| cdnjs.cloudflare.com/ajax/libs/jquery/1.9.0/jquery.min.js |  104.17.25.14 | 200 OK | 30 kB |
URL GET HTTP/2cdnjs.cloudflare.com/ajax/libs/jquery/1.9.0/jquery.min.js IP104.17.25.14:443
Requested byhttps://vid142.site/e/6EJVG51O0J9M?autostart=true&t=4xjRDPcmAFQByg== CertificateIssuerCloudflare, Inc. Subjectsni.cloudflaressl.com Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (32132) Hash0652da382b6fceb033dfe2b6c06d4d11 002da8cbe90fcf32fbdebb72386125079e3805ee 7fa0d5c3f538c76f878e012ac390597faecaabfe6fb9d459b919258e76c5df8e
GET /ajax/libs/jquery/1.9.0/jquery.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vid142.site/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 08 May 2024 21:37:53 GMT
content-type: application/javascript; charset=utf-8
content-length: 29505
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03ec4-16b8c"
last-modified: Mon, 04 May 2020 16:11:48 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 710404
expires: Mon, 28 Apr 2025 21:37:53 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9l4eUeNGqgcTiGAwKnI0ia01ChhmOKsyoeb7Kx5XcZLEywALIt%2FFSelhZOqjqT9L%2Fz5PlB1ySEPGZiGv6SdRDiBbKU4MMsRgXmO9rzwHo%2BBCH3Rl%2FwZ4lVsBZmbwPb%2BTpkYwmaPF"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 880c97f7df00569b-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| valueslinear.com/52/ba/41/52ba419ba307b72ff4090aea25de5317.js |  172.240.108.84 | 200 OK | 17 kB |
URL GET HTTP/1.1valueslinear.com/52/ba/41/52ba419ba307b72ff4090aea25de5317.js IP172.240.108.84:443
Requested byhttps://vid142.site/e/6EJVG51O0J9M?autostart=true&t=4xjRDPcmAFQByg== CertificateIssuerLet's Encrypt Subjectvalueslinear.com Fingerprint1B:5F:42:9F:A7:B8:88:69:0E:18:50:43:65:11:E1:69:A0:24:C0:4E ValidityTue, 02 Apr 2024 11:12:23 GMT - Mon, 01 Jul 2024 11:12:22 GMT
File typeJavaScript source, ASCII text, with very long lines (40658), with no line terminators Hash85eb4e0ddb29935acb792d19ec4b6f48 75c2182ec6f218d63756927df52716f94c73d38d 67af7cb13dfbbbc0661b5735a4fd01a0f7aa64928472c40be9c063f6de96dd44
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /52/ba/41/52ba419ba307b72ff4090aea25de5317.js HTTP/1.1
Host: valueslinear.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vid142.site/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Wed, 08 May 2024 21:37:54 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 84164a2ce67eb45964e5cd5311f1bf2d
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
|
|
| ocsp.r2m03.amazontrust.com/ | 143.204.53.97 | | 471 B |
URL ocsp.r2m03.amazontrust.com/ IP143.204.53.97:0
Hash17d83a6a1ce5ec032b9d0be6c8c68106 9b412e1c9f9694753b73daa262811ec4c420e7d1 935af939ae598190c9c8175f1ac54241ab2614b3c7599a4c92e1be2ecd42ab23
POST / HTTP/1.1
Host: ocsp.r2m03.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=7200
Date: Wed, 08 May 2024 21:37:54 GMT
Last-Modified: Wed, 08 May 2024 20:26:00 GMT
Server: ECAcc (ska/F7A5)
X-Cache: Miss from cloudfront
Via: 1.1 142be88a35733307a5e7de05da0a20b8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: HdtubxO07at3-bXM9cfykQrlZG42KaLU50c7S7chr2PbmgQGQM3KaA==
Age: 4314
|
|
| proftrafficcounter.com/stats |  52.57.164.94 | 200 OK | 40 B |
URL GET HTTP/2proftrafficcounter.com/stats IP52.57.164.94:443
Requested byhttps://vid142.site/e/6EJVG51O0J9M?autostart=true&t=4xjRDPcmAFQByg== CertificateIssuerAmazon Subjectproftrafficcounter.com FingerprintE3:9F:79:6F:80:C0:BF:F8:C4:EB:45:F3:E9:0F:A7:41:F6:0C:05:E6 ValidityTue, 21 Nov 2023 00:00:00 GMT - Thu, 19 Dec 2024 23:59:59 GMT
