GET despotfifteen.com/e4/54/0a/e4540abf76b176f73b78844d0e054875.js
200 OK 17 kB URL GET HTTP/1.1 despotfifteen.com/e4/54/0a/e4540abf76b176f73b78844d0e054875.js
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://projectlive.info/live.php?id=ch6
Certificate IssuerLet's Encrypt
Subjectdespotfifteen.com
Fingerprint4E:E3:8A:F4:C4:1E:2F:14:01:AF:1B:6B:08:DD:22:F5:2A:22:C6:82
ValidityThu, 07 Sep 2023 01:03:34 GMT - Wed, 06 Dec 2023 01:03:33 GMT
File type ASCII text, with very long lines (42680)
Hash 2e6ad5577f5c9e2778fb50936717f26b
fa9e25564e6fef49d2457a7f3c3c2b98aa737cb7
53f207e1f5eb6646f9d145c5e176ac6265ed52464254f4c6c47de7c4101872b7
GET /e4/54/0a/e4540abf76b176f73b78844d0e054875.js HTTP/1.1
Host: despotfifteen.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://projectlive.info/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Sat, 16 Sep 2023 15:25:21 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Set-Cookie: 4b4e7ab587d59b22ad7bcd2439afc363_CF-2574=1; expires=Tue, 19 Sep 2023 15:25:21 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: d374c62b2ce457ea2c7ef43cd4b2bb5a
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
471 B URL ocsp.r2m03.amazontrust.com/
IP
Hash 7b1dab279093686cfff0ba545bceef3a
9b71fb5162a17d21a71ebf99a1ad1339df637b26
ce9ba6d1a232543ecced41cc787733ae37da2efdf28bc26de1c6a30182c4eeb6
POST / HTTP/1.1
Host: ocsp.r2m03.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=7200
Date: Sat, 16 Sep 2023 15:25:21 GMT
Last-Modified: Sat, 16 Sep 2023 13:59:38 GMT
Server: ECAcc (ska/F6CC)
X-Cache: Miss from cloudfront
Via: 1.1 930c2e58be2ae5a0faf6f308189d2776.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: ARN56-P2
X-Amz-Cf-Id: -bqBx-NSuucsyhKrbyZun_bghertkSgzftjjAWPiGeAY-8ZqSCsj0w==
Age: 5143
GET professionalswebcheck.com/stats
200 OK 40 B URL GET HTTP/2 professionalswebcheck.com/stats
IP
Requested by https://projectlive.info/live.php?id=ch6
Certificate IssuerAmazon
Subjectprofessionalswebcheck.com
Fingerprint75:E9:08:FD:96:58:C7:98:43:E8:21:27:A8:E9:B9:A4:55:28:F2:0C
ValidityWed, 30 Aug 2023 00:00:00 GMT - Fri, 27 Sep 2024 23:59:59 GMT
File type ASCII text, with no line terminators
Hash b8f72e2037821a85a4208a42e3a80ba5
73657119a7ac12ce0088c96822a1b2652a56982b
6b5aa7c824bbdebf648110b9131caaa4cebc7105fac9d69a849a332e0c0f6879
GET /stats HTTP/1.1
Host: professionalswebcheck.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://projectlive.info
DNT: 1
Connection: keep-alive
Referer: https://projectlive.info/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 16 Sep 2023 15:25:22 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: https://projectlive.info
vary: Origin
access-control-allow-credentials: true
set-cookie: uid_id2=06d51916-ffa5-4390-93ce-d35180efbb3f:3:1; expires=Tue, 13 Sep 2033 15:25:22 GMT; secure; SameSite=None
X-Firefox-Spdy: h2
GET chpadblock.com/wp-content/uploads/2022/08/icon-1.png
200 OK 32 kB URL GET HTTP/2 chpadblock.com/wp-content/uploads/2022/08/icon-1.png
IP
Requested by https://projectlive.info/live.php?id=ch6
Certificate IssuerGoogle Trust Services LLC
Subjectchpadblock.com
Fingerprint96:48:C0:07:CA:D1:12:BE:48:48:89:39:04:A3:05:85:4C:00:4F:B5
ValidityThu, 24 Aug 2023 23:32:27 GMT - Wed, 22 Nov 2023 23:32:26 GMT
File type PNG image data, 350 x 350, 8-bit/color RGBA, non-interlaced\012- data
Hash 7a7ebed8ff48b4272181d84a618e9a38
0395a2d2f9f32d3d2587edae02592e99bf4cebdd
cef283b537b5b439f78780bdfe94561204b0131029ee560a85692813daefcc65
GET /wp-content/uploads/2022/08/icon-1.png HTTP/1.1
Host: chpadblock.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://projectlive.info/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 16 Sep 2023 15:25:22 GMT
content-type: image/png
content-length: 31682
cache-control: public, max-age=604800
expires: Thu, 21 Sep 2023 13:58:39 GMT
last-modified: Thu, 25 Aug 2022 14:12:55 GMT
etag: "7bc2-63078367-b305db2f95861b82;;;"
vary: User-Agent, Accept-Encoding
alt-svc: h3=":443"; ma=86400
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 178003
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ivdkaXLvRKg8A87eJZ%2BncX%2FYketiq1UQFLFiOmBWyDbJZh93L0pdXszR3s3Q707np1zVgheu%2B2WpBt%2BqBY4u9eGvyHOdzFfXLTxqFECSJiguCuXsH8piloFVJYrIyDJ2%2FA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 807a1f255d2fb517-OSL
X-Firefox-Spdy: h2
GET chpadblock.com/wp-content/uploads/2023/04/d.svg
200 OK 22 kB URL GET HTTP/3 chpadblock.com/wp-content/uploads/2023/04/d.svg
IP
Requested by https://projectlive.info/live.php?id=ch6
Certificate IssuerGoogle Trust Services LLC
Subjectchpadblock.com
Fingerprint96:48:C0:07:CA:D1:12:BE:48:48:89:39:04:A3:05:85:4C:00:4F:B5
ValidityThu, 24 Aug 2023 23:32:27 GMT - Wed, 22 Nov 2023 23:32:26 GMT
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document, ASCII text, with very long lines (20835)
Hash d58bce37181e86cee427c3373a5b9664
86a9694051993251cdaa3922b8000b6a905005e1
8bb3b588f1e6e34e35e61afa9e35a4bf87959f1663635dbedbdffe12b6fee59a
GET /wp-content/uploads/2023/04/d.svg HTTP/1.1
Host: chpadblock.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://projectlive.info/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 16 Sep 2023 15:25:22 GMT
content-type: image/svg+xml
content-length: 22302
cache-control: public, max-age=604800
expires: Thu, 21 Sep 2023 13:12:29 GMT
last-modified: Thu, 06 Apr 2023 07:02:05 GMT
etag: "11bc8-642e6e6d-4e90609df05da5e0;br"
content-encoding: br
vary: Accept-Encoding,User-Agent
alt-svc: h3=":443"; ma=86400
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 180773
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=uT5pgQbhvldfeXcQJSrjHVDfcRGpTg%2BZLkIHYD5DEcTZ7vDdLqjmFj6utjREXztPtawmVZ%2FQUI397p6z5VSVEAKeTBaePFP5H2EyBUGYvc%2BUBYLniGidkTKcPKZTzFbN2A%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 807a1f25bb050afe-OSL
471 B IP
Hash 57c51176cb1a6498c681951ca41d8b83
6a7289f91c113b365870595a8695e16f9e13a083
e0e93aeb92c50afcd2d1e5f95b8cfb84ba8d9568abf6b84ae49a8d33802daeb2
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 16 Sep 2023 15:25:22 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
GET nopay.info/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js
200 OK 4.4 kB URL GET HTTP/3 nopay.info/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js
IP
Requested by https://nopay.info/embe.php?id=liveCh6
Certificate IssuerGoogle Trust Services LLC
Subjectnopay.info
FingerprintDA:D3:DD:74:EF:8B:F6:08:9D:82:90:55:A4:B7:38:44:B8:3B:BB:E7
ValidityTue, 29 Aug 2023 23:21:36 GMT - Mon, 27 Nov 2023 23:21:35 GMT
File type gzip compressed data, from Unix\012- data
Hash 24dc98508878779fa2053d06fdb9cb92
5d77d7c95d67432b0e71c378de8b6ce5638f8d8b
c1d67f91236ea8a558c8f3ac87b94814566516c2e9cbb5c96e6502c75fb2c4b9
GET /cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js HTTP/1.1
Host: nopay.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nopay.info/embe.php?id=liveCh6
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 16 Sep 2023 15:25:22 GMT
content-type: application/javascript
last-modified: Tue, 12 Sep 2023 15:48:14 GMT
etag: W/"6500883e-302c"
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=GeVqwvrzN%2FK9sNM829JluJc7J5WijmG0G8aXL%2BQiyKoB4FEvJPh1TF76nMpoCdmsswgtDijCGAfgaP9gq4wRpgPervzehdAU2h3X2MfWO9rHKVdMP4qtZ6th7k9z"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 807a1f269d61568a-OSL
