, from Unix Hash07b455df47bcadda9973ca535a10b435 f21615908e53b56d02f652c96ec58e7a8885eb40 a4e0d771e03e6e2346fd0cbc0d3175a4884ed13ad5d1e8f2f55daac6987d6400
GET / HTTP/1.1
Host: c.adsco.re
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://209.97.171.113/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 29 Sep 2024 18:23:32 GMT
content-type: text/html
cache-control: public, max-age=2678400
accept-ch: Sec-CH-UA, Sec-CH-UA-Mobile, Sec-CH-UA-Full-Version, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Arch, Sec-CH-UA-Model, Device-Memory, Downlink, ECT, RTT, Width, Viewport-Width, DPR
permissions-policy: ch-ua=(self "https://adsco.re"),ch-ua-mobile=(self "https://adsco.re"),ch-ua-full-version=(self "https://adsco.re"),ch-ua-platform=(self "https://adsco.re"),ch-ua-platform-version=(self "https://adsco.re"),ch-ua-arch=(self "https://adsco.re"),ch-ua-model=(self "https://adsco.re"),ch-device-memory=(self "https://adsco.re"),ch-downlink=(self "https://adsco.re"),ch-ect=(self "https://adsco.re"),ch-rtt=(self "https://adsco.re"),ch-width=(self "https://adsco.re"),ch-viewport-width=(self "https://adsco.re"),ch-dpr=(self "https://adsco.re")
link: <//6.adsco.re/>;rel=prefetch;crossorigin;as=fetch,<//4.adsco.re/>;rel=prefetch;crossorigin;as=fetch,<//adsco.re/>;rel=preconnect
expires: Wed, 30 Oct 2024 18:23:32 GMT
etag: W/"cOaB0SIHOpvD9wT7D5aoLQ=="
content-encoding: gzip
cf-cache-status: HIT
age: 6737534
vary: Accept-Encoding
server: cloudflare
cf-ray: 8cae0143b94db50f-OSL
X-Firefox-Spdy: h2
|
|
| 4.adsco.re/ | 162.252.214.5 | | 62 B |
IP162.252.214.5:0
File typeASCII text, with no line terminators Hash5b41cb22f84f645a103acc7bfbf084ff bac3967b26d5ec4a0d09a580714e8219796816bd 709f0a0dfab9f9e074f4a4a348dcb09150838284d21e75cfb9e5ceaeeb2054bc
GET / HTTP/1.1
Host: 4.adsco.re
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://209.97.171.113
DNT: 1
Connection: keep-alive
Referer: http://209.97.171.113/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 29 Sep 2024 18:23:32 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Methods: GET, HEAD, OPTIONS
Access-Control-Allow-Headers: Content-Type
Access-Control-Allow-Origin: http://209.97.171.113
Access-Control-Max-Age: 2592000
Cache-Control: private, max-age=5
Content-Encoding: gzip
|
|
| 4.adsco.re:2087/ | 162.252.214.5 | 200 OK | 62 B |
IP162.252.214.5:2087
Requested byhttps://misterindo.net/x/?id=yr0kr27 CertificateIssuerSectigo Limited Subject*.adsco.re Fingerprint3B:64:1C:DA:8C:64:22:01:36:0F:54:7A:99:6E:AD:26:C2:EF:59:8B ValidityMon, 23 Sep 2024 00:00:00 GMT - Mon, 29 Sep 2025 23:59:59 GMT
File typeASCII text, with no line terminators Hash5b41cb22f84f645a103acc7bfbf084ff bac3967b26d5ec4a0d09a580714e8219796816bd 709f0a0dfab9f9e074f4a4a348dcb09150838284d21e75cfb9e5ceaeeb2054bc
GET / HTTP/1.1
Host: 4.adsco.re:2087
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://209.97.171.113
DNT: 1
Connection: keep-alive
Referer: http://209.97.171.113/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 29 Sep 2024 18:23:32 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Methods: GET, HEAD, OPTIONS
Access-Control-Allow-Headers: Content-Type
Access-Control-Allow-Origin: http://209.97.171.113
Access-Control-Max-Age: 2592000
Cache-Control: private, max-age=5
Content-Encoding: gzip
|
|
| c.adsco.re/ | 104.17.167.186 | | 30 kB |
IP104.17.167.186:0
Requested byhttp://159.89.198.98/video/yr0kr27/corno-deixou-sua-esposa-puta-ir-para-o-motel-com-o-comedor-poderoso-e-ficou-em-casa-vendo-tudo-pelo-celular CertificateIssuerSectigo Limited Subject*.adsco.re Fingerprint3B:64:1C:DA:8C:64:22:01:36:0F:54:7A:99:6E:AD:26:C2:EF:59:8B ValidityMon, 23 Sep 2024 00:00:00 GMT - Mon, 29 Sep 2025 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (881) Hash70e681d122073a9bc3f704fb0f96a82d 5916b6dea0ea58b5807287ca1cd4faf9c9f3aae5 73bfce45d382df02d75ef2ef688325cc973139931db445ee753c2af8a85f3965
GET / HTTP/1.1
Host: c.adsco.re
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://c.adsco.re/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 29 Sep 2024 18:23:32 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: public, max-age=2678400
Accept-CH: Sec-CH-UA, Sec-CH-UA-Mobile, Sec-CH-UA-Full-Version, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Arch, Sec-CH-UA-Model, Device-Memory, Downlink, ECT, RTT, Width, Viewport-Width, DPR