File typeASCII text, with no line terminators Hash02d700af4e86d598f42b432f4bb6f74f 1fef8135e52f052fc3ed0c13bd850ad5b1bc4a1e 9026e87a141c6e84713c4cdfb5e95429cb696b5de557cd14c178882282bea5f6
GET /stats HTTP/1.1
Host: proftrafficcounter.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://vid142.site
DNT: 1
Connection: keep-alive
Referer: https://vid142.site/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 08 May 2024 21:37:54 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: https://vid142.site
vary: Origin
access-control-allow-credentials: true
set-cookie: uid_id2=10f8ba08-39cf-491e-b594-aee22f4cddd9:1:1; expires=Sat, 06 May 2034 21:37:54 GMT; secure; SameSite=None
X-Firefox-Spdy: h2
|
|
| proftrafficcounter.com/stats | 52.57.164.94 | 200 OK | 40 B |
URL GET HTTP/2proftrafficcounter.com/stats IP52.57.164.94:443
Requested byhttps://vid142.site/e/6EJVG51O0J9M?autostart=true&t=4xjRDPcmAFQByg== CertificateIssuerAmazon Subjectproftrafficcounter.com FingerprintE3:9F:79:6F:80:C0:BF:F8:C4:EB:45:F3:E9:0F:A7:41:F6:0C:05:E6 ValidityTue, 21 Nov 2023 00:00:00 GMT - Thu, 19 Dec 2024 23:59:59 GMT
File typeASCII text, with no line terminators Hash02d700af4e86d598f42b432f4bb6f74f 1fef8135e52f052fc3ed0c13bd850ad5b1bc4a1e 9026e87a141c6e84713c4cdfb5e95429cb696b5de557cd14c178882282bea5f6
GET /stats HTTP/1.1
Host: proftrafficcounter.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://vid142.site
DNT: 1
Connection: keep-alive
Referer: https://vid142.site/
Cookie: uid_id2=10f8ba08-39cf-491e-b594-aee22f4cddd9:1:1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 08 May 2024 21:37:54 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: https://vid142.site
vary: Origin
access-control-allow-credentials: true
X-Firefox-Spdy: h2
|
|
| vid142.site/mediainfo/XXFPuqkC5oLQroElKbttTTXEJ_wdlAg=,200,136,126,185,187,168,179,171,125,227,159,134,163,219,140,221?autostart=true&t=4xjRDPcmAFQByg== | 172.67.199.60 | 200 OK | 268 B |
URL GET HTTP/3vid142.site/mediainfo/XXFPuqkC5oLQroElKbttTTXEJ_wdlAg=,200,136,126,185,187,168,179,171,125,227,159,134,163,219,140,221?autostart=true&t=4xjRDPcmAFQByg== IP172.67.199.60:443
Requested byhttps://vid142.site/e/6EJVG51O0J9M?autostart=true&t=4xjRDPcmAFQByg== CertificateIssuerGoogle Trust Services LLC Subjectvid142.site Fingerprint30:DB:E2:03:25:AC:A4:38:4A:78:31:91:FF:C7:16:43:11:A9:4C:DD ValidityWed, 10 Apr 2024 03:06:57 GMT - Tue, 09 Jul 2024 03:06:56 GMT
Hash6c1dc757cd5a5e8139945f28cefd94ac bffc8ff5f9d63bcf3221f3b503ebc19da6dd4a5d 4cdf096fc0032d06219fb6586f21021df5b70556d10ff968abb251bc3a435332
GET /mediainfo/XXFPuqkC5oLQroElKbttTTXEJ_wdlAg=,200,136,126,185,187,168,179,171,125,227,159,134,163,219,140,221?autostart=true&t=4xjRDPcmAFQByg== HTTP/1.1
Host: vid142.site
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: https://vid142.site/e/6EJVG51O0J9M?autostart=true&t=4xjRDPcmAFQByg==
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 08 May 2024 21:37:54 GMT
content-type: application/json
x-cache: BYPASS
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=CKY9IkFxU4d5qNTmpLnd%2FFvkr6%2FhCskNW6J1%2BZKmSwz0qjrjIK8tjYh85jxRdSr6ehR9W%2BeOux4kBi1CsBxSkZLc01vJENnLuWFm%2BPRboJzx2QcZmaSSInWYZEyCXg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 880c97fc6e07b51d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| vid142.site/views/4070537 | 172.67.199.60 | 200 OK | 86 kB |