x-frame-options: DENY
x-content-type-options: nosniff
expires: Mon, 18 Sep 2023 15:25:22 GMT
cache-control: max-age=172800, public
content-encoding: gzip
471 B IP
Hash 3f690653f247c02a01c2528105aefa1c
49b43e6ae93d42552873e76d5f7fd04d09ef5303
e65860a990d88abab1a953c18a8498894fa306c9b8f5218f72379ff51281ba70
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 16 Sep 2023 15:25:22 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
GET pagead2.googlesyndication.com/pagead/js/adsbygoogle.js
200 OK 51 kB URL GET HTTP/2 pagead2.googlesyndication.com/pagead/js/adsbygoogle.js
IP
Requested by https://projectlive.info/live.php?id=ch6
Certificate IssuerGoogle Trust Services LLC
Subject*.g.doubleclick.net
FingerprintEB:E5:2C:45:AC:61:4B:69:97:3F:60:1A:0C:91:22:90:68:B6:95:01
ValidityMon, 14 Aug 2023 08:16:28 GMT - Mon, 06 Nov 2023 08:16:27 GMT
File type ASCII text, with very long lines (3920)
Hash 39b92b8f161d8f72e664d77b75f1cce7
169697fa9c8d2608f9595cbcc5397efcbd1dc308
8d51f077e3608e794a4a1d835bb1354b1f450f12137a0f6779f2a05c9e121374
GET /pagead/js/adsbygoogle.js HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://projectlive.info
DNT: 1
Connection: keep-alive
Referer: https://projectlive.info/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
date: Sat, 16 Sep 2023 15:25:22 GMT
expires: Sat, 16 Sep 2023 15:25:22 GMT
cache-control: private, max-age=3600
content-type: text/javascript; charset=UTF-8
etag: 5806322757376944400
access-control-allow-origin: *
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 50659
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
471 B IP
Hash 9d3e0edc89ef77a62aa1284158e42482
805904e533f75c32c925e34779ec24aa55f5edad
5cc20af05ca0b8932aa70b4e5df4c1bbb38103e29782e67c9b03fe8d2d84bf60
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 16 Sep 2023 15:25:22 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
471 B IP
Hash 57c51176cb1a6498c681951ca41d8b83
6a7289f91c113b365870595a8695e16f9e13a083
e0e93aeb92c50afcd2d1e5f95b8cfb84ba8d9568abf6b84ae49a8d33802daeb2
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 16 Sep 2023 15:25:22 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
GET nauseousonto.com/pixel/purst?dl=0&th=0&sc=0&rs=1817&rd=1817&fd=1242&bv=23.9.v.3&tmpl=70
200 OK 0 B URL GET HTTP/1.1 nauseousonto.com/pixel/purst?dl=0&th=0&sc=0&rs=1817&rd=1817&fd=1242&bv=23.9.v.3&tmpl=70
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://projectlive.info/live.php?id=ch6
Certificate IssuerLet's Encrypt
Subjectnauseousonto.com
Fingerprint36:1E:37:41:10:60:07:C7:70:74:49:2D:41:A9:7C:71:8A:96:8E:C5
ValidityThu, 14 Sep 2023 12:02:15 GMT - Wed, 13 Dec 2023 12:02:14 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pixel/purst?dl=0&th=0&sc=0&rs=1817&rd=1817&fd=1242&bv=23.9.v.3&tmpl=70 HTTP/1.1
Host: nauseousonto.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://projectlive.info/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Sat, 16 Sep 2023 15:25:22 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
GET banquetunarmedgrater.com/advertisers.js
200 OK 0 B URL GET HTTP/2 banquetunarmedgrater.com/advertisers.js
IP
Requested by https://projectlive.info/live.php?id=ch6
Certificate IssuerGoogle Trust Services LLC
Subjectbanquetunarmedgrater.com
Fingerprint77:2B:76:51:D0:51:70:02:2E:BF:B7:9B:02:8B:5A:A4:91:FA:0B:9E
ValidityMon, 11 Sep 2023 08:34:11 GMT - Sun, 10 Dec 2023 08:34:10 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /advertisers.js HTTP/1.1
Host: banquetunarmedgrater.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://projectlive.info/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 16 Sep 2023 15:25:22 GMT
content-type: application/javascript
content-length: 0
expires: Thu, 01 Jan 1970 00:00:01 GMT
cache-control: max-age=172800
x-request-id: f0dbab9c56e125595d65012413a9e8fa
strict-transport-security: max-age=0; includeSubdomains
cf-cache-status: EXPIRED
last-modified: Sat, 16 Sep 2023 15:25:22 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=cU9ESJgxw2kW1MVyej%2BtQKqVqCXovCqHxsvdK%2F19VTjMareuBVDbdMyvuPYtBDewxcqQkLcsL3MGBAGfifbF9OYCu6sHrX6%2B%2BBedA6gg17A03lkswTD5iX3bAl%2Fhr3Vx8tki7WA8NfkMTSs%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 807a1f278a0a049a-CDG
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET i.imgur.com/zXznFUY.png?2
302 Found 0 B URL GET HTTP/2 i.imgur.com/zXznFUY.png?2
IP
Requested by https://projectlive.info/live.php?id=ch6
Certificate IssuerSectigo Limited
Subject*.imgur.com
FingerprintD6:4D:45:03:6D:38:F8:FD:EA:AF:E5:92:B3:4D:85:A5:6B:AF:5C:EC
ValidityMon, 13 Mar 2023 00:00:00 GMT - Tue, 12 Mar 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /zXznFUY.png?2 HTTP/1.1
Host: i.imgur.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://projectlive.info/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
retry-after: 0
location: https://i.imgur.com/removed.png
accept-ranges: bytes
date: Sat, 16 Sep 2023 15:25:22 GMT
age: 69
x-served-by: cache-iad-kcgs7200049-IAD, cache-bma1674-BMA
x-cache: HIT, HIT
x-cache-hits: 0, 1
x-timer: S1694877923.822330,VS0,VE1
strict-transport-security: max-age=300
access-control-allow-methods: GET, OPTIONS
access-control-allow-origin: *
server: cat factory 1.0
content-length: 0
X-Firefox-Spdy: h2
GET i.imgur.com/removed.png
200 OK 503 B IP
Requested by https://projectlive.info/live.php?id=ch6
Certificate IssuerSectigo Limited
Subject*.imgur.com
FingerprintD6:4D:45:03:6D:38:F8:FD:EA:AF:E5:92:B3:4D:85:A5:6B:AF:5C:EC
ValidityMon, 13 Mar 2023 00:00:00 GMT - Tue, 12 Mar 2024 23:59:59 GMT
File type PNG image data, 161 x 81, 1-bit colormap, non-interlaced\012- data
Hash d835884373f4d6c8f24742ceabe74946
20002faf28adfd94ca98cf6ced46f14334b53684
9b5936f4006146e4e1e9025b474c02863c0b5614132ad40db4b925a10e8bfbb9
GET /removed.png HTTP/1.1
Host: i.imgur.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://projectlive.info/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 14 May 2014 05:44:36 GMT
etag: "d835884373f4d6c8f24742ceabe74946"
content-type: image/png
cache-control: public, max-age=31536000
accept-ranges: bytes
date: Sat, 16 Sep 2023 15:25:22 GMT
age: 16009937
x-served-by: cache-bwi5162-BWI, cache-bma1674-BMA
x-cache: HIT, HIT
x-cache-hits: 1, 632388
x-timer: S1694877923.839634,VS0,VE0
strict-transport-security: max-age=300
access-control-allow-methods: GET, OPTIONS
access-control-allow-origin: *
server: cat factory 1.0
x-content-type-options: nosniff
content-length: 503
X-Firefox-Spdy: h2
GET cdn.jsdelivr.net/npm/clappr@latest/dist/clappr.min.js
200 OK 145 kB URL GET HTTP/2 cdn.jsdelivr.net/npm/clappr@latest/dist/clappr.min.js
IP
Requested by https://abolishstand.net/embed/tgj7ajwxlnp
Certificate IssuerGlobalSign nv-sa
Subjectjsdelivr.net
Fingerprint88:D1:D3:FA:BE:69:45:71:5A:74:78:14:1A:E8:F3:5A:88:69:9C:7F
ValidityFri, 23 Dec 2022 10:55:14 GMT - Wed, 24 Jan 2024 10:55:13 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Size 145 kB (145133 bytes)
Hash f55c6c796275a41ce7d97bd160e648ff
936285f9c8c85a749a1ef8cfc4d5e84b7ea2bc89
db7ce4b1edd2c3701c3f2585f7cbd70857173195489a99703ab39de16fa45b6c
GET /npm/clappr@latest/dist/clappr.min.js HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://abolishstand.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=604800, s-maxage=43200
