| hearog.com/images/play-2/icon1.png |  185.162.87.220 | | 7.3 kB |
URL hearog.com/images/play-2/icon1.png IP185.162.87.220:0 ASN#39572 DataWeb Global Group B.V.
File typePNG image data, 300 x 300, 8-bit/color RGBA, non-interlaced Hash3d0ab5834c8bf7134e4d21fa3288317f c31d1a6b9df206f67ea194f4c424cdc372a423c2 0515ddd9185d263874e7b66bb6d521fcd63b857aac5fed51c08df98026dafe27
GET /images/play-2/icon1.png HTTP/1.1
Host: hearog.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hearog.com/play-2?h=waWQiOjEwMjYxMTMsInNpZCI6MTM0NDY0NCwid2lkIjo1Njc1MDEsInNyYyI6Mn0=eyJ&click_id=30affC1715190260aff9edf77c489394a303a225&si1=&si2=29611306intent://hearog.com/play-2?h=waWQiOjEwMjYxMTMsInNpZCI6MTM0NDY0NCwid2lkIjo1Njc1MDEsInNyYyI6Mn0=eyJ&click_id=30affC1715190260aff9edf77c489394a303a225&si1=&si2=29611306
Cookie: truniq=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.25.0
date: Wed, 08 May 2024 17:50:05 GMT
content-type: image/png
content-length: 7252
last-modified: Fri, 26 Apr 2024 08:14:18 GMT
etag: "662b625a-1c54"
x-zone: eu4
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| hearog.com/images/play-2/icon2.png | 185.162.87.220 | | 4.6 kB |
URL hearog.com/images/play-2/icon2.png IP185.162.87.220:0 ASN#39572 DataWeb Global Group B.V.
File typePNG image data, 300 x 300, 8-bit/color RGBA, non-interlaced Hashc947d439eb93367f1af5b2a3d222f057 5b4c10820d39e624bc6df72a113679da80a8e44e aab564e67c47df65ddcb9c4eaa62cd798a51624a3fded9f9b3a1197b460a79c2
GET /images/play-2/icon2.png HTTP/1.1
Host: hearog.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hearog.com/play-2?h=waWQiOjEwMjYxMTMsInNpZCI6MTM0NDY0NCwid2lkIjo1Njc1MDEsInNyYyI6Mn0=eyJ&click_id=30affC1715190260aff9edf77c489394a303a225&si1=&si2=29611306intent://hearog.com/play-2?h=waWQiOjEwMjYxMTMsInNpZCI6MTM0NDY0NCwid2lkIjo1Njc1MDEsInNyYyI6Mn0=eyJ&click_id=30affC1715190260aff9edf77c489394a303a225&si1=&si2=29611306
Cookie: truniq=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.25.0
date: Wed, 08 May 2024 17:50:05 GMT
content-type: image/png
content-length: 4576
last-modified: Fri, 26 Apr 2024 08:14:18 GMT
etag: "662b625a-11e0"
x-zone: eu
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| hearog.com/images/play-2/icon3.png | 185.162.87.220 | | 7.8 kB |
URL hearog.com/images/play-2/icon3.png IP185.162.87.220:0 ASN#39572 DataWeb Global Group B.V.
File typePNG image data, 300 x 300, 8-bit/color RGBA, non-interlaced Hash8f3cc830da0b1fdf66bda7d1d734747b 94588f041eec3a78a8780c8124c56a1434a89277 ea3698c32039a115b03c2528cbb29c3ff97bbd49ad1345d5095e98d1fd0ea8ba
GET /images/play-2/icon3.png HTTP/1.1
Host: hearog.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hearog.com/play-2?h=waWQiOjEwMjYxMTMsInNpZCI6MTM0NDY0NCwid2lkIjo1Njc1MDEsInNyYyI6Mn0=eyJ&click_id=30affC1715190260aff9edf77c489394a303a225&si1=&si2=29611306intent://hearog.com/play-2?h=waWQiOjEwMjYxMTMsInNpZCI6MTM0NDY0NCwid2lkIjo1Njc1MDEsInNyYyI6Mn0=eyJ&click_id=30affC1715190260aff9edf77c489394a303a225&si1=&si2=29611306
Cookie: truniq=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.25.0
date: Wed, 08 May 2024 17:50:05 GMT
content-type: image/png
content-length: 7847
last-modified: Fri, 26 Apr 2024 08:14:18 GMT
etag: "662b625a-1ea7"
x-zone: eu3
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| hearog.com/images/play-2/icon4.png | 185.162.87.220 | | 7.0 kB |
URL hearog.com/images/play-2/icon4.png IP185.162.87.220:0 ASN#39572 DataWeb Global Group B.V.
File typePNG image data, 300 x 300, 8-bit/color RGBA, non-interlaced Hash7ad7f32c1c0df7b4975cc41bda4ac435 81d57e996ee6cd9e122592e68ffa3d55c1ba10ff c0af6cb2280bba97d235dfad7c72d22353a0d2cf277733ce9fc4701df7ed1d5f
GET /images/play-2/icon4.png HTTP/1.1
Host: hearog.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hearog.com/play-2?h=waWQiOjEwMjYxMTMsInNpZCI6MTM0NDY0NCwid2lkIjo1Njc1MDEsInNyYyI6Mn0=eyJ&click_id=30affC1715190260aff9edf77c489394a303a225&si1=&si2=29611306intent://hearog.com/play-2?h=waWQiOjEwMjYxMTMsInNpZCI6MTM0NDY0NCwid2lkIjo1Njc1MDEsInNyYyI6Mn0=eyJ&click_id=30affC1715190260aff9edf77c489394a303a225&si1=&si2=29611306
Cookie: truniq=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.25.0
date: Wed, 08 May 2024 17:50:05 GMT
content-type: image/png
content-length: 7032
last-modified: Fri, 26 Apr 2024 08:14:18 GMT
etag: "662b625a-1b78"
x-zone: eu4
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| hearog.com/images/play-2/icon5.png | 185.162.87.220 | | 3.3 kB |
URL hearog.com/images/play-2/icon5.png IP185.162.87.220:0 ASN#39572 DataWeb Global Group B.V.
File typePNG image data, 500 x 500, 8-bit/color RGBA, non-interlaced Hash1e1a7582b5da63e10485d63f97abc9a0 ca3ee3067f96c732f455bc7c99ec5100194f13f6 196083352a09a19cf2d4364e3ad406606fedb562f2096c1bef373ff2c485b503
GET /images/play-2/icon5.png HTTP/1.1
Host: hearog.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hearog.com/play-2?h=waWQiOjEwMjYxMTMsInNpZCI6MTM0NDY0NCwid2lkIjo1Njc1MDEsInNyYyI6Mn0=eyJ&click_id=30affC1715190260aff9edf77c489394a303a225&si1=&si2=29611306intent://hearog.com/play-2?h=waWQiOjEwMjYxMTMsInNpZCI6MTM0NDY0NCwid2lkIjo1Njc1MDEsInNyYyI6Mn0=eyJ&click_id=30affC1715190260aff9edf77c489394a303a225&si1=&si2=29611306
Cookie: truniq=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.25.0
date: Wed, 08 May 2024 17:50:05 GMT
content-type: image/png
content-length: 3264
last-modified: Fri, 26 Apr 2024 08:14:18 GMT
etag: "662b625a-cc0"
x-zone: eu
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| hearog.com/images/play-2/icon7.png | 185.162.87.220 | | 3.3 kB |
URL hearog.com/images/play-2/icon7.png IP185.162.87.220:0 ASN#39572 DataWeb Global Group B.V.
File typePNG image data, 500 x 500, 8-bit/color RGBA, non-interlaced Hashb512735542cb07b3b2dcf153a7dfe456 93bde8875412ce266600e2af1c37123483a50376 e9c661cc8adbaa1b9cd4cf65f0ba93a1c24211cb5f94ed0950e0fbc973781718
GET /images/play-2/icon7.png HTTP/1.1
Host: hearog.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hearog.com/play-2?h=waWQiOjEwMjYxMTMsInNpZCI6MTM0NDY0NCwid2lkIjo1Njc1MDEsInNyYyI6Mn0=eyJ&click_id=30affC1715190260aff9edf77c489394a303a225&si1=&si2=29611306intent://hearog.com/play-2?h=waWQiOjEwMjYxMTMsInNpZCI6MTM0NDY0NCwid2lkIjo1Njc1MDEsInNyYyI6Mn0=eyJ&click_id=30affC1715190260aff9edf77c489394a303a225&si1=&si2=29611306
Cookie: truniq=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.25.0
date: Wed, 08 May 2024 17:50:05 GMT
content-type: image/png
content-length: 3283
last-modified: Fri, 26 Apr 2024 08:14:18 GMT
etag: "662b625a-cd3"
x-zone: eu3
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| hearog.com/images/play-2/icon8.png | 185.162.87.220 | | 4.1 kB |
URL hearog.com/images/play-2/icon8.png IP185.162.87.220:0 ASN#39572 DataWeb Global Group B.V.
File typePNG image data, 300 x 300, 8-bit/color RGBA, non-interlaced Hashf92d6474ebc6a3a0b576749cfb4afe98 0f4ce3dcf04873b8098c01d20c44967fb9fce0cc 3a7abff293d71fd8c5a58deacb964b50fe074a6f458575d37abbd367a3a930a1
GET /images/play-2/icon8.png HTTP/1.1
Host: hearog.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hearog.com/play-2?h=waWQiOjEwMjYxMTMsInNpZCI6MTM0NDY0NCwid2lkIjo1Njc1MDEsInNyYyI6Mn0=eyJ&click_id=30affC1715190260aff9edf77c489394a303a225&si1=&si2=29611306intent://hearog.com/play-2?h=waWQiOjEwMjYxMTMsInNpZCI6MTM0NDY0NCwid2lkIjo1Njc1MDEsInNyYyI6Mn0=eyJ&click_id=30affC1715190260aff9edf77c489394a303a225&si1=&si2=29611306
Cookie: truniq=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.25.0
date: Wed, 08 May 2024 17:50:05 GMT
content-type: image/png
content-length: 4064
last-modified: Fri, 26 Apr 2024 08:14:18 GMT
etag: "662b625a-fe0"
x-zone: eu4
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| mdakky.com/rpe?a=1&s=1&act=7&src=2&p=1026113&st=1344644&wd=567501&d=hearog.com&tpl=70&rnd=0.3200511915919998&sbid=&sbid2=29611306intent%3A%2F%2Fhearog.com%2Fplay | 185.162.85.20 | | 0 B |
URL mdakky.com/rpe?a=1&s=1&act=7&src=2&p=1026113&st=1344644&wd=567501&d=hearog.com&tpl=70&rnd=0.3200511915919998&sbid=&sbid2=29611306intent%3A%2F%2Fhearog.com%2Fplay IP185.162.85.20:0 ASN#39572 DataWeb Global Group B.V.
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /rpe?a=1&s=1&act=7&src=2&p=1026113&st=1344644&wd=567501&d=hearog.com&tpl=70&rnd=0.3200511915919998&sbid=&sbid2=29611306intent%3A%2F%2Fhearog.com%2Fplay HTTP/1.1
Host: mdakky.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://hearog.com
DNT: 1
Connection: keep-alive
Referer: https://hearog.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.18.0
date: Wed, 08 May 2024 17:50:05 GMT
content-length: 0
accept-ch: Sec-CH-UA-Platform-Version
access-control-allow-origin: *
X-Firefox-Spdy: h2
|
|
| mdakky.com/rpe?a=1&s=1&act=18&src=2&p=1026113&st=1344644&wd=567501&d=hearog.com&tpl=70&rnd=0.5278972066504157&sbid=&sbid2=29611306intent%3A%2F%2Fhearog.com%2Fplay | 185.162.85.20 | | 0 B |
URL mdakky.com/rpe?a=1&s=1&act=18&src=2&p=1026113&st=1344644&wd=567501&d=hearog.com&tpl=70&rnd=0.5278972066504157&sbid=&sbid2=29611306intent%3A%2F%2Fhearog.com%2Fplay IP185.162.85.20:0 ASN#39572 DataWeb Global Group B.V.
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /rpe?a=1&s=1&act=18&src=2&p=1026113&st=1344644&wd=567501&d=hearog.com&tpl=70&rnd=0.5278972066504157&sbid=&sbid2=29611306intent%3A%2F%2Fhearog.com%2Fplay HTTP/1.1
Host: mdakky.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://hearog.com
DNT: 1
Connection: keep-alive
Referer: https://hearog.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.18.0
date: Wed, 08 May 2024 17:50:05 GMT
content-length: 0
accept-ch: Sec-CH-UA-Platform-Version
access-control-allow-origin: *
X-Firefox-Spdy: h2
|
|
| tratbc.com/tb?h=waWQiOjEwMjYxMTMsInNpZCI6MTM0NDY0NCwid2lkIjo1Njc1MDEsInNyYyI6Mn0=eyJ&click_id=30affC1715190260aff9edf77c489394a303a225&si1=&si2=29611306intent://hearog.com/play-2?h=waWQiOjEwMjYxMTMsInNpZCI6MTM0NDY0NCwid2lkIjo1Njc1MDEsInNyYyI6Mn0=eyJ&click_id=30affC1715190260aff9edf77c489394a303a225&si1=&si2=29611306 | 138.68.123.185 | | 0 B |
URL tratbc.com/tb?h=waWQiOjEwMjYxMTMsInNpZCI6MTM0NDY0NCwid2lkIjo1Njc1MDEsInNyYyI6Mn0=eyJ&click_id=30affC1715190260aff9edf77c489394a303a225&si1=&si2=29611306intent://hearog.com/play-2?h=waWQiOjEwMjYxMTMsInNpZCI6MTM0NDY0NCwid2lkIjo1Njc1MDEsInNyYyI6Mn0=eyJ&click_id=30affC1715190260aff9edf77c489394a303a225&si1=&si2=29611306 IP138.68.123.185:0 ASN#14061 DIGITALOCEAN-ASN
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tb?h=waWQiOjEwMjYxMTMsInNpZCI6MTM0NDY0NCwid2lkIjo1Njc1MDEsInNyYyI6Mn0=eyJ&click_id=30affC1715190260aff9edf77c489394a303a225&si1=&si2=29611306intent://hearog.com/play-2?h=waWQiOjEwMjYxMTMsInNpZCI6MTM0NDY0NCwid2lkIjo1Njc1MDEsInNyYyI6Mn0=eyJ&click_id=30affC1715190260aff9edf77c489394a303a225&si1=&si2=29611306 HTTP/1.1
Host: tratbc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hearog.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Server: nginx/1.15.0
Date: Wed, 08 May 2024 17:50:05 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://track.wbdpnz.com/7e39237b-016a-417b-a894-f3eeab5fe410?source_id=a567501&campaign_id=&country=&browser=&zone_id=&creative_id=&format=&os=&partner_id=1026113&sub_period=&cost=&click_id=MyRAP9U8bm7MoWdV
X-Zone: eu
|
|
| track.wbdpnz.com/7e39237b-016a-417b-a894-f3eeab5fe410?source_id=a567501&campaign_id=&country=&browser=&zone_id=&creative_id=&format=&os=&partner_id=1026113&sub_period=&cost=&click_id=MyRAP9U8bm7MoWdV |  143.204.55.31 | | 0 B |
URL track.wbdpnz.com/7e39237b-016a-417b-a894-f3eeab5fe410?source_id=a567501&campaign_id=&country=&browser=&zone_id=&creative_id=&format=&os=&partner_id=1026113&sub_period=&cost=&click_id=MyRAP9U8bm7MoWdV IP143.204.55.31:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /7e39237b-016a-417b-a894-f3eeab5fe410?source_id=a567501&campaign_id=&country=&browser=&zone_id=&creative_id=&format=&os=&partner_id=1026113&sub_period=&cost=&click_id=MyRAP9U8bm7MoWdV HTTP/1.1
Host: track.wbdpnz.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://hearog.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
content-length: 0
location: https://bstnwsgwrld6.xyz/rotator/348/2898/b0d424bbf54ce8cabb7d18b1dc2a36b7/?click_id=w61d2idrudc0f951jhsd33ik&sub1=a567501&fullscreen=1
date: Wed, 08 May 2024 17:50:06 GMT
cache-control: no-store, no-cache, pre-check=0, post-check=0
pragma: no-cache
expires: Thu, 01 Jan 1970 00:00:00 GMT
set-cookie: 7e39237b-016a-417b-a894-f3eeab5fe410-v4=Y6MTEfkPRR7IOyJXOEqmN4Jzxmkp0xIbMpzXlfmfnLg; Max-Age=86400; Expires=Thu, 09-May-2024 17:50:06 GMT; Domain=track.wbdpnz.com; Path=/; Secure; HttpOnly;SameSite=None
voluum-cid-v4=%7B%22cid%22%3A%22w61d2idrudc0f951jhsd33ik%22%2C%22caid%22%3A%227e39237b-016a-417b-a894-f3eeab5fe410%22%7D; Max-Age=31536000; Expires=Thu, 08-May-2025 17:50:06 GMT; Domain=track.wbdpnz.com; Path=/; Secure; HttpOnly;SameSite=None
server: nginx
x-cache: Miss from cloudfront
via: 1.1 095562e8748e634f880ee3c4ada2b6d0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: PZTOZYoqNDEjwvHlSbRBwRasiixaalFLR3erk65x9WkLadAsc5aInw==
X-Firefox-Spdy: h2
|
|
| bstnwsgwrld6.xyz/rotator/348/2898/b0d424bbf54ce8cabb7d18b1dc2a36b7/?click_id=w61d2idrudc0f951jhsd33ik&sub1=a567501&fullscreen=1 | 192.133.142.177 | | 9.3 kB |
URL bstnwsgwrld6.xyz/rotator/348/2898/b0d424bbf54ce8cabb7d18b1dc2a36b7/?click_id=w61d2idrudc0f951jhsd33ik&sub1=a567501&fullscreen=1 IP192.133.142.177:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3 Hashb87dedd27c4a056b3f53b98d533f1c00 f4fc1316b38005ea2a290c207fe3886f8366dd4d 81b80fb904dd0a94e3ff0adcfddb7fdb8983abc8e5c5dd60fee6df6b3fcf9588
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /rotator/348/2898/b0d424bbf54ce8cabb7d18b1dc2a36b7/?click_id=w61d2idrudc0f951jhsd33ik&sub1=a567501&fullscreen=1 HTTP/1.1
Host: bstnwsgwrld6.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://hearog.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
server: nginx
date: Wed, 08 May 2024 17:50:06 GMT
content-type: text/html; charset=UTF-8
location: https://bstnwsgwrld6.xyz/check_browser/2898/b0d424bbf54ce8cabb7d18b1dc2a36b7/?click_id=w61d2idrudc0f951jhsd33ik&sub1=a567501&sub2=&sub3=&tb=&fullscreen=1
X-Firefox-Spdy: h2
|
|
| bstnwsgwrld6.xyz/check_browser/2898/b0d424bbf54ce8cabb7d18b1dc2a36b7/?click_id=w61d2idrudc0f951jhsd33ik&sub1=a567501&sub2=&sub3=&tb=&fullscreen=1 | 192.133.142.177 | | 8.3 kB |
URL bstnwsgwrld6.xyz/check_browser/2898/b0d424bbf54ce8cabb7d18b1dc2a36b7/?click_id=w61d2idrudc0f951jhsd33ik&sub1=a567501&sub2=&sub3=&tb=&fullscreen=1 IP192.133.142.177:0
File typegzip compressed data, max speed, from Unix Hashee9049525e470a03c17c9dfea4c1bc44 2539f7b17e452c0ae01a13dec939200fa186d87d 095e2bd72ed514679a35160d0cf85e781113a7c0c0f6fba91474e618872bd18d
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /check_browser/2898/b0d424bbf54ce8cabb7d18b1dc2a36b7/?click_id=w61d2idrudc0f951jhsd33ik&sub1=a567501&sub2=&sub3=&tb=&fullscreen=1 HTTP/1.1
Host: bstnwsgwrld6.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://hearog.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:06 GMT
content-type: text/html; charset=UTF-8
accept-ch: Sec-CH-UA, Sec-CH-UA-Mobile, Sec-CH-UA-Platform, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform-Version, Sec-CH-UA-Arch, Sec-CH-UA-WoW64, Sec-CH-UA-Bitness, Sec-CH-UA-Model
permissions-policy: ch-ua=(self "https://rexpush.club"), ch-ua-mobile=(self "https://rexpush.club"), ch-ua-platform=(self "https://rexpush.club"), ch-ua-full-version=(self "https://rexpush.club"), ch-ua-full-version-list=(self "https://rexpush.club"), ch-ua-platform-version=(self "https://rexpush.club"), ch-ua-arch=(self "https://rexpush.club"), ch-ua-wow64=(self "https://rexpush.club"), ch-ua-bitness=(self "https://rexpush.club"), ch-ua-model=(self "https://rexpush.club")
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| gpshtb.com/go/707?source=2898 | 173.214.244.181 | | 0 B |
URL gpshtb.com/go/707?source=2898 IP173.214.244.181:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /go/707?source=2898 HTTP/1.1
Host: gpshtb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bstnwsgwrld6.xyz/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
server: nginx
date: Wed, 08 May 2024 17:42:26 GMT
content-type: text/html; charset=UTF-8
location: https://ykrvt.bestssp.top/?pl=epbJxbtxQEuIs1LQXyqFHg&sub_id=2898
X-Firefox-Spdy: h2
|
|
| ykrvt.check-tl-ver-24-2.com/space-robot/assets/corner.png | 172.67.156.121 | | 300 B |
URL ykrvt.check-tl-ver-24-2.com/space-robot/assets/corner.png IP172.67.156.121:0
File typePNG image data, 44 x 44, 8-bit colormap, non-interlaced Hashf66c38fa2cd7c50bd1989d41da28fb80 e1de333eca72647f3c1831083fe678cfa8fe9eab 3059be4046e0315ad1c0d1cb163d9daaf759bdf16e906e908842fac07e5608a2
GET /space-robot/assets/corner.png HTTP/1.1
Host: ykrvt.check-tl-ver-24-2.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ykrvt.check-tl-ver-24-2.com/space-robot/?pl=epbJxbtxQEuIs1LQXyqFHg&sm=space-robot&sub_id=2898&nrid=5f53a699b89b43f083a54fa5506c2435&hash=75-V4ipdRKngfdFM9YPqrw&exp=1715190908
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 08 May 2024 17:50:09 GMT
content-type: image/png
content-length: 300
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
etag: "6627c958-12c"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HU8gU8YicYnNmzS8TETeD0ml2BY9%2BK5lRp067poUa9w4%2F0kzmsb3YZvfWeENFuHckVQ2PxPP6d%2Bpu0bPrp%2Ff%2Bkgx8w9XErrgR%2Bh2wMFGGQZkQ4iU05BI9QMdF1JE3Q0ieyNlsX5RufcTGybccDo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880b4a5bcd2eb524-OSL
alt-svc: h3=":443"; ma=86400
|
|
| ykrvt.check-tl-ver-24-2.com/space-robot/?pl=epbJxbtxQEuIs1LQXyqFHg&sm=space-robot&sub_id=2898&nrid=5f53a699b89b43f083a54fa5506c2435&hash=75-V4ipdRKngfdFM9YPqrw&exp=1715190908 | 172.67.156.121 | | 24 kB |
URL ykrvt.check-tl-ver-24-2.com/space-robot/?pl=epbJxbtxQEuIs1LQXyqFHg&sm=space-robot&sub_id=2898&nrid=5f53a699b89b43f083a54fa5506c2435&hash=75-V4ipdRKngfdFM9YPqrw&exp=1715190908 IP172.67.156.121:0
File typeHTML document, Unicode text, UTF-8 text, with very long lines (474) Hash01041709ecf6a3f0b549820730593c03 55775e4279d24a34f601bf8180d9f280b8131e0d 51907b3319c05ec1c1a7466f4017f4dcc7b6dc59a29ed962bfd36572f223bb51
GET /space-robot/?pl=epbJxbtxQEuIs1LQXyqFHg&sm=space-robot&sub_id=2898&nrid=5f53a699b89b43f083a54fa5506c2435&hash=75-V4ipdRKngfdFM9YPqrw&exp=1715190908 HTTP/1.1
Host: ykrvt.check-tl-ver-24-2.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://bstnwsgwrld6.xyz/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 08 May 2024 17:50:09 GMT
content-type: text/html
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=qHcVnzu4JhTuQoLnS9oh6yiQyWPf4Dtoi8fqqHOoPRzfSoMgMpYxnCFxE%2B81KmW82iqls9CRU28fxL1GMe9tOfuTSA2lHkheNB6uZpqV0Bld1W%2BcJckMXzr%2Fwe%2B%2BQAH%2FA55TgsAVrCY%2BU7Tf%2FqE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 880b4a5a0a45b4f9-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| ykrvt.check-tl-ver-24-2.com/space-robot/assets/favicon-16x16.png | 172.67.156.121 | | 1.2 kB |
URL ykrvt.check-tl-ver-24-2.com/space-robot/assets/favicon-16x16.png IP172.67.156.121:0
File typePNG image data, 16 x 16, 8-bit colormap, non-interlaced Hash9d35b617fd258f648c37812252297dd3 7e32fd007f1c6fe1466d15439173082c0fbe82da e8a768f8122da75777dc64b6d35e756a1848c4f330f293920c18480df085000a
GET /space-robot/assets/favicon-16x16.png HTTP/1.1
Host: ykrvt.check-tl-ver-24-2.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ykrvt.check-tl-ver-24-2.com/space-robot/?pl=epbJxbtxQEuIs1LQXyqFHg&sm=space-robot&sub_id=2898&nrid=5f53a699b89b43f083a54fa5506c2435&hash=75-V4ipdRKngfdFM9YPqrw&exp=1715190908
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 08 May 2024 17:50:09 GMT
content-type: image/png
content-length: 1163
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
etag: "6627c958-48b"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=M5jRXxoj7WDXYI5sXhYM02u1LzT59UM6YagR3QJqILc56f3Wvws9GmAbZgZDQqvtJMdkWZv7ctv8TKXgNzo9RKGHZNlszvZrtERbIV%2Bwa8GxqzUEmlZB4dv2T0snj%2BfByGDFnGXi1AjunBY8r%2Bk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880b4a5da879b524-OSL
alt-svc: h3=":443"; ma=86400
|
|
| ykrvt.check-tl-ver-24-2.com/space-robot/assets/apple-touch-icon.png | 172.67.156.121 | | 23 kB |
URL ykrvt.check-tl-ver-24-2.com/space-robot/assets/apple-touch-icon.png IP172.67.156.121:0
File typePNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced Hashf500ba7eee0ae7d1ceb44236ac253165 0614de220ecadb48038ed894d91120ba102c8367 ba5a3083c38d71a2191ee7e614a96812d1f9d88bbfb360d3b61dbb1ffcd51de5
GET /space-robot/assets/apple-touch-icon.png HTTP/1.1
Host: ykrvt.check-tl-ver-24-2.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ykrvt.check-tl-ver-24-2.com/space-robot/?pl=epbJxbtxQEuIs1LQXyqFHg&sm=space-robot&sub_id=2898&nrid=5f53a699b89b43f083a54fa5506c2435&hash=75-V4ipdRKngfdFM9YPqrw&exp=1715190908
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 08 May 2024 17:50:09 GMT
content-type: image/png
content-length: 23177
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
etag: "6627c958-5a89"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=EDZQB5j%2BNRYErRVMxpnKojQB5JMDydaJwNklktT7quExCGO11oZ7qOzBSozQd%2Bqt9vm00%2F1GZbj6Uj%2BYvmzcnVnt1jXMZsQs5%2BJCsHG2BEpzk%2FmO9ss%2BFSyDikLQk0QCK1tuxoe63rDWHn01A3Y%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880b4a5d986fb524-OSL
alt-svc: h3=":443"; ma=86400
|
|
| cdnstatic.check-tl-ver-24-2.com/ps/config.js?id=epbJxbtxQEuIs1LQXyqFHg | 172.67.156.121 | | 9.5 kB |
URL cdnstatic.check-tl-ver-24-2.com/ps/config.js?id=epbJxbtxQEuIs1LQXyqFHg IP172.67.156.121:0
File typeASCII text, with CRLF line terminators Hashdc65a2fbfc4c76147b8b778b759c8d91 b8374137f0fe797e6a7e58c0c6ef14aa7a6b9855 7e85c285fd983223d07a014d1a96804ba1c8f65fb43238a4fad204350e896958
GET /ps/config.js?id=epbJxbtxQEuIs1LQXyqFHg HTTP/1.1
Host: cdnstatic.check-tl-ver-24-2.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ykrvt.check-tl-ver-24-2.com/
Cookie: __psu=825b568b-6f54-47fc-bb5f-eba8423b4799
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 08 May 2024 17:50:09 GMT
content-type: application/javascript
cache-control: max-age=0, no-cache, no-store, must-revalidate
accept-ch: Sec-CH-UA, Sec-CH-UA-Platform, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
cf-cache-status: BYPASS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=WzbjWMelpw9onBOeIMO4oQtKQ1yZTXIn2bVdISbleguyiLVOBB5KHv2o7MqYSdlOiz9BmBV18HmMQvOA%2Bm36GmfEmlJLW4gJI5p9jC6yLyT8DB44sDfY8FzY%2FxWnWqQcrgzGC%2Br3BYceuWL3gUGEAj6R"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880b4a5db897b524-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| www.gstatic.com/firebasejs/10.3.1/firebase-messaging-compat.js | 142.250.74.99 | | 9.9 kB |
URL www.gstatic.com/firebasejs/10.3.1/firebase-messaging-compat.js IP142.250.74.99:0
File typeJavaScript source, ASCII text, with very long lines (38231) Hash0541b823dfaf39162ef84cf075c9951b e0934726455558cc1a59823efada9651e33aafaa 21f1d62f222007068c793f0947d98f4ccb7c1595adb68efeb783390fdd8b5522
GET /firebasejs/10.3.1/firebase-messaging-compat.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ykrvt.check-tl-ver-24-2.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/firebase-js
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="firebase-js"
report-to: {"group":"firebase-js","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/firebase-js"}]}
content-length: 9934
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 03 May 2024 02:03:05 GMT
expires: Sat, 03 May 2025 02:03:05 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 31 Aug 2023 15:20:50 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 488824
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| oa.check-tl-ver-24-2.com/space-robot/assets/corner.png | 172.67.156.121 | | 300 B |
URL oa.check-tl-ver-24-2.com/space-robot/assets/corner.png IP172.67.156.121:0
File typePNG image data, 44 x 44, 8-bit colormap, non-interlaced Hashf66c38fa2cd7c50bd1989d41da28fb80 e1de333eca72647f3c1831083fe678cfa8fe9eab 3059be4046e0315ad1c0d1cb163d9daaf759bdf16e906e908842fac07e5608a2
GET /space-robot/assets/corner.png HTTP/1.1
Host: oa.check-tl-ver-24-2.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://oa.check-tl-ver-24-2.com/space-robot/?pl=epbJxbtxQEuIs1LQXyqFHg&sm=space-robot&sub_id=2898&nrid=5f53a699b89b43f083a54fa5506c2435&hash=75-V4ipdRKngfdFM9YPqrw&exp=1715190908
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 08 May 2024 17:50:10 GMT
content-type: image/png
content-length: 300
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
etag: "6627c958-12c"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2FxRjVqmfI4cwWxx3uINdhOP3Gid5ZsWpfywxhS4QxKsAjfsVNNIzH8WtFN7FFAHQVwSWumNk1qjf2J1pjc6iVaHRVlUUs0GNzHOF8CSWyaOdMfK54RVZw2ydgzFYvS44J7N9VYVAHs2nRgw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880b4a603cddb524-OSL
alt-svc: h3=":443"; ma=86400
|
|
| oa.check-tl-ver-24-2.com/space-robot/assets/style.css?v=4 | 172.67.156.121 | | 17 kB |
URL oa.check-tl-ver-24-2.com/space-robot/assets/style.css?v=4 IP172.67.156.121:0
File typeASCII text, with very long lines (6532), with CRLF line terminators Hash8335155a7c4004d8296b7727a24273c4 387b7723ba35057b631809e1437c64cdd89f13bb 0b758313cde9005f3f2082f616558a3db63019d03a5f1376f3a49e64d874909e
GET /space-robot/assets/style.css?v=4 HTTP/1.1
Host: oa.check-tl-ver-24-2.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://oa.check-tl-ver-24-2.com/space-robot/?pl=epbJxbtxQEuIs1LQXyqFHg&sm=space-robot&sub_id=2898&nrid=5f53a699b89b43f083a54fa5506c2435&hash=75-V4ipdRKngfdFM9YPqrw&exp=1715190908
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 08 May 2024 17:50:10 GMT
content-type: text/css
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
etag: W/"6627c958-1986"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=NjxP%2BkedploPCozFJ9vjwfVaXwouOxmW2vh5JWTSMLddic7Bgf3K72ViS31yos2Wypl8V0vg5zZBES0edewAodP455GEabDXssmqBwxviXZ9a%2FEIECIkSTP3x23u0YyD7QKnJpZv32Xafng%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880b4a603cd7b524-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| ykrvt.check-tl-ver-24-2.com/space-robot/assets/style.css?v=4 | 172.67.156.121 | | 11 kB |
URL ykrvt.check-tl-ver-24-2.com/space-robot/assets/style.css?v=4 IP172.67.156.121:0
File typeASCII text, with very long lines (6532), with CRLF line terminators Hash8335155a7c4004d8296b7727a24273c4 387b7723ba35057b631809e1437c64cdd89f13bb 0b758313cde9005f3f2082f616558a3db63019d03a5f1376f3a49e64d874909e
GET /space-robot/assets/style.css?v=4 HTTP/1.1
Host: ykrvt.check-tl-ver-24-2.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ykrvt.check-tl-ver-24-2.com/space-robot/?pl=epbJxbtxQEuIs1LQXyqFHg&sm=space-robot&sub_id=2898&nrid=5f53a699b89b43f083a54fa5506c2435&hash=75-V4ipdRKngfdFM9YPqrw&exp=1715190908
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 08 May 2024 17:50:09 GMT
content-type: text/css
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
etag: W/"6627c958-1986"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Or5%2BXLQ67p1CY4RRy8Be9cCzCzJELwA4GJYMXym9yvdA%2BZrKFD9PZfaHlbIIT3uZqNg%2BETrPKCdBAQmwId%2BVc%2BWn6UzxGjc0zIC8NMh73Upf7BU0POhaQZZ64xUhUnanfLXlRE8gX4%2BYaAErJNQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880b4a5bbd2bb524-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| oa.check-tl-ver-24-2.com/space-robot/assets/favicon-16x16.png | 172.67.156.121 | | 1.2 kB |
URL oa.check-tl-ver-24-2.com/space-robot/assets/favicon-16x16.png IP172.67.156.121:0
File typePNG image data, 16 x 16, 8-bit colormap, non-interlaced Hash9d35b617fd258f648c37812252297dd3 7e32fd007f1c6fe1466d15439173082c0fbe82da e8a768f8122da75777dc64b6d35e756a1848c4f330f293920c18480df085000a
GET /space-robot/assets/favicon-16x16.png HTTP/1.1
Host: oa.check-tl-ver-24-2.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://oa.check-tl-ver-24-2.com/space-robot/?pl=epbJxbtxQEuIs1LQXyqFHg&sm=space-robot&sub_id=2898&nrid=5f53a699b89b43f083a54fa5506c2435&hash=75-V4ipdRKngfdFM9YPqrw&exp=1715190908
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 08 May 2024 17:50:10 GMT
content-type: image/png
content-length: 1163
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
etag: "6627c958-48b"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kJ1pit6QSc%2FceZbjHEhoFKv6MlMX5hCKGIAlmf%2BMWZbOyhCTuyqe76%2FzkooKrSTzq29ItIiecp59APyIep05NzS%2BGbUdosgBS9i2ZLbAKzofePdvSQRSMM%2FYQS0f%2B0fRA%2BId0Aq8AB3tgy4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880b4a615e94b524-OSL
alt-svc: h3=":443"; ma=86400
|
|
| oa.check-tl-ver-24-2.com/space-robot/assets/apple-touch-icon.png | 172.67.156.121 | | 23 kB |
URL oa.check-tl-ver-24-2.com/space-robot/assets/apple-touch-icon.png IP172.67.156.121:0
File typePNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced Hashf500ba7eee0ae7d1ceb44236ac253165 0614de220ecadb48038ed894d91120ba102c8367 ba5a3083c38d71a2191ee7e614a96812d1f9d88bbfb360d3b61dbb1ffcd51de5
GET /space-robot/assets/apple-touch-icon.png HTTP/1.1
Host: oa.check-tl-ver-24-2.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://oa.check-tl-ver-24-2.com/space-robot/?pl=epbJxbtxQEuIs1LQXyqFHg&sm=space-robot&sub_id=2898&nrid=5f53a699b89b43f083a54fa5506c2435&hash=75-V4ipdRKngfdFM9YPqrw&exp=1715190908
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 08 May 2024 17:50:10 GMT
content-type: image/png
content-length: 23177
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
etag: "6627c958-5a89"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6isP3Ir64pT7BxgMU%2BJcXQmU%2Fv2AM8lDhuZQifBpt8MKyi29fuT2iSlm56Kg1234mI5PzbIAno3IiI7vlzuttGAHZ%2ByaNWGTLnakc3i9YPtWO5gDyZADlr7lxbJQp8u6X32J2JuAyo1mYkI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880b4a615e91b524-OSL
alt-svc: h3=":443"; ma=86400
|
|
| www.gstatic.com/firebasejs/10.3.1/firebase-messaging-compat.js | 142.250.74.99 | | 9.9 kB |
URL www.gstatic.com/firebasejs/10.3.1/firebase-messaging-compat.js IP142.250.74.99:0
File typeJavaScript source, ASCII text, with very long lines (38231) Hash0541b823dfaf39162ef84cf075c9951b e0934726455558cc1a59823efada9651e33aafaa 21f1d62f222007068c793f0947d98f4ccb7c1595adb68efeb783390fdd8b5522
GET /firebasejs/10.3.1/firebase-messaging-compat.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://oa.check-tl-ver-24-2.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/firebase-js
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="firebase-js"
report-to: {"group":"firebase-js","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/firebase-js"}]}
content-length: 9934
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 03 May 2024 02:03:05 GMT
expires: Sat, 03 May 2025 02:03:05 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 31 Aug 2023 15:20:50 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 488825
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| news-nadete.com/tds?id=1218717456&p1=tk_204667 |  136.243.42.50 | | 0 B |
URL news-nadete.com/tds?id=1218717456&p1=tk_204667 IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tds?id=1218717456&p1=tk_204667 HTTP/1.1
Host: news-nadete.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
server: nginx
date: Wed, 08 May 2024 17:50:12 GMT
content-length: 0
location: https://29c1f2852f.news-mezutu.com/?id=1218717456&p1=tk_204667
vary: Origin
x-frame-options: DENY
X-Firefox-Spdy: h2
|
|
| 29c1f2852f.news-mezutu.com/revopush.js | 136.243.42.50 | | 8.1 kB |
URL 29c1f2852f.news-mezutu.com/revopush.js IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (20417), with no line terminators Hash2c5bbd971d7151a38f9a0fbe8fa83886 8fb8275965ff38c18a2fb5bd1be990c4592b39a0 b75cba17751a5e6c0e183475d1074739a876aa2cf4841e760692e573822db343
GET /revopush.js HTTP/1.1
Host: 29c1f2852f.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://29c1f2852f.news-mezutu.com/?id=1218717456&p1=tk_204667
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:12 GMT
content-type: application/javascript; charset=utf-8
content-length: 8110
last-modified: Thu, 02 May 2024 14:58:42 GMT
etag: "6633aa22-1fae"
content-encoding: gzip
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| 29c1f2852f.news-mezutu.com/lands/16/man.png | 136.243.42.50 | | 11 kB |
URL 29c1f2852f.news-mezutu.com/lands/16/man.png IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
File typePNG image data, 179 x 278, 8-bit colormap, non-interlaced Hasha6fa8154cc36da494df7b5103329c15a 3a2310088bcec14f7c0187f8409a5af5395665e8 967b8859fedb2c63afc8ae6ae2839fdd40f0e26af85adc6605a629f3c0ed0837
GET /lands/16/man.png HTTP/1.1
Host: 29c1f2852f.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://29c1f2852f.news-mezutu.com/?id=1218717456&p1=tk_204667
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:12 GMT
content-type: image/png
content-length: 10591
last-modified: Thu, 02 May 2024 14:58:42 GMT
etag: "6633aa22-295f"
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| 29c1f2852f.news-mezutu.com/lands/16/logo.png | 136.243.42.50 | | 1.1 kB |
URL 29c1f2852f.news-mezutu.com/lands/16/logo.png IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
File typePNG image data, 94 x 19, 8-bit colormap, non-interlaced Hashd708fbf0358752a082f5a394b74adda8 231c1527b4b039eb3af7d7e9eb5587ed87f6ea81 09d12e3c0e65fda26b9073e70e02fb24fa6941a4a3b1b81211b6470f00769ea5
GET /lands/16/logo.png HTTP/1.1
Host: 29c1f2852f.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://29c1f2852f.news-mezutu.com/?id=1218717456&p1=tk_204667
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:12 GMT
content-type: image/png
content-length: 1061
last-modified: Thu, 02 May 2024 14:58:42 GMT
etag: "6633aa22-425"
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| partners-tds.com/WzJQVS |  142.202.51.61 | | 0 B |
IP142.202.51.61:0 ASN#63023 AS-GLOBALTELEHOST
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /WzJQVS HTTP/1.1
Host: partners-tds.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://29c1f2852f.news-mezutu.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Server: nginx
Date: Wed, 08 May 2024 17:50:11 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-cache, no-store, must-revalidate
Expires: Wed, 08 May 2024 17:50:11 GMT
Location: https://news-pepafu.com/tds?id=1218914904&p1=&p2=&p3=&p4=
Set-Cookie: _subid=376l60j117j673; expires=Sat, 08 Jun 2024 17:50:11 GMT; path=/
933eb=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjFcIjoxNzE1MTkwNjExfSxcImNhbXBhaWduc1wiOntcIjFcIjoxNzE1MTkwNjExfSxcInRpbWVcIjoxNzE1MTkwNjExfSJ9.eBUGVDeNH4CwZsOUDJQQTGFummUDBDWkm-b51CPZuw4; expires=Thu, 15 Sep 2078 11:40:22 GMT; path=/
Vary: Accept-Encoding
Access-Control-Allow-Origin: *
|
|
| 29c1f2852f.news-mezutu.com/?id=1218717456&p1=tk_204667 | 136.243.42.50 | | 3.7 kB |
URL 29c1f2852f.news-mezutu.com/?id=1218717456&p1=tk_204667 IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
Hashef43c6f2991f9039f1d5146d2e2cab4c b445652e18c598dd937724ccc3441b8f96566f9d ba696536dc2c63f72479280282d0af1afa73aa505cfd937a53651ad0bb0b26d7
GET /?id=1218717456&p1=tk_204667 HTTP/1.1
Host: 29c1f2852f.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:12 GMT
content-type: text/html; charset=UTF-8
vary: Origin
x-frame-options: DENY
X-Firefox-Spdy: h2
|
|
| 29c1f2852f.news-mezutu.com/lands/1/v_F.ico | 136.243.42.50 | | 1.2 kB |
URL 29c1f2852f.news-mezutu.com/lands/1/v_F.ico IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
File typeMS Windows icon resource - 1 icon, 16x16, 32 bits/pixel Hash183cab2f5d4582ef71ae37efc8d458dd 7c230eba9c1ce7900ea9bbf53dde00ea068dc995 c96fb13d89231c5a743ca1826064cd884ed4ec629fd66f15c0dbcf173dfbbf3e
GET /lands/1/v_F.ico HTTP/1.1
Host: 29c1f2852f.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://29c1f2852f.news-mezutu.com/?id=1218717456&p1=tk_204667
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:13 GMT
content-type: image/x-icon
content-length: 1150
last-modified: Thu, 02 May 2024 14:58:42 GMT
etag: "6633aa22-47e"
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| news-pepafu.com/tds?id=1218914904&p1=&p2=&p3=&p4= | 144.76.106.61 | | 0 B |
URL news-pepafu.com/tds?id=1218914904&p1=&p2=&p3=&p4= IP144.76.106.61:0 ASN#24940 Hetzner Online GmbH
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tds?id=1218914904&p1=&p2=&p3=&p4= HTTP/1.1
Host: news-pepafu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://29c1f2852f.news-mezutu.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
server: nginx
date: Wed, 08 May 2024 17:50:11 GMT
content-length: 0
location: https://072359ff09.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
vary: Origin
x-frame-options: DENY
X-Firefox-Spdy: h2
|
|
| 072359ff09.news-mezutu.com/revopush.js | 136.243.42.50 | | 8.1 kB |
URL 072359ff09.news-mezutu.com/revopush.js IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (20417), with no line terminators Hash2c5bbd971d7151a38f9a0fbe8fa83886 8fb8275965ff38c18a2fb5bd1be990c4592b39a0 b75cba17751a5e6c0e183475d1074739a876aa2cf4841e760692e573822db343
GET /revopush.js HTTP/1.1
Host: 072359ff09.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://072359ff09.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:13 GMT
content-type: application/javascript; charset=utf-8
content-length: 8110
last-modified: Thu, 02 May 2024 14:58:42 GMT
etag: "6633aa22-1fae"
content-encoding: gzip
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| 072359ff09.news-mezutu.com/lands/46/sketch.min.js | 136.243.42.50 | | 2.4 kB |
URL 072359ff09.news-mezutu.com/lands/46/sketch.min.js IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
File typeJavaScript source, ASCII text, with very long lines (4675), with no line terminators Hashed52afed30560dc3e13a88e35a300c18 8714792a53d24b5c641b9536a2d218d75b43b3f9 cad4eff11237dc84f803b46c8529ca9918e4429c38058a053ef5d492c707a711
GET /lands/46/sketch.min.js HTTP/1.1
Host: 072359ff09.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://072359ff09.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:13 GMT
content-type: application/javascript; charset=utf-8
content-length: 2379
last-modified: Thu, 02 May 2024 14:58:42 GMT
etag: "6633aa22-94b"
content-encoding: gzip
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| partners-tds.com/WzJQVS | 142.202.51.61 | | 0 B |
IP142.202.51.61:0 ASN#63023 AS-GLOBALTELEHOST
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /WzJQVS HTTP/1.1
Host: partners-tds.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://072359ff09.news-mezutu.com/
Cookie: _subid=376l60j117j673; 933eb=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjFcIjoxNzE1MTkwNjExfSxcImNhbXBhaWduc1wiOntcIjFcIjoxNzE1MTkwNjExfSxcInRpbWVcIjoxNzE1MTkwNjExfSJ9.eBUGVDeNH4CwZsOUDJQQTGFummUDBDWkm-b51CPZuw4
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Server: nginx
Date: Wed, 08 May 2024 17:50:11 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-cache, no-store, must-revalidate
Expires: Wed, 08 May 2024 17:50:11 GMT
Location: https://news-pepafu.com/tds?id=1218914904&p1=&p2=&p3=&p4=
Set-Cookie: _subid=376l60j117j67a; expires=Sat, 08 Jun 2024 17:50:11 GMT; path=/
933eb=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjFcIjoxNzE1MTkwNjExfSxcImNhbXBhaWduc1wiOntcIjFcIjoxNzE1MTkwNjExfSxcInRpbWVcIjoxNzE1MTkwNjExfSJ9.eBUGVDeNH4CwZsOUDJQQTGFummUDBDWkm-b51CPZuw4; expires=Thu, 15 Sep 2078 11:40:22 GMT; path=/
Vary: Accept-Encoding
Access-Control-Allow-Origin: *
|
|
| news-pepafu.com/tds?id=1218914904&p1=&p2=&p3=&p4= | 144.76.106.61 | | 0 B |
URL news-pepafu.com/tds?id=1218914904&p1=&p2=&p3=&p4= IP144.76.106.61:0 ASN#24940 Hetzner Online GmbH
