504 B IP
ASN #20940 Akamai International B.V.
Hash 91a50ba757c5ca46c896205a21d87a49
0b48953a685631845a7034c8948077de0e60de80
15d10fabb92098e81e218740ae04059fe6340c321ee70325db46f6c9cb7ad817
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "15D10FABB92098E81E218740AE04059FE6340C321EE70325DB46F6C9CB7AD817"
Last-Modified: Thu, 18 Jul 2024 07:16:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5253
Expires: Fri, 19 Jul 2024 17:26:55 GMT
Date: Fri, 19 Jul 2024 15:59:22 GMT
Connection: keep-alive
504 B IP
ASN #20940 Akamai International B.V.
Hash c746d0145c03aa7156aa6a21d8cd2d41
8fb7cb950f28012e8bf42cf02c7598862c66e21f
c695ccd93d9e45c8d7b4b08201a3fe45221658531fa0a54f778dadcc2479399e
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "C695CCD93D9E45C8D7B4B08201A3FE45221658531FA0A54F778DADCC2479399E"
Last-Modified: Thu, 18 Jul 2024 07:16:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7323
Expires: Fri, 19 Jul 2024 18:01:26 GMT
Date: Fri, 19 Jul 2024 15:59:23 GMT
Connection: keep-alive
504 B IP
ASN #20940 Akamai International B.V.
Hash 9242083e8854242dd63e09c963159384
d334a9ec53be29ce2d3bbc333205b970b84d63fc
927ae834d942951b3ea3f7199aca87d589dee465706a095bcf7131de85d37e1c
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "927AE834D942951B3EA3F7199ACA87D589DEE465706A095BCF7131DE85D37E1C"
Last-Modified: Thu, 18 Jul 2024 07:16:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7286
Expires: Fri, 19 Jul 2024 18:00:49 GMT
Date: Fri, 19 Jul 2024 15:59:23 GMT
Connection: keep-alive
504 B IP
ASN #20940 Akamai International B.V.
Hash 42e531d59be85c09ecc215208470d19e
75ec72c8c8e1de19407837d46d2ad7119770cdb0
38125115e22a9a58bf2df205bb09ae6c6fef4948b9de15b2f15f37d19aedf6a9
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "38125115E22A9A58BF2DF205BB09AE6C6FEF4948B9DE15B2F15F37D19AEDF6A9"
Last-Modified: Thu, 18 Jul 2024 07:16:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5870
Expires: Fri, 19 Jul 2024 17:37:13 GMT
Date: Fri, 19 Jul 2024 15:59:23 GMT
Connection: keep-alive
45 B IP
File type ASCII text, with no line terminators
Hash 5b41cb22f84f645a103acc7bfbf084ff
bac3967b26d5ec4a0d09a580714e8219796816bd
709f0a0dfab9f9e074f4a4a348dcb09150838284d21e75cfb9e5ceaeeb2054bc
GET / HTTP/1.1
Host: 6.adsco.re
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://jteen1.com
DNT: 1
Connection: keep-alive
Referer: https://jteen1.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 19 Jul 2024 15:59:24 GMT
content-type: text/plain;charset=UTF-8
content-length: 45
access-control-allow-origin: https://jteen1.com
cache-control: private, max-age=10
access-control-allow-headers: Content-Type
access-control-allow-methods: GET, HEAD, OPTIONS
access-control-max-age: 2592000
vary: Accept-Encoding
server: cloudflare
cf-ray: 8a5beb24ea13b517-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
45 B IP
File type ASCII text, with no line terminators
Hash 5b41cb22f84f645a103acc7bfbf084ff
bac3967b26d5ec4a0d09a580714e8219796816bd
709f0a0dfab9f9e074f4a4a348dcb09150838284d21e75cfb9e5ceaeeb2054bc
GET / HTTP/1.1
Host: 6.adsco.re:2087
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://jteen1.com
DNT: 1
Connection: keep-alive
Referer: https://jteen1.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 19 Jul 2024 15:59:24 GMT
content-type: text/plain;charset=UTF-8
content-length: 45
access-control-allow-origin: https://jteen1.com
cache-control: private, max-age=10
access-control-allow-headers: Content-Type
access-control-allow-methods: GET, HEAD, OPTIONS
access-control-max-age: 2592000
vary: Accept-Encoding
server: cloudflare
cf-ray: 8a5beb24f87656a4-OSL
alt-svc: h3=":2087"; ma=86400
X-Firefox-Spdy: h2
62 B IP
File type ASCII text, with no line terminators
Hash 5b41cb22f84f645a103acc7bfbf084ff
bac3967b26d5ec4a0d09a580714e8219796816bd
709f0a0dfab9f9e074f4a4a348dcb09150838284d21e75cfb9e5ceaeeb2054bc
GET / HTTP/1.1
Host: 4.adsco.re:2087
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://jteen1.com
DNT: 1
Connection: keep-alive
Referer: https://jteen1.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 19 Jul 2024 15:59:25 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Methods: GET, HEAD, OPTIONS
Access-Control-Allow-Headers: Content-Type
Access-Control-Allow-Origin: https://jteen1.com
Access-Control-Max-Age: 2592000
Cache-Control: private, max-age=5
Content-Encoding: gzip
62 B IP
File type ASCII text, with no line terminators
Hash 5b41cb22f84f645a103acc7bfbf084ff
bac3967b26d5ec4a0d09a580714e8219796816bd
709f0a0dfab9f9e074f4a4a348dcb09150838284d21e75cfb9e5ceaeeb2054bc
GET / HTTP/1.1
Host: 4.adsco.re
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://jteen1.com
DNT: 1
Connection: keep-alive
Referer: https://jteen1.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 19 Jul 2024 15:59:25 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Methods: GET, HEAD, OPTIONS
Access-Control-Allow-Headers: Content-Type
Access-Control-Allow-Origin: https://jteen1.com
Access-Control-Max-Age: 2592000
Cache-Control: private, max-age=5
Content-Encoding: gzip
346 B IP
ASN #20940 Akamai International B.V.
Hash 058024baca8d859e6cefff5b0abd38ca
8e895ffd6fe559c06bad65e47543b19bb7f67fb6
33be31824f82c184650abb1fca8007c18cee865221bc5ffb47f43b2718951435
POST / HTTP/1.1
Host: e5.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 346
ETag: "33BE31824F82C184650ABB1FCA8007C18CEE865221BC5FFB47F43B2718951435"
Last-Modified: Fri, 19 Jul 2024 10:12:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=842
Expires: Fri, 19 Jul 2024 16:13:27 GMT
Date: Fri, 19 Jul 2024 15:59:25 GMT
Connection: keep-alive
0 B URL ez7umpgxigqz.l4.adsco.re/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST / HTTP/1.1
Host: ez7umpgxigqz.l4.adsco.re
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 0
Origin: https://jteen1.com
DNT: 1
Connection: keep-alive
Referer: https://jteen1.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 19 Jul 2024 15:59:25 GMT
content-type: text/html
content-length: 0
last-modified: Fri, 02 Jun 2023 14:03:32 GMT
etag: "6479f6b4-0"
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
access-control-expose-headers: Content-Length,Content-Range
accept-ranges: bytes
X-Firefox-Spdy: h2
345 B IP
ASN #20940 Akamai International B.V.
Hash 78c4f8f75d138efd9ad53fe9019b9c39
8ebb50fa6c215f37f549ca25b96458932bb948f8
506a12c2f4c4bf2919ed4ad1d9a7193f515c690fdc592fa854b3f7570d0cdc67
POST / HTTP/1.1
Host: e5.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "506A12C2F4C4BF2919ED4AD1D9A7193F515C690FDC592FA854B3F7570D0CDC67"
Last-Modified: Fri, 19 Jul 2024 10:13:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=791
Expires: Fri, 19 Jul 2024 16:12:36 GMT
Date: Fri, 19 Jul 2024 15:59:25 GMT
Connection: keep-alive
45 B IP
File type ASCII text, with no line terminators
Hash 5b41cb22f84f645a103acc7bfbf084ff
bac3967b26d5ec4a0d09a580714e8219796816bd
709f0a0dfab9f9e074f4a4a348dcb09150838284d21e75cfb9e5ceaeeb2054bc
GET / HTTP/1.1
Host: 6.adsco.re
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://c.adsco.re/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 19 Jul 2024 15:59:25 GMT
content-type: text/plain;charset=UTF-8
content-length: 45
access-control-allow-origin: *
cache-control: private, max-age=10
access-control-allow-headers: Content-Type
access-control-allow-methods: GET, HEAD, OPTIONS
access-control-max-age: 2592000
vary: Accept-Encoding
server: cloudflare
cf-ray: 8a5beb26f86a56ba-OSL
alt-svc: h3=":443"; ma=86400
504 B IP
ASN #20940 Akamai International B.V.
Hash 9041c7b14ed56a170760ee187e59cb3d
4334c89d4af87a7d10b7cfd712cf6494bcbf2f04
da6d4b1554585f827dbf6b29b44389dc9d1b7ea24ac0bc5b078dcc7fc5c4e148
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "DA6D4B1554585F827DBF6B29B44389DC9D1B7EA24AC0BC5B078DCC7FC5C4E148"
Last-Modified: Thu, 18 Jul 2024 08:19:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3745
Expires: Fri, 19 Jul 2024 17:01:50 GMT
Date: Fri, 19 Jul 2024 15:59:25 GMT
Connection: keep-alive
504 B IP
ASN #20940 Akamai International B.V.
Hash 9041c7b14ed56a170760ee187e59cb3d
4334c89d4af87a7d10b7cfd712cf6494bcbf2f04
da6d4b1554585f827dbf6b29b44389dc9d1b7ea24ac0bc5b078dcc7fc5c4e148
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "DA6D4B1554585F827DBF6B29B44389DC9D1B7EA24AC0BC5B078DCC7FC5C4E148"
Last-Modified: Thu, 18 Jul 2024 08:19:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3745
Expires: Fri, 19 Jul 2024 17:01:50 GMT
Date: Fri, 19 Jul 2024 15:59:25 GMT
Connection: keep-alive
504 B IP
ASN #20940 Akamai International B.V.
Hash 9041c7b14ed56a170760ee187e59cb3d
4334c89d4af87a7d10b7cfd712cf6494bcbf2f04
da6d4b1554585f827dbf6b29b44389dc9d1b7ea24ac0bc5b078dcc7fc5c4e148
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "DA6D4B1554585F827DBF6B29B44389DC9D1B7EA24AC0BC5B078DCC7FC5C4E148"
Last-Modified: Thu, 18 Jul 2024 08:19:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3745
Expires: Fri, 19 Jul 2024 17:01:50 GMT
Date: Fri, 19 Jul 2024 15:59:25 GMT
Connection: keep-alive
504 B IP
ASN #20940 Akamai International B.V.
Hash 9041c7b14ed56a170760ee187e59cb3d
4334c89d4af87a7d10b7cfd712cf6494bcbf2f04
da6d4b1554585f827dbf6b29b44389dc9d1b7ea24ac0bc5b078dcc7fc5c4e148
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "DA6D4B1554585F827DBF6B29B44389DC9D1B7EA24AC0BC5B078DCC7FC5C4E148"
Last-Modified: Thu, 18 Jul 2024 08:19:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3745
Expires: Fri, 19 Jul 2024 17:01:50 GMT
Date: Fri, 19 Jul 2024 15:59:25 GMT
Connection: keep-alive
504 B IP
ASN #20940 Akamai International B.V.
Hash 9041c7b14ed56a170760ee187e59cb3d
4334c89d4af87a7d10b7cfd712cf6494bcbf2f04
da6d4b1554585f827dbf6b29b44389dc9d1b7ea24ac0bc5b078dcc7fc5c4e148
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "DA6D4B1554585F827DBF6B29B44389DC9D1B7EA24AC0BC5B078DCC7FC5C4E148"
Last-Modified: Thu, 18 Jul 2024 08:19:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3745
Expires: Fri, 19 Jul 2024 17:01:50 GMT
Date: Fri, 19 Jul 2024 15:59:25 GMT
Connection: keep-alive
GET jteen1.com/dl/aHR0cHM6Ly9rZW5maWxlcy5jb20va3cwdnJpMTQybHdoLzJsaWh6NDgwcC5tcDQuaHRtbA==
200 OK 14 kB URL User Request GET HTTP/2 jteen1.com/dl/aHR0cHM6Ly9rZW5maWxlcy5jb20va3cwdnJpMTQybHdoLzJsaWh6NDgwcC5tcDQuaHRtbA==
IP
Certificate IssuerLet's Encrypt
Subjectjteen1.com
FingerprintEB:E4:06:A8:6F:A7:8D:E5:56:D3:2D:FA:47:09:65:76:89:8B:8A:AE
ValidityMon, 10 Jun 2024 15:17:37 GMT - Sun, 08 Sep 2024 15:17:36 GMT
File type JavaScript source, Unicode text, UTF-8 text, with very long lines (845), with CRLF line terminators
Hash 9aeaeb02601fadfd03e8de230c5319c1
4c2b885d457180d31ee695f1afaf79ad3151b82b
c29414d35aa68fb1b9893a26f838c5187f7d6c671cb1eb3db29a81fdd6edd264
GET /dl/aHR0cHM6Ly9rZW5maWxlcy5jb20va3cwdnJpMTQybHdoLzJsaWh6NDgwcC5tcDQuaHRtbA== HTTP/1.1
Host: jteen1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 19 Jul 2024 15:59:23 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
x-cache: HIT from Backend
strict-transport-security: max-age=31536000
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=89z9Goq%2BdApliwWBcs8IhCIA%2BuAxYB1QCWbuuZSKNSjaUTGPWth9ColT2JGyn4kphOf74yPskW54LjBQooPsaPyq3e0iiYkS%2Bp5VNygN2w8oAVI4upWVkQHST7Ga"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8a5beb1b8ca956c9-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
345 B IP
ASN #20940 Akamai International B.V.