URL GET HTTP/3vid142.site/views/4070537 IP172.67.199.60:443
Requested byhttps://vid142.site/e/6EJVG51O0J9M?autostart=true&t=4xjRDPcmAFQByg== CertificateIssuerGoogle Trust Services LLC Subjectvid142.site Fingerprint30:DB:E2:03:25:AC:A4:38:4A:78:31:91:FF:C7:16:43:11:A9:4C:DD ValidityWed, 10 Apr 2024 03:06:57 GMT - Tue, 09 Jul 2024 03:06:56 GMT
Hash87aa60e6e440a6656bc74eb20476d662 02ede1eec131f84e860e69c181f01c93b2ff6d76 b58a3da5fde2680191877ec88a1aa7d06927cc3b30cdf0d0db8c39b488891576
GET /views/4070537 HTTP/1.1
Host: vid142.site
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: https://vid142.site/e/6EJVG51O0J9M?autostart=true&t=4xjRDPcmAFQByg==
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 08 May 2024 21:37:54 GMT
content-type: text/html
m-cache: BYPASS
x-cache: BYPASS
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=YAez2p2%2BVVweNjyhNskVaM8Xne0IDrK8CpBHdupc5TrkpMN%2B0a1IdmIWf1W%2BwQ3c4KnG%2FnFflhsNHxrqF6VyJoCeFV8juxxAsRKAq4CmPfci52Wurwop6BU4K69%2F0g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 880c97fc4dd8b51d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| vid142.site/assets/players/jwplayer-8.26.9/provider.hlsjs.js | 172.67.199.60 | 200 OK | 123 kB |
URL GET HTTP/3vid142.site/assets/players/jwplayer-8.26.9/provider.hlsjs.js IP172.67.199.60:443
Requested byhttps://vid142.site/e/6EJVG51O0J9M?autostart=true&t=4xjRDPcmAFQByg== CertificateIssuerGoogle Trust Services LLC Subjectvid142.site Fingerprint30:DB:E2:03:25:AC:A4:38:4A:78:31:91:FF:C7:16:43:11:A9:4C:DD ValidityWed, 10 Apr 2024 03:06:57 GMT - Tue, 09 Jul 2024 03:06:56 GMT
File typeJavaScript source, ASCII text, with very long lines (65143) Size123 kB (122729 bytes) Hash4e89bac040142aae140e0ccf7ba24ed7 bbe7a121360d2813a7cf0377ed9cb11571a6c765 2be492fddf54fbdc9ce3e72644feea311b579c77232ba0de3352cbd8aa4295ac
GET /assets/players/jwplayer-8.26.9/provider.hlsjs.js HTTP/1.1
Host: vid142.site
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vid142.site/e/6EJVG51O0J9M?autostart=true&t=4xjRDPcmAFQByg==
Cookie: dom3ic8zudi28v8lr6fgphwffqoz0j6c=10f8ba08-39cf-491e-b594-aee22f4cddd9%3A1%3A1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 08 May 2024 21:37:54 GMT
content-type: application/javascript
last-modified: Mon, 18 Sep 2023 22:03:52 GMT
etag: W/"6508c948-5ffd0"
m-cache: MISS
expires: Thu, 30 May 2024 18:38:24 GMT
cache-control: max-age=2678400
access-control-allow-origin: *
cf-cache-status: HIT
age: 701970
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hQGDbcMrKSpxNnJLqBixyB4UEjXcjxTGbSNJybNbwdpCG5dX%2BdLfY0qMySJn%2BV6VvTK%2FUOBI20Eb27Rg7MpRRsUqGu5HL6udPrqU2wqT%2FKxSwyldbgNqu4VZnWgjmA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880c97fdcfe3b51d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| gamn.an3087959.site/_v2-bknx/12a3c523f8105800ed8c394685aeeb0bc22efe5c16bebbed17047baea93ece832257df1a4b6125fcfa38c35da05dee86a6d39242d76ad3eadbbee668052ef39263904aa01e1abc5612cbfcf5741271443838842710042cd496dfe8/h/thumbnails.jpg |  188.114.96.1 | 200 OK | 372 kB |
URL GET HTTP/3gamn.an3087959.site/_v2-bknx/12a3c523f8105800ed8c394685aeeb0bc22efe5c16bebbed17047baea93ece832257df1a4b6125fcfa38c35da05dee86a6d39242d76ad3eadbbee668052ef39263904aa01e1abc5612cbfcf5741271443838842710042cd496dfe8/h/thumbnails.jpg IP188.114.96.1:443