Permissions-Policy: ch-ua=(self "https://adsco.re"),ch-ua-mobile=(self "https://adsco.re"),ch-ua-full-version=(self "https://adsco.re"),ch-ua-platform=(self "https://adsco.re"),ch-ua-platform-version=(self "https://adsco.re"),ch-ua-arch=(self "https://adsco.re"),ch-ua-model=(self "https://adsco.re"),ch-device-memory=(self "https://adsco.re"),ch-downlink=(self "https://adsco.re"),ch-ect=(self "https://adsco.re"),ch-rtt=(self "https://adsco.re"),ch-width=(self "https://adsco.re"),ch-viewport-width=(self "https://adsco.re"),ch-dpr=(self "https://adsco.re")
Link: <//6.adsco.re/>;rel=prefetch;crossorigin;as=fetch,<//4.adsco.re/>;rel=prefetch;crossorigin;as=fetch,<//adsco.re/>;rel=preconnect
Expires: Wed, 30 Oct 2024 18:23:32 GMT
ETag: W/"cOaB0SIHOpvD9wT7D5aoLQ=="
Content-Encoding: gzip
CF-Cache-Status: HIT
Age: 6737498
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 8cae01465afcb4f7-OSL
alt-svc: h2=":443"; ma=60
|
|
| i7blizskf0tr.l4.adsco.re/ | 185.200.118.62 | | 0 B |
URL i7blizskf0tr.l4.adsco.re/ IP185.200.118.62:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST / HTTP/1.1
Host: i7blizskf0tr.l4.adsco.re
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 0
Origin: http://209.97.171.113
DNT: 1
Connection: keep-alive
Referer: http://209.97.171.113/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 29 Sep 2024 18:23:32 GMT
content-type: text/html
content-length: 0
last-modified: Fri, 02 Jun 2023 14:03:32 GMT
etag: "6479f6b4-0"
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
access-control-expose-headers: Content-Length,Content-Range
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| i7blizskf0tr.n4.adsco.re/ | 38.132.109.126 | | 0 B |
URL i7blizskf0tr.n4.adsco.re/ IP38.132.109.126:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST / HTTP/1.1
Host: i7blizskf0tr.n4.adsco.re
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 0
Origin: http://209.97.171.113
DNT: 1
Connection: keep-alive
Referer: http://209.97.171.113/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 29 Sep 2024 18:23:33 GMT
content-type: text/html
content-length: 0
last-modified: Fri, 16 Jun 2023 08:37:42 GMT
etag: "648c1f56-0"
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
access-control-expose-headers: Content-Length,Content-Range
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| adsco.re/p | 162.252.214.5 | 200 OK | 878 B |
IP162.252.214.5:443
Requested byhttps://misterindo.net/x/?id=yr0kr27 CertificateIssuerSectigo Limited Subject*.adsco.re Fingerprint3B:64:1C:DA:8C:64:22:01:36:0F:54:7A:99:6E:AD:26:C2:EF:59:8B ValidityMon, 23 Sep 2024 00:00:00 GMT - Mon, 29 Sep 2025 23:59:59 GMT
File typeASCII text, with very long lines (1106), with no line terminators Hash00d5d704cdadfcefb649951e448cd0c7 74f9bbffe23b418b13202829531610dad51e3b50 e77cf46cbd340398e6d2ea6aedfa8f812826c1396d7de4db5d3a21294f2b71e2
POST /p HTTP/1.1
Host: adsco.re
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Length: 2175
Origin: http://209.97.171.113
DNT: 1
Connection: keep-alive
Referer: http://209.97.171.113/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 29 Sep 2024 18:23:33 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
AS-P-1: OK lon123
AS-P-2: OK
AS-P-3: OK
Access-Control-Max-Age: 2592000
Cache-Control: no-transform
Accept-CH: Sec-CH-UA, Sec-CH-UA-Mobile, Sec-CH-UA-Full-Version, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Arch, Sec-CH-UA-Model, Device-Memory, Downlink, ECT, RTT, Width, Viewport-Width, DPR
Access-Control-Allow-Origin: http://209.97.171.113
Access-Control-Allow-Credentials: true
Content-Encoding: gzip
|
|
| blockadsnot.com/uegnipzlvugepasfkun?SUwaNhgd=BQMyAAAAAAAACZUAAu_xVqQd7QaEz3KwhOVYu6hZqXPbax4lGGnAKTi71OqM7t3mI2RoTIiU6vC5Nbh18msBBNcJK7328XJTGgDk3rVZSKyLEaT-AlL5B-lrQywcTyYsHVfuzhxNEAaIvlhyqCQpa4-nP73fj6_IgSoUKelHQsRwJC3VTWWOhOHbC2C7UkRqEs9o270GtO6b812ZsLZcH80ytm6iiILwFuxsUKvFIUyszyenEQQMXSo3cxX5y3xfW2pykhaWn4KKKWIT7MeEwoIMsh-rt1nRRife5djT0eoD9ZZuNLGquSR4GUP_wpA1qojMlcwQJyELAC_r5G1R9aZOOPyrmU4o-GhgbGShF1x60Nzyu35QXfv_8uR9pgNRGYf0xjDAkOk09A9WellJspW13pJkLZQldrCMr0iqLbKL2wCpIrugu9PQ5gW_hlsOA7rJubJ2znJVF7rX6sTfgl_0lrvxvL3wcG44zK0mtOK8DPyPMFXatQveNwMVOudWKsHVAUGnMlnjaZ_NOG0OE2RUwjM3FSmGMXhZmzycifllK4UwEk_Or6RT4XZlxYvYB7u935xExcvYhvF9cAY2ECmat4XfRVoWpJehMqAjV1JWMWJEbLttC4J95RstddztV4oscHlSsIhAxXZdNqSKiIAqkm4vz1hbh7WCm0pwoy5ySzZduGMr41esFMAZ2pOz2ZKhu1d8Lj8ok7CArjO0EsCwNkoWQcEgEeaBmOLPq-6ZEJXBQxOFIln5LD7Xvfcn2Bp6NQ30k5KBTp4r280Bvlaf1-NsiKapzFNY0KAR4pXpS7QP5-BS7FfJqPJPunoDJLa1vzNxboTfH85Lx1tBaYyiWp5kpD3A1hPYIewsklwKGD7gAU0Sef2wwxPHrEj8D6PBW21AIlXBxrNZ5VaUK2f_tvqbE8ARzyvaOhX310dhajHQRAzl5E759bspzPS1jOUVgNVV0Eoy8otwdfWiJyrXJ5FL9vM_-H_b8-APo_ASwskMHk4WMvteOOmJqe_TnMr_8PK8UZMCWv6LUhS25MiWPjUMmYwhRuqC4ocNS1mfTv44H8UwbrTQlpxNrJTPgrz9QyBpo52Obvcp-w&VUEuexLg=4&dqpgkSQU=3118739&HkyijYfV=&swBEqPLv=0,0&RVtdrFCq=&GESYosNX=http%3A%2F%2F159.89.198.98%2F&s=1280,1024,1,1280,1024,0 | 208.95.112.254 | | 44 B |