Hash 714e07598ee2102274b1811d8e19d36b
107109714e56cf195b8d1754f145c3dea4d3eec9
fd1ed3a36f40444f1920fb63a5d8888a0f29d34338f3062d12774abb036fd056
POST / HTTP/1.1
Host: e6.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "FD1ED3A36F40444F1920FB63A5D8888A0F29D34338F3062D12774ABB036FD056"
Last-Modified: Fri, 19 Jul 2024 10:13:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7625
Expires: Fri, 19 Jul 2024 18:06:30 GMT
Date: Fri, 19 Jul 2024 15:59:25 GMT
Connection: keep-alive
907 B IP
File type ASCII text, with very long lines (1148), with no line terminators
Hash 6e8d95a574206e7681de89bed8cddb47
9fb223e351242c62d24540f8de5e96b2cc3dba2b
e70efa11525e8704f3e2a1a78cd179afbaefeb230677c3b714b4d4e3c2110ba9
POST /p HTTP/1.1
Host: adsco.re
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Length: 2205
Origin: https://jteen1.com
DNT: 1
Connection: keep-alive
Referer: https://jteen1.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 19 Jul 2024 15:59:25 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
AS-P-1: OK lon123
AS-P-2: OK
AS-P-3: OK
Access-Control-Max-Age: 2592000
Cache-Control: no-transform
Accept-CH: Sec-CH-UA, Sec-CH-UA-Mobile, Sec-CH-UA-Full-Version, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Arch, Sec-CH-UA-Model, Device-Memory, Downlink, ECT, RTT, Width, Viewport-Width, DPR
Access-Control-Allow-Origin: https://jteen1.com
Access-Control-Allow-Credentials: true
Content-Encoding: gzip
44 B URL xadsmart.com/vzmfwpysdahwhpllm?vdIoBczZ=BQNSAAAAAAAACZUAAqKM42Lu7d9Na1B5hZmbQ2kd78m1OPfvO3s9P1okzihxlxNKeS-q2Jr46PRnE6M0rwKgn2F4i1sQhFXtPO_19hQvXGYfFjmVsIYhyLlLJAkBBabYetW6kdA56cMsmGPeNmai36UWxGjV3HP4rEgpzCdMcCalVSh9Nxsqk1E1RjnuVW3G2Z2WCzHLqYan8ZeSSeKxUGMQ9enFfuLEEp2ggwWSvz2pWb--YjM4dgdPK0V3bD0EvIL0tCyZzlnxcp1lz1AxUC_EC_IJ1xdUIg9yOstPkm7YnE6NN6sb7Q67FP1hx8M2-Jqlmp9vzpgxo0VPJlFng7C17X6A6jSm1ajVUczPyTNWmcZdn93l_PAwARxW9vD55vRphqBu0vXn9JZKA4_KsaYTCNKtOgIHApGBZk7CqyH1NOAKIpeAI9FkWRjt36Bd0WDppVXXA92-u7t3dsGPr_oX8q8mM-rnEBoZ2xZATvUhY2eOW-yCVwoyMqkajhfkxEhukaKVj_NL9uW6KSmuYyxRYs1Z3H8uUYGm6JYTWnhzD6RBRUZoZTeAvr47rhcs8w8FTa1yjAQTR3wvBn3W_3M-Nyo4Kyw04qA6vizfalceKxvSMaOQJk-Hp2NUNGDtxteFj4_aT26gK8pdWzm2XEccppiY6Ek3T_lAPZPtJ9oZdR1t3OMr0nAARmkusxsnhsPLjdpTu6bBUkxbdYbZKBXzIL7ADpVCw2CJMAzYVoa78Mu5wWleTs63-vkMO-yVBoHSvGQMxgvcRJ3IYoX3VZYYxe5vem0z1CaZV7yX2XXAhbUfngmO-sKxy6fDYK0neD4NGVVC-PEfK5ATXtOyqLw995yb8bCsdssR4NnQ4CJgrg4tMA2-5IqHoDcvjaDLk1wrYzRL3PULJ8t5AVYZusuQXP73jPz4bD3H2yX7JIiAv2pnKTCJFPZIoq0B22F0RCA5v9Uxz9C9cHQnfWvrENPduuccQs81A5AugYt2SlMNTUqrR6jGRqpOslnjUToSJpWo04YDKVCnB9z_OV2O0m2aCQQJTUdzZkpAEZqa7e8DlCvAZWL60D_mYE_cb2vhAFMlpUrdCtt050jEEcV-H5hBylie4S8rO9V18wIQUDD52_jsY0Vm1_clhWr9&qFYIdMhR=4&fpqLCUAl=5091402&gYITjKxH=&bfGJvLxk=2,2,0&JHjqPlaR=&nWrQXtDA=&s=1280,1024,1,1280,1024,0
IP
File type ASCII text, with no line terminators
Hash d5f0a25e4d3522d56d48ce7bc3e518fb
86794caff58f7fee6e684c2ba7195f970a8d6f4c
9d781128a8ece413b003d5612b8398bf9340ef7f5b751d12bd125ba523d3ceb5
GET /vzmfwpysdahwhpllm?vdIoBczZ=BQNSAAAAAAAACZUAAqKM42Lu7d9Na1B5hZmbQ2kd78m1OPfvO3s9P1okzihxlxNKeS-q2Jr46PRnE6M0rwKgn2F4i1sQhFXtPO_19hQvXGYfFjmVsIYhyLlLJAkBBabYetW6kdA56cMsmGPeNmai36UWxGjV3HP4rEgpzCdMcCalVSh9Nxsqk1E1RjnuVW3G2Z2WCzHLqYan8ZeSSeKxUGMQ9enFfuLEEp2ggwWSvz2pWb--YjM4dgdPK0V3bD0EvIL0tCyZzlnxcp1lz1AxUC_EC_IJ1xdUIg9yOstPkm7YnE6NN6sb7Q67FP1hx8M2-Jqlmp9vzpgxo0VPJlFng7C17X6A6jSm1ajVUczPyTNWmcZdn93l_PAwARxW9vD55vRphqBu0vXn9JZKA4_KsaYTCNKtOgIHApGBZk7CqyH1NOAKIpeAI9FkWRjt36Bd0WDppVXXA92-u7t3dsGPr_oX8q8mM-rnEBoZ2xZATvUhY2eOW-yCVwoyMqkajhfkxEhukaKVj_NL9uW6KSmuYyxRYs1Z3H8uUYGm6JYTWnhzD6RBRUZoZTeAvr47rhcs8w8FTa1yjAQTR3wvBn3W_3M-Nyo4Kyw04qA6vizfalceKxvSMaOQJk-Hp2NUNGDtxteFj4_aT26gK8pdWzm2XEccppiY6Ek3T_lAPZPtJ9oZdR1t3OMr0nAARmkusxsnhsPLjdpTu6bBUkxbdYbZKBXzIL7ADpVCw2CJMAzYVoa78Mu5wWleTs63-vkMO-yVBoHSvGQMxgvcRJ3IYoX3VZYYxe5vem0z1CaZV7yX2XXAhbUfngmO-sKxy6fDYK0neD4NGVVC-PEfK5ATXtOyqLw995yb8bCsdssR4NnQ4CJgrg4tMA2-5IqHoDcvjaDLk1wrYzRL3PULJ8t5AVYZusuQXP73jPz4bD3H2yX7JIiAv2pnKTCJFPZIoq0B22F0RCA5v9Uxz9C9cHQnfWvrENPduuccQs81A5AugYt2SlMNTUqrR6jGRqpOslnjUToSJpWo04YDKVCnB9z_OV2O0m2aCQQJTUdzZkpAEZqa7e8DlCvAZWL60D_mYE_cb2vhAFMlpUrdCtt050jEEcV-H5hBylie4S8rO9V18wIQUDD52_jsY0Vm1_clhWr9&qFYIdMhR=4&fpqLCUAl=5091402&gYITjKxH=&bfGJvLxk=2,2,0&JHjqPlaR=&nWrQXtDA=&s=1280,1024,1,1280,1024,0 HTTP/1.1
Host: xadsmart.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://jteen1.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
popads-node: wb9
access-control-allow-origin: *
asf: 9
popads-ec: ASB
content-type: text/javascript;charset=UTF-8
content-length: 44
date: Fri, 19 Jul 2024 15:59:26 GMT
X-Firefox-Spdy: h2
0 B URL ez7umpgxigqz.s4.adsco.re/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST / HTTP/1.1
Host: ez7umpgxigqz.s4.adsco.re
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 0
Origin: https://jteen1.com
DNT: 1
Connection: keep-alive
Referer: https://jteen1.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 19 Jul 2024 15:59:26 GMT
content-type: text/html
content-length: 0
last-modified: Tue, 03 Oct 2023 13:29:59 GMT
etag: "651c1757-0"
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
access-control-expose-headers: Content-Length,Content-Range
accept-ranges: bytes
X-Firefox-Spdy: h2
504 B IP
ASN #20940 Akamai International B.V.
Hash 70bc50f9d20f23a43c9a131de05089bd
fd756a42496ccd459d3a45c0879540f12c0c4719
1442a5da66e338866a1912fa35d78b57af353d7b5a836bc1639f25a65ce9e168
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "1442A5DA66E338866A1912FA35D78B57AF353D7B5A836BC1639F25A65CE9E168"
Last-Modified: Thu, 18 Jul 2024 08:47:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17128
Expires: Fri, 19 Jul 2024 20:44:55 GMT
Date: Fri, 19 Jul 2024 15:59:27 GMT
Connection: keep-alive
GET cdn.jsdelivr.net/npm/js-cookie@3.0.1/dist/js.cookie.min.js
200 OK 841 B URL GET HTTP/2 cdn.jsdelivr.net/npm/js-cookie@3.0.1/dist/js.cookie.min.js
IP
Requested by https://kenfiles.com/kw0vri142lwh/2lihz480p.mp4.html
Certificate IssuerGlobalSign nv-sa
Subjectjsdelivr.net
Fingerprint05:87:2C:BA:73:14:21:54:82:00:8B:AD:85:8F:E9:C6:4D:C7:66:09
ValidityWed, 27 Sep 2023 18:13:13 GMT - Mon, 28 Oct 2024 18:13:12 GMT
File type JavaScript source, ASCII text, with very long lines (1650)
Hash 511390c6668bb8cb2c65b03dc65cf6de
9ec5bdca09eb11492910672fcb48594d04eb63af
d07dcdbb3ddaba0dda7d56d496cbb5d8fbb1bdadc23f812126d3c4c6ab39e158
GET /npm/js-cookie@3.0.1/dist/js.cookie.min.js HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://kenfiles.com
DNT: 1
Connection: keep-alive
Referer: https://kenfiles.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: application/javascript; charset=utf-8
x-jsd-version: 3.0.1
x-jsd-version-type: version
etag: W/"691-nsW9ygnrEUkpEGcvy0hZTQTrY68"
content-encoding: br
accept-ranges: bytes
date: Fri, 19 Jul 2024 15:59:28 GMT
age: 1945022
x-served-by: cache-fra-eddf8230092-FRA, cache-hel1410031-HEL
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 841
X-Firefox-Spdy: h2
471 B IP
Hash 262707ae5aaa24109f4deb66385a7296
573d68fa03b3975f7267d4e64adc9117f5aa3407
20b8e13c1712c81ec80d777a547e0457e22967f122421d54870ccdae1ca8d38e
POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 19 Jul 2024 15:59:28 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
GET www.googletagmanager.com/gtag/js?id=G-15R1WCXN4T
200 OK 100 kB URL GET HTTP/2 www.googletagmanager.com/gtag/js?id=G-15R1WCXN4T
IP
Requested by https://kenfiles.com/kw0vri142lwh/2lihz480p.mp4.html
Certificate IssuerGoogle Trust Services
Subject*.google-analytics.com
FingerprintB3:23:88:EF:34:69:5A:0C:81:CE:02:E2:E3:19:FE:95:71:75:A1:14
ValidityMon, 24 Jun 2024 06:35:05 GMT - Mon, 16 Sep 2024 06:35:04 GMT
File type JavaScript source, ASCII text, with very long lines (5945)
Size 100 kB (100124 bytes)
Hash 6f711f4b8586f3cc69883bd73c725dd6
e6316ec12ff3f6aadbed0ef2c813da1d856ce832
0f16332eda9abf399c7cde2f1e16f63101439804f389cbedb3e0cb2485a9233c
GET /gtag/js?id=G-15R1WCXN4T HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://kenfiles.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Fri, 19 Jul 2024 15:59:28 GMT
expires: Fri, 19 Jul 2024 15:59:28 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 100124
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
471 B URL ocsp.r2m03.amazontrust.com/
IP
Hash 767d6e1ee7ba3bf9e59bcc812beee44b
5c2276289b4ad18d27c80a15c29f35da2e91d34d
e59f48baab49b7c0615180d807bedf98bfd978a4800de0917bf8243862b0e10b
POST / HTTP/1.1
Host: ocsp.r2m03.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=7200
Date: Fri, 19 Jul 2024 15:59:28 GMT
Last-Modified: Fri, 19 Jul 2024 15:07:18 GMT
Server: ECAcc (ska/F6CC)
X-Cache: Miss from cloudfront
Via: 1.1 41dc61beb3fe8e8c2c299a2522d8330c.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: Gio52MfpV9YHEoDBLGJB14D8sKSZ74GbmF7srbUgitxsSsEKb78p4g==
Age: 3130
471 B URL ocsp.r2m03.amazontrust.com/
IP
Hash 767d6e1ee7ba3bf9e59bcc812beee44b
5c2276289b4ad18d27c80a15c29f35da2e91d34d
e59f48baab49b7c0615180d807bedf98bfd978a4800de0917bf8243862b0e10b
POST / HTTP/1.1
Host: ocsp.r2m03.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Cache-Control: max-age=7200
Date: Fri, 19 Jul 2024 15:59:28 GMT
Server: ECAcc (amb/6AFD)
X-Cache: Miss from cloudfront
Via: 1.1 f66e3db0f0449307dba3fbf72bbf3bac.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: D2M-Yd4Gs_WYnYQGU7FW0PNXcS-DFoZWPTyjv3LlAasV21qyLaXiqA==
GET cdn.kenfiles.com/js/share.js?ver=3.4b2701
200 OK 354 B URL GET HTTP/2 cdn.kenfiles.com/js/share.js?ver=3.4b2701
IP
Requested by https://kenfiles.com/kw0vri142lwh/2lihz480p.mp4.html
Certificate IssuerAmazon
Subjectcdn.kenfiles.com
Fingerprint72:1A:33:7C:1D:91:BF:1E:7A:55:9D:9A:8B:B0:80:A1:16:74:90:DC
ValiditySat, 13 Apr 2024 00:00:00 GMT - Mon, 12 May 2025 23:59:59 GMT
Hash 693471dd93ac22bed38732ee725edff1
470693b6fb525d9391c6530ba8e22edf2a3cdfe0
37ddc3df628de7dbb35e49b0eef020d9fe1613acbbfc77418bb7e69566395aa5
GET /js/share.js?ver=3.4b2701 HTTP/1.1
Host: cdn.kenfiles.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://kenfiles.com/
Cookie: lang=english; affiliate=qaNF%2FZcGdxCiCQYahoyAFPF5TR91fOv5zYpAuPcL9rLFCBnTvXavefEDnfZmAS%2FxfkiybTc5KcImRblK9SED%2BmAEAWEVu55sR1V%2F4xxhz0L64ReuTyDH%2ByYq
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript
content-length: 354
server: nginx/1.24.0
date: Sun, 14 Jan 2024 20:11:01 GMT
last-modified: Tue, 02 Jan 2024 01:39:39 GMT
etag: "6593695b-162"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
strict-transport-security: max-age=31536000
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 d9fb4c3794a085bb4ee2c5798c2cb1b8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: Gq5jyEwB_MDBNvG07qAtaW-rFhePrmRUcpvlegIY-Rnr-e5Q5KE8MA==
age: 16141707
vary: Origin
X-Firefox-Spdy: h2
471 B IP
Hash 262707ae5aaa24109f4deb66385a7296
573d68fa03b3975f7267d4e64adc9117f5aa3407
20b8e13c1712c81ec80d777a547e0457e22967f122421d54870ccdae1ca8d38e
POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 19 Jul 2024 15:59:28 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
471 B URL ocsp.r2m03.amazontrust.com/
IP
Hash 767d6e1ee7ba3bf9e59bcc812beee44b
5c2276289b4ad18d27c80a15c29f35da2e91d34d
e59f48baab49b7c0615180d807bedf98bfd978a4800de0917bf8243862b0e10b
POST / HTTP/1.1
Host: ocsp.r2m03.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Cache-Control: max-age=7200
Date: Fri, 19 Jul 2024 15:59:28 GMT
Server: ECAcc (amb/6B04)
X-Cache: Miss from cloudfront
Via: 1.1 f00e3524edcdf61801454f2bb21e71ce.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: R61kyRlwleSg-iLcDy18RQThpAO-UmvFIIIRCw1tSF0A0vsWuAqPvg==
472 B IP
Hash f6064b36c0674fd80bf4c8ae002c33e8
88c949a19533dee1262dd1d0a4bdd6828f926c65
8015cbb242c01a5c22bb918821e8cc90bb4f03db8da90b26ffbd1b8364abe372
POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 19 Jul 2024 15:59:28 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
504 B IP
ASN #20940 Akamai International B.V.