Requested byhttps://vid142.site/e/6EJVG51O0J9M?autostart=true&t=4xjRDPcmAFQByg== CertificateIssuerLet's Encrypt Subjectan3087959.site Fingerprint36:8B:0E:21:67:9D:C8:7D:03:B6:CC:F7:65:61:39:2E:64:97:AC:44 ValidityTue, 12 Mar 2024 01:32:09 GMT - Mon, 10 Jun 2024 01:32:08 GMT
File typeJPEG image data, JFIF standard 1.02, aspect ratio, density 404x405, segment length 16, comment: "Lavc60.21.100", baseline, precision 8, 1620x1111, components 3 Size372 kB (372356 bytes) Hashfff25e485d1f41b12166b6ff3259ad92 d323b6a05f8a4d6bda1d790f3a23a23048195f99 1e10d86180dc1510fc8112b739cbc94f22b3457b97aa5262b33a1295382dab92
GET /_v2-bknx/12a3c523f8105800ed8c394685aeeb0bc22efe5c16bebbed17047baea93ece832257df1a4b6125fcfa38c35da05dee86a6d39242d76ad3eadbbee668052ef39263904aa01e1abc5612cbfcf5741271443838842710042cd496dfe8/h/thumbnails.jpg HTTP/1.1
Host: gamn.an3087959.site
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vid142.site/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 08 May 2024 21:37:55 GMT
content-type: image/jpg
content-length: 372356
last-modified: Tue, 11 Jul 2023 21:24:25 GMT
etag: "64adc889-5ae84"
x-cache: HIT
x-proxy-cache: HIT
access-control-allow-origin: *
cache-control: public, max-age=31536000
cf-cache-status: HIT
age: 694413
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0dDLWkjtjMetSnGDOTdMzwqJLpbWHBnwJr%2Fjoa3hPhMJpypjLURDPl%2B42bsE8a08r8%2FtBSFr6%2FQy4Ou2CdMMGXjFJiA5drIM%2BA3kr2YReX3KbGXVBV%2FWryBn7YNMD5foiaiAGGQr"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880c97ffbf9a56b1-OSL
alt-svc: h3=":443"; ma=86400
|
|
| capaciousdrewreligion.com/advertisers.js | 172.240.127.234 | 200 OK | 0 B |
URL GET HTTP/1.1capaciousdrewreligion.com/advertisers.js IP172.240.127.234:443
Requested byhttps://vid142.site/e/6EJVG51O0J9M?autostart=true&t=4xjRDPcmAFQByg== CertificateIssuerLet's Encrypt Subjectcapaciousdrewreligion.com FingerprintBB:9C:12:88:24:43:D4:47:71:3F:F0:A4:BB:E1:85:65:CE:E7:92:E4 ValidityMon, 06 May 2024 02:35:23 GMT - Sun, 04 Aug 2024 02:35:22 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /advertisers.js HTTP/1.1
Host: capaciousdrewreligion.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vid142.site/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Wed, 08 May 2024 21:37:55 GMT
Content-Type: application/javascript
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 8bb4993630e5a97b7a19f93ea4d62638
Strict-Transport-Security: max-age=0; includeSubdomains
|
|
| unseenreport.com/pxf.gif?uuid=10f8ba08-39cf-491e-b594-aee22f4cddd9&eb=978028c5053b26833423c7a069ce3bd5&te=5db3a4e34790624df926db520a13f79f&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&dev=e&res=14.2071&b_frame=0&pk=52ba419ba307b72ff4090aea25de5317&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=21 | 192.243.59.20 | 200 OK | 1 B |
URL GET HTTP/1.1unseenreport.com/pxf.gif?uuid=10f8ba08-39cf-491e-b594-aee22f4cddd9&eb=978028c5053b26833423c7a069ce3bd5&te=5db3a4e34790624df926db520a13f79f&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&dev=e&res=14.2071&b_frame=0&pk=52ba419ba307b72ff4090aea25de5317&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=21 IP192.243.59.20:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://vid142.site/e/6EJVG51O0J9M?autostart=true&t=4xjRDPcmAFQByg== CertificateIssuerLet's Encrypt Subject*.unseenreport.com Fingerprint71:46:15:FD:76:6A:F5:5B:51:06:CC:93:DD:D8:63:E3:8B:10:BF:13 ValidityFri, 22 Mar 2024 07:32:41 GMT - Thu, 20 Jun 2024 07:32:40 GMT
