Report - emturbovid.com/d/F5w4xqBSkHHu1bkoBRFF

Report Overview

Visited public
2023-11-23 06:48:50
Tags
URL
emturbovid.com/d/F5w4xqBSkHHu1bkoBRFF
Finishing URL
emturbovid.com/d/F5w4xqBSkHHu1bkoBRFF
IP / ASN
188.114.97.1
#13335 CLOUDFLARENET
Title
Download - TurboVID

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
emturbovid.com	unknown	2021-08-01	2021-09-29 05:30:05	2023-11-11 07:20:09	495 B	15 kB	188.114.96.1
ophoacit.com	unknown	2022-07-08	2022-07-28 17:22:31	2023-11-21 16:54:25	899 B	457 kB	139.45.197.242
code.jquery.com	634	2005-12-10	2012-05-21 19:28:02	2023-11-22 07:54:03	440 B	34 kB	151.101.66.137
cdn.jsdelivr.net	439	2012-05-16	2012-09-30 02:15:09	2023-11-22 05:09:38	953 B	51 kB	151.101.1.229
ver1.sptvp.com	416908	2021-07-03	2021-10-08 13:00:11	2023-11-17 09:50:06	447 B	280 kB	104.21.48.24
fonts.googleapis.com	8877	2005-01-25	2013-06-10 22:14:26	2023-11-22 07:41:56	564 B	51 kB	142.250.74.106
fonts.gstatic.com	unknown	2008-02-11	2014-09-09 02:40:21	2023-11-22 07:50:40	517 B	36 kB	142.250.74.163
turboviplay.com	unknown	2021-07-03	2021-07-08 18:05:35	2023-10-05 03:13:44	12 kB	2.3 MB	104.21.26.91
delivery.taroads.com	unknown	2018-08-15	2021-10-28 09:23:46	2023-11-12 09:12:20	408 B	13 kB	172.67.144.19

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2023-11-22	medium	ophoacit.com	Sinkholed
2023-11-22	medium	ophoacit.com	Sinkholed

ThreatFox

No alerts detected

JavaScript (7)

	URL	From	Size	First Seen	Last Seen
	emturbovid.com/d/F5w4xqBSkHHu1bkoBRFF	ScriptElement	562 B	2023-11-23	2024-08-20
Pretty URL emturbovid.com/d/F5w4xqBSkHHu1bkoBRFF IP 188.114.96.1 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-11-23 07:48 Last Seen2024-08-20 18:12 Times Seen5 Hash 3441c34359093a03ab4879fe7c9c6dbc c4d89dddf1c51d351895b41951b926e7e7bd44e2 52fef7846c71526b305d0b84a83a8bb029b2b2afe0c46fbbbdc8b92a62aa9753 Loading...

	cdn.jsdelivr.net/npm/bootstrap@5.0.2/dist/js/bootstrap.bundle.min.js	ScriptElement	79 kB	2023-03-07	2025-06-22
Pretty URL cdn.jsdelivr.net/npm/bootstrap@5.0.2/dist/js/bootstrap.bundle.min.js IP 151.101.1.229 ASN #54113 FASTLY Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:03 Last Seen2025-06-22 03:16 Times Seen12317 Hash 0aa8d64e726c4a57adb5c88f9115996b 901169527507ff9e662cf64d8e361f359308970d 7e1f1503df765cca5e099891b94e318a2ef95081ba2af1eb6d417cc884bfdbfe Loading...

	code.jquery.com/jquery-1.12.4.min.js	ScriptElement	97 kB	2023-03-07	2025-06-22
Pretty URL code.jquery.com/jquery-1.12.4.min.js IP 151.101.66.137 ASN #54113 FASTLY Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02 Last Seen2025-06-22 04:20 Times Seen32128 Hash 4f252523d4af0b478c810c2547a63e19 5a9dcfbef655a2668e78baebeaa8dc6f41d8dabb 668b046d12db350ccba6728890476b3efee53b2f42dbb84743e5e9f1ae0cc404 Loading...

	emturbovid.com/d/F5w4xqBSkHHu1bkoBRFF	ScriptElement	2.5 kB	2024-08-20	2024-08-20
Pretty URL emturbovid.com/d/F5w4xqBSkHHu1bkoBRFF IP 188.114.96.1 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2024-08-20 18:12 Last Seen2024-08-20 18:12 Times Seen1 Hash c306c2f038b49a9e6e713e02d5c3e696 ef3587846961562340b652f7395a2416733b8dfc 731410d1b978f1a1fd9ae3a95215fca0e3c02d10ddf4bb6d50f920eb9fa1c676 Loading...

	delivery.taroads.com/pub?id=286	ScriptElement	12 kB	2023-11-23	2024-08-20
Pretty URL delivery.taroads.com/pub?id=286 IP 172.67.144.19 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-11-23 07:48 Last Seen2024-08-20 18:12 Times Seen5 Hash 5be1ada2533a0e9988936dee120d5824 1068f9c37114698b43c303a9f852573b8fec8e5c 8b3314f69d0311b9f5ab41d3f2bdf5cbeef43c9ec9e41a1876a07b9f3f4a7ce6 Loading...

	unknown	Function	34 B	2023-04-11	2025-06-22
Pretty Introduced by Function Embedded in HTML false Observations First Seen2023-04-11 21:16 Last Seen2025-06-22 04:03 Times Seen67301 Hash 572cb94037fffc2a0a53b465972e15f1 0d679b041a7c1ca45cc99e2d229fc2b86762838d 6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35 Loading...

	ophoacit.com/1?z=5505405	ScriptElement	43 kB	2023-11-23	2023-11-23
Pretty URL ophoacit.com/1?z=5505405 IP 139.45.197.242 ASN #9002 RETN Limited Introduced by scriptElement Embedded in HTML false Observations First Seen2023-11-23 07:48 Last Seen2023-11-23 07:48 Times Seen1 Hash 8746de4acd32f7befd3e6f94af6aa342 625739f0207c0caff5caae48525dec84421b9d2c dd135e9c4add2d72acc34f3bbf29423d2b2adfc05dc76497333d7a44702488e5 Loading...

HTTP Transactions (35)

URL IP Response Size

GET code.jquery.com/jquery-1.12.4.min.js

151.101.66.137

200 OK

34 kB

URL GET HTTP/2
code.jquery.com/jquery-1.12.4.min.js
IP
151.101.66.137:443
ASN
#54113 FASTLY

Requested by
https://emturbovid.com/d/F5w4xqBSkHHu1bkoBRFF
Certificate
IssuerSectigo Limited
Subject*.jquery.com
FingerprintD2:19:0A:AD:CE:BB:9C:61:17:5D:29:4B:A2:54:E8:C6:91:B8:F9:8D
ValidityTue, 11 Jul 2023 00:00:00 GMT - Sun, 14 Jul 2024 23:59:59 GMT

File type
ASCII text, with very long lines (32077)
Size
34 kB (33738 bytes)
Hash
4f252523d4af0b478c810c2547a63e19
5a9dcfbef655a2668e78baebeaa8dc6f41d8dabb
668b046d12db350ccba6728890476b3efee53b2f42dbb84743e5e9f1ae0cc404

HTTP Headers

GET /jquery-1.12.4.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://emturbovid.com
DNT: 1
Connection: keep-alive
Referer: https://emturbovid.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Fri, 18 Oct 1991 12:00:00 GMT
etag: W/"28feccc0-17b8b"
cache-control: public, max-age=31536000, stale-while-revalidate=604800
access-control-allow-origin: *
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Thu, 23 Nov 2023 06:48:31 GMT
age: 5921506
x-served-by: cache-lga21956-LGA, cache-bma1671-BMA
x-cache: HIT, HIT
x-cache-hits: 232, 147964
x-timer: S1700722112.939107,VS0,VE0
vary: Accept-Encoding
content-length: 33738
X-Firefox-Spdy: h2

GET cdn.jsdelivr.net/npm/bootstrap@5.0.2/dist/css/bootstrap.min.css

151.101.1.229

200 OK

25 kB

URL GET HTTP/2
cdn.jsdelivr.net/npm/bootstrap@5.0.2/dist/css/bootstrap.min.css
IP
151.101.1.229:443
ASN
#54113 FASTLY

Requested by
https://emturbovid.com/d/F5w4xqBSkHHu1bkoBRFF
Certificate
IssuerGlobalSign nv-sa
Subjectjsdelivr.net
Fingerprint05:87:2C:BA:73:14:21:54:82:00:8B:AD:85:8F:E9:C6:4D:C7:66:09
ValidityWed, 27 Sep 2023 18:13:13 GMT - Mon, 28 Oct 2024 18:13:12 GMT