Hash fb727ff5d657fc546960948cf19c4c35
a5aa2920b7d52bff9b4b9979d087bb5b873c139a
393e77027b53dc5e37d9301f6e739b932b0f87f7b0179c3642257e4989a6b004
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "393E77027B53DC5E37D9301F6E739B932B0F87F7B0179C3642257E4989A6B004"
Last-Modified: Thu, 18 Jul 2024 09:12:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21600
Expires: Fri, 19 Jul 2024 21:59:28 GMT
Date: Fri, 19 Jul 2024 15:59:28 GMT
Connection: keep-alive
472 B IP
Hash f6064b36c0674fd80bf4c8ae002c33e8
88c949a19533dee1262dd1d0a4bdd6828f926c65
8015cbb242c01a5c22bb918821e8cc90bb4f03db8da90b26ffbd1b8364abe372
POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 19 Jul 2024 15:59:28 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
471 B URL ocsp.r2m03.amazontrust.com/
IP
Hash 767d6e1ee7ba3bf9e59bcc812beee44b
5c2276289b4ad18d27c80a15c29f35da2e91d34d
e59f48baab49b7c0615180d807bedf98bfd978a4800de0917bf8243862b0e10b
POST / HTTP/1.1
Host: ocsp.r2m03.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Cache-Control: max-age=7200
Date: Fri, 19 Jul 2024 15:59:28 GMT
Server: ECAcc (amb/6B04)
X-Cache: Miss from cloudfront
Via: 1.1 d4fd24ae65d4d2b97cfdea8d2f0c21a6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: FtJy0QXFNu46w6JzXSD1SxKrh-4bYM-bcadSIomgjqXsXBayRWRJxw==
471 B URL ocsp.r2m03.amazontrust.com/
IP
Hash 767d6e1ee7ba3bf9e59bcc812beee44b
5c2276289b4ad18d27c80a15c29f35da2e91d34d
e59f48baab49b7c0615180d807bedf98bfd978a4800de0917bf8243862b0e10b
POST / HTTP/1.1
Host: ocsp.r2m03.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Cache-Control: max-age=7200
Date: Fri, 19 Jul 2024 15:59:28 GMT
Server: ECAcc (amb/6AB3)
X-Cache: Miss from cloudfront
Via: 1.1 bcd5dadccb0831729969c938747ff79a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: KVQQKg-ZYIZtic158UZWdqLRyAMYEAy5yGC7YFrXGD8zYHpnLRjhXg==
GET blackedacquit.com/3e/12/28/3e1228cd32241dca36e27cbd0333dac5.js
200 OK 16 kB URL GET HTTP/1.1 blackedacquit.com/3e/12/28/3e1228cd32241dca36e27cbd0333dac5.js
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://kenfiles.com/kw0vri142lwh/2lihz480p.mp4.html
Certificate IssuerLet's Encrypt
Subjectblackedacquit.com
Fingerprint64:97:6C:9E:77:97:1C:15:B0:FD:7D:74:33:FC:43:F8:D1:0F:D1:56
ValidityFri, 12 Jul 2024 07:24:10 GMT - Thu, 10 Oct 2024 07:24:09 GMT
File type JavaScript source, ASCII text, with very long lines (44819), with no line terminators
Hash 64cc6c0165327e76ccd5cebe490a4739
d954aa5a6fde43b95d2c953550cff022406124b9
c77ce2c36096f2b10cdfcd3dbc34631697a415b1d1b2f5c7dd2b56708320bc5a
GET /3e/12/28/3e1228cd32241dca36e27cbd0333dac5.js HTTP/1.1
Host: blackedacquit.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://kenfiles.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Fri, 19 Jul 2024 15:59:28 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: 586704d523acfef9dc5a81f46f45f8ca
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
471 B URL ocsp.r2m03.amazontrust.com/
IP
Hash 767d6e1ee7ba3bf9e59bcc812beee44b
5c2276289b4ad18d27c80a15c29f35da2e91d34d
e59f48baab49b7c0615180d807bedf98bfd978a4800de0917bf8243862b0e10b
POST / HTTP/1.1
Host: ocsp.r2m03.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Cache-Control: max-age=7200
Date: Fri, 19 Jul 2024 15:59:28 GMT
Server: ECAcc (amb/6B38)
X-Cache: Miss from cloudfront
Via: 1.1 6a757ab2991da716151f94ca00b38098.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: zzS7SAXitChFV_e1ypn1jyTm3-pK4RD-rDBLWm2MZHj0HceTAYWWeg==
GET cdn.kenfiles.com/xfsdl/frontend3.2.1/dist/assets/fonts/Nioicon.ttf?yvwlt8
200 OK 298 kB URL GET HTTP/3 cdn.kenfiles.com/xfsdl/frontend3.2.1/dist/assets/fonts/Nioicon.ttf?yvwlt8
IP
Requested by https://kenfiles.com/kw0vri142lwh/2lihz480p.mp4.html
Certificate IssuerAmazon
Subjectcdn.kenfiles.com
Fingerprint72:1A:33:7C:1D:91:BF:1E:7A:55:9D:9A:8B:B0:80:A1:16:74:90:DC
ValiditySat, 13 Apr 2024 00:00:00 GMT - Mon, 12 May 2025 23:59:59 GMT
File type TrueType Font data, 11 tables, 1st "OS/2", 24 names, Macintosh
Size 298 kB (297780 bytes)
Hash 71d5980de9d6057723288510896e0d8a
63fb08d6e0774d6196798f1ea202f4b118201f8f
42a539dbee5107afef6e6c94c68b668380dcdc941264e9f995f113506f4741ba
GET /xfsdl/frontend3.2.1/dist/assets/fonts/Nioicon.ttf?yvwlt8 HTTP/1.1
Host: cdn.kenfiles.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://kenfiles.com
DNT: 1
Connection: keep-alive
Referer: https://cdn.kenfiles.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/octet-stream
content-length: 297780
access-control-expose-headers: *
server: nginx/1.24.0
date: Mon, 15 Jan 2024 08:50:08 GMT
last-modified: Fri, 05 Jan 2024 11:00:47 GMT
etag: "6597e15f-48b34"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
strict-transport-security: max-age=31536000
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 a343e36742f64defd0a2caf1f96ff772.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
access-control-allow-origin: *
age: 16096161
x-amz-cf-id: pVjtcWRU_exp1C6R2-fubKy-dWt2SYElLhZZrxuBypPkeUdm778EeA==
471 B URL ocsp.r2m03.amazontrust.com/
IP
Hash ef7e457eb56d09f16669fe5742dee7b3
e29d5ac4e487c7f1885e88313db9c48c7bd7d254
5464abcd9f04a989325c8ebc9ca695b4a8c167d7669c7180d7e68475aba5ed70
POST / HTTP/1.1
Host: ocsp.r2m03.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=7200
Date: Fri, 19 Jul 2024 15:59:29 GMT
Last-Modified: Fri, 19 Jul 2024 14:57:29 GMT
Server: ECAcc (ska/F6D2)
X-Cache: Miss from cloudfront
Via: 1.1 41dc61beb3fe8e8c2c299a2522d8330c.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: tcE8qojXKmvQTsRB-j70g5VWg2a4pBng8FYw2TRy9Gq7DrY7C19aOA==
Age: 3720
GET cdn.kenfiles.com/images/flags.png
16 kB URL GET cdn.kenfiles.com/images/flags.png
IP
Requested by https://kenfiles.com/kw0vri142lwh/2lihz480p.mp4.html
Certificate IssuerAmazon
Subjectcdn.kenfiles.com
Fingerprint72:1A:33:7C:1D:91:BF:1E:7A:55:9D:9A:8B:B0:80:A1:16:74:90:DC
ValiditySat, 13 Apr 2024 00:00:00 GMT - Mon, 12 May 2025 23:59:59 GMT
File type gzip compressed data, from Unix
Hash 90751306786a90c880b4dd5b0abfca04
97015134d1d697383b55293dae8d6c30ca8d9f44
b2515c26f0e9d44c242c365a3053590d180b1f7a3beaeefed8beb5623c38a786
GET /images/flags.png HTTP/1.1
Host: cdn.kenfiles.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cdn.kenfiles.com/css/style.ext.css?3.4b2701
Cookie: lang=english; affiliate=qaNF%2FZcGdxCiCQYahoyAFPF5TR91fOv5zYpAuPcL9rLFCBnTvXavefEDnfZmAS%2FxfkiybTc5KcImRblK9SED%2BmAEAWEVu55sR1V%2F4xxhz0L64ReuTyDH%2ByYq; _ga_15R1WCXN4T=GS1.1.1721404769.1.0.1721404769.0.0.0; _ga=GA1.1.1670636639.1721404769
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: image/png
alt-svc: h3=":443"; ma=86400
age: 16157648
server: nginx/1.24.0
date: Sun, 14 Jan 2024 15:45:21 GMT
last-modified: Tue, 02 Jan 2024 01:38:48 GMT
etag: W/"65936928-3b4c"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
strict-transport-security: max-age=31536000
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-encoding: gzip
vary: Accept-Encoding, Origin
x-cache: Hit from cloudfront
via: 1.1 a343e36742f64defd0a2caf1f96ff772.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: eBcLTqbVeb9KE33hzt5UEw2AyVUaWlh0fPnozZ5drKbrEgPRyBthDw==
GET cdn.kenfiles.com/xfsdl/frontend3.2.1/dist/assets/js/init_scripts.js?3.4b2701
200 OK 2.1 kB URL GET HTTP/2 cdn.kenfiles.com/xfsdl/frontend3.2.1/dist/assets/js/init_scripts.js?3.4b2701
IP
Requested by https://kenfiles.com/kw0vri142lwh/2lihz480p.mp4.html
Certificate IssuerAmazon
Subjectcdn.kenfiles.com
Fingerprint72:1A:33:7C:1D:91:BF:1E:7A:55:9D:9A:8B:B0:80:A1:16:74:90:DC
ValiditySat, 13 Apr 2024 00:00:00 GMT - Mon, 12 May 2025 23:59:59 GMT
File type gzip compressed data, from Unix
Hash 4fb6962009afea6816bc4707f37d0d1e
a942eec52996a4b66b4149bd27920fd3bfb344af
8457b58e7803fdb8d8b8dbadf6f38b25b9025307993d828f6a8ebcf4d983dc34
GET /xfsdl/frontend3.2.1/dist/assets/js/init_scripts.js?3.4b2701 HTTP/1.1
Host: cdn.kenfiles.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://kenfiles.com/
Cookie: lang=english; affiliate=qaNF%2FZcGdxCiCQYahoyAFPF5TR91fOv5zYpAuPcL9rLFCBnTvXavefEDnfZmAS%2FxfkiybTc5KcImRblK9SED%2BmAEAWEVu55sR1V%2F4xxhz0L64ReuTyDH%2ByYq
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript
server: nginx/1.24.0
date: Tue, 12 Mar 2024 03:33:40 GMT
last-modified: Tue, 12 Mar 2024 03:17:10 GMT
etag: W/"65efc936-1265"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
strict-transport-security: max-age=31536000
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-encoding: gzip
x-cache: Hit from cloudfront
via: 1.1 d9fb4c3794a085bb4ee2c5798c2cb1b8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: gN_FHFVbdurOQOkqTzDe-v-ZpsZBdG7kX1HuE1Dl229PqwYOj6XfaQ==
age: 11190348
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
GET proftrafficcounter.com/stats
200 OK 40 B URL GET HTTP/2 proftrafficcounter.com/stats
IP
Requested by https://kenfiles.com/kw0vri142lwh/2lihz480p.mp4.html
Certificate IssuerAmazon
Subjectproftrafficcounter.com
FingerprintE3:9F:79:6F:80:C0:BF:F8:C4:EB:45:F3:E9:0F:A7:41:F6:0C:05:E6
ValidityTue, 21 Nov 2023 00:00:00 GMT - Thu, 19 Dec 2024 23:59:59 GMT
File type ASCII text, with no line terminators
Hash 4a4fc89ffcf5af8573aec37af5822fcd
2204c0489a9e29c903d71a2a7ebe1cf90a970bac
7586c2cee5fca62e4ca84d6a06045026800f1a222bb6fa1ff26e1c493795e77c
GET /stats HTTP/1.1
Host: proftrafficcounter.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://kenfiles.com
DNT: 1
Connection: keep-alive
Referer: https://kenfiles.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 19 Jul 2024 15:59:29 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: https://kenfiles.com
vary: Origin
access-control-allow-credentials: true
set-cookie: uid_id2=dc268f94-d254-49ab-b095-acfabdf51cc5:1:1; expires=Mon, 17 Jul 2034 15:59:29 GMT; secure; SameSite=None
X-Firefox-Spdy: h2
GET fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
200 OK 16 kB URL GET HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
IP
Requested by https://kenfiles.com/kw0vri142lwh/2lihz480p.mp4.html
Certificate IssuerGoogle Trust Services
Subject*.gstatic.com
FingerprintEE:FE:75:C9:E5:09:76:EB:38:E8:5F:5F:31:DF:88:D1:BF:9A:93:09
ValidityMon, 24 Jun 2024 07:40:48 GMT - Mon, 16 Sep 2024 07:40:47 GMT
File type Web Open Font Format (Version 2), TrueType, length 15860, version 1.0
Hash e9f5aaf547f165386cd313b995dddd8e
acdef5603c2387b0e5bffd744b679a24a8bc1968