URL blockadsnot.com/uegnipzlvugepasfkun?SUwaNhgd=BQMyAAAAAAAACZUAAu_xVqQd7QaEz3KwhOVYu6hZqXPbax4lGGnAKTi71OqM7t3mI2RoTIiU6vC5Nbh18msBBNcJK7328XJTGgDk3rVZSKyLEaT-AlL5B-lrQywcTyYsHVfuzhxNEAaIvlhyqCQpa4-nP73fj6_IgSoUKelHQsRwJC3VTWWOhOHbC2C7UkRqEs9o270GtO6b812ZsLZcH80ytm6iiILwFuxsUKvFIUyszyenEQQMXSo3cxX5y3xfW2pykhaWn4KKKWIT7MeEwoIMsh-rt1nRRife5djT0eoD9ZZuNLGquSR4GUP_wpA1qojMlcwQJyELAC_r5G1R9aZOOPyrmU4o-GhgbGShF1x60Nzyu35QXfv_8uR9pgNRGYf0xjDAkOk09A9WellJspW13pJkLZQldrCMr0iqLbKL2wCpIrugu9PQ5gW_hlsOA7rJubJ2znJVF7rX6sTfgl_0lrvxvL3wcG44zK0mtOK8DPyPMFXatQveNwMVOudWKsHVAUGnMlnjaZ_NOG0OE2RUwjM3FSmGMXhZmzycifllK4UwEk_Or6RT4XZlxYvYB7u935xExcvYhvF9cAY2ECmat4XfRVoWpJehMqAjV1JWMWJEbLttC4J95RstddztV4oscHlSsIhAxXZdNqSKiIAqkm4vz1hbh7WCm0pwoy5ySzZduGMr41esFMAZ2pOz2ZKhu1d8Lj8ok7CArjO0EsCwNkoWQcEgEeaBmOLPq-6ZEJXBQxOFIln5LD7Xvfcn2Bp6NQ30k5KBTp4r280Bvlaf1-NsiKapzFNY0KAR4pXpS7QP5-BS7FfJqPJPunoDJLa1vzNxboTfH85Lx1tBaYyiWp5kpD3A1hPYIewsklwKGD7gAU0Sef2wwxPHrEj8D6PBW21AIlXBxrNZ5VaUK2f_tvqbE8ARzyvaOhX310dhajHQRAzl5E759bspzPS1jOUVgNVV0Eoy8otwdfWiJyrXJ5FL9vM_-H_b8-APo_ASwskMHk4WMvteOOmJqe_TnMr_8PK8UZMCWv6LUhS25MiWPjUMmYwhRuqC4ocNS1mfTv44H8UwbrTQlpxNrJTPgrz9QyBpo52Obvcp-w&VUEuexLg=4&dqpgkSQU=3118739&HkyijYfV=&swBEqPLv=0,0&RVtdrFCq=&GESYosNX=http%3A%2F%2F159.89.198.98%2F&s=1280,1024,1,1280,1024,0 IP208.95.112.254:0
File typeASCII text, with no line terminators Hashd5f0a25e4d3522d56d48ce7bc3e518fb 86794caff58f7fee6e684c2ba7195f970a8d6f4c 9d781128a8ece413b003d5612b8398bf9340ef7f5b751d12bd125ba523d3ceb5
GET /uegnipzlvugepasfkun?SUwaNhgd=BQMyAAAAAAAACZUAAu_xVqQd7QaEz3KwhOVYu6hZqXPbax4lGGnAKTi71OqM7t3mI2RoTIiU6vC5Nbh18msBBNcJK7328XJTGgDk3rVZSKyLEaT-AlL5B-lrQywcTyYsHVfuzhxNEAaIvlhyqCQpa4-nP73fj6_IgSoUKelHQsRwJC3VTWWOhOHbC2C7UkRqEs9o270GtO6b812ZsLZcH80ytm6iiILwFuxsUKvFIUyszyenEQQMXSo3cxX5y3xfW2pykhaWn4KKKWIT7MeEwoIMsh-rt1nRRife5djT0eoD9ZZuNLGquSR4GUP_wpA1qojMlcwQJyELAC_r5G1R9aZOOPyrmU4o-GhgbGShF1x60Nzyu35QXfv_8uR9pgNRGYf0xjDAkOk09A9WellJspW13pJkLZQldrCMr0iqLbKL2wCpIrugu9PQ5gW_hlsOA7rJubJ2znJVF7rX6sTfgl_0lrvxvL3wcG44zK0mtOK8DPyPMFXatQveNwMVOudWKsHVAUGnMlnjaZ_NOG0OE2RUwjM3FSmGMXhZmzycifllK4UwEk_Or6RT4XZlxYvYB7u935xExcvYhvF9cAY2ECmat4XfRVoWpJehMqAjV1JWMWJEbLttC4J95RstddztV4oscHlSsIhAxXZdNqSKiIAqkm4vz1hbh7WCm0pwoy5ySzZduGMr41esFMAZ2pOz2ZKhu1d8Lj8ok7CArjO0EsCwNkoWQcEgEeaBmOLPq-6ZEJXBQxOFIln5LD7Xvfcn2Bp6NQ30k5KBTp4r280Bvlaf1-NsiKapzFNY0KAR4pXpS7QP5-BS7FfJqPJPunoDJLa1vzNxboTfH85Lx1tBaYyiWp5kpD3A1hPYIewsklwKGD7gAU0Sef2wwxPHrEj8D6PBW21AIlXBxrNZ5VaUK2f_tvqbE8ARzyvaOhX310dhajHQRAzl5E759bspzPS1jOUVgNVV0Eoy8otwdfWiJyrXJ5FL9vM_-H_b8-APo_ASwskMHk4WMvteOOmJqe_TnMr_8PK8UZMCWv6LUhS25MiWPjUMmYwhRuqC4ocNS1mfTv44H8UwbrTQlpxNrJTPgrz9QyBpo52Obvcp-w&VUEuexLg=4&dqpgkSQU=3118739&HkyijYfV=&swBEqPLv=0,0&RVtdrFCq=&GESYosNX=http%3A%2F%2F159.89.198.98%2F&s=1280,1024,1,1280,1024,0 HTTP/1.1
Host: blockadsnot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://209.97.171.113/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
popads-node: wb3
access-control-allow-origin: *
asf: 9
popads-ec: ASB
content-type: text/javascript;charset=UTF-8
content-length: 44
date: Sun, 29 Sep 2024 18:23:33 GMT
|
|
| i7blizskf0tr.s4.adsco.re/ | 185.200.116.60 | | 0 B |
URL i7blizskf0tr.s4.adsco.re/ IP185.200.116.60:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST / HTTP/1.1
Host: i7blizskf0tr.s4.adsco.re
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 0
Origin: http://209.97.171.113
DNT: 1
Connection: keep-alive
Referer: http://209.97.171.113/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 29 Sep 2024 18:23:33 GMT
content-type: text/html
content-length: 0
last-modified: Tue, 03 Oct 2023 13:29:59 GMT
etag: "651c1757-0"
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
access-control-expose-headers: Content-Length,Content-Range
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.blockadsnot.com/slow.min.css |  195.181.172.2 | | 22 kB |
URL www.blockadsnot.com/slow.min.css IP195.181.172.2:0 ASN#60068 Datacamp Limited
File typegzip compressed data, from Unix Hash606288ae41865a7deb9417696f35ee49 e963b1b257381ceab3f374b19a8804edb7bc24f0 96102ecbb12bc8d2bf723db2b8ed232a91e3d8f086e01d96affacc67336e6d88
GET /slow.min.css HTTP/1.1
Host: www.blockadsnot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://209.97.171.113