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: application/javascript; charset=utf-8
x-jsd-version: 0.3.13
x-jsd-version-type: version
etag: W/"80319-k2KF+cjIWnSaHvjPxNXoS36ivIk"
content-encoding: br
accept-ranges: bytes
date: Sat, 16 Sep 2023 15:25:22 GMT
age: 949
x-served-by: cache-fra-etou8220029-FRA, cache-bma1671-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 145133
X-Firefox-Spdy: h2
GET fonts.googleapis.com/css?family=Lato:400,700
200 OK 1.8 kB URL GET HTTP/3 fonts.googleapis.com/css?family=Lato:400,700
IP
Requested by https://abolishstand.net/embed/tgj7ajwxlnp
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint09:AB:BF:F5:D0:04:69:59:E1:EA:AC:DA:8B:68:CF:62:94:2E:50:38
ValidityMon, 14 Aug 2023 08:22:09 GMT - Mon, 06 Nov 2023 08:22:08 GMT
File type gzip compressed data, max compression\012- data
Hash d4b26aabe540624ccff2c387b168b810
1a5010fd1e65a20098040227700ea407c2708709
fe9b270f241dc24ffa7fc47db2219133104f144eeb8d294b9e54513ac9c9be2b
GET /css?family=Lato:400,700 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://abolishstand.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sat, 16 Sep 2023 15:25:22 GMT
date: Sat, 16 Sep 2023 15:25:22 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
472 B IP
Hash da6396f702d40db2cfe425126b5edf20
81283f9c2c8c831c7f9eed6332fcd4ebe68b32b5
b7d2f4b3ed51f24fcff61d753202a8c9cfe0b299722cd45496ab99c609761e3e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 16 Sep 2023 15:25:23 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
GET fonts.gstatic.com/s/lato/v24/S6uyw4BMUTPHjx4wXg.woff2
200 OK 24 kB URL GET HTTP/2 fonts.gstatic.com/s/lato/v24/S6uyw4BMUTPHjx4wXg.woff2
IP
Requested by https://abolishstand.net/embed/tgj7ajwxlnp
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintAB:14:67:80:B6:91:41:34:54:E4:AE:2E:71:65:B4:8E:65:B2:D2:2D
ValidityMon, 14 Aug 2023 08:22:45 GMT - Mon, 06 Nov 2023 08:22:44 GMT
File type Web Open Font Format (Version 2), TrueType, length 23580, version 1.0\012- data
Hash e1b3b5908c9cf23dfb2b9c52b9a023ab
fcd4136085f2a03481d9958cc6793a5ed98e714c
918b7dc3e2e2d015c16ce08b57bcb64d2253bafc1707658f361e72865498e537
GET /s/lato/v24/S6uyw4BMUTPHjx4wXg.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://abolishstand.net
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 23580
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 14 Sep 2023 15:16:10 GMT
expires: Fri, 13 Sep 2024 15:16:10 GMT
cache-control: public, max-age=31536000
age: 173353
last-modified: Tue, 02 May 2023 15:17:22 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET abolishstand.net/css/embed.min.css?v=0.4
200 OK 28 kB URL GET HTTP/3 abolishstand.net/css/embed.min.css?v=0.4
IP
Requested by https://abolishstand.net/embed/tgj7ajwxlnp
Certificate IssuerGoogle Trust Services LLC
Subjectabolishstand.net
FingerprintC8:9E:65:C4:ED:04:72:A0:EF:62:E2:78:75:D8:3B:A1:AF:A7:C5:09
ValidityFri, 18 Aug 2023 19:58:48 GMT - Thu, 16 Nov 2023 19:58:47 GMT
File type ASCII text, with very long lines (1263)
Hash 47bdb127c8b9c6915ba4aea9205641ba
56554a3c0bd6785df1f1d18de5a07a495fb49270
2c7cf941b4eb9254e850875107ded812b5cf2da9de46f85919561f2a73876257
GET /css/embed.min.css?v=0.4 HTTP/1.1
Host: abolishstand.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://abolishstand.net/embed/tgj7ajwxlnp
Cookie: hf1=1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 16 Sep 2023 15:25:22 GMT
content-type: text/css
last-modified: Thu, 09 Jun 2022 09:49:16 GMT
etag: W/"62a1c21c-4f0"
expires: Thu, 21 Sep 2023 16:12:26 GMT
cache-control: max-age=608400
cf-cache-status: HIT
age: 173576
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=gZFXw3jmPktnuzSRIkSYska7BTzp0p12aZrZBoMYwGH5rIxhOjhvcQ%2BtQ%2FQ9aTCI8qpGvXG1lvpfg6IF%2BLrjtvs7ya6TCkmdPh8MPAiZjFOqdCiLTihWdEbYMtnLvCwQWKa5"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 807a1f2a3e5fb521-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
GET 6.adsco.re/
200 OK 0 B IP
Requested by https://nopay.info/embe.php?id=liveCh6
Certificate IssuerSectigo Limited
Subject*.adsco.re
Fingerprint41:E8:B6:73:76:84:BF:F4:F7:36:CE:88:E3:48:7B:FF:4E:47:4A:43
ValidityFri, 16 Sep 2022 00:00:00 GMT - Fri, 29 Sep 2023 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: 6.adsco.re
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://nopay.info
DNT: 1
Connection: keep-alive
Referer: https://nopay.info/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 16 Sep 2023 15:25:23 GMT
content-type: text/plain;charset=UTF-8
content-length: 0
access-control-allow-origin: https://nopay.info
cache-control: private, max-age=10
access-control-allow-headers: Content-Type
access-control-allow-methods: GET, HEAD, OPTIONS
access-control-max-age: 2592000
vary: Accept-Encoding
server: cloudflare
cf-ray: 807a1f2eb9700b59-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET 4.adsco.re/
200 OK 62 B IP
Requested by https://nopay.info/embe.php?id=liveCh6
Certificate IssuerSectigo Limited
Subject*.adsco.re
Fingerprint41:E8:B6:73:76:84:BF:F4:F7:36:CE:88:E3:48:7B:FF:4E:47:4A:43
ValidityFri, 16 Sep 2022 00:00:00 GMT - Fri, 29 Sep 2023 23:59:59 GMT
File type ASCII text, with no line terminators
Hash 5b41cb22f84f645a103acc7bfbf084ff
bac3967b26d5ec4a0d09a580714e8219796816bd
709f0a0dfab9f9e074f4a4a348dcb09150838284d21e75cfb9e5ceaeeb2054bc
GET / HTTP/1.1
Host: 4.adsco.re
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://nopay.info
DNT: 1
Connection: keep-alive
Referer: https://nopay.info/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 16 Sep 2023 15:25:23 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Methods: GET, HEAD, OPTIONS
Access-Control-Allow-Headers: Content-Type
Access-Control-Allow-Origin: https://nopay.info
Access-Control-Max-Age: 2592000
Cache-Control: private, max-age=5
Content-Encoding: gzip
GET 6.adsco.re/
200 OK 0 B IP
Requested by https://nopay.info/embe.php?id=liveCh6
Certificate IssuerSectigo Limited
Subject*.adsco.re
Fingerprint41:E8:B6:73:76:84:BF:F4:F7:36:CE:88:E3:48:7B:FF:4E:47:4A:43
ValidityFri, 16 Sep 2022 00:00:00 GMT - Fri, 29 Sep 2023 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: 6.adsco.re
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://c.adsco.re/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 16 Sep 2023 15:25:23 GMT
content-type: text/plain;charset=UTF-8
content-length: 0
access-control-allow-origin: *
cache-control: private, max-age=10
access-control-allow-headers: Content-Type
access-control-allow-methods: GET, HEAD, OPTIONS
access-control-max-age: 2592000
vary: Accept-Encoding
server: cloudflare
cf-ray: 807a1f304c9cb4ed-OSL
alt-svc: h3=":443"; ma=86400
POST eutstptyt9mz.l4.adsco.re/
200 OK 0 B URL POST HTTP/1.1 eutstptyt9mz.l4.adsco.re/
IP
Requested by https://nopay.info/embe.php?id=liveCh6
Certificate IssuerLet's Encrypt
Subject*.l4.adsco.re
Fingerprint06:82:18:C4:0D:C3:F0:4B:57:C5:F9:D6:27:10:34:8A:A9:BC:F9:F3
ValiditySat, 19 Aug 2023 09:12:39 GMT - Fri, 17 Nov 2023 09:12:38 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST / HTTP/1.1
Host: eutstptyt9mz.l4.adsco.re
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 0
Origin: https://nopay.info
DNT: 1
Connection: keep-alive