File typevery short file (no magic) Hash93b885adfe0da089cdf634904fd59f71 5ba93c9db0cff93f52b521d7420e43f6eda2784f 6e340b9cffb37a989ca544e6bb780a2c78901d3fb33738768511a30617afa01d
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /pxf.gif?uuid=10f8ba08-39cf-491e-b594-aee22f4cddd9&eb=978028c5053b26833423c7a069ce3bd5&te=5db3a4e34790624df926db520a13f79f&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&dev=e&res=14.2071&b_frame=0&pk=52ba419ba307b72ff4090aea25de5317&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=21 HTTP/1.1
Host: unseenreport.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vid142.site/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Wed, 08 May 2024 21:37:55 GMT
Content-Type: image/gif
Content-Length: 1
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 923943ce7b419ad6a73906a6e8ce774c
Strict-Transport-Security: max-age=0; includeSubdomains
|
|
| vid142.site/assets/players/jwplayer-8.26.9/jwplayer.js?v1 | 172.67.199.60 | 200 OK | 50 kB |
URL GET HTTP/3vid142.site/assets/players/jwplayer-8.26.9/jwplayer.js?v1 IP172.67.199.60:443
Requested byhttps://vid142.site/e/6EJVG51O0J9M?autostart=true&t=4xjRDPcmAFQByg== CertificateIssuerGoogle Trust Services LLC Subjectvid142.site Fingerprint30:DB:E2:03:25:AC:A4:38:4A:78:31:91:FF:C7:16:43:11:A9:4C:DD ValidityWed, 10 Apr 2024 03:06:57 GMT - Tue, 09 Jul 2024 03:06:56 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (65147) Hasha27042e4168b8224e40c7f36c3a36d1e ba1f8b5fc524e8e96a57682a00bb689d174fb600 a37e9266fd7dad068329b7af30e5c3c4982611b2be7cceb649aa9b61f4fc68cf
GET /assets/players/jwplayer-8.26.9/jwplayer.js?v1 HTTP/1.1
Host: vid142.site
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vid142.site/e/6EJVG51O0J9M?autostart=true&t=4xjRDPcmAFQByg==
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 08 May 2024 21:37:53 GMT
content-type: application/javascript
last-modified: Mon, 18 Sep 2023 22:03:52 GMT
etag: W/"6508c948-1acd3"
m-cache: MISS
expires: Thu, 30 May 2024 16:17:36 GMT
cache-control: max-age=2678400
access-control-allow-origin: *
cf-cache-status: HIT
age: 710417
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6iAVivqp7Hp9%2Fxvtm8S05IP%2BYkbF%2Bx2CqZtVOhbuIOeDonhePyCBIUa%2FZl3w2fEA%2B18Z05wujTllRD2yk8b4WeU8AdsOx39rh21esEAx2wy9NjKMfj9IaynMpCUC9Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880c97f7bfe8b51d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| vid142.site/e/6EJVG51O0J9M?autostart=true&t=4xjRDPcmAFQByg== | 172.67.199.60 | 200 OK | 1.0 kB |
URL User Request GET HTTP/2vid142.site/e/6EJVG51O0J9M?autostart=true&t=4xjRDPcmAFQByg== IP172.67.199.60:443
CertificateIssuerGoogle Trust Services LLC Subjectvid142.site Fingerprint30:DB:E2:03:25:AC:A4:38:4A:78:31:91:FF:C7:16:43:11:A9:4C:DD ValidityWed, 10 Apr 2024 03:06:57 GMT - Tue, 09 Jul 2024 03:06:56 GMT
File typeHTML document, ASCII text, with very long lines (1068), with no line terminators Hash1656cea7d863e39af6e6ebf160ab960b a007f6e1dfed3eb07ebc82c0b19d0197275d4a29 83cc30e7975fd5c7de7db2d9e2c5a1b197e4dbec2155e28d2cac792601361636
GET /e/6EJVG51O0J9M?autostart=true&t=4xjRDPcmAFQByg== HTTP/1.1
Host: vid142.site
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 08 May 2024 21:37:53 GMT
content-type: text/html; charset=UTF-8
m-cache: MISS
x-cache: BYPASS