File type
Unicode text, UTF-8 text, with very long lines (65306)
Size
25 kB (25360 bytes)
Hash
abe91756d18b7cd60871a2f47c1e8192
7c1c9e0573e5cea8bad3733be2fc63aa8c68ea8d
7633b7c0c97d19e682feee8afa2738523fcb2a14544a550572caeecd2eefe66b

HTTP Headers

GET /npm/bootstrap@5.0.2/dist/css/bootstrap.min.css HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://emturbovid.com
DNT: 1
Connection: keep-alive
Referer: https://emturbovid.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: text/css; charset=utf-8
x-jsd-version: 5.0.2
x-jsd-version-type: version
etag: W/"260c5-fByeBXPlzqi603M74vxjqoxo6o0"
content-encoding: br
accept-ranges: bytes
date: Thu, 23 Nov 2023 06:48:31 GMT
age: 14245354
x-served-by: cache-fra-eddf8230097-FRA, cache-bma1682-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 25360
X-Firefox-Spdy: h2

GET cdn.jsdelivr.net/npm/bootstrap@5.0.2/dist/js/bootstrap.bundle.min.js

151.101.1.229

200 OK

24 kB

URL GET HTTP/2
cdn.jsdelivr.net/npm/bootstrap@5.0.2/dist/js/bootstrap.bundle.min.js
IP
151.101.1.229:443
ASN
#54113 FASTLY

Requested by
https://emturbovid.com/d/F5w4xqBSkHHu1bkoBRFF
Certificate
IssuerGlobalSign nv-sa
Subjectjsdelivr.net
Fingerprint05:87:2C:BA:73:14:21:54:82:00:8B:AD:85:8F:E9:C6:4D:C7:66:09
ValidityWed, 27 Sep 2023 18:13:13 GMT - Mon, 28 Oct 2024 18:13:12 GMT

File type
ASCII text, with very long lines (65299)
Size
24 kB (23943 bytes)
Hash
0aa8d64e726c4a57adb5c88f9115996b
901169527507ff9e662cf64d8e361f359308970d
7e1f1503df765cca5e099891b94e318a2ef95081ba2af1eb6d417cc884bfdbfe

HTTP Headers

GET /npm/bootstrap@5.0.2/dist/js/bootstrap.bundle.min.js HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://emturbovid.com
DNT: 1
Connection: keep-alive
Referer: https://emturbovid.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: application/javascript; charset=utf-8
x-jsd-version: 5.0.2
x-jsd-version-type: version
etag: W/"13397-kBFpUnUH/55mLPZNjjYfNZMIlw0"
content-encoding: br
accept-ranges: bytes
date: Thu, 23 Nov 2023 06:48:31 GMT
age: 15871306
x-served-by: cache-fra-eddf8230080-FRA, cache-bma1682-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 23943
X-Firefox-Spdy: h2

GET ver1.sptvp.com/poster/F/19/F5w4xqBSkHHu1bkoBRFF.png

104.21.48.24

200 OK

279 kB

URL GET HTTP/2
ver1.sptvp.com/poster/F/19/F5w4xqBSkHHu1bkoBRFF.png
IP
104.21.48.24:443
ASN
#13335 CLOUDFLARENET

Requested by
https://emturbovid.com/d/F5w4xqBSkHHu1bkoBRFF
Certificate
IssuerGoogle Trust Services LLC
Subjectsptvp.com
FingerprintEF:99:A2:8B:9C:0F:17:18:40:02:69:4B:AD:E9:BF:98:48:69:D9:AE
ValidityFri, 27 Oct 2023 10:39:09 GMT - Thu, 25 Jan 2024 10:39:08 GMT

File type
PNG image data, 640 x 360, 8-bit/color RGB, non-interlaced\012- data
Size
279 kB (279074 bytes)
Hash
9bfd02faa87ad7f9e59a87e918fdc686
ba1c53e43971b069f38dd55ed348d339d82410bd
4bb783053cc4b078b2ff743e7bfe1aec1de367d8b2bfc4f3acd0b01fdf2a92d1

HTTP Headers

GET /poster/F/19/F5w4xqBSkHHu1bkoBRFF.png HTTP/1.1
Host: ver1.sptvp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://emturbovid.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Thu, 23 Nov 2023 06:48:32 GMT
content-type: image/png
content-length: 279074
last-modified: Wed, 18 Oct 2023 06:39:08 GMT
etag: "652f7d8c-44222"
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
access-control-expose-headers: Content-Length,Content-Range
cache-control: max-age=300
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=H%2F6QAejMpzIoPshQ85%2BaNxZBkdt%2FHP6J2gbcQ75692Qcqk5sZxerOcr5iFLBW1r%2FiDcmQ%2Bs7hDme1oPrPu1gTLFnlxdwMne340dyTS0GyAk2y2zwGleTAa21P7jxTd2aEQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82a777907bc0569a-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

GET fonts.gstatic.com/s/rubik/v28/iJWKBXyIfDnIV7nBrXw.woff2

142.250.74.163

200 OK

35 kB

URL GET HTTP/2
fonts.gstatic.com/s/rubik/v28/iJWKBXyIfDnIV7nBrXw.woff2
IP
142.250.74.163:443
ASN
#15169 GOOGLE

Requested by
https://emturbovid.com/d/F5w4xqBSkHHu1bkoBRFF
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT

File type
Web Open Font Format (Version 2), TrueType, length 35448, version 1.0\012- data
Size
35 kB (35448 bytes)
Hash
5c138044f30b8c78119264cd744e686a
7605e014180d49087785350bd1906c16c389690d
47374cb7d373f9a8450e1237c80bc5fe68c61fbf0cdf958df7a298143b7dd445

HTTP Headers

GET /s/rubik/v28/iJWKBXyIfDnIV7nBrXw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://emturbovid.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 35448
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 22 Nov 2023 21:53:33 GMT
expires: Thu, 21 Nov 2024 21:53:33 GMT
cache-control: public, max-age=31536000
age: 32099
last-modified: Thu, 29 Jun 2023 16:14:39 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

GET turboviplay.com/assets/vendor_components/perfect-scrollbar/css/perfect-scrollbar.css

104.21.26.91

200 OK

10 kB

URL GET HTTP/3
turboviplay.com/assets/vendor_components/perfect-scrollbar/css/perfect-scrollbar.css
IP
104.21.26.91:443
ASN
#13335 CLOUDFLARENET

Requested by
https://emturbovid.com/d/F5w4xqBSkHHu1bkoBRFF
Certificate
IssuerLet's Encrypt
Subjectturboviplay.com
Fingerprint67:06:8C:92:50:46:5B:13:71:C8:1F:C4:16:DA:05:A2:F4:7B:6F:31
ValidityFri, 27 Oct 2023 10:00:06 GMT - Thu, 25 Jan 2024 10:00:05 GMT

File type
troff or preprocessor input, ASCII text
Size
10 kB (10079 bytes)
Hash
4058a832cdc5510b1fd92f4756bbab58
97c9d25cf31015ee95327ebadbe7cc2b7f9fc5b6
3a4d6fa5856127cf5817661fe8f8c7ca873b594d4f32a0e11b85d296b387295e

HTTP Headers

GET /assets/vendor_components/perfect-scrollbar/css/perfect-scrollbar.css HTTP/1.1
Host: turboviplay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://turboviplay.com/frontend/css/vendors_css.css
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Thu, 23 Nov 2023 06:48:32 GMT
content-type: text/css
last-modified: Sun, 30 May 2021 17:32:02 GMT
etag: W/"60b3cc12-a26"
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=i3XNEtJYJd%2FkwvMVN8A3eMNItvFFFj45sxf7LdomAUHaIygX%2FyIu2R9umjI99oMVYXSXKB5irFw5WhrvwdTbL%2FRYlNb2yz18%2BFK4CEjV9JJ16u%2B1FjSNIXNF6%2B1GnsGYOTc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82a77791dafa56b7-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

GET turboviplay.com/frontend/images/logo1.png

104.21.26.91

200 OK

9.5 kB

URL GET HTTP/3
turboviplay.com/frontend/images/logo1.png
IP
104.21.26.91:443
ASN
#13335 CLOUDFLARENET

Requested by
https://emturbovid.com/d/F5w4xqBSkHHu1bkoBRFF
Certificate
IssuerLet's Encrypt
Subjectturboviplay.com
Fingerprint67:06:8C:92:50:46:5B:13:71:C8:1F:C4:16:DA:05:A2:F4:7B:6F:31
ValidityFri, 27 Oct 2023 10:00:06 GMT - Thu, 25 Jan 2024 10:00:05 GMT

File type
PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced\012- data
Size
9.5 kB (9470 bytes)
Hash
47e19ab8bb27409ed849a17ca38387c7
27f146b9329154135d923bc35bcc2e3ddba59cf5
dd7a4d4326c8cdc492110436e2f9bb81487599bc2b81d0eb6dbf50dc8d140999