Referer: https://nopay.info/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Sat, 16 Sep 2023 15:25:23 GMT
Content-Type: text/html
Content-Length: 0
Last-Modified: Tue, 31 Jul 2018 22:16:15 GMT
Connection: close
ETag: "5b60dfaf-0"
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
Access-Control-Expose-Headers: Content-Length,Content-Range
Accept-Ranges: bytes
POST eutstptyt9mz.n4.adsco.re/
200 OK 0 B URL POST HTTP/1.1 eutstptyt9mz.n4.adsco.re/
IP
Requested by https://nopay.info/embe.php?id=liveCh6
Certificate IssuerLet's Encrypt
Subject*.n4.adsco.re
FingerprintE3:3F:DF:E2:68:AE:B7:CB:66:97:B3:F2:8A:E8:6A:31:66:8F:A3:32
ValiditySat, 19 Aug 2023 09:12:38 GMT - Fri, 17 Nov 2023 09:12:37 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST / HTTP/1.1
Host: eutstptyt9mz.n4.adsco.re
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 0
Origin: https://nopay.info
DNT: 1
Connection: keep-alive
Referer: https://nopay.info/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Sat, 16 Sep 2023 15:25:24 GMT
Content-Type: text/html
Content-Length: 0
Last-Modified: Mon, 30 Jul 2018 15:32:42 GMT
Connection: close
ETag: "5b5f2f9a-0"
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
Access-Control-Expose-Headers: Content-Length,Content-Range
Accept-Ranges: bytes
POST adsco.re/p
200 OK 808 B IP
Requested by https://nopay.info/embe.php?id=liveCh6
Certificate IssuerSectigo Limited
Subject*.adsco.re
Fingerprint41:E8:B6:73:76:84:BF:F4:F7:36:CE:88:E3:48:7B:FF:4E:47:4A:43
ValidityFri, 16 Sep 2022 00:00:00 GMT - Fri, 29 Sep 2023 23:59:59 GMT
File type ASCII text, with very long lines (1020), with no line terminators
Hash 37057a45b8ab6d5e17636c89fb6b98c8
4d1db4953ddc432f8541cedf0498901c0d6fc8f1
95cabe5bc078998b7417337e9daa927a34db8c17f9dc4b4e62748406f8810f49
POST /p HTTP/1.1
Host: adsco.re
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Length: 2083
Origin: https://nopay.info
DNT: 1
Connection: keep-alive
Referer: https://nopay.info/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 16 Sep 2023 15:25:24 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
AS-P-1: OK lon123
AS-P-2: OK
AS-P-3: OK
Access-Control-Max-Age: 2592000
Cache-Control: no-transform
Accept-CH: Sec-CH-UA, Sec-CH-UA-Mobile, Sec-CH-UA-Full-Version, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Arch, Sec-CH-UA-Model, Device-Memory, Downlink, ECT, RTT, Width, Viewport-Width, DPR
Critical-CH: Sec-CH-UA, Sec-CH-UA-Mobile, Sec-CH-UA-Full-Version, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Arch, Sec-CH-UA-Model, Device-Memory, Downlink, ECT, RTT, Width, Viewport-Width, DPR
Permissions-Policy: ch-ua=(self "https://adsco.re"),ch-ua-mobile=(self "https://adsco.re"),ch-ua-full-version=(self "https://adsco.re"),ch-ua-platform=(self "https://adsco.re"),ch-ua-platform-version=(self "https://adsco.re"),ch-ua-arch=(self "https://adsco.re"),ch-ua-model=(self "https://adsco.re"),ch-device-memory=(self "https://adsco.re"),ch-downlink=(self "https://adsco.re"),ch-ect=(self "https://adsco.re"),ch-rtt=(self "https://adsco.re"),ch-width=(self "https://adsco.re"),ch-viewport-width=(self "https://adsco.re"),ch-dpr=(self "https://adsco.re")
Access-Control-Allow-Origin: https://nopay.info
Access-Control-Allow-Credentials: true
Content-Encoding: gzip
POST eutstptyt9mz.s4.adsco.re/
200 OK 0 B URL POST HTTP/1.1 eutstptyt9mz.s4.adsco.re/
IP
Requested by https://nopay.info/embe.php?id=liveCh6
Certificate IssuerLet's Encrypt
Subject*.s4.adsco.re
Fingerprint07:AC:C1:42:F6:9D:4E:B8:A8:F7:0A:A0:8F:49:37:2E:AB:61:E3:3B
ValiditySat, 19 Aug 2023 09:12:40 GMT - Fri, 17 Nov 2023 09:12:39 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST / HTTP/1.1
Host: eutstptyt9mz.s4.adsco.re
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 0
Origin: https://nopay.info
DNT: 1
Connection: keep-alive
Referer: https://nopay.info/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Sat, 16 Sep 2023 15:25:24 GMT
Content-Type: text/html
Content-Length: 0
Last-Modified: Mon, 30 Jul 2018 15:38:01 GMT
Connection: close
ETag: "5b5f30d9-0"
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
Access-Control-Expose-Headers: Content-Length,Content-Range
Accept-Ranges: bytes
471 B IP
Hash 5eddbe21488141dd418e4e86cf0c455f
91fc80106e51bc846991dfb1952e7f70760c369b
e79733b38fdaf8706a340fb243ec1a1b9f55a15d2425967bf3cb1e4029597817
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 16 Sep 2023 15:25:25 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Thu, 14 Sep 2023 21:51:01 GMT
Expires: Thu, 21 Sep 2023 21:51:00 GMT
Etag: "91fc80106e51bc846991dfb1952e7f70760c369b"
Cache-Control: max-age=455434,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb1
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 807a1f37982656c7-OSL
GET blockadsnot.com/byfkawfrpygrfk?_=BQLyAAAAAAAACZUAAqOstFVtHSpCIv2efAZmyymfn5ADlj91euolz0olBG5PxW5Px5sYGfKBL3OAJOzBr_CI5f__mn5YZCR30qjiOmsSpTtG6G-8GiRkyCARc7E0AkucPgJ1hN5wtyxRBA3kT1sVjuWDGiKuXtBOcUyf3POIHzV4-SmRgQOmJh47vlJ4Ph7t1lX_y89cNzf-pDthzj1ycThXXe3fmgIESxuClAxnG5u78btOcxwLJaFwieC2NtZFK0Rxc1YnzG_dHmnSAYqHoDsBZiL-EK4W18ejjpcQPmTV7mh2FuJpt5eAGModiig9xVQ1YxxwfEsz7tLxP-rZ-FU1IptTRZw7AckIVLyn0NvI74jySoOc0y0_HaVHoYq_ZLjDAb3-IhQjWpRLYY0AYJ7hipUwSecLImELjSwNTU-p9H3KCzWDHhOPMX3BsdotXZiA6zNAvEPLWudt8lsq6J20iR6gJLFlkYOQod120Z7zmqX8O9mbWQCO7IoR1vehDlXehzGAGi406wI-Tyv2q6HPBQfc51aRsIIfy_YcCWqwCoYDmdI7EixRpJIZYKiDZG6Qts_z1Mxi7QQew2uAF43dmP94uHbiCUHbJro9efJV4Hv8h3f1GWT3Sgk6EQ5pxaMtbcAFx2q1DH181V6g4zZLfK9WMFH4z9TEP1slLlSYaOxNVMR-gomqjEKyQIyCDrXzijaTUbRMAkHWSddw8A1emMulHfJSB0o4-ohNeNHbbafapdP3Xgnjj-TsnjlsWTkRTph7JSKHPME0UndftGLUfECXc4Y6WmitAx-u0PSsNqXFoCT48bQ8r8vA2WD0x1W0agggksT3w1CKBv4s5zBWVBQA1MM_GcoeAQpa_8JHygfakhZq5_vT8NL2qj7XU-bBqYEgsOSsSo3qQaAHzCa1nUrMW3zU4ZIET4x-dFWfMQBEB6-i3GEwhqgd0p6IRBw8SbszR9ZmnKcAmRaP2jmhBnHLST3I9jNgQ2XzzTJHgFAfi8xoZoOphqN5&v=4&INcJBzag=4974636&EwnGxbLC=&iVuSjvCZ=0,0&FsyHPAkt=&ODdYKxLt=https%3A%2F%2Fprojectlive.info%2F&s=1280,1024,1,1280,1024,1
200 OK 982 B URL GET HTTP/2 blockadsnot.com/byfkawfrpygrfk?_=BQLyAAAAAAAACZUAAqOstFVtHSpCIv2efAZmyymfn5ADlj91euolz0olBG5PxW5Px5sYGfKBL3OAJOzBr_CI5f__mn5YZCR30qjiOmsSpTtG6G-8GiRkyCARc7E0AkucPgJ1hN5wtyxRBA3kT1sVjuWDGiKuXtBOcUyf3POIHzV4-SmRgQOmJh47vlJ4Ph7t1lX_y89cNzf-pDthzj1ycThXXe3fmgIESxuClAxnG5u78btOcxwLJaFwieC2NtZFK0Rxc1YnzG_dHmnSAYqHoDsBZiL-EK4W18ejjpcQPmTV7mh2FuJpt5eAGModiig9xVQ1YxxwfEsz7tLxP-rZ-FU1IptTRZw7AckIVLyn0NvI74jySoOc0y0_HaVHoYq_ZLjDAb3-IhQjWpRLYY0AYJ7hipUwSecLImELjSwNTU-p9H3KCzWDHhOPMX3BsdotXZiA6zNAvEPLWudt8lsq6J20iR6gJLFlkYOQod120Z7zmqX8O9mbWQCO7IoR1vehDlXehzGAGi406wI-Tyv2q6HPBQfc51aRsIIfy_YcCWqwCoYDmdI7EixRpJIZYKiDZG6Qts_z1Mxi7QQew2uAF43dmP94uHbiCUHbJro9efJV4Hv8h3f1GWT3Sgk6EQ5pxaMtbcAFx2q1DH181V6g4zZLfK9WMFH4z9TEP1slLlSYaOxNVMR-gomqjEKyQIyCDrXzijaTUbRMAkHWSddw8A1emMulHfJSB0o4-ohNeNHbbafapdP3Xgnjj-TsnjlsWTkRTph7JSKHPME0UndftGLUfECXc4Y6WmitAx-u0PSsNqXFoCT48bQ8r8vA2WD0x1W0agggksT3w1CKBv4s5zBWVBQA1MM_GcoeAQpa_8JHygfakhZq5_vT8NL2qj7XU-bBqYEgsOSsSo3qQaAHzCa1nUrMW3zU4ZIET4x-dFWfMQBEB6-i3GEwhqgd0p6IRBw8SbszR9ZmnKcAmRaP2jmhBnHLST3I9jNgQ2XzzTJHgFAfi8xoZoOphqN5&v=4&INcJBzag=4974636&EwnGxbLC=&iVuSjvCZ=0,0&FsyHPAkt=&ODdYKxLt=https%3A%2F%2Fprojectlive.info%2F&s=1280,1024,1,1280,1024,1
IP
Requested by https://nopay.info/embe.php?id=liveCh6
Certificate IssuerSectigo Limited
Subjectblockadsnot.com
Fingerprint96:00:00:44:50:47:F4:4D:23:DB:EE:86:80:A0:C4:5F:3A:EA:F5:03