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tds?id=1218914904&p1=&p2=&p3=&p4= HTTP/1.1
Host: news-pepafu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://072359ff09.news-mezutu.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
server: nginx
date: Wed, 08 May 2024 17:50:11 GMT
content-length: 0
location: https://d14ed0f939.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
vary: Origin
x-frame-options: DENY
X-Firefox-Spdy: h2
|
|
| d14ed0f939.news-mezutu.com/revopush.js | 136.243.42.50 | | 8.1 kB |
URL d14ed0f939.news-mezutu.com/revopush.js IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (20417), with no line terminators Hash2c5bbd971d7151a38f9a0fbe8fa83886 8fb8275965ff38c18a2fb5bd1be990c4592b39a0 b75cba17751a5e6c0e183475d1074739a876aa2cf4841e760692e573822db343
GET /revopush.js HTTP/1.1
Host: d14ed0f939.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://d14ed0f939.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:13 GMT
content-type: application/javascript; charset=utf-8
content-length: 8110
last-modified: Thu, 02 May 2024 14:58:42 GMT
etag: "6633aa22-1fae"
content-encoding: gzip
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| d14ed0f939.news-mezutu.com/lands/48/preloader-43.5794040.gif | 136.243.42.50 | | 7.0 kB |
URL d14ed0f939.news-mezutu.com/lands/48/preloader-43.5794040.gif IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
File typeGIF image data, version 89a, 160 x 160 Hash5794040ee88def220320edd0ed2e2ac9 7ec6d7843172d2bec7c0ed0d7eabed19a800fd7b c1a4896adebc502e9be1248a28bc641ef9a5b75c6bdefa5d704a220c128ee34e
GET /lands/48/preloader-43.5794040.gif HTTP/1.1
Host: d14ed0f939.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://d14ed0f939.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:13 GMT
content-type: image/gif
content-length: 7010
last-modified: Thu, 02 May 2024 14:58:42 GMT
etag: "6633aa22-1b62"
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| partners-tds.com/WzJQVS | 142.202.51.61 | | 0 B |
IP142.202.51.61:0 ASN#63023 AS-GLOBALTELEHOST
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /WzJQVS HTTP/1.1
Host: partners-tds.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://d14ed0f939.news-mezutu.com/
Cookie: _subid=376l60j117j67a; 933eb=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjFcIjoxNzE1MTkwNjExfSxcImNhbXBhaWduc1wiOntcIjFcIjoxNzE1MTkwNjExfSxcInRpbWVcIjoxNzE1MTkwNjExfSJ9.eBUGVDeNH4CwZsOUDJQQTGFummUDBDWkm-b51CPZuw4
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Server: nginx
Date: Wed, 08 May 2024 17:50:12 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-cache, no-store, must-revalidate
Expires: Wed, 08 May 2024 17:50:12 GMT
Location: https://news-pepafu.com/tds?id=1218914904&p1=&p2=&p3=&p4=
Set-Cookie: _subid=376l60j117j67h; expires=Sat, 08 Jun 2024 17:50:12 GMT; path=/
933eb=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjFcIjoxNzE1MTkwNjExfSxcImNhbXBhaWduc1wiOntcIjFcIjoxNzE1MTkwNjExfSxcInRpbWVcIjoxNzE1MTkwNjExfSJ9.eBUGVDeNH4CwZsOUDJQQTGFummUDBDWkm-b51CPZuw4; expires=Thu, 15 Sep 2078 11:40:24 GMT; path=/
Vary: Accept-Encoding
Access-Control-Allow-Origin: *
|
|
| news-pepafu.com/tds?id=1218914904&p1=&p2=&p3=&p4= | 144.76.106.61 | | 0 B |
URL news-pepafu.com/tds?id=1218914904&p1=&p2=&p3=&p4= IP144.76.106.61:0 ASN#24940 Hetzner Online GmbH
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tds?id=1218914904&p1=&p2=&p3=&p4= HTTP/1.1
Host: news-pepafu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://d14ed0f939.news-mezutu.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
server: nginx
date: Wed, 08 May 2024 17:50:12 GMT
content-length: 0
location: https://f30ff2472e.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
vary: Origin
x-frame-options: DENY
X-Firefox-Spdy: h2
|
|
| f30ff2472e.news-mezutu.com/revopush.js | 136.243.42.50 | | 8.1 kB |
URL f30ff2472e.news-mezutu.com/revopush.js IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (20417), with no line terminators Hash2c5bbd971d7151a38f9a0fbe8fa83886 8fb8275965ff38c18a2fb5bd1be990c4592b39a0 b75cba17751a5e6c0e183475d1074739a876aa2cf4841e760692e573822db343
GET /revopush.js HTTP/1.1
Host: f30ff2472e.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://f30ff2472e.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:13 GMT
content-type: application/javascript; charset=utf-8
content-length: 8110
last-modified: Thu, 02 May 2024 14:58:42 GMT
etag: "6633aa22-1fae"
content-encoding: gzip
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| partners-tds.com/WzJQVS | 142.202.51.61 | | 0 B |
IP142.202.51.61:0 ASN#63023 AS-GLOBALTELEHOST
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /WzJQVS HTTP/1.1
Host: partners-tds.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://f30ff2472e.news-mezutu.com/
Cookie: _subid=376l60j117j67h; 933eb=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjFcIjoxNzE1MTkwNjExfSxcImNhbXBhaWduc1wiOntcIjFcIjoxNzE1MTkwNjExfSxcInRpbWVcIjoxNzE1MTkwNjExfSJ9.eBUGVDeNH4CwZsOUDJQQTGFummUDBDWkm-b51CPZuw4
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Server: nginx
Date: Wed, 08 May 2024 17:50:12 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-cache, no-store, must-revalidate
Expires: Wed, 08 May 2024 17:50:12 GMT
Location: https://news-pepafu.com/tds?id=1218914904&p1=&p2=&p3=&p4=
Set-Cookie: _subid=376l60j117j67k; expires=Sat, 08 Jun 2024 17:50:12 GMT; path=/
933eb=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjFcIjoxNzE1MTkwNjExfSxcImNhbXBhaWduc1wiOntcIjFcIjoxNzE1MTkwNjExfSxcInRpbWVcIjoxNzE1MTkwNjExfSJ9.eBUGVDeNH4CwZsOUDJQQTGFummUDBDWkm-b51CPZuw4; expires=Thu, 15 Sep 2078 11:40:24 GMT; path=/
Vary: Accept-Encoding
Access-Control-Allow-Origin: *
|
|
| f30ff2472e.news-mezutu.com/process.js?id=1218914904&p1=&p2=&p3=&p4= | 136.243.42.50 | | 45 kB |
URL f30ff2472e.news-mezutu.com/process.js?id=1218914904&p1=&p2=&p3=&p4= IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
File typeJavaScript source, ASCII text, with very long lines (44310) Hash8af463b42a2625992e3c5ef0248d56bb de0b477398b1aa3aa0c2e95a2620c325a05c855b 681c165cf662c6af08b1dd0898a518d20d647463e099c4589adb54592b33798f
GET /process.js?id=1218914904&p1=&p2=&p3=&p4= HTTP/1.1
Host: f30ff2472e.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://f30ff2472e.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:13 GMT
content-type: application/javascript; charset=utf-8
cache-control: no-cache, no-store, must-revalidate
expires: 0
pragma: no-cache
vary: Origin
X-Firefox-Spdy: h2
|
|
| 072359ff09.news-mezutu.com/process.js?id=1218914904&p1=&p2=&p3=&p4= | 136.243.42.50 | | 53 kB |
URL 072359ff09.news-mezutu.com/process.js?id=1218914904&p1=&p2=&p3=&p4= IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
Hash97b5c5fe101d117e4abc7d030d0856d9 9db874bbcc9c9969c9af5c6b7d96989bfa7ac44b 8ac489371b31b5fbe764387f67227d5a167bb73b19ad5f861c527c9e912f976a
GET /process.js?id=1218914904&p1=&p2=&p3=&p4= HTTP/1.1
Host: 072359ff09.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://072359ff09.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:13 GMT
content-type: application/javascript; charset=utf-8
cache-control: no-cache, no-store, must-revalidate
expires: 0
pragma: no-cache
vary: Origin
X-Firefox-Spdy: h2
|
|
| 50ca3f9322.news-mezutu.com/lands/53/css/style.css | 136.243.42.50 | | 1.3 kB |
URL 50ca3f9322.news-mezutu.com/lands/53/css/style.css IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
File typeASCII text, with very long lines (4928), with no line terminators Hash6f2d06d6dbd00d18b9e7eb11ef80081d b86bdf3144b91210a3e04aab9802dba7b677ffe4 4bbe46d55f77d131ea3c70d021bf1e88fcfa1a98b7b89cf8f3f081ffb38fa7f8
GET /lands/53/css/style.css HTTP/1.1
Host: 50ca3f9322.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://50ca3f9322.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:14 GMT
content-type: text/css
content-length: 1301
last-modified: Thu, 02 May 2024 14:58:42 GMT
etag: "6633aa22-515"
content-encoding: gzip
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| 50ca3f9322.news-mezutu.com/lands/53/images/spinning-circles2.svg | 136.243.42.50 | | 503 B |
URL 50ca3f9322.news-mezutu.com/lands/53/images/spinning-circles2.svg IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
File typeSVG Scalable Vector Graphics image Hash14e6f9981fa27406176056df2451d27b aa1b6fd6071391d0031bff2d74ae77347ec2fdb4 466d361db2f130d7e3d40a671c935e3e556c3a49567657afee2e44a0a390a84f
GET /lands/53/images/spinning-circles2.svg HTTP/1.1
Host: 50ca3f9322.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://50ca3f9322.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:14 GMT
content-type: image/svg+xml
content-length: 503
last-modified: Thu, 02 May 2024 14:58:42 GMT
etag: "6633aa22-1f7"
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| partners-tds.com/WzJQVS | 142.202.51.61 | | 0 B |
IP142.202.51.61:0 ASN#63023 AS-GLOBALTELEHOST
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /WzJQVS HTTP/1.1
Host: partners-tds.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://50ca3f9322.news-mezutu.com/
Cookie: _subid=376l60j117j67k; 933eb=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjFcIjoxNzE1MTkwNjExfSxcImNhbXBhaWduc1wiOntcIjFcIjoxNzE1MTkwNjExfSxcInRpbWVcIjoxNzE1MTkwNjExfSJ9.eBUGVDeNH4CwZsOUDJQQTGFummUDBDWkm-b51CPZuw4
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Server: nginx
Date: Wed, 08 May 2024 17:50:12 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-cache, no-store, must-revalidate
Expires: Wed, 08 May 2024 17:50:12 GMT
Location: https://news-pepafu.com/tds?id=1218914904&p1=&p2=&p3=&p4=
Set-Cookie: _subid=376l60j117j67o; expires=Sat, 08 Jun 2024 17:50:12 GMT; path=/
933eb=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjFcIjoxNzE1MTkwNjExfSxcImNhbXBhaWduc1wiOntcIjFcIjoxNzE1MTkwNjExfSxcInRpbWVcIjoxNzE1MTkwNjExfSJ9.eBUGVDeNH4CwZsOUDJQQTGFummUDBDWkm-b51CPZuw4; expires=Thu, 15 Sep 2078 11:40:24 GMT; path=/
Vary: Accept-Encoding
Access-Control-Allow-Origin: *
|
|
| news-pepafu.com/tds?id=1218914904&p1=&p2=&p3=&p4= | 144.76.106.61 | | 0 B |
URL news-pepafu.com/tds?id=1218914904&p1=&p2=&p3=&p4= IP144.76.106.61:0 ASN#24940 Hetzner Online GmbH
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tds?id=1218914904&p1=&p2=&p3=&p4= HTTP/1.1
Host: news-pepafu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://50ca3f9322.news-mezutu.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
server: nginx
date: Wed, 08 May 2024 17:50:12 GMT
content-length: 0
location: https://62806a6eae.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
vary: Origin
x-frame-options: DENY
X-Firefox-Spdy: h2
|
|
| 62806a6eae.news-mezutu.com/revopush.js | 136.243.42.50 | | 8.1 kB |
URL 62806a6eae.news-mezutu.com/revopush.js IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (20417), with no line terminators Hash2c5bbd971d7151a38f9a0fbe8fa83886 8fb8275965ff38c18a2fb5bd1be990c4592b39a0 b75cba17751a5e6c0e183475d1074739a876aa2cf4841e760692e573822db343
GET /revopush.js HTTP/1.1
Host: 62806a6eae.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://62806a6eae.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:14 GMT
content-type: application/javascript; charset=utf-8
content-length: 8110
last-modified: Thu, 02 May 2024 14:58:42 GMT
etag: "6633aa22-1fae"
content-encoding: gzip
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| 62806a6eae.news-mezutu.com/lands/57/css/style.css | 136.243.42.50 | | 1.2 kB |
URL 62806a6eae.news-mezutu.com/lands/57/css/style.css IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
File typeASCII text, with very long lines (4468), with no line terminators Hashb07eb7ba1a3bb505eba51b55f4ffa9ff fea4806dafcdda47dff4bb6aa09362ded48879d5 086ceb41d9cccb6678d0a759d730383098e9d80d8067e9b8ce06d0972d2dae68
GET /lands/57/css/style.css HTTP/1.1
Host: 62806a6eae.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://62806a6eae.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:14 GMT
content-type: text/css
content-length: 1213
last-modified: Thu, 02 May 2024 14:58:42 GMT
etag: "6633aa22-4bd"
content-encoding: gzip
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| d14ed0f939.news-mezutu.com/process.js?id=1218914904&p1=&p2=&p3=&p4= | 136.243.42.50 | | 46 kB |
URL d14ed0f939.news-mezutu.com/process.js?id=1218914904&p1=&p2=&p3=&p4= IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
Hash92f834930da8cf6abd3040a17a116824 9c072a114c93cb18874749e1f21af4ac8bf28712 65f213046a9e36e9655cbe7f91604edb031ddb98e1fde832d6bcb0c2048cf1e7
GET /process.js?id=1218914904&p1=&p2=&p3=&p4= HTTP/1.1
Host: d14ed0f939.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://d14ed0f939.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:13 GMT
content-type: application/javascript; charset=utf-8
cache-control: no-cache, no-store, must-revalidate
expires: 0
pragma: no-cache
vary: Origin
X-Firefox-Spdy: h2
|
|
| partners-tds.com/WzJQVS | 142.202.51.61 | | 0 B |
IP142.202.51.61:0 ASN#63023 AS-GLOBALTELEHOST
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /WzJQVS HTTP/1.1
Host: partners-tds.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://62806a6eae.news-mezutu.com/
Cookie: _subid=376l60j117j67o; 933eb=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjFcIjoxNzE1MTkwNjExfSxcImNhbXBhaWduc1wiOntcIjFcIjoxNzE1MTkwNjExfSxcInRpbWVcIjoxNzE1MTkwNjExfSJ9.eBUGVDeNH4CwZsOUDJQQTGFummUDBDWkm-b51CPZuw4
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Server: nginx
Date: Wed, 08 May 2024 17:50:12 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-cache, no-store, must-revalidate
Expires: Wed, 08 May 2024 17:50:12 GMT
Location: https://news-pepafu.com/tds?id=1218914904&p1=&p2=&p3=&p4=
Set-Cookie: _subid=376l60j117j67r; expires=Sat, 08 Jun 2024 17:50:12 GMT; path=/
933eb=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjFcIjoxNzE1MTkwNjExfSxcImNhbXBhaWduc1wiOntcIjFcIjoxNzE1MTkwNjExfSxcInRpbWVcIjoxNzE1MTkwNjExfSJ9.eBUGVDeNH4CwZsOUDJQQTGFummUDBDWkm-b51CPZuw4; expires=Thu, 15 Sep 2078 11:40:24 GMT; path=/
Vary: Accept-Encoding
Access-Control-Allow-Origin: *
|
|
| news-pepafu.com/tds?id=1218914904&p1=&p2=&p3=&p4= | 144.76.106.61 | | 0 B |
URL news-pepafu.com/tds?id=1218914904&p1=&p2=&p3=&p4= IP144.76.106.61:0 ASN#24940 Hetzner Online GmbH
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tds?id=1218914904&p1=&p2=&p3=&p4= HTTP/1.1
Host: news-pepafu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://62806a6eae.news-mezutu.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
server: nginx
date: Wed, 08 May 2024 17:50:12 GMT
content-length: 0
location: https://daf19dedfc.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
vary: Origin
x-frame-options: DENY
X-Firefox-Spdy: h2
|
|
| daf19dedfc.news-mezutu.com/revopush.js | 136.243.42.50 | | 8.1 kB |
URL daf19dedfc.news-mezutu.com/revopush.js IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (20417), with no line terminators Hash2c5bbd971d7151a38f9a0fbe8fa83886 8fb8275965ff38c18a2fb5bd1be990c4592b39a0 b75cba17751a5e6c0e183475d1074739a876aa2cf4841e760692e573822db343
GET /revopush.js HTTP/1.1
Host: daf19dedfc.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://daf19dedfc.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:14 GMT
content-type: application/javascript; charset=utf-8
content-length: 8110
last-modified: Thu, 02 May 2024 14:58:42 GMT
etag: "6633aa22-1fae"
content-encoding: gzip
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| daf19dedfc.news-mezutu.com/lands/46/sketch.min.js | 136.243.42.50 | | 2.4 kB |
URL daf19dedfc.news-mezutu.com/lands/46/sketch.min.js IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
File typeJavaScript source, ASCII text, with very long lines (4675), with no line terminators Hashed52afed30560dc3e13a88e35a300c18 8714792a53d24b5c641b9536a2d218d75b43b3f9 cad4eff11237dc84f803b46c8529ca9918e4429c38058a053ef5d492c707a711
GET /lands/46/sketch.min.js HTTP/1.1
Host: daf19dedfc.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://daf19dedfc.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:14 GMT
content-type: application/javascript; charset=utf-8
content-length: 2379
last-modified: Thu, 02 May 2024 14:58:42 GMT
etag: "6633aa22-94b"
content-encoding: gzip
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| partners-tds.com/WzJQVS | 142.202.51.61 | | 0 B |
IP142.202.51.61:0 ASN#63023 AS-GLOBALTELEHOST
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /WzJQVS HTTP/1.1
Host: partners-tds.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://daf19dedfc.news-mezutu.com/
Cookie: _subid=376l60j117j67r; 933eb=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjFcIjoxNzE1MTkwNjExfSxcImNhbXBhaWduc1wiOntcIjFcIjoxNzE1MTkwNjExfSxcInRpbWVcIjoxNzE1MTkwNjExfSJ9.eBUGVDeNH4CwZsOUDJQQTGFummUDBDWkm-b51CPZuw4
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Server: nginx
Date: Wed, 08 May 2024 17:50:13 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-cache, no-store, must-revalidate
Expires: Wed, 08 May 2024 17:50:13 GMT
Location: https://news-pepafu.com/tds?id=1218914904&p1=&p2=&p3=&p4=
Set-Cookie: _subid=376l60j117j681; expires=Sat, 08 Jun 2024 17:50:13 GMT; path=/
933eb=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjFcIjoxNzE1MTkwNjExfSxcImNhbXBhaWduc1wiOntcIjFcIjoxNzE1MTkwNjExfSxcInRpbWVcIjoxNzE1MTkwNjExfSJ9.eBUGVDeNH4CwZsOUDJQQTGFummUDBDWkm-b51CPZuw4; expires=Thu, 15 Sep 2078 11:40:26 GMT; path=/
Vary: Accept-Encoding
Access-Control-Allow-Origin: *
|
|
| news-pepafu.com/tds?id=1218914904&p1=&p2=&p3=&p4= | 144.76.106.61 | | 0 B |
URL news-pepafu.com/tds?id=1218914904&p1=&p2=&p3=&p4= IP144.76.106.61:0 ASN#24940 Hetzner Online GmbH
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tds?id=1218914904&p1=&p2=&p3=&p4= HTTP/1.1
Host: news-pepafu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://daf19dedfc.news-mezutu.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
server: nginx
date: Wed, 08 May 2024 17:50:13 GMT
content-length: 0
location: https://18de59f697.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
vary: Origin
x-frame-options: DENY
X-Firefox-Spdy: h2
|
|
| 18de59f697.news-mezutu.com/revopush.js | 136.243.42.50 | | 8.1 kB |
URL 18de59f697.news-mezutu.com/revopush.js IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (20417), with no line terminators Hash2c5bbd971d7151a38f9a0fbe8fa83886 8fb8275965ff38c18a2fb5bd1be990c4592b39a0 b75cba17751a5e6c0e183475d1074739a876aa2cf4841e760692e573822db343
GET /revopush.js HTTP/1.1
Host: 18de59f697.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://18de59f697.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:15 GMT
content-type: application/javascript; charset=utf-8
content-length: 8110
last-modified: Thu, 02 May 2024 14:58:42 GMT
etag: "6633aa22-1fae"
content-encoding: gzip
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| partners-tds.com/WzJQVS | 142.202.51.61 | | 0 B |
IP142.202.51.61:0 ASN#63023 AS-GLOBALTELEHOST
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /WzJQVS HTTP/1.1
Host: partners-tds.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://18de59f697.news-mezutu.com/
Cookie: _subid=376l60j117j681; 933eb=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjFcIjoxNzE1MTkwNjExfSxcImNhbXBhaWduc1wiOntcIjFcIjoxNzE1MTkwNjExfSxcInRpbWVcIjoxNzE1MTkwNjExfSJ9.eBUGVDeNH4CwZsOUDJQQTGFummUDBDWkm-b51CPZuw4
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Server: nginx
Date: Wed, 08 May 2024 17:50:13 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-cache, no-store, must-revalidate
Expires: Wed, 08 May 2024 17:50:13 GMT
Location: https://news-pepafu.com/tds?id=1218914904&p1=&p2=&p3=&p4=
Set-Cookie: _subid=376l60j117j688; expires=Sat, 08 Jun 2024 17:50:13 GMT; path=/
933eb=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjFcIjoxNzE1MTkwNjExfSxcImNhbXBhaWduc1wiOntcIjFcIjoxNzE1MTkwNjExfSxcInRpbWVcIjoxNzE1MTkwNjExfSJ9.eBUGVDeNH4CwZsOUDJQQTGFummUDBDWkm-b51CPZuw4; expires=Thu, 15 Sep 2078 11:40:26 GMT; path=/
Vary: Accept-Encoding
Access-Control-Allow-Origin: *
|
|
| daf19dedfc.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4= | 136.243.42.50 | | 92 kB |
URL daf19dedfc.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4= IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
File typeHTML document, ASCII text, with very long lines (44310) Hash7e4861c113b96ab987ed0dd8a7972b6e fa1c6741a06e0b2a5803976a0a742e9e72c5588e 0dc58e7f08a01e83bfd47304fce6edf5dea0a219243167e4f39e6e4b324fa99a
GET /?id=1218914904&p1=&p2=&p3=&p4= HTTP/1.1
Host: daf19dedfc.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://62806a6eae.news-mezutu.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:14 GMT
content-type: text/html; charset=UTF-8
vary: Origin
x-frame-options: DENY
X-Firefox-Spdy: h2
|
|
| adf904d8e0.news-mezutu.com/revopush.js | 136.243.42.50 | | 8.1 kB |
URL adf904d8e0.news-mezutu.com/revopush.js IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (20417), with no line terminators Hash2c5bbd971d7151a38f9a0fbe8fa83886 8fb8275965ff38c18a2fb5bd1be990c4592b39a0 b75cba17751a5e6c0e183475d1074739a876aa2cf4841e760692e573822db343
GET /revopush.js HTTP/1.1
Host: adf904d8e0.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://adf904d8e0.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:15 GMT
content-type: application/javascript; charset=utf-8
content-length: 8110
last-modified: Thu, 02 May 2024 14:58:42 GMT
etag: "6633aa22-1fae"
content-encoding: gzip
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| adf904d8e0.news-mezutu.com/lands/39/img/icon1.png | 136.243.42.50 | | 7.3 kB |
URL adf904d8e0.news-mezutu.com/lands/39/img/icon1.png IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
File typePNG image data, 300 x 300, 8-bit/color RGBA, non-interlaced Hash3d0ab5834c8bf7134e4d21fa3288317f c31d1a6b9df206f67ea194f4c424cdc372a423c2 0515ddd9185d263874e7b66bb6d521fcd63b857aac5fed51c08df98026dafe27
GET /lands/39/img/icon1.png HTTP/1.1
Host: adf904d8e0.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://adf904d8e0.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:15 GMT
content-type: image/png
content-length: 7252
last-modified: Thu, 02 May 2024 14:58:42 GMT
etag: "6633aa22-1c54"
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| adf904d8e0.news-mezutu.com/lands/39/img/icon2.png | 136.243.42.50 | | 4.6 kB |
URL adf904d8e0.news-mezutu.com/lands/39/img/icon2.png IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
File typePNG image data, 300 x 300, 8-bit/color RGBA, non-interlaced Hashc947d439eb93367f1af5b2a3d222f057 5b4c10820d39e624bc6df72a113679da80a8e44e aab564e67c47df65ddcb9c4eaa62cd798a51624a3fded9f9b3a1197b460a79c2
GET /lands/39/img/icon2.png HTTP/1.1
Host: adf904d8e0.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://adf904d8e0.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:15 GMT
content-type: image/png
content-length: 4576
last-modified: Thu, 02 May 2024 14:58:42 GMT
etag: "6633aa22-11e0"
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| adf904d8e0.news-mezutu.com/lands/39/img/icon3.png | 136.243.42.50 | | 7.8 kB |
URL adf904d8e0.news-mezutu.com/lands/39/img/icon3.png IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
File typePNG image data, 300 x 300, 8-bit/color RGBA, non-interlaced Hash8f3cc830da0b1fdf66bda7d1d734747b 94588f041eec3a78a8780c8124c56a1434a89277 ea3698c32039a115b03c2528cbb29c3ff97bbd49ad1345d5095e98d1fd0ea8ba
GET /lands/39/img/icon3.png HTTP/1.1
Host: adf904d8e0.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://adf904d8e0.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:15 GMT
content-type: image/png
content-length: 7847
last-modified: Thu, 02 May 2024 14:58:42 GMT
etag: "6633aa22-1ea7"
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| adf904d8e0.news-mezutu.com/lands/39/img/icon4.png | 136.243.42.50 | | 7.0 kB |
URL adf904d8e0.news-mezutu.com/lands/39/img/icon4.png IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
File typePNG image data, 300 x 300, 8-bit/color RGBA, non-interlaced Hash7ad7f32c1c0df7b4975cc41bda4ac435 81d57e996ee6cd9e122592e68ffa3d55c1ba10ff c0af6cb2280bba97d235dfad7c72d22353a0d2cf277733ce9fc4701df7ed1d5f
GET /lands/39/img/icon4.png HTTP/1.1
Host: adf904d8e0.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://adf904d8e0.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:15 GMT
content-type: image/png
content-length: 7032
last-modified: Thu, 02 May 2024 14:58:42 GMT
etag: "6633aa22-1b78"
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| 62806a6eae.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4= | 136.243.42.50 | | 7.8 kB |
URL 62806a6eae.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4= IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
Hash3c7b69d30f31cd3b30088686c9f509be 4abde8185e8f471fff0d05920073b7ad1488e89d b24b9f399f954b45f57300ae5e3cbde7c1fbe560c5dcdff8d410ae0e0ccf3c8c
GET /?id=1218914904&p1=&p2=&p3=&p4= HTTP/1.1
Host: 62806a6eae.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://50ca3f9322.news-mezutu.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:14 GMT
content-type: text/html; charset=UTF-8
vary: Origin
x-frame-options: DENY
X-Firefox-Spdy: h2
|
|
| show.revopush.com/api/v1/inpage/show/?uid=171984&subacc=1218914904&sub1=&sub2=&sub3=&sub4=&adult=true&limit=1&traffic=adult | 94.130.236.73 | | 3.9 kB |
URL show.revopush.com/api/v1/inpage/show/?uid=171984&subacc=1218914904&sub1=&sub2=&sub3=&sub4=&adult=true&limit=1&traffic=adult IP94.130.236.73:0 ASN#24940 Hetzner Online GmbH
Hashb32e793703abac71777d19da5429bfe2 174b6314854a1e0d72d6dbff70363a25877a0068 267ec237a67c0bd63535a8372889c50f0365a40fa350ee1e7be183070fd71d9a
GET /api/v1/inpage/show/?uid=171984&subacc=1218914904&sub1=&sub2=&sub3=&sub4=&adult=true&limit=1&traffic=adult HTTP/1.1
Host: show.revopush.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://62806a6eae.news-mezutu.com/
Origin: https://62806a6eae.news-mezutu.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:13 GMT
content-type: application/json
accept-ch: Sec-CH-UA, Sec-CH-UA-Model, Sec-CH-UA-Mobile, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Wow64
access-control-allow-origin: https://62806a6eae.news-mezutu.com
vary: Origin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| adf904d8e0.news-mezutu.com/lands/39/img/icon8.png | 136.243.42.50 | | 4.1 kB |
URL adf904d8e0.news-mezutu.com/lands/39/img/icon8.png IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
File typePNG image data, 300 x 300, 8-bit/color RGBA, non-interlaced Hashf92d6474ebc6a3a0b576749cfb4afe98 0f4ce3dcf04873b8098c01d20c44967fb9fce0cc 3a7abff293d71fd8c5a58deacb964b50fe074a6f458575d37abbd367a3a930a1
GET /lands/39/img/icon8.png HTTP/1.1
Host: adf904d8e0.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://adf904d8e0.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:15 GMT
content-type: image/png
content-length: 4064
last-modified: Thu, 02 May 2024 14:58:42 GMT
etag: "6633aa22-fe0"
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| partners-tds.com/WzJQVS | 142.202.51.61 | | 0 B |
IP142.202.51.61:0 ASN#63023 AS-GLOBALTELEHOST
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /WzJQVS HTTP/1.1
Host: partners-tds.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://adf904d8e0.news-mezutu.com/
Cookie: _subid=376l60j117j688; 933eb=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjFcIjoxNzE1MTkwNjExfSxcImNhbXBhaWduc1wiOntcIjFcIjoxNzE1MTkwNjExfSxcInRpbWVcIjoxNzE1MTkwNjExfSJ9.eBUGVDeNH4CwZsOUDJQQTGFummUDBDWkm-b51CPZuw4
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Server: nginx
Date: Wed, 08 May 2024 17:50:13 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-cache, no-store, must-revalidate
Expires: Wed, 08 May 2024 17:50:13 GMT
Location: https://news-pepafu.com/tds?id=1218914904&p1=&p2=&p3=&p4=
Set-Cookie: _subid=376l60j117j68f; expires=Sat, 08 Jun 2024 17:50:13 GMT; path=/
933eb=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjFcIjoxNzE1MTkwNjExfSxcImNhbXBhaWduc1wiOntcIjFcIjoxNzE1MTkwNjExfSxcInRpbWVcIjoxNzE1MTkwNjExfSJ9.eBUGVDeNH4CwZsOUDJQQTGFummUDBDWkm-b51CPZuw4; expires=Thu, 15 Sep 2078 11:40:26 GMT; path=/
Vary: Accept-Encoding
Access-Control-Allow-Origin: *
|
|
| news-pepafu.com/tds?id=1218914904&p1=&p2=&p3=&p4= | 144.76.106.61 | | 0 B |
URL news-pepafu.com/tds?id=1218914904&p1=&p2=&p3=&p4= IP144.76.106.61:0 ASN#24940 Hetzner Online GmbH
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tds?id=1218914904&p1=&p2=&p3=&p4= HTTP/1.1
Host: news-pepafu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://adf904d8e0.news-mezutu.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
server: nginx
date: Wed, 08 May 2024 17:50:13 GMT
content-length: 0
location: https://c79b2ddc38.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
vary: Origin
x-frame-options: DENY
X-Firefox-Spdy: h2
|
|
| adf904d8e0.news-mezutu.com/process.js?id=1218914904&p1=&p2=&p3=&p4= | 136.243.42.50 | | 53 kB |
URL adf904d8e0.news-mezutu.com/process.js?id=1218914904&p1=&p2=&p3=&p4= IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
Hash305820501f6d2cc55a416b36d7501cd4 b4bd0b52904e9887a98fe5e5dcd3f7eb9427fab3 300347a8d697117a31e6b856c8eaefc96e016ecd209089b07b7d61f46a4b5102
GET /process.js?id=1218914904&p1=&p2=&p3=&p4= HTTP/1.1
Host: adf904d8e0.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://adf904d8e0.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:15 GMT
content-type: application/javascript; charset=utf-8
cache-control: no-cache, no-store, must-revalidate
expires: 0
pragma: no-cache
vary: Origin
X-Firefox-Spdy: h2
|
|
| c79b2ddc38.news-mezutu.com/lands/46/sketch.min.js | 136.243.42.50 | | 2.4 kB |
URL c79b2ddc38.news-mezutu.com/lands/46/sketch.min.js IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
File typeJavaScript source, ASCII text, with very long lines (4675), with no line terminators Hashed52afed30560dc3e13a88e35a300c18 8714792a53d24b5c641b9536a2d218d75b43b3f9 cad4eff11237dc84f803b46c8529ca9918e4429c38058a053ef5d492c707a711
GET /lands/46/sketch.min.js HTTP/1.1
Host: c79b2ddc38.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://c79b2ddc38.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:15 GMT
content-type: application/javascript; charset=utf-8
content-length: 2379
last-modified: Thu, 02 May 2024 14:58:42 GMT
etag: "6633aa22-94b"
content-encoding: gzip
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| partners-tds.com/WzJQVS | 142.202.51.61 | | 0 B |
IP142.202.51.61:0 ASN#63023 AS-GLOBALTELEHOST
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /WzJQVS HTTP/1.1
Host: partners-tds.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://c79b2ddc38.news-mezutu.com/
Cookie: _subid=376l60j117j68f; 933eb=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjFcIjoxNzE1MTkwNjExfSxcImNhbXBhaWduc1wiOntcIjFcIjoxNzE1MTkwNjExfSxcInRpbWVcIjoxNzE1MTkwNjExfSJ9.eBUGVDeNH4CwZsOUDJQQTGFummUDBDWkm-b51CPZuw4
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Server: nginx
Date: Wed, 08 May 2024 17:50:14 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-cache, no-store, must-revalidate
Expires: Wed, 08 May 2024 17:50:14 GMT
Location: https://news-pepafu.com/tds?id=1218914904&p1=&p2=&p3=&p4=
Set-Cookie: _subid=376l60j117j68p; expires=Sat, 08 Jun 2024 17:50:14 GMT; path=/
933eb=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjFcIjoxNzE1MTkwNjExfSxcImNhbXBhaWduc1wiOntcIjFcIjoxNzE1MTkwNjExfSxcInRpbWVcIjoxNzE1MTkwNjExfSJ9.eBUGVDeNH4CwZsOUDJQQTGFummUDBDWkm-b51CPZuw4; expires=Thu, 15 Sep 2078 11:40:28 GMT; path=/
Vary: Accept-Encoding
Access-Control-Allow-Origin: *
|
|
| news-pepafu.com/tds?id=1218914904&p1=&p2=&p3=&p4= | 144.76.106.61 | | 0 B |
URL news-pepafu.com/tds?id=1218914904&p1=&p2=&p3=&p4= IP144.76.106.61:0 ASN#24940 Hetzner Online GmbH
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tds?id=1218914904&p1=&p2=&p3=&p4= HTTP/1.1
Host: news-pepafu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://c79b2ddc38.news-mezutu.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
server: nginx
date: Wed, 08 May 2024 17:50:14 GMT
content-length: 0
location: https://a3293b6a02.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
vary: Origin
x-frame-options: DENY
X-Firefox-Spdy: h2
|
|
| a3293b6a02.news-mezutu.com/revopush.js | 136.243.42.50 | | 8.1 kB |
URL a3293b6a02.news-mezutu.com/revopush.js IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (20417), with no line terminators Hash2c5bbd971d7151a38f9a0fbe8fa83886 8fb8275965ff38c18a2fb5bd1be990c4592b39a0 b75cba17751a5e6c0e183475d1074739a876aa2cf4841e760692e573822db343
GET /revopush.js HTTP/1.1
Host: a3293b6a02.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://a3293b6a02.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:16 GMT
content-type: application/javascript; charset=utf-8
content-length: 8110
last-modified: Thu, 02 May 2024 14:58:42 GMT
etag: "6633aa22-1fae"
content-encoding: gzip
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| show.revopush.com/api/v1/inpage/show/?uid=171984&subacc=1218914904&sub1=&sub2=&sub3=&sub4=&adult=true&limit=1&traffic=adult | 94.130.236.73 | | 841 B |
URL show.revopush.com/api/v1/inpage/show/?uid=171984&subacc=1218914904&sub1=&sub2=&sub3=&sub4=&adult=true&limit=1&traffic=adult IP94.130.236.73:0 ASN#24940 Hetzner Online GmbH
Hashd06d904d8c47f5cdd191b119d7eccf00 cdef598140a012ea208921a871ad87773853b1ff 956e873e6197d6feeea01d733abe79a43cebce4faf86cfe5d0b5cee0912721f0
GET /api/v1/inpage/show/?uid=171984&subacc=1218914904&sub1=&sub2=&sub3=&sub4=&adult=true&limit=1&traffic=adult HTTP/1.1
Host: show.revopush.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://c79b2ddc38.news-mezutu.com/
Origin: https://c79b2ddc38.news-mezutu.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:14 GMT
content-type: application/json
accept-ch: Sec-CH-UA, Sec-CH-UA-Model, Sec-CH-UA-Mobile, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Wow64
access-control-allow-origin: https://c79b2ddc38.news-mezutu.com
vary: Origin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| news-pepafu.com/tds?id=1218914904&p1=&p2=&p3=&p4= | 144.76.106.61 | | 0 B |
URL news-pepafu.com/tds?id=1218914904&p1=&p2=&p3=&p4= IP144.76.106.61:0 ASN#24940 Hetzner Online GmbH
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tds?id=1218914904&p1=&p2=&p3=&p4= HTTP/1.1
Host: news-pepafu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://a3293b6a02.news-mezutu.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
server: nginx
date: Wed, 08 May 2024 17:50:14 GMT
content-length: 0
location: https://bc611abe73.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
vary: Origin
x-frame-options: DENY
X-Firefox-Spdy: h2
|
|
| bc611abe73.news-mezutu.com/revopush.js | 136.243.42.50 | | 8.1 kB |
URL bc611abe73.news-mezutu.com/revopush.js IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (20417), with no line terminators Hash2c5bbd971d7151a38f9a0fbe8fa83886 8fb8275965ff38c18a2fb5bd1be990c4592b39a0 b75cba17751a5e6c0e183475d1074739a876aa2cf4841e760692e573822db343
GET /revopush.js HTTP/1.1
Host: bc611abe73.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bc611abe73.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:16 GMT
content-type: application/javascript; charset=utf-8
content-length: 8110
last-modified: Thu, 02 May 2024 14:58:42 GMT
etag: "6633aa22-1fae"
content-encoding: gzip
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| bc611abe73.news-mezutu.com/lands/39/img/icon1.png | 136.243.42.50 | | 7.3 kB |
URL bc611abe73.news-mezutu.com/lands/39/img/icon1.png IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
File typePNG image data, 300 x 300, 8-bit/color RGBA, non-interlaced Hash3d0ab5834c8bf7134e4d21fa3288317f c31d1a6b9df206f67ea194f4c424cdc372a423c2 0515ddd9185d263874e7b66bb6d521fcd63b857aac5fed51c08df98026dafe27
GET /lands/39/img/icon1.png HTTP/1.1
Host: bc611abe73.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bc611abe73.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:16 GMT
content-type: image/png
content-length: 7252
last-modified: Thu, 02 May 2024 14:58:42 GMT
etag: "6633aa22-1c54"
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| bc611abe73.news-mezutu.com/lands/39/img/icon2.png | 136.243.42.50 | | 4.6 kB |
URL bc611abe73.news-mezutu.com/lands/39/img/icon2.png IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
File typePNG image data, 300 x 300, 8-bit/color RGBA, non-interlaced Hashc947d439eb93367f1af5b2a3d222f057 5b4c10820d39e624bc6df72a113679da80a8e44e aab564e67c47df65ddcb9c4eaa62cd798a51624a3fded9f9b3a1197b460a79c2
GET /lands/39/img/icon2.png HTTP/1.1
Host: bc611abe73.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bc611abe73.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:16 GMT
content-type: image/png
content-length: 4576
last-modified: Thu, 02 May 2024 14:58:42 GMT
etag: "6633aa22-11e0"
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| bc611abe73.news-mezutu.com/lands/39/img/icon3.png | 136.243.42.50 | | 7.8 kB |
URL bc611abe73.news-mezutu.com/lands/39/img/icon3.png IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
File typePNG image data, 300 x 300, 8-bit/color RGBA, non-interlaced Hash8f3cc830da0b1fdf66bda7d1d734747b 94588f041eec3a78a8780c8124c56a1434a89277 ea3698c32039a115b03c2528cbb29c3ff97bbd49ad1345d5095e98d1fd0ea8ba
GET /lands/39/img/icon3.png HTTP/1.1
Host: bc611abe73.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bc611abe73.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:16 GMT
content-type: image/png
content-length: 7847
last-modified: Thu, 02 May 2024 14:58:42 GMT
etag: "6633aa22-1ea7"
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| bc611abe73.news-mezutu.com/lands/39/img/icon4.png | 136.243.42.50 | | 7.0 kB |
URL bc611abe73.news-mezutu.com/lands/39/img/icon4.png IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
File typePNG image data, 300 x 300, 8-bit/color RGBA, non-interlaced Hash7ad7f32c1c0df7b4975cc41bda4ac435 81d57e996ee6cd9e122592e68ffa3d55c1ba10ff c0af6cb2280bba97d235dfad7c72d22353a0d2cf277733ce9fc4701df7ed1d5f
GET /lands/39/img/icon4.png HTTP/1.1
Host: bc611abe73.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bc611abe73.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:16 GMT
content-type: image/png
content-length: 7032
last-modified: Thu, 02 May 2024 14:58:42 GMT
etag: "6633aa22-1b78"
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| bc611abe73.news-mezutu.com/lands/39/img/icon5.png | 136.243.42.50 | | 3.3 kB |
URL bc611abe73.news-mezutu.com/lands/39/img/icon5.png IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
File typePNG image data, 500 x 500, 8-bit/color RGBA, non-interlaced Hash1e1a7582b5da63e10485d63f97abc9a0 ca3ee3067f96c732f455bc7c99ec5100194f13f6 196083352a09a19cf2d4364e3ad406606fedb562f2096c1bef373ff2c485b503
GET /lands/39/img/icon5.png HTTP/1.1
Host: bc611abe73.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bc611abe73.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:16 GMT
content-type: image/png
content-length: 3264
last-modified: Thu, 02 May 2024 14:58:42 GMT
etag: "6633aa22-cc0"
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| 18de59f697.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4= | 136.243.42.50 | | 13 kB |
URL 18de59f697.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4= IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