HTTP Headers

GET /frontend/images/logo1.png HTTP/1.1
Host: turboviplay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://emturbovid.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Thu, 23 Nov 2023 06:48:32 GMT
content-type: image/png
content-length: 9470
last-modified: Fri, 25 Jun 2021 11:14:18 GMT
etag: "60d5ba8a-24fe"
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=9vdp9WBKMfKiy5mUHx8u8Ub7D%2Fpb26J4kbBnPkusIQlxS3OhzUbEfzd3SUneZwIeo%2B7C7RlDx5B1CyHJPchRF7HY6y2O7PWrW6ACDZJc787EwKyNqgIpjlpjIBrRpUFiZWE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82a777950dd456b7-OSL
alt-svc: h3=":443"; ma=86400

GET turboviplay.com/assets/vendor_components/bootstrap/dist/css/bootstrap.css

104.21.26.91

200 OK

206 kB

URL GET HTTP/3
turboviplay.com/assets/vendor_components/bootstrap/dist/css/bootstrap.css
IP
104.21.26.91:443
ASN
#13335 CLOUDFLARENET

Requested by
https://emturbovid.com/d/F5w4xqBSkHHu1bkoBRFF
Certificate
IssuerLet's Encrypt
Subjectturboviplay.com
Fingerprint67:06:8C:92:50:46:5B:13:71:C8:1F:C4:16:DA:05:A2:F4:7B:6F:31
ValidityFri, 27 Oct 2023 10:00:06 GMT - Thu, 25 Jan 2024 10:00:05 GMT

File type
ASCII text, with very long lines (560)
Size
206 kB (206326 bytes)
Hash
532d8fae5bb671715b0bce9b397adb32
4cfc0eeebb414b1abeca9be32324c3db76ad9a96
a437a2ac9c843fc3dda334d35e03734bb8c7eece473ff0f5038d0ef105448ebd

HTTP Headers

GET /assets/vendor_components/bootstrap/dist/css/bootstrap.css HTTP/1.1
Host: turboviplay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://turboviplay.com/frontend/css/vendors_css.css
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Thu, 23 Nov 2023 06:48:32 GMT
content-type: text/css
last-modified: Mon, 19 Jul 2021 11:41:00 GMT
etag: W/"60f564cc-325f6"
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=SSSKXsZYD6vZ7aZP4tBZv2EoxlX%2FazUiTKfv8cHHWUmao3bsr%2BXkGiQ5JEc1HmFFAQ%2BOtWLLH6iU3mQp8QM653mKenPYZdVIOJBSDI47%2F%2BXoLSZMpFd8vjZMr6%2BzzMpEmrw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82a77791daf956b7-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

GET turboviplay.com/assets/vendor_components/sweetalert/sweetalert.css

104.21.26.91

200 OK

23 kB

URL GET HTTP/3
turboviplay.com/assets/vendor_components/sweetalert/sweetalert.css
IP
104.21.26.91:443
ASN
#13335 CLOUDFLARENET

Requested by
https://emturbovid.com/d/F5w4xqBSkHHu1bkoBRFF
Certificate
IssuerLet's Encrypt
Subjectturboviplay.com
Fingerprint67:06:8C:92:50:46:5B:13:71:C8:1F:C4:16:DA:05:A2:F4:7B:6F:31
ValidityFri, 27 Oct 2023 10:00:06 GMT - Thu, 25 Jan 2024 10:00:05 GMT

File type
ASCII text
Size
23 kB (22795 bytes)
Hash
1af806ffc778c85b8c8c6f771ecd64e8
9f8dd650cc18ce5a1c9365ddd80112f4d4140c77
96cb65f1f227f20731302b1b930a66e0e15f4dcf80410a0642b47608eaea27f4

HTTP Headers

GET /assets/vendor_components/sweetalert/sweetalert.css HTTP/1.1
Host: turboviplay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://turboviplay.com/frontend/css/vendors_css.css
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Thu, 23 Nov 2023 06:48:32 GMT
content-type: text/css
last-modified: Sat, 11 Sep 2021 15:59:46 GMT
etag: W/"613cd272-590b"
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=0T27pq2crsMwPS3ZX0Cice%2FHzRn0Lf%2BDw8izdP3zzGw5zUeYIRbngEu%2FCopKUTFvfFMCaflDubZ7GWXg0M2EgDbWUaPc9BcSE%2BmvVmw8A4O944Qr8eus6e0sAx8ZCWi8lYc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82a77791dafc56b7-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

GET turboviplay.com/assets/icons/cryptocoins-master/cryptocoins.css

104.21.26.91

200 OK

18 kB

URL GET HTTP/3
turboviplay.com/assets/icons/cryptocoins-master/cryptocoins.css
IP
104.21.26.91:443
ASN
#13335 CLOUDFLARENET

Requested by
https://emturbovid.com/d/F5w4xqBSkHHu1bkoBRFF
Certificate
IssuerLet's Encrypt
Subjectturboviplay.com
Fingerprint67:06:8C:92:50:46:5B:13:71:C8:1F:C4:16:DA:05:A2:F4:7B:6F:31
ValidityFri, 27 Oct 2023 10:00:06 GMT - Thu, 25 Jan 2024 10:00:05 GMT

File type
ASCII text, with CRLF line terminators
Size
18 kB (17969 bytes)
Hash
b3efb1c35655f7fd6a536c18076548d4
fc1b0de699163e72c2e421df1d41631794f6c038
8d2cfd45c19286f8ace86edf35a3fb9a327d824ad263844e107b030eebf19c54

HTTP Headers

GET /assets/icons/cryptocoins-master/cryptocoins.css HTTP/1.1
Host: turboviplay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://turboviplay.com/frontend/css/style.css
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Thu, 23 Nov 2023 06:48:32 GMT
content-type: text/css
last-modified: Sun, 13 Jun 2021 14:23:53 GMT
etag: W/"60c614f9-4631"
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=TjFqW5cUrSBJJqtKTjmbpjdxmpDuA19K3qzEcRrFXYXiF01DTPM1%2Bx6%2BDzlujf4Ftc57rZ3vWnvZVHb%2FGVsH8rziG4vmu0gZPlKWErxgwcRAsq5HU8GDJsD7LgMbzhMXgvM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82a77791fb1856b7-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

GET turboviplay.com/assets/vendor_components/animate/animate.css

104.21.26.91

200 OK

75 kB

URL GET HTTP/3
turboviplay.com/assets/vendor_components/animate/animate.css
IP
104.21.26.91:443
ASN
#13335 CLOUDFLARENET

Requested by
https://emturbovid.com/d/F5w4xqBSkHHu1bkoBRFF
Certificate
IssuerLet's Encrypt
Subjectturboviplay.com
Fingerprint67:06:8C:92:50:46:5B:13:71:C8:1F:C4:16:DA:05:A2:F4:7B:6F:31
ValidityFri, 27 Oct 2023 10:00:06 GMT - Thu, 25 Jan 2024 10:00:05 GMT

File type
ASCII text
Size
75 kB (75051 bytes)
Hash
ebe2c5ebc2fac0dc0a24e41fdda6d5b8
7da16d98354375d82adc7a7bff424346faf662f3
95da3176e728e04616d92fe5f50f7ace2a0e52e4f012dba748a32f7745bcbc54

HTTP Headers

GET /assets/vendor_components/animate/animate.css HTTP/1.1
Host: turboviplay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://turboviplay.com/frontend/css/style.css
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Thu, 23 Nov 2023 06:48:32 GMT
content-type: text/css
last-modified: Sun, 30 May 2021 17:37:34 GMT
etag: W/"60b3cd5e-1252b"
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=nZbNalvB6W7i0v9tmEIZ2IsTEo3bXwmNIJFUfRTY8M%2F730V4M%2BtqodhdD0QpiiEL2xEpZFxYWy%2BxBuWes4FeInqX%2BUk%2FxFDotmP5BZhC9i%2FF96FNKMUmSD0lVfseTFW2Wic%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82a777920b2f56b7-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

GET turboviplay.com/assets/icons/weather-icons/css/weather-icons.min.css

104.21.26.91

200 OK

23 kB

URL GET HTTP/3
turboviplay.com/assets/icons/weather-icons/css/weather-icons.min.css
IP
104.21.26.91:443
ASN
#13335 CLOUDFLARENET

Requested by
https://emturbovid.com/d/F5w4xqBSkHHu1bkoBRFF
Certificate
IssuerLet's Encrypt
Subjectturboviplay.com
Fingerprint67:06:8C:92:50:46:5B:13:71:C8:1F:C4:16:DA:05:A2:F4:7B:6F:31
ValidityFri, 27 Oct 2023 10:00:06 GMT - Thu, 25 Jan 2024 10:00:05 GMT