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=YCV%2BL4Myrmgzjo2LqcAY3yX0pmn1MllE9GhfuZJ9gxm19iEWBJa2%2BBKpFIW0Pa820hfNc1mD4T0OR2CPlQ9erDr7PugakBJmp4fqLzFSAve17pzSabWed9O0v4tsnA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 880c97f5bd02569f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| downstairsnegotiatebarren.com/sfp.js | 104.21.35.227 | 200 OK | 86 kB |
URL GET HTTP/2downstairsnegotiatebarren.com/sfp.js IP104.21.35.227:443
Requested byhttps://vid142.site/e/6EJVG51O0J9M?autostart=true&t=4xjRDPcmAFQByg== CertificateIssuerLet's Encrypt Subjectdownstairsnegotiatebarren.com Fingerprint5D:DB:CB:C6:CE:2A:8B:34:7D:BC:43:74:33:1D:5F:77:48:F7:BC:1B ValidityThu, 02 May 2024 21:26:34 GMT - Wed, 31 Jul 2024 21:26:33 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sfp.js HTTP/1.1
Host: downstairsnegotiatebarren.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vid142.site/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 08 May 2024 21:37:54 GMT
content-type: application/javascript; charset=utf-8
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
access-control-allow-origin: *
expires: Thu, 01 Jan 1970 00:00:01 GMT
cache-control: max-age=14400
x-request-id: 7c2a90aee6e870d6bc6190e5568515b7
strict-transport-security: max-age=0; includeSubdomains
cf-cache-status: EXPIRED
last-modified: Wed, 08 May 2024 21:37:54 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HrHlFRzgROlsrrH0QcxCGMjbH5pE1aRYuw%2Fh0UvD%2BZ%2FViSAfDrzvls6lLYhJgmLWMCSUlVk%2F4ExfPRXNNAKvQUmqTCt9s1LEktKcWUskldLpwhm8vk8JvBcOTrorMNGZVTctKLr39Z2g8m4VJBeoZQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880c97fb2bd6712a-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| vid142.site/favicon.ico | 172.67.199.60 | 200 OK | 0 B |
IP172.67.199.60:443
Requested byhttps://vid142.site/e/6EJVG51O0J9M?autostart=true&t=4xjRDPcmAFQByg== CertificateIssuerGoogle Trust Services LLC Subjectvid142.site Fingerprint30:DB:E2:03:25:AC:A4:38:4A:78:31:91:FF:C7:16:43:11:A9:4C:DD ValidityWed, 10 Apr 2024 03:06:57 GMT - Tue, 09 Jul 2024 03:06:56 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1
Host: vid142.site
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vid142.site/e/6EJVG51O0J9M?autostart=true&t=4xjRDPcmAFQByg==
Cookie: dom3ic8zudi28v8lr6fgphwffqoz0j6c=10f8ba08-39cf-491e-b594-aee22f4cddd9%3A1%3A1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 08 May 2024 21:37:54 GMT
content-type: image/x-icon
content-length: 0
cache-control: max-age=14400
cf-cache-status: HIT
age: 3094
last-modified: Wed, 08 May 2024 20:46:20 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=G865X%2B%2FPily79SpK%2FANazEiSj7wwFumdgDXC%2B6HgxgQvKgcBZW6VD18C28jmkzOiuiOjF0%2Fxz5qeNoWFumaRdWWji5reU7IDFNWHQGCNvwgs9g0DyJKW3vDJ5rKK5Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880c97fd1efeb51d-OSL
alt-svc: h3=":443"; ma=86400
|
|
| vid142.site/assets/mcloud/min/embed.css?v=6630dcfc | 172.67.199.60 | 200 OK | 8.5 kB |
URL GET HTTP/3vid142.site/assets/mcloud/min/embed.css?v=6630dcfc IP172.67.199.60:443
Requested byhttps://vid142.site/e/6EJVG51O0J9M?autostart=true&t=4xjRDPcmAFQByg== CertificateIssuerGoogle Trust Services LLC Subjectvid142.site Fingerprint30:DB:E2:03:25:AC:A4:38:4A:78:31:91:FF:C7:16:43:11:A9:4C:DD ValidityWed, 10 Apr 2024 03:06:57 GMT - Tue, 09 Jul 2024 03:06:56 GMT
File typeASCII text, with very long lines (8532), with no line terminators Hash18049c2b04cd6ed86be6844b36b28b5e 422fb6b1b0335cbbd45c0f8495d70ef39ccfc696 83dd4a0a093dfe32c6ea13157c9479c3b76faded4a7ae38a38e3dff9d6541d7b
GET /assets/mcloud/min/embed.css?v=6630dcfc HTTP/1.1