Hash6f171264544ccbbcc2e1b9b9e23e8f6d 5865b85447cbec3b5f4595801305f2a206e8c193 d991b0dd0dce45f84ff370ec71041caef721ae91e5505046c376e3eb710d0ed1
GET /?id=1218914904&p1=&p2=&p3=&p4= HTTP/1.1
Host: 18de59f697.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://daf19dedfc.news-mezutu.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:14 GMT
content-type: text/html; charset=UTF-8
vary: Origin
x-frame-options: DENY
X-Firefox-Spdy: h2
|
|
| bc611abe73.news-mezutu.com/lands/39/img/icon8.png | 136.243.42.50 | | 4.1 kB |
URL bc611abe73.news-mezutu.com/lands/39/img/icon8.png IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
File typePNG image data, 300 x 300, 8-bit/color RGBA, non-interlaced Hashf92d6474ebc6a3a0b576749cfb4afe98 0f4ce3dcf04873b8098c01d20c44967fb9fce0cc 3a7abff293d71fd8c5a58deacb964b50fe074a6f458575d37abbd367a3a930a1
GET /lands/39/img/icon8.png HTTP/1.1
Host: bc611abe73.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bc611abe73.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:16 GMT
content-type: image/png
content-length: 4064
last-modified: Thu, 02 May 2024 14:58:42 GMT
etag: "6633aa22-fe0"
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| partners-tds.com/WzJQVS | 142.202.51.61 | | 0 B |
IP142.202.51.61:0 ASN#63023 AS-GLOBALTELEHOST
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /WzJQVS HTTP/1.1
Host: partners-tds.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bc611abe73.news-mezutu.com/
Cookie: _subid=376l60j117j68s; 933eb=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjFcIjoxNzE1MTkwNjExfSxcImNhbXBhaWduc1wiOntcIjFcIjoxNzE1MTkwNjExfSxcInRpbWVcIjoxNzE1MTkwNjExfSJ9.eBUGVDeNH4CwZsOUDJQQTGFummUDBDWkm-b51CPZuw4
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Server: nginx
Date: Wed, 08 May 2024 17:50:14 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-cache, no-store, must-revalidate
Expires: Wed, 08 May 2024 17:50:14 GMT
Location: https://news-pepafu.com/tds?id=1218914904&p1=&p2=&p3=&p4=
Set-Cookie: _subid=376l60j117j693; expires=Sat, 08 Jun 2024 17:50:14 GMT; path=/
933eb=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjFcIjoxNzE1MTkwNjExfSxcImNhbXBhaWduc1wiOntcIjFcIjoxNzE1MTkwNjExfSxcInRpbWVcIjoxNzE1MTkwNjExfSJ9.eBUGVDeNH4CwZsOUDJQQTGFummUDBDWkm-b51CPZuw4; expires=Thu, 15 Sep 2078 11:40:28 GMT; path=/
Vary: Accept-Encoding
Access-Control-Allow-Origin: *
|
|
| news-pepafu.com/tds?id=1218914904&p1=&p2=&p3=&p4= | 144.76.106.61 | | 0 B |
URL news-pepafu.com/tds?id=1218914904&p1=&p2=&p3=&p4= IP144.76.106.61:0 ASN#24940 Hetzner Online GmbH
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tds?id=1218914904&p1=&p2=&p3=&p4= HTTP/1.1
Host: news-pepafu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://bc611abe73.news-mezutu.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
server: nginx
date: Wed, 08 May 2024 17:50:14 GMT
content-length: 0
location: https://afee32e583.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
vary: Origin
x-frame-options: DENY
X-Firefox-Spdy: h2
|
|
| afee32e583.news-mezutu.com/revopush.js | 136.243.42.50 | | 8.1 kB |
URL afee32e583.news-mezutu.com/revopush.js IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (20417), with no line terminators Hash2c5bbd971d7151a38f9a0fbe8fa83886 8fb8275965ff38c18a2fb5bd1be990c4592b39a0 b75cba17751a5e6c0e183475d1074739a876aa2cf4841e760692e573822db343
GET /revopush.js HTTP/1.1
Host: afee32e583.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://afee32e583.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:16 GMT
content-type: application/javascript; charset=utf-8
content-length: 8110
last-modified: Thu, 02 May 2024 14:58:42 GMT
etag: "6633aa22-1fae"
content-encoding: gzip
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| afee32e583.news-mezutu.com/lands/53/css/style.css | 136.243.42.50 | | 1.3 kB |
URL afee32e583.news-mezutu.com/lands/53/css/style.css IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
File typeASCII text, with very long lines (4928), with no line terminators Hash6f2d06d6dbd00d18b9e7eb11ef80081d b86bdf3144b91210a3e04aab9802dba7b677ffe4 4bbe46d55f77d131ea3c70d021bf1e88fcfa1a98b7b89cf8f3f081ffb38fa7f8
GET /lands/53/css/style.css HTTP/1.1
Host: afee32e583.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://afee32e583.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:16 GMT
content-type: text/css
content-length: 1301
last-modified: Thu, 02 May 2024 14:58:42 GMT
etag: "6633aa22-515"
content-encoding: gzip
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| adf904d8e0.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4= | 136.243.42.50 | | 3.8 kB |
URL adf904d8e0.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4= IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
File typeHTML document, ASCII text, with very long lines (2411) Hash2644dd0f6107da6e98654a15984c303a c2d23fa79754ef37db882e375b89c01cc8bc9800 2ea2fda4483ed039e14053af9dbcb14bb680938b1d8535e8f2877ee8f272e930
GET /?id=1218914904&p1=&p2=&p3=&p4= HTTP/1.1
Host: adf904d8e0.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://18de59f697.news-mezutu.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:15 GMT
content-type: text/html; charset=UTF-8
vary: Origin
x-frame-options: DENY
X-Firefox-Spdy: h2
|
|
| afee32e583.news-mezutu.com/lands/53/images/video.gif | 136.243.42.50 | | 500 kB |
URL afee32e583.news-mezutu.com/lands/53/images/video.gif IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
File typeGIF image data, version 89a, 320 x 180 Size500 kB (500082 bytes) Hash2e59da03066a7854825901e0c1460b52 8d5aa04f252de7a85b8387051c1321338ac32d32 63412ff22ec2f712d6e82d34889a0a48948523dedd0bfce03bba69a19a9b4433
GET /lands/53/images/video.gif HTTP/1.1
Host: afee32e583.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://afee32e583.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:16 GMT
content-type: image/gif
content-length: 500082
last-modified: Thu, 02 May 2024 14:58:42 GMT
etag: "6633aa22-7a172"
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| afee32e583.news-mezutu.com/lands/53/js/device.js | 136.243.42.50 | | 1.1 kB |
URL afee32e583.news-mezutu.com/lands/53/js/device.js IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
File typeJavaScript source, ASCII text, with very long lines (3289), with no line terminators Hash2d9887b21aa6b47c56e7f43e66560a4f 42cdfc5b3b23d32152750bf2cea4233044491768 863a13c42ef72b562bc7aa5005b8ff5693763ae8d16ce3bfc3d876e92a7fdf85
GET /lands/53/js/device.js HTTP/1.1
Host: afee32e583.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://afee32e583.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:16 GMT
content-type: application/javascript; charset=utf-8
content-length: 1111
last-modified: Thu, 02 May 2024 14:58:42 GMT
etag: "6633aa22-457"
content-encoding: gzip
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| partners-tds.com/WzJQVS | 142.202.51.61 | | 0 B |
IP142.202.51.61:0 ASN#63023 AS-GLOBALTELEHOST
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /WzJQVS HTTP/1.1
Host: partners-tds.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://afee32e583.news-mezutu.com/
Cookie: _subid=376l60j117j693; 933eb=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjFcIjoxNzE1MTkwNjExfSxcImNhbXBhaWduc1wiOntcIjFcIjoxNzE1MTkwNjExfSxcInRpbWVcIjoxNzE1MTkwNjExfSJ9.eBUGVDeNH4CwZsOUDJQQTGFummUDBDWkm-b51CPZuw4
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Server: nginx
Date: Wed, 08 May 2024 17:50:15 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-cache, no-store, must-revalidate
Expires: Wed, 08 May 2024 17:50:15 GMT
Location: https://news-pepafu.com/tds?id=1218914904&p1=&p2=&p3=&p4=
Set-Cookie: _subid=376l60j117j69a; expires=Sat, 08 Jun 2024 17:50:15 GMT; path=/
933eb=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjFcIjoxNzE1MTkwNjExfSxcImNhbXBhaWduc1wiOntcIjFcIjoxNzE1MTkwNjExfSxcInRpbWVcIjoxNzE1MTkwNjExfSJ9.eBUGVDeNH4CwZsOUDJQQTGFummUDBDWkm-b51CPZuw4; expires=Thu, 15 Sep 2078 11:40:30 GMT; path=/
Vary: Accept-Encoding
Access-Control-Allow-Origin: *
|
|
| news-pepafu.com/tds?id=1218914904&p1=&p2=&p3=&p4= | 144.76.106.61 | | 0 B |
URL news-pepafu.com/tds?id=1218914904&p1=&p2=&p3=&p4= IP144.76.106.61:0 ASN#24940 Hetzner Online GmbH
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tds?id=1218914904&p1=&p2=&p3=&p4= HTTP/1.1
Host: news-pepafu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://afee32e583.news-mezutu.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
server: nginx
date: Wed, 08 May 2024 17:50:15 GMT
content-length: 0
location: https://ad39b72fd0.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
vary: Origin
x-frame-options: DENY
X-Firefox-Spdy: h2
|
|
| show.revopush.com/api/v1/inpage/show/?uid=171984&subacc=1218914904&sub1=&sub2=&sub3=&sub4=&adult=true&limit=1&traffic=adult | 94.130.236.73 | | 11 kB |
URL show.revopush.com/api/v1/inpage/show/?uid=171984&subacc=1218914904&sub1=&sub2=&sub3=&sub4=&adult=true&limit=1&traffic=adult IP94.130.236.73:0 ASN#24940 Hetzner Online GmbH
Hash9c7d2173b14e87f004cffc28c55e06b6 6247c2830011347aa241530c8cab2aa5c30101c4 af36d06da57cd79683c9724cd8776ff5fc57d44fc551e9c5339ff34a61af3937
GET /api/v1/inpage/show/?uid=171984&subacc=1218914904&sub1=&sub2=&sub3=&sub4=&adult=true&limit=1&traffic=adult HTTP/1.1
Host: show.revopush.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://a3293b6a02.news-mezutu.com/
Origin: https://a3293b6a02.news-mezutu.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:14 GMT
content-type: application/json
accept-ch: Sec-CH-UA, Sec-CH-UA-Model, Sec-CH-UA-Mobile, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Wow64
access-control-allow-origin: https://a3293b6a02.news-mezutu.com
vary: Origin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| 50ca3f9322.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4= | 136.243.42.50 | | 18 kB |
URL 50ca3f9322.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4= IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
Hash1634f12067d9cd21e5274f29cbc305fd 9f4987a6e9d4beb3607ac0e0e7c7b5b2b30d4f14 816ad06b495cbc137a4d04a8456c47c91b468750070f68c3b7d7e80e42abc3b5
GET /?id=1218914904&p1=&p2=&p3=&p4= HTTP/1.1
Host: 50ca3f9322.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://f30ff2472e.news-mezutu.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:14 GMT
content-type: text/html; charset=UTF-8
vary: Origin
x-frame-options: DENY
X-Firefox-Spdy: h2
|
|
| partners-tds.com/WzJQVS | 142.202.51.61 | | 0 B |
IP142.202.51.61:0 ASN#63023 AS-GLOBALTELEHOST
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /WzJQVS HTTP/1.1
Host: partners-tds.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ad39b72fd0.news-mezutu.com/
Cookie: _subid=376l60j117j69a; 933eb=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjFcIjoxNzE1MTkwNjExfSxcImNhbXBhaWduc1wiOntcIjFcIjoxNzE1MTkwNjExfSxcInRpbWVcIjoxNzE1MTkwNjExfSJ9.eBUGVDeNH4CwZsOUDJQQTGFummUDBDWkm-b51CPZuw4
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Server: nginx
Date: Wed, 08 May 2024 17:50:15 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-cache, no-store, must-revalidate
Expires: Wed, 08 May 2024 17:50:15 GMT
Location: https://news-pepafu.com/tds?id=1218914904&p1=&p2=&p3=&p4=
Set-Cookie: _subid=376l60j117j69g; expires=Sat, 08 Jun 2024 17:50:15 GMT; path=/
933eb=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjFcIjoxNzE1MTkwNjExfSxcImNhbXBhaWduc1wiOntcIjFcIjoxNzE1MTkwNjExfSxcInRpbWVcIjoxNzE1MTkwNjExfSJ9.eBUGVDeNH4CwZsOUDJQQTGFummUDBDWkm-b51CPZuw4; expires=Thu, 15 Sep 2078 11:40:30 GMT; path=/
Vary: Accept-Encoding
Access-Control-Allow-Origin: *
|
|
| news-pepafu.com/tds?id=1218914904&p1=&p2=&p3=&p4= | 144.76.106.61 | | 0 B |
URL news-pepafu.com/tds?id=1218914904&p1=&p2=&p3=&p4= IP144.76.106.61:0 ASN#24940 Hetzner Online GmbH
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tds?id=1218914904&p1=&p2=&p3=&p4= HTTP/1.1
Host: news-pepafu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://ad39b72fd0.news-mezutu.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
server: nginx
date: Wed, 08 May 2024 17:50:15 GMT
content-length: 0
location: https://3d8b3560aa.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
vary: Origin
x-frame-options: DENY
X-Firefox-Spdy: h2
|
|
| 3d8b3560aa.news-mezutu.com/revopush.js | 136.243.42.50 | | 8.1 kB |
URL 3d8b3560aa.news-mezutu.com/revopush.js IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (20417), with no line terminators Hash2c5bbd971d7151a38f9a0fbe8fa83886 8fb8275965ff38c18a2fb5bd1be990c4592b39a0 b75cba17751a5e6c0e183475d1074739a876aa2cf4841e760692e573822db343
GET /revopush.js HTTP/1.1
Host: 3d8b3560aa.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://3d8b3560aa.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:17 GMT
content-type: application/javascript; charset=utf-8
content-length: 8110
last-modified: Thu, 02 May 2024 14:58:42 GMT
etag: "6633aa22-1fae"
content-encoding: gzip
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| 3d8b3560aa.news-mezutu.com/lands/39/img/icon1.png | 136.243.42.50 | | 7.3 kB |
URL 3d8b3560aa.news-mezutu.com/lands/39/img/icon1.png IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
File typePNG image data, 300 x 300, 8-bit/color RGBA, non-interlaced Hash3d0ab5834c8bf7134e4d21fa3288317f c31d1a6b9df206f67ea194f4c424cdc372a423c2 0515ddd9185d263874e7b66bb6d521fcd63b857aac5fed51c08df98026dafe27
GET /lands/39/img/icon1.png HTTP/1.1
Host: 3d8b3560aa.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://3d8b3560aa.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:17 GMT
content-type: image/png
content-length: 7252
last-modified: Thu, 02 May 2024 14:58:42 GMT
etag: "6633aa22-1c54"
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| 3d8b3560aa.news-mezutu.com/lands/39/img/icon2.png | 136.243.42.50 | | 4.6 kB |
URL 3d8b3560aa.news-mezutu.com/lands/39/img/icon2.png IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
File typePNG image data, 300 x 300, 8-bit/color RGBA, non-interlaced Hashc947d439eb93367f1af5b2a3d222f057 5b4c10820d39e624bc6df72a113679da80a8e44e aab564e67c47df65ddcb9c4eaa62cd798a51624a3fded9f9b3a1197b460a79c2
GET /lands/39/img/icon2.png HTTP/1.1
Host: 3d8b3560aa.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://3d8b3560aa.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:17 GMT
content-type: image/png
content-length: 4576
last-modified: Thu, 02 May 2024 14:58:42 GMT
etag: "6633aa22-11e0"
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| 3d8b3560aa.news-mezutu.com/lands/39/img/icon3.png | 136.243.42.50 | | 7.8 kB |
URL 3d8b3560aa.news-mezutu.com/lands/39/img/icon3.png IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
File typePNG image data, 300 x 300, 8-bit/color RGBA, non-interlaced Hash8f3cc830da0b1fdf66bda7d1d734747b 94588f041eec3a78a8780c8124c56a1434a89277 ea3698c32039a115b03c2528cbb29c3ff97bbd49ad1345d5095e98d1fd0ea8ba
GET /lands/39/img/icon3.png HTTP/1.1
Host: 3d8b3560aa.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://3d8b3560aa.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:17 GMT
content-type: image/png
content-length: 7847
last-modified: Thu, 02 May 2024 14:58:42 GMT
etag: "6633aa22-1ea7"
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| 3d8b3560aa.news-mezutu.com/lands/39/img/icon4.png | 136.243.42.50 | | 7.0 kB |
URL 3d8b3560aa.news-mezutu.com/lands/39/img/icon4.png IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
File typePNG image data, 300 x 300, 8-bit/color RGBA, non-interlaced Hash7ad7f32c1c0df7b4975cc41bda4ac435 81d57e996ee6cd9e122592e68ffa3d55c1ba10ff c0af6cb2280bba97d235dfad7c72d22353a0d2cf277733ce9fc4701df7ed1d5f
GET /lands/39/img/icon4.png HTTP/1.1
Host: 3d8b3560aa.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://3d8b3560aa.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:17 GMT
content-type: image/png
content-length: 7032
last-modified: Thu, 02 May 2024 14:58:42 GMT
etag: "6633aa22-1b78"
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| 3d8b3560aa.news-mezutu.com/lands/39/img/icon5.png | 136.243.42.50 | | 3.3 kB |
URL 3d8b3560aa.news-mezutu.com/lands/39/img/icon5.png IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
File typePNG image data, 500 x 500, 8-bit/color RGBA, non-interlaced Hash1e1a7582b5da63e10485d63f97abc9a0 ca3ee3067f96c732f455bc7c99ec5100194f13f6 196083352a09a19cf2d4364e3ad406606fedb562f2096c1bef373ff2c485b503
GET /lands/39/img/icon5.png HTTP/1.1
Host: 3d8b3560aa.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://3d8b3560aa.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:17 GMT
content-type: image/png
content-length: 3264
last-modified: Thu, 02 May 2024 14:58:42 GMT
etag: "6633aa22-cc0"
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| 3d8b3560aa.news-mezutu.com/lands/39/img/icon7.png | 136.243.42.50 | | 3.3 kB |
URL 3d8b3560aa.news-mezutu.com/lands/39/img/icon7.png IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
File typePNG image data, 500 x 500, 8-bit/color RGBA, non-interlaced Hashb512735542cb07b3b2dcf153a7dfe456 93bde8875412ce266600e2af1c37123483a50376 e9c661cc8adbaa1b9cd4cf65f0ba93a1c24211cb5f94ed0950e0fbc973781718
GET /lands/39/img/icon7.png HTTP/1.1
Host: 3d8b3560aa.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://3d8b3560aa.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:17 GMT
content-type: image/png
content-length: 3283
last-modified: Thu, 02 May 2024 14:58:42 GMT
etag: "6633aa22-cd3"
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| 3d8b3560aa.news-mezutu.com/lands/39/img/icon8.png | 136.243.42.50 | | 4.1 kB |
URL 3d8b3560aa.news-mezutu.com/lands/39/img/icon8.png IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
File typePNG image data, 300 x 300, 8-bit/color RGBA, non-interlaced Hashf92d6474ebc6a3a0b576749cfb4afe98 0f4ce3dcf04873b8098c01d20c44967fb9fce0cc 3a7abff293d71fd8c5a58deacb964b50fe074a6f458575d37abbd367a3a930a1
GET /lands/39/img/icon8.png HTTP/1.1
Host: 3d8b3560aa.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://3d8b3560aa.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:17 GMT
content-type: image/png
content-length: 4064
last-modified: Thu, 02 May 2024 14:58:42 GMT
etag: "6633aa22-fe0"
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| 3d8b3560aa.news-mezutu.com/process.js?id=1218914904&p1=&p2=&p3=&p4= | 136.243.42.50 | | 45 kB |
URL 3d8b3560aa.news-mezutu.com/process.js?id=1218914904&p1=&p2=&p3=&p4= IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
File typeJavaScript source, ASCII text, with very long lines (44310) Hash3f839391338f8fbb512784dae7c1cae3 acded283b3e73d3365c2e764f7eed38495714ed2 8e160f369937d23dfed2e9ba4e738f5238d00895c02fb2886587f32e3d38e6eb
GET /process.js?id=1218914904&p1=&p2=&p3=&p4= HTTP/1.1
Host: 3d8b3560aa.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://3d8b3560aa.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:17 GMT
content-type: application/javascript; charset=utf-8
cache-control: no-cache, no-store, must-revalidate
expires: 0
pragma: no-cache
vary: Origin
X-Firefox-Spdy: h2
|
|
| news-pepafu.com/tds?id=1218914904&p1=&p2=&p3=&p4= | 144.76.106.61 | | 0 B |
URL news-pepafu.com/tds?id=1218914904&p1=&p2=&p3=&p4= IP144.76.106.61:0 ASN#24940 Hetzner Online GmbH
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tds?id=1218914904&p1=&p2=&p3=&p4= HTTP/1.1
Host: news-pepafu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://3d8b3560aa.news-mezutu.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
server: nginx
date: Wed, 08 May 2024 17:50:15 GMT
content-length: 0
location: https://3b7b6ab1f1.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
vary: Origin
x-frame-options: DENY
X-Firefox-Spdy: h2
|
|
| 3b7b6ab1f1.news-mezutu.com/revopush.js | 136.243.42.50 | | 8.1 kB |
URL 3b7b6ab1f1.news-mezutu.com/revopush.js IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (20417), with no line terminators Hash2c5bbd971d7151a38f9a0fbe8fa83886 8fb8275965ff38c18a2fb5bd1be990c4592b39a0 b75cba17751a5e6c0e183475d1074739a876aa2cf4841e760692e573822db343
GET /revopush.js HTTP/1.1
Host: 3b7b6ab1f1.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://3b7b6ab1f1.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:17 GMT
content-type: application/javascript; charset=utf-8
content-length: 8110
last-modified: Thu, 02 May 2024 14:58:42 GMT
etag: "6633aa22-1fae"
content-encoding: gzip
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| 3b7b6ab1f1.news-mezutu.com/lands/48/preloader-43.5794040.gif | 136.243.42.50 | | 7.0 kB |
URL 3b7b6ab1f1.news-mezutu.com/lands/48/preloader-43.5794040.gif IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
File typeGIF image data, version 89a, 160 x 160 Hash5794040ee88def220320edd0ed2e2ac9 7ec6d7843172d2bec7c0ed0d7eabed19a800fd7b c1a4896adebc502e9be1248a28bc641ef9a5b75c6bdefa5d704a220c128ee34e
GET /lands/48/preloader-43.5794040.gif HTTP/1.1
Host: 3b7b6ab1f1.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://3b7b6ab1f1.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:17 GMT
content-type: image/gif
content-length: 7010
last-modified: Thu, 02 May 2024 14:58:42 GMT
etag: "6633aa22-1b62"
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| c79b2ddc38.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4= | 136.243.42.50 | | 92 kB |
URL c79b2ddc38.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4= IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
File typeHTML document, ASCII text, with very long lines (44310) Hash22b4c0ef31703e750c6a3985e7d188ae 1ac6278a1121a36bf269f4204325fdca79cc4504 7abdfab069b81e0fdfdf01cd17ffb44fee404d62c8e9b96b6177cd1b00bb9a52
GET /?id=1218914904&p1=&p2=&p3=&p4= HTTP/1.1
Host: c79b2ddc38.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://adf904d8e0.news-mezutu.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:15 GMT
content-type: text/html; charset=UTF-8
vary: Origin
x-frame-options: DENY
X-Firefox-Spdy: h2
|
|
| news-pepafu.com/tds?id=1218914904&p1=&p2=&p3=&p4= | 144.76.106.61 | | 0 B |
URL news-pepafu.com/tds?id=1218914904&p1=&p2=&p3=&p4= IP144.76.106.61:0 ASN#24940 Hetzner Online GmbH
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tds?id=1218914904&p1=&p2=&p3=&p4= HTTP/1.1
Host: news-pepafu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://3b7b6ab1f1.news-mezutu.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
server: nginx
date: Wed, 08 May 2024 17:50:16 GMT
content-length: 0
location: https://51a16024fe.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
vary: Origin
x-frame-options: DENY
X-Firefox-Spdy: h2
|
|
| 51a16024fe.news-mezutu.com/revopush.js | 136.243.42.50 | | 8.1 kB |
URL 51a16024fe.news-mezutu.com/revopush.js IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (20417), with no line terminators Hash2c5bbd971d7151a38f9a0fbe8fa83886 8fb8275965ff38c18a2fb5bd1be990c4592b39a0 b75cba17751a5e6c0e183475d1074739a876aa2cf4841e760692e573822db343
GET /revopush.js HTTP/1.1
Host: 51a16024fe.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://51a16024fe.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:17 GMT
content-type: application/javascript; charset=utf-8
content-length: 8110
last-modified: Thu, 02 May 2024 14:58:42 GMT
etag: "6633aa22-1fae"
content-encoding: gzip
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| partners-tds.com/WzJQVS | 142.202.51.61 | | 0 B |
IP142.202.51.61:0 ASN#63023 AS-GLOBALTELEHOST
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /WzJQVS HTTP/1.1
Host: partners-tds.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://51a16024fe.news-mezutu.com/
Cookie: _subid=376l60j117j69r; 933eb=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjFcIjoxNzE1MTkwNjExfSxcImNhbXBhaWduc1wiOntcIjFcIjoxNzE1MTkwNjExfSxcInRpbWVcIjoxNzE1MTkwNjExfSJ9.eBUGVDeNH4CwZsOUDJQQTGFummUDBDWkm-b51CPZuw4
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Server: nginx
Date: Wed, 08 May 2024 17:50:16 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-cache, no-store, must-revalidate
Expires: Wed, 08 May 2024 17:50:16 GMT
Location: https://news-pepafu.com/tds?id=1218914904&p1=&p2=&p3=&p4=
Set-Cookie: _subid=376l60j117j6a3; expires=Sat, 08 Jun 2024 17:50:16 GMT; path=/
933eb=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjFcIjoxNzE1MTkwNjExfSxcImNhbXBhaWduc1wiOntcIjFcIjoxNzE1MTkwNjExfSxcInRpbWVcIjoxNzE1MTkwNjExfSJ9.eBUGVDeNH4CwZsOUDJQQTGFummUDBDWkm-b51CPZuw4; expires=Thu, 15 Sep 2078 11:40:32 GMT; path=/
Vary: Accept-Encoding
Access-Control-Allow-Origin: *
|
|
| news-pepafu.com/tds?id=1218914904&p1=&p2=&p3=&p4= | 144.76.106.61 | | 0 B |
URL news-pepafu.com/tds?id=1218914904&p1=&p2=&p3=&p4= IP144.76.106.61:0 ASN#24940 Hetzner Online GmbH
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tds?id=1218914904&p1=&p2=&p3=&p4= HTTP/1.1
Host: news-pepafu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://51a16024fe.news-mezutu.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
server: nginx
date: Wed, 08 May 2024 17:50:16 GMT
content-length: 0
location: https://0fa4b29ce4.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
vary: Origin
x-frame-options: DENY
X-Firefox-Spdy: h2
|
|
| 0fa4b29ce4.news-mezutu.com/revopush.js | 136.243.42.50 | | 8.1 kB |
URL 0fa4b29ce4.news-mezutu.com/revopush.js IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (20417), with no line terminators Hash2c5bbd971d7151a38f9a0fbe8fa83886 8fb8275965ff38c18a2fb5bd1be990c4592b39a0 b75cba17751a5e6c0e183475d1074739a876aa2cf4841e760692e573822db343
GET /revopush.js HTTP/1.1
Host: 0fa4b29ce4.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://0fa4b29ce4.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:18 GMT
content-type: application/javascript; charset=utf-8
content-length: 8110
last-modified: Thu, 02 May 2024 14:58:42 GMT
etag: "6633aa22-1fae"
content-encoding: gzip
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| partners-tds.com/WzJQVS | 142.202.51.61 | | 0 B |
IP142.202.51.61:0 ASN#63023 AS-GLOBALTELEHOST
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /WzJQVS HTTP/1.1
Host: partners-tds.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://0fa4b29ce4.news-mezutu.com/
Cookie: _subid=376l60j117j6a3; 933eb=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjFcIjoxNzE1MTkwNjExfSxcImNhbXBhaWduc1wiOntcIjFcIjoxNzE1MTkwNjExfSxcInRpbWVcIjoxNzE1MTkwNjExfSJ9.eBUGVDeNH4CwZsOUDJQQTGFummUDBDWkm-b51CPZuw4
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Server: nginx
Date: Wed, 08 May 2024 17:50:16 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-cache, no-store, must-revalidate
Expires: Wed, 08 May 2024 17:50:16 GMT
Location: https://news-pepafu.com/tds?id=1218914904&p1=&p2=&p3=&p4=
Set-Cookie: _subid=376l60j117j6a8; expires=Sat, 08 Jun 2024 17:50:16 GMT; path=/
933eb=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjFcIjoxNzE1MTkwNjExfSxcImNhbXBhaWduc1wiOntcIjFcIjoxNzE1MTkwNjExfSxcInRpbWVcIjoxNzE1MTkwNjExfSJ9.eBUGVDeNH4CwZsOUDJQQTGFummUDBDWkm-b51CPZuw4; expires=Thu, 15 Sep 2078 11:40:32 GMT; path=/
Vary: Accept-Encoding
Access-Control-Allow-Origin: *
|
|
| show.revopush.com/api/v1/inpage/show/?uid=171984&subacc=1218914904&sub1=&sub2=&sub3=&sub4=&adult=true&limit=1&traffic=adult | 94.130.236.73 | | 848 B |
URL show.revopush.com/api/v1/inpage/show/?uid=171984&subacc=1218914904&sub1=&sub2=&sub3=&sub4=&adult=true&limit=1&traffic=adult IP94.130.236.73:0 ASN#24940 Hetzner Online GmbH
Hash6cbaf49882fcafa60f3fb49bb811e575 45df7c3ce0ec30af87278b895fec867dc7f07faf 353bac38a4457cf9096166f01f3742678839ffb8dab530cae2670575648ca3fd
GET /api/v1/inpage/show/?uid=171984&subacc=1218914904&sub1=&sub2=&sub3=&sub4=&adult=true&limit=1&traffic=adult HTTP/1.1
Host: show.revopush.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://bc611abe73.news-mezutu.com/
Origin: https://bc611abe73.news-mezutu.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:15 GMT
content-type: application/json
accept-ch: Sec-CH-UA, Sec-CH-UA-Model, Sec-CH-UA-Mobile, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Wow64
access-control-allow-origin: https://bc611abe73.news-mezutu.com
vary: Origin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| e1ee66e1b0.news-mezutu.com/revopush.js | 136.243.42.50 | | 8.1 kB |
URL e1ee66e1b0.news-mezutu.com/revopush.js IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (20417), with no line terminators Hash2c5bbd971d7151a38f9a0fbe8fa83886 8fb8275965ff38c18a2fb5bd1be990c4592b39a0 b75cba17751a5e6c0e183475d1074739a876aa2cf4841e760692e573822db343
GET /revopush.js HTTP/1.1
Host: e1ee66e1b0.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://e1ee66e1b0.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:18 GMT
content-type: application/javascript; charset=utf-8
content-length: 8110
last-modified: Thu, 02 May 2024 14:58:42 GMT
etag: "6633aa22-1fae"
content-encoding: gzip
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| e1ee66e1b0.news-mezutu.com/lands/39/img/icon1.png | 136.243.42.50 | | 7.3 kB |
URL e1ee66e1b0.news-mezutu.com/lands/39/img/icon1.png IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
File typePNG image data, 300 x 300, 8-bit/color RGBA, non-interlaced Hash3d0ab5834c8bf7134e4d21fa3288317f c31d1a6b9df206f67ea194f4c424cdc372a423c2 0515ddd9185d263874e7b66bb6d521fcd63b857aac5fed51c08df98026dafe27
GET /lands/39/img/icon1.png HTTP/1.1
Host: e1ee66e1b0.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://e1ee66e1b0.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:18 GMT
content-type: image/png
content-length: 7252
last-modified: Thu, 02 May 2024 14:58:42 GMT
etag: "6633aa22-1c54"
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| e1ee66e1b0.news-mezutu.com/lands/39/img/icon2.png | 136.243.42.50 | | 4.6 kB |
URL e1ee66e1b0.news-mezutu.com/lands/39/img/icon2.png IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
File typePNG image data, 300 x 300, 8-bit/color RGBA, non-interlaced Hashc947d439eb93367f1af5b2a3d222f057 5b4c10820d39e624bc6df72a113679da80a8e44e aab564e67c47df65ddcb9c4eaa62cd798a51624a3fded9f9b3a1197b460a79c2
GET /lands/39/img/icon2.png HTTP/1.1
Host: e1ee66e1b0.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://e1ee66e1b0.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:18 GMT
content-type: image/png
content-length: 4576
last-modified: Thu, 02 May 2024 14:58:42 GMT
etag: "6633aa22-11e0"
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| e1ee66e1b0.news-mezutu.com/lands/39/img/icon3.png | 136.243.42.50 | | 7.8 kB |
URL e1ee66e1b0.news-mezutu.com/lands/39/img/icon3.png IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
File typePNG image data, 300 x 300, 8-bit/color RGBA, non-interlaced Hash8f3cc830da0b1fdf66bda7d1d734747b 94588f041eec3a78a8780c8124c56a1434a89277 ea3698c32039a115b03c2528cbb29c3ff97bbd49ad1345d5095e98d1fd0ea8ba
GET /lands/39/img/icon3.png HTTP/1.1
Host: e1ee66e1b0.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://e1ee66e1b0.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:18 GMT
content-type: image/png
content-length: 7847
last-modified: Thu, 02 May 2024 14:58:42 GMT
etag: "6633aa22-1ea7"
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| e1ee66e1b0.news-mezutu.com/lands/39/img/icon4.png | 136.243.42.50 | | 7.0 kB |
URL e1ee66e1b0.news-mezutu.com/lands/39/img/icon4.png IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
File typePNG image data, 300 x 300, 8-bit/color RGBA, non-interlaced Hash7ad7f32c1c0df7b4975cc41bda4ac435 81d57e996ee6cd9e122592e68ffa3d55c1ba10ff c0af6cb2280bba97d235dfad7c72d22353a0d2cf277733ce9fc4701df7ed1d5f
GET /lands/39/img/icon4.png HTTP/1.1
Host: e1ee66e1b0.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://e1ee66e1b0.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:18 GMT
content-type: image/png
content-length: 7032
last-modified: Thu, 02 May 2024 14:58:42 GMT
etag: "6633aa22-1b78"
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| e1ee66e1b0.news-mezutu.com/lands/39/img/icon5.png | 136.243.42.50 | | 3.3 kB |
URL e1ee66e1b0.news-mezutu.com/lands/39/img/icon5.png IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
File typePNG image data, 500 x 500, 8-bit/color RGBA, non-interlaced Hash1e1a7582b5da63e10485d63f97abc9a0 ca3ee3067f96c732f455bc7c99ec5100194f13f6 196083352a09a19cf2d4364e3ad406606fedb562f2096c1bef373ff2c485b503
GET /lands/39/img/icon5.png HTTP/1.1
Host: e1ee66e1b0.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://e1ee66e1b0.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:18 GMT
content-type: image/png
content-length: 3264
last-modified: Thu, 02 May 2024 14:58:42 GMT
etag: "6633aa22-cc0"
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| e1ee66e1b0.news-mezutu.com/lands/39/img/icon7.png | 136.243.42.50 | | 3.3 kB |
URL e1ee66e1b0.news-mezutu.com/lands/39/img/icon7.png IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
File typePNG image data, 500 x 500, 8-bit/color RGBA, non-interlaced Hashb512735542cb07b3b2dcf153a7dfe456 93bde8875412ce266600e2af1c37123483a50376 e9c661cc8adbaa1b9cd4cf65f0ba93a1c24211cb5f94ed0950e0fbc973781718
GET /lands/39/img/icon7.png HTTP/1.1
Host: e1ee66e1b0.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://e1ee66e1b0.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:18 GMT
content-type: image/png
content-length: 3283
last-modified: Thu, 02 May 2024 14:58:42 GMT
etag: "6633aa22-cd3"
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| e1ee66e1b0.news-mezutu.com/lands/39/img/icon8.png | 136.243.42.50 | | 4.1 kB |
URL e1ee66e1b0.news-mezutu.com/lands/39/img/icon8.png IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
File typePNG image data, 300 x 300, 8-bit/color RGBA, non-interlaced Hashf92d6474ebc6a3a0b576749cfb4afe98 0f4ce3dcf04873b8098c01d20c44967fb9fce0cc 3a7abff293d71fd8c5a58deacb964b50fe074a6f458575d37abbd367a3a930a1
GET /lands/39/img/icon8.png HTTP/1.1
Host: e1ee66e1b0.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://e1ee66e1b0.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:18 GMT
content-type: image/png
content-length: 4064
last-modified: Thu, 02 May 2024 14:58:42 GMT
etag: "6633aa22-fe0"
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| ad39b72fd0.news-mezutu.com/process.js?id=1218914904&p1=&p2=&p3=&p4= | 136.243.42.50 | | 45 kB |
URL ad39b72fd0.news-mezutu.com/process.js?id=1218914904&p1=&p2=&p3=&p4= IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
File typeJavaScript source, ASCII text, with very long lines (44310) Hash83020392ade5e3f037f9bc57349cf7ff 2b0e079ca92cb983b1182b490c72a0895e241736 b66d0f8a3b649fb56682538860367b962148427e530d5675bd4375c26f481499
GET /process.js?id=1218914904&p1=&p2=&p3=&p4= HTTP/1.1
Host: ad39b72fd0.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ad39b72fd0.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:17 GMT
content-type: application/javascript; charset=utf-8
cache-control: no-cache, no-store, must-revalidate
expires: 0
pragma: no-cache
vary: Origin
X-Firefox-Spdy: h2
|
|
| news-pepafu.com/tds?id=1218914904&p1=&p2=&p3=&p4= | 144.76.106.61 | | 0 B |
URL news-pepafu.com/tds?id=1218914904&p1=&p2=&p3=&p4= IP144.76.106.61:0 ASN#24940 Hetzner Online GmbH
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tds?id=1218914904&p1=&p2=&p3=&p4= HTTP/1.1
Host: news-pepafu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://e1ee66e1b0.news-mezutu.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
server: nginx
date: Wed, 08 May 2024 17:50:17 GMT
content-length: 0
location: https://560f50f19b.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
vary: Origin
x-frame-options: DENY
X-Firefox-Spdy: h2
|
|
| 560f50f19b.news-mezutu.com/lands/36/lp.js | 136.243.42.50 | | 758 B |
URL 560f50f19b.news-mezutu.com/lands/36/lp.js IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (719), with no line terminators Hashdbcc3608581394261613182e95963925 d2c19c094e7916d5f7eac24c9a77179ca3bc3ee9 c27bd18e340c53733156ca9e1e26f811e6243913258b19a3c7a2938554e9fed8
GET /lands/36/lp.js HTTP/1.1
Host: 560f50f19b.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://560f50f19b.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:18 GMT
content-type: application/javascript; charset=utf-8
content-length: 758
last-modified: Thu, 02 May 2024 14:58:42 GMT
etag: "6633aa22-2f6"
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| 51a16024fe.news-mezutu.com/process.js?id=1218914904&p1=&p2=&p3=&p4= | 136.243.42.50 | | 98 kB |
URL 51a16024fe.news-mezutu.com/process.js?id=1218914904&p1=&p2=&p3=&p4= IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
File typeJavaScript source, ASCII text, with very long lines (44310) Hash06654935f5b60c7cc73c0eca4f8d785c 569816e81a6920b6553c77e2d88d2749094c4c96 3f5428da6c8e4be33634479b8c4d07cfed41a6094a74b85743333b050177f18f
GET /process.js?id=1218914904&p1=&p2=&p3=&p4= HTTP/1.1
Host: 51a16024fe.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://51a16024fe.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:17 GMT
content-type: application/javascript; charset=utf-8
cache-control: no-cache, no-store, must-revalidate
expires: 0
pragma: no-cache
vary: Origin
X-Firefox-Spdy: h2
|
|
| 560f50f19b.news-mezutu.com/lands/36/img/style.css | 136.243.42.50 | | 3.1 kB |
URL 560f50f19b.news-mezutu.com/lands/36/img/style.css IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
File typeASCII text, with very long lines (11701), with no line terminators Hashdb606af46bdcca984d60a46183a4525e 28964fac8b2b7889554f32543e69ac68e6f21e2f 8693be57861bf006c70b542234666eaa50f4258856c4e75e0066f1ca589026ae
GET /lands/36/img/style.css HTTP/1.1
Host: 560f50f19b.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://560f50f19b.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:18 GMT
content-type: text/css
content-length: 3136
last-modified: Thu, 02 May 2024 14:58:42 GMT
etag: "6633aa22-c40"
content-encoding: gzip
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| 560f50f19b.news-mezutu.com/lands/36/img/logo.png | 136.243.42.50 | | 7.4 kB |
URL 560f50f19b.news-mezutu.com/lands/36/img/logo.png IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
File typePNG image data, 180 x 56, 8-bit/color RGBA, non-interlaced Hash6cd3a78b39a704ee1c84f31c8c4e5808 bb5c81cadfcd60bd5c7b29af2395ef24b11ebb93 4cfbf07b7b4def7ad505f3be44e311c631ffec252a93f031d11356bc1b0c8193
GET /lands/36/img/logo.png HTTP/1.1
Host: 560f50f19b.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://560f50f19b.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:18 GMT
content-type: image/png
content-length: 7398
last-modified: Thu, 02 May 2024 14:58:42 GMT
etag: "6633aa22-1ce6"
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| 560f50f19b.news-mezutu.com/lands/36/img/search-icon.png | 136.243.42.50 | | 461 B |
URL 560f50f19b.news-mezutu.com/lands/36/img/search-icon.png IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
File typePNG image data, 28 x 28, 8-bit/color RGBA, non-interlaced Hash71a97f63eeafce6cc8dd4e7b92e77303 e92e36474a69fcf7b932efc581e024a1c25773e5 fc2f527dba6449b1d9a7f17e4e9926039806904f58a7b4278dccf398900371d2
GET /lands/36/img/search-icon.png HTTP/1.1
Host: 560f50f19b.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://560f50f19b.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:18 GMT
content-type: image/png
content-length: 461