ValidityMon, 14 Aug 2023 00:00:00 GMT - Fri, 13 Sep 2024 23:59:59 GMT
File type ASCII text, with very long lines (1360), with no line terminators
Hash a131e526c35ebfc2d5b40c51c20c40b4
6f4665c4b33babbb4ac372e624b64b9be85ae555
e5c2e979ae95c16514fd3fc0325d96215e73ba8c7d71955939b0380f28385582
GET /byfkawfrpygrfk?_=BQLyAAAAAAAACZUAAqOstFVtHSpCIv2efAZmyymfn5ADlj91euolz0olBG5PxW5Px5sYGfKBL3OAJOzBr_CI5f__mn5YZCR30qjiOmsSpTtG6G-8GiRkyCARc7E0AkucPgJ1hN5wtyxRBA3kT1sVjuWDGiKuXtBOcUyf3POIHzV4-SmRgQOmJh47vlJ4Ph7t1lX_y89cNzf-pDthzj1ycThXXe3fmgIESxuClAxnG5u78btOcxwLJaFwieC2NtZFK0Rxc1YnzG_dHmnSAYqHoDsBZiL-EK4W18ejjpcQPmTV7mh2FuJpt5eAGModiig9xVQ1YxxwfEsz7tLxP-rZ-FU1IptTRZw7AckIVLyn0NvI74jySoOc0y0_HaVHoYq_ZLjDAb3-IhQjWpRLYY0AYJ7hipUwSecLImELjSwNTU-p9H3KCzWDHhOPMX3BsdotXZiA6zNAvEPLWudt8lsq6J20iR6gJLFlkYOQod120Z7zmqX8O9mbWQCO7IoR1vehDlXehzGAGi406wI-Tyv2q6HPBQfc51aRsIIfy_YcCWqwCoYDmdI7EixRpJIZYKiDZG6Qts_z1Mxi7QQew2uAF43dmP94uHbiCUHbJro9efJV4Hv8h3f1GWT3Sgk6EQ5pxaMtbcAFx2q1DH181V6g4zZLfK9WMFH4z9TEP1slLlSYaOxNVMR-gomqjEKyQIyCDrXzijaTUbRMAkHWSddw8A1emMulHfJSB0o4-ohNeNHbbafapdP3Xgnjj-TsnjlsWTkRTph7JSKHPME0UndftGLUfECXc4Y6WmitAx-u0PSsNqXFoCT48bQ8r8vA2WD0x1W0agggksT3w1CKBv4s5zBWVBQA1MM_GcoeAQpa_8JHygfakhZq5_vT8NL2qj7XU-bBqYEgsOSsSo3qQaAHzCa1nUrMW3zU4ZIET4x-dFWfMQBEB6-i3GEwhqgd0p6IRBw8SbszR9ZmnKcAmRaP2jmhBnHLST3I9jNgQ2XzzTJHgFAfi8xoZoOphqN5&v=4&INcJBzag=4974636&EwnGxbLC=&iVuSjvCZ=0,0&FsyHPAkt=&ODdYKxLt=https%3A%2F%2Fprojectlive.info%2F&s=1280,1024,1,1280,1024,1 HTTP/1.1
Host: blockadsnot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nopay.info/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
asf: 6
cache-control: private, no-store, no-cache, must-revalidate, no-transform, max-age=0
pragma: no-cache
content-type: application/javascript; charset=utf-8
set-cookie: PP_CV=yes; expires=Sat, 16-Sep-2023 16:25:25 GMT; Max-Age=3600
fraudcheck=fef0290eb4ca54fc0ecb8e2bd0912164; expires=Mon, 16-Oct-2023 15:25:25 GMT; Max-Age=2592000; path=/; domain=.popads.net
PopAds_CF_Pass=1; expires=Sat, 16-Sep-2023 21:25:25 GMT; Max-Age=21600
link: <https://www.highcpmrevenuegate.com>;rel=preconnect
content-length: 982
content-encoding: br
vary: Accept-Encoding
date: Sat, 16 Sep 2023 15:25:25 GMT
X-Firefox-Spdy: h2
POST youradexchange.com/ut/hb.php?cb=0.377559366216631
500 Internal Server Error 503 B URL POST HTTP/2 youradexchange.com/ut/hb.php?cb=0.377559366216631
IP
Requested by https://projectlive.info/live.php?id=ch6
Certificate IssuerGoogle Trust Services LLC
Subjectyouradexchange.com
Fingerprint7B:F1:5C:73:C7:3C:53:37:BB:24:9A:8A:7A:DA:D8:B5:D3:13:DD:0D
ValiditySat, 19 Aug 2023 06:58:12 GMT - Fri, 17 Nov 2023 06:58:11 GMT
Hash b6bcee8ddd502681615693ea40ef3be7
1bf3bd533405afb6f03e72afcbfe9ff3c4f426dc
241c1eb085fc678889462ea807e57871e74844e770bbce9686ffba7982a4840b
POST /ut/hb.php?cb=0.377559366216631 HTTP/1.1
Host: youradexchange.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain; charset=utf-8
Content-Length: 734
Origin: https://projectlive.info
DNT: 1
Connection: keep-alive
Referer: https://projectlive.info/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 500 Internal Server Error
date: Sat, 16 Sep 2023 15:25:23 GMT
content-type: text/html; charset=utf-8
via: 1.1 google
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=PYqXfqfWu24UCwNxK1G8EZJj755f8wzgHJFhUpdTmo%2FGoi7VudOZBTsukTyVJnQ9XcsX1rtdIiEKcG363S6lwwMos5hsi4xw4zmIR9HqISlcJM8jhrDqOzFEJOjVgw7wIkLQ1E4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 807a1f26ac39f0af-CDG
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET www.highcpmrevenuegate.com/favicon.ico
200 OK 0 B URL GET HTTP/1.1 www.highcpmrevenuegate.com/favicon.ico
IP
ASN #39572 DataWeb Global Group B.V.
Requested by moz-nullprincipal:{668af737-f37b-4c34-90fe-597ea8684af9}?https://nopay.info
Certificate IssuerLet's Encrypt
Subjecthighcpmrevenuegate.com
Fingerprint02:C4:02:1C:F0:C4:8F:87:86:7C:72:18:6B:CC:25:87:D3:E0:F2:D6
ValidityMon, 31 Jul 2023 07:46:48 GMT - Sun, 29 Oct 2023 07:46:47 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /favicon.ico HTTP/1.1
Host: www.highcpmrevenuegate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Sat, 16 Sep 2023 15:25:26 GMT
Content-Type: image/x-icon
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: f055fbb21719c5a6fac12ace4a0c4b3c
Strict-Transport-Security: max-age=0; includeSubdomains
GET projectlive.info/live.php?id=ch6
200 OK 144 kB URL User Request GET HTTP/2 projectlive.info/live.php?id=ch6
IP
Certificate IssuerGoogle Trust Services LLC
Subjectprojectlive.info
FingerprintA5:18:50:06:E7:3B:73:FB:53:3D:8E:0E:13:A7:71:E5:19:94:D0:EF
ValidityWed, 23 Aug 2023 15:51:34 GMT - Tue, 21 Nov 2023 15:51:33 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (59442)
Size 144 kB (143799 bytes)
Hash f95e04a35b1d640b4b32dcc6803b87b9
06a1415076877662c601381b628b52d5095d5ef0
2e79b0eea8932414df5eb257cfbee67b1747872046473cb245170bcbd2e3dc7f
GET /live.php?id=ch6 HTTP/1.1
Host: projectlive.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 16 Sep 2023 15:25:20 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=hjfsVSJotQTHhawHtMugUQbvI%2FO6DNR3anH1acCKk8cy9QRn0nPArWCc5uGPJtaGOEDSLIT3BaUgj1NjLAYvfkcTAvJPwC60cjbvUUqoN30ldo3GDP8U7NNJ%2BGoVC3YLx7q0"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 807a1f18da755694-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET nopay.info/embe.php?id=liveCh6
200 OK 156 kB URL GET HTTP/2 nopay.info/embe.php?id=liveCh6
IP
Requested by https://projectlive.info/live.php?id=ch6
Certificate IssuerGoogle Trust Services LLC
Subjectnopay.info
FingerprintDA:D3:DD:74:EF:8B:F6:08:9D:82:90:55:A4:B7:38:44:B8:3B:BB:E7
ValidityTue, 29 Aug 2023 23:21:36 GMT - Mon, 27 Nov 2023 23:21:35 GMT
Size 156 kB (155622 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /embe.php?id=liveCh6 HTTP/1.1
Host: nopay.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://projectlive.info/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 16 Sep 2023 15:25:22 GMT
content-type: text/html; charset=UTF-8
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=t7JTWOx516B2825AtlLZqt1K08VB43i87K%2BAGB9wOr8toLw%2B5YmVSj7pGjY0hqS6FbgRlW4%2BMzlk2NVdFCTSNd%2FOyb83lzfHST4JOOVzW8xTde1vXbU9Du8tJPda"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 807a1f23fc79b524-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET awistats.com/js/script.js
200 OK 1.3 kB URL GET HTTP/2 awistats.com/js/script.js
IP
Requested by https://abolishstand.net/embed/tgj7ajwxlnp
Certificate IssuerGoogle Trust Services LLC
Subjectawistats.com
Fingerprint9E:26:4D:53:2B:BC:3C:2B:48:5F:6B:4B:D2:1F:07:97:63:7E:87:05
ValidityFri, 04 Aug 2023 08:39:15 GMT - Thu, 02 Nov 2023 08:39:14 GMT
File type ASCII text, with very long lines (1384), with no line terminators
Hash 16cfd1982a40489c41a52add24d36b85
344f1896d895c5d0a7c4caecafcf1942603cd026
72073aacecd145e525b16c4c845c07bff5798e813eeed702dff748a18b6186ce
GET /js/script.js HTTP/1.1
Host: awistats.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://abolishstand.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 16 Sep 2023 15:25:22 GMT
content-type: application/javascript
access-control-allow-origin: *
cache-control: public, max-age=86400, must-revalidate
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cf-cache-status: HIT