Host: vid142.site
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vid142.site/e/6EJVG51O0J9M?autostart=true&t=4xjRDPcmAFQByg==
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 08 May 2024 21:37:53 GMT
content-type: text/css
last-modified: Mon, 08 Apr 2024 02:37:41 GMT
etag: W/"66135875-2152"
m-cache: HIT
expires: Thu, 30 May 2024 18:38:13 GMT
cache-control: max-age=2678400
access-control-allow-origin: *
cf-cache-status: HIT
age: 701980
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=k3i9r23qrSVVMMKoFPW2m81gSv2FHUMosuJLza%2FPAi7pzC5zknDrL1WdXYLhgJfcoXlVtwlgbyyeM2Rg7GH7Cl8vcHuoTnSOxLYmLhRFeTZFcNGdParnO%2FEUoDPsCA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880c97f7afd3b51d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| gamn.an3087959.site/_v2-bknx/12a3c523f8105800ed8c394685aeeb0bc22efe5c16bebbed17047baea93ece832257df1a4b6125fcfa38c35da05dee86a6d39242d76ad3eadbbee668052ef39263904aa01e1abc5612cbfcf5741271443838842710042cd496dfe8/h/thumbnails.vtt | 188.114.96.1 | 200 OK | 6.6 kB |
URL GET HTTP/2gamn.an3087959.site/_v2-bknx/12a3c523f8105800ed8c394685aeeb0bc22efe5c16bebbed17047baea93ece832257df1a4b6125fcfa38c35da05dee86a6d39242d76ad3eadbbee668052ef39263904aa01e1abc5612cbfcf5741271443838842710042cd496dfe8/h/thumbnails.vtt IP188.114.96.1:443
Requested byhttps://vid142.site/e/6EJVG51O0J9M?autostart=true&t=4xjRDPcmAFQByg== CertificateIssuerLet's Encrypt Subjectan3087959.site Fingerprint36:8B:0E:21:67:9D:C8:7D:03:B6:CC:F7:65:61:39:2E:64:97:AC:44 ValidityTue, 12 Mar 2024 01:32:09 GMT - Mon, 10 Jun 2024 01:32:08 GMT
File typeWebVTT subtitles, ASCII text, with very long lines (6942), with no line terminators Hashcf609c10dd5f6c396147c05513c79ae9 77196b88c25d33c3f682c86795ddfc05f270ae96 1d449b49c087ffae62009b594d8a7e32ff426f7ebe4e20c512eefee85b6c04e7
GET /_v2-bknx/12a3c523f8105800ed8c394685aeeb0bc22efe5c16bebbed17047baea93ece832257df1a4b6125fcfa38c35da05dee86a6d39242d76ad3eadbbee668052ef39263904aa01e1abc5612cbfcf5741271443838842710042cd496dfe8/h/thumbnails.vtt HTTP/1.1
Host: gamn.an3087959.site
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://vid142.site
DNT: 1
Connection: keep-alive
Referer: https://vid142.site/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 08 May 2024 21:37:55 GMT
content-type: text/vtt
last-modified: Tue, 11 Jul 2023 21:24:25 GMT
etag: W/"64adc889-19f3"
x-cache: MISS
x-proxy-cache: MISS
access-control-allow-origin: *
cache-control: public, max-age=31536000
cf-cache-status: HIT
age: 705757
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=J9xCtNvYmRpZ1yKikvOlvHFvWVCfUFo4v9uITXmUWarHe4EkdhQmU1QE%2F1abA%2BF79ACd%2BKldkXh0OIyk0jkkdZGN7bgFJY8r3YTdzMxpLhv06O9KYDaQaSE3E8KnWv3leR%2FVfuYs"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880c97ff6a4d0afa-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| vid142.site/futoken | 172.67.199.60 | 200 OK | 257 B |
IP172.67.199.60:443
Requested byhttps://vid142.site/e/6EJVG51O0J9M?autostart=true&t=4xjRDPcmAFQByg== CertificateIssuerGoogle Trust Services LLC Subjectvid142.site Fingerprint30:DB:E2:03:25:AC:A4:38:4A:78:31:91:FF:C7:16:43:11:A9:4C:DD ValidityWed, 10 Apr 2024 03:06:57 GMT - Tue, 09 Jul 2024 03:06:56 GMT
File typeJavaScript source, ASCII text, with no line terminators Hasha266b083ad84fca9a36bdb6c330dc8d8 88f38b6302f21dbb7971893ccc17a2a34fae06d2 f8af4e499abbcd74d221469e639d4503afa4a54b8cf7531b228b1ab883909114