File type
ASCII text, with very long lines (22267), with CRLF line terminators
Size
23 kB (23146 bytes)
Hash
c14a151cfd46eaa6ade56f048b1dd085
8350d5520d34151c2662aca0e870e0f09551d64c
9d9963ba0c97ea82e30cca16602d58656501e06a6ec45ed6244f16e5911712cb

HTTP Headers

GET /assets/icons/weather-icons/css/weather-icons.min.css HTTP/1.1
Host: turboviplay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://turboviplay.com/frontend/css/style.css
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Thu, 23 Nov 2023 06:48:32 GMT
content-type: text/css
last-modified: Sun, 13 Jun 2021 14:35:21 GMT
etag: W/"60c617a9-5a6a"
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=QiKtV5V3K1zF7%2B5MPmXfG45rMdlQdL9C1e1neaQRStcxeRwYfpmIq8jSCvJz8LEPt0Q4d6Rx7b3biKeSetfiBte4%2B9QeOkDvpepSFVFnMm0Wjx42eATwSnTxsTO3QXoSLAY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82a77791fb1a56b7-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

GET turboviplay.com/assets/vendor_components/datatable/datatables.min.css

104.21.26.91

200 OK

23 kB

URL GET HTTP/3
turboviplay.com/assets/vendor_components/datatable/datatables.min.css
IP
104.21.26.91:443
ASN
#13335 CLOUDFLARENET

Requested by
https://emturbovid.com/d/F5w4xqBSkHHu1bkoBRFF
Certificate
IssuerLet's Encrypt
Subjectturboviplay.com
Fingerprint67:06:8C:92:50:46:5B:13:71:C8:1F:C4:16:DA:05:A2:F4:7B:6F:31
ValidityFri, 27 Oct 2023 10:00:06 GMT - Thu, 25 Jan 2024 10:00:05 GMT

File type
ASCII text, with very long lines (5041)
Size
23 kB (22868 bytes)
Hash
3641504a5b03e48269ff589bbed5c455
efcee345f54ebb6bd3b558d256ce2f1ca42e9b34
77256d68d53993a77729038fede56e6737fd5256d4d65db9aaa3fa77c98a1ec1

HTTP Headers

GET /assets/vendor_components/datatable/datatables.min.css HTTP/1.1
Host: turboviplay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://turboviplay.com/frontend/css/vendors_css.css
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Thu, 23 Nov 2023 06:48:32 GMT
content-type: text/css
last-modified: Fri, 25 Jun 2021 10:52:06 GMT
etag: W/"60d5b556-5954"
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=cwiYiARm85vOug7i88JNV6O2OwT1wwThVdTMXFb81LI8TyzbnH4UPIVUiUG%2B2ZVZ2WCaqQTjyLq2hEaVFiMxdHzaDMB78ipUPbChOC7AuUyXMMr14zRe8vq3xpMGo9dCXNg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82a77791dafb56b7-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

GET turboviplay.com/assets/vendor_components/jquery-toast-plugin-master/src/jquery.toast.css

104.21.26.91

200 OK

4.9 kB

URL GET HTTP/3
turboviplay.com/assets/vendor_components/jquery-toast-plugin-master/src/jquery.toast.css
IP
104.21.26.91:443
ASN
#13335 CLOUDFLARENET

Requested by
https://emturbovid.com/d/F5w4xqBSkHHu1bkoBRFF
Certificate
IssuerLet's Encrypt
Subjectturboviplay.com
Fingerprint67:06:8C:92:50:46:5B:13:71:C8:1F:C4:16:DA:05:A2:F4:7B:6F:31
ValidityFri, 27 Oct 2023 10:00:06 GMT - Thu, 25 Jan 2024 10:00:05 GMT

File type
ASCII text, with very long lines (4968), with no line terminators
Size
4.9 kB (4914 bytes)
Hash
39d9c4c540cffbe41b6cc4dc740b2a9c
b1b9e13c11ad7215567959c50cf733e89d41afe7
05d536b2f9a4af7750a2da379d0f3c4ef3023bdf0b242e7f32b26e7ad296fbea

HTTP Headers

GET /assets/vendor_components/jquery-toast-plugin-master/src/jquery.toast.css HTTP/1.1
Host: turboviplay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://turboviplay.com/frontend/css/vendors_css.css
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Thu, 23 Nov 2023 06:48:32 GMT
content-type: text/css
last-modified: Mon, 25 Apr 2022 17:28:10 GMT
etag: W/"6266da2a-1332"
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=MCw1IrYnOEyu5OGLtvn%2BRl84hETJOXmDeYc%2FmJVBpVnPokCIUolV0ELoT5yLqa4KU9%2BoWLNNPJt7JR4Frx4mUfQdZMHWEu6EUfHeQAmpT2JpVpZLmHYji9auaqVNtxY6oF4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82a77791dafd56b7-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

GET turboviplay.com/assets/icons/material-design-iconic-font/css/materialdesignicons.css

104.21.26.91

200 OK

109 kB

URL GET HTTP/3
turboviplay.com/assets/icons/material-design-iconic-font/css/materialdesignicons.css
IP
104.21.26.91:443
ASN
#13335 CLOUDFLARENET

Requested by
https://emturbovid.com/d/F5w4xqBSkHHu1bkoBRFF
Certificate
IssuerLet's Encrypt
Subjectturboviplay.com
Fingerprint67:06:8C:92:50:46:5B:13:71:C8:1F:C4:16:DA:05:A2:F4:7B:6F:31
ValidityFri, 27 Oct 2023 10:00:06 GMT - Thu, 25 Jan 2024 10:00:05 GMT

File type
ASCII text, with very long lines (425)
Size
109 kB (108810 bytes)
Hash
2daf61c070cae75d07aa1b6a8afee289
958b837fc217ea62f4472f7eb5edb86281a7244c
b2767404584e08d07b330d7927ae6e5b79e838c8549ae670ccb0c917c9761223

HTTP Headers

GET /assets/icons/material-design-iconic-font/css/materialdesignicons.css HTTP/1.1
Host: turboviplay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://turboviplay.com/frontend/css/style.css
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Thu, 23 Nov 2023 06:48:32 GMT
content-type: text/css
last-modified: Sun, 13 Jun 2021 14:34:47 GMT
etag: W/"60c61787-1a90a"
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ZJbgYHX2wn%2FUqH21N1y6vHjdVJho%2Fe%2BNn6NvelwqBGoddQpKbZx74E9JXbwZ8jBG2D2d7ABW6PAM7QQhapONB1%2BrrwD46yx8D5ST2rGPOy4tD99H5LmzrdZTAoRdTSe6fzE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82a77791db0956b7-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

GET turboviplay.com/assets/icons/font-awesome/css/font-awesome.css

104.21.26.91

200 OK

37 kB

URL GET HTTP/3
turboviplay.com/assets/icons/font-awesome/css/font-awesome.css
IP
104.21.26.91:443
ASN
#13335 CLOUDFLARENET

Requested by
https://emturbovid.com/d/F5w4xqBSkHHu1bkoBRFF
Certificate
IssuerLet's Encrypt
Subjectturboviplay.com
Fingerprint67:06:8C:92:50:46:5B:13:71:C8:1F:C4:16:DA:05:A2:F4:7B:6F:31
ValidityFri, 27 Oct 2023 10:00:06 GMT - Thu, 25 Jan 2024 10:00:05 GMT

File type
troff or preprocessor input, ASCII text, with very long lines (372)
Size
37 kB (37414 bytes)
Hash
c495654869785bc3df60216616814ad1
0140952c64e3f2b74ef64e050f2fe86eab6624c8
36e0a7e08bee65774168528938072c536437669c1b7458ac77976ec788e4439c

HTTP Headers

GET /assets/icons/font-awesome/css/font-awesome.css HTTP/1.1
Host: turboviplay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://turboviplay.com/frontend/css/style.css
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Thu, 23 Nov 2023 06:48:32 GMT
content-type: text/css
last-modified: Sun, 13 Jun 2021 14:32:29 GMT
etag: W/"60c616fd-9226"
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2B1fpTfa959%2F%2FLVjqZ%2F%2BBU5pmpD5QIKUQy7PymxBlbMBw1g8rZIvvu9Y8lvl2d8Hoi%2BE8r28fIAnAr3jelTChbVYC4Az85LCcKig90lDJ3EXyX9fRUd1cysgQ90wvmpL9suY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82a77791db0156b7-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

GET turboviplay.com/assets/icons/linea-icons/linea.css

104.21.26.91

200 OK

50 kB

URL GET HTTP/3
turboviplay.com/assets/icons/linea-icons/linea.css
IP
104.21.26.91:443
ASN
#13335 CLOUDFLARENET