last-modified: Thu, 02 May 2024 14:58:42 GMT
etag: "6633aa22-1cd"
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| 62806a6eae.news-mezutu.com/process.js?id=1218914904&p1=&p2=&p3=&p4= | 136.243.42.50 | | 75 kB |
URL 62806a6eae.news-mezutu.com/process.js?id=1218914904&p1=&p2=&p3=&p4= IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
Hashe5748f798ce31bf79b023c8374d49afc 8e6fde7719ca943f015e50783ade4fcad9497bdb 2827bb48f11480f0d9b7ea44d68e0a21a0cf91e6fa4574eb26b5e24503959383
GET /process.js?id=1218914904&p1=&p2=&p3=&p4= HTTP/1.1
Host: 62806a6eae.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://62806a6eae.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:14 GMT
content-type: application/javascript; charset=utf-8
cache-control: no-cache, no-store, must-revalidate
expires: 0
pragma: no-cache
vary: Origin
X-Firefox-Spdy: h2
|
|
| 560f50f19b.news-mezutu.com/lands/36/img/player-controls-l.png | 136.243.42.50 | | 945 B |
URL 560f50f19b.news-mezutu.com/lands/36/img/player-controls-l.png IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
File typePNG image data, 146 x 60, 8-bit gray+alpha, non-interlaced Hash6865c8700b582e4c7848472bb23dd65a c5ea2c514de8f55145550f9589e1e07cda457994 e1f5b32f965cf94fdb788fa9cff4f2f80b34c234f7e9fa9139de890e89438324
GET /lands/36/img/player-controls-l.png HTTP/1.1
Host: 560f50f19b.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://560f50f19b.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:18 GMT
content-type: image/png
content-length: 945
last-modified: Thu, 02 May 2024 14:58:42 GMT
etag: "6633aa22-3b1"
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| 560f50f19b.news-mezutu.com/lands/36/img/player-controls-r.png | 136.243.42.50 | | 408 B |
URL 560f50f19b.news-mezutu.com/lands/36/img/player-controls-r.png IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
File typePNG image data, 60 x 60, 8-bit gray+alpha, non-interlaced Hashf0e42db89f7d0994b3723b35eb05a49f b4e08e7b2c525345d86dc2299663915c84a41b2b 13bbdf214a22994e4e0e655c256ab493cc495f15f9c1f08772cad0761625a9be
GET /lands/36/img/player-controls-r.png HTTP/1.1
Host: 560f50f19b.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://560f50f19b.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:18 GMT
content-type: image/png
content-length: 408
last-modified: Thu, 02 May 2024 14:58:42 GMT
etag: "6633aa22-198"
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| 560f50f19b.news-mezutu.com/lands/36/img/player-bg.jpg | 136.243.42.50 | | 11 kB |
URL 560f50f19b.news-mezutu.com/lands/36/img/player-bg.jpg IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
Hashd0c6f02d6933f0b93db0942e3e7f3609 bc96b3878d13d0f46aa464e94515f27ad53531b0 7296089ccd9e42b305c5b0398d47a78f900b40225c592c6f1ef23ade5bbe667a
GET /lands/36/img/player-bg.jpg HTTP/1.1
Host: 560f50f19b.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://560f50f19b.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:18 GMT
content-type: image/jpeg
content-length: 11291
last-modified: Thu, 02 May 2024 14:58:42 GMT
etag: "6633aa22-2c1b"
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| 560f50f19b.news-mezutu.com/lands/36/img/pics-1.jpg | 136.243.42.50 | | 9.6 kB |
URL 560f50f19b.news-mezutu.com/lands/36/img/pics-1.jpg IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
Hash8374be5c573da988b4d76c1051f8cbc7 c319af79d391edeac2268173798952dd71f0ecf2 41889b3a66aec88fc8a474f19a6c2f6933200524597ccf76f2c9f995687099ea
GET /lands/36/img/pics-1.jpg HTTP/1.1
Host: 560f50f19b.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://560f50f19b.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:18 GMT
content-type: image/jpeg
content-length: 9604
last-modified: Thu, 02 May 2024 14:58:42 GMT
etag: "6633aa22-2584"
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| 560f50f19b.news-mezutu.com/lands/36/img/pics-2.jpg | 136.243.42.50 | | 9.5 kB |
URL 560f50f19b.news-mezutu.com/lands/36/img/pics-2.jpg IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
Hashb1444ede1cb63c55f07c4b7cc861ec58 504823696a6990f0c6892721e34a7496cfe4e704 628146e090737199d0b92e0d069cdc8fa95d65391a7e84b7da053dbc0275b2f8
GET /lands/36/img/pics-2.jpg HTTP/1.1
Host: 560f50f19b.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://560f50f19b.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:18 GMT
content-type: image/jpeg
content-length: 9474
last-modified: Thu, 02 May 2024 14:58:42 GMT
etag: "6633aa22-2502"
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| 560f50f19b.news-mezutu.com/lands/36/img/pics-3.jpg | 136.243.42.50 | | 9.4 kB |
URL 560f50f19b.news-mezutu.com/lands/36/img/pics-3.jpg IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
Hash76025b7cd7b3e168342e9f6916d8c7f4 bd2a6ea7c9105935c7a616fec2d6d85dbf98bfc2 46eaa0e5c25c663d858a5c65629f960ed17d2fe30b2484f629158e6d6460d775
GET /lands/36/img/pics-3.jpg HTTP/1.1
Host: 560f50f19b.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://560f50f19b.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:18 GMT
content-type: image/jpeg
content-length: 9413
last-modified: Thu, 02 May 2024 14:58:42 GMT
etag: "6633aa22-24c5"
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| 560f50f19b.news-mezutu.com/lands/36/img/pics-4.jpg | 136.243.42.50 | | 9.5 kB |
URL 560f50f19b.news-mezutu.com/lands/36/img/pics-4.jpg IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
Hash107bdcec0a201d69db378827b68127cd efc977edd0a369769d5f32d88e9858302bed1e5e cb8a23effd64618021ebe40be5ed24bfb27c17f6d0a82c87a96d9efd91e06468
GET /lands/36/img/pics-4.jpg HTTP/1.1
Host: 560f50f19b.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://560f50f19b.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:18 GMT
content-type: image/jpeg
content-length: 9468
last-modified: Thu, 02 May 2024 14:58:42 GMT
etag: "6633aa22-24fc"
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| 560f50f19b.news-mezutu.com/lands/36/img/pics-5.jpg | 136.243.42.50 | | 9.6 kB |
URL 560f50f19b.news-mezutu.com/lands/36/img/pics-5.jpg IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
Hash628b98b82d0aca1c1b2155aa5ec51a6a db663b2b85cf8828f3e9c5aa879325bb50e684a0 d7dfe6be5b49bee8bbf743bc58d74af3dc7d0250c89bd6dd7e9ad268c287289d
GET /lands/36/img/pics-5.jpg HTTP/1.1
Host: 560f50f19b.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://560f50f19b.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:18 GMT
content-type: image/jpeg
content-length: 9557
last-modified: Thu, 02 May 2024 14:58:42 GMT
etag: "6633aa22-2555"
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| 560f50f19b.news-mezutu.com/lands/36/img/pics-6.jpg | 136.243.42.50 | | 9.6 kB |
URL 560f50f19b.news-mezutu.com/lands/36/img/pics-6.jpg IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
Hasha83d5196e71bd6f9c55ef3e7322e527c 9dbddad413391599552c4d9cc5c9e8a287ef910f 52212d360cbbf493678d8e8bf75c20b7ad4b1d6cf86bf03e1c87fb5b4d6cb818
GET /lands/36/img/pics-6.jpg HTTP/1.1
Host: 560f50f19b.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://560f50f19b.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:18 GMT
content-type: image/jpeg
content-length: 9620
last-modified: Thu, 02 May 2024 14:58:42 GMT
etag: "6633aa22-2594"
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| 560f50f19b.news-mezutu.com/lands/36/img/pics-7.jpg | 136.243.42.50 | | 9.5 kB |
URL 560f50f19b.news-mezutu.com/lands/36/img/pics-7.jpg IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
Hash94edfad63e95c79618692b8d8dc20587 f582b7b70443ea1fff184ade49ab560fc8fd3318 0940f729e51d0fb610affca787415657f39a630cc0450d08576f69fd0f71756e
GET /lands/36/img/pics-7.jpg HTTP/1.1
Host: 560f50f19b.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://560f50f19b.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:18 GMT
content-type: image/jpeg
content-length: 9484
last-modified: Thu, 02 May 2024 14:58:42 GMT
etag: "6633aa22-250c"
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| 560f50f19b.news-mezutu.com/lands/36/img/pics-8.jpg | 136.243.42.50 | | 9.8 kB |
URL 560f50f19b.news-mezutu.com/lands/36/img/pics-8.jpg IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
Hash2e7eafc3878ee465f96bca0f9d1e1712 c4f353f12542db5d2df3be74dbae890e0430ac6e df67f968a051026a5c43eb3e40b8d02a0c72bc742055526fef7e2655dd837cc1
GET /lands/36/img/pics-8.jpg HTTP/1.1
Host: 560f50f19b.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://560f50f19b.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:18 GMT
content-type: image/jpeg
content-length: 9750
last-modified: Thu, 02 May 2024 14:58:42 GMT
etag: "6633aa22-2616"
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| 560f50f19b.news-mezutu.com/lands/36/img/pics-9.jpg | 136.243.42.50 | | 9.6 kB |
URL 560f50f19b.news-mezutu.com/lands/36/img/pics-9.jpg IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
Hashc3af10d166a4447c21f25e4a32383a5d 37a0342d08d6933b3bbfd4063b7ba998c991dd73 963fbe86dc33b1a1ba5c695bf9b74ebde439bc7a9260137121d747cf4cfbdd73
GET /lands/36/img/pics-9.jpg HTTP/1.1
Host: 560f50f19b.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://560f50f19b.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:18 GMT
content-type: image/jpeg
content-length: 9646
last-modified: Thu, 02 May 2024 14:58:42 GMT
etag: "6633aa22-25ae"
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| 560f50f19b.news-mezutu.com/lands/36/img/pics-10.jpg | 136.243.42.50 | | 9.7 kB |
URL 560f50f19b.news-mezutu.com/lands/36/img/pics-10.jpg IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
Hash00ad8eccd280144f038e883859beeabe e13583bbe25712e827b8b22b1353c883531f849f 21397b18bd87b564f70404ea1ff41d8d23ba804ed6eea4de323ac1c94e096ada
GET /lands/36/img/pics-10.jpg HTTP/1.1
Host: 560f50f19b.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://560f50f19b.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:18 GMT
content-type: image/jpeg
content-length: 9681
last-modified: Thu, 02 May 2024 14:58:42 GMT
etag: "6633aa22-25d1"
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| 560f50f19b.news-mezutu.com/lands/36/img/pics-11.jpg | 136.243.42.50 | | 9.5 kB |
URL 560f50f19b.news-mezutu.com/lands/36/img/pics-11.jpg IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
Hash8611f67b36ff57eaa1060e793b9e6ad4 49f273a5760e7375adb1efc58f0ed2c665da6ae8 de70c6d29629dd9ec1b85e3146390c1019bd608eeb3d7ffdc196627f70ee30b2
GET /lands/36/img/pics-11.jpg HTTP/1.1
Host: 560f50f19b.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://560f50f19b.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:18 GMT
content-type: image/jpeg
content-length: 9483
last-modified: Thu, 02 May 2024 14:58:42 GMT
etag: "6633aa22-250b"
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| 560f50f19b.news-mezutu.com/lands/36/img/pics-12.jpg | 136.243.42.50 | | 9.5 kB |
URL 560f50f19b.news-mezutu.com/lands/36/img/pics-12.jpg IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
Hash3971b0cd6849aef8e63c281fe7e53c57 690281f0f9a05a32be18029632240693f7b26270 20a9e9a79f97878e87f805b977eb6046480b734dfd9e90df9f34b22ef484777a
GET /lands/36/img/pics-12.jpg HTTP/1.1
Host: 560f50f19b.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://560f50f19b.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:18 GMT
content-type: image/jpeg
content-length: 9487
last-modified: Thu, 02 May 2024 14:58:42 GMT
etag: "6633aa22-250f"
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| 560f50f19b.news-mezutu.com/lands/36/img/pics-13.jpg | 136.243.42.50 | | 9.4 kB |
URL 560f50f19b.news-mezutu.com/lands/36/img/pics-13.jpg IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
Hashcd911694d58b5fb86c94cf7a1d5b530b f32925a79b755d76fdf1ae56fa898ef23d816699 5a8f5f99cb386403813964a7ee271660131e9c50eb5267f932a67ce0f4fb2ea2
GET /lands/36/img/pics-13.jpg HTTP/1.1
Host: 560f50f19b.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://560f50f19b.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:18 GMT
content-type: image/jpeg
content-length: 9378
last-modified: Thu, 02 May 2024 14:58:42 GMT
etag: "6633aa22-24a2"
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| 560f50f19b.news-mezutu.com/lands/36/img/pics-14.jpg | 136.243.42.50 | | 9.5 kB |
URL 560f50f19b.news-mezutu.com/lands/36/img/pics-14.jpg IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
Hash4957499f251b620472eb5fe6fd126c22 a237ac15f4b16256f1c49a40ca07ca168dea540c de5d64cc00dd3bc0e0998e274f41bb78de69cae402e53c4f41c0ab8e0af2cd0b
GET /lands/36/img/pics-14.jpg HTTP/1.1
Host: 560f50f19b.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://560f50f19b.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:18 GMT
content-type: image/jpeg
content-length: 9498
last-modified: Thu, 02 May 2024 14:58:42 GMT
etag: "6633aa22-251a"
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| 560f50f19b.news-mezutu.com/lands/36/img/pics-15.jpg | 136.243.42.50 | | 9.7 kB |
URL 560f50f19b.news-mezutu.com/lands/36/img/pics-15.jpg IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
Hashbf608c2d10293273951a88b8d38de015 15b2a17c7300725aacc27f320480dfe5bf173a00 118f446f628921fb7cab1afeac932ef77d63a7c5a31ffa288427d80c4de69f9f
GET /lands/36/img/pics-15.jpg HTTP/1.1
Host: 560f50f19b.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://560f50f19b.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:18 GMT
content-type: image/jpeg
content-length: 9673
last-modified: Thu, 02 May 2024 14:58:42 GMT
etag: "6633aa22-25c9"
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| 560f50f19b.news-mezutu.com/lands/36/img/pics-16.jpg | 136.243.42.50 | | 9.6 kB |
URL 560f50f19b.news-mezutu.com/lands/36/img/pics-16.jpg IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
Hash700dfe65fca751e5c160aa1ed38c0389 61a7a9ba2a5209bb28b6a36c4b7ba9088f4b2886 8f8c3d5f93cc6dc00172cf203f6b0113819e853de45518cbcee1e68f9e95fbc1
GET /lands/36/img/pics-16.jpg HTTP/1.1
Host: 560f50f19b.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://560f50f19b.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:18 GMT
content-type: image/jpeg
content-length: 9570
last-modified: Thu, 02 May 2024 14:58:42 GMT
etag: "6633aa22-2562"
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| 560f50f19b.news-mezutu.com/lands/36/img/pics-17.jpg | 136.243.42.50 | | 9.6 kB |
URL 560f50f19b.news-mezutu.com/lands/36/img/pics-17.jpg IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
Hash3617c828a4589dfd2af8f90e31f92666 0e7a1dbe743c9eaad109659f7b21ab86719b9cd0 f3ab898058b0ebaba11001b5a2b3c5b5db2d7f766000d95abdbfb841fcb16c1f
GET /lands/36/img/pics-17.jpg HTTP/1.1
Host: 560f50f19b.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://560f50f19b.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:18 GMT
content-type: image/jpeg
content-length: 9595
last-modified: Thu, 02 May 2024 14:58:42 GMT
etag: "6633aa22-257b"
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| 560f50f19b.news-mezutu.com/lands/36/img/pics-18.jpg | 136.243.42.50 | | 9.6 kB |
URL 560f50f19b.news-mezutu.com/lands/36/img/pics-18.jpg IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
Hash52ada45615791fefe3513b98a28d6c61 334b68a65108b2274dc0d41bbed58d10cbfb41a0 204715e71db20e5daffe8494816412e0998ec0b97b303f16fb4102226c492fa4
GET /lands/36/img/pics-18.jpg HTTP/1.1
Host: 560f50f19b.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://560f50f19b.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:18 GMT
content-type: image/jpeg
content-length: 9645
last-modified: Thu, 02 May 2024 14:58:42 GMT
etag: "6633aa22-25ad"
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| show.revopush.com/api/v1/inpage/show/?uid=171984&subacc=1218914904&sub1=&sub2=&sub3=&sub4=&adult=true&limit=1&traffic=adult |  95.216.46.99 | | 842 B |
URL show.revopush.com/api/v1/inpage/show/?uid=171984&subacc=1218914904&sub1=&sub2=&sub3=&sub4=&adult=true&limit=1&traffic=adult IP95.216.46.99:0 ASN#24940 Hetzner Online GmbH
Hash4641a73829ab59aff0d437db842e9dc4 57192161920c19056617e9a279706c36ee1b15c0 1e69d3801cdbd59dfc72de5b785fd311fcbb097d75c1ee68ebaa21e728cb1030
GET /api/v1/inpage/show/?uid=171984&subacc=1218914904&sub1=&sub2=&sub3=&sub4=&adult=true&limit=1&traffic=adult HTTP/1.1
Host: show.revopush.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://e1ee66e1b0.news-mezutu.com/
Origin: https://e1ee66e1b0.news-mezutu.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:17 GMT
content-type: application/json
accept-ch: Sec-CH-UA, Sec-CH-UA-Model, Sec-CH-UA-Mobile, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Wow64
access-control-allow-origin: https://e1ee66e1b0.news-mezutu.com
vary: Origin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| news-pepafu.com/tds?id=1218914904&p1=&p2=&p3=&p4= | 144.76.106.61 | | 0 B |
URL news-pepafu.com/tds?id=1218914904&p1=&p2=&p3=&p4= IP144.76.106.61:0 ASN#24940 Hetzner Online GmbH
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tds?id=1218914904&p1=&p2=&p3=&p4= HTTP/1.1
Host: news-pepafu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://560f50f19b.news-mezutu.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
server: nginx
date: Wed, 08 May 2024 17:50:17 GMT
content-length: 0
location: https://3df907167f.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
vary: Origin
x-frame-options: DENY
X-Firefox-Spdy: h2
|
|
| 3df907167f.news-mezutu.com/revopush.js | 136.243.42.50 | | 8.1 kB |
URL 3df907167f.news-mezutu.com/revopush.js IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (20417), with no line terminators Hash2c5bbd971d7151a38f9a0fbe8fa83886 8fb8275965ff38c18a2fb5bd1be990c4592b39a0 b75cba17751a5e6c0e183475d1074739a876aa2cf4841e760692e573822db343
GET /revopush.js HTTP/1.1
Host: 3df907167f.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://3df907167f.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:19 GMT
content-type: application/javascript; charset=utf-8
content-length: 8110
last-modified: Thu, 02 May 2024 14:58:42 GMT
etag: "6633aa22-1fae"
content-encoding: gzip
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| 3df907167f.news-mezutu.com/lands/53/css/style.css | 136.243.42.50 | | 1.3 kB |
URL 3df907167f.news-mezutu.com/lands/53/css/style.css IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
File typeASCII text, with very long lines (4928), with no line terminators Hash6f2d06d6dbd00d18b9e7eb11ef80081d b86bdf3144b91210a3e04aab9802dba7b677ffe4 4bbe46d55f77d131ea3c70d021bf1e88fcfa1a98b7b89cf8f3f081ffb38fa7f8
GET /lands/53/css/style.css HTTP/1.1
Host: 3df907167f.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://3df907167f.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:19 GMT
content-type: text/css
content-length: 1301
last-modified: Thu, 02 May 2024 14:58:42 GMT
etag: "6633aa22-515"
content-encoding: gzip
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| 3df907167f.news-mezutu.com/lands/53/images/spinning-circles2.svg | 136.243.42.50 | | 503 B |
URL 3df907167f.news-mezutu.com/lands/53/images/spinning-circles2.svg IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
File typeSVG Scalable Vector Graphics image Hash14e6f9981fa27406176056df2451d27b aa1b6fd6071391d0031bff2d74ae77347ec2fdb4 466d361db2f130d7e3d40a671c935e3e556c3a49567657afee2e44a0a390a84f
GET /lands/53/images/spinning-circles2.svg HTTP/1.1
Host: 3df907167f.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://3df907167f.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:19 GMT
content-type: image/svg+xml
content-length: 503
last-modified: Thu, 02 May 2024 14:58:42 GMT
etag: "6633aa22-1f7"
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| partners-tds.com/WzJQVS | 142.202.51.61 | | 0 B |
IP142.202.51.61:0 ASN#63023 AS-GLOBALTELEHOST
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /WzJQVS HTTP/1.1
Host: partners-tds.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://3df907167f.news-mezutu.com/
Cookie: _subid=376l60j117j6aq; 933eb=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjFcIjoxNzE1MTkwNjExfSxcImNhbXBhaWduc1wiOntcIjFcIjoxNzE1MTkwNjExfSxcInRpbWVcIjoxNzE1MTkwNjExfSJ9.eBUGVDeNH4CwZsOUDJQQTGFummUDBDWkm-b51CPZuw4
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Server: nginx
Date: Wed, 08 May 2024 17:50:17 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-cache, no-store, must-revalidate
Expires: Wed, 08 May 2024 17:50:17 GMT
Location: https://news-pepafu.com/tds?id=1218914904&p1=&p2=&p3=&p4=
Set-Cookie: _subid=376l60j117j6b0; expires=Sat, 08 Jun 2024 17:50:17 GMT; path=/
933eb=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjFcIjoxNzE1MTkwNjExfSxcImNhbXBhaWduc1wiOntcIjFcIjoxNzE1MTkwNjExfSxcInRpbWVcIjoxNzE1MTkwNjExfSJ9.eBUGVDeNH4CwZsOUDJQQTGFummUDBDWkm-b51CPZuw4; expires=Thu, 15 Sep 2078 11:40:34 GMT; path=/
Vary: Accept-Encoding
Access-Control-Allow-Origin: *
|
|
| news-pepafu.com/tds?id=1218914904&p1=&p2=&p3=&p4= | 144.76.106.61 | | 0 B |
URL news-pepafu.com/tds?id=1218914904&p1=&p2=&p3=&p4= IP144.76.106.61:0 ASN#24940 Hetzner Online GmbH
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tds?id=1218914904&p1=&p2=&p3=&p4= HTTP/1.1
Host: news-pepafu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://3df907167f.news-mezutu.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
server: nginx
date: Wed, 08 May 2024 17:50:17 GMT
content-length: 0
location: https://3f93e5c8d6.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
vary: Origin
x-frame-options: DENY
X-Firefox-Spdy: h2
|
|
| 3f93e5c8d6.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4= | 136.243.42.50 | | 1.3 kB |
URL 3f93e5c8d6.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4= IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
File typeHTML document, ASCII text, with very long lines (553) Hash098a9d250fa8bf95cad9ebcdbb76c44b 35102654672a8f6e105721d1ffb1b53fae71d396 2e3df14b36ede7c9b4db21a7d5b6525c27a94d4425adf92fa4ee61ad2b0abc04
GET /?id=1218914904&p1=&p2=&p3=&p4= HTTP/1.1
Host: 3f93e5c8d6.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://3df907167f.news-mezutu.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:19 GMT
content-type: text/html; charset=UTF-8
content-length: 1309
vary: Origin
x-frame-options: DENY
X-Firefox-Spdy: h2
|
|
| 3f93e5c8d6.news-mezutu.com/lands/20/style.css | 136.243.42.50 | | 868 B |
URL 3f93e5c8d6.news-mezutu.com/lands/20/style.css IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
File typeASCII text, with very long lines (2230), with no line terminators Hashd4b3acb7a84d2265bf174f13f93ca4f1 d6595e14ed8549bc39a8977cbd8d5b5b6f5cf221 2932666d3de7135f82ec781a408781352ec79c68998de11047db8e228d063311
GET /lands/20/style.css HTTP/1.1
Host: 3f93e5c8d6.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://3f93e5c8d6.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:19 GMT
content-type: text/css
content-length: 868
last-modified: Thu, 02 May 2024 14:58:42 GMT
etag: "6633aa22-364"
content-encoding: gzip
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| 3f93e5c8d6.news-mezutu.com/revopush.js | 136.243.42.50 | | 8.1 kB |
URL 3f93e5c8d6.news-mezutu.com/revopush.js IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (20417), with no line terminators Hash2c5bbd971d7151a38f9a0fbe8fa83886 8fb8275965ff38c18a2fb5bd1be990c4592b39a0 b75cba17751a5e6c0e183475d1074739a876aa2cf4841e760692e573822db343
GET /revopush.js HTTP/1.1
Host: 3f93e5c8d6.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://3f93e5c8d6.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:19 GMT
content-type: application/javascript; charset=utf-8
content-length: 8110
last-modified: Thu, 02 May 2024 14:58:42 GMT
etag: "6633aa22-1fae"
content-encoding: gzip
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| 3df907167f.news-mezutu.com/process.js?id=1218914904&p1=&p2=&p3=&p4= | 136.243.42.50 | | 52 kB |
URL 3df907167f.news-mezutu.com/process.js?id=1218914904&p1=&p2=&p3=&p4= IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
Hashabac52cb173f7bc9e032505e66e94188 57fdb86391e1f0050691579df9a5c3be40fff765 260a0fcf93fcf7589d6af45c94f67c15b922bdb2eaacab21cfb20a89390e15d6
GET /process.js?id=1218914904&p1=&p2=&p3=&p4= HTTP/1.1
Host: 3df907167f.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://3df907167f.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:19 GMT
content-type: application/javascript; charset=utf-8
cache-control: no-cache, no-store, must-revalidate
expires: 0
pragma: no-cache
vary: Origin
X-Firefox-Spdy: h2
|
|
| partners-tds.com/WzJQVS | 142.202.51.61 | | 0 B |
IP142.202.51.61:0 ASN#63023 AS-GLOBALTELEHOST
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /WzJQVS HTTP/1.1
Host: partners-tds.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://3f93e5c8d6.news-mezutu.com/
Cookie: _subid=376l60j117j6b0; 933eb=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjFcIjoxNzE1MTkwNjExfSxcImNhbXBhaWduc1wiOntcIjFcIjoxNzE1MTkwNjExfSxcInRpbWVcIjoxNzE1MTkwNjExfSJ9.eBUGVDeNH4CwZsOUDJQQTGFummUDBDWkm-b51CPZuw4
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Server: nginx
Date: Wed, 08 May 2024 17:50:18 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-cache, no-store, must-revalidate
Expires: Wed, 08 May 2024 17:50:18 GMT
Location: https://news-pepafu.com/tds?id=1218914904&p1=&p2=&p3=&p4=
Set-Cookie: _subid=376l60j117j6b1; expires=Sat, 08 Jun 2024 17:50:18 GMT; path=/
933eb=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjFcIjoxNzE1MTkwNjExfSxcImNhbXBhaWduc1wiOntcIjFcIjoxNzE1MTkwNjExfSxcInRpbWVcIjoxNzE1MTkwNjExfSJ9.eBUGVDeNH4CwZsOUDJQQTGFummUDBDWkm-b51CPZuw4; expires=Thu, 15 Sep 2078 11:40:36 GMT; path=/
Vary: Accept-Encoding
Access-Control-Allow-Origin: *
|
|
| news-pepafu.com/tds?id=1218914904&p1=&p2=&p3=&p4= | 144.76.106.61 | | 0 B |
URL news-pepafu.com/tds?id=1218914904&p1=&p2=&p3=&p4= IP144.76.106.61:0 ASN#24940 Hetzner Online GmbH
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tds?id=1218914904&p1=&p2=&p3=&p4= HTTP/1.1
Host: news-pepafu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://3f93e5c8d6.news-mezutu.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
server: nginx
date: Wed, 08 May 2024 17:50:18 GMT
content-length: 0
location: https://dac13dced5.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
vary: Origin
x-frame-options: DENY
X-Firefox-Spdy: h2
|
|
| dac13dced5.news-mezutu.com/revopush.js | 136.243.42.50 | | 8.1 kB |
URL dac13dced5.news-mezutu.com/revopush.js IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (20417), with no line terminators Hash2c5bbd971d7151a38f9a0fbe8fa83886 8fb8275965ff38c18a2fb5bd1be990c4592b39a0 b75cba17751a5e6c0e183475d1074739a876aa2cf4841e760692e573822db343
GET /revopush.js HTTP/1.1
Host: dac13dced5.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dac13dced5.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:20 GMT
content-type: application/javascript; charset=utf-8
content-length: 8110
last-modified: Thu, 02 May 2024 14:58:42 GMT
etag: "6633aa22-1fae"
content-encoding: gzip
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| dac13dced5.news-mezutu.com/lands/39/img/icon1.png | 136.243.42.50 | | 7.3 kB |
URL dac13dced5.news-mezutu.com/lands/39/img/icon1.png IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
File typePNG image data, 300 x 300, 8-bit/color RGBA, non-interlaced Hash3d0ab5834c8bf7134e4d21fa3288317f c31d1a6b9df206f67ea194f4c424cdc372a423c2 0515ddd9185d263874e7b66bb6d521fcd63b857aac5fed51c08df98026dafe27
GET /lands/39/img/icon1.png HTTP/1.1
Host: dac13dced5.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dac13dced5.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:20 GMT
content-type: image/png
content-length: 7252
last-modified: Thu, 02 May 2024 14:58:42 GMT
etag: "6633aa22-1c54"
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| dac13dced5.news-mezutu.com/lands/39/img/icon2.png | 136.243.42.50 | | 4.6 kB |
URL dac13dced5.news-mezutu.com/lands/39/img/icon2.png IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
File typePNG image data, 300 x 300, 8-bit/color RGBA, non-interlaced Hashc947d439eb93367f1af5b2a3d222f057 5b4c10820d39e624bc6df72a113679da80a8e44e aab564e67c47df65ddcb9c4eaa62cd798a51624a3fded9f9b3a1197b460a79c2
GET /lands/39/img/icon2.png HTTP/1.1
Host: dac13dced5.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dac13dced5.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:20 GMT
content-type: image/png
content-length: 4576
last-modified: Thu, 02 May 2024 14:58:42 GMT
etag: "6633aa22-11e0"
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| fonts.googleapis.com/css?family=Roboto:300,400,700,400i&subset=cyrillic | 142.250.74.106 | | 8.6 kB |
URL fonts.googleapis.com/css?family=Roboto:300,400,700,400i&subset=cyrillic IP142.250.74.106:0
File typegzip compressed data, max compression Hash7ab06819797f3fe2dd1a3679fef5dfe0 6b78218c60e71080977fe51817aa4304d6a1dd73 356d17126469cceba7c62f9ae2cd7a00169522813fff0d1da3cf12e50ed3f806
GET /css?family=Roboto:300,400,700,400i&subset=cyrillic HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://3f93e5c8d6.news-mezutu.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 08 May 2024 17:50:18 GMT
date: Wed, 08 May 2024 17:50:18 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| dac13dced5.news-mezutu.com/lands/39/img/icon4.png | 136.243.42.50 | | 7.0 kB |
URL dac13dced5.news-mezutu.com/lands/39/img/icon4.png IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
File typePNG image data, 300 x 300, 8-bit/color RGBA, non-interlaced Hash7ad7f32c1c0df7b4975cc41bda4ac435 81d57e996ee6cd9e122592e68ffa3d55c1ba10ff c0af6cb2280bba97d235dfad7c72d22353a0d2cf277733ce9fc4701df7ed1d5f
GET /lands/39/img/icon4.png HTTP/1.1
Host: dac13dced5.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dac13dced5.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:20 GMT
content-type: image/png
content-length: 7032
last-modified: Thu, 02 May 2024 14:58:42 GMT
etag: "6633aa22-1b78"
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| dac13dced5.news-mezutu.com/lands/39/img/icon5.png | 136.243.42.50 | | 3.3 kB |
URL dac13dced5.news-mezutu.com/lands/39/img/icon5.png IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
File typePNG image data, 500 x 500, 8-bit/color RGBA, non-interlaced Hash1e1a7582b5da63e10485d63f97abc9a0 ca3ee3067f96c732f455bc7c99ec5100194f13f6 196083352a09a19cf2d4364e3ad406606fedb562f2096c1bef373ff2c485b503
GET /lands/39/img/icon5.png HTTP/1.1
Host: dac13dced5.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dac13dced5.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:20 GMT
content-type: image/png
content-length: 3264
last-modified: Thu, 02 May 2024 14:58:42 GMT
etag: "6633aa22-cc0"
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| dac13dced5.news-mezutu.com/lands/39/img/icon7.png | 136.243.42.50 | | 3.3 kB |
URL dac13dced5.news-mezutu.com/lands/39/img/icon7.png IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
File typePNG image data, 500 x 500, 8-bit/color RGBA, non-interlaced Hashb512735542cb07b3b2dcf153a7dfe456 93bde8875412ce266600e2af1c37123483a50376 e9c661cc8adbaa1b9cd4cf65f0ba93a1c24211cb5f94ed0950e0fbc973781718
GET /lands/39/img/icon7.png HTTP/1.1
Host: dac13dced5.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dac13dced5.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:20 GMT
content-type: image/png
content-length: 3283
last-modified: Thu, 02 May 2024 14:58:42 GMT
etag: "6633aa22-cd3"
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| dac13dced5.news-mezutu.com/lands/39/img/icon8.png | 136.243.42.50 | | 4.1 kB |
URL dac13dced5.news-mezutu.com/lands/39/img/icon8.png IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
File typePNG image data, 300 x 300, 8-bit/color RGBA, non-interlaced Hashf92d6474ebc6a3a0b576749cfb4afe98 0f4ce3dcf04873b8098c01d20c44967fb9fce0cc 3a7abff293d71fd8c5a58deacb964b50fe074a6f458575d37abbd367a3a930a1
GET /lands/39/img/icon8.png HTTP/1.1
Host: dac13dced5.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dac13dced5.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:20 GMT
content-type: image/png
content-length: 4064
last-modified: Thu, 02 May 2024 14:58:42 GMT
etag: "6633aa22-fe0"
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| partners-tds.com/WzJQVS | 142.202.51.61 | | 0 B |
IP142.202.51.61:0 ASN#63023 AS-GLOBALTELEHOST
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /WzJQVS HTTP/1.1
Host: partners-tds.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dac13dced5.news-mezutu.com/
Cookie: _subid=376l60j117j6b1; 933eb=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjFcIjoxNzE1MTkwNjExfSxcImNhbXBhaWduc1wiOntcIjFcIjoxNzE1MTkwNjExfSxcInRpbWVcIjoxNzE1MTkwNjExfSJ9.eBUGVDeNH4CwZsOUDJQQTGFummUDBDWkm-b51CPZuw4
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Server: nginx
Date: Wed, 08 May 2024 17:50:18 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-cache, no-store, must-revalidate
Expires: Wed, 08 May 2024 17:50:18 GMT
Location: https://news-pepafu.com/tds?id=1218914904&p1=&p2=&p3=&p4=
Set-Cookie: _subid=376l60j117j6b9; expires=Sat, 08 Jun 2024 17:50:18 GMT; path=/
933eb=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjFcIjoxNzE1MTkwNjExfSxcImNhbXBhaWduc1wiOntcIjFcIjoxNzE1MTkwNjExfSxcInRpbWVcIjoxNzE1MTkwNjExfSJ9.eBUGVDeNH4CwZsOUDJQQTGFummUDBDWkm-b51CPZuw4; expires=Thu, 15 Sep 2078 11:40:36 GMT; path=/
Vary: Accept-Encoding
Access-Control-Allow-Origin: *
|
|
| news-pepafu.com/tds?id=1218914904&p1=&p2=&p3=&p4= | 144.76.106.61 | | 0 B |
URL news-pepafu.com/tds?id=1218914904&p1=&p2=&p3=&p4= IP144.76.106.61:0 ASN#24940 Hetzner Online GmbH
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tds?id=1218914904&p1=&p2=&p3=&p4= HTTP/1.1
Host: news-pepafu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://dac13dced5.news-mezutu.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
server: nginx
date: Wed, 08 May 2024 17:50:18 GMT
content-length: 0
location: https://bd774ec88d.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
vary: Origin
x-frame-options: DENY
X-Firefox-Spdy: h2
|
|
| bd774ec88d.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4= | 136.243.42.50 | | 1.3 kB |
URL bd774ec88d.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4= IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
File typeHTML document, ASCII text, with very long lines (553) Hash7cc82f5e361a914da7c2a35170035035 7ee64de8cdd2df1c215b4784e0b895e453756c6f 1d49a8b9ee619c24c2d138bcc919b0b11295665b769922630ff5ed03ee653c5e
GET /?id=1218914904&p1=&p2=&p3=&p4= HTTP/1.1
Host: bd774ec88d.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://dac13dced5.news-mezutu.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:20 GMT
content-type: text/html; charset=UTF-8
content-length: 1309
vary: Origin
x-frame-options: DENY
X-Firefox-Spdy: h2
|
|
| bd774ec88d.news-mezutu.com/lands/20/style.css | 136.243.42.50 | | 868 B |
URL bd774ec88d.news-mezutu.com/lands/20/style.css IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
File typeASCII text, with very long lines (2230), with no line terminators Hashd4b3acb7a84d2265bf174f13f93ca4f1 d6595e14ed8549bc39a8977cbd8d5b5b6f5cf221 2932666d3de7135f82ec781a408781352ec79c68998de11047db8e228d063311
GET /lands/20/style.css HTTP/1.1
Host: bd774ec88d.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bd774ec88d.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:20 GMT
content-type: text/css
content-length: 868
last-modified: Thu, 02 May 2024 14:58:42 GMT
etag: "6633aa22-364"
content-encoding: gzip
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| bd774ec88d.news-mezutu.com/revopush.js | 136.243.42.50 | | 8.1 kB |
URL bd774ec88d.news-mezutu.com/revopush.js IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (20417), with no line terminators Hash2c5bbd971d7151a38f9a0fbe8fa83886 8fb8275965ff38c18a2fb5bd1be990c4592b39a0 b75cba17751a5e6c0e183475d1074739a876aa2cf4841e760692e573822db343
GET /revopush.js HTTP/1.1
Host: bd774ec88d.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bd774ec88d.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:20 GMT
content-type: application/javascript; charset=utf-8
content-length: 8110
last-modified: Thu, 02 May 2024 14:58:42 GMT
etag: "6633aa22-1fae"
content-encoding: gzip
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| afee32e583.news-mezutu.com/process.js?id=1218914904&p1=&p2=&p3=&p4= | 136.243.42.50 | | 45 kB |
URL afee32e583.news-mezutu.com/process.js?id=1218914904&p1=&p2=&p3=&p4= IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
File typeJavaScript source, ASCII text, with very long lines (44310) Hash58a93098e361893b2bbaa2b8ae963edd b920e4bf97593b9feb51b3e431aeab25cc837509 7ee54e0e3c2fe1679591625b220acafebc15250a792c1d99b386bab585323777
GET /process.js?id=1218914904&p1=&p2=&p3=&p4= HTTP/1.1
Host: afee32e583.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://afee32e583.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:16 GMT
content-type: application/javascript; charset=utf-8
cache-control: no-cache, no-store, must-revalidate
expires: 0
pragma: no-cache
vary: Origin
X-Firefox-Spdy: h2
|
|
| news-pepafu.com/tds?id=1218914904&p1=&p2=&p3=&p4= | 144.76.106.61 | | 0 B |
URL news-pepafu.com/tds?id=1218914904&p1=&p2=&p3=&p4= IP144.76.106.61:0 ASN#24940 Hetzner Online GmbH
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tds?id=1218914904&p1=&p2=&p3=&p4= HTTP/1.1
Host: news-pepafu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://bd774ec88d.news-mezutu.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
server: nginx
date: Wed, 08 May 2024 17:50:19 GMT
content-length: 0
location: https://eb551f4ea5.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
vary: Origin
x-frame-options: DENY
X-Firefox-Spdy: h2
|
|
| show.revopush.com/api/v1/inpage/show/?uid=171984&subacc=1218914904&sub1=&sub2=&sub3=&sub4=&adult=true&limit=1&traffic=adult | 95.216.46.99 | | 8.9 kB |
URL show.revopush.com/api/v1/inpage/show/?uid=171984&subacc=1218914904&sub1=&sub2=&sub3=&sub4=&adult=true&limit=1&traffic=adult IP95.216.46.99:0 ASN#24940 Hetzner Online GmbH
Hasha964ecc46e916ac4e0c217e953697f4e a68378acfe60436fdffae486549831bcd4f79a2a a15e77809951bb8dccb6c49148ec02761a917c10e58596ef41ea8652db191e37
GET /api/v1/inpage/show/?uid=171984&subacc=1218914904&sub1=&sub2=&sub3=&sub4=&adult=true&limit=1&traffic=adult HTTP/1.1
Host: show.revopush.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://dac13dced5.news-mezutu.com/
Origin: https://dac13dced5.news-mezutu.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:18 GMT
content-type: application/json
accept-ch: Sec-CH-UA, Sec-CH-UA-Model, Sec-CH-UA-Mobile, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Wow64
access-control-allow-origin: https://dac13dced5.news-mezutu.com
vary: Origin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| eb551f4ea5.news-mezutu.com/lands/39/img/icon1.png | 136.243.42.50 | | 7.3 kB |
URL eb551f4ea5.news-mezutu.com/lands/39/img/icon1.png IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
File typePNG image data, 300 x 300, 8-bit/color RGBA, non-interlaced Hash3d0ab5834c8bf7134e4d21fa3288317f c31d1a6b9df206f67ea194f4c424cdc372a423c2 0515ddd9185d263874e7b66bb6d521fcd63b857aac5fed51c08df98026dafe27
GET /lands/39/img/icon1.png HTTP/1.1
Host: eb551f4ea5.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://eb551f4ea5.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:20 GMT
content-type: image/png
content-length: 7252