age: 81699
last-modified: Fri, 15 Sep 2023 16:43:43 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=88BvFMStE8PyK0y67nsW1LT8srYgKhqYQMbhoF7%2Fm9u1zgzjkEiDzSueRTLh5%2FISZBRbuBnGPLP6rDqQPPm%2BcglRU5V9XXel%2FaMqBSXY2UN9jUGW09PSjhnDtyjo%2BUw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 807a1f2a790db52d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET asacdn.com/script/ut.js?cb=1694877922048
200 OK 82 kB URL GET HTTP/3 asacdn.com/script/ut.js?cb=1694877922048
IP
Requested by https://projectlive.info/live.php?id=ch6
Certificate IssuerLet's Encrypt
Subject*.asacdn.com
Fingerprint6D:AC:05:F6:9B:81:8D:50:0F:77:02:43:CB:8F:D0:15:B4:19:BE:83
ValidityFri, 08 Sep 2023 09:27:45 GMT - Thu, 07 Dec 2023 09:27:44 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /script/ut.js?cb=1694877922048 HTTP/1.1
Host: asacdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://projectlive.info/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 16 Sep 2023 15:25:21 GMT
content-type: application/javascript
x-guploader-uploadid: ADPycdtmxl9sBYFszy5DpHObmQEOLiaJ54PuhRZuf5YhZQqa2Rj3gTbPyLPzMUdj8VNV_BWSufA5PRuVxbQ6pyP7SFTmv3fzlSDH
x-goog-generation: 1692174265266008
x-goog-metageneration: 2
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 82296
x-goog-hash: crc32c=O4hKMg==, md5=ezRayE9D3OJH5NFLf8hd0Q==
x-goog-storage-class: MULTI_REGIONAL
access-control-allow-origin: *
expires: Sat, 16 Sep 2023 15:15:13 GMT
cache-control: public, max-age=14400
age: 2139
last-modified: Wed, 16 Aug 2023 08:24:25 GMT
etag: W/"7b345ac84f43dce247e4d14b7fc85dd1"
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=cM4pStIiORxEFn6ZXFkXVO5%2Bwxcz54V7BqFs1rYl%2BvbkPW47v6invCwFCebgJ558PuA4IJ0UJqBR16%2FnCzwAJkdzybs1INB3fKu0IFdPGaXAAkyBu3vVzPooxfnx"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 807a1f240b180b31-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
GET youradexchange.com/script/suurl4.php?r=7000682&cbur=0.9881073439275714&cbiframe=0&cbWidth=1280&cbHeight=1024&cbtitle=&cbpage=https%3A%2F%2Fprojectlive.info%2Flive.php%3Fid%3Dch6&cbref=&cbdescription=&cbkeywords=&cbcdn=asacdn.com&aggr=0&ts=1694877922055&atv=35.6-ab&srs=efffa78bd4daf445ee0888869596bf17
200 OK 1.0 kB URL GET HTTP/2 youradexchange.com/script/suurl4.php?r=7000682&cbur=0.9881073439275714&cbiframe=0&cbWidth=1280&cbHeight=1024&cbtitle=&cbpage=https%3A%2F%2Fprojectlive.info%2Flive.php%3Fid%3Dch6&cbref=&cbdescription=&cbkeywords=&cbcdn=asacdn.com&aggr=0&ts=1694877922055&atv=35.6-ab&srs=efffa78bd4daf445ee0888869596bf17
IP
Requested by https://projectlive.info/live.php?id=ch6
Certificate IssuerGoogle Trust Services LLC
Subjectyouradexchange.com
Fingerprint7B:F1:5C:73:C7:3C:53:37:BB:24:9A:8A:7A:DA:D8:B5:D3:13:DD:0D
ValiditySat, 19 Aug 2023 06:58:12 GMT - Fri, 17 Nov 2023 06:58:11 GMT
File type troff or preprocessor input, ASCII text, with very long lines (1069), with no line terminators
Hash 75a8afb59e9690e3d2a97b4f2faa66d6
9968984f7e6d580fd091cfa0fd4ba9801cf260c8
5bceaefdc75a6864ba23a8e3ab08591d51ff6327059c397f4c3116fd0a92bbe8
GET /script/suurl4.php?r=7000682&cbur=0.9881073439275714&cbiframe=0&cbWidth=1280&cbHeight=1024&cbtitle=&cbpage=https%3A%2F%2Fprojectlive.info%2Flive.php%3Fid%3Dch6&cbref=&cbdescription=&cbkeywords=&cbcdn=asacdn.com&aggr=0&ts=1694877922055&atv=35.6-ab&srs=efffa78bd4daf445ee0888869596bf17 HTTP/1.1
Host: youradexchange.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://projectlive.info/
Origin: https://projectlive.info
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 16 Sep 2023 15:25:22 GMT
content-type: application/json; charset=utf-8
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: GET, POST, OPTIONS
via: 1.1 google
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=OWlSEOcVAe4UdKKrtYqCPOzi4nj78I0UUykei4skAqfVE8d1DRFKF2Cdh1KMfKVUTRR%2FxGQHmF4ZrFGa9nSbOJ9Ctf%2Faxg8s%2BZ4ZWlkwZ3r9c18i2OLG3BSKs9EfLLuVZVMKULs%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 807a1f24abf6b7d3-AMS
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET nopay.info/cdn-cgi/challenge-platform/scripts/jsd/main.js
302 Found 7.4 kB URL GET HTTP/3 nopay.info/cdn-cgi/challenge-platform/scripts/jsd/main.js
IP
Requested by https://nopay.info/embe.php?id=liveCh6
Certificate IssuerGoogle Trust Services LLC
Subjectnopay.info
FingerprintDA:D3:DD:74:EF:8B:F6:08:9D:82:90:55:A4:B7:38:44:B8:3B:BB:E7
ValidityTue, 29 Aug 2023 23:21:36 GMT - Mon, 27 Nov 2023 23:21:35 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1
Host: nopay.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 302 Found
date: Sat, 16 Sep 2023 15:25:22 GMT
location: /cdn-cgi/challenge-platform/h/b/scripts/jsd/8370c0b3/main.js
cache-control: max-age=300, public
vary: accept-encoding
access-control-allow-origin: *
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Ws2IIzCUbYp4%2FEudfY81yZSh0uT4Sf%2B7HETlNVFNszWnKZAsl1Xg4U6yoqel0sryKzqYAb5pie1dJ62vUyMiHLcJl8IiYUy4gbJ7kkCAzsbaOcLfG6jP%2BYdysy8I"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 807a1f285f53568a-OSL
alt-svc: h3=":443"; ma=86400
GET swarm.video/j79z9kzty.js?v=1.1
200 OK 544 kB URL GET HTTP/2 swarm.video/j79z9kzty.js?v=1.1
IP
Requested by https://abolishstand.net/embed/tgj7ajwxlnp
Certificate IssuerGoogle Trust Services LLC
Subjectswarm.video
Fingerprint14:4D:4C:C1:32:90:AC:74:69:D5:04:CD:DA:73:81:CA:05:F7:E8:1F
ValidityWed, 02 Aug 2023 06:07:11 GMT - Tue, 31 Oct 2023 06:07:10 GMT
Size 544 kB (544335 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /j79z9kzty.js?v=1.1 HTTP/1.1
Host: swarm.video
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://abolishstand.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 16 Sep 2023 15:25:22 GMT
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000
cf-bgj: minify
cf-polished: origSize=545594
etag: W/"8533a-1893d1d4765"
last-modified: Mon, 10 Jul 2023 00:04:36 GMT
x-powered-by: Express
cf-cache-status: HIT
age: 1393019
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=3qDRhH4Gng154winHeKFHYgDGQLWMl2DUyE2WoTJypfqZ34Rddw4KH0Il0YOYN3iPv4Bigoac8oAqnvqTE2UNqqQyJP62AYZTXG%2FPKezZh21pEIQ%2FXzrEI%2FyRbE%2Frw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 807a1f2a6fb4b4ff-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
POST nopay.info/cdn-cgi/challenge-platform/h/b/jsd/r/807a1f23fc79b524
200 OK 0 B URL POST HTTP/3 nopay.info/cdn-cgi/challenge-platform/h/b/jsd/r/807a1f23fc79b524
IP
Requested by https://nopay.info/embe.php?id=liveCh6
Certificate IssuerGoogle Trust Services LLC
Subjectnopay.info
FingerprintDA:D3:DD:74:EF:8B:F6:08:9D:82:90:55:A4:B7:38:44:B8:3B:BB:E7
ValidityTue, 29 Aug 2023 23:21:36 GMT - Mon, 27 Nov 2023 23:21:35 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /cdn-cgi/challenge-platform/h/b/jsd/r/807a1f23fc79b524 HTTP/1.1
Host: nopay.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 12199
Origin: https://nopay.info
DNT: 1
Connection: keep-alive
Referer: https://nopay.info/embe.php?id=liveCh6
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 16 Sep 2023 15:25:23 GMT
content-type: text/plain; charset=UTF-8
set-cookie: cf_clearance=PjfpkFGvwUXOY2.OQAUTF5b49bdCRsrP7EVCcOeYIeI-1694877923-0-1-69b0ef05.6b0d8b6b.438cce4a-0.2.1694877923; path=/; expires=Sun, 15-Sep-24 15:25:23 GMT; domain=.nopay.info; HttpOnly; Secure; SameSite=None