f5aebdfea35d1e7656ef4acc5db1f243209755ae3300943ef8fc6280f363c860
GET /s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://kenfiles.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15860
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 17 Jul 2024 13:21:25 GMT
expires: Thu, 17 Jul 2025 13:21:25 GMT
cache-control: public, max-age=31536000
age: 182284
last-modified: Wed, 11 May 2022 19:24:42 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
200 OK 16 kB URL GET HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
Requested by https://kenfiles.com/kw0vri142lwh/2lihz480p.mp4.html
Certificate IssuerGoogle Trust Services
Subject*.gstatic.com
FingerprintEE:FE:75:C9:E5:09:76:EB:38:E8:5F:5F:31:DF:88:D1:BF:9A:93:09
ValidityMon, 24 Jun 2024 07:40:48 GMT - Mon, 16 Sep 2024 07:40:47 GMT
File type Web Open Font Format (Version 2), TrueType, length 15744, version 1.0
Hash 15d9f621c3bd1599f0169dcf0bd5e63e
7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52
f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://kenfiles.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 18 Jul 2024 12:40:58 GMT
expires: Fri, 18 Jul 2025 12:40:58 GMT
cache-control: public, max-age=31536000
age: 98311
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET fonts.gstatic.com/s/nunito/v26/XRXV3I6Li01BKofINeaB.woff2
200 OK 39 kB URL GET HTTP/2 fonts.gstatic.com/s/nunito/v26/XRXV3I6Li01BKofINeaB.woff2
IP
Requested by https://kenfiles.com/kw0vri142lwh/2lihz480p.mp4.html
Certificate IssuerGoogle Trust Services
Subject*.gstatic.com
FingerprintEE:FE:75:C9:E5:09:76:EB:38:E8:5F:5F:31:DF:88:D1:BF:9A:93:09
ValidityMon, 24 Jun 2024 07:40:48 GMT - Mon, 16 Sep 2024 07:40:47 GMT
File type Web Open Font Format (Version 2), TrueType, length 39124, version 1.0
Hash 86b73ab5f530be7984b704414f2a711d
8e297794ed7b6f5ea476d14b5270df12e8f3e42a
1a48b70f97555c13f84b8f088a417f9179d99b5101250819350acaf6e91bb92f
GET /s/nunito/v26/XRXV3I6Li01BKofINeaB.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://kenfiles.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 39124
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 19 Jul 2024 08:41:46 GMT
expires: Sat, 19 Jul 2025 08:41:46 GMT
cache-control: public, max-age=31536000
age: 26263
last-modified: Thu, 14 Sep 2023 00:02:20 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
200 OK 16 kB URL GET HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
IP
Requested by https://kenfiles.com/kw0vri142lwh/2lihz480p.mp4.html
Certificate IssuerGoogle Trust Services
Subject*.gstatic.com
FingerprintEE:FE:75:C9:E5:09:76:EB:38:E8:5F:5F:31:DF:88:D1:BF:9A:93:09
ValidityMon, 24 Jun 2024 07:40:48 GMT - Mon, 16 Sep 2024 07:40:47 GMT
File type Web Open Font Format (Version 2), TrueType, length 15920, version 1.0
Hash 3a44e06eb954b96aa043227f3534189d
23cef6993ddb2b2979e8e7647fc3763694e2ba7d
b019538234514166ec7665359d097403358f8a4c991901983922fb4d56989f1e
GET /s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://kenfiles.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15920
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 17 Jul 2024 15:53:27 GMT
expires: Thu, 17 Jul 2025 15:53:27 GMT
cache-control: public, max-age=31536000
age: 173162
last-modified: Wed, 11 May 2022 19:24:45 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET fonts.gstatic.com/s/nunito/v26/XRXV3I6Li01BKofINeaB.woff2
200 OK 39 kB URL GET HTTP/2 fonts.gstatic.com/s/nunito/v26/XRXV3I6Li01BKofINeaB.woff2
IP
Requested by https://kenfiles.com/kw0vri142lwh/2lihz480p.mp4.html
Certificate IssuerGoogle Trust Services
Subject*.gstatic.com
FingerprintEE:FE:75:C9:E5:09:76:EB:38:E8:5F:5F:31:DF:88:D1:BF:9A:93:09
ValidityMon, 24 Jun 2024 07:40:48 GMT - Mon, 16 Sep 2024 07:40:47 GMT
File type Web Open Font Format (Version 2), TrueType, length 39124, version 1.0
Hash 86b73ab5f530be7984b704414f2a711d
8e297794ed7b6f5ea476d14b5270df12e8f3e42a
1a48b70f97555c13f84b8f088a417f9179d99b5101250819350acaf6e91bb92f
GET /s/nunito/v26/XRXV3I6Li01BKofINeaB.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://kenfiles.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 39124
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 19 Jul 2024 08:41:46 GMT
expires: Sat, 19 Jul 2025 08:41:46 GMT
cache-control: public, max-age=31536000
age: 26263
last-modified: Thu, 14 Sep 2023 00:02:20 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
POST syndication.exdynsrv.com/v1/api.php
200 OK 78 B URL POST HTTP/1.1 syndication.exdynsrv.com/v1/api.php
IP
ASN #60781 LeaseWeb Netherlands B.V.
Requested by https://kenfiles.com/kw0vri142lwh/2lihz480p.mp4.html
Certificate IssuerLet's Encrypt
Subjectexdynsrv.com
FingerprintF8:9D:01:B1:1F:D2:D6:75:C4:B7:3A:E9:85:D5:32:33:76:3B:BC:9D
ValidityMon, 01 Jul 2024 10:15:31 GMT - Sun, 29 Sep 2024 10:15:30 GMT
Hash 3e84a1496751aedccf4c00a960e7b88e
1cf72ce95ed97f09fe8d4d0c61eb9470d33d5b1d
abda468eddc88966b55ad8f5d72e7608624dd50900b0d8ef12d16d228c3a9d29
POST /v1/api.php HTTP/1.1
Host: syndication.exdynsrv.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 303
Origin: https://kenfiles.com
DNT: 1
Connection: keep-alive
Referer: https://kenfiles.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 19 Jul 2024 15:59:29 GMT
Content-Type: application/json
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: https://kenfiles.com
Access-Control-Allow-Headers: Authorization, Content-Type
Access-Control-Request-Method: POST
Access-Control-Allow-Credentials: true
X-Robots-Tag: noindex, follow
Content-Encoding: gzip
471 B IP
Hash d3e1b1a6ada78fd429cd4788dfa8a1d7
b635e918c2f14e179edb747f03ee557db8115a2a
c9dd0650892adb8e38fdf78ddeca6eafac82f802dcf44ae53382e97bfb9098a5
POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 19 Jul 2024 15:59:29 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
504 B IP
ASN #20940 Akamai International B.V.
Hash db00f21dfa0a789a013cea69601a00d2
754c80ebf905c158c6602ee47761c9e2c97fb253
c5fe5ceabab6ecdaf9e834a1e25aa0a30b64cb76e9381375a80e40df830c0757
POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "C5FE5CEABAB6ECDAF9E834A1E25AA0A30B64CB76E9381375A80E40DF830C0757"
Last-Modified: Thu, 18 Jul 2024 08:27:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7526
Expires: Fri, 19 Jul 2024 18:04:56 GMT
Date: Fri, 19 Jul 2024 15:59:30 GMT
Connection: keep-alive
GET unseenreport.com/pxf.gif?uuid=dc268f94-d254-49ab-b095-acfabdf51cc5&eb=978028c5053b26833423c7a069ce3bd5&te=5db3a4e34790624df926db520a13f79f&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&dev=e&res=14.2071&b_frame=0&pk=3e1228cd32241dca36e27cbd0333dac5&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=15
200 OK 1 B URL GET HTTP/1.1 unseenreport.com/pxf.gif?uuid=dc268f94-d254-49ab-b095-acfabdf51cc5&eb=978028c5053b26833423c7a069ce3bd5&te=5db3a4e34790624df926db520a13f79f&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&dev=e&res=14.2071&b_frame=0&pk=3e1228cd32241dca36e27cbd0333dac5&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=15
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://kenfiles.com/kw0vri142lwh/2lihz480p.mp4.html
Certificate IssuerLet's Encrypt
Subject*.unseenreport.com
FingerprintF5:95:0F:2B:01:D6:36:49:AB:2E:61:76:F7:EC:A5:45:3D:F1:0E:59
ValidityTue, 21 May 2024 07:36:27 GMT - Mon, 19 Aug 2024 07:36:26 GMT
File type very short file (no magic)
Hash 93b885adfe0da089cdf634904fd59f71
5ba93c9db0cff93f52b521d7420e43f6eda2784f
6e340b9cffb37a989ca544e6bb780a2c78901d3fb33738768511a30617afa01d
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /pxf.gif?uuid=dc268f94-d254-49ab-b095-acfabdf51cc5&eb=978028c5053b26833423c7a069ce3bd5&te=5db3a4e34790624df926db520a13f79f&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&dev=e&res=14.2071&b_frame=0&pk=3e1228cd32241dca36e27cbd0333dac5&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=15 HTTP/1.1
Host: unseenreport.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://kenfiles.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Fri, 19 Jul 2024 15:59:30 GMT
Content-Type: image/gif
Content-Length: 1
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: b2a074ed3e693e9eb972f8db92dc6f63
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains
GET illusiondramaexploration.com/sbar.json?key=3e1228cd32241dca36e27cbd0333dac5&uuid=dc268f94-d254-49ab-b095-acfabdf51cc5%3A1%3A1
200 OK 6.5 kB URL GET HTTP/1.1 illusiondramaexploration.com/sbar.json?key=3e1228cd32241dca36e27cbd0333dac5&uuid=dc268f94-d254-49ab-b095-acfabdf51cc5%3A1%3A1
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://kenfiles.com/kw0vri142lwh/2lihz480p.mp4.html
Certificate IssuerLet's Encrypt
Subjectillusiondramaexploration.com
FingerprintA2:A7:A2:A7:A3:A2:C7:FE:C1:FF:7E:D4:1D:A4:5B:AC:3A:4B:09:55
ValiditySat, 29 Jun 2024 13:54:30 GMT - Fri, 27 Sep 2024 13:54:29 GMT
Hash 295edab165e612588aa1342aa9f16333
74f30194866c1140985b2808bdb771af7de4cc47
82e69fd2a4d64a92eb8e32868f9e7efaf0f3fecd1932bd09e9b4b9c5b9858ada
GET /sbar.json?key=3e1228cd32241dca36e27cbd0333dac5&uuid=dc268f94-d254-49ab-b095-acfabdf51cc5%3A1%3A1 HTTP/1.1
Host: illusiondramaexploration.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://kenfiles.com
DNT: 1
Connection: keep-alive
Referer: https://kenfiles.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Fri, 19 Jul 2024 15:59:30 GMT
Content-Type: text/plain; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://kenfiles.com
Access-Control-Allow-Origin: https://kenfiles.com
Access-Control-Allow-Credentials: true
Set-Cookie: u_pl=22677831; expires=Sat, 20 Jul 2024 15:59:30 GMT; path=/; secure; SameSite=None
uid_id2=dc268f94-d254-49ab-b095-acfabdf51cc5:1:1; expires=Fri, 26 Jul 2024 15:59:30 GMT; path=/; secure; SameSite=None
pdhtkv=true; expires=Sat, 20 Jul 2024 15:59:30 GMT; path=/; secure; SameSite=None
uncs=1; expires=Sat, 20 Jul 2024 15:59:30 GMT; path=/; secure; SameSite=None
pdhtkv29=true; expires=Sat, 20 Jul 2024 15:59:30 GMT; path=/; secure; SameSite=None
uncs29=1; expires=Sat, 20 Jul 2024 15:59:30 GMT; path=/; secure; SameSite=None
slec3e1228cd32241dca36e27cbd0333dac5=[3078189,3078195]; expires=Fri, 19 Jul 2024 15:59:35 GMT; path=/; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: d21cf410a84edde702a63f463dc6859c
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
504 B IP
ASN #20940 Akamai International B.V.