last-modified: Thu, 02 May 2024 14:58:42 GMT
etag: "6633aa22-1c54"
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| eb551f4ea5.news-mezutu.com/lands/39/img/icon2.png | 136.243.42.50 | | 4.6 kB |
URL eb551f4ea5.news-mezutu.com/lands/39/img/icon2.png IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
File typePNG image data, 300 x 300, 8-bit/color RGBA, non-interlaced Hashc947d439eb93367f1af5b2a3d222f057 5b4c10820d39e624bc6df72a113679da80a8e44e aab564e67c47df65ddcb9c4eaa62cd798a51624a3fded9f9b3a1197b460a79c2
GET /lands/39/img/icon2.png HTTP/1.1
Host: eb551f4ea5.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://eb551f4ea5.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:20 GMT
content-type: image/png
content-length: 4576
last-modified: Thu, 02 May 2024 14:58:42 GMT
etag: "6633aa22-11e0"
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| f30ff2472e.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4= | 136.243.42.50 | | 18 kB |
URL f30ff2472e.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4= IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
Hash9be8d297346dba852b7c247bec80e0fc 42a3b281dd8c62b9feb3c6b24fa37f3e290f42be d386efd4b50198757422031417ef551c016b79e7c19a9f085cff960e5847a33a
GET /?id=1218914904&p1=&p2=&p3=&p4= HTTP/1.1
Host: f30ff2472e.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://d14ed0f939.news-mezutu.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:13 GMT
content-type: text/html; charset=UTF-8
vary: Origin
x-frame-options: DENY
X-Firefox-Spdy: h2
|
|
| bc611abe73.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4= | 136.243.42.50 | | 10 kB |
URL bc611abe73.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4= IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
Hash55fb9f4d784779e12732a0c1fa3ed1e1 c81f4892c3fc1d2edfea23ac37244a267b05beea 3be9375a55a276d4b43e65dcbd83f39c3b3cc3e684548aea71ff3c26ed5c6a3d
GET /?id=1218914904&p1=&p2=&p3=&p4= HTTP/1.1
Host: bc611abe73.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://a3293b6a02.news-mezutu.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:16 GMT
content-type: text/html; charset=UTF-8
vary: Origin
x-frame-options: DENY
X-Firefox-Spdy: h2
|
|
| 072359ff09.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4= | 136.243.42.50 | | 5.9 kB |
URL 072359ff09.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4= IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
Hash8c9ec46157f807ba7a8d60143e160d99 31b4c2f378de0fda3b4d849e1b368c43851fd67d 7c4eb1a81845d4d06229606f0edecceab39c95d910ae3879bf8630589d3097c1
GET /?id=1218914904&p1=&p2=&p3=&p4= HTTP/1.1
Host: 072359ff09.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://29c1f2852f.news-mezutu.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:13 GMT
content-type: text/html; charset=UTF-8
vary: Origin
x-frame-options: DENY
X-Firefox-Spdy: h2
|
|
| d14ed0f939.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4= | 136.243.42.50 | | 86 kB |
URL d14ed0f939.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4= IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
File typeHTML document, Unicode text, UTF-8 text, with very long lines (37323) Hashd1b382b3fbc466a5039ddc2451d460d5 d339121b1188ee45e88d4441cb518f8a31ba640e ca59569ea0e9d779cc42513e4a111817bd34a5c2e1c94ad943d548fa5e0a376e
GET /?id=1218914904&p1=&p2=&p3=&p4= HTTP/1.1
Host: d14ed0f939.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://072359ff09.news-mezutu.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:13 GMT
content-type: text/html; charset=UTF-8
vary: Origin
x-frame-options: DENY
X-Firefox-Spdy: h2
|
|
| eb551f4ea5.news-mezutu.com/lands/39/img/icon8.png | 136.243.42.50 | | 4.1 kB |
URL eb551f4ea5.news-mezutu.com/lands/39/img/icon8.png IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
File typePNG image data, 300 x 300, 8-bit/color RGBA, non-interlaced Hashf92d6474ebc6a3a0b576749cfb4afe98 0f4ce3dcf04873b8098c01d20c44967fb9fce0cc 3a7abff293d71fd8c5a58deacb964b50fe074a6f458575d37abbd367a3a930a1
GET /lands/39/img/icon8.png HTTP/1.1
Host: eb551f4ea5.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://eb551f4ea5.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:20 GMT
content-type: image/png
content-length: 4064
last-modified: Thu, 02 May 2024 14:58:42 GMT
etag: "6633aa22-fe0"
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| cdnstatic.check-tl-ver-24-2.com/ps/tb?id=epbJxbtxQEuIs1LQXyqFHg&sm=space-robot&sub_id=2898&click_id=&nrid=6ae46051ac3cd4238b9e595848187db8&reason=tb_exit&attempt=2 | 172.67.156.121 | | 150 B |
URL cdnstatic.check-tl-ver-24-2.com/ps/tb?id=epbJxbtxQEuIs1LQXyqFHg&sm=space-robot&sub_id=2898&click_id=&nrid=6ae46051ac3cd4238b9e595848187db8&reason=tb_exit&attempt=2 IP172.67.156.121:0
File typeHTML document, ASCII text, with CRLF line terminators Hash17e050e65fcc505eb46083fe7a0b2d6c 733c1afe8443679db6cb7821ec56d7d38e560206 320807819bde31c237eaeb97a2ad87fb2732c68d8c0529bc0fb960939340e503
GET /ps/tb?id=epbJxbtxQEuIs1LQXyqFHg&sm=space-robot&sub_id=2898&click_id=&nrid=6ae46051ac3cd4238b9e595848187db8&reason=tb_exit&attempt=2 HTTP/1.1
Host: cdnstatic.check-tl-ver-24-2.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://oa.check-tl-ver-24-2.com/
Cookie: __psu=825b568b-6f54-47fc-bb5f-eba8423b4799
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 08 May 2024 17:50:10 GMT
content-type: text/html
cache-control: max-age=0, no-cache, no-store, must-revalidate
accept-ch: Sec-CH-UA, Sec-CH-UA-Platform, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Nnb%2BuKGF3nTXYY7Jok38S46M5kVaRW3GC5h5BytKKRzgb7PrsVwViVQsOAHs7i3CCtyq4bauv79fdYCLNeJRLFvloEfZuPCI%2FEdFzsBd9flUzm88YtaFyMoz7k4ZTUuZAsw%2FxKQid5d7G0qGxNk2Bei6"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 880b4a626806b524-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| news-pepafu.com/tds?id=1218914904&p1=&p2=&p3=&p4= | 144.76.106.61 | | 0 B |
URL news-pepafu.com/tds?id=1218914904&p1=&p2=&p3=&p4= IP144.76.106.61:0 ASN#24940 Hetzner Online GmbH
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tds?id=1218914904&p1=&p2=&p3=&p4= HTTP/1.1
Host: news-pepafu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://eb551f4ea5.news-mezutu.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
server: nginx
date: Wed, 08 May 2024 17:50:19 GMT
content-length: 0
location: https://beea4bbe4f.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
vary: Origin
x-frame-options: DENY
X-Firefox-Spdy: h2
|
|
| beea4bbe4f.news-mezutu.com/revopush.js | 136.243.42.50 | | 8.1 kB |
URL beea4bbe4f.news-mezutu.com/revopush.js IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (20417), with no line terminators Hash2c5bbd971d7151a38f9a0fbe8fa83886 8fb8275965ff38c18a2fb5bd1be990c4592b39a0 b75cba17751a5e6c0e183475d1074739a876aa2cf4841e760692e573822db343
GET /revopush.js HTTP/1.1
Host: beea4bbe4f.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://beea4bbe4f.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:21 GMT
content-type: application/javascript; charset=utf-8
content-length: 8110
last-modified: Thu, 02 May 2024 14:58:42 GMT
etag: "6633aa22-1fae"
content-encoding: gzip
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| cdnstatic.check-tl-ver-24-2.com/ps/config.js?id=epbJxbtxQEuIs1LQXyqFHg | 172.67.156.121 | | 46 kB |
URL cdnstatic.check-tl-ver-24-2.com/ps/config.js?id=epbJxbtxQEuIs1LQXyqFHg IP172.67.156.121:0
File typeASCII text, with CRLF line terminators Hashdc65a2fbfc4c76147b8b778b759c8d91 b8374137f0fe797e6a7e58c0c6ef14aa7a6b9855 7e85c285fd983223d07a014d1a96804ba1c8f65fb43238a4fad204350e896958
GET /ps/config.js?id=epbJxbtxQEuIs1LQXyqFHg HTTP/1.1
Host: cdnstatic.check-tl-ver-24-2.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://oa.check-tl-ver-24-2.com/
Cookie: __psu=825b568b-6f54-47fc-bb5f-eba8423b4799
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 08 May 2024 17:50:10 GMT
content-type: application/javascript
cache-control: max-age=0, no-cache, no-store, must-revalidate
accept-ch: Sec-CH-UA, Sec-CH-UA-Platform, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
cf-cache-status: BYPASS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=c0kB8hcN5QJz3kjSVeN9qSvykHt3emUq%2B0tNZdma5OVn%2BmpW0EJ8DTPmP7zm3SlBxJFIYDtPRUKyQO%2F5nHA0miOCwIObXGw7U683BsxzfO0Bt%2FyzdkOJN84n%2BsDSQyNrskU%2FX6BP%2BCg8RwyI9qmU%2FK7c"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880b4a616ea5b524-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| news-pepafu.com/tds?id=1218914904&p1=&p2=&p3=&p4= | 144.76.106.61 | | 0 B |
URL news-pepafu.com/tds?id=1218914904&p1=&p2=&p3=&p4= IP144.76.106.61:0 ASN#24940 Hetzner Online GmbH
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tds?id=1218914904&p1=&p2=&p3=&p4= HTTP/1.1
Host: news-pepafu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://beea4bbe4f.news-mezutu.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
server: nginx
date: Wed, 08 May 2024 17:50:19 GMT
content-length: 0
location: https://f1a56c8d19.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
vary: Origin
x-frame-options: DENY
X-Firefox-Spdy: h2
|
|
| f1a56c8d19.news-mezutu.com/revopush.js | 136.243.42.50 | | 8.1 kB |
URL f1a56c8d19.news-mezutu.com/revopush.js IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (20417), with no line terminators Hash2c5bbd971d7151a38f9a0fbe8fa83886 8fb8275965ff38c18a2fb5bd1be990c4592b39a0 b75cba17751a5e6c0e183475d1074739a876aa2cf4841e760692e573822db343
GET /revopush.js HTTP/1.1
Host: f1a56c8d19.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://f1a56c8d19.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:21 GMT
content-type: application/javascript; charset=utf-8
content-length: 8110
last-modified: Thu, 02 May 2024 14:58:42 GMT
etag: "6633aa22-1fae"
content-encoding: gzip
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| partners-tds.com/WzJQVS | 142.202.51.61 | | 0 B |
IP142.202.51.61:0 ASN#63023 AS-GLOBALTELEHOST
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /WzJQVS HTTP/1.1
Host: partners-tds.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://f1a56c8d19.news-mezutu.com/
Cookie: _subid=376l60j117j6bt; 933eb=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjFcIjoxNzE1MTkwNjExfSxcImNhbXBhaWduc1wiOntcIjFcIjoxNzE1MTkwNjExfSxcInRpbWVcIjoxNzE1MTkwNjExfSJ9.eBUGVDeNH4CwZsOUDJQQTGFummUDBDWkm-b51CPZuw4
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Server: nginx
Date: Wed, 08 May 2024 17:50:19 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-cache, no-store, must-revalidate
Expires: Wed, 08 May 2024 17:50:19 GMT
Location: https://news-pepafu.com/tds?id=1218914904&p1=&p2=&p3=&p4=
Set-Cookie: _subid=376l60j117j6c3; expires=Sat, 08 Jun 2024 17:50:19 GMT; path=/
933eb=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjFcIjoxNzE1MTkwNjExfSxcImNhbXBhaWduc1wiOntcIjFcIjoxNzE1MTkwNjExfSxcInRpbWVcIjoxNzE1MTkwNjExfSJ9.eBUGVDeNH4CwZsOUDJQQTGFummUDBDWkm-b51CPZuw4; expires=Thu, 15 Sep 2078 11:40:38 GMT; path=/
Vary: Accept-Encoding
Access-Control-Allow-Origin: *
|
|
| news-pepafu.com/tds?id=1218914904&p1=&p2=&p3=&p4= | 144.76.106.61 | | 0 B |
URL news-pepafu.com/tds?id=1218914904&p1=&p2=&p3=&p4= IP144.76.106.61:0 ASN#24940 Hetzner Online GmbH
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tds?id=1218914904&p1=&p2=&p3=&p4= HTTP/1.1
Host: news-pepafu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://f1a56c8d19.news-mezutu.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
server: nginx
date: Wed, 08 May 2024 17:50:19 GMT
content-length: 0
location: https://b7c91c0615.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
vary: Origin
x-frame-options: DENY
X-Firefox-Spdy: h2
|
|
| afee32e583.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4= | 136.243.42.50 | | 24 kB |
URL afee32e583.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4= IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
Hashc4ddd8078017a3b9bc5f51a48909447c 6445901f7a9580215699421a29293da9c26ec470 5b475b0cc662be39274a577884519a7d15d2f4bfd05b099b28075e9d142f4cd9
GET /?id=1218914904&p1=&p2=&p3=&p4= HTTP/1.1
Host: afee32e583.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://bc611abe73.news-mezutu.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:16 GMT
content-type: text/html; charset=UTF-8
vary: Origin
x-frame-options: DENY
X-Firefox-Spdy: h2
|
|
| partners-tds.com/WzJQVS | 142.202.51.61 | | 0 B |
IP142.202.51.61:0 ASN#63023 AS-GLOBALTELEHOST
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /WzJQVS HTTP/1.1
Host: partners-tds.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://b7c91c0615.news-mezutu.com/
Cookie: _subid=376l60j117j6c3; 933eb=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjFcIjoxNzE1MTkwNjExfSxcImNhbXBhaWduc1wiOntcIjFcIjoxNzE1MTkwNjExfSxcInRpbWVcIjoxNzE1MTkwNjExfSJ9.eBUGVDeNH4CwZsOUDJQQTGFummUDBDWkm-b51CPZuw4
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Server: nginx
Date: Wed, 08 May 2024 17:50:20 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-cache, no-store, must-revalidate
Expires: Wed, 08 May 2024 17:50:20 GMT
Location: https://news-pepafu.com/tds?id=1218914904&p1=&p2=&p3=&p4=
Set-Cookie: _subid=376l60j117j6ca; expires=Sat, 08 Jun 2024 17:50:20 GMT; path=/
933eb=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjFcIjoxNzE1MTkwNjExfSxcImNhbXBhaWduc1wiOntcIjFcIjoxNzE1MTkwNjExfSxcInRpbWVcIjoxNzE1MTkwNjExfSJ9.eBUGVDeNH4CwZsOUDJQQTGFummUDBDWkm-b51CPZuw4; expires=Thu, 15 Sep 2078 11:40:40 GMT; path=/
Vary: Accept-Encoding
Access-Control-Allow-Origin: *
|
|
| news-pepafu.com/tds?id=1218914904&p1=&p2=&p3=&p4= | 144.76.106.61 | | 0 B |
URL news-pepafu.com/tds?id=1218914904&p1=&p2=&p3=&p4= IP144.76.106.61:0 ASN#24940 Hetzner Online GmbH
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tds?id=1218914904&p1=&p2=&p3=&p4= HTTP/1.1
Host: news-pepafu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://b7c91c0615.news-mezutu.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
server: nginx
date: Wed, 08 May 2024 17:50:20 GMT
content-length: 0
location: https://919ae25c9b.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
vary: Origin
x-frame-options: DENY
X-Firefox-Spdy: h2
|
|
| 919ae25c9b.news-mezutu.com/revopush.js | 136.243.42.50 | | 8.1 kB |
URL 919ae25c9b.news-mezutu.com/revopush.js IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (20417), with no line terminators Hash2c5bbd971d7151a38f9a0fbe8fa83886 8fb8275965ff38c18a2fb5bd1be990c4592b39a0 b75cba17751a5e6c0e183475d1074739a876aa2cf4841e760692e573822db343
GET /revopush.js HTTP/1.1
Host: 919ae25c9b.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://919ae25c9b.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:21 GMT
content-type: application/javascript; charset=utf-8
content-length: 8110
last-modified: Thu, 02 May 2024 14:58:42 GMT
etag: "6633aa22-1fae"
content-encoding: gzip
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| b7c91c0615.news-mezutu.com/process.js?id=1218914904&p1=&p2=&p3=&p4= | 136.243.42.50 | | 45 kB |
URL b7c91c0615.news-mezutu.com/process.js?id=1218914904&p1=&p2=&p3=&p4= IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
File typeJavaScript source, ASCII text, with very long lines (44310) Hash2be2cf33c1e59795dc4050faa87c6966 8f91eb66933235f1b3fc5794483af8984dddafd2 2abc347bda0a1227880552b7078a8de8ea1d486f04199c1e856f327fa0c2c314
GET /process.js?id=1218914904&p1=&p2=&p3=&p4= HTTP/1.1
Host: b7c91c0615.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://b7c91c0615.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:21 GMT
content-type: application/javascript; charset=utf-8
cache-control: no-cache, no-store, must-revalidate
expires: 0
pragma: no-cache
vary: Origin
X-Firefox-Spdy: h2
|
|
| news-pepafu.com/tds?id=1218914904&p1=&p2=&p3=&p4= | 144.76.106.61 | | 0 B |
URL news-pepafu.com/tds?id=1218914904&p1=&p2=&p3=&p4= IP144.76.106.61:0 ASN#24940 Hetzner Online GmbH
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tds?id=1218914904&p1=&p2=&p3=&p4= HTTP/1.1
Host: news-pepafu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://919ae25c9b.news-mezutu.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
server: nginx
date: Wed, 08 May 2024 17:50:20 GMT
content-length: 0
location: https://dd2efc208f.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
vary: Origin
x-frame-options: DENY
X-Firefox-Spdy: h2
|
|
| dd2efc208f.news-mezutu.com/revopush.js | 136.243.42.50 | | 8.1 kB |
URL dd2efc208f.news-mezutu.com/revopush.js IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (20417), with no line terminators Hash2c5bbd971d7151a38f9a0fbe8fa83886 8fb8275965ff38c18a2fb5bd1be990c4592b39a0 b75cba17751a5e6c0e183475d1074739a876aa2cf4841e760692e573822db343
GET /revopush.js HTTP/1.1
Host: dd2efc208f.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dd2efc208f.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:22 GMT
content-type: application/javascript; charset=utf-8
content-length: 8110
last-modified: Thu, 02 May 2024 14:58:42 GMT
etag: "6633aa22-1fae"
content-encoding: gzip
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| bd774ec88d.news-mezutu.com/process.js?id=1218914904&p1=&p2=&p3=&p4= | 136.243.42.50 | | 45 kB |
URL bd774ec88d.news-mezutu.com/process.js?id=1218914904&p1=&p2=&p3=&p4= IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
File typeJavaScript source, ASCII text, with very long lines (44310) Hash252a71d3f5ce860a76702bb03087c184 1646aae816d4feb1c08361cbb1c9dd2e287a0d0a 7a0447822335ca1bcea188b7565f2d7d4a6e8214ed1bf84059eb72e90fa1ca5d
GET /process.js?id=1218914904&p1=&p2=&p3=&p4= HTTP/1.1
Host: bd774ec88d.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bd774ec88d.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:20 GMT
content-type: application/javascript; charset=utf-8
cache-control: no-cache, no-store, must-revalidate
expires: 0
pragma: no-cache
vary: Origin
X-Firefox-Spdy: h2
|
|
| 51a16024fe.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4= | 136.243.42.50 | | 99 kB |
URL 51a16024fe.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4= IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
File typeHTML document, Unicode text, UTF-8 text, with very long lines (44310) Hash9bc8954ad87fb98e1ccfe94d16804bac 8e9e39e645eaf874a8e969489542bc2c67c8901a a852397aa63e040c57162ffb5771159151a3319fc7b22197ef240f26eb10e737
GET /?id=1218914904&p1=&p2=&p3=&p4= HTTP/1.1
Host: 51a16024fe.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://3b7b6ab1f1.news-mezutu.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:17 GMT
content-type: text/html; charset=UTF-8
vary: Origin
x-frame-options: DENY
X-Firefox-Spdy: h2
|
|
| 056d3142ea.news-mezutu.com/revopush.js | 136.243.42.50 | | 8.1 kB |
URL 056d3142ea.news-mezutu.com/revopush.js IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (20417), with no line terminators Hash2c5bbd971d7151a38f9a0fbe8fa83886 8fb8275965ff38c18a2fb5bd1be990c4592b39a0 b75cba17751a5e6c0e183475d1074739a876aa2cf4841e760692e573822db343
GET /revopush.js HTTP/1.1
Host: 056d3142ea.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://056d3142ea.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:22 GMT
content-type: application/javascript; charset=utf-8
content-length: 8110
last-modified: Thu, 02 May 2024 14:58:42 GMT
etag: "6633aa22-1fae"
content-encoding: gzip
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| 056d3142ea.news-mezutu.com/lands/46/sketch.min.js | 136.243.42.50 | | 2.4 kB |
URL 056d3142ea.news-mezutu.com/lands/46/sketch.min.js IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
File typeJavaScript source, ASCII text, with very long lines (4675), with no line terminators Hashed52afed30560dc3e13a88e35a300c18 8714792a53d24b5c641b9536a2d218d75b43b3f9 cad4eff11237dc84f803b46c8529ca9918e4429c38058a053ef5d492c707a711
GET /lands/46/sketch.min.js HTTP/1.1
Host: 056d3142ea.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://056d3142ea.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:22 GMT
content-type: application/javascript; charset=utf-8
content-length: 2379
last-modified: Thu, 02 May 2024 14:58:42 GMT
etag: "6633aa22-94b"
content-encoding: gzip
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| f1a56c8d19.news-mezutu.com/process.js?id=1218914904&p1=&p2=&p3=&p4= | 136.243.42.50 | | 45 kB |
URL f1a56c8d19.news-mezutu.com/process.js?id=1218914904&p1=&p2=&p3=&p4= IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
File typeJavaScript source, ASCII text, with very long lines (44310) Hash4aae2a6784d15a8a5a1f92daefa701f6 a705f8678ea5ca9afdc288ec5f988b3dd5baf487 fd186dda5bf2c7216768370a4ec4c8c75c2442313c1850aff739fbb926f3e170
GET /process.js?id=1218914904&p1=&p2=&p3=&p4= HTTP/1.1
Host: f1a56c8d19.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://f1a56c8d19.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:21 GMT
content-type: application/javascript; charset=utf-8
cache-control: no-cache, no-store, must-revalidate
expires: 0
pragma: no-cache
vary: Origin
X-Firefox-Spdy: h2
|
|
| news-pepafu.com/tds?id=1218914904&p1=&p2=&p3=&p4= | 144.76.106.61 | | 0 B |
URL news-pepafu.com/tds?id=1218914904&p1=&p2=&p3=&p4= IP144.76.106.61:0 ASN#24940 Hetzner Online GmbH
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tds?id=1218914904&p1=&p2=&p3=&p4= HTTP/1.1
Host: news-pepafu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://056d3142ea.news-mezutu.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
server: nginx
date: Wed, 08 May 2024 17:50:20 GMT
content-length: 0
location: https://16016faa47.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
vary: Origin
x-frame-options: DENY
X-Firefox-Spdy: h2
|
|
| 056d3142ea.news-mezutu.com/process.js?id=1218914904&p1=&p2=&p3=&p4= | 136.243.42.50 | | 45 kB |
URL 056d3142ea.news-mezutu.com/process.js?id=1218914904&p1=&p2=&p3=&p4= IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (44310) Hashae3b048f12542fb8b6abef77fcb29610 1af58c086ba435fa6843bdc1f4bb68158b3e7a13 751917f075bea6cd10c659b2ac0e333b9a6463700a15a9cef47eda167fc22651
GET /process.js?id=1218914904&p1=&p2=&p3=&p4= HTTP/1.1
Host: 056d3142ea.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://056d3142ea.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:22 GMT
content-type: application/javascript; charset=utf-8
cache-control: no-cache, no-store, must-revalidate
expires: 0
pragma: no-cache
vary: Origin
X-Firefox-Spdy: h2
|
|
| 16016faa47.news-mezutu.com/revopush.js | 136.243.42.50 | | 8.1 kB |
URL 16016faa47.news-mezutu.com/revopush.js IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (20417), with no line terminators Hash2c5bbd971d7151a38f9a0fbe8fa83886 8fb8275965ff38c18a2fb5bd1be990c4592b39a0 b75cba17751a5e6c0e183475d1074739a876aa2cf4841e760692e573822db343
GET /revopush.js HTTP/1.1
Host: 16016faa47.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://16016faa47.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:22 GMT
content-type: application/javascript; charset=utf-8
content-length: 8110
last-modified: Thu, 02 May 2024 14:58:42 GMT
etag: "6633aa22-1fae"
content-encoding: gzip
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| 16016faa47.news-mezutu.com/lands/36/img/style.css | 136.243.42.50 | | 3.1 kB |
URL 16016faa47.news-mezutu.com/lands/36/img/style.css IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
File typeASCII text, with very long lines (11701), with no line terminators Hashdb606af46bdcca984d60a46183a4525e 28964fac8b2b7889554f32543e69ac68e6f21e2f 8693be57861bf006c70b542234666eaa50f4258856c4e75e0066f1ca589026ae
GET /lands/36/img/style.css HTTP/1.1
Host: 16016faa47.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://16016faa47.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:22 GMT
content-type: text/css
content-length: 3136
last-modified: Thu, 02 May 2024 14:58:42 GMT
etag: "6633aa22-c40"
content-encoding: gzip
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| 16016faa47.news-mezutu.com/lands/36/img/logo.png | 136.243.42.50 | | 7.4 kB |
URL 16016faa47.news-mezutu.com/lands/36/img/logo.png IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
File typePNG image data, 180 x 56, 8-bit/color RGBA, non-interlaced Hash6cd3a78b39a704ee1c84f31c8c4e5808 bb5c81cadfcd60bd5c7b29af2395ef24b11ebb93 4cfbf07b7b4def7ad505f3be44e311c631ffec252a93f031d11356bc1b0c8193
GET /lands/36/img/logo.png HTTP/1.1
Host: 16016faa47.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://16016faa47.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:22 GMT
content-type: image/png
content-length: 7398
last-modified: Thu, 02 May 2024 14:58:42 GMT
etag: "6633aa22-1ce6"
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| 16016faa47.news-mezutu.com/lands/36/img/search-icon.png | 136.243.42.50 | | 461 B |
URL 16016faa47.news-mezutu.com/lands/36/img/search-icon.png IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
File typePNG image data, 28 x 28, 8-bit/color RGBA, non-interlaced Hash71a97f63eeafce6cc8dd4e7b92e77303 e92e36474a69fcf7b932efc581e024a1c25773e5 fc2f527dba6449b1d9a7f17e4e9926039806904f58a7b4278dccf398900371d2
GET /lands/36/img/search-icon.png HTTP/1.1
Host: 16016faa47.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://16016faa47.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:22 GMT
content-type: image/png
content-length: 461
last-modified: Thu, 02 May 2024 14:58:42 GMT
etag: "6633aa22-1cd"
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| 16016faa47.news-mezutu.com/lands/36/img/Spin-1s-80px.gif | 136.243.42.50 | | 31 kB |
URL 16016faa47.news-mezutu.com/lands/36/img/Spin-1s-80px.gif IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
File typeGIF image data, version 89a, 80 x 80 Hash68556766cd260e97fec2b60a9bfaf8c7 26c969371c9a3de360fab6d7a7a3bec2c5d5c99f ef50b84645244197917d80f6bcd6f604dce892ec4cdcdc96f11ea40f4a093676
GET /lands/36/img/Spin-1s-80px.gif HTTP/1.1
Host: 16016faa47.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://16016faa47.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:22 GMT
content-type: image/gif
content-length: 30677
last-modified: Thu, 02 May 2024 14:58:42 GMT
etag: "6633aa22-77d5"
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| 16016faa47.news-mezutu.com/lands/36/img/player-controls-l.png | 136.243.42.50 | | 945 B |
URL 16016faa47.news-mezutu.com/lands/36/img/player-controls-l.png IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
File typePNG image data, 146 x 60, 8-bit gray+alpha, non-interlaced Hash6865c8700b582e4c7848472bb23dd65a c5ea2c514de8f55145550f9589e1e07cda457994 e1f5b32f965cf94fdb788fa9cff4f2f80b34c234f7e9fa9139de890e89438324
GET /lands/36/img/player-controls-l.png HTTP/1.1
Host: 16016faa47.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://16016faa47.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:22 GMT
content-type: image/png
content-length: 945
last-modified: Thu, 02 May 2024 14:58:42 GMT
etag: "6633aa22-3b1"
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| 16016faa47.news-mezutu.com/lands/36/img/player-controls-r.png | 136.243.42.50 | | 408 B |
URL 16016faa47.news-mezutu.com/lands/36/img/player-controls-r.png IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
File typePNG image data, 60 x 60, 8-bit gray+alpha, non-interlaced Hashf0e42db89f7d0994b3723b35eb05a49f b4e08e7b2c525345d86dc2299663915c84a41b2b 13bbdf214a22994e4e0e655c256ab493cc495f15f9c1f08772cad0761625a9be
GET /lands/36/img/player-controls-r.png HTTP/1.1
Host: 16016faa47.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://16016faa47.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:22 GMT
content-type: image/png
content-length: 408
last-modified: Thu, 02 May 2024 14:58:42 GMT
etag: "6633aa22-198"
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| 16016faa47.news-mezutu.com/lands/36/img/player-bg.jpg | 136.243.42.50 | | 11 kB |
URL 16016faa47.news-mezutu.com/lands/36/img/player-bg.jpg IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
Hashd0c6f02d6933f0b93db0942e3e7f3609 bc96b3878d13d0f46aa464e94515f27ad53531b0 7296089ccd9e42b305c5b0398d47a78f900b40225c592c6f1ef23ade5bbe667a
GET /lands/36/img/player-bg.jpg HTTP/1.1
Host: 16016faa47.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://16016faa47.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:22 GMT
content-type: image/jpeg
content-length: 11291
last-modified: Thu, 02 May 2024 14:58:42 GMT
etag: "6633aa22-2c1b"
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| 16016faa47.news-mezutu.com/lands/36/img/pics-1.jpg | 136.243.42.50 | | 9.6 kB |
URL 16016faa47.news-mezutu.com/lands/36/img/pics-1.jpg IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
Hash8374be5c573da988b4d76c1051f8cbc7 c319af79d391edeac2268173798952dd71f0ecf2 41889b3a66aec88fc8a474f19a6c2f6933200524597ccf76f2c9f995687099ea
GET /lands/36/img/pics-1.jpg HTTP/1.1
Host: 16016faa47.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://16016faa47.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:22 GMT
content-type: image/jpeg
content-length: 9604
last-modified: Thu, 02 May 2024 14:58:42 GMT
etag: "6633aa22-2584"
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| 16016faa47.news-mezutu.com/lands/36/img/pics-2.jpg | 136.243.42.50 | | 9.5 kB |
URL 16016faa47.news-mezutu.com/lands/36/img/pics-2.jpg IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
Hashb1444ede1cb63c55f07c4b7cc861ec58 504823696a6990f0c6892721e34a7496cfe4e704 628146e090737199d0b92e0d069cdc8fa95d65391a7e84b7da053dbc0275b2f8
GET /lands/36/img/pics-2.jpg HTTP/1.1
Host: 16016faa47.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://16016faa47.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:22 GMT
content-type: image/jpeg
content-length: 9474
last-modified: Thu, 02 May 2024 14:58:42 GMT
etag: "6633aa22-2502"
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| 16016faa47.news-mezutu.com/lands/36/img/pics-3.jpg | 136.243.42.50 | | 9.4 kB |
URL 16016faa47.news-mezutu.com/lands/36/img/pics-3.jpg IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
Hash76025b7cd7b3e168342e9f6916d8c7f4 bd2a6ea7c9105935c7a616fec2d6d85dbf98bfc2 46eaa0e5c25c663d858a5c65629f960ed17d2fe30b2484f629158e6d6460d775
GET /lands/36/img/pics-3.jpg HTTP/1.1
Host: 16016faa47.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://16016faa47.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:22 GMT
content-type: image/jpeg
content-length: 9413
last-modified: Thu, 02 May 2024 14:58:42 GMT
etag: "6633aa22-24c5"
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| 3f93e5c8d6.news-mezutu.com/process.js?id=1218914904&p1=&p2=&p3=&p4= | 136.243.42.50 | | 54 kB |
URL 3f93e5c8d6.news-mezutu.com/process.js?id=1218914904&p1=&p2=&p3=&p4= IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
Hash42040f2ed2703bf49a06e5d28ec45234 d1d248ae6c46526edb6be9f0d9159b1ac8ebebb0 7ed5422b9f4751faee4b10fc13da2d8ab21f0d63014c0fa45dcf0634815d34f4
GET /process.js?id=1218914904&p1=&p2=&p3=&p4= HTTP/1.1
Host: 3f93e5c8d6.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://3f93e5c8d6.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:19 GMT
content-type: application/javascript; charset=utf-8
cache-control: no-cache, no-store, must-revalidate
expires: 0
pragma: no-cache
vary: Origin
X-Firefox-Spdy: h2
|
|
| 16016faa47.news-mezutu.com/lands/36/img/pics-5.jpg | 136.243.42.50 | | 9.6 kB |
URL 16016faa47.news-mezutu.com/lands/36/img/pics-5.jpg IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
Hash628b98b82d0aca1c1b2155aa5ec51a6a db663b2b85cf8828f3e9c5aa879325bb50e684a0 d7dfe6be5b49bee8bbf743bc58d74af3dc7d0250c89bd6dd7e9ad268c287289d
GET /lands/36/img/pics-5.jpg HTTP/1.1
Host: 16016faa47.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://16016faa47.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:22 GMT
content-type: image/jpeg
content-length: 9557
last-modified: Thu, 02 May 2024 14:58:42 GMT
etag: "6633aa22-2555"
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| 16016faa47.news-mezutu.com/lands/36/img/pics-6.jpg | 136.243.42.50 | | 9.6 kB |
URL 16016faa47.news-mezutu.com/lands/36/img/pics-6.jpg IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
Hasha83d5196e71bd6f9c55ef3e7322e527c 9dbddad413391599552c4d9cc5c9e8a287ef910f 52212d360cbbf493678d8e8bf75c20b7ad4b1d6cf86bf03e1c87fb5b4d6cb818
GET /lands/36/img/pics-6.jpg HTTP/1.1
Host: 16016faa47.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://16016faa47.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:22 GMT
content-type: image/jpeg
content-length: 9620
last-modified: Thu, 02 May 2024 14:58:42 GMT
etag: "6633aa22-2594"
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| 16016faa47.news-mezutu.com/lands/36/img/pics-7.jpg | 136.243.42.50 | | 9.5 kB |
URL 16016faa47.news-mezutu.com/lands/36/img/pics-7.jpg IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
Hash94edfad63e95c79618692b8d8dc20587 f582b7b70443ea1fff184ade49ab560fc8fd3318 0940f729e51d0fb610affca787415657f39a630cc0450d08576f69fd0f71756e
GET /lands/36/img/pics-7.jpg HTTP/1.1
Host: 16016faa47.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://16016faa47.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:22 GMT
content-type: image/jpeg
content-length: 9484
last-modified: Thu, 02 May 2024 14:58:42 GMT
etag: "6633aa22-250c"
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| 16016faa47.news-mezutu.com/lands/36/img/pics-8.jpg | 136.243.42.50 | | 9.8 kB |
URL 16016faa47.news-mezutu.com/lands/36/img/pics-8.jpg IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
Hash2e7eafc3878ee465f96bca0f9d1e1712 c4f353f12542db5d2df3be74dbae890e0430ac6e df67f968a051026a5c43eb3e40b8d02a0c72bc742055526fef7e2655dd837cc1
GET /lands/36/img/pics-8.jpg HTTP/1.1
Host: 16016faa47.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://16016faa47.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:22 GMT
content-type: image/jpeg
content-length: 9750
last-modified: Thu, 02 May 2024 14:58:42 GMT
etag: "6633aa22-2616"
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| 16016faa47.news-mezutu.com/lands/36/img/pics-9.jpg | 136.243.42.50 | | 9.6 kB |
URL 16016faa47.news-mezutu.com/lands/36/img/pics-9.jpg IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
Hashc3af10d166a4447c21f25e4a32383a5d 37a0342d08d6933b3bbfd4063b7ba998c991dd73 963fbe86dc33b1a1ba5c695bf9b74ebde439bc7a9260137121d747cf4cfbdd73
GET /lands/36/img/pics-9.jpg HTTP/1.1
Host: 16016faa47.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://16016faa47.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:22 GMT
content-type: image/jpeg
content-length: 9646
last-modified: Thu, 02 May 2024 14:58:42 GMT
etag: "6633aa22-25ae"
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| 16016faa47.news-mezutu.com/lands/36/img/pics-10.jpg | 136.243.42.50 | | 9.7 kB |
URL 16016faa47.news-mezutu.com/lands/36/img/pics-10.jpg IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
Hash00ad8eccd280144f038e883859beeabe e13583bbe25712e827b8b22b1353c883531f849f 21397b18bd87b564f70404ea1ff41d8d23ba804ed6eea4de323ac1c94e096ada
GET /lands/36/img/pics-10.jpg HTTP/1.1
Host: 16016faa47.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://16016faa47.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:22 GMT
content-type: image/jpeg
content-length: 9681
last-modified: Thu, 02 May 2024 14:58:42 GMT
etag: "6633aa22-25d1"
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| 16016faa47.news-mezutu.com/lands/36/img/pics-11.jpg | 136.243.42.50 | | 9.5 kB |
URL 16016faa47.news-mezutu.com/lands/36/img/pics-11.jpg IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
Hash8611f67b36ff57eaa1060e793b9e6ad4 49f273a5760e7375adb1efc58f0ed2c665da6ae8 de70c6d29629dd9ec1b85e3146390c1019bd608eeb3d7ffdc196627f70ee30b2
GET /lands/36/img/pics-11.jpg HTTP/1.1
Host: 16016faa47.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://16016faa47.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:22 GMT
content-type: image/jpeg
content-length: 9483
last-modified: Thu, 02 May 2024 14:58:42 GMT
etag: "6633aa22-250b"
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| 16016faa47.news-mezutu.com/lands/36/img/pics-12.jpg | 136.243.42.50 | | 9.5 kB |
URL 16016faa47.news-mezutu.com/lands/36/img/pics-12.jpg IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
Hash3971b0cd6849aef8e63c281fe7e53c57 690281f0f9a05a32be18029632240693f7b26270 20a9e9a79f97878e87f805b977eb6046480b734dfd9e90df9f34b22ef484777a
GET /lands/36/img/pics-12.jpg HTTP/1.1
Host: 16016faa47.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://16016faa47.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:22 GMT
content-type: image/jpeg
content-length: 9487
last-modified: Thu, 02 May 2024 14:58:42 GMT
etag: "6633aa22-250f"
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| 16016faa47.news-mezutu.com/lands/36/img/pics-13.jpg | 136.243.42.50 | | 9.4 kB |
URL 16016faa47.news-mezutu.com/lands/36/img/pics-13.jpg IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
Hashcd911694d58b5fb86c94cf7a1d5b530b f32925a79b755d76fdf1ae56fa898ef23d816699 5a8f5f99cb386403813964a7ee271660131e9c50eb5267f932a67ce0f4fb2ea2
GET /lands/36/img/pics-13.jpg HTTP/1.1
Host: 16016faa47.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://16016faa47.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:22 GMT
content-type: image/jpeg
content-length: 9378
last-modified: Thu, 02 May 2024 14:58:42 GMT
etag: "6633aa22-24a2"
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| 16016faa47.news-mezutu.com/lands/36/img/pics-14.jpg | 136.243.42.50 | | 9.5 kB |
URL 16016faa47.news-mezutu.com/lands/36/img/pics-14.jpg IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
Hash4957499f251b620472eb5fe6fd126c22 a237ac15f4b16256f1c49a40ca07ca168dea540c de5d64cc00dd3bc0e0998e274f41bb78de69cae402e53c4f41c0ab8e0af2cd0b
GET /lands/36/img/pics-14.jpg HTTP/1.1
Host: 16016faa47.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://16016faa47.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:22 GMT
content-type: image/jpeg
content-length: 9498
last-modified: Thu, 02 May 2024 14:58:42 GMT
etag: "6633aa22-251a"
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| 919ae25c9b.news-mezutu.com/process.js?id=1218914904&p1=&p2=&p3=&p4= | 136.243.42.50 | | 54 kB |
URL 919ae25c9b.news-mezutu.com/process.js?id=1218914904&p1=&p2=&p3=&p4= IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
Hashdf93eca6562b813dbc5f28c89ce00bca 94b457fea69d24e33c596c8d5313b46fadd73261 73a2ddf9ea5504364e38d70332285373004516d8626066666240a0617a382fd7
GET /process.js?id=1218914904&p1=&p2=&p3=&p4= HTTP/1.1
Host: 919ae25c9b.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://919ae25c9b.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:21 GMT
content-type: application/javascript; charset=utf-8
cache-control: no-cache, no-store, must-revalidate
expires: 0
pragma: no-cache
vary: Origin
X-Firefox-Spdy: h2
|
|
| 16016faa47.news-mezutu.com/lands/36/img/pics-16.jpg | 136.243.42.50 | | 9.6 kB |
URL 16016faa47.news-mezutu.com/lands/36/img/pics-16.jpg IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
Hash700dfe65fca751e5c160aa1ed38c0389 61a7a9ba2a5209bb28b6a36c4b7ba9088f4b2886 8f8c3d5f93cc6dc00172cf203f6b0113819e853de45518cbcee1e68f9e95fbc1
GET /lands/36/img/pics-16.jpg HTTP/1.1
Host: 16016faa47.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://16016faa47.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:22 GMT