Requested by
https://emturbovid.com/d/F5w4xqBSkHHu1bkoBRFF
Certificate
IssuerLet's Encrypt
Subjectturboviplay.com
Fingerprint67:06:8C:92:50:46:5B:13:71:C8:1F:C4:16:DA:05:A2:F4:7B:6F:31
ValidityFri, 27 Oct 2023 10:00:06 GMT - Thu, 25 Jan 2024 10:00:05 GMT

File type
ASCII text
Size
50 kB (49518 bytes)
Hash
ca72c190cda54fc132b85158c024d146
d600f87374328f102042516bc01dcc82f66e9cc9
93282f38776755cf75a044902922ca9824185892c68d49ee0cd1f424b8011b7a

HTTP Headers

GET /assets/icons/linea-icons/linea.css HTTP/1.1
Host: turboviplay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://turboviplay.com/frontend/css/style.css
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Thu, 23 Nov 2023 06:48:32 GMT
content-type: text/css
last-modified: Sun, 13 Jun 2021 14:34:28 GMT
etag: W/"60c61774-c16e"
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=h286FWpuoDFvumt3GhpgEMZc66jPF4QOfkG%2B6umyOmLIOiuOLNr5OGwNFzGFE52VGmUXndsfy%2FRBXvkoRT8jbWYjEf7WT2c1eoqJvCI0QXVddQN%2FyuitK2Hj1JQoEk%2BnUOY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82a77791db0556b7-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

GET emturbovid.com/d/F5w4xqBSkHHu1bkoBRFF

188.114.96.1

200 OK

14 kB

URL User Request GET HTTP/2
emturbovid.com/d/F5w4xqBSkHHu1bkoBRFF
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerGoogle Trust Services LLC
Subjectemturbovid.com
FingerprintBC:CD:F6:5B:79:C4:C3:23:D6:DC:55:15:00:36:DB:2D:46:41:1F:17
ValidityFri, 17 Nov 2023 12:37:19 GMT - Thu, 15 Feb 2024 12:37:18 GMT

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text
Size
14 kB (13452 bytes)
Hash
c4ee05fa3dbb5e21ab7fe6cde747fdf5
44adc2d67934aa741633776137151835ebf72be0
612f078942cd06a76e1fb2367d29b1299d98d967dd4afb6af813784f099eddd0

HTTP Headers

GET /d/F5w4xqBSkHHu1bkoBRFF HTTP/1.1
Host: emturbovid.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Thu, 23 Nov 2023 06:48:31 GMT
content-type: text/html; charset=UTF-8
x-powered-by: PHP/7.3.33
set-cookie: PHPSESSID=q84cuseja9pdp5nertmpp5cp84; path=/
XSRF-TOKEN=eyJpdiI6InRubml6dmtZb0pMdlVCQ01meDU1Z3c9PSIsInZhbHVlIjoiL1UyNnNyR0tGd2JDcnNHQ0FyN21XbGRFWXlwNXBQTmVyTW1TaGxCekh0dHllOTFmZHdOMStwcjR3bnAwUjN1ZkhhQzVqSEtxb0F2cVVOZ0J4QWMzT2ZGMWpkajF4UUZvNEVuN3JLcGQ4RFA5WnVaWlZxZHZEcHhqdTI2Rys2QVkiLCJtYWMiOiI2NjllZDc3Mzg3Yjc3OTY0OWI3N2U3NzQ2MjkwMjE0MGU3Y2ZiODk4ZDVjZDJiZDg3NDdiZDk1MmI1OTNiMzVmIn0%3D; expires=Thu, 23-Nov-2023 10:48:31 GMT; Max-Age=14400; path=/; samesite=lax
laravel_session=eyJpdiI6Ing2Y09NZEpJYnc2OFdod0NQY3lvMnc9PSIsInZhbHVlIjoiWjF5NStwbkFxVEV1Ri9tQUZ2T3Y5Q1RSMTRrWmdaQ0JkNE1DTjV4MzlGcFo1bWlCOSs2NVE2cDFlMzUzSnQrTG9lbWlnLzRSL09DK1Zjb3ZkczhELzRtVk9zSXozUFNad1EzcGI4ckJvTEptSVY1NzdrWnB2TlNUeEhMOVBMeUoiLCJtYWMiOiJjNWI0NGY1MWJmYzRlOTUwMWYxOTk1YTQyYTA1N2FlMjY4ZjM2ZWFlMGFlNjI2MWFlNWI0MzBhMjViZjlhMWUyIn0%3D; expires=Thu, 23-Nov-2023 10:48:31 GMT; Max-Age=14400; path=/; httponly; samesite=lax
expires: Thu, 19 Nov 1981 08:52:00 GMT, -1
cache-control: no-store, no-cache, must-revalidate, private, must-revalidate
pragma: no-cache, no-cache
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=AUMltAv1JSLm7XmdAsUUDpKst7LuSxwkMzHVEm1BM2rc%2BB2TNEEkgR0%2FTI1TA82x4CnRasdhjTUTvKqYi9Edh%2BN7SnV6TjzGgTp9bsxuiQcWrSK3kw4CTbCiLe7g9DBL6A%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82a7778c0d19b509-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

GET delivery.taroads.com/pub?id=286

172.67.144.19

200 OK

12 kB

URL GET HTTP/2
delivery.taroads.com/pub?id=286
IP
172.67.144.19:443
ASN
#13335 CLOUDFLARENET

Requested by
https://emturbovid.com/d/F5w4xqBSkHHu1bkoBRFF
Certificate
IssuerGoogle Trust Services LLC
Subjecttaroads.com
Fingerprint68:C5:2F:67:7F:24:A4:D6:18:D7:EE:76:01:BC:B2:AE:11:1A:CE:4A
ValidityFri, 29 Sep 2023 15:31:38 GMT - Thu, 28 Dec 2023 15:31:37 GMT

File type
ASCII text, with very long lines (12473)
Size
12 kB (12474 bytes)
Hash
5be1ada2533a0e9988936dee120d5824
1068f9c37114698b43c303a9f852573b8fec8e5c
8b3314f69d0311b9f5ab41d3f2bdf5cbeef43c9ec9e41a1876a07b9f3f4a7ce6

HTTP Headers

GET /pub?id=286 HTTP/1.1
Host: delivery.taroads.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://emturbovid.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Thu, 23 Nov 2023 06:48:31 GMT
content-type: text/javascript;charset=UTF-8
vary: Accept-Encoding
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=jsAB%2F3lPJK%2BkFaDYlfsAdb2nqh1KVyiLB4yUGIyjjjdyy5AVMC5Pf7mWKz8Hian3Rse5HT36Q5U9hOfxYFnsOoBxGVBskVQJCvOxHSdFSU8Zv1edhxmMfrKYpsXPpOnTWCK4NvmMEg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82a7778f3fdab523-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

GET turboviplay.com/frontend/css/style_rtl.css

104.21.26.91

200 OK

83 kB

URL GET HTTP/3
turboviplay.com/frontend/css/style_rtl.css
IP
104.21.26.91:443
ASN
#13335 CLOUDFLARENET

Requested by
https://emturbovid.com/d/F5w4xqBSkHHu1bkoBRFF
Certificate
IssuerLet's Encrypt
Subjectturboviplay.com
Fingerprint67:06:8C:92:50:46:5B:13:71:C8:1F:C4:16:DA:05:A2:F4:7B:6F:31
ValidityFri, 27 Oct 2023 10:00:06 GMT - Thu, 25 Jan 2024 10:00:05 GMT

File type
ASCII text
Size
83 kB (83339 bytes)
Hash
901e025d8510e8316d0243a2d294b992
7c905232f23cbcb6514013a58d41974bc891befb
48674365887e9c421879af0e143975f4647cf27af1ce318d63c1f2c3c4f21121

HTTP Headers

GET /frontend/css/style_rtl.css HTTP/1.1
Host: turboviplay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://turboviplay.com/frontend/css/style.css
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Thu, 23 Nov 2023 06:48:32 GMT
content-type: text/css
last-modified: Sun, 30 May 2021 16:05:13 GMT
etag: W/"60b3b7b9-1458b"
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=bQ6hPDHo%2BRJFefTAqyWwtr5oBLacjLijWGv9MnnVzM2Hl3AKGQHbQJAMT4M5ycHVQFy6050zHUakguW6c68G%2FESrODzjQCnl6Td3sdWHIRFKsIulqItZsZacMoxdlrO4Tz8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82a77791db0056b7-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

GET turboviplay.com/assets/icons/Ionicons/css/ionicons.css

104.21.26.91

200 OK

57 kB

URL GET HTTP/3
turboviplay.com/assets/icons/Ionicons/css/ionicons.css
IP
104.21.26.91:443
ASN
#13335 CLOUDFLARENET