DNT: 1
Connection: keep-alive
Referer: http://209.97.171.113/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 29 Sep 2024 18:23:32 GMT
content-type: application/x-javascript
popads-node: wb2
expires: Fri, 04 Oct 2024 11:45:48 GMT
access-control-allow-origin: http://209.97.171.113
link: <https://blockadsnot.com/>;rel=preconnect
cache-control: public, max-age=604800
x-77-nzt: EwwBw7WsAQH3VCgAAAwBuUwKEwH3dNUCAAwBJRPCLgG3cAIAAA
x-77-nzt-ray: 478241381312306c499bf966de92a30b
x-accel-expires: @1728042348
x-accel-date: 1727623888
x-accel-date-max: 1727437548
x-77-cache: HIT
x-77-age: 10324
vary: Accept-Encoding, Origin
content-encoding: gzip
server: CDN77-Turbo
x-cache: HIT
x-age: 10324
x-77-pop: amsterdamNL
X-Firefox-Spdy: h2
|
|
| cdn77-pic.others-cdn.com/videos/thumbs169xnxxll/23/6f/39/236f39e93c56cdc7d2ef939723bd875b/236f39e93c56cdc7d2ef939723bd875b.14.jpg | 195.181.166.15 | 200 OK | 18 kB |
URL GET HTTP/2cdn77-pic.others-cdn.com/videos/thumbs169xnxxll/23/6f/39/236f39e93c56cdc7d2ef939723bd875b/236f39e93c56cdc7d2ef939723bd875b.14.jpg IP195.181.166.15:443 ASN#60068 Datacamp Limited
Requested byhttp://159.89.198.98/video/yr0kr27/corno-deixou-sua-esposa-puta-ir-para-o-motel-com-o-comedor-poderoso-e-ficou-em-casa-vendo-tudo-pelo-celular CertificateIssuerSectigo Limited Subjectxvideos.com FingerprintC8:79:F3:AC:85:D8:36:AC:8C:F2:30:0D:AF:6E:19:50:37:CC:C6:95 ValidityTue, 10 Oct 2023 00:00:00 GMT - Fri, 11 Oct 2024 23:59:59 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 100", progressive, precision 8, 352x198, components 3 Hash38218b4d100340b232a053bcf4c34aab 6fb4f6431161fd91daf14df581e1367be011388b 42cdcb90afddd5a1ed30c472ac7b57fb7ddc811211bf6ef23782cc23b5637456
GET /videos/thumbs169xnxxll/23/6f/39/236f39e93c56cdc7d2ef939723bd875b/236f39e93c56cdc7d2ef939723bd875b.14.jpg HTTP/1.1
Host: cdn77-pic.others-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://159.89.198.98/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 29 Sep 2024 18:23:38 GMT
content-type: image/jpeg
content-length: 17558
x-frame-options: sameorigin
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
last-modified: Sun, 09 Oct 2022 13:03:32 GMT
cache-control: max-age=10368000, public
access-control-allow-origin: *
x-77-nzt: EwwBw7WmDQH3ePgDAAwB1GY4FQHXx5AGAAwBbT1apAHXMz4IAA
x-77-nzt-ray: b1f3ea1bc3cd65d72a9bf96699ab0731
x-accel-expires: @1736771512
x-accel-date: 1727374002
x-accel-date-max: 1716035507
x-77-cache: HIT
x-77-age: 260216
server: CDN77-Turbo
x-cache: HIT
x-age: 260216
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| cdn77-pic.others-cdn.com/videos/thumbs169xnxxll/1b/9b/d6/1b9bd6665505110293287d03c74020ee/1b9bd6665505110293287d03c74020ee.25.jpg | 195.181.166.15 | 200 OK | 10 kB |
URL GET HTTP/2cdn77-pic.others-cdn.com/videos/thumbs169xnxxll/1b/9b/d6/1b9bd6665505110293287d03c74020ee/1b9bd6665505110293287d03c74020ee.25.jpg IP195.181.166.15:443 ASN#60068 Datacamp Limited
Requested byhttp://159.89.198.98/video/yr0kr27/corno-deixou-sua-esposa-puta-ir-para-o-motel-com-o-comedor-poderoso-e-ficou-em-casa-vendo-tudo-pelo-celular CertificateIssuerSectigo Limited Subjectxvideos.com FingerprintC8:79:F3:AC:85:D8:36:AC:8C:F2:30:0D:AF:6E:19:50:37:CC:C6:95 ValidityTue, 10 Oct 2023 00:00:00 GMT - Fri, 11 Oct 2024 23:59:59 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 100", progressive, precision 8, 352x198, components 3 Hash6e8454e4045bedb81c70c35bef5048db 758322fd339e1d5090d4eba42a03508a941bf010 edeaab53969e10a941083c2bdebef0c2defb2df8b3a8cb7e20beb2abca8a7b7a
GET /videos/thumbs169xnxxll/1b/9b/d6/1b9bd6665505110293287d03c74020ee/1b9bd6665505110293287d03c74020ee.25.jpg HTTP/1.1
Host: cdn77-pic.others-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://159.89.198.98/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 29 Sep 2024 18:23:40 GMT
content-type: image/jpeg
content-length: 10416
x-frame-options: sameorigin
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
last-modified: Tue, 02 Mar 2021 09:33:09 GMT
cache-control: max-age=10368000, public
access-control-allow-origin: *
x-77-nzt: EwwBw7WmDQH3mT1HAAwBnJIhIwHXYc05AAgBj/Q63QGB
x-77-nzt-ray: b1f3ea1bc3cd65d72c9bf966d649d21f
x-accel-expires: @1729121074
x-77-cache: HIT
x-accel-date: 1722965395
x-77-age: 4668825
server: CDN77-Turbo
x-accel-date-max: 1709939680
x-cache: HIT
x-age: 4668825
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| cdn77-pic.others-cdn.com/videos/thumbs169xnxxll/df/a1/bc/dfa1bc11ec2856609245258b2f59b14b-2/dfa1bc11ec2856609245258b2f59b14b.19.jpg | 195.181.166.15 | | 8.0 kB |