content-type: image/jpeg
content-length: 9570
last-modified: Thu, 02 May 2024 14:58:42 GMT
etag: "6633aa22-2562"
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| 16016faa47.news-mezutu.com/lands/36/img/pics-17.jpg | 136.243.42.50 | | 9.6 kB |
URL 16016faa47.news-mezutu.com/lands/36/img/pics-17.jpg IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
Hash3617c828a4589dfd2af8f90e31f92666 0e7a1dbe743c9eaad109659f7b21ab86719b9cd0 f3ab898058b0ebaba11001b5a2b3c5b5db2d7f766000d95abdbfb841fcb16c1f
GET /lands/36/img/pics-17.jpg HTTP/1.1
Host: 16016faa47.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://16016faa47.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:22 GMT
content-type: image/jpeg
content-length: 9595
last-modified: Thu, 02 May 2024 14:58:42 GMT
etag: "6633aa22-257b"
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| 16016faa47.news-mezutu.com/lands/36/img/pics-18.jpg | 136.243.42.50 | | 9.6 kB |
URL 16016faa47.news-mezutu.com/lands/36/img/pics-18.jpg IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
Hash52ada45615791fefe3513b98a28d6c61 334b68a65108b2274dc0d41bbed58d10cbfb41a0 204715e71db20e5daffe8494816412e0998ec0b97b303f16fb4102226c492fa4
GET /lands/36/img/pics-18.jpg HTTP/1.1
Host: 16016faa47.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://16016faa47.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:22 GMT
content-type: image/jpeg
content-length: 9645
last-modified: Thu, 02 May 2024 14:58:42 GMT
etag: "6633aa22-25ad"
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| show.revopush.com/api/v1/inpage/show/?uid=171984&subacc=1218914904&sub1=&sub2=&sub3=&sub4=&adult=true&limit=1&traffic=adult | 95.216.46.99 | | 843 B |
URL show.revopush.com/api/v1/inpage/show/?uid=171984&subacc=1218914904&sub1=&sub2=&sub3=&sub4=&adult=true&limit=1&traffic=adult IP95.216.46.99:0 ASN#24940 Hetzner Online GmbH
Hashbebe697af7934939b282c98eb658e3b8 286a3eab27c47c7e8c6996151b0a65146803205f f90c6d8012bcc13794edc2ea9a6c1515b6aa746b214154fd5d6ba9b95c3ae524
GET /api/v1/inpage/show/?uid=171984&subacc=1218914904&sub1=&sub2=&sub3=&sub4=&adult=true&limit=1&traffic=adult HTTP/1.1
Host: show.revopush.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://056d3142ea.news-mezutu.com/
Origin: https://056d3142ea.news-mezutu.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:21 GMT
content-type: application/json
accept-ch: Sec-CH-UA, Sec-CH-UA-Model, Sec-CH-UA-Mobile, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Wow64
access-control-allow-origin: https://056d3142ea.news-mezutu.com
vary: Origin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| 16016faa47.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4= | 136.243.42.50 | | 10 kB |
URL 16016faa47.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4= IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
File typeHTML document, ASCII text, with very long lines (8854) Hash2cbb4b50253b7b6afac26c86227a1255 c0cda46f1aaa6130240d23f7d6aca10d8dbdc71b ca6d14b31d18a220df0ebde0333920acad94f072ad8791a1bac6d9d2a071fae2
GET /?id=1218914904&p1=&p2=&p3=&p4= HTTP/1.1
Host: 16016faa47.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://056d3142ea.news-mezutu.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:22 GMT
content-type: text/html; charset=UTF-8
vary: Origin
x-frame-options: DENY
X-Firefox-Spdy: h2
|
|
| 34377a24c8.news-mezutu.com/revopush.js | 136.243.42.50 | | 8.1 kB |
URL 34377a24c8.news-mezutu.com/revopush.js IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (20417), with no line terminators Hash2c5bbd971d7151a38f9a0fbe8fa83886 8fb8275965ff38c18a2fb5bd1be990c4592b39a0 b75cba17751a5e6c0e183475d1074739a876aa2cf4841e760692e573822db343
GET /revopush.js HTTP/1.1
Host: 34377a24c8.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://34377a24c8.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:23 GMT
content-type: application/javascript; charset=utf-8
content-length: 8110
last-modified: Thu, 02 May 2024 14:58:42 GMT
etag: "6633aa22-1fae"
content-encoding: gzip
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| show.revopush.com/api/v1/inpage/show/?uid=171984&subacc=1218914904&sub1=&sub2=&sub3=&sub4=&adult=true&limit=1&traffic=adult | 95.216.46.99 | | 588 B |
URL show.revopush.com/api/v1/inpage/show/?uid=171984&subacc=1218914904&sub1=&sub2=&sub3=&sub4=&adult=true&limit=1&traffic=adult IP95.216.46.99:0 ASN#24940 Hetzner Online GmbH
Hash3625fb6000a5264a2bd0eb354965ef74 de0fd35015eaefc803afd017c54ab0b81ecc2fad 532df5e321a50c526873a0d1d2be53600f9fc4da2304a01f9feb2cfb71b6178e
GET /api/v1/inpage/show/?uid=171984&subacc=1218914904&sub1=&sub2=&sub3=&sub4=&adult=true&limit=1&traffic=adult HTTP/1.1
Host: show.revopush.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://16016faa47.news-mezutu.com/
Origin: https://16016faa47.news-mezutu.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:21 GMT
content-type: application/json
accept-ch: Sec-CH-UA, Sec-CH-UA-Model, Sec-CH-UA-Mobile, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Wow64
access-control-allow-origin: https://16016faa47.news-mezutu.com
vary: Origin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| news-pepafu.com/tds?id=1218914904&p1=&p2=&p3=&p4= | 144.76.106.61 | | 0 B |
URL news-pepafu.com/tds?id=1218914904&p1=&p2=&p3=&p4= IP144.76.106.61:0 ASN#24940 Hetzner Online GmbH
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tds?id=1218914904&p1=&p2=&p3=&p4= HTTP/1.1
Host: news-pepafu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://34377a24c8.news-mezutu.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
server: nginx
date: Wed, 08 May 2024 17:50:21 GMT
content-length: 0
location: https://4bdc753dff.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
vary: Origin
x-frame-options: DENY
X-Firefox-Spdy: h2
|
|
| 4bdc753dff.news-mezutu.com/revopush.js | 136.243.42.50 | | 8.1 kB |
URL 4bdc753dff.news-mezutu.com/revopush.js IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (20417), with no line terminators Hash2c5bbd971d7151a38f9a0fbe8fa83886 8fb8275965ff38c18a2fb5bd1be990c4592b39a0 b75cba17751a5e6c0e183475d1074739a876aa2cf4841e760692e573822db343
GET /revopush.js HTTP/1.1
Host: 4bdc753dff.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://4bdc753dff.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:23 GMT
content-type: application/javascript; charset=utf-8
content-length: 8110
last-modified: Thu, 02 May 2024 14:58:42 GMT
etag: "6633aa22-1fae"
content-encoding: gzip
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| partners-tds.com/WzJQVS | 142.202.51.61 | | 0 B |
IP142.202.51.61:0 ASN#63023 AS-GLOBALTELEHOST
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /WzJQVS HTTP/1.1
Host: partners-tds.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://4bdc753dff.news-mezutu.com/
Cookie: _subid=376l60j117j6db; 933eb=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjFcIjoxNzE1MTkwNjExfSxcImNhbXBhaWduc1wiOntcIjFcIjoxNzE1MTkwNjExfSxcInRpbWVcIjoxNzE1MTkwNjExfSJ9.eBUGVDeNH4CwZsOUDJQQTGFummUDBDWkm-b51CPZuw4
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Server: nginx
Date: Wed, 08 May 2024 17:50:21 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-cache, no-store, must-revalidate
Expires: Wed, 08 May 2024 17:50:21 GMT
Location: https://news-pepafu.com/tds?id=1218914904&p1=&p2=&p3=&p4=
Set-Cookie: _subid=376l60j117j6dh; expires=Sat, 08 Jun 2024 17:50:21 GMT; path=/
933eb=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjFcIjoxNzE1MTkwNjExfSxcImNhbXBhaWduc1wiOntcIjFcIjoxNzE1MTkwNjExfSxcInRpbWVcIjoxNzE1MTkwNjExfSJ9.eBUGVDeNH4CwZsOUDJQQTGFummUDBDWkm-b51CPZuw4; expires=Thu, 15 Sep 2078 11:40:42 GMT; path=/
Vary: Accept-Encoding
Access-Control-Allow-Origin: *
|
|
| news-pepafu.com/tds?id=1218914904&p1=&p2=&p3=&p4= | 144.76.106.61 | | 0 B |
URL news-pepafu.com/tds?id=1218914904&p1=&p2=&p3=&p4= IP144.76.106.61:0 ASN#24940 Hetzner Online GmbH
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tds?id=1218914904&p1=&p2=&p3=&p4= HTTP/1.1
Host: news-pepafu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://4bdc753dff.news-mezutu.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
server: nginx
date: Wed, 08 May 2024 17:50:21 GMT
content-length: 0
location: https://cf46275eb2.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
vary: Origin
x-frame-options: DENY
X-Firefox-Spdy: h2
|
|
| cf46275eb2.news-mezutu.com/revopush.js | 136.243.42.50 | | 8.1 kB |
URL cf46275eb2.news-mezutu.com/revopush.js IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (20417), with no line terminators Hash2c5bbd971d7151a38f9a0fbe8fa83886 8fb8275965ff38c18a2fb5bd1be990c4592b39a0 b75cba17751a5e6c0e183475d1074739a876aa2cf4841e760692e573822db343
GET /revopush.js HTTP/1.1
Host: cf46275eb2.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cf46275eb2.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:23 GMT
content-type: application/javascript; charset=utf-8
content-length: 8110
last-modified: Thu, 02 May 2024 14:58:42 GMT
etag: "6633aa22-1fae"
content-encoding: gzip
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| cf46275eb2.news-mezutu.com/lands/48/preloader-43.5794040.gif | 136.243.42.50 | | 7.0 kB |
URL cf46275eb2.news-mezutu.com/lands/48/preloader-43.5794040.gif IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
File typeGIF image data, version 89a, 160 x 160 Hash5794040ee88def220320edd0ed2e2ac9 7ec6d7843172d2bec7c0ed0d7eabed19a800fd7b c1a4896adebc502e9be1248a28bc641ef9a5b75c6bdefa5d704a220c128ee34e
GET /lands/48/preloader-43.5794040.gif HTTP/1.1
Host: cf46275eb2.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cf46275eb2.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:23 GMT
content-type: image/gif
content-length: 7010
last-modified: Thu, 02 May 2024 14:58:42 GMT
etag: "6633aa22-1b62"
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| 4bdc753dff.news-mezutu.com/process.js?id=1218914904&p1=&p2=&p3=&p4= | 136.243.42.50 | | 45 kB |
URL 4bdc753dff.news-mezutu.com/process.js?id=1218914904&p1=&p2=&p3=&p4= IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
File typeJavaScript source, ASCII text, with very long lines (44310) Hash3e0c2565cd34849b460b1bbdc7026d23 4723a0a13412b69ccd96557b44058956a68105e1 f73f3d02ae1841649c6b47177c40b1849a7d41a840419617666d9dcb3ddaa6c9
GET /process.js?id=1218914904&p1=&p2=&p3=&p4= HTTP/1.1
Host: 4bdc753dff.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://4bdc753dff.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:23 GMT
content-type: application/javascript; charset=utf-8
cache-control: no-cache, no-store, must-revalidate
expires: 0
pragma: no-cache
vary: Origin
X-Firefox-Spdy: h2
|
|
| news-pepafu.com/tds?id=1218914904&p1=&p2=&p3=&p4= | 144.76.106.61 | | 0 B |
URL news-pepafu.com/tds?id=1218914904&p1=&p2=&p3=&p4= IP144.76.106.61:0 ASN#24940 Hetzner Online GmbH
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tds?id=1218914904&p1=&p2=&p3=&p4= HTTP/1.1
Host: news-pepafu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://cf46275eb2.news-mezutu.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
server: nginx
date: Wed, 08 May 2024 17:50:22 GMT
content-length: 0
location: https://fdfaf353da.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
vary: Origin
x-frame-options: DENY
X-Firefox-Spdy: h2
|
|
| fdfaf353da.news-mezutu.com/revopush.js | 136.243.42.50 | | 8.1 kB |
URL fdfaf353da.news-mezutu.com/revopush.js IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (20417), with no line terminators Hash2c5bbd971d7151a38f9a0fbe8fa83886 8fb8275965ff38c18a2fb5bd1be990c4592b39a0 b75cba17751a5e6c0e183475d1074739a876aa2cf4841e760692e573822db343
GET /revopush.js HTTP/1.1
Host: fdfaf353da.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fdfaf353da.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:24 GMT
content-type: application/javascript; charset=utf-8
content-length: 8110
last-modified: Thu, 02 May 2024 14:58:42 GMT
etag: "6633aa22-1fae"
content-encoding: gzip
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| fdfaf353da.news-mezutu.com/lands/53/css/style.css | 136.243.42.50 | | 1.3 kB |
URL fdfaf353da.news-mezutu.com/lands/53/css/style.css IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
File typeASCII text, with very long lines (4928), with no line terminators Hash6f2d06d6dbd00d18b9e7eb11ef80081d b86bdf3144b91210a3e04aab9802dba7b677ffe4 4bbe46d55f77d131ea3c70d021bf1e88fcfa1a98b7b89cf8f3f081ffb38fa7f8
GET /lands/53/css/style.css HTTP/1.1
Host: fdfaf353da.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fdfaf353da.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:24 GMT
content-type: text/css
content-length: 1301
last-modified: Thu, 02 May 2024 14:58:42 GMT
etag: "6633aa22-515"
content-encoding: gzip
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| fdfaf353da.news-mezutu.com/lands/53/images/spinning-circles2.svg | 136.243.42.50 | | 503 B |
URL fdfaf353da.news-mezutu.com/lands/53/images/spinning-circles2.svg IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
File typeSVG Scalable Vector Graphics image Hash14e6f9981fa27406176056df2451d27b aa1b6fd6071391d0031bff2d74ae77347ec2fdb4 466d361db2f130d7e3d40a671c935e3e556c3a49567657afee2e44a0a390a84f
GET /lands/53/images/spinning-circles2.svg HTTP/1.1
Host: fdfaf353da.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fdfaf353da.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:24 GMT
content-type: image/svg+xml
content-length: 503
last-modified: Thu, 02 May 2024 14:58:42 GMT
etag: "6633aa22-1f7"
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| partners-tds.com/WzJQVS | 142.202.51.61 | | 0 B |
IP142.202.51.61:0 ASN#63023 AS-GLOBALTELEHOST
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /WzJQVS HTTP/1.1
Host: partners-tds.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fdfaf353da.news-mezutu.com/
Cookie: _subid=376l60j117j6dq; 933eb=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjFcIjoxNzE1MTkwNjExfSxcImNhbXBhaWduc1wiOntcIjFcIjoxNzE1MTkwNjExfSxcInRpbWVcIjoxNzE1MTkwNjExfSJ9.eBUGVDeNH4CwZsOUDJQQTGFummUDBDWkm-b51CPZuw4
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Server: nginx
Date: Wed, 08 May 2024 17:50:22 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-cache, no-store, must-revalidate
Expires: Wed, 08 May 2024 17:50:22 GMT
Location: https://news-pepafu.com/tds?id=1218914904&p1=&p2=&p3=&p4=
Set-Cookie: _subid=376l60j117j6e1; expires=Sat, 08 Jun 2024 17:50:22 GMT; path=/
933eb=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjFcIjoxNzE1MTkwNjExfSxcImNhbXBhaWduc1wiOntcIjFcIjoxNzE1MTkwNjExfSxcInRpbWVcIjoxNzE1MTkwNjExfSJ9.eBUGVDeNH4CwZsOUDJQQTGFummUDBDWkm-b51CPZuw4; expires=Thu, 15 Sep 2078 11:40:44 GMT; path=/
Vary: Accept-Encoding
Access-Control-Allow-Origin: *
|
|
| news-pepafu.com/tds?id=1218914904&p1=&p2=&p3=&p4= | 144.76.106.61 | | 0 B |
URL news-pepafu.com/tds?id=1218914904&p1=&p2=&p3=&p4= IP144.76.106.61:0 ASN#24940 Hetzner Online GmbH
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tds?id=1218914904&p1=&p2=&p3=&p4= HTTP/1.1
Host: news-pepafu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fdfaf353da.news-mezutu.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
server: nginx
date: Wed, 08 May 2024 17:50:22 GMT
content-length: 0
location: https://98edba477a.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
vary: Origin
x-frame-options: DENY
X-Firefox-Spdy: h2
|
|
| 98edba477a.news-mezutu.com/revopush.js | 136.243.42.50 | | 8.1 kB |
URL 98edba477a.news-mezutu.com/revopush.js IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (20417), with no line terminators Hash2c5bbd971d7151a38f9a0fbe8fa83886 8fb8275965ff38c18a2fb5bd1be990c4592b39a0 b75cba17751a5e6c0e183475d1074739a876aa2cf4841e760692e573822db343
GET /revopush.js HTTP/1.1
Host: 98edba477a.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://98edba477a.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:24 GMT
content-type: application/javascript; charset=utf-8
content-length: 8110
last-modified: Thu, 02 May 2024 14:58:42 GMT
etag: "6633aa22-1fae"
content-encoding: gzip
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| fdfaf353da.news-mezutu.com/process.js?id=1218914904&p1=&p2=&p3=&p4= | 136.243.42.50 | | 45 kB |
URL fdfaf353da.news-mezutu.com/process.js?id=1218914904&p1=&p2=&p3=&p4= IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
File typeJavaScript source, ASCII text, with very long lines (44310) Hashb6a8e1d9833657e72a4f1fefecc961b1 73c1a511970f229c99efcdb4cfcb1390687f7da3 31cefa76009cd19bdc637fba938ccf31a91557d7a421c3dc39da860626d84c76
GET /process.js?id=1218914904&p1=&p2=&p3=&p4= HTTP/1.1
Host: fdfaf353da.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fdfaf353da.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:24 GMT
content-type: application/javascript; charset=utf-8
cache-control: no-cache, no-store, must-revalidate
expires: 0
pragma: no-cache
vary: Origin
X-Firefox-Spdy: h2
|
|
| news-pepafu.com/tds?id=1218914904&p1=&p2=&p3=&p4= | 144.76.106.61 | | 0 B |
URL news-pepafu.com/tds?id=1218914904&p1=&p2=&p3=&p4= IP144.76.106.61:0 ASN#24940 Hetzner Online GmbH
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tds?id=1218914904&p1=&p2=&p3=&p4= HTTP/1.1
Host: news-pepafu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://98edba477a.news-mezutu.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
server: nginx
date: Wed, 08 May 2024 17:50:22 GMT
content-length: 0
location: https://092cc8f953.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
vary: Origin
x-frame-options: DENY
X-Firefox-Spdy: h2
|
|
| 092cc8f953.news-mezutu.com/revopush.js | 136.243.42.50 | | 8.1 kB |
URL 092cc8f953.news-mezutu.com/revopush.js IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (20417), with no line terminators Hash2c5bbd971d7151a38f9a0fbe8fa83886 8fb8275965ff38c18a2fb5bd1be990c4592b39a0 b75cba17751a5e6c0e183475d1074739a876aa2cf4841e760692e573822db343
GET /revopush.js HTTP/1.1
Host: 092cc8f953.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://092cc8f953.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:24 GMT
content-type: application/javascript; charset=utf-8
content-length: 8110
last-modified: Thu, 02 May 2024 14:58:42 GMT
etag: "6633aa22-1fae"
content-encoding: gzip
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| 056d3142ea.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4= | 136.243.42.50 | | 2.7 kB |
URL 056d3142ea.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4= IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
File typeHTML document, ASCII text, with very long lines (1334) Hash9113ec0b9a333c0e1680908349d9e41f c8af7ae6db03192e2527db72a36f9183b9f9fc78 b7d757ed32e7b6752acc099d4b8289525a1a8b76991a32df78f241ba2e85d32f
GET /?id=1218914904&p1=&p2=&p3=&p4= HTTP/1.1
Host: 056d3142ea.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://dd2efc208f.news-mezutu.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:22 GMT
content-type: text/html; charset=UTF-8
vary: Origin
x-frame-options: DENY
X-Firefox-Spdy: h2
|
|
| news-pepafu.com/tds?id=1218914904&p1=&p2=&p3=&p4= | 144.76.106.61 | | 0 B |
URL news-pepafu.com/tds?id=1218914904&p1=&p2=&p3=&p4= IP144.76.106.61:0 ASN#24940 Hetzner Online GmbH
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tds?id=1218914904&p1=&p2=&p3=&p4= HTTP/1.1
Host: news-pepafu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://092cc8f953.news-mezutu.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
server: nginx
date: Wed, 08 May 2024 17:50:23 GMT
content-length: 0
location: https://40b2b1a8e3.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
vary: Origin
x-frame-options: DENY
X-Firefox-Spdy: h2
|
|
| e1ee66e1b0.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4= | 136.243.42.50 | | 4.6 kB |
URL e1ee66e1b0.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4= IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
File typeHTML document, ASCII text, with very long lines (2523) Hash4ce101f1291e76430387dc7facff209a aab9768cd0b22873490acc63f7f60ad628626d9f 6061d016db726e206387b2f0df14aff16ef3680915a7e52e5cfeb8038951955a
GET /?id=1218914904&p1=&p2=&p3=&p4= HTTP/1.1
Host: e1ee66e1b0.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://0fa4b29ce4.news-mezutu.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:18 GMT
content-type: text/html; charset=UTF-8
vary: Origin
x-frame-options: DENY
X-Firefox-Spdy: h2
|
|
| 40b2b1a8e3.news-mezutu.com/lands/20/style.css | 136.243.42.50 | | 868 B |
URL 40b2b1a8e3.news-mezutu.com/lands/20/style.css IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
File typeASCII text, with very long lines (2230), with no line terminators Hashd4b3acb7a84d2265bf174f13f93ca4f1 d6595e14ed8549bc39a8977cbd8d5b5b6f5cf221 2932666d3de7135f82ec781a408781352ec79c68998de11047db8e228d063311
GET /lands/20/style.css HTTP/1.1
Host: 40b2b1a8e3.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://40b2b1a8e3.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:25 GMT
content-type: text/css
content-length: 868
last-modified: Thu, 02 May 2024 14:58:42 GMT
etag: "6633aa22-364"
content-encoding: gzip
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| 40b2b1a8e3.news-mezutu.com/revopush.js | 136.243.42.50 | | 8.1 kB |
URL 40b2b1a8e3.news-mezutu.com/revopush.js IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (20417), with no line terminators Hash2c5bbd971d7151a38f9a0fbe8fa83886 8fb8275965ff38c18a2fb5bd1be990c4592b39a0 b75cba17751a5e6c0e183475d1074739a876aa2cf4841e760692e573822db343
GET /revopush.js HTTP/1.1
Host: 40b2b1a8e3.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://40b2b1a8e3.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:25 GMT
content-type: application/javascript; charset=utf-8
content-length: 8110
last-modified: Thu, 02 May 2024 14:58:42 GMT
etag: "6633aa22-1fae"
content-encoding: gzip
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| 919ae25c9b.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4= | 136.243.42.50 | | 8.8 kB |
URL 919ae25c9b.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4= IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
File typeHTML document, ASCII text, with very long lines (7710) Hash2ffe9b4cabaa60587b191d3711ec4cd7 2f7103b5a8ef392af65668a241ba7eed3c2bb0cc fffb63970ebb8531d5dc940371b64cbd45e93d7644398ccaf0e319c872dfed77
GET /?id=1218914904&p1=&p2=&p3=&p4= HTTP/1.1
Host: 919ae25c9b.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://b7c91c0615.news-mezutu.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:21 GMT
content-type: text/html; charset=UTF-8
vary: Origin
x-frame-options: DENY
X-Firefox-Spdy: h2
|
|
| news-pepafu.com/tds?id=1218914904&p1=&p2=&p3=&p4= | 144.76.106.61 | | 0 B |
URL news-pepafu.com/tds?id=1218914904&p1=&p2=&p3=&p4= IP144.76.106.61:0 ASN#24940 Hetzner Online GmbH
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tds?id=1218914904&p1=&p2=&p3=&p4= HTTP/1.1
Host: news-pepafu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://40b2b1a8e3.news-mezutu.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
server: nginx
date: Wed, 08 May 2024 17:50:23 GMT
content-length: 0
location: https://56486d0bea.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
vary: Origin
x-frame-options: DENY
X-Firefox-Spdy: h2
|
|
| dd2efc208f.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4= | 136.243.42.50 | | 130 kB |
URL dd2efc208f.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4= IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
File typeHTML document, ASCII text, with very long lines (64512) Size130 kB (130230 bytes) Hashdf81a5878022d6f1aff3d8fbe8a26277 191dd0709c4de58a208e949fa797ebcf0efda20f a3658db1eb91b181177007dea3550d4923dfca0982bd5548fadf5ce73b553bae
GET /?id=1218914904&p1=&p2=&p3=&p4= HTTP/1.1
Host: dd2efc208f.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://919ae25c9b.news-mezutu.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:22 GMT
content-type: text/html; charset=UTF-8
vary: Origin
x-frame-options: DENY
X-Firefox-Spdy: h2
|
|
| 56486d0bea.news-mezutu.com/lands/46/sketch.min.js | 136.243.42.50 | | 2.4 kB |
URL 56486d0bea.news-mezutu.com/lands/46/sketch.min.js IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
File typeJavaScript source, ASCII text, with very long lines (4675), with no line terminators Hashed52afed30560dc3e13a88e35a300c18 8714792a53d24b5c641b9536a2d218d75b43b3f9 cad4eff11237dc84f803b46c8529ca9918e4429c38058a053ef5d492c707a711
GET /lands/46/sketch.min.js HTTP/1.1
Host: 56486d0bea.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://56486d0bea.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:25 GMT
content-type: application/javascript; charset=utf-8
content-length: 2379
last-modified: Thu, 02 May 2024 14:58:42 GMT
etag: "6633aa22-94b"
content-encoding: gzip
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| partners-tds.com/WzJQVS | 142.202.51.61 | | 0 B |
IP142.202.51.61:0 ASN#63023 AS-GLOBALTELEHOST
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /WzJQVS HTTP/1.1
Host: partners-tds.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://56486d0bea.news-mezutu.com/
Cookie: _subid=376l60j117j6ef; 933eb=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjFcIjoxNzE1MTkwNjExfSxcImNhbXBhaWduc1wiOntcIjFcIjoxNzE1MTkwNjExfSxcInRpbWVcIjoxNzE1MTkwNjExfSJ9.eBUGVDeNH4CwZsOUDJQQTGFummUDBDWkm-b51CPZuw4
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Server: nginx
Date: Wed, 08 May 2024 17:50:23 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-cache, no-store, must-revalidate
Expires: Wed, 08 May 2024 17:50:23 GMT
Location: https://news-pepafu.com/tds?id=1218914904&p1=&p2=&p3=&p4=
Set-Cookie: _subid=376l60j117j6ep; expires=Sat, 08 Jun 2024 17:50:23 GMT; path=/
933eb=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjFcIjoxNzE1MTkwNjExfSxcImNhbXBhaWduc1wiOntcIjFcIjoxNzE1MTkwNjExfSxcInRpbWVcIjoxNzE1MTkwNjExfSJ9.eBUGVDeNH4CwZsOUDJQQTGFummUDBDWkm-b51CPZuw4; expires=Thu, 15 Sep 2078 11:40:46 GMT; path=/
Vary: Accept-Encoding
Access-Control-Allow-Origin: *
|
|
| beea4bbe4f.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4= | 136.243.42.50 | | 54 kB |
URL beea4bbe4f.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4= IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
File typeHTML document, Unicode text, UTF-8 text, with very long lines (44310) Hashca72c582b36574c02e526160d4b442f7 f205de4b5f6df6630478425e5a3095468d0154a3 00d7787a88a413e56e8636d7f12c69a899927fbe79a997398ce82da076e2f466
GET /?id=1218914904&p1=&p2=&p3=&p4= HTTP/1.1
Host: beea4bbe4f.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://eb551f4ea5.news-mezutu.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:20 GMT
content-type: text/html; charset=UTF-8
vary: Origin
x-frame-options: DENY
X-Firefox-Spdy: h2
|
|
| 56249d5b95.news-mezutu.com/lands/36/lp.js | 136.243.42.50 | | 758 B |
URL 56249d5b95.news-mezutu.com/lands/36/lp.js IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (719), with no line terminators Hashdbcc3608581394261613182e95963925 d2c19c094e7916d5f7eac24c9a77179ca3bc3ee9 c27bd18e340c53733156ca9e1e26f811e6243913258b19a3c7a2938554e9fed8
GET /lands/36/lp.js HTTP/1.1
Host: 56249d5b95.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://56249d5b95.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:25 GMT
content-type: application/javascript; charset=utf-8
content-length: 758
last-modified: Thu, 02 May 2024 14:58:42 GMT
etag: "6633aa22-2f6"
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| 3df907167f.news-mezutu.com/lands/53/images/video.gif | 136.243.42.50 | | 254 kB |
URL 3df907167f.news-mezutu.com/lands/53/images/video.gif IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
File typeGIF image data, version 89a, 320 x 180 Size254 kB (254406 bytes) Hashddf4beb22e2868fb6f86f3e53c724f8c 805d5cdd8c57201f240314b36aed12018195d271 eaaaf1132931b3a3318e7ceb43d65b1d6eaa88b413488281de4d24d15857d282
GET /lands/53/images/video.gif HTTP/1.1
Host: 3df907167f.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://3df907167f.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:19 GMT
content-type: image/gif
content-length: 500082
last-modified: Thu, 02 May 2024 14:58:42 GMT
etag: "6633aa22-7a172"
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| 34377a24c8.news-mezutu.com/process.js?id=1218914904&p1=&p2=&p3=&p4= | 136.243.42.50 | | 108 kB |
URL 34377a24c8.news-mezutu.com/process.js?id=1218914904&p1=&p2=&p3=&p4= IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
File typeJavaScript source, ASCII text, with very long lines (44310) Size108 kB (108539 bytes) Hash38fa30dfea86f4c78b81baeba914d1b8 c50fa934a620b85011a7f051cbf8f0d166eef19d 76bb07c3d462985ebcf08190f05561944967c7a38687727767ca28de1fa84fbb
GET /process.js?id=1218914904&p1=&p2=&p3=&p4= HTTP/1.1
Host: 34377a24c8.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://34377a24c8.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:23 GMT
content-type: application/javascript; charset=utf-8
cache-control: no-cache, no-store, must-revalidate
expires: 0
pragma: no-cache
vary: Origin
X-Firefox-Spdy: h2
|
|
| 56249d5b95.news-mezutu.com/lands/36/img/logo.png | 136.243.42.50 | | 7.4 kB |
URL 56249d5b95.news-mezutu.com/lands/36/img/logo.png IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
File typePNG image data, 180 x 56, 8-bit/color RGBA, non-interlaced Hash6cd3a78b39a704ee1c84f31c8c4e5808 bb5c81cadfcd60bd5c7b29af2395ef24b11ebb93 4cfbf07b7b4def7ad505f3be44e311c631ffec252a93f031d11356bc1b0c8193
GET /lands/36/img/logo.png HTTP/1.1
Host: 56249d5b95.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://56249d5b95.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:25 GMT
content-type: image/png
content-length: 7398
last-modified: Thu, 02 May 2024 14:58:42 GMT
etag: "6633aa22-1ce6"
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| 0fa4b29ce4.news-mezutu.com/process.js?id=1218914904&p1=&p2=&p3=&p4= | 136.243.42.50 | | 45 kB |
URL 0fa4b29ce4.news-mezutu.com/process.js?id=1218914904&p1=&p2=&p3=&p4= IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
Hash5857a0cef3d367fd2be4c74a1786e497 9fa8a107a55f440480e18479dd689f4c390ebca0 7fd2e21ae57d598009d5538bb7ca4b625fd570ac68dbc84a8277a74b178767fe
GET /process.js?id=1218914904&p1=&p2=&p3=&p4= HTTP/1.1
Host: 0fa4b29ce4.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://0fa4b29ce4.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:18 GMT
content-type: application/javascript; charset=utf-8
cache-control: no-cache, no-store, must-revalidate
expires: 0
pragma: no-cache
vary: Origin
X-Firefox-Spdy: h2
|
|
| eb551f4ea5.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4= | 136.243.42.50 | | 3.3 kB |
URL eb551f4ea5.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4= IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
File typeHTML document, ASCII text, with very long lines (2215) Hash3397c50020e36caee2069f832021a04c 64a76bfd74ef536dab317831564d8f9ea533ea2b f9a7b6bf566cc50375b9bed10bf7f01d9e6b028db150cc29476b8d2961163a8a
GET /?id=1218914904&p1=&p2=&p3=&p4= HTTP/1.1
Host: eb551f4ea5.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://bd774ec88d.news-mezutu.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:20 GMT
content-type: text/html; charset=UTF-8
vary: Origin
x-frame-options: DENY
X-Firefox-Spdy: h2
|
|
| f1a56c8d19.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4= | 136.243.42.50 | | 91 kB |
URL f1a56c8d19.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4= IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
File typeHTML document, Unicode text, UTF-8 text, with very long lines (63955) Hashdee8812e280afb5897709d74e8849830 6f813f625e707ae5f36c0a20451c674e4c6fe6a6 afec031dd8907ed13ae57d8cd2156fd3f1eaab57cf00f996152f4887693f23ce
GET /?id=1218914904&p1=&p2=&p3=&p4= HTTP/1.1
Host: f1a56c8d19.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://beea4bbe4f.news-mezutu.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:21 GMT
content-type: text/html; charset=UTF-8
vary: Origin
x-frame-options: DENY
X-Firefox-Spdy: h2
|
|
| cf46275eb2.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4= | 136.243.42.50 | | 46 kB |
URL cf46275eb2.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4= IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
Hash02e8fb0a55713bc36b66326dcebc25d8 6f87d3e7bd91817c34b8869f51990ac2d5ad34eb 906f5bdfb59850385707353e3269954fefca9bae580f8cc13a7e8ff9824490a1
GET /?id=1218914904&p1=&p2=&p3=&p4= HTTP/1.1
Host: cf46275eb2.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://4bdc753dff.news-mezutu.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:23 GMT
content-type: text/html; charset=UTF-8
vary: Origin
x-frame-options: DENY
X-Firefox-Spdy: h2
|
|
| 2701cc9aa3.news-mezutu.com/lands/39/img/icon1.png | 136.243.42.50 | | 7.3 kB |
URL 2701cc9aa3.news-mezutu.com/lands/39/img/icon1.png IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
File typePNG image data, 300 x 300, 8-bit/color RGBA, non-interlaced Hash3d0ab5834c8bf7134e4d21fa3288317f c31d1a6b9df206f67ea194f4c424cdc372a423c2 0515ddd9185d263874e7b66bb6d521fcd63b857aac5fed51c08df98026dafe27
GET /lands/39/img/icon1.png HTTP/1.1
Host: 2701cc9aa3.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://2701cc9aa3.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:26 GMT
content-type: image/png
content-length: 7252
last-modified: Thu, 02 May 2024 14:58:42 GMT
etag: "6633aa22-1c54"
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| 2701cc9aa3.news-mezutu.com/lands/39/img/icon2.png | 136.243.42.50 | | 4.6 kB |
URL 2701cc9aa3.news-mezutu.com/lands/39/img/icon2.png IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
File typePNG image data, 300 x 300, 8-bit/color RGBA, non-interlaced Hashc947d439eb93367f1af5b2a3d222f057 5b4c10820d39e624bc6df72a113679da80a8e44e aab564e67c47df65ddcb9c4eaa62cd798a51624a3fded9f9b3a1197b460a79c2
GET /lands/39/img/icon2.png HTTP/1.1
Host: 2701cc9aa3.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://2701cc9aa3.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:26 GMT
content-type: image/png
content-length: 4576
last-modified: Thu, 02 May 2024 14:58:42 GMT
etag: "6633aa22-11e0"
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| 2701cc9aa3.news-mezutu.com/lands/39/img/icon3.png | 136.243.42.50 | | 7.8 kB |
URL 2701cc9aa3.news-mezutu.com/lands/39/img/icon3.png IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
File typePNG image data, 300 x 300, 8-bit/color RGBA, non-interlaced Hash8f3cc830da0b1fdf66bda7d1d734747b 94588f041eec3a78a8780c8124c56a1434a89277 ea3698c32039a115b03c2528cbb29c3ff97bbd49ad1345d5095e98d1fd0ea8ba
GET /lands/39/img/icon3.png HTTP/1.1
Host: 2701cc9aa3.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://2701cc9aa3.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:26 GMT
content-type: image/png
content-length: 7847
last-modified: Thu, 02 May 2024 14:58:42 GMT
etag: "6633aa22-1ea7"
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| fonts.googleapis.com/css?family=Roboto:300,400,700,400i&subset=cyrillic | 142.250.74.106 | | 7.8 kB |
URL fonts.googleapis.com/css?family=Roboto:300,400,700,400i&subset=cyrillic IP142.250.74.106:0
File typegzip compressed data, max compression Hash7fe7a715110bd6e491a8d3c911639981 4c73905991f9ce10db40a535850236e1470ba78f 350f809c6cac50f8630d26a9d571adaf21c8b7bd085603d3532a4f291f0eb207
GET /css?family=Roboto:300,400,700,400i&subset=cyrillic HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://40b2b1a8e3.news-mezutu.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 08 May 2024 17:50:23 GMT
date: Wed, 08 May 2024 17:50:23 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| 2701cc9aa3.news-mezutu.com/lands/39/img/icon5.png | 136.243.42.50 | | 3.3 kB |
URL 2701cc9aa3.news-mezutu.com/lands/39/img/icon5.png IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
File typePNG image data, 500 x 500, 8-bit/color RGBA, non-interlaced Hash1e1a7582b5da63e10485d63f97abc9a0 ca3ee3067f96c732f455bc7c99ec5100194f13f6 196083352a09a19cf2d4364e3ad406606fedb562f2096c1bef373ff2c485b503
GET /lands/39/img/icon5.png HTTP/1.1
Host: 2701cc9aa3.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://2701cc9aa3.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:26 GMT
content-type: image/png
content-length: 3264
last-modified: Thu, 02 May 2024 14:58:42 GMT
etag: "6633aa22-cc0"
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| 2701cc9aa3.news-mezutu.com/lands/39/img/icon7.png | 136.243.42.50 | | 3.3 kB |
URL 2701cc9aa3.news-mezutu.com/lands/39/img/icon7.png IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
File typePNG image data, 500 x 500, 8-bit/color RGBA, non-interlaced Hashb512735542cb07b3b2dcf153a7dfe456 93bde8875412ce266600e2af1c37123483a50376 e9c661cc8adbaa1b9cd4cf65f0ba93a1c24211cb5f94ed0950e0fbc973781718
GET /lands/39/img/icon7.png HTTP/1.1
Host: 2701cc9aa3.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://2701cc9aa3.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:26 GMT
content-type: image/png
content-length: 3283
last-modified: Thu, 02 May 2024 14:58:42 GMT
etag: "6633aa22-cd3"
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| 2701cc9aa3.news-mezutu.com/lands/39/img/icon8.png | 136.243.42.50 | | 4.1 kB |
URL 2701cc9aa3.news-mezutu.com/lands/39/img/icon8.png IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
File typePNG image data, 300 x 300, 8-bit/color RGBA, non-interlaced Hashf92d6474ebc6a3a0b576749cfb4afe98 0f4ce3dcf04873b8098c01d20c44967fb9fce0cc 3a7abff293d71fd8c5a58deacb964b50fe074a6f458575d37abbd367a3a930a1
GET /lands/39/img/icon8.png HTTP/1.1
Host: 2701cc9aa3.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://2701cc9aa3.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:26 GMT
content-type: image/png
content-length: 4064
last-modified: Thu, 02 May 2024 14:58:42 GMT
etag: "6633aa22-fe0"
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| 34377a24c8.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4= | 136.243.42.50 | | 8.8 kB |
URL 34377a24c8.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4= IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
File typeHTML document, ASCII text, with very long lines (7710) Hash6a32e320da9890a8bb3771acacbd4012 8513627f2c86b4f889a0b564346259ad3ca4db94 b0d674c811b25d6c24316e7c91ce575125f701c178b07e3f51ab06e99d5c584c
GET /?id=1218914904&p1=&p2=&p3=&p4= HTTP/1.1
Host: 34377a24c8.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://16016faa47.news-mezutu.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:22 GMT
content-type: text/html; charset=UTF-8
vary: Origin
x-frame-options: DENY
X-Firefox-Spdy: h2
|
|
| news-pepafu.com/tds?id=1218914904&p1=&p2=&p3=&p4= | 144.76.106.61 | | 0 B |
URL news-pepafu.com/tds?id=1218914904&p1=&p2=&p3=&p4= IP144.76.106.61:0 ASN#24940 Hetzner Online GmbH
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tds?id=1218914904&p1=&p2=&p3=&p4= HTTP/1.1
Host: news-pepafu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://2701cc9aa3.news-mezutu.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
server: nginx
date: Wed, 08 May 2024 17:50:24 GMT
content-length: 0
location: https://4f42cb09f7.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
vary: Origin