Hash ac84bfa2c829f5a505c2b93d70e6b2e4
4b3b4e5b5bce1fda441ea454a7448d3323222371
cd1c36bd06a34ec305765fdba9206cde2abb60a4c454d7f44eea665665c70c2d
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "CD1C36BD06A34EC305765FDBA9206CDE2ABB60A4C454D7F44EEA665665C70C2D"
Last-Modified: Thu, 18 Jul 2024 08:25:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5164
Expires: Fri, 19 Jul 2024 17:25:34 GMT
Date: Fri, 19 Jul 2024 15:59:30 GMT
Connection: keep-alive
GET illusiondramaexploration.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSz2skRRSujgFZhAVlQVDEOSgomEn%2FmOmZcQ9ijFmicbPsKooXqa6qnpRT3dVUdU9PgofgguxFGDx66nyTbFCD6B%2FgKpMFkYCQ8RTF%2FA2CuHiUGaPDPuh%2BP7734Hvfq0%2F2inPio6Bnq2%2FpHakUXW7W3doL73ne1dqGTItBbdAOPwgbV2um%2F3InrLsv1q4J1tPLvuu5rud6tTVpRKwHy1MQMjvqePWOW2%2F4da%2FZwMA8nNvCgaUOeP%2BcPAHJJ4v3nSuQbIw0%2BWZV2F6us5deTwpFc23Q54fvpL1UlymSeRgbB3F6eNENbU%2FX7kGnBzO60P3%2FGyM5Ic6P9xClhxckEfX3ZzwjBZEi4o%2Bh7I8h1BiSjsH0bUh%2BSgDGcX0TaXL3ujYl3f4XpVN0QhYf%2FAlZTsji71eQJl%2BvKDmo3dKqyKVOLQZxBTkYQ3bHyIpj5DsLkOUxWP4xJP%2BZLD%2FYQJrsb1qlIfnZc5z5YTvuNJa432wsNTo0WorcTnOJsphGPG56jDVnAkk5hozHUGIIah0U0086KGIHReYg4Wc15nley%2BWMuu0OYwFviSjkrkdbsUc9N2yjYNMdhsizIZgagpldZGYXPTmEKX6A3apguQObE%2FR5hVIQlJagpASlJChzgrJfHXBlfVvd5coWkXfh%2FQsfVCOdd%2Ffogc67IiWgZgjDq73snDw%2BFdB5%2F9I19MRZLRCe77cZD3y%2F4XFGg1D4LRZxNwgCTlkTVlaQdmG27o6ckGd%2FfQOZnJBLH%2F2GiB7DqmMw%2BTxo8QxoWYFuVdhJj3oijaUSts50Aq4rZPki8m1nT52Tp2cnrP%2B9BMFOyIWBmQqZqfChvE%2FQVXdGN3VJ9m%2Fq0pJvN7NcJnKHTs97K6e5cL58U2yX2vD1VTv84lU2Babh0dvC5hs05TLtWvLViuRcmDVtmCDfrdt3RXSjsFsrhUmLbOPGa2vrSWaEtVKnY1B5evkymJyQR3%2F6a%2FZunzx%2FCtKMYYoKSTFnKvUxWLYLm81rVhMYNc%2BjzEFZVCPjR%2FOikgRKzHMaVbDi5Ps%2F%2FhuaxyNDp9NUVnv2DrpmATS%2FjTSp0DcV%2BqoCVUPY4pFRnpmTV34JZoZILYwiZRb2I2XUZzORp78AVp7VWkHg0rDT9FotKlpRw2%2FHoccp9RuhH4Y0QG4n8eefRv8AAAD%2F%2FwEAAP%2F%2F9vp08JEEAAA%3D
200 OK 7 B URL GET HTTP/1.1 illusiondramaexploration.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSz2skRRSujgFZhAVlQVDEOSgomEn%2FmOmZcQ9ijFmicbPsKooXqa6qnpRT3dVUdU9PgofgguxFGDx66nyTbFCD6B%2FgKpMFkYCQ8RTF%2FA2CuHiUGaPDPuh%2BP7734Hvfq0%2F2inPio6Bnq2%2FpHakUXW7W3doL73ne1dqGTItBbdAOPwgbV2um%2F3InrLsv1q4J1tPLvuu5rud6tTVpRKwHy1MQMjvqePWOW2%2F4da%2FZwMA8nNvCgaUOeP%2BcPAHJJ4v3nSuQbIw0%2BWZV2F6us5deTwpFc23Q54fvpL1UlymSeRgbB3F6eNENbU%2FX7kGnBzO60P3%2FGyM5Ic6P9xClhxckEfX3ZzwjBZEi4o%2Bh7I8h1BiSjsH0bUh%2BSgDGcX0TaXL3ujYl3f4XpVN0QhYf%2FAlZTsji71eQJl%2BvKDmo3dKqyKVOLQZxBTkYQ3bHyIpj5DsLkOUxWP4xJP%2BZLD%2FYQJrsb1qlIfnZc5z5YTvuNJa432wsNTo0WorcTnOJsphGPG56jDVnAkk5hozHUGIIah0U0086KGIHReYg4Wc15nley%2BWMuu0OYwFviSjkrkdbsUc9N2yjYNMdhsizIZgagpldZGYXPTmEKX6A3apguQObE%2FR5hVIQlJagpASlJChzgrJfHXBlfVvd5coWkXfh%2FQsfVCOdd%2Ffogc67IiWgZgjDq73snDw%2BFdB5%2F9I19MRZLRCe77cZD3y%2F4XFGg1D4LRZxNwgCTlkTVlaQdmG27o6ckGd%2FfQOZnJBLH%2F2GiB7DqmMw%2BTxo8QxoWYFuVdhJj3oijaUSts50Aq4rZPki8m1nT52Tp2cnrP%2B9BMFOyIWBmQqZqfChvE%2FQVXdGN3VJ9m%2Fq0pJvN7NcJnKHTs97K6e5cL58U2yX2vD1VTv84lU2Babh0dvC5hs05TLtWvLViuRcmDVtmCDfrdt3RXSjsFsrhUmLbOPGa2vrSWaEtVKnY1B5evkymJyQR3%2F6a%2FZunzx%2FCtKMYYoKSTFnKvUxWLYLm81rVhMYNc%2BjzEFZVCPjR%2FOikgRKzHMaVbDi5Ps%2F%2FhuaxyNDp9NUVnv2DrpmATS%2FjTSp0DcV%2BqoCVUPY4pFRnpmTV34JZoZILYwiZRb2I2XUZzORp78AVp7VWkHg0rDT9FotKlpRw2%2FHoccp9RuhH4Y0QG4n8eefRv8AAAD%2F%2FwEAAP%2F%2F9vp08JEEAAA%3D
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://kenfiles.com/kw0vri142lwh/2lihz480p.mp4.html
Certificate IssuerLet's Encrypt
Subjectillusiondramaexploration.com
FingerprintA2:A7:A2:A7:A3:A2:C7:FE:C1:FF:7E:D4:1D:A4:5B:AC:3A:4B:09:55
ValiditySat, 29 Jun 2024 13:54:30 GMT - Fri, 27 Sep 2024 13:54:29 GMT
File type ASCII text, with no line terminators
Hash 132d6af1b46048b45cf86cdee7991d31
eb7007d03d59b65bc6da7e098c4d38fc6dfb6285
ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c
GET /ren.gif?sid=H4sIAAAAAAAC%2F1RSz2skRRSujgFZhAVlQVDEOSgomEn%2FmOmZcQ9ijFmicbPsKooXqa6qnpRT3dVUdU9PgofgguxFGDx66nyTbFCD6B%2FgKpMFkYCQ8RTF%2FA2CuHiUGaPDPuh%2BP7734Hvfq0%2F2inPio6Bnq2%2FpHakUXW7W3doL73ne1dqGTItBbdAOPwgbV2um%2F3InrLsv1q4J1tPLvuu5rud6tTVpRKwHy1MQMjvqePWOW2%2F4da%2FZwMA8nNvCgaUOeP%2BcPAHJJ4v3nSuQbIw0%2BWZV2F6us5deTwpFc23Q54fvpL1UlymSeRgbB3F6eNENbU%2FX7kGnBzO60P3%2FGyM5Ic6P9xClhxckEfX3ZzwjBZEi4o%2Bh7I8h1BiSjsH0bUh%2BSgDGcX0TaXL3ujYl3f4XpVN0QhYf%2FAlZTsji71eQJl%2BvKDmo3dKqyKVOLQZxBTkYQ3bHyIpj5DsLkOUxWP4xJP%2BZLD%2FYQJrsb1qlIfnZc5z5YTvuNJa432wsNTo0WorcTnOJsphGPG56jDVnAkk5hozHUGIIah0U0086KGIHReYg4Wc15nley%2BWMuu0OYwFviSjkrkdbsUc9N2yjYNMdhsizIZgagpldZGYXPTmEKX6A3apguQObE%2FR5hVIQlJagpASlJChzgrJfHXBlfVvd5coWkXfh%2FQsfVCOdd%2Ffogc67IiWgZgjDq73snDw%2BFdB5%2F9I19MRZLRCe77cZD3y%2F4XFGg1D4LRZxNwgCTlkTVlaQdmG27o6ckGd%2FfQOZnJBLH%2F2GiB7DqmMw%2BTxo8QxoWYFuVdhJj3oijaUSts50Aq4rZPki8m1nT52Tp2cnrP%2B9BMFOyIWBmQqZqfChvE%2FQVXdGN3VJ9m%2Fq0pJvN7NcJnKHTs97K6e5cL58U2yX2vD1VTv84lU2Babh0dvC5hs05TLtWvLViuRcmDVtmCDfrdt3RXSjsFsrhUmLbOPGa2vrSWaEtVKnY1B5evkymJyQR3%2F6a%2FZunzx%2FCtKMYYoKSTFnKvUxWLYLm81rVhMYNc%2BjzEFZVCPjR%2FOikgRKzHMaVbDi5Ps%2F%2FhuaxyNDp9NUVnv2DrpmATS%2FjTSp0DcV%2BqoCVUPY4pFRnpmTV34JZoZILYwiZRb2I2XUZzORp78AVp7VWkHg0rDT9FotKlpRw2%2FHoccp9RuhH4Y0QG4n8eefRv8AAAD%2F%2FwEAAP%2F%2F9vp08JEEAAA%3D HTTP/1.1
Host: illusiondramaexploration.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://kenfiles.com/
Cookie: u_pl=22677831; uid_id2=dc268f94-d254-49ab-b095-acfabdf51cc5:1:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; slec3e1228cd32241dca36e27cbd0333dac5=[3078189,3078195]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Fri, 19 Jul 2024 15:59:30 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: e1babe9fd9006197b84a83d1ecc83cad
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains
GET illusiondramaexploration.com/pixel/sbls?bv=24.22.2032&tmpl=482&u=https%3A%2F%2Fcdn.barscreative1.com%2Fsb%2Fnotifications%2Futility%2Fdefault%2Fus%2Fblog%2Ffinanceskipper%2Fmessage_redcircle2%2F16%2Findex.html&l=1545&fd=85
200 OK 0 B URL GET HTTP/1.1 illusiondramaexploration.com/pixel/sbls?bv=24.22.2032&tmpl=482&u=https%3A%2F%2Fcdn.barscreative1.com%2Fsb%2Fnotifications%2Futility%2Fdefault%2Fus%2Fblog%2Ffinanceskipper%2Fmessage_redcircle2%2F16%2Findex.html&l=1545&fd=85
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://kenfiles.com/kw0vri142lwh/2lihz480p.mp4.html
Certificate IssuerLet's Encrypt
Subjectillusiondramaexploration.com
FingerprintA2:A7:A2:A7:A3:A2:C7:FE:C1:FF:7E:D4:1D:A4:5B:AC:3A:4B:09:55
ValiditySat, 29 Jun 2024 13:54:30 GMT - Fri, 27 Sep 2024 13:54:29 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pixel/sbls?bv=24.22.2032&tmpl=482&u=https%3A%2F%2Fcdn.barscreative1.com%2Fsb%2Fnotifications%2Futility%2Fdefault%2Fus%2Fblog%2Ffinanceskipper%2Fmessage_redcircle2%2F16%2Findex.html&l=1545&fd=85 HTTP/1.1
Host: illusiondramaexploration.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://kenfiles.com/
Cookie: u_pl=22677831; uid_id2=dc268f94-d254-49ab-b095-acfabdf51cc5:1:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; slec3e1228cd32241dca36e27cbd0333dac5=[3078189,3078195]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Fri, 19 Jul 2024 15:59:30 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
GET cdn.kenfiles.com/xfsdl/frontend3.2.1/dist/images/logo-dark.png?3.4b2701
73 kB URL GET cdn.kenfiles.com/xfsdl/frontend3.2.1/dist/images/logo-dark.png?3.4b2701
IP
Requested by https://kenfiles.com/kw0vri142lwh/2lihz480p.mp4.html
Certificate IssuerAmazon
Subjectcdn.kenfiles.com
Fingerprint72:1A:33:7C:1D:91:BF:1E:7A:55:9D:9A:8B:B0:80:A1:16:74:90:DC
ValiditySat, 13 Apr 2024 00:00:00 GMT - Mon, 12 May 2025 23:59:59 GMT
File type gzip compressed data, from Unix
Hash f8c5741dfdd5ae07597db6ff7c9923c5
c839cbdcad818503256cdeab59feda54ce113cea
23085ee91e51ae9b5b8c955d002a93c2b6eb9b0dff3985e22ffee6afb2adcc07
GET /xfsdl/frontend3.2.1/dist/images/logo-dark.png?3.4b2701 HTTP/1.1
Host: cdn.kenfiles.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://kenfiles.com/
Cookie: lang=english; affiliate=qaNF%2FZcGdxCiCQYahoyAFPF5TR91fOv5zYpAuPcL9rLFCBnTvXavefEDnfZmAS%2FxfkiybTc5KcImRblK9SED%2BmAEAWEVu55sR1V%2F4xxhz0L64ReuTyDH%2ByYq
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/png
server: nginx/1.24.0
date: Sun, 14 Jan 2024 15:47:13 GMT
last-modified: Tue, 02 Jan 2024 01:41:09 GMT
etag: W/"659369b5-2012"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
strict-transport-security: max-age=31536000
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-encoding: gzip
x-cache: Hit from cloudfront
via: 1.1 d9fb4c3794a085bb4ee2c5798c2cb1b8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: e1IRc9KQ_xGYQMAsW1Hmhx7-jclvMUN9IM4V_kcyLrRC8ANEwL6MQw==
age: 16157535
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
GET illusiondramaexploration.com/pixel/sbls?bv=24.22.2032&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fnotifications%2Futility%2Fdefault%2Fus%2Fblog%2Ffinanceskipper%2Fmessage_redcircle2%2F16%2Fcss%2Fstyle.css&l=3664&fd=57
200 OK 0 B URL GET HTTP/1.1 illusiondramaexploration.com/pixel/sbls?bv=24.22.2032&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fnotifications%2Futility%2Fdefault%2Fus%2Fblog%2Ffinanceskipper%2Fmessage_redcircle2%2F16%2Fcss%2Fstyle.css&l=3664&fd=57
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://kenfiles.com/kw0vri142lwh/2lihz480p.mp4.html
Certificate IssuerLet's Encrypt
Subjectillusiondramaexploration.com
FingerprintA2:A7:A2:A7:A3:A2:C7:FE:C1:FF:7E:D4:1D:A4:5B:AC:3A:4B:09:55
ValiditySat, 29 Jun 2024 13:54:30 GMT - Fri, 27 Sep 2024 13:54:29 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pixel/sbls?bv=24.22.2032&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fnotifications%2Futility%2Fdefault%2Fus%2Fblog%2Ffinanceskipper%2Fmessage_redcircle2%2F16%2Fcss%2Fstyle.css&l=3664&fd=57 HTTP/1.1
Host: illusiondramaexploration.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://kenfiles.com/
Cookie: u_pl=22677831; uid_id2=dc268f94-d254-49ab-b095-acfabdf51cc5:1:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; slec3e1228cd32241dca36e27cbd0333dac5=[3078189,3078195]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Fri, 19 Jul 2024 15:59:30 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
GET cdn.creative-bars1.com/sb/notifications/utility/default/us/blog/financeskipper/message_redcircle2/16/css/animate.css
200 OK 4.9 kB URL GET HTTP/2 cdn.creative-bars1.com/sb/notifications/utility/default/us/blog/financeskipper/message_redcircle2/16/css/animate.css
IP
Requested by https://kenfiles.com/kw0vri142lwh/2lihz480p.mp4.html
Certificate IssuerGoogle Trust Services
Subjectcreative-bars1.com
FingerprintD1:9B:13:19:76:51:03:81:CE:A7:79:69:01:B6:C9:CF:FF:78:92:61
ValidityThu, 13 Jun 2024 14:42:47 GMT - Wed, 11 Sep 2024 14:42:46 GMT
Hash 3d4123dbfb33d27a5cfdfcfa91df6783
e7d0eeeec54b848f0bc3da8685fa3bc88429d660
cb7d1393b65701b2f97d8da244c2c6023e9cbc3463ecb0136b915cfc775c6887
GET /sb/notifications/utility/default/us/blog/financeskipper/message_redcircle2/16/css/animate.css HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://kenfiles.com
DNT: 1
Connection: keep-alive
Referer: https://kenfiles.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 19 Jul 2024 15:59:30 GMT
content-type: text/css
last-modified: Fri, 19 Jan 2024 14:21:26 GMT
etag: W/"65aa8566-13361"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
content-encoding: gzip