Requested by
https://emturbovid.com/d/F5w4xqBSkHHu1bkoBRFF
Certificate
IssuerLet's Encrypt
Subjectturboviplay.com
Fingerprint67:06:8C:92:50:46:5B:13:71:C8:1F:C4:16:DA:05:A2:F4:7B:6F:31
ValidityFri, 27 Oct 2023 10:00:06 GMT - Thu, 25 Jan 2024 10:00:05 GMT

File type

Size
57 kB (57193 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /assets/icons/Ionicons/css/ionicons.css HTTP/1.1
Host: turboviplay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://turboviplay.com/frontend/css/style.css
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Thu, 23 Nov 2023 06:48:32 GMT
content-type: text/css
last-modified: Sun, 13 Jun 2021 14:33:49 GMT
etag: W/"60c6174d-df69"
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=JcL1l%2FDSiA6b1VEzngMBss2OHE395PJSBFNBxXzyfL3iHmOlRg1ONPFkMlwggYzJJfuoM811b5vtnJgEekqDIPjX%2BHcbVDjIzdoWaIhHP0G2hVGO6CKXmIn4aXZvc0I1xyY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82a77791db0356b7-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

GET fonts.googleapis.com/css?family=IBM+Plex+Sans:100,100i,200,200i,300,300i,400,400i,500,500i,600,600i,700,700i|Rubik:300,300i,400,400i,500,500i,700,700i,900,900i&display=swap

142.250.74.106

200 OK

51 kB

URL GET HTTP/2
fonts.googleapis.com/css?family=IBM+Plex+Sans:100,100i,200,200i,300,300i,400,400i,500,500i,600,600i,700,700i|Rubik:300,300i,400,400i,500,500i,700,700i,900,900i&display=swap
IP
142.250.74.106:443
ASN
#15169 GOOGLE

Requested by
https://emturbovid.com/d/F5w4xqBSkHHu1bkoBRFF
Certificate
IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
FingerprintCC:96:E0:52:E0:9B:EA:A9:A0:F8:88:9A:90:20:11:47:61:00:3C:42
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT

File type
ASCII text
Size
51 kB (50689 bytes)
Hash
f704f20a48cacaf69c8944fc138b229d
acfc1c5348c87bee40a01e79d541e8d5e5607b0d
1c7690e335b5c474643e19d526a407a88f6461cabf54c8657b5999f25369c03e

HTTP Headers

GET /css?family=IBM+Plex+Sans:100,100i,200,200i,300,300i,400,400i,500,500i,600,600i,700,700i|Rubik:300,300i,400,400i,500,500i,700,700i,900,900i&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://turboviplay.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Thu, 23 Nov 2023 06:48:32 GMT
date: Thu, 23 Nov 2023 06:48:32 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

GET turboviplay.com/assets/icons/iconsmind/style.css

104.21.26.91

200 OK

107 kB

URL GET HTTP/3
turboviplay.com/assets/icons/iconsmind/style.css
IP
104.21.26.91:443
ASN
#13335 CLOUDFLARENET

Requested by
https://emturbovid.com/d/F5w4xqBSkHHu1bkoBRFF
Certificate
IssuerLet's Encrypt
Subjectturboviplay.com
Fingerprint67:06:8C:92:50:46:5B:13:71:C8:1F:C4:16:DA:05:A2:F4:7B:6F:31
ValidityFri, 27 Oct 2023 10:00:06 GMT - Thu, 25 Jan 2024 10:00:05 GMT

File type
ASCII text
Size
107 kB (106949 bytes)
Hash
b656f3ec87f955b3f0198ecf20fd27a2
61e7fff5b3de46f01065dd1f4161dc76e43da074
7afbb05c630a192c7eea0138853a65e574ad895bbebcd41173d9a963da07399a

HTTP Headers

GET /assets/icons/iconsmind/style.css HTTP/1.1
Host: turboviplay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://turboviplay.com/frontend/css/style.css
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Thu, 23 Nov 2023 06:48:32 GMT
content-type: text/css
last-modified: Sun, 13 Jun 2021 14:33:48 GMT
etag: W/"60c6174c-1a1c5"
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=VIZ8SbnXbU5hA33OtKq6NFofcOIv3HHbWMrTQzOjVKqFaABaH9LEdFufmyq6hFilpEsPiNZZdmlyLSsrDxAAB0Ir%2FNf3%2BzQrUBb6ZNQXYwSCaOblBfL9qmYAisLNJTXol2E%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82a77791fb1c56b7-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

GET turboviplay.com/frontend/css/color_theme.css

104.21.26.91

200 OK

494 kB

URL GET HTTP/3
turboviplay.com/frontend/css/color_theme.css
IP
104.21.26.91:443
ASN
#13335 CLOUDFLARENET

Requested by
https://emturbovid.com/d/F5w4xqBSkHHu1bkoBRFF
Certificate
IssuerLet's Encrypt
Subjectturboviplay.com
Fingerprint67:06:8C:92:50:46:5B:13:71:C8:1F:C4:16:DA:05:A2:F4:7B:6F:31
ValidityFri, 27 Oct 2023 10:00:06 GMT - Thu, 25 Jan 2024 10:00:05 GMT

File type
ASCII text, with very long lines (9951), with CRLF line terminators
Size
494 kB (494549 bytes)
Hash
832a86b6ca48bd31d2ec10a337082d51
82acb9686ab51f18e2fddbdc419adf015d84d5aa
6944ced92dacd37e70fe90c62d6b663ab7168c284b90e7475d0375dc3a33c0b9

HTTP Headers

GET /frontend/css/color_theme.css HTTP/1.1
Host: turboviplay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://turboviplay.com/frontend/css/style.css
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Thu, 23 Nov 2023 06:48:32 GMT
content-type: text/css
last-modified: Sun, 13 Jun 2021 11:16:14 GMT
etag: W/"60c5e8fe-78bd5"
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=qYQY3n0TmZv%2B%2FzrgGAroUMGcSK589iVGZqDms5hI071k8uG31UKAKbF8IEneSnPoTjN9Q995B2ygjiiHBcfu1Eo7d2Ktbwz%2BTI6SWa4ylLcAyCh71t0aWN17EH5aTedsojI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82a77791dafe56b7-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

GET turboviplay.com/assets/icons/themify-icons/themify-icons.css

104.21.26.91

200 OK

18 kB

URL GET HTTP/3
turboviplay.com/assets/icons/themify-icons/themify-icons.css
IP
104.21.26.91:443
ASN
#13335 CLOUDFLARENET

Requested by
https://emturbovid.com/d/F5w4xqBSkHHu1bkoBRFF
Certificate
IssuerLet's Encrypt
Subjectturboviplay.com
Fingerprint67:06:8C:92:50:46:5B:13:71:C8:1F:C4:16:DA:05:A2:F4:7B:6F:31
ValidityFri, 27 Oct 2023 10:00:06 GMT - Thu, 25 Jan 2024 10:00:05 GMT

File type
ASCII text, with CRLF line terminators
Size
18 kB (17504 bytes)
Hash
e3640169d055602014664885649f9bff
06b553b5843d26af0d02dd8ea86ba829f26398ec
31f79b00718944ec9b7c7893844e636433bf36a69a50aa13327634660768ffab

HTTP Headers

GET /assets/icons/themify-icons/themify-icons.css HTTP/1.1
Host: turboviplay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://turboviplay.com/frontend/css/style.css
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Thu, 23 Nov 2023 06:48:32 GMT
content-type: text/css
last-modified: Sun, 13 Jun 2021 14:35:17 GMT
etag: W/"60c617a5-4460"
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=yDlPcdo8iURPYcIRiarxx22Zg4ZPPXf%2FvFpySSyY8gihyVcCUZRaUUGpGPOtILxY%2F1vkAonlu0f9SKqNW4feBFndJzE4IafjhbkbQ4VFoUIreaVZ3BE6ed58t%2BfmEH9CNNw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82a77791db0456b7-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

GET turboviplay.com/assets/icons/simple-line-icons/css/simple-line-icons.css

104.21.26.91

200 OK

11 kB

URL GET HTTP/3
turboviplay.com/assets/icons/simple-line-icons/css/simple-line-icons.css
IP
104.21.26.91:443
ASN
#13335 CLOUDFLARENET

Requested by
https://emturbovid.com/d/F5w4xqBSkHHu1bkoBRFF
Certificate
IssuerLet's Encrypt
Subjectturboviplay.com
Fingerprint67:06:8C:92:50:46:5B:13:71:C8:1F:C4:16:DA:05:A2:F4:7B:6F:31
ValidityFri, 27 Oct 2023 10:00:06 GMT - Thu, 25 Jan 2024 10:00:05 GMT