URL cdn77-pic.others-cdn.com/videos/thumbs169xnxxll/df/a1/bc/dfa1bc11ec2856609245258b2f59b14b-2/dfa1bc11ec2856609245258b2f59b14b.19.jpg IP195.181.166.15:0 ASN#60068 Datacamp Limited
CertificateIssuerSectigo Limited Subjectxvideos.com FingerprintC8:79:F3:AC:85:D8:36:AC:8C:F2:30:0D:AF:6E:19:50:37:CC:C6:95 ValidityTue, 10 Oct 2023 00:00:00 GMT - Fri, 11 Oct 2024 23:59:59 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 100", progressive, precision 8, 352x198, components 3 Hash3044c89be30095bb9cf77252f4628924 bbbfa557b672298f7e1fd3a49e5fa46733810dd4 2ad90cc1b489c246eb66b84a24aad5e3c303c44e3dc01fc4ad3f784420b0c741
GET /videos/thumbs169xnxxll/df/a1/bc/dfa1bc11ec2856609245258b2f59b14b-2/dfa1bc11ec2856609245258b2f59b14b.19.jpg HTTP/1.1
Host: cdn77-pic.others-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://159.89.198.98/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 29 Sep 2024 18:23:41 GMT
content-type: image/jpeg
content-length: 7981
x-frame-options: sameorigin
last-modified: Fri, 02 Sep 2022 11:50:57 GMT
cache-control: max-age=10368000, public
access-control-allow-origin: *
x-accel-expires: @1737721842
x-77-nzt: A8O1pg03Nzf/30YEANRmOAkVeB//mpcIAI/0Ot2krcH/LSAAAA
x-77-nzt-ray: b1f3ea1bc3cd65d72d9bf966a841e21a
x-77-cache: HIT
x-accel-date: 1727353934
x-cache-lb: HIT
x-age-lb: 563098
server: CDN77-Turbo
x-accel-date-max: 1686953554
x-cache: HIT
x-age: 280287
x-77-age: 280287
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| gcore-pic.others-cdn.com/videos/thumbs169xnxxll/76/30/11/7630117f106e984b394623c5a2c0c8c3/7630117f106e984b394623c5a2c0c8c3.8.jpg | 92.223.40.62 | | 24 kB |
URL gcore-pic.others-cdn.com/videos/thumbs169xnxxll/76/30/11/7630117f106e984b394623c5a2c0c8c3/7630117f106e984b394623c5a2c0c8c3.8.jpg IP92.223.40.62:0
CertificateIssuerSectigo Limited Subjectxvideos.com FingerprintC8:79:F3:AC:85:D8:36:AC:8C:F2:30:0D:AF:6E:19:50:37:CC:C6:95 ValidityTue, 10 Oct 2023 00:00:00 GMT - Fri, 11 Oct 2024 23:59:59 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 100", progressive, precision 8, 352x198, components 3 Hash5e8e690315d4000265ad361199cb3438 c4af6ff4310b3e74ae309e71a42bb2b90555bea2 2f10d8c1a258fc17e2f9bd630682a3ad5ebe3e5b566592ad2143e053029a385e
GET /videos/thumbs169xnxxll/76/30/11/7630117f106e984b394623c5a2c0c8c3/7630117f106e984b394623c5a2c0c8c3.8.jpg HTTP/1.1
Host: gcore-pic.others-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://159.89.198.98/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 29 Sep 2024 18:23:42 GMT
content-type: image/jpeg
content-length: 23712
x-frame-options: sameorigin
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
last-modified: Tue, 25 Oct 2022 14:25:44 GMT
expires: Tue, 17 Dec 2024 19:33:19 GMT
cache-control: max-age=10368000, public
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc67
age: 3538223
traceparent: 00-0d1866d28c3a3e35cf4da1c378aa215e-8f27d7109f24bf11-01
x-id: fra8-hw-edge-gc12
cache: HIT
x-cached-since: 2024-08-19T20:04:55+00:00
accept-ranges: bytes
x-shard: fra8-shard0-default_443
X-Firefox-Spdy: h2
|
|
| cdn77-pic.others-cdn.com/videos/thumbs169xnxxll/06/1c/73/061c73b6962684d87cf5e11c45d70aff/061c73b6962684d87cf5e11c45d70aff.29.jpg | 195.181.166.15 | | 18 kB |
URL cdn77-pic.others-cdn.com/videos/thumbs169xnxxll/06/1c/73/061c73b6962684d87cf5e11c45d70aff/061c73b6962684d87cf5e11c45d70aff.29.jpg IP195.181.166.15:0 ASN#60068 Datacamp Limited
CertificateIssuerSectigo Limited Subjectxvideos.com FingerprintC8:79:F3:AC:85:D8:36:AC:8C:F2:30:0D:AF:6E:19:50:37:CC:C6:95 ValidityTue, 10 Oct 2023 00:00:00 GMT - Fri, 11 Oct 2024 23:59:59 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 100", progressive, precision 8, 352x198, components 3 Hash65ac01a94f1d954a1e0e91f6d62cebb7 86109a0f778745f044b08caf2c224582cf301fe0 ef449ee5e368795b0f0b7ca4a1b91753701914fd077410d769a32c1864513e23
GET /videos/thumbs169xnxxll/06/1c/73/061c73b6962684d87cf5e11c45d70aff/061c73b6962684d87cf5e11c45d70aff.29.jpg HTTP/1.1
Host: cdn77-pic.others-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://159.89.198.98/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 29 Sep 2024 18:23:43 GMT
content-type: image/jpeg
content-length: 17909
x-frame-options: sameorigin
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
last-modified: Sat, 23 Oct 2021 15:19:07 GMT
cache-control: max-age=10368000, public
access-control-allow-origin: *