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=GwxE2q%2FhslcIc9iIh%2F7CcEftWNwnIddpUf0Z1Tsl9y4OmscCaSmN0aNBpEWaFkZvnGpt7A6%2BVBJQ69bwoWr176jxoKf%2FTeY9U7Alc0F4huFkfTOCiPlrGLFat3ahGayfs%2FA8cDPFDFdx"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8a5beb486d1db51e-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET illusiondramaexploration.com/pixel/sbls?bv=24.22.2032&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fnotifications%2Futility%2Fdefault%2Fus%2Fblog%2Ffinanceskipper%2Fmessage_redcircle2%2F16%2Fjs%2Fscript.js&l=386&fd=59
200 OK 0 B URL GET HTTP/1.1 illusiondramaexploration.com/pixel/sbls?bv=24.22.2032&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fnotifications%2Futility%2Fdefault%2Fus%2Fblog%2Ffinanceskipper%2Fmessage_redcircle2%2F16%2Fjs%2Fscript.js&l=386&fd=59
IP
Requested by https://kenfiles.com/kw0vri142lwh/2lihz480p.mp4.html
Certificate IssuerLet's Encrypt
Subjectillusiondramaexploration.com
FingerprintA2:A7:A2:A7:A3:A2:C7:FE:C1:FF:7E:D4:1D:A4:5B:AC:3A:4B:09:55
ValiditySat, 29 Jun 2024 13:54:30 GMT - Fri, 27 Sep 2024 13:54:29 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pixel/sbls?bv=24.22.2032&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fnotifications%2Futility%2Fdefault%2Fus%2Fblog%2Ffinanceskipper%2Fmessage_redcircle2%2F16%2Fjs%2Fscript.js&l=386&fd=59 HTTP/1.1
Host: illusiondramaexploration.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://kenfiles.com/
Cookie: u_pl=22677831; uid_id2=dc268f94-d254-49ab-b095-acfabdf51cc5:1:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; slec3e1228cd32241dca36e27cbd0333dac5=[3078189,3078195]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Fri, 19 Jul 2024 15:59:31 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
GET fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
200 OK 16 kB URL GET HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
Requested by https://kenfiles.com/kw0vri142lwh/2lihz480p.mp4.html
Certificate IssuerGoogle Trust Services
Subject*.gstatic.com
FingerprintEE:FE:75:C9:E5:09:76:EB:38:E8:5F:5F:31:DF:88:D1:BF:9A:93:09
ValidityMon, 24 Jun 2024 07:40:48 GMT - Mon, 16 Sep 2024 07:40:47 GMT
File type Web Open Font Format (Version 2), TrueType, length 15744, version 1.0
Hash 15d9f621c3bd1599f0169dcf0bd5e63e
7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52
f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://kenfiles.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 18 Jul 2024 12:40:58 GMT
expires: Fri, 18 Jul 2025 12:40:58 GMT
cache-control: public, max-age=31536000
age: 98313
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
200 OK 16 kB URL GET HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
IP
Requested by https://kenfiles.com/kw0vri142lwh/2lihz480p.mp4.html
Certificate IssuerGoogle Trust Services
Subject*.gstatic.com
FingerprintEE:FE:75:C9:E5:09:76:EB:38:E8:5F:5F:31:DF:88:D1:BF:9A:93:09
ValidityMon, 24 Jun 2024 07:40:48 GMT - Mon, 16 Sep 2024 07:40:47 GMT
File type Web Open Font Format (Version 2), TrueType, length 15860, version 1.0
Hash e9f5aaf547f165386cd313b995dddd8e
acdef5603c2387b0e5bffd744b679a24a8bc1968
f5aebdfea35d1e7656ef4acc5db1f243209755ae3300943ef8fc6280f363c860
GET /s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://kenfiles.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15860
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 17 Jul 2024 13:21:25 GMT
expires: Thu, 17 Jul 2025 13:21:25 GMT
cache-control: public, max-age=31536000
age: 182286
last-modified: Wed, 11 May 2022 19:24:42 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET illusiondramaexploration.com/pixel/sbs?c=1
200 OK 0 B URL GET HTTP/1.1 illusiondramaexploration.com/pixel/sbs?c=1
IP
Requested by https://kenfiles.com/kw0vri142lwh/2lihz480p.mp4.html
Certificate IssuerLet's Encrypt
Subjectillusiondramaexploration.com
FingerprintA2:A7:A2:A7:A3:A2:C7:FE:C1:FF:7E:D4:1D:A4:5B:AC:3A:4B:09:55
ValiditySat, 29 Jun 2024 13:54:30 GMT - Fri, 27 Sep 2024 13:54:29 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pixel/sbs?c=1 HTTP/1.1
Host: illusiondramaexploration.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://kenfiles.com/
Cookie: u_pl=22677831; uid_id2=dc268f94-d254-49ab-b095-acfabdf51cc5:1:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; slec3e1228cd32241dca36e27cbd0333dac5=[3078189,3078195]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Fri, 19 Jul 2024 15:59:31 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
GET illusiondramaexploration.com/impr.gif?sid=H4sIAAAAAAAC%2F1RSy2sk1Re%2BlV%2FgxyAMKAOCIvZCQcF06tFPZyGOY4bROBlmFMWN3Fd1rn2rbnFvVVcnuAgOyGyExqWrytfJBDWI%2FgGO0hkQCQhpV1HM3yCIg0vpNtp4oOo8vnPgO9%2B5H%2B0WZyREQU%2BvvmG2ldZ0tVn3a8%2B9EwSXa%2BsqLYa1Yaf1XqtxuWYHL3Zbdf%2F52jXJ%2B2Y19APfD%2FygtqasjM1wdQZCZYfdoN71642wHjQbGNr%2F5q7w4KgHMTgjj0GJ6fID7xIUnyBNvroqXT832QuvJoWmubEYiIO30n5qyhTJIoythzg9OO%2BGcSdr92HS%2FTldmMG%2FjUxNiff9fbD04Jwk2GBvzpNpyBRMPIJyMIHUEyg6ATd3oMQJAbjAjQ2kyb0bxpZ062%2BUztApWX74O1Q5Jcu%2FXkKafHlFq2HtttFFrkzqMIwrqOEEqjdBVhwh316CKo%2FA8w%2BhxI9k9eE60mRvw2kDJU6fETxsdeJuY0WEzcZKo0vZCvO7zRXKY8pE3Aw4b84FUmoCFU%2Bg5QjUeShmn%2FJQxB6KzEMiTms8CIK2Lzj1O13OI9GWrCX8gLbjgAZ%2Bq4OCz3YYIc9G4HoEbneQ2R301Qi2%2BA5us4ITHlxOMBAVSklQOoKSEpSKoMwJykG1L7QLXXVPaFew4NyH5z6qxibv7dJ9k%2FdkSkDtCFZUu9kZeXQmoPfuhWvoy9NaJIMw7HARhWEjEJxGLRm2ORN%2BFEWC8iacqqDc0nzdbTUlT%2F%2F8GjI1JRc%2B%2BAWMHsHpI3D1LGjxFGhZgW5W2E4P%2BzKNlZauzk0CYSpk%2BTLyLW9Xn5En5yes%2F7kCyY%2FJuYHbCpmt8L56QNDTd8e3TEn2bpnSka83slwlapvOzns7p7n0Pn9dbpXGiutX3eizl%2FkMmIWHb0qXr9NUqLTnyBdXlBDSrhnLJfnmuntbspuF27xS2LTI1m%2B%2BsnY9yax0Tpl0AqpOLl4EV1Py%2Fx%2F%2BmL%2Fbx8%2BegLIT2KJCUiyYKnMEnu3AZYuaMwRWL3KWeSiLamxDtihqRaDlIqesgpPH3%2F72z9AiHls6m6aq2nV30bNLoPkdpEmFga0w0BWoHsEV%2FxvnmT1%2B6adobmB6acy0Xdpj2upP5iLPfhGcOq1FvmgzGcs2k41mI5ZcsGaT%2BTzmLBKdDkfupvGnH7O%2FAAAA%2F%2F8BAAD%2F%2F3YuoRiRBAAA
200 OK 7 B URL GET HTTP/1.1 illusiondramaexploration.com/impr.gif?sid=H4sIAAAAAAAC%2F1RSy2sk1Re%2BlV%2FgxyAMKAOCIvZCQcF06tFPZyGOY4bROBlmFMWN3Fd1rn2rbnFvVVcnuAgOyGyExqWrytfJBDWI%2FgGO0hkQCQhpV1HM3yCIg0vpNtp4oOo8vnPgO9%2B5H%2B0WZyREQU%2BvvmG2ldZ0tVn3a8%2B9EwSXa%2BsqLYa1Yaf1XqtxuWYHL3Zbdf%2F52jXJ%2B2Y19APfD%2FygtqasjM1wdQZCZYfdoN71642wHjQbGNr%2F5q7w4KgHMTgjj0GJ6fID7xIUnyBNvroqXT832QuvJoWmubEYiIO30n5qyhTJIoythzg9OO%2BGcSdr92HS%2FTldmMG%2FjUxNiff9fbD04Jwk2GBvzpNpyBRMPIJyMIHUEyg6ATd3oMQJAbjAjQ2kyb0bxpZ062%2BUztApWX74O1Q5Jcu%2FXkKafHlFq2HtttFFrkzqMIwrqOEEqjdBVhwh316CKo%2FA8w%2BhxI9k9eE60mRvw2kDJU6fETxsdeJuY0WEzcZKo0vZCvO7zRXKY8pE3Aw4b84FUmoCFU%2Bg5QjUeShmn%2FJQxB6KzEMiTms8CIK2Lzj1O13OI9GWrCX8gLbjgAZ%2Bq4OCz3YYIc9G4HoEbneQ2R301Qi2%2BA5us4ITHlxOMBAVSklQOoKSEpSKoMwJykG1L7QLXXVPaFew4NyH5z6qxibv7dJ9k%2FdkSkDtCFZUu9kZeXQmoPfuhWvoy9NaJIMw7HARhWEjEJxGLRm2ORN%2BFEWC8iacqqDc0nzdbTUlT%2F%2F8GjI1JRc%2B%2BAWMHsHpI3D1LGjxFGhZgW5W2E4P%2BzKNlZauzk0CYSpk%2BTLyLW9Xn5En5yes%2F7kCyY%2FJuYHbCpmt8L56QNDTd8e3TEn2bpnSka83slwlapvOzns7p7n0Pn9dbpXGiutX3eizl%2FkMmIWHb0qXr9NUqLTnyBdXlBDSrhnLJfnmuntbspuF27xS2LTI1m%2B%2BsnY9yax0Tpl0AqpOLl4EV1Py%2Fx%2F%2BmL%2Fbx8%2BegLIT2KJCUiyYKnMEnu3AZYuaMwRWL3KWeSiLamxDtihqRaDlIqesgpPH3%2F72z9AiHls6m6aq2nV30bNLoPkdpEmFga0w0BWoHsEV%2FxvnmT1%2B6adobmB6acy0Xdpj2upP5iLPfhGcOq1FvmgzGcs2k41mI5ZcsGaT%2BTzmLBKdDkfupvGnH7O%2FAAAA%2F%2F8BAAD%2F%2F3YuoRiRBAAA
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://kenfiles.com/kw0vri142lwh/2lihz480p.mp4.html
Certificate IssuerLet's Encrypt
Subjectillusiondramaexploration.com
FingerprintA2:A7:A2:A7:A3:A2:C7:FE:C1:FF:7E:D4:1D:A4:5B:AC:3A:4B:09:55
ValiditySat, 29 Jun 2024 13:54:30 GMT - Fri, 27 Sep 2024 13:54:29 GMT
File type ASCII text, with no line terminators
Hash 132d6af1b46048b45cf86cdee7991d31
eb7007d03d59b65bc6da7e098c4d38fc6dfb6285
ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c
GET /impr.gif?sid=H4sIAAAAAAAC%2F1RSy2sk1Re%2BlV%2FgxyAMKAOCIvZCQcF06tFPZyGOY4bROBlmFMWN3Fd1rn2rbnFvVVcnuAgOyGyExqWrytfJBDWI%2FgGO0hkQCQhpV1HM3yCIg0vpNtp4oOo8vnPgO9%2B5H%2B0WZyREQU%2BvvmG2ldZ0tVn3a8%2B9EwSXa%2BsqLYa1Yaf1XqtxuWYHL3Zbdf%2F52jXJ%2B2Y19APfD%2FygtqasjM1wdQZCZYfdoN71642wHjQbGNr%2F5q7w4KgHMTgjj0GJ6fID7xIUnyBNvroqXT832QuvJoWmubEYiIO30n5qyhTJIoythzg9OO%2BGcSdr92HS%2FTldmMG%2FjUxNiff9fbD04Jwk2GBvzpNpyBRMPIJyMIHUEyg6ATd3oMQJAbjAjQ2kyb0bxpZ062%2BUztApWX74O1Q5Jcu%2FXkKafHlFq2HtttFFrkzqMIwrqOEEqjdBVhwh316CKo%2FA8w%2BhxI9k9eE60mRvw2kDJU6fETxsdeJuY0WEzcZKo0vZCvO7zRXKY8pE3Aw4b84FUmoCFU%2Bg5QjUeShmn%2FJQxB6KzEMiTms8CIK2Lzj1O13OI9GWrCX8gLbjgAZ%2Bq4OCz3YYIc9G4HoEbneQ2R301Qi2%2BA5us4ITHlxOMBAVSklQOoKSEpSKoMwJykG1L7QLXXVPaFew4NyH5z6qxibv7dJ9k%2FdkSkDtCFZUu9kZeXQmoPfuhWvoy9NaJIMw7HARhWEjEJxGLRm2ORN%2BFEWC8iacqqDc0nzdbTUlT%2F%2F8GjI1JRc%2B%2BAWMHsHpI3D1LGjxFGhZgW5W2E4P%2BzKNlZauzk0CYSpk%2BTLyLW9Xn5En5yes%2F7kCyY%2FJuYHbCpmt8L56QNDTd8e3TEn2bpnSka83slwlapvOzns7p7n0Pn9dbpXGiutX3eizl%2FkMmIWHb0qXr9NUqLTnyBdXlBDSrhnLJfnmuntbspuF27xS2LTI1m%2B%2BsnY9yax0Tpl0AqpOLl4EV1Py%2Fx%2F%2BmL%2Fbx8%2BegLIT2KJCUiyYKnMEnu3AZYuaMwRWL3KWeSiLamxDtihqRaDlIqesgpPH3%2F72z9AiHls6m6aq2nV30bNLoPkdpEmFga0w0BWoHsEV%2FxvnmT1%2B6adobmB6acy0Xdpj2upP5iLPfhGcOq1FvmgzGcs2k41mI5ZcsGaT%2BTzmLBKdDkfupvGnH7O%2FAAAA%2F%2F8BAAD%2F%2F3YuoRiRBAAA HTTP/1.1
Host: illusiondramaexploration.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://kenfiles.com/
Cookie: u_pl=22677831; uid_id2=dc268f94-d254-49ab-b095-acfabdf51cc5:1:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; slec3e1228cd32241dca36e27cbd0333dac5=[3078189,3078195]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Fri, 19 Jul 2024 15:59:31 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: 598afc86049a0adc0fcfb931c63e691a
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains
GET kenfiles.com/favicon.ico
200 OK 4.0 kB IP
ASN #27411 LEASEWEB-USA-CHI
Requested by https://kenfiles.com/kw0vri142lwh/2lihz480p.mp4.html
Certificate IssuerLet's Encrypt
Subjectwww.kenfiles.com
Fingerprint13:20:AB:34:00:6C:C4:89:8C:26:3C:67:5C:38:DD:2C:B1:6F:04:29
ValidityWed, 19 Jun 2024 21:33:06 GMT - Tue, 17 Sep 2024 21:33:05 GMT
File type gzip compressed data, from Unix
Hash e4828f44a4c47668bfdfdb71b07815a6
ab0cc6607b066b943fbae1baa68c0a79ca16ed1f
f398cf7ff3bd4d801be6efb33a62a2ec51f82a162b995f849cea661b26a38d68
GET /favicon.ico HTTP/1.1
Host: kenfiles.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://kenfiles.com/kw0vri142lwh/2lihz480p.mp4.html
Cookie: lang=english; affiliate=qaNF%2FZcGdxCiCQYahoyAFPF5TR91fOv5zYpAuPcL9rLFCBnTvXavefEDnfZmAS%2FxfkiybTc5KcImRblK9SED%2BmAEAWEVu55sR1V%2F4xxhz0L64ReuTyDH%2ByYq; _ga_15R1WCXN4T=GS1.1.1721404769.1.0.1721404769.0.0.0; _ga=GA1.1.1670636639.1721404769; dom3ic8zudi28v8lr6fgphwffqoz0j6c=dc268f94-d254-49ab-b095-acfabdf51cc5%3A1%3A1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.26.1
date: Fri, 19 Jul 2024 15:59:29 GMT
content-type: image/x-icon
last-modified: Fri, 05 Jan 2024 02:09:47 GMT
vary: Accept-Encoding
etag: W/"659764eb-47e"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-cache: HIT from Backend
strict-transport-security: max-age=31536000
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-encoding: gzip
X-Firefox-Spdy: h2
GET recordedthereby.com/sfp.js
200 OK 34 kB URL GET HTTP/2 recordedthereby.com/sfp.js
IP
Requested by https://kenfiles.com/kw0vri142lwh/2lihz480p.mp4.html
Certificate IssuerGoogle Trust Services
Subjectrecordedthereby.com
FingerprintA1:CB:3E:AF:CE:F5:E9:D2:26:FB:E2:D4:FE:4B:29:D2:B3:C9:AD:3B
ValiditySat, 06 Jul 2024 15:25:15 GMT - Fri, 04 Oct 2024 15:25:14 GMT
File type JavaScript source, Unicode text, UTF-8 text, with very long lines (65529), with no line terminators
Hash 7e3e44049654b6e244c1777e68ffb8e7