GET /futoken HTTP/1.1
Host: vid142.site
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vid142.site/e/6EJVG51O0J9M?autostart=true&t=4xjRDPcmAFQByg==
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 08 May 2024 21:37:53 GMT
m-cache: MISS
x-cache: BYPASS
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=F2f96HmUD%2B26wFBaxdXtoxJy%2BHI9lxCoHoCGPABNl5eM%2BfHSFGhOdfHW6z%2BBdCFCWns7I7U%2BS5L8LnyJRwl15h3AhQKmk%2B%2BkWl2N8A1Ww3QrdC8VtUzQ2bnay8eCUw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 880c97f7bfe1b51d-OSL
alt-svc: h3=":443"; ma=86400
|
|
| vid142.site/assets/mcloud/min/embed.js?v=6630dcfc | 172.67.199.60 | 200 OK | 193 kB |
URL GET HTTP/3vid142.site/assets/mcloud/min/embed.js?v=6630dcfc IP172.67.199.60:443
Requested byhttps://vid142.site/e/6EJVG51O0J9M?autostart=true&t=4xjRDPcmAFQByg== CertificateIssuerGoogle Trust Services LLC Subjectvid142.site Fingerprint30:DB:E2:03:25:AC:A4:38:4A:78:31:91:FF:C7:16:43:11:A9:4C:DD ValidityWed, 10 Apr 2024 03:06:57 GMT - Tue, 09 Jul 2024 03:06:56 GMT
Size193 kB (192577 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /assets/mcloud/min/embed.js?v=6630dcfc HTTP/1.1
Host: vid142.site
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vid142.site/e/6EJVG51O0J9M?autostart=true&t=4xjRDPcmAFQByg==
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 08 May 2024 21:37:53 GMT
content-type: application/javascript
last-modified: Tue, 30 Apr 2024 11:58:51 GMT
etag: W/"6630dcfb-2f041"
m-cache: HIT
expires: Thu, 30 May 2024 18:38:13 GMT
cache-control: max-age=2678400
access-control-allow-origin: *
cf-cache-status: HIT
age: 701980
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=CYgEn9%2BJ%2FWop7bT8cVCeO4DVMctKPb1qgLkILTv5awC%2BxNuPqfBzQVidAy60UOv1wsIJDOAe86335vsjk6SAdsUB7eudkSqvpwBYvjVU1AEosB5F06BUrCUVuFFDGQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880c97f7bfeab51d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| vid142.site/assets/players/jwplayer-8.26.9/jwplayer.core.controls.js | 172.67.199.60 | 200 OK | 324 kB |
URL GET HTTP/3vid142.site/assets/players/jwplayer-8.26.9/jwplayer.core.controls.js IP172.67.199.60:443
Requested byhttps://vid142.site/e/6EJVG51O0J9M?autostart=true&t=4xjRDPcmAFQByg== CertificateIssuerGoogle Trust Services LLC Subjectvid142.site Fingerprint30:DB:E2:03:25:AC:A4:38:4A:78:31:91:FF:C7:16:43:11:A9:4C:DD ValidityWed, 10 Apr 2024 03:06:57 GMT - Tue, 09 Jul 2024 03:06:56 GMT
Size324 kB (323494 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /assets/players/jwplayer-8.26.9/jwplayer.core.controls.js HTTP/1.1
Host: vid142.site
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vid142.site/e/6EJVG51O0J9M?autostart=true&t=4xjRDPcmAFQByg==
Cookie: dom3ic8zudi28v8lr6fgphwffqoz0j6c=10f8ba08-39cf-491e-b594-aee22f4cddd9%3A1%3A1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 08 May 2024 21:37:54 GMT
content-type: application/javascript
last-modified: Mon, 18 Sep 2023 22:03:52 GMT
etag: W/"6508c948-4efa6"
m-cache: MISS
expires: Thu, 30 May 2024 16:17:37 GMT
cache-control: max-age=2678400
access-control-allow-origin: *
cf-cache-status: HIT
age: 710417
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=eyFYkDOYZURIdmvISIFENeYX%2F%2FcfgTDN2qMQqGSLXEaMxV3URgxQfQKt3L6kWVNMzrMFphEHbu4R0F2LiUdY%2FykZNBI%2BISRVE0R0l9wkWvGBTzbiQogTig7Wqwqjag%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880c97fdcfdeb51d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|