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=dv6%2FUOb6%2BSu5pP0oztisT5QJz6awJv3CkGmPRQyFTyZvo8WBqns4qe6MR%2Fj%2BlqM%2B5StFUxsv%2FOEHtcf0DsoWThuzmmq0231jRZ2iIiwzid%2F6ks7qrUZTxoPn97E8"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 807a1f2b6ad1568a-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
GET celeritascdn.com/script/resource-v31.js
200 OK 199 kB URL GET HTTP/2 celeritascdn.com/script/resource-v31.js
IP
Requested by https://abolishstand.net/embed/tgj7ajwxlnp
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint36:49:DD:62:10:9C:CB:82:C4:68:4C:28:25:6A:81:E5:A1:83:36:D3
ValiditySat, 06 May 2023 00:00:00 GMT - Sun, 05 May 2024 23:59:59 GMT
Size 199 kB (199332 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /script/resource-v31.js HTTP/1.1
Host: celeritascdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://abolishstand.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 16 Sep 2023 15:25:23 GMT
content-type: application/javascript
x-guploader-uploadid: ADPycdswX6c_D2D-ZhOWRu90lMFSX1xI1qqK8_htcBykX1SmgWJxmrexL9D3C6vk8TIxQaajIVJeFwcKNdSqa1kpyZCiRUxscrkC
x-goog-generation: 1694788259887917
x-goog-metageneration: 2
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 199332
x-goog-hash: crc32c=3vX2xQ==, md5=HwffONqMr0fCIJ4fsH0+lw==
x-goog-storage-class: MULTI_REGIONAL
access-control-allow-origin: *
expires: Sat, 16 Sep 2023 19:25:23 GMT
cache-control: public, max-age=14400
last-modified: Fri, 15 Sep 2023 14:30:59 GMT
etag: W/"1f07df38da8caf47c2209e1fb07d3e97"
cf-cache-status: HIT
age: 3153
vary: Accept-Encoding
server: cloudflare
cf-ray: 807a1f2d1f50b4fd-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
GET c.adsco.re/
200 OK 80 kB IP
Requested by https://nopay.info/embe.php?id=liveCh6
Certificate IssuerSectigo Limited
Subject*.adsco.re
Fingerprint41:E8:B6:73:76:84:BF:F4:F7:36:CE:88:E3:48:7B:FF:4E:47:4A:43
ValidityFri, 16 Sep 2022 00:00:00 GMT - Fri, 29 Sep 2023 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (689)
Hash b730b83ca4b26be3018c14a9391e90df
e7409eaa74553470e6e83a3246b00b7692133675
4b3c590f5d3d08850e02431617eaf361cdffdf61964ab358be6c401804a6aea3
GET / HTTP/1.1
Host: c.adsco.re
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nopay.info/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 16 Sep 2023 15:25:23 GMT
content-type: text/html
cache-control: public, max-age=2678400
accept-ch: Sec-CH-UA, Sec-CH-UA-Mobile, Sec-CH-UA-Full-Version, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Arch, Sec-CH-UA-Model, Device-Memory, Downlink, ECT, RTT, Width, Viewport-Width, DPR
permissions-policy: ch-ua=(self "https://adsco.re"),ch-ua-mobile=(self "https://adsco.re"),ch-ua-full-version=(self "https://adsco.re"),ch-ua-platform=(self "https://adsco.re"),ch-ua-platform-version=(self "https://adsco.re"),ch-ua-arch=(self "https://adsco.re"),ch-ua-model=(self "https://adsco.re"),ch-device-memory=(self "https://adsco.re"),ch-downlink=(self "https://adsco.re"),ch-ect=(self "https://adsco.re"),ch-rtt=(self "https://adsco.re"),ch-width=(self "https://adsco.re"),ch-viewport-width=(self "https://adsco.re"),ch-dpr=(self "https://adsco.re")
link: <//6.adsco.re/>;rel=prefetch;crossorigin;as=fetch,<//4.adsco.re/>;rel=prefetch;crossorigin;as=fetch,<//adsco.re/>;rel=preconnect
expires: Tue, 17 Oct 2023 15:25:23 GMT
etag: W/"tzC4PKSya+MBjBSpOR6Q3w=="
cf-cache-status: HIT
age: 2778965
vary: Accept-Encoding
server: cloudflare
cf-ray: 807a1f2e79c3b4ed-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
GET fonts.googleapis.com/css?family=Baumans
200 OK 390 B URL GET HTTP/2 fonts.googleapis.com/css?family=Baumans
IP
Requested by https://nopay.info/embe.php?id=liveCh6
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint09:AB:BF:F5:D0:04:69:59:E1:EA:AC:DA:8B:68:CF:62:94:2E:50:38
ValidityMon, 14 Aug 2023 08:22:09 GMT - Mon, 06 Nov 2023 08:22:08 GMT
File type ASCII text, with very long lines (398), with no line terminators
Hash f80a20858d3c122f43790904e8c6ce1d
95a0e3a687ee84d4ebbaf323f8438a0f3c5a1046
c20c6106479d75eb4d211a16edd5de5673d8ef47e763e2ba9f75d5da4adec2d6
GET /css?family=Baumans HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nopay.info/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sat, 16 Sep 2023 15:25:22 GMT
date: Sat, 16 Sep 2023 15:25:22 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET www.blockadsnot.com/ngDialog.min.js
200 OK 35 kB URL GET HTTP/2 www.blockadsnot.com/ngDialog.min.js
IP
ASN #60068 Datacamp Limited
Requested by https://nopay.info/embe.php?id=liveCh6
Certificate IssuerLet's Encrypt
Subject1158060716.rsc.cdn77.org
FingerprintDC:4D:77:2D:8C:4B:74:67:E3:16:36:48:44:AA:E0:7C:02:18:B9:16
ValidityMon, 24 Jul 2023 14:50:52 GMT - Sun, 22 Oct 2023 14:50:51 GMT
File type HTML document, ASCII text, with very long lines (1568)
Hash 2515d9db15ab09c367c63a24fd6bb9fb
ff2294e1c8b7a0bd00e756e5cf7ea8a2da0b47a6
035f7c07112672f1b13031c5153e9b7de644bfa917eb7afc3413d14b6a1be21e
GET /ngDialog.min.js HTTP/1.1
Host: www.blockadsnot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://nopay.info
DNT: 1
Connection: keep-alive
Referer: https://nopay.info/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 16 Sep 2023 15:25:22 GMT
content-type: application/x-javascript
expires: Tue, 19 Sep 2023 14:40:36 GMT
access-control-allow-origin: https://nopay.info
link: <https://blockadsnot.com/>;rel=preconnect,<https://c.adsco.re/>;rel=preconnect,<https://adsco.re/>;rel=preconnect
cache-control: public, max-age=604800
server: CDN77-Turbo
vary: Accept-Encoding, Origin
x-77-nzt: AblMCRSvNhb/flAFAA
x-77-nzt-ray: af58563021324e7ee2c80565da504624
x-accel-expires: @1695134436
x-accel-date: 1694529636
x-cache: HIT
x-age: 348286
x-77-pop: stockholmSE
x-77-cache: HIT
x-77-age: 348286
content-encoding: gzip
X-Firefox-Spdy: h2
GET asacdn.com/script/suv4.js
200 OK 199 kB URL GET HTTP/2 asacdn.com/script/suv4.js
IP
Requested by https://projectlive.info/live.php?id=ch6
Certificate IssuerLet's Encrypt
Subject*.asacdn.com
Fingerprint6D:AC:05:F6:9B:81:8D:50:0F:77:02:43:CB:8F:D0:15:B4:19:BE:83
ValidityFri, 08 Sep 2023 09:27:45 GMT - Thu, 07 Dec 2023 09:27:44 GMT
Size 199 kB (199324 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /script/suv4.js HTTP/1.1
Host: asacdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://projectlive.info/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 16 Sep 2023 15:25:20 GMT
content-type: application/javascript
x-guploader-uploadid: ADPycdspyLFmH-C_fLaIL8g7YdeEwrVADSVJSeJy3uxvm_4qVSmfZXNY883eyoBtxj_9KhtptQ7ThzvUE-bimj8kkA8g
x-goog-generation: 1694788299593729
x-goog-metageneration: 2
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 199324
x-goog-hash: crc32c=xVeklg==, md5=yuJWomawJhhxjoAlqS+u7w==
x-goog-storage-class: MULTI_REGIONAL
access-control-allow-origin: *
expires: Sat, 16 Sep 2023 15:38:38 GMT
cache-control: public, max-age=14400
last-modified: Fri, 15 Sep 2023 14:31:39 GMT
etag: W/"cae256a266b02618718e8025a92faeef"
age: 1865
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=YujObKBJHvOwiIiapizKCI%2BVECEnSgwrmFNdkXJhHiIoPqIDRe4YDTiVkYAZRm5LHvDZZCQlISCqSgbgTEzExDFHsF5pmCgf%2FKQrNsVj%2F0yDLywHjjq67qokqABo"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 807a1f1cc8dfb4fd-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET addresseepaper.com/sfp.js