x-77-nzt: EwgBw7WmDQFBDAHP09MTAdf5AQEADAFtPVqkAdd4nDsA
x-77-nzt-ray: b1f3ea1bc3cd65d72f9bf9664e31d617
x-accel-expires: @1734029502
x-accel-date: 1727568182
x-accel-date-max: 1723661502
x-77-cache: HIT
x-77-age: 66041
server: CDN77-Turbo
x-cache: MISS
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| cdn77-pic.others-cdn.com/videos/thumbs169xnxxll/83/03/a5/8303a58a786258d3bd0c3867d03f7471-3/8303a58a786258d3bd0c3867d03f7471.18.jpg | 195.181.166.15 | 200 OK | 11 kB |
URL GET HTTP/2cdn77-pic.others-cdn.com/videos/thumbs169xnxxll/83/03/a5/8303a58a786258d3bd0c3867d03f7471-3/8303a58a786258d3bd0c3867d03f7471.18.jpg IP195.181.166.15:443 ASN#60068 Datacamp Limited
Requested byhttp://159.89.198.98/video/yr0kr27/corno-deixou-sua-esposa-puta-ir-para-o-motel-com-o-comedor-poderoso-e-ficou-em-casa-vendo-tudo-pelo-celular CertificateIssuerSectigo Limited Subjectxvideos.com FingerprintC8:79:F3:AC:85:D8:36:AC:8C:F2:30:0D:AF:6E:19:50:37:CC:C6:95 ValidityTue, 10 Oct 2023 00:00:00 GMT - Fri, 11 Oct 2024 23:59:59 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 100", progressive, precision 8, 352x198, components 3 Hasha0c3f7091aeb8d6f7b9326ba9f38de6d e9b3680e9096bfdd1e32e1d467e1bdd77b660119 3d042a8ce8cf9a9add3540b8d850f7e80b040301b72a2237a3cdd54147e3ef9e
GET /videos/thumbs169xnxxll/83/03/a5/8303a58a786258d3bd0c3867d03f7471-3/8303a58a786258d3bd0c3867d03f7471.18.jpg HTTP/1.1
Host: cdn77-pic.others-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://159.89.198.98/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 29 Sep 2024 18:23:44 GMT
content-type: image/jpeg
content-length: 10603
x-frame-options: sameorigin
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
last-modified: Wed, 31 Jul 2024 07:47:19 GMT
cache-control: max-age=10368000, public
access-control-allow-origin: *
x-77-nzt: EwwBw7WmDQH35wlPAAwBJRPCQAH3nQAAAAgBj/Q6lQGB
x-77-nzt-ray: b1f3ea1bc3cd65d7309bf966ed90d214
x-accel-expires: @1732822188
x-77-cache: HIT
x-accel-date: 1722454345
x-77-age: 5179879
server: CDN77-Turbo
x-accel-date-max: 1722454345
x-cache: HIT
x-age: 5179879
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| cdn77-pic.others-cdn.com/videos/thumbs169xnxxll/b3/12/98/b31298cfa1e53a98f485246a65ea37b0/b31298cfa1e53a98f485246a65ea37b0.9.jpg | 195.181.166.15 | | 13 kB |
URL cdn77-pic.others-cdn.com/videos/thumbs169xnxxll/b3/12/98/b31298cfa1e53a98f485246a65ea37b0/b31298cfa1e53a98f485246a65ea37b0.9.jpg IP195.181.166.15:0 ASN#60068 Datacamp Limited
CertificateIssuerSectigo Limited Subjectxvideos.com FingerprintC8:79:F3:AC:85:D8:36:AC:8C:F2:30:0D:AF:6E:19:50:37:CC:C6:95 ValidityTue, 10 Oct 2023 00:00:00 GMT - Fri, 11 Oct 2024 23:59:59 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 85", baseline, precision 8, 352x198, components 3 Hashbd18eddc393c9992144da9697112bf25 49ebe7dd0d4d84eca1712718362d54ff3a750ea7 0027344e5efd6ea5c9632aadcdbc6f664a32708027c0813b3a5d4a96d422eca1
GET /videos/thumbs169xnxxll/b3/12/98/b31298cfa1e53a98f485246a65ea37b0/b31298cfa1e53a98f485246a65ea37b0.9.jpg HTTP/1.1
Host: cdn77-pic.others-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://159.89.198.98/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 29 Sep 2024 18:23:47 GMT
content-type: image/jpeg
content-length: 13203
x-frame-options: sameorigin
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
last-modified: Sat, 14 Dec 2019 23:23:39 GMT
cache-control: max-age=10368000, public
access-control-allow-origin: *
x-77-nzt: EwwBw7WmDQH30lAoAAwB1GY4FQH3ujYEAAwBj/Q6yAHXKfUXAA
x-77-nzt-ray: b1f3ea1bc3cd65d7339bf96690afcd0f
x-accel-expires: @1733519795
x-accel-date: 1724992097
x-77-cache: HIT
x-77-age: 2642130
x-cache-lb: HIT
x-age-lb: 276154
server: CDN77-Turbo
x-accel-date-max: 1706100829
x-cache: HIT
x-age: 2642130
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| cdn77-pic.others-cdn.com/videos/thumbs169xnxxll/67/41/28/6741287a731ff4e457adb5737f2a19fc/6741287a731ff4e457adb5737f2a19fc.8.jpg | 195.181.166.15 | | 10 kB |
URL cdn77-pic.others-cdn.com/videos/thumbs169xnxxll/67/41/28/6741287a731ff4e457adb5737f2a19fc/6741287a731ff4e457adb5737f2a19fc.8.jpg IP195.181.166.15:0 ASN#60068 Datacamp Limited
CertificateIssuerSectigo Limited Subjectxvideos.com FingerprintC8:79:F3:AC:85:D8:36:AC:8C:F2:30:0D:AF:6E:19:50:37:CC:C6:95 ValidityTue, 10 Oct 2023 00:00:00 GMT - Fri, 11 Oct 2024 23:59:59 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 100", progressive, precision 8, 352x198, components 3 Hash35d9a60ac5879128bc591cce640633ff 155fd5301f430690afd182dfd9be465940181bea b4ce08ccbd435b7c673c9c3647d50f0356ddc45c7efaabd19f717f0a40ffdcd3