8f2a8298666d607afd92a0baa362ef4dc9ccd039
4acac8b8ff23671d365150818f3c39bbbfa08b1a1842d73de5933e0fea26454b
GET /sfp.js HTTP/1.1
Host: recordedthereby.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://kenfiles.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 19 Jul 2024 15:59:29 GMT
content-type: application/javascript; charset=utf-8
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
access-control-allow-origin: *
expires: Thu, 01 Jan 1970 00:00:01 GMT
cache-control: no-cache, max-age=0, private, no-cache
x-request-id: fd35bd5d5d32ed400978e704f9236e38
pragma: no-cache
strict-transport-security: max-age=0; includeSubdomains
cf-cache-status: BYPASS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hcb0prbB%2FQdtn7w%2B4hiH1F7FOSsCXTWOPltLF3jef2vO1kmZyQrrubS%2BShXqJTvJtnKH%2F5lyrn3g0C97H3j7tcl7Pa3iiUi07yWC6i9C6M9jaMx6QoDJIfaMDyGSgiM8WlhINset"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8a5beb405c5d569b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET cdn.kenfiles.com/xfsdl/frontend3.2.1/dist/assets/js/bundle.js?3.4b2701
200 OK 778 kB URL GET HTTP/3 cdn.kenfiles.com/xfsdl/frontend3.2.1/dist/assets/js/bundle.js?3.4b2701
IP
Requested by https://kenfiles.com/kw0vri142lwh/2lihz480p.mp4.html
Certificate IssuerAmazon
Subjectcdn.kenfiles.com
Fingerprint72:1A:33:7C:1D:91:BF:1E:7A:55:9D:9A:8B:B0:80:A1:16:74:90:DC
ValiditySat, 13 Apr 2024 00:00:00 GMT - Mon, 12 May 2025 23:59:59 GMT
Size 778 kB (777848 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /xfsdl/frontend3.2.1/dist/assets/js/bundle.js?3.4b2701 HTTP/1.1
Host: cdn.kenfiles.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://kenfiles.com/
Cookie: lang=english; affiliate=qaNF%2FZcGdxCiCQYahoyAFPF5TR91fOv5zYpAuPcL9rLFCBnTvXavefEDnfZmAS%2FxfkiybTc5KcImRblK9SED%2BmAEAWEVu55sR1V%2F4xxhz0L64ReuTyDH%2ByYq
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: application/javascript
alt-svc: h3=":443"; ma=86400
age: 11190349
server: nginx/1.24.0
date: Tue, 12 Mar 2024 03:33:40 GMT
last-modified: Fri, 19 Jan 2024 04:59:25 GMT
etag: W/"65aa01ad-bde78"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
strict-transport-security: max-age=31536000
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-encoding: gzip
vary: Accept-Encoding, Origin
x-cache: Hit from cloudfront
via: 1.1 a343e36742f64defd0a2caf1f96ff772.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 1UWh6pwXHyotXbX4blVbj4Ye9M-XelYMn9Vb9DKJAQHUcJ7AzYxv0g==
GET cdn.creative-bars1.com/sb/notifications/utility/default/us/blog/financeskipper/message_redcircle2/16/css/style.css
200 OK 3.7 kB URL GET HTTP/2 cdn.creative-bars1.com/sb/notifications/utility/default/us/blog/financeskipper/message_redcircle2/16/css/style.css
IP
Requested by https://kenfiles.com/kw0vri142lwh/2lihz480p.mp4.html
Certificate IssuerGoogle Trust Services
Subjectcreative-bars1.com
FingerprintD1:9B:13:19:76:51:03:81:CE:A7:79:69:01:B6:C9:CF:FF:78:92:61
ValidityThu, 13 Jun 2024 14:42:47 GMT - Wed, 11 Sep 2024 14:42:46 GMT
File type ASCII text, with very long lines (3865), with no line terminators
Hash 8af2a95e7b4e4fd515ebc4d2a5b969a9
8c10eb89ec6434d2b6540bef9d042c3d305bcef3
5d6300285dcf4ce34851ff873097d2ecccc9c2059e89aacc4ff6ee672baf2f8a
GET /sb/notifications/utility/default/us/blog/financeskipper/message_redcircle2/16/css/style.css HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://kenfiles.com
DNT: 1
Connection: keep-alive
Referer: https://kenfiles.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 19 Jul 2024 15:59:30 GMT
content-type: text/css
last-modified: Fri, 19 Jan 2024 14:21:26 GMT
etag: W/"65aa8566-e50"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
content-encoding: gzip
cf-cache-status: HIT
age: 155015
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wrJWKfkbMpIUlfqoTDUINk5rXOmBKUe%2BVdSttKwnd1YCPFRZvNdEQe7wql6Q4%2BaWgI9dglDKq67h4ieaSQhx8bMN4qLmLKvbOiV23T3DDTxCu744LrZpZEnPjSHuIhKg4BbrjvNa1474"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8a5beb485d0db51e-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET cdn.kenfiles.com/xfsdl/frontend3.2.1/dist/assets/css/xfsdl.css?3.4b2701
200 OK 731 kB URL GET HTTP/2 cdn.kenfiles.com/xfsdl/frontend3.2.1/dist/assets/css/xfsdl.css?3.4b2701
IP
Requested by https://kenfiles.com/kw0vri142lwh/2lihz480p.mp4.html
Certificate IssuerAmazon
Subjectcdn.kenfiles.com
Fingerprint72:1A:33:7C:1D:91:BF:1E:7A:55:9D:9A:8B:B0:80:A1:16:74:90:DC
ValiditySat, 13 Apr 2024 00:00:00 GMT - Mon, 12 May 2025 23:59:59 GMT
Size 731 kB (730868 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /xfsdl/frontend3.2.1/dist/assets/css/xfsdl.css?3.4b2701 HTTP/1.1
Host: cdn.kenfiles.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://kenfiles.com/
Cookie: lang=english; affiliate=qaNF%2FZcGdxCiCQYahoyAFPF5TR91fOv5zYpAuPcL9rLFCBnTvXavefEDnfZmAS%2FxfkiybTc5KcImRblK9SED%2BmAEAWEVu55sR1V%2F4xxhz0L64ReuTyDH%2ByYq
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css
server: nginx/1.24.0
date: Sun, 14 Jan 2024 15:26:37 GMT
last-modified: Fri, 05 Jan 2024 11:00:01 GMT
etag: W/"6597e131-b26f4"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
strict-transport-security: max-age=31536000
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-encoding: gzip
x-cache: Hit from cloudfront
via: 1.1 d9fb4c3794a085bb4ee2c5798c2cb1b8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: h-269pvbvvn6YWFwlRPOO5a7DN1mvAZuDfGLzsiuXP0xGo2xZ3g5Pw==
age: 16158771
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
GET cdn.kenfiles.com/css/style.ext.css?3.4b2701
200 OK 12 kB URL GET HTTP/3 cdn.kenfiles.com/css/style.ext.css?3.4b2701
IP
Requested by https://kenfiles.com/kw0vri142lwh/2lihz480p.mp4.html
Certificate IssuerAmazon
Subjectcdn.kenfiles.com
Fingerprint72:1A:33:7C:1D:91:BF:1E:7A:55:9D:9A:8B:B0:80:A1:16:74:90:DC
ValiditySat, 13 Apr 2024 00:00:00 GMT - Mon, 12 May 2025 23:59:59 GMT
File type ASCII text, with very long lines (1938), with CRLF line terminators
Hash 2031ce4c89fa69ee357da5cc4837b426
d137288626e9d15fe18ec66ec3f993ce1e9f2064
b1c8ba6a8850695ef8e6279e8b8360bcd69cca5f4eb173d5fdd8def844f2b2bb
GET /css/style.ext.css?3.4b2701 HTTP/1.1
Host: cdn.kenfiles.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://kenfiles.com/
Cookie: lang=english; affiliate=qaNF%2FZcGdxCiCQYahoyAFPF5TR91fOv5zYpAuPcL9rLFCBnTvXavefEDnfZmAS%2FxfkiybTc5KcImRblK9SED%2BmAEAWEVu55sR1V%2F4xxhz0L64ReuTyDH%2ByYq
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: text/css
alt-svc: h3=":443"; ma=86400
age: 16157648
server: nginx/1.24.0
date: Sun, 14 Jan 2024 15:45:21 GMT
last-modified: Tue, 02 Jan 2024 01:30:24 GMT
etag: W/"65936730-2fb4"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
strict-transport-security: max-age=31536000
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-encoding: gzip
vary: Accept-Encoding, Origin
x-cache: Hit from cloudfront
via: 1.1 a343e36742f64defd0a2caf1f96ff772.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: L0vHmeP5s9mPYnFqN2515ER3YC5JGlkl_xDAJLXImYwSsPdQTkyIYg==
GET kenfiles.com/kw0vri142lwh/2lihz480p.mp4.html
200 OK 33 kB URL User Request GET HTTP/2 kenfiles.com/kw0vri142lwh/2lihz480p.mp4.html
IP
ASN #27411 LEASEWEB-USA-CHI
Certificate IssuerLet's Encrypt
Subjectwww.kenfiles.com
Fingerprint13:20:AB:34:00:6C:C4:89:8C:26:3C:67:5C:38:DD:2C:B1:6F:04:29
ValidityWed, 19 Jun 2024 21:33:06 GMT - Tue, 17 Sep 2024 21:33:05 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /kw0vri142lwh/2lihz480p.mp4.html HTTP/1.1
Host: kenfiles.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://jteen1.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.26.1
date: Fri, 19 Jul 2024 15:59:28 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
expires: Thu, 18 Jul 2024 15:59:27 GMT
set-cookie: lang=english; domain=.kenfiles.com; path=/
affiliate=qaNF%2FZcGdxCiCQYahoyAFPF5TR91fOv5zYpAuPcL9rLFCBnTvXavefEDnfZmAS%2FxfkiybTc5KcImRblK9SED%2BmAEAWEVu55sR1V%2F4xxhz0L64ReuTyDH%2ByYq; domain=.kenfiles.com; path=/; expires=Fri, 02-Aug-2024 15:59:27 GMT
content-encoding: gzip
X-Firefox-Spdy: h2
GET cdn.creative-bars1.com/sb/notifications/utility/default/us/blog/financeskipper/message_redcircle2/16/img/sale3.jpg
200 OK 65 kB URL GET HTTP/3 cdn.creative-bars1.com/sb/notifications/utility/default/us/blog/financeskipper/message_redcircle2/16/img/sale3.jpg
IP
Requested by https://kenfiles.com/kw0vri142lwh/2lihz480p.mp4.html
Certificate IssuerGoogle Trust Services
Subjectcreative-bars1.com
FingerprintD1:9B:13:19:76:51:03:81:CE:A7:79:69:01:B6:C9:CF:FF:78:92:61
ValidityThu, 13 Jun 2024 14:42:47 GMT - Wed, 11 Sep 2024 14:42:46 GMT
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=242, bps=0, PhotometricInterpretation=RGB, orientation=upper-left, width=364], progressive, precision 8, 364x242, components 3
Hash 61f7b1fa1698507638df7882e2bdfcaf
89134af9a734f4c30d0db01ea36c86895e46b7e3
bc0a583f7e3c834e53d5263ecc90d279b27460ea2e9bce56b7ac6b129eb5849c
GET /sb/notifications/utility/default/us/blog/financeskipper/message_redcircle2/16/img/sale3.jpg HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 19 Jul 2024 15:59:30 GMT
content-type: image/jpeg
content-length: 64642
last-modified: Fri, 19 Jan 2024 14:21:26 GMT
etag: "65aa8566-fc82"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 3128050
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=fmXJTLpsl9gQQ1PC7PCTFmaXvN32qKt%2FhIVcRD1MN5D9bxp8v%2B6wJAeFXuYNScD8ASUegnwv6DYTJdhzwSShvKalpFOIIwN8QGg0Z4gsJgOWo4SkPud0RrdYVKN48rH3Q0GBkKnU7LbG"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8a5beb48cb4e712e-OSL
alt-svc: h3=":443"; ma=86400
GET fonts.googleapis.com/css?family=Roboto:300,400,700&display=swap
200 OK 7.0 kB URL GET HTTP/3 fonts.googleapis.com/css?family=Roboto:300,400,700&display=swap
IP
Requested by https://kenfiles.com/kw0vri142lwh/2lihz480p.mp4.html
Certificate IssuerGoogle Trust Services
Subjectupload.video.google.com
Fingerprint8F:1C:80:D7:A7:FA:04:F3:EE:EF:70:FD:56:35:32:FD:55:AB:63:5F
ValidityMon, 24 Jun 2024 07:40:53 GMT - Mon, 16 Sep 2024 07:40:52 GMT
File type ASCII text, with very long lines (7193), with no line terminators
Hash 16b49a99486594c0b42d9bd7821deb2c
2fb46e5e86d6b37d4497cc04bfd89b3cb33a276a
3f3540952441e06ef81189cf63d46bac242804e386779dbb0cdd78ed10025c21
GET /css?family=Roboto:300,400,700&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 19 Jul 2024 15:59:30 GMT
date: Fri, 19 Jul 2024 15:59:30 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
GET a.exdynsrv.com/ad-provider.js
200 OK 166 kB URL GET HTTP/2 a.exdynsrv.com/ad-provider.js
IP
ASN #60068 Datacamp Limited
Requested by https://kenfiles.com/kw0vri142lwh/2lihz480p.mp4.html
Certificate IssuerLet's Encrypt
Subject1852405956.rsc.cdn77.org
FingerprintC9:05:09:07:D8:BC:8A:DC:46:58:CE:A7:19:E6:9D:A8:24:1C:C1:3D
ValidityMon, 20 May 2024 20:38:27 GMT - Sun, 18 Aug 2024 20:38:26 GMT
File type JavaScript source, ASCII text, with very long lines (35849)
Size 166 kB (166088 bytes)
Hash a9f4a126c783329049a7c358759ed841
29a9423a4a4b5b7c0882f427294b37e6b6084d07
ad9ca0052c0f154a9579b20f0b737dcf7fd12204c5417c882651a336b68837bc
GET /ad-provider.js HTTP/1.1
Host: a.exdynsrv.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://kenfiles.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 19 Jul 2024 15:59:28 GMT
content-type: application/javascript
etag: W/"29a9423a4a4b5b7c0882f427294"
expires: Thu, 18 Jul 2024 16:03:10 GMT
cache-control: max-age=10800