x-frame-options: DENY
X-Firefox-Spdy: h2
|
|
| 4f42cb09f7.news-mezutu.com/revopush.js | 136.243.42.50 | | 8.1 kB |
URL 4f42cb09f7.news-mezutu.com/revopush.js IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (20417), with no line terminators Hash2c5bbd971d7151a38f9a0fbe8fa83886 8fb8275965ff38c18a2fb5bd1be990c4592b39a0 b75cba17751a5e6c0e183475d1074739a876aa2cf4841e760692e573822db343
GET /revopush.js HTTP/1.1
Host: 4f42cb09f7.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://4f42cb09f7.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:26 GMT
content-type: application/javascript; charset=utf-8
content-length: 8110
last-modified: Thu, 02 May 2024 14:58:42 GMT
etag: "6633aa22-1fae"
content-encoding: gzip
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| 4f42cb09f7.news-mezutu.com/lands/48/preloader-43.5794040.gif | 136.243.42.50 | | 7.0 kB |
URL 4f42cb09f7.news-mezutu.com/lands/48/preloader-43.5794040.gif IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
File typeGIF image data, version 89a, 160 x 160 Hash5794040ee88def220320edd0ed2e2ac9 7ec6d7843172d2bec7c0ed0d7eabed19a800fd7b c1a4896adebc502e9be1248a28bc641ef9a5b75c6bdefa5d704a220c128ee34e
GET /lands/48/preloader-43.5794040.gif HTTP/1.1
Host: 4f42cb09f7.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://4f42cb09f7.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:26 GMT
content-type: image/gif
content-length: 7010
last-modified: Thu, 02 May 2024 14:58:42 GMT
etag: "6633aa22-1b62"
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| 2701cc9aa3.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4= | 136.243.42.50 | | 3.3 kB |
URL 2701cc9aa3.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4= IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
File typeHTML document, ASCII text, with very long lines (2215) Hash09e18b848c282c2686806e828f5d2c7c 1f5458019665725de52cacb630b439283578483b c183fd29b9c461f4e154e89f0f989e55b4b490b7b870070c19c348cdb3dacce1
GET /?id=1218914904&p1=&p2=&p3=&p4= HTTP/1.1
Host: 2701cc9aa3.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://56249d5b95.news-mezutu.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:25 GMT
content-type: text/html; charset=UTF-8
vary: Origin
x-frame-options: DENY
X-Firefox-Spdy: h2
|
|
| b7c91c0615.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4= | 136.243.42.50 | | 136 kB |
URL b7c91c0615.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4= IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
File typeHTML document, Unicode text, UTF-8 text, with very long lines (63955) Size136 kB (135972 bytes) Hashdd313d3291037431dc28d3d120efdbbf 10acf11e96c90b2b809f01f5eea8de12e5786944 3f7e82dfc09b16c0720ea66c9cce8c7c71e10c6ed8a46dbe6947ed8bbbee1175
GET /?id=1218914904&p1=&p2=&p3=&p4= HTTP/1.1
Host: b7c91c0615.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://f1a56c8d19.news-mezutu.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:21 GMT
content-type: text/html; charset=UTF-8
vary: Origin
x-frame-options: DENY
X-Firefox-Spdy: h2
|
|
| ecb8190182.news-mezutu.com/revopush.js | 136.243.42.50 | | 8.1 kB |
URL ecb8190182.news-mezutu.com/revopush.js IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (20417), with no line terminators Hash2c5bbd971d7151a38f9a0fbe8fa83886 8fb8275965ff38c18a2fb5bd1be990c4592b39a0 b75cba17751a5e6c0e183475d1074739a876aa2cf4841e760692e573822db343
GET /revopush.js HTTP/1.1
Host: ecb8190182.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ecb8190182.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:26 GMT
content-type: application/javascript; charset=utf-8
content-length: 8110
last-modified: Thu, 02 May 2024 14:58:42 GMT
etag: "6633aa22-1fae"
content-encoding: gzip
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| partners-tds.com/WzJQVS | 142.202.51.61 | | 0 B |
IP142.202.51.61:0 ASN#63023 AS-GLOBALTELEHOST
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /WzJQVS HTTP/1.1
Host: partners-tds.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ecb8190182.news-mezutu.com/
Cookie: _subid=376l60j117j6f8; 933eb=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjFcIjoxNzE1MTkwNjExfSxcImNhbXBhaWduc1wiOntcIjFcIjoxNzE1MTkwNjExfSxcInRpbWVcIjoxNzE1MTkwNjExfSJ9.eBUGVDeNH4CwZsOUDJQQTGFummUDBDWkm-b51CPZuw4
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Server: nginx
Date: Wed, 08 May 2024 17:50:24 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-cache, no-store, must-revalidate
Expires: Wed, 08 May 2024 17:50:24 GMT
Location: https://news-pepafu.com/tds?id=1218914904&p1=&p2=&p3=&p4=
Set-Cookie: _subid=376l60j117j6fc; expires=Sat, 08 Jun 2024 17:50:24 GMT; path=/
933eb=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjFcIjoxNzE1MTkwNjExfSxcImNhbXBhaWduc1wiOntcIjFcIjoxNzE1MTkwNjExfSxcInRpbWVcIjoxNzE1MTkwNjExfSJ9.eBUGVDeNH4CwZsOUDJQQTGFummUDBDWkm-b51CPZuw4; expires=Thu, 15 Sep 2078 11:40:48 GMT; path=/
Vary: Accept-Encoding
Access-Control-Allow-Origin: *
|
|
| news-pepafu.com/tds?id=1218914904&p1=&p2=&p3=&p4= | 144.76.106.61 | | 0 B |
URL news-pepafu.com/tds?id=1218914904&p1=&p2=&p3=&p4= IP144.76.106.61:0 ASN#24940 Hetzner Online GmbH
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tds?id=1218914904&p1=&p2=&p3=&p4= HTTP/1.1
Host: news-pepafu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://ecb8190182.news-mezutu.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
server: nginx
date: Wed, 08 May 2024 17:50:25 GMT
content-length: 0
location: https://2556e149fb.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
vary: Origin
x-frame-options: DENY
X-Firefox-Spdy: h2
|
|
| 560f50f19b.news-mezutu.com/process.js?id=1218914904&p1=&p2=&p3=&p4= | 136.243.42.50 | | 53 kB |
URL 560f50f19b.news-mezutu.com/process.js?id=1218914904&p1=&p2=&p3=&p4= IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
Hash2bf86d70202de9c4d25f70aaa667c500 e32fe00805b480f3847b153b9ffbe833597ca1c9 c161ed57642f50e90e36586b454bbf17a5742b4f3496b1caf4ad89acf77c383b
GET /process.js?id=1218914904&p1=&p2=&p3=&p4= HTTP/1.1
Host: 560f50f19b.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://560f50f19b.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:18 GMT
content-type: application/javascript; charset=utf-8
cache-control: no-cache, no-store, must-revalidate
expires: 0
pragma: no-cache
vary: Origin
X-Firefox-Spdy: h2
|
|
| partners-tds.com/WzJQVS | 142.202.51.61 | | 0 B |
IP142.202.51.61:0 ASN#63023 AS-GLOBALTELEHOST
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /WzJQVS HTTP/1.1
Host: partners-tds.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://2556e149fb.news-mezutu.com/
Cookie: _subid=376l60j117j6fc; 933eb=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjFcIjoxNzE1MTkwNjExfSxcImNhbXBhaWduc1wiOntcIjFcIjoxNzE1MTkwNjExfSxcInRpbWVcIjoxNzE1MTkwNjExfSJ9.eBUGVDeNH4CwZsOUDJQQTGFummUDBDWkm-b51CPZuw4
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Server: nginx
Date: Wed, 08 May 2024 17:50:25 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-cache, no-store, must-revalidate
Expires: Wed, 08 May 2024 17:50:25 GMT
Location: https://news-pepafu.com/tds?id=1218914904&p1=&p2=&p3=&p4=
Set-Cookie: _subid=376l60j117j6fh; expires=Sat, 08 Jun 2024 17:50:25 GMT; path=/
933eb=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjFcIjoxNzE1MTkwNjExfSxcImNhbXBhaWduc1wiOntcIjFcIjoxNzE1MTkwNjExfSxcInRpbWVcIjoxNzE1MTkwNjExfSJ9.eBUGVDeNH4CwZsOUDJQQTGFummUDBDWkm-b51CPZuw4; expires=Thu, 15 Sep 2078 11:40:50 GMT; path=/
Vary: Accept-Encoding
Access-Control-Allow-Origin: *
|
|
| news-pepafu.com/tds?id=1218914904&p1=&p2=&p3=&p4= | 144.76.106.61 | | 0 B |
URL news-pepafu.com/tds?id=1218914904&p1=&p2=&p3=&p4= IP144.76.106.61:0 ASN#24940 Hetzner Online GmbH
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tds?id=1218914904&p1=&p2=&p3=&p4= HTTP/1.1
Host: news-pepafu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://2556e149fb.news-mezutu.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
server: nginx
date: Wed, 08 May 2024 17:50:25 GMT
content-length: 0
location: https://eafe221e11.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
vary: Origin
x-frame-options: DENY
X-Firefox-Spdy: h2
|
|
| 4f42cb09f7.news-mezutu.com/process.js?id=1218914904&p1=&p2=&p3=&p4= | 136.243.42.50 | | 53 kB |
URL 4f42cb09f7.news-mezutu.com/process.js?id=1218914904&p1=&p2=&p3=&p4= IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
Hashd5776cebf1618edcaaa2d773c46e311b d95353e3fb5622e0a81fc55539d12a58efdab32f e7de717ba6699a6922a4d17904320f685f5691210c4d5f8eca242999890015a0
GET /process.js?id=1218914904&p1=&p2=&p3=&p4= HTTP/1.1
Host: 4f42cb09f7.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://4f42cb09f7.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:26 GMT
content-type: application/javascript; charset=utf-8
cache-control: no-cache, no-store, must-revalidate
expires: 0
pragma: no-cache
vary: Origin
X-Firefox-Spdy: h2
|
|
| partners-tds.com/WzJQVS | 142.202.51.61 | | 0 B |
IP142.202.51.61:0 ASN#63023 AS-GLOBALTELEHOST
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /WzJQVS HTTP/1.1
Host: partners-tds.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://eafe221e11.news-mezutu.com/
Cookie: _subid=376l60j117j6fh; 933eb=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjFcIjoxNzE1MTkwNjExfSxcImNhbXBhaWduc1wiOntcIjFcIjoxNzE1MTkwNjExfSxcInRpbWVcIjoxNzE1MTkwNjExfSJ9.eBUGVDeNH4CwZsOUDJQQTGFummUDBDWkm-b51CPZuw4
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Server: nginx
Date: Wed, 08 May 2024 17:50:25 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-cache, no-store, must-revalidate
Expires: Wed, 08 May 2024 17:50:25 GMT
Location: https://news-pepafu.com/tds?id=1218914904&p1=&p2=&p3=&p4=
Set-Cookie: _subid=376l60j117j6fn; expires=Sat, 08 Jun 2024 17:50:25 GMT; path=/
933eb=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjFcIjoxNzE1MTkwNjExfSxcImNhbXBhaWduc1wiOntcIjFcIjoxNzE1MTkwNjExfSxcInRpbWVcIjoxNzE1MTkwNjExfSJ9.eBUGVDeNH4CwZsOUDJQQTGFummUDBDWkm-b51CPZuw4; expires=Thu, 15 Sep 2078 11:40:50 GMT; path=/
Vary: Accept-Encoding
Access-Control-Allow-Origin: *
|
|
| news-pepafu.com/tds?id=1218914904&p1=&p2=&p3=&p4= | 144.76.106.61 | | 0 B |
URL news-pepafu.com/tds?id=1218914904&p1=&p2=&p3=&p4= IP144.76.106.61:0 ASN#24940 Hetzner Online GmbH
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tds?id=1218914904&p1=&p2=&p3=&p4= HTTP/1.1
Host: news-pepafu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://eafe221e11.news-mezutu.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
server: nginx
date: Wed, 08 May 2024 17:50:25 GMT
content-length: 0
location: https://6df59d0775.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
vary: Origin
x-frame-options: DENY
X-Firefox-Spdy: h2
|
|
| 6df59d0775.news-mezutu.com/revopush.js | 136.243.42.50 | | 8.1 kB |
URL 6df59d0775.news-mezutu.com/revopush.js IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (20417), with no line terminators Hash2c5bbd971d7151a38f9a0fbe8fa83886 8fb8275965ff38c18a2fb5bd1be990c4592b39a0 b75cba17751a5e6c0e183475d1074739a876aa2cf4841e760692e573822db343
GET /revopush.js HTTP/1.1
Host: 6df59d0775.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://6df59d0775.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:27 GMT
content-type: application/javascript; charset=utf-8
content-length: 8110
last-modified: Thu, 02 May 2024 14:58:42 GMT
etag: "6633aa22-1fae"
content-encoding: gzip
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| 6df59d0775.news-mezutu.com/lands/48/preloader-43.5794040.gif | 136.243.42.50 | | 7.0 kB |
URL 6df59d0775.news-mezutu.com/lands/48/preloader-43.5794040.gif IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
File typeGIF image data, version 89a, 160 x 160 Hash5794040ee88def220320edd0ed2e2ac9 7ec6d7843172d2bec7c0ed0d7eabed19a800fd7b c1a4896adebc502e9be1248a28bc641ef9a5b75c6bdefa5d704a220c128ee34e
GET /lands/48/preloader-43.5794040.gif HTTP/1.1
Host: 6df59d0775.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://6df59d0775.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:27 GMT
content-type: image/gif
content-length: 7010
last-modified: Thu, 02 May 2024 14:58:42 GMT
etag: "6633aa22-1b62"
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| partners-tds.com/WzJQVS | 142.202.51.61 | | 0 B |
IP142.202.51.61:0 ASN#63023 AS-GLOBALTELEHOST
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /WzJQVS HTTP/1.1
Host: partners-tds.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://6df59d0775.news-mezutu.com/
Cookie: _subid=376l60j117j6fn; 933eb=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjFcIjoxNzE1MTkwNjExfSxcImNhbXBhaWduc1wiOntcIjFcIjoxNzE1MTkwNjExfSxcInRpbWVcIjoxNzE1MTkwNjExfSJ9.eBUGVDeNH4CwZsOUDJQQTGFummUDBDWkm-b51CPZuw4
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Server: nginx
Date: Wed, 08 May 2024 17:50:25 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-cache, no-store, must-revalidate
Expires: Wed, 08 May 2024 17:50:25 GMT
Location: https://news-pepafu.com/tds?id=1218914904&p1=&p2=&p3=&p4=
Set-Cookie: _subid=376l60j117j6fq; expires=Sat, 08 Jun 2024 17:50:25 GMT; path=/
933eb=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjFcIjoxNzE1MTkwNjExfSxcImNhbXBhaWduc1wiOntcIjFcIjoxNzE1MTkwNjExfSxcInRpbWVcIjoxNzE1MTkwNjExfSJ9.eBUGVDeNH4CwZsOUDJQQTGFummUDBDWkm-b51CPZuw4; expires=Thu, 15 Sep 2078 11:40:50 GMT; path=/
Vary: Accept-Encoding
Access-Control-Allow-Origin: *
|
|
| news-pepafu.com/tds?id=1218914904&p1=&p2=&p3=&p4= | 144.76.106.61 | | 0 B |
URL news-pepafu.com/tds?id=1218914904&p1=&p2=&p3=&p4= IP144.76.106.61:0 ASN#24940 Hetzner Online GmbH
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tds?id=1218914904&p1=&p2=&p3=&p4= HTTP/1.1
Host: news-pepafu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://6df59d0775.news-mezutu.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
server: nginx
date: Wed, 08 May 2024 17:50:25 GMT
content-length: 0
location: https://7104055fc7.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
vary: Origin
x-frame-options: DENY
X-Firefox-Spdy: h2
|
|
| 7104055fc7.news-mezutu.com/lands/36/lp.js | 136.243.42.50 | | 758 B |
URL 7104055fc7.news-mezutu.com/lands/36/lp.js IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (719), with no line terminators Hashdbcc3608581394261613182e95963925 d2c19c094e7916d5f7eac24c9a77179ca3bc3ee9 c27bd18e340c53733156ca9e1e26f811e6243913258b19a3c7a2938554e9fed8
GET /lands/36/lp.js HTTP/1.1
Host: 7104055fc7.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://7104055fc7.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:27 GMT
content-type: application/javascript; charset=utf-8
content-length: 758
last-modified: Thu, 02 May 2024 14:58:42 GMT
etag: "6633aa22-2f6"
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| dac13dced5.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4= | 136.243.42.50 | | 56 kB |
URL dac13dced5.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4= IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
Hash9f1732e91760899ab787e0dc9369b46f 12a5de01cca191c39d60191538f1754bae7b8dc9 398c78f94c80bcdb536a3495ee4c73a08b1af9033bf40f0e86cf7ae68a40c170
GET /?id=1218914904&p1=&p2=&p3=&p4= HTTP/1.1
Host: dac13dced5.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://3f93e5c8d6.news-mezutu.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:20 GMT
content-type: text/html; charset=UTF-8
vary: Origin
x-frame-options: DENY
X-Firefox-Spdy: h2
|
|
| 98edba477a.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4= | 136.243.42.50 | | 13 kB |
URL 98edba477a.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4= IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
Hash2fa381b52b7e5e90b5253cd83ef58e93 37cf26d74174c3cb3f0dc90267f10da0eb3abb7d 36ed52564cb8114d43fa2736699627948ff967edf607eba06ebfe302eb6b305f
GET /?id=1218914904&p1=&p2=&p3=&p4= HTTP/1.1
Host: 98edba477a.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fdfaf353da.news-mezutu.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:24 GMT
content-type: text/html; charset=UTF-8
vary: Origin
x-frame-options: DENY
X-Firefox-Spdy: h2
|
|
| ecb8190182.news-mezutu.com/process.js?id=1218914904&p1=&p2=&p3=&p4= | 136.243.42.50 | | 62 kB |
URL ecb8190182.news-mezutu.com/process.js?id=1218914904&p1=&p2=&p3=&p4= IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
Hash9755b4a0d5e9f3321a1d3ebc2fb98395 82aee7fc60e9ceaa12c15b7d130a9bd722f80371 d93cebcc858e5e3f610cc2e1fc9b56a1005d9b8959a7f7226c0db134e990ccaa
GET /process.js?id=1218914904&p1=&p2=&p3=&p4= HTTP/1.1
Host: ecb8190182.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ecb8190182.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:26 GMT
content-type: application/javascript; charset=utf-8
cache-control: no-cache, no-store, must-revalidate
expires: 0
pragma: no-cache
vary: Origin
X-Firefox-Spdy: h2
|
|
| 7104055fc7.news-mezutu.com/lands/36/img/search-icon.png | 136.243.42.50 | | 461 B |
URL 7104055fc7.news-mezutu.com/lands/36/img/search-icon.png IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
File typePNG image data, 28 x 28, 8-bit/color RGBA, non-interlaced Hash71a97f63eeafce6cc8dd4e7b92e77303 e92e36474a69fcf7b932efc581e024a1c25773e5 fc2f527dba6449b1d9a7f17e4e9926039806904f58a7b4278dccf398900371d2
GET /lands/36/img/search-icon.png HTTP/1.1
Host: 7104055fc7.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://7104055fc7.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:27 GMT
content-type: image/png
content-length: 461
last-modified: Thu, 02 May 2024 14:58:42 GMT
etag: "6633aa22-1cd"
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| 7104055fc7.news-mezutu.com/lands/36/img/Spin-1s-80px.gif | 136.243.42.50 | | 31 kB |
URL 7104055fc7.news-mezutu.com/lands/36/img/Spin-1s-80px.gif IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
File typeGIF image data, version 89a, 80 x 80 Hash68556766cd260e97fec2b60a9bfaf8c7 26c969371c9a3de360fab6d7a7a3bec2c5d5c99f ef50b84645244197917d80f6bcd6f604dce892ec4cdcdc96f11ea40f4a093676
GET /lands/36/img/Spin-1s-80px.gif HTTP/1.1
Host: 7104055fc7.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://7104055fc7.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:27 GMT
content-type: image/gif
content-length: 30677
last-modified: Thu, 02 May 2024 14:58:42 GMT
etag: "6633aa22-77d5"
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| 7104055fc7.news-mezutu.com/lands/36/img/player-controls-l.png | 136.243.42.50 | | 945 B |
URL 7104055fc7.news-mezutu.com/lands/36/img/player-controls-l.png IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
File typePNG image data, 146 x 60, 8-bit gray+alpha, non-interlaced Hash6865c8700b582e4c7848472bb23dd65a c5ea2c514de8f55145550f9589e1e07cda457994 e1f5b32f965cf94fdb788fa9cff4f2f80b34c234f7e9fa9139de890e89438324
GET /lands/36/img/player-controls-l.png HTTP/1.1
Host: 7104055fc7.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://7104055fc7.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:27 GMT
content-type: image/png
content-length: 945
last-modified: Thu, 02 May 2024 14:58:42 GMT
etag: "6633aa22-3b1"
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| 7104055fc7.news-mezutu.com/lands/36/img/player-controls-r.png | 136.243.42.50 | | 408 B |
URL 7104055fc7.news-mezutu.com/lands/36/img/player-controls-r.png IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
File typePNG image data, 60 x 60, 8-bit gray+alpha, non-interlaced Hashf0e42db89f7d0994b3723b35eb05a49f b4e08e7b2c525345d86dc2299663915c84a41b2b 13bbdf214a22994e4e0e655c256ab493cc495f15f9c1f08772cad0761625a9be
GET /lands/36/img/player-controls-r.png HTTP/1.1
Host: 7104055fc7.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://7104055fc7.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:27 GMT
content-type: image/png
content-length: 408
last-modified: Thu, 02 May 2024 14:58:42 GMT
etag: "6633aa22-198"
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| 7104055fc7.news-mezutu.com/lands/36/img/player-bg.jpg | 136.243.42.50 | | 11 kB |
URL 7104055fc7.news-mezutu.com/lands/36/img/player-bg.jpg IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
Hashd0c6f02d6933f0b93db0942e3e7f3609 bc96b3878d13d0f46aa464e94515f27ad53531b0 7296089ccd9e42b305c5b0398d47a78f900b40225c592c6f1ef23ade5bbe667a
GET /lands/36/img/player-bg.jpg HTTP/1.1
Host: 7104055fc7.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://7104055fc7.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:27 GMT
content-type: image/jpeg
content-length: 11291
last-modified: Thu, 02 May 2024 14:58:42 GMT
etag: "6633aa22-2c1b"
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| 7104055fc7.news-mezutu.com/lands/36/img/pics-1.jpg | 136.243.42.50 | | 9.6 kB |
URL 7104055fc7.news-mezutu.com/lands/36/img/pics-1.jpg IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
Hash8374be5c573da988b4d76c1051f8cbc7 c319af79d391edeac2268173798952dd71f0ecf2 41889b3a66aec88fc8a474f19a6c2f6933200524597ccf76f2c9f995687099ea
GET /lands/36/img/pics-1.jpg HTTP/1.1
Host: 7104055fc7.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://7104055fc7.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:27 GMT
content-type: image/jpeg
content-length: 9604
last-modified: Thu, 02 May 2024 14:58:42 GMT
etag: "6633aa22-2584"
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| 7104055fc7.news-mezutu.com/lands/36/img/pics-2.jpg | 136.243.42.50 | | 9.5 kB |
URL 7104055fc7.news-mezutu.com/lands/36/img/pics-2.jpg IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
Hashb1444ede1cb63c55f07c4b7cc861ec58 504823696a6990f0c6892721e34a7496cfe4e704 628146e090737199d0b92e0d069cdc8fa95d65391a7e84b7da053dbc0275b2f8
GET /lands/36/img/pics-2.jpg HTTP/1.1
Host: 7104055fc7.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://7104055fc7.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:27 GMT
content-type: image/jpeg
content-length: 9474
last-modified: Thu, 02 May 2024 14:58:42 GMT
etag: "6633aa22-2502"
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| 7104055fc7.news-mezutu.com/lands/36/img/pics-3.jpg | 136.243.42.50 | | 9.4 kB |
URL 7104055fc7.news-mezutu.com/lands/36/img/pics-3.jpg IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
Hash76025b7cd7b3e168342e9f6916d8c7f4 bd2a6ea7c9105935c7a616fec2d6d85dbf98bfc2 46eaa0e5c25c663d858a5c65629f960ed17d2fe30b2484f629158e6d6460d775
GET /lands/36/img/pics-3.jpg HTTP/1.1
Host: 7104055fc7.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://7104055fc7.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:27 GMT
content-type: image/jpeg
content-length: 9413
last-modified: Thu, 02 May 2024 14:58:42 GMT
etag: "6633aa22-24c5"
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| 7104055fc7.news-mezutu.com/lands/36/img/pics-4.jpg | 136.243.42.50 | | 9.5 kB |
URL 7104055fc7.news-mezutu.com/lands/36/img/pics-4.jpg IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
Hash107bdcec0a201d69db378827b68127cd efc977edd0a369769d5f32d88e9858302bed1e5e cb8a23effd64618021ebe40be5ed24bfb27c17f6d0a82c87a96d9efd91e06468
GET /lands/36/img/pics-4.jpg HTTP/1.1
Host: 7104055fc7.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://7104055fc7.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:27 GMT
content-type: image/jpeg
content-length: 9468
last-modified: Thu, 02 May 2024 14:58:42 GMT
etag: "6633aa22-24fc"
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| 7104055fc7.news-mezutu.com/lands/36/img/pics-5.jpg | 136.243.42.50 | | 9.6 kB |
URL 7104055fc7.news-mezutu.com/lands/36/img/pics-5.jpg IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
Hash628b98b82d0aca1c1b2155aa5ec51a6a db663b2b85cf8828f3e9c5aa879325bb50e684a0 d7dfe6be5b49bee8bbf743bc58d74af3dc7d0250c89bd6dd7e9ad268c287289d
GET /lands/36/img/pics-5.jpg HTTP/1.1
Host: 7104055fc7.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://7104055fc7.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:27 GMT
content-type: image/jpeg
content-length: 9557
last-modified: Thu, 02 May 2024 14:58:42 GMT
etag: "6633aa22-2555"
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| 7104055fc7.news-mezutu.com/lands/36/img/pics-6.jpg | 136.243.42.50 | | 9.6 kB |
URL 7104055fc7.news-mezutu.com/lands/36/img/pics-6.jpg IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
Hasha83d5196e71bd6f9c55ef3e7322e527c 9dbddad413391599552c4d9cc5c9e8a287ef910f 52212d360cbbf493678d8e8bf75c20b7ad4b1d6cf86bf03e1c87fb5b4d6cb818
GET /lands/36/img/pics-6.jpg HTTP/1.1
Host: 7104055fc7.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://7104055fc7.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:27 GMT
content-type: image/jpeg
content-length: 9620
last-modified: Thu, 02 May 2024 14:58:42 GMT
etag: "6633aa22-2594"
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| 98edba477a.news-mezutu.com/process.js?id=1218914904&p1=&p2=&p3=&p4= | 136.243.42.50 | | 54 kB |
URL 98edba477a.news-mezutu.com/process.js?id=1218914904&p1=&p2=&p3=&p4= IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
Hash7c47ee93c1ef2e0511573087555e61b7 ffbe015ed482435d1f0e89e9911978c210714827 19cfe4fc1ad6d8784a6604fdf26cbe73f7518681671e3c367993cee4a186317c
GET /process.js?id=1218914904&p1=&p2=&p3=&p4= HTTP/1.1
Host: 98edba477a.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://98edba477a.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:24 GMT
content-type: application/javascript; charset=utf-8
cache-control: no-cache, no-store, must-revalidate
expires: 0
pragma: no-cache
vary: Origin
X-Firefox-Spdy: h2
|
|
| 16016faa47.news-mezutu.com/process.js?id=1218914904&p1=&p2=&p3=&p4= | 136.243.42.50 | | 165 kB |
URL 16016faa47.news-mezutu.com/process.js?id=1218914904&p1=&p2=&p3=&p4= IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
Size165 kB (164664 bytes) Hasheb981599a6e8f47048715ace872d0204 704b9058fdfe58a2ebf345992c7eccf1cf307ae2 efbce86503ccc20c43d712e27e9984a25453c90e7d4bc1a6a22baa3d56e0ea65
GET /process.js?id=1218914904&p1=&p2=&p3=&p4= HTTP/1.1
Host: 16016faa47.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://16016faa47.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:22 GMT
content-type: application/javascript; charset=utf-8
cache-control: no-cache, no-store, must-revalidate
expires: 0
pragma: no-cache
vary: Origin
X-Firefox-Spdy: h2
|
|
| 2556e149fb.news-mezutu.com/process.js?id=1218914904&p1=&p2=&p3=&p4= | 136.243.42.50 | | 45 kB |
URL 2556e149fb.news-mezutu.com/process.js?id=1218914904&p1=&p2=&p3=&p4= IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
File typeJavaScript source, ASCII text, with very long lines (44310) Hashd03cc880df566c0dec0c53cb03ceb4b4 d846146e05c0d507c0e71bc95ad0c04d1685b867 fafec71a46f646724b4869028e674af01ec2ef30a50454e8d2f61879f2c6bf06
GET /process.js?id=1218914904&p1=&p2=&p3=&p4= HTTP/1.1
Host: 2556e149fb.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://2556e149fb.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:26 GMT
content-type: application/javascript; charset=utf-8
cache-control: no-cache, no-store, must-revalidate
expires: 0
pragma: no-cache
vary: Origin
X-Firefox-Spdy: h2
|
|
| news-pepafu.com/tds?id=1218914904&p1=&p2=&p3=&p4= | 144.76.106.61 | | 0 B |
URL news-pepafu.com/tds?id=1218914904&p1=&p2=&p3=&p4= IP144.76.106.61:0 ASN#24940 Hetzner Online GmbH
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tds?id=1218914904&p1=&p2=&p3=&p4= HTTP/1.1
Host: news-pepafu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://7104055fc7.news-mezutu.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
server: nginx
date: Wed, 08 May 2024 17:50:26 GMT
content-length: 0
location: https://0eb447a816.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
vary: Origin
x-frame-options: DENY
X-Firefox-Spdy: h2
|
|
| 0eb447a816.news-mezutu.com/revopush.js | 136.243.42.50 | | 8.1 kB |
URL 0eb447a816.news-mezutu.com/revopush.js IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (20417), with no line terminators Hash2c5bbd971d7151a38f9a0fbe8fa83886 8fb8275965ff38c18a2fb5bd1be990c4592b39a0 b75cba17751a5e6c0e183475d1074739a876aa2cf4841e760692e573822db343
GET /revopush.js HTTP/1.1
Host: 0eb447a816.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://0eb447a816.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:27 GMT
content-type: application/javascript; charset=utf-8
content-length: 8110
last-modified: Thu, 02 May 2024 14:58:42 GMT
etag: "6633aa22-1fae"
content-encoding: gzip
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| 0eb447a816.news-mezutu.com/lands/39/img/icon1.png | 136.243.42.50 | | 7.3 kB |
URL 0eb447a816.news-mezutu.com/lands/39/img/icon1.png IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
File typePNG image data, 300 x 300, 8-bit/color RGBA, non-interlaced Hash3d0ab5834c8bf7134e4d21fa3288317f c31d1a6b9df206f67ea194f4c424cdc372a423c2 0515ddd9185d263874e7b66bb6d521fcd63b857aac5fed51c08df98026dafe27
GET /lands/39/img/icon1.png HTTP/1.1
Host: 0eb447a816.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://0eb447a816.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:27 GMT
content-type: image/png
content-length: 7252
last-modified: Thu, 02 May 2024 14:58:42 GMT
etag: "6633aa22-1c54"
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| 0eb447a816.news-mezutu.com/lands/39/img/icon2.png | 136.243.42.50 | | 4.6 kB |
URL 0eb447a816.news-mezutu.com/lands/39/img/icon2.png IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
File typePNG image data, 300 x 300, 8-bit/color RGBA, non-interlaced Hashc947d439eb93367f1af5b2a3d222f057 5b4c10820d39e624bc6df72a113679da80a8e44e aab564e67c47df65ddcb9c4eaa62cd798a51624a3fded9f9b3a1197b460a79c2
GET /lands/39/img/icon2.png HTTP/1.1
Host: 0eb447a816.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://0eb447a816.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:27 GMT
content-type: image/png
content-length: 4576
last-modified: Thu, 02 May 2024 14:58:42 GMT
etag: "6633aa22-11e0"
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| 0eb447a816.news-mezutu.com/lands/39/img/icon3.png | 136.243.42.50 | | 7.8 kB |
URL 0eb447a816.news-mezutu.com/lands/39/img/icon3.png IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
File typePNG image data, 300 x 300, 8-bit/color RGBA, non-interlaced Hash8f3cc830da0b1fdf66bda7d1d734747b 94588f041eec3a78a8780c8124c56a1434a89277 ea3698c32039a115b03c2528cbb29c3ff97bbd49ad1345d5095e98d1fd0ea8ba
GET /lands/39/img/icon3.png HTTP/1.1
Host: 0eb447a816.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://0eb447a816.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:27 GMT
content-type: image/png
content-length: 7847
last-modified: Thu, 02 May 2024 14:58:42 GMT
etag: "6633aa22-1ea7"
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| 6df59d0775.news-mezutu.com/process.js?id=1218914904&p1=&p2=&p3=&p4= | 136.243.42.50 | | 52 kB |
URL 6df59d0775.news-mezutu.com/process.js?id=1218914904&p1=&p2=&p3=&p4= IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
Hashddf36b123dd65c198fadc8f792514b57 296739a92ce7c250bbacd7fe0d1df9dfe22d1437 b0c27feddd0dd6f921dc5a513884e471af6628dd98d4d785b92a308d7355927a
GET /process.js?id=1218914904&p1=&p2=&p3=&p4= HTTP/1.1
Host: 6df59d0775.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://6df59d0775.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:27 GMT
content-type: application/javascript; charset=utf-8
cache-control: no-cache, no-store, must-revalidate
expires: 0
pragma: no-cache
vary: Origin
X-Firefox-Spdy: h2
|
|
| 0eb447a816.news-mezutu.com/lands/39/img/icon5.png | 136.243.42.50 | | 3.3 kB |
URL 0eb447a816.news-mezutu.com/lands/39/img/icon5.png IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
File typePNG image data, 500 x 500, 8-bit/color RGBA, non-interlaced Hash1e1a7582b5da63e10485d63f97abc9a0 ca3ee3067f96c732f455bc7c99ec5100194f13f6 196083352a09a19cf2d4364e3ad406606fedb562f2096c1bef373ff2c485b503
GET /lands/39/img/icon5.png HTTP/1.1
Host: 0eb447a816.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://0eb447a816.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:27 GMT
content-type: image/png
content-length: 3264
last-modified: Thu, 02 May 2024 14:58:42 GMT
etag: "6633aa22-cc0"
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| 0eb447a816.news-mezutu.com/lands/39/img/icon7.png | 136.243.42.50 | | 3.3 kB |
URL 0eb447a816.news-mezutu.com/lands/39/img/icon7.png IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
File typePNG image data, 500 x 500, 8-bit/color RGBA, non-interlaced Hashb512735542cb07b3b2dcf153a7dfe456 93bde8875412ce266600e2af1c37123483a50376 e9c661cc8adbaa1b9cd4cf65f0ba93a1c24211cb5f94ed0950e0fbc973781718
GET /lands/39/img/icon7.png HTTP/1.1
Host: 0eb447a816.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://0eb447a816.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:27 GMT
content-type: image/png
content-length: 3283
last-modified: Thu, 02 May 2024 14:58:42 GMT
etag: "6633aa22-cd3"
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| 0eb447a816.news-mezutu.com/lands/39/img/icon8.png | 136.243.42.50 | | 4.1 kB |
URL 0eb447a816.news-mezutu.com/lands/39/img/icon8.png IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
File typePNG image data, 300 x 300, 8-bit/color RGBA, non-interlaced Hashf92d6474ebc6a3a0b576749cfb4afe98 0f4ce3dcf04873b8098c01d20c44967fb9fce0cc 3a7abff293d71fd8c5a58deacb964b50fe074a6f458575d37abbd367a3a930a1
GET /lands/39/img/icon8.png HTTP/1.1
Host: 0eb447a816.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://0eb447a816.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:27 GMT
content-type: image/png
content-length: 4064
last-modified: Thu, 02 May 2024 14:58:42 GMT
etag: "6633aa22-fe0"
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| 4bdc753dff.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4= | 136.243.42.50 | | 54 kB |
URL 4bdc753dff.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4= IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
File typeHTML document, ASCII text, with very long lines (44310) Hash5c8c53d84ec7bea8a74b7ce0fa63c370 8506bc7f766ddc81c38149712dd56c195cf3294b 9e33496b7f2a2b53afd6703cd9a893a202798cdb36f2f4225257a4ee3489cba8
GET /?id=1218914904&p1=&p2=&p3=&p4= HTTP/1.1
Host: 4bdc753dff.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://34377a24c8.news-mezutu.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:23 GMT
content-type: text/html; charset=UTF-8
vary: Origin
x-frame-options: DENY
X-Firefox-Spdy: h2
|
|
| news-pepafu.com/tds?id=1218914904&p1=&p2=&p3=&p4= | 144.76.106.61 | | 0 B |
URL news-pepafu.com/tds?id=1218914904&p1=&p2=&p3=&p4= IP144.76.106.61:0 ASN#24940 Hetzner Online GmbH
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tds?id=1218914904&p1=&p2=&p3=&p4= HTTP/1.1
Host: news-pepafu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://0eb447a816.news-mezutu.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
server: nginx
date: Wed, 08 May 2024 17:50:26 GMT
content-length: 0
location: https://9c3ba94d06.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
vary: Origin
x-frame-options: DENY
X-Firefox-Spdy: h2
|
|
| 9c3ba94d06.news-mezutu.com/revopush.js | 136.243.42.50 | | 8.1 kB |
URL 9c3ba94d06.news-mezutu.com/revopush.js IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (20417), with no line terminators Hash2c5bbd971d7151a38f9a0fbe8fa83886 8fb8275965ff38c18a2fb5bd1be990c4592b39a0 b75cba17751a5e6c0e183475d1074739a876aa2cf4841e760692e573822db343
GET /revopush.js HTTP/1.1
Host: 9c3ba94d06.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://9c3ba94d06.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:28 GMT
content-type: application/javascript; charset=utf-8
content-length: 8110
last-modified: Thu, 02 May 2024 14:58:42 GMT
etag: "6633aa22-1fae"
content-encoding: gzip
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| 9c3ba94d06.news-mezutu.com/lands/46/sketch.min.js | 136.243.42.50 | | 2.4 kB |
URL 9c3ba94d06.news-mezutu.com/lands/46/sketch.min.js IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
File typeJavaScript source, ASCII text, with very long lines (4675), with no line terminators Hashed52afed30560dc3e13a88e35a300c18 8714792a53d24b5c641b9536a2d218d75b43b3f9 cad4eff11237dc84f803b46c8529ca9918e4429c38058a053ef5d492c707a711
GET /lands/46/sketch.min.js HTTP/1.1
Host: 9c3ba94d06.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://9c3ba94d06.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:28 GMT
content-type: application/javascript; charset=utf-8
content-length: 2379
last-modified: Thu, 02 May 2024 14:58:42 GMT
etag: "6633aa22-94b"
content-encoding: gzip
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| partners-tds.com/WzJQVS | 142.202.51.61 | | 0 B |
IP142.202.51.61:0 ASN#63023 AS-GLOBALTELEHOST
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /WzJQVS HTTP/1.1
Host: partners-tds.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://9c3ba94d06.news-mezutu.com/
Cookie: _subid=376l60j117j6g4; 933eb=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjFcIjoxNzE1MTkwNjExfSxcImNhbXBhaWduc1wiOntcIjFcIjoxNzE1MTkwNjExfSxcInRpbWVcIjoxNzE1MTkwNjExfSJ9.eBUGVDeNH4CwZsOUDJQQTGFummUDBDWkm-b51CPZuw4
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Server: nginx
Date: Wed, 08 May 2024 17:50:26 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-cache, no-store, must-revalidate
Expires: Wed, 08 May 2024 17:50:26 GMT
Location: https://news-pepafu.com/tds?id=1218914904&p1=&p2=&p3=&p4=
Set-Cookie: _subid=376l60j117j6g7; expires=Sat, 08 Jun 2024 17:50:26 GMT; path=/
933eb=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjFcIjoxNzE1MTkwNjExfSxcImNhbXBhaWduc1wiOntcIjFcIjoxNzE1MTkwNjExfSxcInRpbWVcIjoxNzE1MTkwNjExfSJ9.eBUGVDeNH4CwZsOUDJQQTGFummUDBDWkm-b51CPZuw4; expires=Thu, 15 Sep 2078 11:40:52 GMT; path=/
Vary: Accept-Encoding
Access-Control-Allow-Origin: *
|
|
| news-pepafu.com/tds?id=1218914904&p1=&p2=&p3=&p4= | 144.76.106.61 | | 0 B |
URL news-pepafu.com/tds?id=1218914904&p1=&p2=&p3=&p4= IP144.76.106.61:0 ASN#24940 Hetzner Online GmbH
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tds?id=1218914904&p1=&p2=&p3=&p4= HTTP/1.1
Host: news-pepafu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://9c3ba94d06.news-mezutu.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
server: nginx
date: Wed, 08 May 2024 17:50:26 GMT
content-length: 0
location: https://6f29e9abe5.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
vary: Origin
x-frame-options: DENY
X-Firefox-Spdy: h2
|
|
| 6f29e9abe5.news-mezutu.com/revopush.js | 136.243.42.50 | | 8.1 kB |
URL 6f29e9abe5.news-mezutu.com/revopush.js IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (20417), with no line terminators Hash2c5bbd971d7151a38f9a0fbe8fa83886 8fb8275965ff38c18a2fb5bd1be990c4592b39a0 b75cba17751a5e6c0e183475d1074739a876aa2cf4841e760692e573822db343
GET /revopush.js HTTP/1.1
Host: 6f29e9abe5.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://6f29e9abe5.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:28 GMT
content-type: application/javascript; charset=utf-8
content-length: 8110
last-modified: Thu, 02 May 2024 14:58:42 GMT
etag: "6633aa22-1fae"
content-encoding: gzip
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| partners-tds.com/WzJQVS | 142.202.51.61 | | 0 B |
IP142.202.51.61:0 ASN#63023 AS-GLOBALTELEHOST
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /WzJQVS HTTP/1.1