GET /videos/thumbs169xnxxll/67/41/28/6741287a731ff4e457adb5737f2a19fc/6741287a731ff4e457adb5737f2a19fc.8.jpg HTTP/1.1
Host: cdn77-pic.others-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://159.89.198.98/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 29 Sep 2024 18:23:49 GMT
content-type: image/jpeg
content-length: 10264
x-frame-options: sameorigin
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
last-modified: Wed, 14 Sep 2022 18:33:12 GMT
cache-control: max-age=10368000, public
access-control-allow-origin: *
x-77-nzt: EwwBw7WmDQH3EKgdAAwBJRPCRgH3x3dkAAgBj/Q6yAGB
x-77-nzt-ray: b1f3ea1bc3cd65d7359bf966ae80ca14
x-accel-expires: @1736058295
x-77-cache: HIT
x-accel-date: 1725690661
x-77-age: 1943568
server: CDN77-Turbo
x-accel-date-max: 1710248868
x-cache: HIT
x-age: 1943568
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.premiumvertising.com/winterpolate.min.css | 195.181.172.2 | 200 OK | 37 kB |
URL GET HTTP/2www.premiumvertising.com/winterpolate.min.css IP195.181.172.2:443 ASN#60068 Datacamp Limited
Requested byhttps://misterindo.net/x/?id=yr0kr27 CertificateIssuerLet's Encrypt Subject1258267123.rsc.cdn77.org FingerprintF1:61:64:56:BF:8A:A7:19:7C:50:55:CF:7D:01:07:CA:44:67:B3:2F ValidityTue, 17 Sep 2024 16:53:56 GMT - Mon, 16 Dec 2024 16:53:55 GMT
File typeJavaScript source, ASCII text, with very long lines (1568) Hash68c7a42a97c335b3eaab5651b6cc8f5c 8a1168557c412701a22be1e83d241f307f4edb1a 6a9de49916ff2147d22881752d0ae41c79846355da9d2f115216076692ae6581
GET /winterpolate.min.css HTTP/1.1
Host: www.premiumvertising.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://misterindo.net
DNT: 1
Connection: keep-alive
Referer: https://misterindo.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 29 Sep 2024 18:23:25 GMT
content-type: application/x-javascript
popads-node: wb2
expires: Mon, 30 Sep 2024 19:04:18 GMT
access-control-allow-origin: https://misterindo.net
link: <https://premiumvertising.com/>;rel=preconnect
cache-control: public, max-age=604800
x-77-nzt: EwwBw7WsAQH359oHAAwBuUwKEwH3VgQAAAwBnJIhJwG3LgAAAA
x-77-nzt-ray: 478241388f0c1078429bf966a766e636
x-accel-expires: @1727723058
x-accel-date: 1727119414
x-accel-date-max: 1727118258
x-77-cache: HIT
x-77-age: 514791
vary: Accept-Encoding, Origin
content-encoding: gzip
server: CDN77-Turbo
x-cache: HIT
x-age: 514791
x-77-pop: amsterdamNL
X-Firefox-Spdy: h2
|
|
| www.premiumvertising.com/jjTcg/DrK/djsfx.min.js | 195.181.172.2 | 200 OK | 37 kB |
URL GET HTTP/2www.premiumvertising.com/jjTcg/DrK/djsfx.min.js IP195.181.172.2:443 ASN#60068 Datacamp Limited
Requested byhttp://159.89.198.98/video/yr0kr27/corno-deixou-sua-esposa-puta-ir-para-o-motel-com-o-comedor-poderoso-e-ficou-em-casa-vendo-tudo-pelo-celular CertificateIssuerLet's Encrypt Subject1258267123.rsc.cdn77.org FingerprintF1:61:64:56:BF:8A:A7:19:7C:50:55:CF:7D:01:07:CA:44:67:B3:2F ValidityTue, 17 Sep 2024 16:53:56 GMT - Mon, 16 Dec 2024 16:53:55 GMT
File typeJavaScript source, ASCII text, with very long lines (1568) Hash95de333ebc054cf5e0ece2936222ac5f d3a913fedc777f3b1db47cc8636f0ecc04fb808f 384cdc6827e98ab0e96a908e2a10e96ea9a7f7715164d11c2a2e268d14e467ef
GET /jjTcg/DrK/djsfx.min.js HTTP/1.1
Host: www.premiumvertising.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://159.89.198.98
DNT: 1
Connection: keep-alive
Referer: http://159.89.198.98/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 29 Sep 2024 18:23:25 GMT
content-type: application/x-javascript
popads-node: wb3
expires: Tue, 01 Oct 2024 11:14:04 GMT
access-control-allow-origin: http://159.89.198.98
link: <https://premiumvertising.com/>;rel=preconnect
cache-control: public, max-age=604800
x-77-nzt: EwwBw7WsAQHXzO0GAAwBuUwKAQH3VQ4AAAwBw7WvBgGTkzoJAA
x-77-nzt-ray: 478241388f0c1078429bf966655ee015
x-accel-expires: @1727781244
x-accel-date: 1727180113
x-accel-date-max: 1727176444
x-77-cache: HIT
vary: Accept-Encoding, Origin
content-encoding: gzip
x-77-age: 454092
server: CDN77-Turbo
x-cache: HIT
x-age: 454092
x-77-pop: amsterdamNL
X-Firefox-Spdy: h2
|
|
| c.adsco.re/ | 104.17.167.186 | 200 OK | 78 kB |
IP104.17.167.186:80
Requested byhttp://159.89.198.98/video/yr0kr27/corno-deixou-sua-esposa-puta-ir-para-o-motel-com-o-comedor-poderoso-e-ficou-em-casa-vendo-tudo-pelo-celular
File typeJavaScript source, ASCII text, with very long lines (881) Hash70e681d122073a9bc3f704fb0f96a82d 5916b6dea0ea58b5807287ca1cd4faf9c9f3aae5 73bfce45d382df02d75ef2ef688325cc973139931db445ee753c2af8a85f3965