x-robots-tag: noindex, follow
access-control-allow-origin: *
x-77-nzt: EwwBuUwJFAH3pycAAAwBuUwKAQH3IAIAAAwBisclxAH3DQAAAA
x-77-nzt-ray: af585630976af322608d9a667f940e14
x-accel-expires: @1721405417
x-accel-date: 1721394617
x-77-cache: HIT
x-77-age: 10151
vary: Accept-Encoding
content-encoding: gzip
server: CDN77-Turbo
x-accel-date-max: 1721308347
x-cache: HIT
x-age: 10151
x-77-pop: stockholmSE
X-Firefox-Spdy: h2
GET cdn.creative-bars1.com/sb/notifications/utility/default/us/blog/financeskipper/message_redcircle2/16/js/script.js
200 OK 386 B URL GET HTTP/2 cdn.creative-bars1.com/sb/notifications/utility/default/us/blog/financeskipper/message_redcircle2/16/js/script.js
IP
Requested by https://kenfiles.com/kw0vri142lwh/2lihz480p.mp4.html
Certificate IssuerGoogle Trust Services
Subjectcreative-bars1.com
FingerprintD1:9B:13:19:76:51:03:81:CE:A7:79:69:01:B6:C9:CF:FF:78:92:61
ValidityThu, 13 Jun 2024 14:42:47 GMT - Wed, 11 Sep 2024 14:42:46 GMT
File type ASCII text, with very long lines (399), with no line terminators
Hash 022602a468da44628060800173771da2
9be813fbfebbcb2aa46d8c6b8abec68b3d16c89c
6742c376e658c34d09b2dc5772bd798e3cd52bb265758bac5bce184f8ee7b5cc
GET /sb/notifications/utility/default/us/blog/financeskipper/message_redcircle2/16/js/script.js HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://kenfiles.com
DNT: 1
Connection: keep-alive
Referer: https://kenfiles.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 19 Jul 2024 15:59:30 GMT
content-type: application/javascript
last-modified: Fri, 19 Jan 2024 14:21:26 GMT
etag: W/"65aa8566-182"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 155015
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ZTeZwtSnVbsGFo41VBRrm%2Fos1Q0qSA3DakAm%2FRAG3F0eG%2Fvzv2tYjyYXDP98CpWhXqmjRkTdTUWMDxss51%2Fe8Mop0weu4w%2F886zVMUjvOpO19UaKOMqDHuFPl7zY%2FEg5yVdIhUbftTJc"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8a5beb486d24b51e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET cdn.kenfiles.com/xfsdl/frontend3.2.1/dist/images/logo.png?3.4b2701
0 B URL GET cdn.kenfiles.com/xfsdl/frontend3.2.1/dist/images/logo.png?3.4b2701
IP
Requested by https://kenfiles.com/kw0vri142lwh/2lihz480p.mp4.html
Certificate IssuerAmazon
Subjectcdn.kenfiles.com
Fingerprint72:1A:33:7C:1D:91:BF:1E:7A:55:9D:9A:8B:B0:80:A1:16:74:90:DC
ValiditySat, 13 Apr 2024 00:00:00 GMT - Mon, 12 May 2025 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /xfsdl/frontend3.2.1/dist/images/logo.png?3.4b2701 HTTP/1.1
Host: cdn.kenfiles.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://kenfiles.com/
Cookie: lang=english; affiliate=qaNF%2FZcGdxCiCQYahoyAFPF5TR91fOv5zYpAuPcL9rLFCBnTvXavefEDnfZmAS%2FxfkiybTc5KcImRblK9SED%2BmAEAWEVu55sR1V%2F4xxhz0L64ReuTyDH%2ByYq
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/png
server: nginx/1.24.0
date: Sun, 14 Jan 2024 15:47:13 GMT
last-modified: Tue, 02 Jan 2024 01:41:11 GMT
etag: W/"659369b7-1dc6"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
strict-transport-security: max-age=31536000
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-encoding: gzip
x-cache: Hit from cloudfront
via: 1.1 d9fb4c3794a085bb4ee2c5798c2cb1b8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: IduR_-RqFLm801yEFdCTIqZ74pLg3vj9Mjqj130ykt0WmlHr3BAK7A==
age: 16157535
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
GET cdn.barscreative1.com/sb/notifications/utility/default/us/blog/financeskipper/message_redcircle2/16/index.html
200 OK 1.5 kB URL GET HTTP/2 cdn.barscreative1.com/sb/notifications/utility/default/us/blog/financeskipper/message_redcircle2/16/index.html
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://kenfiles.com/kw0vri142lwh/2lihz480p.mp4.html
Certificate IssuerLet's Encrypt
Subjectcdn.barscreative1.com
FingerprintA2:3E:46:AA:B1:90:A8:AE:3D:15:ED:7F:CA:0F:EF:AF:53:4A:20:65
ValidityMon, 08 Jul 2024 03:01:17 GMT - Sun, 06 Oct 2024 03:01:16 GMT
File type HTML document, ASCII text, with very long lines (1633), with no line terminators
Hash f93ed3ce8bed77cddedfbd4906ec1e86
a6860f6e0d690ac796f5c8e9211aef6031a29abb
7a7a3a39b0cf96b597a8da0cef9b2093229e1778fda9697b5215ba4cb267c1a0
GET /sb/notifications/utility/default/us/blog/financeskipper/message_redcircle2/16/index.html HTTP/1.1
Host: cdn.barscreative1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://kenfiles.com
DNT: 1
Connection: keep-alive
Referer: https://kenfiles.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 19 Jul 2024 15:59:30 GMT
content-type: text/html; charset=utf-8
server: nginx/1.21.6
last-modified: Fri, 19 Jan 2024 14:21:26 GMT
etag: W/"65aa8566-609"
cache-control: max-age=3600
access-control-allow-origin: *
access-control-expose-headers: Date
content-encoding: gzip
expires: Fri, 19 Jul 2024 16:59:30 GMT
x-proxy-cache: HIT
X-Firefox-Spdy: h2
GET fonts.googleapis.com/css2?family=Roboto:wght@300;400;500;700&display=swap
200 OK 9.3 kB URL GET HTTP/2 fonts.googleapis.com/css2?family=Roboto:wght@300;400;500;700&display=swap
IP
Requested by https://kenfiles.com/kw0vri142lwh/2lihz480p.mp4.html
Certificate IssuerGoogle Trust Services
Subjectupload.video.google.com
Fingerprint8F:1C:80:D7:A7:FA:04:F3:EE:EF:70:FD:56:35:32:FD:55:AB:63:5F
ValidityMon, 24 Jun 2024 07:40:53 GMT - Mon, 16 Sep 2024 07:40:52 GMT
File type ASCII text, with very long lines (9600), with no line terminators
Hash 14947237ea2dd749ae125083525bd957
c5538d47cbd2b0959fee2e6837a1fc2e33563fbc
3cda3e604a3f1c5d1b7e5dd035dfacb996f1fe40e90e0279e9ee77ea01d5f944
GET /css2?family=Roboto:wght@300;400;500;700&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cdn.kenfiles.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 19 Jul 2024 15:59:28 GMT
date: Fri, 19 Jul 2024 15:59:28 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET fonts.googleapis.com/css2?family=Nunito:wght@400;700&display=swap
200 OK 3.5 kB URL GET HTTP/2 fonts.googleapis.com/css2?family=Nunito:wght@400;700&display=swap
IP
Requested by https://kenfiles.com/kw0vri142lwh/2lihz480p.mp4.html
Certificate IssuerGoogle Trust Services
Subjectupload.video.google.com
Fingerprint8F:1C:80:D7:A7:FA:04:F3:EE:EF:70:FD:56:35:32:FD:55:AB:63:5F
ValidityMon, 24 Jun 2024 07:40:53 GMT - Mon, 16 Sep 2024 07:40:52 GMT
File type ASCII text, with very long lines (3618), with no line terminators
Hash ebfa7437ad043f66012ee720f5e2d3e3
e00025237417338f65607207d01ca6aef36e1b20
3b8afa2ee2823abe7553ba9caa3b59e3e871652a8ebf69c4682c96311440867a
GET /css2?family=Nunito:wght@400;700&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cdn.kenfiles.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 19 Jul 2024 15:59:28 GMT
date: Fri, 19 Jul 2024 15:59:28 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET cdn.kenfiles.com/xfsdl/frontend3.2.1/dist/assets/css/theme.css?3.4b2701
200 OK 1.9 kB URL GET HTTP/2 cdn.kenfiles.com/xfsdl/frontend3.2.1/dist/assets/css/theme.css?3.4b2701
IP
Requested by https://kenfiles.com/kw0vri142lwh/2lihz480p.mp4.html
Certificate IssuerAmazon
Subjectcdn.kenfiles.com
Fingerprint72:1A:33:7C:1D:91:BF:1E:7A:55:9D:9A:8B:B0:80:A1:16:74:90:DC
ValiditySat, 13 Apr 2024 00:00:00 GMT - Mon, 12 May 2025 23:59:59 GMT
File type ASCII text, with very long lines (1952), with no line terminators
Hash 5e0b5bb76d3e89e177be685b36898c55
d7137033753021377b6447bccd63c8143140700c
063bcab5c6225b318e1975abd510b25e05320f26ec4d823be19751614185e420
GET /xfsdl/frontend3.2.1/dist/assets/css/theme.css?3.4b2701 HTTP/1.1
Host: cdn.kenfiles.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://kenfiles.com/
Cookie: lang=english; affiliate=qaNF%2FZcGdxCiCQYahoyAFPF5TR91fOv5zYpAuPcL9rLFCBnTvXavefEDnfZmAS%2FxfkiybTc5KcImRblK9SED%2BmAEAWEVu55sR1V%2F4xxhz0L64ReuTyDH%2ByYq
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css
server: nginx/1.24.0
date: Sun, 14 Jan 2024 15:45:21 GMT
last-modified: Fri, 05 Jan 2024 10:59:47 GMT
etag: W/"6597e123-79a"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
strict-transport-security: max-age=31536000
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-encoding: gzip
x-cache: Hit from cloudfront
via: 1.1 d9fb4c3794a085bb4ee2c5798c2cb1b8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: CNQfZ6RymjQoqPqxB2lbvTfe03BO-nD7e_nDuyMd6h-P_HXU0PJbjg==
age: 16157647
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
GET illusiondramaexploration.com/pixel/sbls?bv=24.22.2032&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fnotifications%2Futility%2Fdefault%2Fus%2Fblog%2Ffinanceskipper%2Fmessage_redcircle2%2F16%2Fcss%2Fanimate.css&l=78689&fd=295
200 OK 0 B URL GET HTTP/1.1 illusiondramaexploration.com/pixel/sbls?bv=24.22.2032&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fnotifications%2Futility%2Fdefault%2Fus%2Fblog%2Ffinanceskipper%2Fmessage_redcircle2%2F16%2Fcss%2Fanimate.css&l=78689&fd=295
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://kenfiles.com/kw0vri142lwh/2lihz480p.mp4.html
Certificate IssuerLet's Encrypt
Subjectillusiondramaexploration.com
FingerprintA2:A7:A2:A7:A3:A2:C7:FE:C1:FF:7E:D4:1D:A4:5B:AC:3A:4B:09:55
ValiditySat, 29 Jun 2024 13:54:30 GMT - Fri, 27 Sep 2024 13:54:29 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pixel/sbls?bv=24.22.2032&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fnotifications%2Futility%2Fdefault%2Fus%2Fblog%2Ffinanceskipper%2Fmessage_redcircle2%2F16%2Fcss%2Fanimate.css&l=78689&fd=295 HTTP/1.1
Host: illusiondramaexploration.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://kenfiles.com/
Cookie: u_pl=22677831; uid_id2=dc268f94-d254-49ab-b095-acfabdf51cc5:1:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; slec3e1228cd32241dca36e27cbd0333dac5=[3078189,3078195]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Fri, 19 Jul 2024 15:59:30 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
GET kenfiles.com/xfsdl/frontend3.2.1/dist/assets/js/scripts.js?3.4b2701
200 OK 20 kB URL GET HTTP/2 kenfiles.com/xfsdl/frontend3.2.1/dist/assets/js/scripts.js?3.4b2701
IP
ASN #27411 LEASEWEB-USA-CHI
Requested by https://kenfiles.com/kw0vri142lwh/2lihz480p.mp4.html
Certificate IssuerLet's Encrypt
Subjectwww.kenfiles.com
Fingerprint13:20:AB:34:00:6C:C4:89:8C:26:3C:67:5C:38:DD:2C:B1:6F:04:29
ValidityWed, 19 Jun 2024 21:33:06 GMT - Tue, 17 Sep 2024 21:33:05 GMT
File type JavaScript source, ASCII text, with very long lines (528)
Hash 46a13ae4fd103ca92acab5f8271af338
7c21ef8eab8e5265f34ee8c7c652664c381cbf5f
1da2929936ea7584c1bcf6589b5156259644a57cd51a146135aa6f6a50f51570
GET /xfsdl/frontend3.2.1/dist/assets/js/scripts.js?3.4b2701 HTTP/1.1
Host: kenfiles.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://kenfiles.com/kw0vri142lwh/2lihz480p.mp4.html
Cookie: lang=english; affiliate=qaNF%2FZcGdxCiCQYahoyAFPF5TR91fOv5zYpAuPcL9rLFCBnTvXavefEDnfZmAS%2FxfkiybTc5KcImRblK9SED%2BmAEAWEVu55sR1V%2F4xxhz0L64ReuTyDH%2ByYq
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.26.1
date: Fri, 19 Jul 2024 15:59:28 GMT
content-type: application/javascript
last-modified: Tue, 12 Mar 2024 03:17:11 GMT
vary: Accept-Encoding
etag: W/"65efc937-4e25"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-cache: HIT from Backend
strict-transport-security: max-age=31536000
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-encoding: gzip
X-Firefox-Spdy: h2
172.67.184.30
23.36.77.32
95.211.229.245
185.76.9.26
18.184.181.242
104.17.167.186
185.200.116.51
185.200.118.51