0 B URL GET addresseepaper.com/sfp.js
IP
Requested by https://projectlive.info/live.php?id=ch6
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /sfp.js HTTP/1.1
Host: addresseepaper.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://projectlive.info/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
GET abolishstand.net/js/jquery.min.js
200 OK 87 kB URL GET HTTP/3 abolishstand.net/js/jquery.min.js
IP
Requested by https://abolishstand.net/embed/tgj7ajwxlnp
Certificate IssuerGoogle Trust Services LLC
Subjectabolishstand.net
FingerprintC8:9E:65:C4:ED:04:72:A0:EF:62:E2:78:75:D8:3B:A1:AF:A7:C5:09
ValidityFri, 18 Aug 2023 19:58:48 GMT - Thu, 16 Nov 2023 19:58:47 GMT
File type ASCII text, with very long lines (32058)
Hash c9f5aeeca3ad37bf2aa006139b935f0a
1055018c28ab41087ef9ccefe411606893dabea2
87083882cc6015984eb0411a99d3981817f5dc5c90ba24f0940420c5548d82de
GET /js/jquery.min.js HTTP/1.1
Host: abolishstand.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://abolishstand.net/embed/tgj7ajwxlnp
Cookie: hf1=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 16 Sep 2023 15:25:22 GMT
content-type: application/javascript
last-modified: Mon, 09 Nov 2020 18:05:02 GMT
etag: W/"5fa984ce-15283"
expires: Thu, 21 Sep 2023 00:33:27 GMT
cache-control: max-age=608400
cf-cache-status: HIT
age: 229915
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=1LaD8342NTzV%2BLbi5HwqMxtcRbmEyI8%2FHv0v%2FEq5CeQrXQFD0yxN6JQXtm882Tc3aRBTagCnTz9WTOYEU%2Bq9YQHVqyGwDibVi8q%2FBgTmG72XMGQKx95d4UHuBI3eZGsSCTy2"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 807a1f2a3e60b521-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
GET abolishstand.net/deb.js
200 OK 26 kB IP
Requested by https://abolishstand.net/embed/tgj7ajwxlnp
Certificate IssuerGoogle Trust Services LLC
Subjectabolishstand.net
FingerprintC8:9E:65:C4:ED:04:72:A0:EF:62:E2:78:75:D8:3B:A1:AF:A7:C5:09
ValidityFri, 18 Aug 2023 19:58:48 GMT - Thu, 16 Nov 2023 19:58:47 GMT
File type ASCII text, with very long lines (21359)
Hash 4854629b2f59efbee5662790a405fa68
961af168c9029a8a3765356bd37631fa3941ccb2
00f55721ec6181d9c16cc365dfe2ca9aab2fb8008ffe22ded892085019fd33b5
GET /deb.js HTTP/1.1
Host: abolishstand.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://abolishstand.net/embed/tgj7ajwxlnp
Cookie: hf1=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 16 Sep 2023 15:25:22 GMT
content-type: application/javascript
last-modified: Wed, 22 Feb 2023 13:57:38 GMT
etag: W/"63f61f52-6450"
expires: Thu, 21 Sep 2023 00:33:29 GMT
cache-control: max-age=608400
cf-cache-status: HIT
age: 229913
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=vbWkFUyQzq4qA5j7LvjqS8GK%2FFcpig9IWNhQ4SjLlMT1ww7DoWk9Hwvve0AzabAFTyGsd1DnQwLaPc1CcWmtj6dSuUEj65nzWw3TLj1CID6x11%2BKLFjb0gUbTTW0H%2F9xd4rn"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 807a1f2a4e6fb521-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
GET c.adsco.re/
0 B IP
Requested by https://nopay.info/embe.php?id=liveCh6
Certificate IssuerSectigo Limited
Subject*.adsco.re
Fingerprint41:E8:B6:73:76:84:BF:F4:F7:36:CE:88:E3:48:7B:FF:4E:47:4A:43
ValidityFri, 16 Sep 2022 00:00:00 GMT - Fri, 29 Sep 2023 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: c.adsco.re
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nopay.info/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 16 Sep 2023 15:25:23 GMT
content-type: text/html
cache-control: public, max-age=2678400
accept-ch: Sec-CH-UA, Sec-CH-UA-Mobile, Sec-CH-UA-Full-Version, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Arch, Sec-CH-UA-Model, Device-Memory, Downlink, ECT, RTT, Width, Viewport-Width, DPR
permissions-policy: ch-ua=(self "https://adsco.re"),ch-ua-mobile=(self "https://adsco.re"),ch-ua-full-version=(self "https://adsco.re"),ch-ua-platform=(self "https://adsco.re"),ch-ua-platform-version=(self "https://adsco.re"),ch-ua-arch=(self "https://adsco.re"),ch-ua-model=(self "https://adsco.re"),ch-device-memory=(self "https://adsco.re"),ch-downlink=(self "https://adsco.re"),ch-ect=(self "https://adsco.re"),ch-rtt=(self "https://adsco.re"),ch-width=(self "https://adsco.re"),ch-viewport-width=(self "https://adsco.re"),ch-dpr=(self "https://adsco.re")
link: <//6.adsco.re/>;rel=prefetch;crossorigin;as=fetch,<//4.adsco.re/>;rel=prefetch;crossorigin;as=fetch,<//adsco.re/>;rel=preconnect
expires: Tue, 17 Oct 2023 15:25:23 GMT
etag: W/"tzC4PKSya+MBjBSpOR6Q3w=="
cf-cache-status: HIT
age: 2778965
vary: Accept-Encoding
server: cloudflare
cf-ray: 807a1f2bacbab4f9-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET abolishstand.net/embed/tgj7ajwxlnp
200 OK 11 kB URL GET HTTP/2 abolishstand.net/embed/tgj7ajwxlnp
IP
Requested by https://nopay.info/embe.php?id=liveCh6
Certificate IssuerGoogle Trust Services LLC
Subjectabolishstand.net
FingerprintC8:9E:65:C4:ED:04:72:A0:EF:62:E2:78:75:D8:3B:A1:AF:A7:C5:09
ValidityFri, 18 Aug 2023 19:58:48 GMT - Thu, 16 Nov 2023 19:58:47 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /embed/tgj7ajwxlnp HTTP/1.1
Host: abolishstand.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nopay.info/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 16 Sep 2023 15:25:22 GMT
content-type: text/html; charset=UTF-8
set-cookie: hf1=1; expires=Sat, 16-Sep-2023 15:55:22 GMT; Max-Age=1800; path=/; secure; HttpOnly; SameSite=None
hf2=1; expires=Sat, 16-Sep-2023 15:25:22 GMT; Max-Age=0; path=/; secure; HttpOnly; SameSite=None
hf3=1; expires=Sat, 16-Sep-2023 15:25:22 GMT; Max-Age=0; path=/; secure; HttpOnly; SameSite=None
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=4iVQXUMmgyDyL1CDZDn2kimtYKl0DI8cHdZOdfh2Zf%2Beg%2Fjd4MlLkQgP8le51RP5druXFY%2FJQA397WlnkLWLeId%2BaPth1CnKF75pgBm4hx%2FuuuTsV4m0cutRVx4H2v1bkPUt"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 807a1f280afcb511-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET nopay.info/cdn-cgi/challenge-platform/h/b/scripts/jsd/8370c0b3/main.js
200 OK 7.4 kB URL GET HTTP/3 nopay.info/cdn-cgi/challenge-platform/h/b/scripts/jsd/8370c0b3/main.js
IP
Requested by https://nopay.info/embe.php?id=liveCh6
Certificate IssuerGoogle Trust Services LLC
Subjectnopay.info
FingerprintDA:D3:DD:74:EF:8B:F6:08:9D:82:90:55:A4:B7:38:44:B8:3B:BB:E7
ValidityTue, 29 Aug 2023 23:21:36 GMT - Mon, 27 Nov 2023 23:21:35 GMT
File type ASCII text, with very long lines (7391), with no line terminators
Hash ffd7404e5b69a130af2bb1eac735edb1
bb51390ba2de6e6b1591af64ffb237de7038f7d8
7f368f249ef3f28e77bd055028c0c4eb512ee2856eef8525fd3ea2f0b6404a87
GET /cdn-cgi/challenge-platform/h/b/scripts/jsd/8370c0b3/main.js HTTP/1.1
Host: nopay.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 16 Sep 2023 15:25:22 GMT
content-type: application/javascript; charset=UTF-8
x-content-type-options: nosniff
cache-control: max-age=14400, public
vary: accept-encoding
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Ufeo%2BVqPnRl%2B9XOn1asrXoWwAOWj9wOZ02A23w8lCScZbBk2HAdBrq7Nnre9dS3J%2FjFVbxmFE9hVdkbKW36ADeGJSxdFpTudEa3VCt%2Bwmc6oukaLBwipPcGwQXLL"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 807a1f2968ac568a-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
172.67.155.202
185.200.116.90
104.21.1.212
151.101.84.193
185.200.118.90
18.195.190.179
188.114.97.1
0.0.0.0