GET / HTTP/1.1
Host: c.adsco.re
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://159.89.198.98/
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 29 Sep 2024 18:23:26 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: public, max-age=2678400
Accept-CH: Sec-CH-UA, Sec-CH-UA-Mobile, Sec-CH-UA-Full-Version, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Arch, Sec-CH-UA-Model, Device-Memory, Downlink, ECT, RTT, Width, Viewport-Width, DPR
Permissions-Policy: ch-ua=(self "https://adsco.re"),ch-ua-mobile=(self "https://adsco.re"),ch-ua-full-version=(self "https://adsco.re"),ch-ua-platform=(self "https://adsco.re"),ch-ua-platform-version=(self "https://adsco.re"),ch-ua-arch=(self "https://adsco.re"),ch-ua-model=(self "https://adsco.re"),ch-device-memory=(self "https://adsco.re"),ch-downlink=(self "https://adsco.re"),ch-ect=(self "https://adsco.re"),ch-rtt=(self "https://adsco.re"),ch-width=(self "https://adsco.re"),ch-viewport-width=(self "https://adsco.re"),ch-dpr=(self "https://adsco.re")
Link: <//6.adsco.re/>;rel=prefetch;crossorigin;as=fetch,<//4.adsco.re/>;rel=prefetch;crossorigin;as=fetch,<//adsco.re/>;rel=preconnect
Expires: Wed, 30 Oct 2024 18:23:26 GMT
ETag: W/"cOaB0SIHOpvD9wT7D5aoLQ=="
Content-Encoding: gzip
CF-Cache-Status: HIT
Age: 6737492
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 8cae011f6d235696-OSL
alt-svc: h2=":443"; ma=60
|
|
| vjs.zencdn.net/6.4.0/video-js.css | 151.101.130.217 | 200 OK | 55 kB |
URL GET HTTP/2vjs.zencdn.net/6.4.0/video-js.css IP151.101.130.217:443
Requested byhttps://misterindo.net/x/?id=yr0kr27 CertificateIssuerGlobalSign nv-sa Subjectvjs.zencdn.net Fingerprint6B:3F:11:07:D7:05:FD:AF:4D:46:B4:BA:1C:8A:60:70:95:37:35:17 ValidityWed, 06 Mar 2024 21:50:11 GMT - Mon, 07 Apr 2025 21:50:10 GMT
File typeASCII text, with very long lines (12739) Hashee0256375d0c505e3d3c9639623ea66f af696ed4d9e4646377b00aeb0deaf9ceb832c81a bf8799c4f63c3d20ab207d3656ce428721e63ac65095c4412afa539cfe82f4e0
GET /6.4.0/video-js.css HTTP/1.1
Host: vjs.zencdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://misterindo.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
last-modified: Fri, 17 Nov 2017 20:14:33 GMT
etag: "ee0256375d0c505e3d3c9639623ea66f"
cache-control: public, max-age=31536000
content-type: text/css; charset=utf-8
content-encoding: gzip
date: Sun, 29 Sep 2024 18:23:25 GMT
x-served-by: cache-hel1410020-HEL
x-cache: HIT
x-cache-hits: 484
vary: Accept-Encoding
access-control-allow-origin: *
timing-allow-origin: *
content-length: 14519
X-Firefox-Spdy: h2
|
|
| c.adsco.re/ | 104.17.167.186 | 200 OK | 78 kB |
IP104.17.167.186:443
Requested byhttps://misterindo.net/x/?id=yr0kr27 CertificateIssuerSectigo Limited Subject*.adsco.re Fingerprint3B:64:1C:DA:8C:64:22:01:36:0F:54:7A:99:6E:AD:26:C2:EF:59:8B ValidityMon, 23 Sep 2024 00:00:00 GMT - Mon, 29 Sep 2025 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (881) Hash70e681d122073a9bc3f704fb0f96a82d 5916b6dea0ea58b5807287ca1cd4faf9c9f3aae5 73bfce45d382df02d75ef2ef688325cc973139931db445ee753c2af8a85f3965
GET / HTTP/1.1
Host: c.adsco.re
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://misterindo.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 29 Sep 2024 18:23:26 GMT
content-type: text/html
cache-control: public, max-age=2678400
accept-ch: Sec-CH-UA, Sec-CH-UA-Mobile, Sec-CH-UA-Full-Version, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Arch, Sec-CH-UA-Model, Device-Memory, Downlink, ECT, RTT, Width, Viewport-Width, DPR
permissions-policy: ch-ua=(self "https://adsco.re"),ch-ua-mobile=(self "https://adsco.re"),ch-ua-full-version=(self "https://adsco.re"),ch-ua-platform=(self "https://adsco.re"),ch-ua-platform-version=(self "https://adsco.re"),ch-ua-arch=(self "https://adsco.re"),ch-ua-model=(self "https://adsco.re"),ch-device-memory=(self "https://adsco.re"),ch-downlink=(self "https://adsco.re"),ch-ect=(self "https://adsco.re"),ch-rtt=(self "https://adsco.re"),ch-width=(self "https://adsco.re"),ch-viewport-width=(self "https://adsco.re"),ch-dpr=(self "https://adsco.re")
link: <//6.adsco.re/>;rel=prefetch;crossorigin;as=fetch,<//4.adsco.re/>;rel=prefetch;crossorigin;as=fetch,<//adsco.re/>;rel=preconnect
expires: Wed, 30 Oct 2024 18:23:26 GMT
etag: W/"cOaB0SIHOpvD9wT7D5aoLQ=="
content-encoding: gzip
cf-cache-status: HIT
age: 6737528
vary: Accept-Encoding
server: cloudflare
cf-ray: 8cae0120b83856cc-OSL
X-Firefox-Spdy: h2
|
|
0.0.0.0