File type
troff or preprocessor input, ASCII text, with very long lines (360), with CRLF line terminators
Size
11 kB (10561 bytes)
Hash
79c809c318e8b3ca05307cd9cf8f5a06
dee6f07d4ded34ee654d6302826e7bf71e997bba
8ebde145c69f4b886d6d6e63bf5960031e7239d1b280b10e795ee5f8326d7818

HTTP Headers

GET /assets/icons/simple-line-icons/css/simple-line-icons.css HTTP/1.1
Host: turboviplay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://turboviplay.com/frontend/css/style.css
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Thu, 23 Nov 2023 06:48:32 GMT
content-type: text/css
last-modified: Sun, 13 Jun 2021 14:35:05 GMT
etag: W/"60c61799-2941"
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ZDnLAm5TzMmww0Snv3e3pxXkCbEAchdF2qjh4LK3Jv3QdojLoDmhUVXdSzGx0YOjdaK02sLIH%2BZ7agTlYFnA%2FbIbsoItcR48fJU1bo2h%2FNR3mulRtdgf1imk8tPikDi%2B0ho%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82a77791eb1456b7-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

GET turboviplay.com/assets/icons/icomoon/style.css

104.21.26.91

200 OK

107 kB

URL GET HTTP/3
turboviplay.com/assets/icons/icomoon/style.css
IP
104.21.26.91:443
ASN
#13335 CLOUDFLARENET

Requested by
https://emturbovid.com/d/F5w4xqBSkHHu1bkoBRFF
Certificate
IssuerLet's Encrypt
Subjectturboviplay.com
Fingerprint67:06:8C:92:50:46:5B:13:71:C8:1F:C4:16:DA:05:A2:F4:7B:6F:31
ValidityFri, 27 Oct 2023 10:00:06 GMT - Thu, 25 Jan 2024 10:00:05 GMT

File type
ASCII text, with CRLF line terminators
Size
107 kB (106754 bytes)
Hash
c148d2d3559690f7354e7aa8f9c51b3b
b8176adce9eb3543b8e9aef1e3c3453cb6c8af22
893bd7de0251e78be39fa7c09efa6cca10d6baeabc5e2623c23eef15b60d2c47

HTTP Headers

GET /assets/icons/icomoon/style.css HTTP/1.1
Host: turboviplay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://turboviplay.com/frontend/css/style.css
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Thu, 23 Nov 2023 06:48:32 GMT
content-type: text/css
last-modified: Sun, 13 Jun 2021 14:33:26 GMT
etag: W/"60c61736-1a102"
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=IO6fA8oOC7XKSP1T3dfXt%2BFPYqKppk9Hbrk5D3SWhNL8lZ37k20NHKZFhWp6lEHZA2cCiX2XdpyPvMjsZUoM7X%2BsIjjFcXQanjVflCIzPy6zeZKMqpwCJwRyKgQ0WMYXFFQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82a77791fb1d56b7-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

GET turboviplay.com/frontend/css/vendors_css.css

104.21.26.91

200 OK

541 B

URL GET HTTP/2
turboviplay.com/frontend/css/vendors_css.css
IP
104.21.26.91:443
ASN
#13335 CLOUDFLARENET

Requested by
https://emturbovid.com/d/F5w4xqBSkHHu1bkoBRFF
Certificate
IssuerLet's Encrypt
Subjectturboviplay.com
Fingerprint67:06:8C:92:50:46:5B:13:71:C8:1F:C4:16:DA:05:A2:F4:7B:6F:31
ValidityFri, 27 Oct 2023 10:00:06 GMT - Thu, 25 Jan 2024 10:00:05 GMT

File type
ASCII text, with very long lines (553), with no line terminators
Size
541 B (541 bytes)
Hash
4412a6cc6bca19ae3769c6cd7f24531a
11fd36361330ab0921e14322cbc7814a2b599ed8
71bf8528d23b9b6d9eaf898c53ba82c1b863cf655164cd9bdf749896a6bedb18

HTTP Headers

GET /frontend/css/vendors_css.css HTTP/1.1
Host: turboviplay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://emturbovid.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Thu, 23 Nov 2023 06:48:32 GMT
content-type: text/css
last-modified: Tue, 29 Jun 2021 16:29:25 GMT
etag: W/"60db4a65-21d"
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=bQs48VnwA1kCrVx%2B%2FDbdzMxDG%2F9OZBpgDJtbBvDL6GdUoh2kBiuRI9i%2F%2F9mtgN5Hrgu48NmbDWDX0%2FpPrG3%2BTXdgFGXOXB8IFWTXmNwjvEMRxwNnE0PTp0LJqRT9YX%2BdLEM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82a7778fc8d8b51b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

GET turboviplay.com/frontend/css/skin_color.css

104.21.26.91

200 OK

44 kB

URL GET HTTP/2
turboviplay.com/frontend/css/skin_color.css
IP
104.21.26.91:443
ASN
#13335 CLOUDFLARENET

Requested by
https://emturbovid.com/d/F5w4xqBSkHHu1bkoBRFF
Certificate
IssuerLet's Encrypt
Subjectturboviplay.com
Fingerprint67:06:8C:92:50:46:5B:13:71:C8:1F:C4:16:DA:05:A2:F4:7B:6F:31
ValidityFri, 27 Oct 2023 10:00:06 GMT - Thu, 25 Jan 2024 10:00:05 GMT

File type
ASCII text, with very long lines (928), with CRLF line terminators
Size
44 kB (43577 bytes)
Hash
f43ee057dd2f163e494bb03b244a1897
064c0e66b2e0e37ab79e12b3517633ac06386ff3
f4826336b2c5d4c98d2ccab81e3a22742b95fcf435cc300b3a7380709445dd21

HTTP Headers

GET /frontend/css/skin_color.css HTTP/1.1
Host: turboviplay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://emturbovid.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Thu, 23 Nov 2023 06:48:32 GMT
content-type: text/css
last-modified: Sun, 13 Jun 2021 11:12:05 GMT
etag: W/"60c5e805-aa39"
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=OdNwNZXRnNDl2hoxHG8otWEE%2BJAmwd%2FnNs3F2N2CmtGg%2FKDunF3Radwpu53364qP7fN1zUSY5Df9XhRgqb3QEUWdbJyUWVbuTIgFm31vQIi4kVsK71vqEtb0d7Tp2iPyJtU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82a7778fc8dcb51b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

GET ophoacit.com/1?z=5505405

139.45.197.242

200 OK

43 kB

URL GET HTTP/2
ophoacit.com/1?z=5505405
IP
139.45.197.242:443
ASN
#9002 RETN Limited

Requested by
https://emturbovid.com/d/F5w4xqBSkHHu1bkoBRFF
Certificate
IssuerLet's Encrypt
Subjectophoacit.com
FingerprintA3:E8:B3:CC:1F:21:E2:0D:45:2D:EC:97:79:3A:6F:C8:1B:1A:49:AF
ValiditySun, 12 Nov 2023 11:21:31 GMT - Sat, 10 Feb 2024 11:21:30 GMT

File type
ASCII text, with very long lines (41880)
Size
43 kB (42869 bytes)
Hash
8746de4acd32f7befd3e6f94af6aa342
625739f0207c0caff5caae48525dec84421b9d2c
dd135e9c4add2d72acc34f3bbf29423d2b2adfc05dc76497333d7a44702488e5

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /1?z=5505405 HTTP/1.1
Host: ophoacit.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://emturbovid.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Thu, 23 Nov 2023 06:48:32 GMT
content-type: text/javascript
access-control-allow-credentials: true
access-control-allow-origin: 
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-Sc, CVERSION, VERSION, X-Ancestor-Origins, X-Zone-ID, baggage, sentry-trace
x-trace-id: 22e16b000a34695be89dcc56c3e0d0aa
access-control-expose-headers: X-Sc
x-sc: dg7EAbZh1ACq78iqeUeTaZwXs0woTAjtMNSQNV0ItA08fVliKCMcAXmfdyR_SSWwoNySTy4H57ySOc_1GjhIU-3-2fI=
set-cookie: scm=1; expires=Fri, 22 Nov 2024 06:48:32 GMT; secure; SameSite=None
OAID=abcc5495d4cf465289a6dbe2692db5b3; expires=Fri, 22 Nov 2024 06:48:32 GMT; secure; SameSite=None
oaidts=1700722112; expires=Fri, 22 Nov 2024 06:48:32 GMT; secure; SameSite=None
pragma: no-cache
cache-control: no-store, no-cache, must-revalidate, max-age=0
expires: Mon, 26 Jul 1997 05:00:00 GMT
content-encoding: gzip
X-Firefox-Spdy: h2

GET ophoacit.com/27/39653016ed3838f52799d5a37b076ca1

139.45.197.242

200 OK

413 kB

URL GET HTTP/2
ophoacit.com/27/39653016ed3838f52799d5a37b076ca1
IP
139.45.197.242:443
ASN
#9002 RETN Limited