Host: partners-tds.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://6f29e9abe5.news-mezutu.com/
Cookie: _subid=376l60j117j6g7; 933eb=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjFcIjoxNzE1MTkwNjExfSxcImNhbXBhaWduc1wiOntcIjFcIjoxNzE1MTkwNjExfSxcInRpbWVcIjoxNzE1MTkwNjExfSJ9.eBUGVDeNH4CwZsOUDJQQTGFummUDBDWkm-b51CPZuw4
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Server: nginx
Date: Wed, 08 May 2024 17:50:26 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-cache, no-store, must-revalidate
Expires: Wed, 08 May 2024 17:50:26 GMT
Location: https://news-pepafu.com/tds?id=1218914904&p1=&p2=&p3=&p4=
Set-Cookie: _subid=376l60j117j6gf; expires=Sat, 08 Jun 2024 17:50:26 GMT; path=/
933eb=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjFcIjoxNzE1MTkwNjExfSxcImNhbXBhaWduc1wiOntcIjFcIjoxNzE1MTkwNjExfSxcInRpbWVcIjoxNzE1MTkwNjExfSJ9.eBUGVDeNH4CwZsOUDJQQTGFummUDBDWkm-b51CPZuw4; expires=Thu, 15 Sep 2078 11:40:52 GMT; path=/
Vary: Accept-Encoding
Access-Control-Allow-Origin: *
|
|
| news-pepafu.com/tds?id=1218914904&p1=&p2=&p3=&p4= | 144.76.106.61 | | 0 B |
URL news-pepafu.com/tds?id=1218914904&p1=&p2=&p3=&p4= IP144.76.106.61:0 ASN#24940 Hetzner Online GmbH
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tds?id=1218914904&p1=&p2=&p3=&p4= HTTP/1.1
Host: news-pepafu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://6f29e9abe5.news-mezutu.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
server: nginx
date: Wed, 08 May 2024 17:50:26 GMT
content-length: 0
location: https://606307d4d2.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
vary: Origin
x-frame-options: DENY
X-Firefox-Spdy: h2
|
|
| 606307d4d2.news-mezutu.com/revopush.js | 136.243.42.50 | | 8.1 kB |
URL 606307d4d2.news-mezutu.com/revopush.js IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (20417), with no line terminators Hash2c5bbd971d7151a38f9a0fbe8fa83886 8fb8275965ff38c18a2fb5bd1be990c4592b39a0 b75cba17751a5e6c0e183475d1074739a876aa2cf4841e760692e573822db343
GET /revopush.js HTTP/1.1
Host: 606307d4d2.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://606307d4d2.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:28 GMT
content-type: application/javascript; charset=utf-8
content-length: 8110
last-modified: Thu, 02 May 2024 14:58:42 GMT
etag: "6633aa22-1fae"
content-encoding: gzip
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| 606307d4d2.news-mezutu.com/lands/46/sketch.min.js | 136.243.42.50 | | 2.4 kB |
URL 606307d4d2.news-mezutu.com/lands/46/sketch.min.js IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
File typeJavaScript source, ASCII text, with very long lines (4675), with no line terminators Hashed52afed30560dc3e13a88e35a300c18 8714792a53d24b5c641b9536a2d218d75b43b3f9 cad4eff11237dc84f803b46c8529ca9918e4429c38058a053ef5d492c707a711
GET /lands/46/sketch.min.js HTTP/1.1
Host: 606307d4d2.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://606307d4d2.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:28 GMT
content-type: application/javascript; charset=utf-8
content-length: 2379
last-modified: Thu, 02 May 2024 14:58:42 GMT
etag: "6633aa22-94b"
content-encoding: gzip
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| partners-tds.com/WzJQVS | 142.202.51.61 | | 0 B |
IP142.202.51.61:0 ASN#63023 AS-GLOBALTELEHOST
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /WzJQVS HTTP/1.1
Host: partners-tds.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://606307d4d2.news-mezutu.com/
Cookie: _subid=376l60j117j6gf; 933eb=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjFcIjoxNzE1MTkwNjExfSxcImNhbXBhaWduc1wiOntcIjFcIjoxNzE1MTkwNjExfSxcInRpbWVcIjoxNzE1MTkwNjExfSJ9.eBUGVDeNH4CwZsOUDJQQTGFummUDBDWkm-b51CPZuw4
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Server: nginx
Date: Wed, 08 May 2024 17:50:26 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-cache, no-store, must-revalidate
Expires: Wed, 08 May 2024 17:50:26 GMT
Location: https://news-pepafu.com/tds?id=1218914904&p1=&p2=&p3=&p4=
Set-Cookie: _subid=376l60j117j6gm; expires=Sat, 08 Jun 2024 17:50:26 GMT; path=/
933eb=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjFcIjoxNzE1MTkwNjExfSxcImNhbXBhaWduc1wiOntcIjFcIjoxNzE1MTkwNjExfSxcInRpbWVcIjoxNzE1MTkwNjExfSJ9.eBUGVDeNH4CwZsOUDJQQTGFummUDBDWkm-b51CPZuw4; expires=Thu, 15 Sep 2078 11:40:52 GMT; path=/
Vary: Accept-Encoding
Access-Control-Allow-Origin: *
|
|
| news-pepafu.com/tds?id=1218914904&p1=&p2=&p3=&p4= | 144.76.106.61 | | 0 B |
URL news-pepafu.com/tds?id=1218914904&p1=&p2=&p3=&p4= IP144.76.106.61:0 ASN#24940 Hetzner Online GmbH
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tds?id=1218914904&p1=&p2=&p3=&p4= HTTP/1.1
Host: news-pepafu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://606307d4d2.news-mezutu.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
server: nginx
date: Wed, 08 May 2024 17:50:26 GMT
content-length: 0
location: https://e9c87b03b2.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
vary: Origin
x-frame-options: DENY
X-Firefox-Spdy: h2
|
|
| e9c87b03b2.news-mezutu.com/revopush.js | 136.243.42.50 | | 8.1 kB |
URL e9c87b03b2.news-mezutu.com/revopush.js IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (20417), with no line terminators Hash2c5bbd971d7151a38f9a0fbe8fa83886 8fb8275965ff38c18a2fb5bd1be990c4592b39a0 b75cba17751a5e6c0e183475d1074739a876aa2cf4841e760692e573822db343
GET /revopush.js HTTP/1.1
Host: e9c87b03b2.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://e9c87b03b2.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:28 GMT
content-type: application/javascript; charset=utf-8
content-length: 8110
last-modified: Thu, 02 May 2024 14:58:42 GMT
etag: "6633aa22-1fae"
content-encoding: gzip
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| e9c87b03b2.news-mezutu.com/lands/46/sketch.min.js | 136.243.42.50 | | 2.4 kB |
URL e9c87b03b2.news-mezutu.com/lands/46/sketch.min.js IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
File typeJavaScript source, ASCII text, with very long lines (4675), with no line terminators Hashed52afed30560dc3e13a88e35a300c18 8714792a53d24b5c641b9536a2d218d75b43b3f9 cad4eff11237dc84f803b46c8529ca9918e4429c38058a053ef5d492c707a711
GET /lands/46/sketch.min.js HTTP/1.1
Host: e9c87b03b2.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://e9c87b03b2.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:28 GMT
content-type: application/javascript; charset=utf-8
content-length: 2379
last-modified: Thu, 02 May 2024 14:58:42 GMT
etag: "6633aa22-94b"
content-encoding: gzip
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| partners-tds.com/WzJQVS | 142.202.51.61 | | 0 B |
IP142.202.51.61:0 ASN#63023 AS-GLOBALTELEHOST
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /WzJQVS HTTP/1.1
Host: partners-tds.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://e9c87b03b2.news-mezutu.com/
Cookie: _subid=376l60j117j6gm; 933eb=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjFcIjoxNzE1MTkwNjExfSxcImNhbXBhaWduc1wiOntcIjFcIjoxNzE1MTkwNjExfSxcInRpbWVcIjoxNzE1MTkwNjExfSJ9.eBUGVDeNH4CwZsOUDJQQTGFummUDBDWkm-b51CPZuw4
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Server: nginx
Date: Wed, 08 May 2024 17:50:27 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-cache, no-store, must-revalidate
Expires: Wed, 08 May 2024 17:50:27 GMT
Location: https://news-pepafu.com/tds?id=1218914904&p1=&p2=&p3=&p4=
Set-Cookie: _subid=376l60j117j6gr; expires=Sat, 08 Jun 2024 17:50:27 GMT; path=/
933eb=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjFcIjoxNzE1MTkwNjExfSxcImNhbXBhaWduc1wiOntcIjFcIjoxNzE1MTkwNjExfSxcInRpbWVcIjoxNzE1MTkwNjExfSJ9.eBUGVDeNH4CwZsOUDJQQTGFummUDBDWkm-b51CPZuw4; expires=Thu, 15 Sep 2078 11:40:54 GMT; path=/
Vary: Accept-Encoding
Access-Control-Allow-Origin: *
|
|
| show.revopush.com/api/v1/inpage/show/?uid=171984&subacc=1218914904&sub1=&sub2=&sub3=&sub4=&adult=true&limit=1&traffic=adult | 95.216.46.99 | | 90 kB |
URL show.revopush.com/api/v1/inpage/show/?uid=171984&subacc=1218914904&sub1=&sub2=&sub3=&sub4=&adult=true&limit=1&traffic=adult IP95.216.46.99:0 ASN#24940 Hetzner Online GmbH
Hash51d642e4e62d0b4f8313df9925114792 4fab99f4443c13425217196b566fab83910789ae 12b36bc9389302445145574905f1dd4ea7f524a65b6103526ea22f1446f1a5ce
GET /api/v1/inpage/show/?uid=171984&subacc=1218914904&sub1=&sub2=&sub3=&sub4=&adult=true&limit=1&traffic=adult HTTP/1.1
Host: show.revopush.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://4bdc753dff.news-mezutu.com/
Origin: https://4bdc753dff.news-mezutu.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:22 GMT
content-type: application/json
accept-ch: Sec-CH-UA, Sec-CH-UA-Model, Sec-CH-UA-Mobile, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Wow64
access-control-allow-origin: https://4bdc753dff.news-mezutu.com
vary: Origin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| 9c3ba94d06.news-mezutu.com/process.js?id=1218914904&p1=&p2=&p3=&p4= | 136.243.42.50 | | 46 kB |
URL 9c3ba94d06.news-mezutu.com/process.js?id=1218914904&p1=&p2=&p3=&p4= IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
File typeJavaScript source, ASCII text, with very long lines (44310) Hashde9ec6dc286ab744911dfde92e6cb665 d04ead9205ef040b4d30b527cc14305688abbc0e 26dd69f9dcd2ed6f0e1b9195daa1edbaee7cc3313cbc2d856ef9c7ada6afea3e
GET /process.js?id=1218914904&p1=&p2=&p3=&p4= HTTP/1.1
Host: 9c3ba94d06.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://9c3ba94d06.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:28 GMT
content-type: application/javascript; charset=utf-8
cache-control: no-cache, no-store, must-revalidate
expires: 0
pragma: no-cache
vary: Origin
X-Firefox-Spdy: h2
|
|
| eb8cfe86c0.news-mezutu.com/lands/20/style.css | 136.243.42.50 | | 868 B |
URL eb8cfe86c0.news-mezutu.com/lands/20/style.css IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
File typeASCII text, with very long lines (2230), with no line terminators Hashd4b3acb7a84d2265bf174f13f93ca4f1 d6595e14ed8549bc39a8977cbd8d5b5b6f5cf221 2932666d3de7135f82ec781a408781352ec79c68998de11047db8e228d063311
GET /lands/20/style.css HTTP/1.1
Host: eb8cfe86c0.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://eb8cfe86c0.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:28 GMT
content-type: text/css
content-length: 868
last-modified: Thu, 02 May 2024 14:58:42 GMT
etag: "6633aa22-364"
content-encoding: gzip
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| eb8cfe86c0.news-mezutu.com/revopush.js | 136.243.42.50 | | 8.1 kB |
URL eb8cfe86c0.news-mezutu.com/revopush.js IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (20417), with no line terminators Hash2c5bbd971d7151a38f9a0fbe8fa83886 8fb8275965ff38c18a2fb5bd1be990c4592b39a0 b75cba17751a5e6c0e183475d1074739a876aa2cf4841e760692e573822db343
GET /revopush.js HTTP/1.1
Host: eb8cfe86c0.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://eb8cfe86c0.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:28 GMT
content-type: application/javascript; charset=utf-8
content-length: 8110
last-modified: Thu, 02 May 2024 14:58:42 GMT
etag: "6633aa22-1fae"
content-encoding: gzip
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| 2556e149fb.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4= | 136.243.42.50 | | 8.8 kB |
URL 2556e149fb.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4= IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
File typeHTML document, ASCII text, with very long lines (7710) Hash428f6f2016cc27dd4d21dbaf3a1752bd 0311b3a7b8d14687369d3692a5fac3a3b9249ff3 64917db9e2ae3800cec09443f84fb06bb799449dc8bff049bb7806d9e6ce9591
GET /?id=1218914904&p1=&p2=&p3=&p4= HTTP/1.1
Host: 2556e149fb.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://ecb8190182.news-mezutu.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:26 GMT
content-type: text/html; charset=UTF-8
vary: Origin
x-frame-options: DENY
X-Firefox-Spdy: h2
|
|
| 56249d5b95.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4= | 136.243.42.50 | | 10 kB |
URL 56249d5b95.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4= IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
File typeHTML document, ASCII text, with very long lines (8854) Hash4c6125438df34d12573b5968f78657c3 61f6c332938b24670bb44e13583a39ffa6a6914e 1cd68f0ac804bdadc25e55d3cb6bdb6b89aef11c8f65de391b6469d6348f5560
GET /?id=1218914904&p1=&p2=&p3=&p4= HTTP/1.1
Host: 56249d5b95.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://56486d0bea.news-mezutu.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:25 GMT
content-type: text/html; charset=UTF-8
vary: Origin
x-frame-options: DENY
X-Firefox-Spdy: h2
|
|
| 0fa4b29ce4.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4= | 136.243.42.50 | | 99 kB |
URL 0fa4b29ce4.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4= IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
File typeHTML document, Unicode text, UTF-8 text, with very long lines (63955) Hashf0d02c017e975225af3d74798faaf908 75695cf546d09772c0f6efe98a6ec6d6408a54d5 380437923b3a1ef3e6334c4cb124b898cdbb31f62baabbec9bb06535554b5ec9
GET /?id=1218914904&p1=&p2=&p3=&p4= HTTP/1.1
Host: 0fa4b29ce4.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://51a16024fe.news-mezutu.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:18 GMT
content-type: text/html; charset=UTF-8
vary: Origin
x-frame-options: DENY
X-Firefox-Spdy: h2
|
|
| ecb8190182.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4= | 136.243.42.50 | | 77 kB |
URL ecb8190182.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4= IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
File typeHTML document, ASCII text, with very long lines (64512) Hasha05cacc5c29ff5626e2fffa08b7eab86 1e44be2e9c92661f39713e4b75002f1bd8ae7a49 6aec42d1706709060397ebad9e2d62d6f0c4b282d89efa1bf30147769f6a75f3
GET /?id=1218914904&p1=&p2=&p3=&p4= HTTP/1.1
Host: ecb8190182.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://4f42cb09f7.news-mezutu.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:26 GMT
content-type: text/html; charset=UTF-8
vary: Origin
x-frame-options: DENY
X-Firefox-Spdy: h2
|
|
| news-pepafu.com/tds?id=1218914904&p1=&p2=&p3=&p4= | 144.76.106.61 | | 0 B |
URL news-pepafu.com/tds?id=1218914904&p1=&p2=&p3=&p4= IP144.76.106.61:0 ASN#24940 Hetzner Online GmbH
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tds?id=1218914904&p1=&p2=&p3=&p4= HTTP/1.1
Host: news-pepafu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://3c039c4ff5.news-mezutu.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
server: nginx
date: Wed, 08 May 2024 17:50:27 GMT
content-length: 0
location: https://cf951e51e1.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
vary: Origin
x-frame-options: DENY
X-Firefox-Spdy: h2
|
|
| beea4bbe4f.news-mezutu.com/process.js?id=1218914904&p1=&p2=&p3=&p4= | 136.243.42.50 | | 53 kB |
URL beea4bbe4f.news-mezutu.com/process.js?id=1218914904&p1=&p2=&p3=&p4= IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
Hashb8ac80ee0624537d12bee03a61e39f47 6713f3b355b8d342da8b398999da9d6db4ffb28c 97afe7c7c2cf23fde6eb3f964c4da1900a28ca5344c9e67d454285d09f393e7b
GET /process.js?id=1218914904&p1=&p2=&p3=&p4= HTTP/1.1
Host: beea4bbe4f.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://beea4bbe4f.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:21 GMT
content-type: application/javascript; charset=utf-8
cache-control: no-cache, no-store, must-revalidate
expires: 0
pragma: no-cache
vary: Origin
X-Firefox-Spdy: h2
|
|
| cf951e51e1.news-mezutu.com/lands/57/css/style.css | 136.243.42.50 | | 1.2 kB |
URL cf951e51e1.news-mezutu.com/lands/57/css/style.css IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
File typeASCII text, with very long lines (4468), with no line terminators Hashb07eb7ba1a3bb505eba51b55f4ffa9ff fea4806dafcdda47dff4bb6aa09362ded48879d5 086ceb41d9cccb6678d0a759d730383098e9d80d8067e9b8ce06d0972d2dae68
GET /lands/57/css/style.css HTTP/1.1
Host: cf951e51e1.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cf951e51e1.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:29 GMT
content-type: text/css
content-length: 1213
last-modified: Thu, 02 May 2024 14:58:42 GMT
etag: "6633aa22-4bd"
content-encoding: gzip
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| cf951e51e1.news-mezutu.com/lands/57/js/device.js | 136.243.42.50 | | 1.1 kB |
URL cf951e51e1.news-mezutu.com/lands/57/js/device.js IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
File typeJavaScript source, ASCII text, with very long lines (3289), with no line terminators Hash2d9887b21aa6b47c56e7f43e66560a4f 42cdfc5b3b23d32152750bf2cea4233044491768 863a13c42ef72b562bc7aa5005b8ff5693763ae8d16ce3bfc3d876e92a7fdf85
GET /lands/57/js/device.js HTTP/1.1
Host: cf951e51e1.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cf951e51e1.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:29 GMT
content-type: application/javascript; charset=utf-8
content-length: 1111
last-modified: Thu, 02 May 2024 14:58:42 GMT
etag: "6633aa22-457"
content-encoding: gzip
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| partners-tds.com/WzJQVS | 142.202.51.61 | | 0 B |
IP142.202.51.61:0 ASN#63023 AS-GLOBALTELEHOST
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /WzJQVS HTTP/1.1
Host: partners-tds.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cf951e51e1.news-mezutu.com/
Cookie: _subid=376l60j117j6h9; 933eb=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjFcIjoxNzE1MTkwNjExfSxcImNhbXBhaWduc1wiOntcIjFcIjoxNzE1MTkwNjExfSxcInRpbWVcIjoxNzE1MTkwNjExfSJ9.eBUGVDeNH4CwZsOUDJQQTGFummUDBDWkm-b51CPZuw4
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Server: nginx
Date: Wed, 08 May 2024 17:50:28 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-cache, no-store, must-revalidate
Expires: Wed, 08 May 2024 17:50:27 GMT
Location: https://news-pepafu.com/tds?id=1218914904&p1=&p2=&p3=&p4=
Set-Cookie: _subid=376l60j117j6hg; expires=Sat, 08 Jun 2024 17:50:28 GMT; path=/
933eb=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjFcIjoxNzE1MTkwNjExfSxcImNhbXBhaWduc1wiOntcIjFcIjoxNzE1MTkwNjExfSxcInRpbWVcIjoxNzE1MTkwNjExfSJ9.eBUGVDeNH4CwZsOUDJQQTGFummUDBDWkm-b51CPZuw4; expires=Thu, 15 Sep 2078 11:40:56 GMT; path=/
Vary: Accept-Encoding
Access-Control-Allow-Origin: *
|
|
| news-pepafu.com/tds?id=1218914904&p1=&p2=&p3=&p4= | 144.76.106.61 | | 0 B |
URL news-pepafu.com/tds?id=1218914904&p1=&p2=&p3=&p4= IP144.76.106.61:0 ASN#24940 Hetzner Online GmbH
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tds?id=1218914904&p1=&p2=&p3=&p4= HTTP/1.1
Host: news-pepafu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://cf951e51e1.news-mezutu.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
server: nginx
date: Wed, 08 May 2024 17:50:28 GMT
content-length: 0
location: https://57730d7d87.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
vary: Origin
x-frame-options: DENY
X-Firefox-Spdy: h2
|
|
| 57730d7d87.news-mezutu.com/revopush.js | 136.243.42.50 | | 8.1 kB |
URL 57730d7d87.news-mezutu.com/revopush.js IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (20417), with no line terminators Hash2c5bbd971d7151a38f9a0fbe8fa83886 8fb8275965ff38c18a2fb5bd1be990c4592b39a0 b75cba17751a5e6c0e183475d1074739a876aa2cf4841e760692e573822db343
GET /revopush.js HTTP/1.1
Host: 57730d7d87.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://57730d7d87.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:29 GMT
content-type: application/javascript; charset=utf-8
content-length: 8110
last-modified: Thu, 02 May 2024 14:58:42 GMT
etag: "6633aa22-1fae"
content-encoding: gzip
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| 0eb447a816.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4= | 136.243.42.50 | | 4.6 kB |
URL 0eb447a816.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4= IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
Hashaefbaa0a72e1284707ae506d23bea880 38578e16d832a767fa030697a124b89e77bb6b02 2c5fab58a4d260887dc515cdc45bbb5baefc3cf53f241e665a8bb62e1d4db2e0
GET /?id=1218914904&p1=&p2=&p3=&p4= HTTP/1.1
Host: 0eb447a816.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://7104055fc7.news-mezutu.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:27 GMT
content-type: text/html; charset=UTF-8
vary: Origin
x-frame-options: DENY
X-Firefox-Spdy: h2
|
|
| 57730d7d87.news-mezutu.com/lands/53/images/spinning-circles2.svg | 136.243.42.50 | | 503 B |
URL 57730d7d87.news-mezutu.com/lands/53/images/spinning-circles2.svg IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
File typeSVG Scalable Vector Graphics image Hash14e6f9981fa27406176056df2451d27b aa1b6fd6071391d0031bff2d74ae77347ec2fdb4 466d361db2f130d7e3d40a671c935e3e556c3a49567657afee2e44a0a390a84f
GET /lands/53/images/spinning-circles2.svg HTTP/1.1
Host: 57730d7d87.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://57730d7d87.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:29 GMT
content-type: image/svg+xml
content-length: 503
last-modified: Thu, 02 May 2024 14:58:42 GMT
etag: "6633aa22-1f7"
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| partners-tds.com/WzJQVS | 142.202.51.61 | | 0 B |
IP142.202.51.61:0 ASN#63023 AS-GLOBALTELEHOST
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /WzJQVS HTTP/1.1
Host: partners-tds.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://57730d7d87.news-mezutu.com/
Cookie: _subid=376l60j117j6hg; 933eb=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjFcIjoxNzE1MTkwNjExfSxcImNhbXBhaWduc1wiOntcIjFcIjoxNzE1MTkwNjExfSxcInRpbWVcIjoxNzE1MTkwNjExfSJ9.eBUGVDeNH4CwZsOUDJQQTGFummUDBDWkm-b51CPZuw4
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Server: nginx
Date: Wed, 08 May 2024 17:50:28 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-cache, no-store, must-revalidate
Expires: Wed, 08 May 2024 17:50:28 GMT
Location: https://news-pepafu.com/tds?id=1218914904&p1=&p2=&p3=&p4=
Set-Cookie: _subid=376l60j117j6hm; expires=Sat, 08 Jun 2024 17:50:28 GMT; path=/
933eb=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjFcIjoxNzE1MTkwNjExfSxcImNhbXBhaWduc1wiOntcIjFcIjoxNzE1MTkwNjExfSxcInRpbWVcIjoxNzE1MTkwNjExfSJ9.eBUGVDeNH4CwZsOUDJQQTGFummUDBDWkm-b51CPZuw4; expires=Thu, 15 Sep 2078 11:40:56 GMT; path=/
Vary: Accept-Encoding
Access-Control-Allow-Origin: *
|
|
| news-pepafu.com/tds?id=1218914904&p1=&p2=&p3=&p4= | 144.76.106.61 | | 0 B |
URL news-pepafu.com/tds?id=1218914904&p1=&p2=&p3=&p4= IP144.76.106.61:0 ASN#24940 Hetzner Online GmbH
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tds?id=1218914904&p1=&p2=&p3=&p4= HTTP/1.1
Host: news-pepafu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://57730d7d87.news-mezutu.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
server: nginx
date: Wed, 08 May 2024 17:50:28 GMT
content-length: 0
location: https://254e9dcd65.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
vary: Origin
x-frame-options: DENY
X-Firefox-Spdy: h2
|
|
| 254e9dcd65.news-mezutu.com/revopush.js | 136.243.42.50 | | 8.1 kB |
URL 254e9dcd65.news-mezutu.com/revopush.js IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (20417), with no line terminators Hash2c5bbd971d7151a38f9a0fbe8fa83886 8fb8275965ff38c18a2fb5bd1be990c4592b39a0 b75cba17751a5e6c0e183475d1074739a876aa2cf4841e760692e573822db343
GET /revopush.js HTTP/1.1
Host: 254e9dcd65.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://254e9dcd65.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:30 GMT
content-type: application/javascript; charset=utf-8
content-length: 8110
last-modified: Thu, 02 May 2024 14:58:42 GMT
etag: "6633aa22-1fae"
content-encoding: gzip
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| 254e9dcd65.news-mezutu.com/lands/39/img/icon1.png | 136.243.42.50 | | 7.3 kB |
URL 254e9dcd65.news-mezutu.com/lands/39/img/icon1.png IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
File typePNG image data, 300 x 300, 8-bit/color RGBA, non-interlaced Hash3d0ab5834c8bf7134e4d21fa3288317f c31d1a6b9df206f67ea194f4c424cdc372a423c2 0515ddd9185d263874e7b66bb6d521fcd63b857aac5fed51c08df98026dafe27
GET /lands/39/img/icon1.png HTTP/1.1
Host: 254e9dcd65.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://254e9dcd65.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:30 GMT
content-type: image/png
content-length: 7252
last-modified: Thu, 02 May 2024 14:58:42 GMT
etag: "6633aa22-1c54"
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| eafe221e11.news-mezutu.com/process.js?id=1218914904&p1=&p2=&p3=&p4= | 136.243.42.50 | | 49 kB |
URL eafe221e11.news-mezutu.com/process.js?id=1218914904&p1=&p2=&p3=&p4= IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
Hash22cb84e6e80f2e3c1a13720e8789ae03 5c85c7a4dded7af5d48c0318438369eae3e9a266 dc6fafd0b8b15ab33a217f37f78d49c3d7ce28db11db21e756d12c62a64c590d
GET /process.js?id=1218914904&p1=&p2=&p3=&p4= HTTP/1.1
Host: eafe221e11.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://eafe221e11.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:27 GMT
content-type: application/javascript; charset=utf-8
cache-control: no-cache, no-store, must-revalidate
expires: 0
pragma: no-cache
vary: Origin
X-Firefox-Spdy: h2
|
|
| 254e9dcd65.news-mezutu.com/lands/39/img/icon3.png | 136.243.42.50 | | 7.8 kB |
URL 254e9dcd65.news-mezutu.com/lands/39/img/icon3.png IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
File typePNG image data, 300 x 300, 8-bit/color RGBA, non-interlaced Hash8f3cc830da0b1fdf66bda7d1d734747b 94588f041eec3a78a8780c8124c56a1434a89277 ea3698c32039a115b03c2528cbb29c3ff97bbd49ad1345d5095e98d1fd0ea8ba
GET /lands/39/img/icon3.png HTTP/1.1
Host: 254e9dcd65.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://254e9dcd65.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:30 GMT
content-type: image/png
content-length: 7847
last-modified: Thu, 02 May 2024 14:58:42 GMT
etag: "6633aa22-1ea7"
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| 254e9dcd65.news-mezutu.com/lands/39/img/icon4.png | 136.243.42.50 | | 7.0 kB |
URL 254e9dcd65.news-mezutu.com/lands/39/img/icon4.png IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
File typePNG image data, 300 x 300, 8-bit/color RGBA, non-interlaced Hash7ad7f32c1c0df7b4975cc41bda4ac435 81d57e996ee6cd9e122592e68ffa3d55c1ba10ff c0af6cb2280bba97d235dfad7c72d22353a0d2cf277733ce9fc4701df7ed1d5f
GET /lands/39/img/icon4.png HTTP/1.1
Host: 254e9dcd65.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://254e9dcd65.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:30 GMT
content-type: image/png
content-length: 7032
last-modified: Thu, 02 May 2024 14:58:42 GMT
etag: "6633aa22-1b78"
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| 254e9dcd65.news-mezutu.com/lands/39/img/icon5.png | 136.243.42.50 | | 3.3 kB |
URL 254e9dcd65.news-mezutu.com/lands/39/img/icon5.png IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
File typePNG image data, 500 x 500, 8-bit/color RGBA, non-interlaced Hash1e1a7582b5da63e10485d63f97abc9a0 ca3ee3067f96c732f455bc7c99ec5100194f13f6 196083352a09a19cf2d4364e3ad406606fedb562f2096c1bef373ff2c485b503
GET /lands/39/img/icon5.png HTTP/1.1
Host: 254e9dcd65.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://254e9dcd65.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:30 GMT
content-type: image/png
content-length: 3264
last-modified: Thu, 02 May 2024 14:58:42 GMT
etag: "6633aa22-cc0"
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| 254e9dcd65.news-mezutu.com/lands/39/img/icon7.png | 136.243.42.50 | | 3.3 kB |
URL 254e9dcd65.news-mezutu.com/lands/39/img/icon7.png IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
File typePNG image data, 500 x 500, 8-bit/color RGBA, non-interlaced Hashb512735542cb07b3b2dcf153a7dfe456 93bde8875412ce266600e2af1c37123483a50376 e9c661cc8adbaa1b9cd4cf65f0ba93a1c24211cb5f94ed0950e0fbc973781718
GET /lands/39/img/icon7.png HTTP/1.1
Host: 254e9dcd65.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://254e9dcd65.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:30 GMT
content-type: image/png
content-length: 3283
last-modified: Thu, 02 May 2024 14:58:42 GMT
etag: "6633aa22-cd3"
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| 254e9dcd65.news-mezutu.com/lands/39/img/icon8.png | 136.243.42.50 | | 4.1 kB |
URL 254e9dcd65.news-mezutu.com/lands/39/img/icon8.png IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
File typePNG image data, 300 x 300, 8-bit/color RGBA, non-interlaced Hashf92d6474ebc6a3a0b576749cfb4afe98 0f4ce3dcf04873b8098c01d20c44967fb9fce0cc 3a7abff293d71fd8c5a58deacb964b50fe074a6f458575d37abbd367a3a930a1
GET /lands/39/img/icon8.png HTTP/1.1
Host: 254e9dcd65.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://254e9dcd65.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:30 GMT
content-type: image/png
content-length: 4064
last-modified: Thu, 02 May 2024 14:58:42 GMT
etag: "6633aa22-fe0"
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| 254e9dcd65.news-mezutu.com/process.js?id=1218914904&p1=&p2=&p3=&p4= | 136.243.42.50 | | 45 kB |
URL 254e9dcd65.news-mezutu.com/process.js?id=1218914904&p1=&p2=&p3=&p4= IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
File typeJavaScript source, ASCII text, with very long lines (44310) Hash2cbbc1646905d8dc884d9b89ce3bac2f b4a6e2f8d8b3ce4197cec6d165b4c66ecae4f294 d41ba633305e254ae7ecb69e10e4a8414ef5f059e4d2052ba4d6c6b2d01cb1ae
GET /process.js?id=1218914904&p1=&p2=&p3=&p4= HTTP/1.1
Host: 254e9dcd65.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://254e9dcd65.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:30 GMT
content-type: application/javascript; charset=utf-8
cache-control: no-cache, no-store, must-revalidate
expires: 0
pragma: no-cache
vary: Origin
X-Firefox-Spdy: h2
|
|
| news-pepafu.com/tds?id=1218914904&p1=&p2=&p3=&p4= | 144.76.106.61 | | 0 B |
URL news-pepafu.com/tds?id=1218914904&p1=&p2=&p3=&p4= IP144.76.106.61:0 ASN#24940 Hetzner Online GmbH
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tds?id=1218914904&p1=&p2=&p3=&p4= HTTP/1.1
Host: news-pepafu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://254e9dcd65.news-mezutu.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
server: nginx
date: Wed, 08 May 2024 17:50:28 GMT
content-length: 0
location: https://da8cfb3fb1.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
vary: Origin
x-frame-options: DENY
X-Firefox-Spdy: h2
|
|
| da8cfb3fb1.news-mezutu.com/revopush.js | 136.243.42.50 | | 8.1 kB |
URL da8cfb3fb1.news-mezutu.com/revopush.js IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (20417), with no line terminators Hash2c5bbd971d7151a38f9a0fbe8fa83886 8fb8275965ff38c18a2fb5bd1be990c4592b39a0 b75cba17751a5e6c0e183475d1074739a876aa2cf4841e760692e573822db343
GET /revopush.js HTTP/1.1
Host: da8cfb3fb1.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://da8cfb3fb1.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:30 GMT
content-type: application/javascript; charset=utf-8
content-length: 8110
last-modified: Thu, 02 May 2024 14:58:42 GMT
etag: "6633aa22-1fae"
content-encoding: gzip
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| da8cfb3fb1.news-mezutu.com/lands/48/preloader-43.5794040.gif | 136.243.42.50 | | 7.0 kB |
URL da8cfb3fb1.news-mezutu.com/lands/48/preloader-43.5794040.gif IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
File typeGIF image data, version 89a, 160 x 160 Hash5794040ee88def220320edd0ed2e2ac9 7ec6d7843172d2bec7c0ed0d7eabed19a800fd7b c1a4896adebc502e9be1248a28bc641ef9a5b75c6bdefa5d704a220c128ee34e
GET /lands/48/preloader-43.5794040.gif HTTP/1.1
Host: da8cfb3fb1.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://da8cfb3fb1.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:30 GMT
content-type: image/gif
content-length: 7010
last-modified: Thu, 02 May 2024 14:58:42 GMT
etag: "6633aa22-1b62"
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| 3b7b6ab1f1.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4= | 136.243.42.50 | | 39 kB |
URL 3b7b6ab1f1.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4= IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
Hashf5956ab46888a5f83ba5dc9aebde87a2 78f02bd2ed70f380b769912d837945894fbe7767 fda2760392330a04e7b3daa298f3d998f88dfaa545519d2be6f6d3cb04355a4a
GET /?id=1218914904&p1=&p2=&p3=&p4= HTTP/1.1
Host: 3b7b6ab1f1.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://3d8b3560aa.news-mezutu.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:17 GMT
content-type: text/html; charset=UTF-8
vary: Origin
x-frame-options: DENY
X-Firefox-Spdy: h2
|
|
| news-pepafu.com/tds?id=1218914904&p1=&p2=&p3=&p4= | 144.76.106.61 | | 0 B |
URL news-pepafu.com/tds?id=1218914904&p1=&p2=&p3=&p4= IP144.76.106.61:0 ASN#24940 Hetzner Online GmbH
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tds?id=1218914904&p1=&p2=&p3=&p4= HTTP/1.1
Host: news-pepafu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://da8cfb3fb1.news-mezutu.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
server: nginx
date: Wed, 08 May 2024 17:50:28 GMT
content-length: 0
location: https://f7db83bf38.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
vary: Origin
x-frame-options: DENY
X-Firefox-Spdy: h2
|
|
| f7db83bf38.news-mezutu.com/revopush.js | 136.243.42.50 | | 8.1 kB |
URL f7db83bf38.news-mezutu.com/revopush.js IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (20417), with no line terminators Hash2c5bbd971d7151a38f9a0fbe8fa83886 8fb8275965ff38c18a2fb5bd1be990c4592b39a0 b75cba17751a5e6c0e183475d1074739a876aa2cf4841e760692e573822db343
GET /revopush.js HTTP/1.1
Host: f7db83bf38.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://f7db83bf38.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:30 GMT
content-type: application/javascript; charset=utf-8
content-length: 8110
last-modified: Thu, 02 May 2024 14:58:42 GMT
etag: "6633aa22-1fae"
content-encoding: gzip
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| partners-tds.com/WzJQVS | 142.202.51.61 | | 0 B |
IP142.202.51.61:0 ASN#63023 AS-GLOBALTELEHOST
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /WzJQVS HTTP/1.1
Host: partners-tds.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://f7db83bf38.news-mezutu.com/
Cookie: _subid=376l60j117j6i6; 933eb=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjFcIjoxNzE1MTkwNjExfSxcImNhbXBhaWduc1wiOntcIjFcIjoxNzE1MTkwNjExfSxcInRpbWVcIjoxNzE1MTkwNjExfSJ9.eBUGVDeNH4CwZsOUDJQQTGFummUDBDWkm-b51CPZuw4
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Server: nginx
Date: Wed, 08 May 2024 17:50:29 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-cache, no-store, must-revalidate
Expires: Wed, 08 May 2024 17:50:29 GMT
Location: https://news-pepafu.com/tds?id=1218914904&p1=&p2=&p3=&p4=
Set-Cookie: _subid=376l60j117j6ia; expires=Sat, 08 Jun 2024 17:50:29 GMT; path=/
933eb=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjFcIjoxNzE1MTkwNjExfSxcImNhbXBhaWduc1wiOntcIjFcIjoxNzE1MTkwNjExfSxcInRpbWVcIjoxNzE1MTkwNjExfSJ9.eBUGVDeNH4CwZsOUDJQQTGFummUDBDWkm-b51CPZuw4; expires=Thu, 15 Sep 2078 11:40:58 GMT; path=/
Vary: Accept-Encoding
Access-Control-Allow-Origin: *
|
|
| news-pepafu.com/tds?id=1218914904&p1=&p2=&p3=&p4= | 144.76.106.61 | | 0 B |
URL news-pepafu.com/tds?id=1218914904&p1=&p2=&p3=&p4= IP144.76.106.61:0 ASN#24940 Hetzner Online GmbH
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tds?id=1218914904&p1=&p2=&p3=&p4= HTTP/1.1
Host: news-pepafu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://f7db83bf38.news-mezutu.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
server: nginx
date: Wed, 08 May 2024 17:50:29 GMT
content-length: 0
location: https://f673936d7e.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
vary: Origin
x-frame-options: DENY
X-Firefox-Spdy: h2
|
|
| 6f29e9abe5.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4= | 136.243.42.50 | | 99 kB |
URL 6f29e9abe5.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4= IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
File typeHTML document, Unicode text, UTF-8 text, with very long lines (63955) Hash9af02cb9acd6d3639914bae8f32dfcda 1dd7b6bbf1c5e2b40887cdf7083e3a1aa412b4cb 6f1fbeedce779caa9cc4663274b29ed196cdcfc96f220c7083d4458625eb2fa1
GET /?id=1218914904&p1=&p2=&p3=&p4= HTTP/1.1
Host: 6f29e9abe5.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://9c3ba94d06.news-mezutu.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:28 GMT
content-type: text/html; charset=UTF-8
vary: Origin
x-frame-options: DENY
X-Firefox-Spdy: h2
|
|
| f673936d7e.news-mezutu.com/lands/57/css/style.css | 136.243.42.50 | | 1.2 kB |
URL f673936d7e.news-mezutu.com/lands/57/css/style.css IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
File typeASCII text, with very long lines (4468), with no line terminators Hashb07eb7ba1a3bb505eba51b55f4ffa9ff fea4806dafcdda47dff4bb6aa09362ded48879d5 086ceb41d9cccb6678d0a759d730383098e9d80d8067e9b8ce06d0972d2dae68
GET /lands/57/css/style.css HTTP/1.1
Host: f673936d7e.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://f673936d7e.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:30 GMT
content-type: text/css
content-length: 1213
last-modified: Thu, 02 May 2024 14:58:42 GMT
etag: "6633aa22-4bd"
content-encoding: gzip
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| f673936d7e.news-mezutu.com/lands/57/js/device.js | 136.243.42.50 | | 1.1 kB |
URL f673936d7e.news-mezutu.com/lands/57/js/device.js IP136.243.42.50:0 ASN#24940 Hetzner Online GmbH
File typeJavaScript source, ASCII text, with very long lines (3289), with no line terminators Hash2d9887b21aa6b47c56e7f43e66560a4f 42cdfc5b3b23d32152750bf2cea4233044491768 863a13c42ef72b562bc7aa5005b8ff5693763ae8d16ce3bfc3d876e92a7fdf85
GET /lands/57/js/device.js HTTP/1.1
Host: f673936d7e.news-mezutu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://f673936d7e.news-mezutu.com/?id=1218914904&p1=&p2=&p3=&p4=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 17:50:30 GMT
content-type: application/javascript; charset=utf-8
content-length: 1111
last-modified: Thu, 02 May 2024 14:58:42 GMT
etag: "6633aa22-457"
content-encoding: gzip
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| partners-tds.com/WzJQVS | 142.202.51.61 | | 0 B |
IP142.202.51.61:0 ASN#63023 AS-GLOBALTELEHOST
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /WzJQVS HTTP/1.1
Host: partners-tds.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://f673936d7e.news-mezutu.com/
Cookie: _subid=376l60j117j6ia; 933eb=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjFcIjoxNzE1MTkwNjExfSxcImNhbXBhaWduc1wiOntcIjFcIjoxNzE1MTkwNjExfSxcInRpbWVcIjoxNzE1MTkwNjExfSJ9.eBUGVDeNH4CwZsOUDJQQTGFummUDBDWkm-b51CPZuw4
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Server: nginx
Date: Wed, 08 May 2024 17:50:29 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-cache, no-store, must-revalidate
Expires: Wed, 08 May 2024 17:50:29 GMT
Location: https://news-pepafu.com/tds?id=1218914904&p1=&p2=&p3=&p4=
Set-Cookie: _subid=376l60j117j6ig; expires=Sat, 08 Jun 2024 17:50:29 GMT; path=/
933eb=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjFcIjoxNzE1MTkwNjExfSxcImNhbXBhaWduc1wiOntcIjFcIjoxNzE1MTkwNjExfSxcInRpbWVcIjoxNzE1MTkwNjExfSJ9.eBUGVDeNH4CwZsOUDJQQTGFummUDBDWkm-b51CPZuw4; expires=Thu, 15 Sep 2078 11:40:58 GMT; path=/
Vary: Accept-Encoding
Access-Control-Allow-Origin: *
|
|