Requested by
https://emturbovid.com/d/F5w4xqBSkHHu1bkoBRFF
Certificate
IssuerLet's Encrypt
Subjectophoacit.com
FingerprintA3:E8:B3:CC:1F:21:E2:0D:45:2D:EC:97:79:3A:6F:C8:1B:1A:49:AF
ValiditySun, 12 Nov 2023 11:21:31 GMT - Sat, 10 Feb 2024 11:21:30 GMT

File type
ASCII text, with very long lines (65523)
Size
413 kB (412774 bytes)
Hash
259cd94db537940a70dbbe0127bfab0b
aa1fde60dd6d25fdb09b95573ebf030982fb44de
b6bdd2659613157c49005c97485b57cf1c494001fc52ae839c71ce411e032483

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /27/39653016ed3838f52799d5a37b076ca1 HTTP/1.1
Host: ophoacit.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://emturbovid.com/
Cookie: scm=1; OAID=abcc5495d4cf465289a6dbe2692db5b3; oaidts=1700722112
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Thu, 23 Nov 2023 06:48:32 GMT
content-type: application/javascript
access-control-allow-credentials: true
access-control-allow-origin: 
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-Sc, CVERSION, VERSION, X-Ancestor-Origins, X-Zone-ID, baggage, sentry-trace
x-trace-id: 9352bcb6e516aeff7aa0f7bdd7c8dd7b
cache-control: max-age:290304000, public
last-modified: Mon, 20 Nov 2023 06:43:10 GMT
expires: Mon, 20 Dec 2083 06:43:10 GMT
access-control-expose-headers: X-Sc
strict-transport-security: max-age=1
x-content-type-options: nosniff
content-encoding: gzip
X-Firefox-Spdy: h2

GET turboviplay.com/frontend/css/upload.css

104.21.26.91

200 OK

5.7 kB

URL GET HTTP/2
turboviplay.com/frontend/css/upload.css
IP
104.21.26.91:443
ASN
#13335 CLOUDFLARENET

Requested by
https://emturbovid.com/d/F5w4xqBSkHHu1bkoBRFF
Certificate
IssuerLet's Encrypt
Subjectturboviplay.com
Fingerprint67:06:8C:92:50:46:5B:13:71:C8:1F:C4:16:DA:05:A2:F4:7B:6F:31
ValidityFri, 27 Oct 2023 10:00:06 GMT - Thu, 25 Jan 2024 10:00:05 GMT

File type
ASCII text, with very long lines (5925), with no line terminators
Size
5.7 kB (5661 bytes)
Hash
4aaca94a0e3664247d40836e18b1e6af
ee836fee79bf220f1520930bdfc3b1a9e8a7cb35
bad4398bed7a71859991cbff4c659402169673d0deae9206050689b9b5f4bcbb

HTTP Headers

GET /frontend/css/upload.css HTTP/1.1
Host: turboviplay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://emturbovid.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Thu, 23 Nov 2023 06:48:32 GMT
content-type: text/css
last-modified: Thu, 25 Nov 2021 16:10:24 GMT
etag: W/"619fb570-161d"
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ThXZan1xHxMs0VtSxd%2BqQYUt%2BK40I28yT1E9d6dZlAPOwiPMDsRP1P8p66kM%2BpLCgDOYvkCdxAWkTOdBehTDCLEZDAgh0xopqBwv9bv8riVRmdmV7WImHBXsnmnyRYAv7d4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82a7778fe8e6b51b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

GET turboviplay.com/frontend/css/style.css

104.21.26.91

200 OK

702 kB

URL GET HTTP/2
turboviplay.com/frontend/css/style.css
IP
104.21.26.91:443
ASN
#13335 CLOUDFLARENET

Requested by
https://emturbovid.com/d/F5w4xqBSkHHu1bkoBRFF
Certificate
IssuerLet's Encrypt
Subjectturboviplay.com
Fingerprint67:06:8C:92:50:46:5B:13:71:C8:1F:C4:16:DA:05:A2:F4:7B:6F:31
ValidityFri, 27 Oct 2023 10:00:06 GMT - Thu, 25 Jan 2024 10:00:05 GMT

File type
ASCII text
Size
702 kB (702128 bytes)
Hash
f6910616763fefda6a6f32f2234886d4
8b64a4e613eb965bd562a97da6168b36b4ccc841
51f66e3a83b4444df3a283f446adfe04bd893a7a9bf223aac570165f613c040c

HTTP Headers

GET /frontend/css/style.css HTTP/1.1
Host: turboviplay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://emturbovid.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Thu, 23 Nov 2023 06:48:32 GMT
content-type: text/css
last-modified: Tue, 08 Aug 2023 13:35:14 GMT
etag: W/"64d24492-ab6b0"
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=nKydLCLXIavZhdgYpoZjJr1nLiV27PvFcDHtdrGyg4bbapGrPxlG52SsfgXMjvX1bZ2zLOtGYW3KitY%2FuXDYKWN27e8G%2FP97i9m%2B6gs9hyydN4TdfacY5q6iHyTMjpOOexA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82a7778fd8e1b51b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

GET turboviplay.com/assets/icons/glyphicons/glyphicon.css

104.21.26.91

200 OK

15 kB

URL GET HTTP/3
turboviplay.com/assets/icons/glyphicons/glyphicon.css
IP
104.21.26.91:443
ASN
#13335 CLOUDFLARENET

Requested by
https://emturbovid.com/d/F5w4xqBSkHHu1bkoBRFF
Certificate
IssuerLet's Encrypt
Subjectturboviplay.com
Fingerprint67:06:8C:92:50:46:5B:13:71:C8:1F:C4:16:DA:05:A2:F4:7B:6F:31
ValidityFri, 27 Oct 2023 10:00:06 GMT - Thu, 25 Jan 2024 10:00:05 GMT

File type
ASCII text, with very long lines (341), with CRLF line terminators
Size
15 kB (15028 bytes)
Hash
85cd38be622bf1ea8867d67f701806e8
1a8ded01c6dc082db125f84d56856094e24dc7f6
9ddc864e2fd0d24948acd9ed091941dd0644b77482888615e5abb1f7875cfe8a

HTTP Headers

GET /assets/icons/glyphicons/glyphicon.css HTTP/1.1
Host: turboviplay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://turboviplay.com/frontend/css/style.css
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Thu, 23 Nov 2023 06:48:32 GMT
content-type: text/css
last-modified: Sun, 13 Jun 2021 14:32:57 GMT
etag: W/"60c61719-3ab4"
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=qwApQjAshXIQvNxsOpxF%2FEHrf2pkzwqiUyryI5ilpL5HXGSeSEQLEon6VhqQVqcgXpR%2FBZIGbNjL0h99D%2FSFDNj3SKI7i4sRnXRUMVZRbYyOQQB5RlPrW1kBErxIZC3Yis8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82a77791db0656b7-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

GET turboviplay.com/assets/icons/flag-icon-css/css/flag-icon.css

104.21.26.91

200 OK

38 kB

URL GET HTTP/3
turboviplay.com/assets/icons/flag-icon-css/css/flag-icon.css
IP
104.21.26.91:443
ASN
#13335 CLOUDFLARENET

Requested by
https://emturbovid.com/d/F5w4xqBSkHHu1bkoBRFF
Certificate
IssuerLet's Encrypt
Subjectturboviplay.com
Fingerprint67:06:8C:92:50:46:5B:13:71:C8:1F:C4:16:DA:05:A2:F4:7B:6F:31
ValidityFri, 27 Oct 2023 10:00:06 GMT - Thu, 25 Jan 2024 10:00:05 GMT

File type
ASCII text
Size
38 kB (37848 bytes)
Hash
216e807dd0b784846799cb18051f250d
e01ef3dfa09c24f2692e0b8b9d57b2e25eeb4f48
f4c6d858f9444d1603c69ae3416514024894e89b50698d44bacb71416750c219

HTTP Headers

GET /assets/icons/flag-icon-css/css/flag-icon.css HTTP/1.1
Host: turboviplay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://turboviplay.com/frontend/css/style.css
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Thu, 23 Nov 2023 06:48:32 GMT
content-type: text/css
last-modified: Sun, 13 Jun 2021 14:26:20 GMT
etag: W/"60c6158c-93d8"
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=9xuqdan%2FqDUYN7ShI3cRNeRyt6%2F5Z28xjyw%2BC9JTBN8F4P2D9rV1vEqvpnHOdL5VbM7B2%2FcUvf5Y2Zq3rpFpWmZteCTQpFU7of6xMWWIAwnOlgzJUB3KGapCxU5%2F1VX3QSk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82a77791db0856b7-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (7)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (35)

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP