dlhd.sx/embed/stream-464.php
200 OK 24 kB URL User Request GET HTTP/2 dlhd.sx/embed/stream-464.php
IP
Certificate IssuerGoogle Trust Services LLC
Subjectdlhd.sx
Fingerprint76:51:2D:5A:03:3C:EC:40:F6:2B:C4:26:97:0D:73:F6:FC:37:9C:83
ValidityThu, 19 Oct 2023 17:12:12 GMT - Wed, 17 Jan 2024 17:12:11 GMT
File type HTML document text
- HTML document text
- HTML document text
- HTML document text
- HTML document text
- exported SGML document, ASCII text, with very long lines (53698), with CRLF, LF line terminators
Hash 7a675044f7f575cf5698b494fe94083b
cda1c8981d08ee800becbfe5fcfac3245c63a052
f4de6ca92bfea7c48893967dba4b39a48b7eef69ec11c3df66ca67fa0ec008cc
GET /embed/stream-464.php HTTP/1.1
Host: dlhd.sx
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 11 Dec 2023 07:55:37 GMT
content-type: text/html; charset=UTF-8
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=c0R7hwhjQuyDPHao2INIDtGwQ%2BVzaonRIxeNn%2FOcztfSdI%2Bpmvdrp53uNy0HeJ4USDjkxvjB2hMreF62R2vgWu5OrtzRkLxE0BJNuStUvXqtkAUQ093dn4Kw"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 833c2a979a080b02-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
xd.awashemeers.com/rSDwGOn9YSKf/oRBvJ
200 OK 20 B URL GET HTTP/1.1 xd.awashemeers.com/rSDwGOn9YSKf/oRBvJ
IP
Requested by https://dlhd.sx/embed/stream-464.php
Certificate IssuerLet's Encrypt
Subjectxd.awashemeers.com
Fingerprint2F:C8:2F:2A:87:03:29:41:5B:E0:18:9C:A7:BC:F5:30:66:F7:67:BD
ValiditySat, 11 Nov 2023 23:10:07 GMT - Fri, 09 Feb 2024 23:10:06 GMT
File type gzip compressed data, from Unix
- data
Hash 7029066c27ac6f5ef18d660d5741979a
46c6643f07aa7f6bfe7118de926b86defc5087c4
59869db34853933b239f1e2219cf7d431da006aa919635478511fabbfc8849d2
GET /rSDwGOn9YSKf/oRBvJ HTTP/1.1
Host: xd.awashemeers.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dlhd.sx/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 11 Dec 2023 07:55:38 GMT
Content-Type: application/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=20
Accept-ch: sec-ch-ua-platform-version,sec-ch-ua-model,sec-ch-ua-full-version
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://dlhd.sx
Access-Control-Allow-Headers: content-type, megageocheckolololo, x-forwarded-for, x-requested-with, cache-control, pragma, expires
Access-Control-Max-Age: 600
Access-Control-Allow-Methods: GET, POST, OPTIONS
Set-Cookie: GL_UI4=eJw9zV1OhDAcBHC%2BWXVBJ%2BEAHqFVQXz0Za%2FgIyntH6wL7aZU0NtLTPRtMvlNJgiCqLpFuGYp4k9R414NvJGs5fKhfmRNUz8JRkPfvvTtc8MFa3Gll86LfiKf4LDMwvnOrwmOIxlyWnbSKipwt6u%2F5mzsZhKkvRNGFUjnXUwF8t7ZbSFXxUiMmAn5STsa7NcuxId1iDmr96zNnkOGyC5VXF4jf9NG7cvyiIizsswC3Fwm4Qfr5k6rLEQ6OqEI4SsOUngarftGrmg5e3sB7KS6f%2F97HG%2BcIVO0aklIrX8n9wNBjE5s; expires=Tue, 12-Dec-2023 07:55:38 GMT; Max-Age=86400; path=/; secure; SameSite=None
GL_GI10=eJwViE0KgzAUBvMeJVAqhY96AE%2BQamsXbmuXRReewGopgZBIEvtz%2B%2BpiBmaEEJwmYD0hqQpV5ao8qeJSgl7gpgUPFrJx%2FtP%2FQB6cn8HeYtcG47LazTYuf8BmbZDG%2Fmr0N%2BucmaN2NoAXtnX%2FMM%2FjrbuDJkng6FaHMRWgtzz8AV7hHdE%3D; expires=Tue, 12-Dec-2023 07:55:38 GMT; Max-Age=86400; path=/; secure; SameSite=None
Content-Encoding: gzip
Vary: Accept-Encoding
Strict-Transport-Security: max-age=1
X-Content-Type-Options: nosniff
phrasespokesmansurmise.com/dd/d4/30/ddd430767cdbddd8ac0726a842abd6c0.js
200 OK 25 kB URL GET HTTP/1.1 phrasespokesmansurmise.com/dd/d4/30/ddd430767cdbddd8ac0726a842abd6c0.js
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://dlhd.sx/embed/stream-464.php
Certificate IssuerLet's Encrypt
Subjectphrasespokesmansurmise.com
Fingerprint7E:37:0C:B7:06:A7:24:1D:07:DE:1B:80:70:F4:A4:3A:97:94:ED:D1
ValidityFri, 13 Oct 2023 10:50:21 GMT - Thu, 11 Jan 2024 10:50:20 GMT
File type ASCII text, with very long lines (62005)
Hash 5ae4685c92163e43291e5ca707ffb060
4e855f7e53092d0d0c567e56418916dd61f5c54d
04c96803ac6b833ecb57fa44ee8fed4b9b49bbc02ea4f4c2d739ea03a099c2f3
GET /dd/d4/30/ddd430767cdbddd8ac0726a842abd6c0.js HTTP/1.1
Host: phrasespokesmansurmise.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dlhd.sx/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Mon, 11 Dec 2023 07:55:39 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Set-Cookie: 4b4e7ab587d59b22ad7bcd2439afc363_CF-2805_0=0; expires=Thu, 14 Dec 2023 15:55:39 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: ebbc619465c72208f7ff13a65e187ab0
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
ocsp.r2m03.amazontrust.com/
471 B URL ocsp.r2m03.amazontrust.com/
IP
Hash 96552eabde11de2bf102b6f30726382e
8585db2448c4a8ede1369391bae9fe27cb3e32e9
2526b3a0ea085f5725995c79d90ee3490ebdd198836f628be6edfeabdf005a3d
POST / HTTP/1.1
Host: ocsp.r2m03.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=7200
Date: Mon, 11 Dec 2023 07:55:40 GMT
Last-Modified: Mon, 11 Dec 2023 06:33:36 GMT
Server: ECAcc (ska/F791)
X-Cache: Miss from cloudfront
Via: 1.1 f66e3db0f0449307dba3fbf72bbf3bac.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: -5fTXGBZKrssZeOx0jgClYxEH5nO4BvAlTtMVlnyzj0gwizjQKXczg==
Age: 4924
nsjyfpo.com/script/suv5.js
200 OK 33 kB URL GET HTTP/3 nsjyfpo.com/script/suv5.js
IP
Requested by https://dlhd.sx/embed/stream-464.php
Certificate IssuerGoogle Trust Services LLC
Subjectnsjyfpo.com
Fingerprint74:A6:20:2C:D1:2C:27:ED:B9:B3:BC:0B:48:F3:00:1D:20:45:45:2F
ValidityTue, 05 Dec 2023 18:36:01 GMT - Mon, 04 Mar 2024 18:36:00 GMT
File type Unicode text, UTF-8 text, with very long lines (65442)
Hash fe85f0affad429f5413cd601a475b728
88b8cee8368b6b943d1ddd5be8b9c441f63ef580
25ab5707f8caa81d4c8ef4d9373254d130c294ed2ee997c807e068b149fdb4e8
GET /script/suv5.js HTTP/1.1
Host: nsjyfpo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dlhd.sx/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 11 Dec 2023 07:55:38 GMT
content-type: text/javascript
x-guploader-uploadid: ABPtcPopWswW3ekIS8dWmuCHMcaHu4U4S4kdaZXj-PqARDi9-yI5ZPQvXcuIpvHKCMr4MqCrhqY
x-goog-generation: 1701698677261682
x-goog-metageneration: 2
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 97361
x-goog-hash: crc32c=4eu5MA==, md5=/oXwr/rUKfVBPNYBpHW3KA==
x-goog-storage-class: MULTI_REGIONAL
access-control-allow-origin: *
expires: Mon, 11 Dec 2023 08:26:03 GMT
cache-control: public, max-age=14400
age: 1775
last-modified: Mon, 04 Dec 2023 14:04:37 GMT
etag: W/"fe85f0affad429f5413cd601a475b728"
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=YgkABwzs9VmdkRmBm9lxm5oYmWm4flclibqk3WDvHcnOGVfjEvB9HwNcUps1KnaaEjFDy6tvHWZHK4%2FSDIuRkzOb06nSu0YoyAIxB5v50Rf5n7CLEYO%2BAYF%2Blha3ng%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 833c2a9d6fbb1c06-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
proftrafficcounter.com/stats
200 OK 40 B URL GET HTTP/2 proftrafficcounter.com/stats
IP
Requested by https://dlhd.sx/embed/stream-464.php
Certificate IssuerAmazon
Subjectproftrafficcounter.com
FingerprintE3:9F:79:6F:80:C0:BF:F8:C4:EB:45:F3:E9:0F:A7:41:F6:0C:05:E6
ValidityTue, 21 Nov 2023 00:00:00 GMT - Thu, 19 Dec 2024 23:59:59 GMT
File type ASCII text, with no line terminators
Hash 8c0b0f6c014f68e1574bb0813167c84f
fc0b40101de94fc3f39e12746ad299464744d421
f9bd6fcca9f61713b9f016226627bf67e4e96bd0116b81480b75ad128c86323c
GET /stats HTTP/1.1
Host: proftrafficcounter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://dlhd.sx
DNT: 1
Connection: keep-alive
Referer: https://dlhd.sx/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 11 Dec 2023 07:55:40 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: https://dlhd.sx
vary: Origin
access-control-allow-credentials: true
set-cookie: uid_id2=4fee4ce3-3ab7-4dfe-ae97-b364b3283857:2:1; expires=Thu, 08 Dec 2033 07:55:40 GMT; secure; SameSite=None
X-Firefox-Spdy: h2
nukeluck.net/tag.min.js
200 OK 26 kB IP
Requested by https://dlhd.sx/embed/stream-464.php
Certificate IssuerLet's Encrypt
Subjectnukeluck.net
Fingerprint10:9E:8F:E3:6A:F8:48:21:94:4C:23:4D:4E:96:D5:07:46:36:8E:4F
ValiditySun, 08 Oct 2023 09:09:43 GMT - Sat, 06 Jan 2024 09:09:42 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Hash bb657d1047756d414ca6f954c6d8bb09
7f0be8ba49b51f627cf197b1a312684b9e37a3cc
d832287476725c8d9631f8a146e42631811e0db07ec426eabf8b02292803521e
GET /tag.min.js HTTP/1.1
Host: nukeluck.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dlhd.sx/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 11 Dec 2023 07:55:40 GMT
content-type: text/javascript; charset=utf-8
content-length: 25676
content-encoding: br
x-trace-id: f105a775240f1f264a93b742c02570a9
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
accept-ranges: bytes
last-modified: Sun, 10 Dec 2023 21:43:50 GMT
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Wow64
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace
access-control-max-age: 86400
pragma: no-cache
expires: Tue, 11 Jan 1994 10:00:00 GMT
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
pubtrky.com/ut/hb.php?cb=0.07889029892941057&v=1
204 No Content 0 B URL POST HTTP/2 pubtrky.com/ut/hb.php?cb=0.07889029892941057&v=1
IP
Requested by https://dlhd.sx/embed/stream-464.php
Certificate IssuerGoogle Trust Services LLC
Subjectpubtrky.com
FingerprintA5:A1:14:4B:51:48:70:73:A4:B5:3C:89:63:1B:21:45:6C:F5:96:8E
ValidityTue, 21 Nov 2023 10:09:43 GMT - Mon, 19 Feb 2024 10:09:42 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /ut/hb.php?cb=0.07889029892941057&v=1 HTTP/1.1
Host: pubtrky.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain; charset=utf-8
Content-Length: 722
Origin: https://dlhd.sx
DNT: 1
Connection: keep-alive
Referer: https://dlhd.sx/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
date: Mon, 11 Dec 2023 07:55:40 GMT
access-control-allow-origin: *
via: 1.1 google
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=MLNw%2Bh7TSvMdoFLvohfsBXbkjTTfLJyzgCVVKfiAEss46Fnr4DzDKVG9uz6Te7bPOvIVJ5%2BCcQDdbI0QexHYZZWdlpKe1BDq57GRtF9GX8CCs68utVJ8wo%2F97XUFgA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 833c2aaa8b61b50c-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
banquetunarmedgrater.com/advertisers.js
200 OK 0 B URL GET HTTP/2 banquetunarmedgrater.com/advertisers.js
IP
Requested by https://dlhd.sx/embed/stream-464.php
Certificate IssuerGoogle Trust Services LLC
Subjectbanquetunarmedgrater.com
Fingerprint92:8E:AD:72:AC:AD:3B:21:99:CD:21:A0:9F:BD:F2:AF:0D:98:D8:57
ValidityThu, 09 Nov 2023 11:40:15 GMT - Wed, 07 Feb 2024 11:40:14 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /advertisers.js HTTP/1.1
Host: banquetunarmedgrater.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dlhd.sx/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 11 Dec 2023 07:55:40 GMT
content-type: application/javascript
content-length: 0
expires: Thu, 01 Jan 1970 00:00:01 GMT
cache-control: max-age=172800
x-request-id: 11ca31b8e299330d4ee1f7964dae61be
strict-transport-security: max-age=0; includeSubdomains
cf-cache-status: EXPIRED
last-modified: Mon, 11 Dec 2023 07:55:39 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=yuG7QZuwv5lr%2BgaI9ws9hJaWRL6VpQ9PLWH3SFvWfTX8C8vIW0TJvuzsjxQNnIlBcAar2Z17bshRmRfV08sMG7aCeP3McyeP0kLDh0aFMuH7hNfl84P0ltDKK4jIWKupdKbOijq70KkJ2X4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 833c2aaaaf8c0b59-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
code.jquery.com/jquery-3.6.0.min.js
200 OK 31 kB URL GET HTTP/2 code.jquery.com/jquery-3.6.0.min.js
IP
Requested by https://weblivehdplay.ru/premiumtv/daddyhd.php?id=464
Certificate IssuerSectigo Limited
Subject*.jquery.com
FingerprintD2:19:0A:AD:CE:BB:9C:61:17:5D:29:4B:A2:54:E8:C6:91:B8:F9:8D
ValidityTue, 11 Jul 2023 00:00:00 GMT - Sun, 14 Jul 2024 23:59:59 GMT
File type ASCII text, with very long lines (65447)
Hash 8fb8fee4fcc3cc86ff6c724154c49c42
b82d238d4e31fdf618bae8ac11a6c812c03dd0d4
ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e
GET /jquery-3.6.0.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://weblivehdplay.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Fri, 18 Oct 1991 12:00:00 GMT
etag: W/"28feccc0-15d9d"
cache-control: public, max-age=31536000, stale-while-revalidate=604800
access-control-allow-origin: *
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Mon, 11 Dec 2023 07:55:40 GMT
age: 1678723
x-served-by: cache-lga21931-LGA, cache-bma1639-BMA
x-cache: HIT, HIT
x-cache-hits: 14, 438514
x-timer: S1702281341.757433,VS0,VE0
vary: Accept-Encoding
content-length: 30875
X-Firefox-Spdy: h2
weblivehdplay.ru/blast.js
200 OK 29 kB URL GET HTTP/3 weblivehdplay.ru/blast.js
IP
Requested by https://weblivehdplay.ru/premiumtv/daddyhd.php?id=464
Certificate IssuerLet's Encrypt
Subjectweblivehdplay.ru
Fingerprint75:CC:BB:75:29:0C:A0:84:3E:66:42:03:4A:12:61:9E:BA:F3:75:8A
ValiditySun, 03 Dec 2023 11:46:52 GMT - Sat, 02 Mar 2024 11:46:51 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Hash 091faec928970e76d37a3601c19fcf8a
6441e8eebe90eb8d4a40e7c25440ff99caba3520
eb06375118b1eb73f43b8f1851472008f84999a1b27359c075bf5da6feef9a12
GET /blast.js HTTP/1.1
Host: weblivehdplay.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://weblivehdplay.ru/premiumtv/daddyhd.php?id=464
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 11 Dec 2023 07:55:40 GMT
content-type: application/javascript
last-modified: Mon, 27 Nov 2023 16:16:01 GMT
etag: W/"6564c0c1-13040"
cache-control: max-age=14400
cf-cache-status: HIT
age: 2474
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=SN2gn0jbIkaC50Exx3fywgEA3lpjNi22UN5mZtAmvkyzAElt98LzXIckkyxsldWdLQT1vLDIDTOyt41Ickl%2By%2FqhmmH6DNkRKZ%2Btib%2F8MRTtaTXdXHbJNIMq9WuXdqINcfr2"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 833c2aab5af1712f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
velocitypaperwork.com/pixel/purst?dl=0&th=0&sc=0&rs=2672&rd=2672&fd=2224&bv=23.12.v.1&tmpl=70
200 OK 0 B URL GET HTTP/1.1 velocitypaperwork.com/pixel/purst?dl=0&th=0&sc=0&rs=2672&rd=2672&fd=2224&bv=23.12.v.1&tmpl=70
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://dlhd.sx/embed/stream-464.php
Certificate IssuerLet's Encrypt
Subjectvelocitypaperwork.com
FingerprintBB:1C:CD:38:B3:C7:50:D5:4F:08:F7:BF:74:BF:40:9A:C5:26:0B:2E
ValidityMon, 27 Nov 2023 14:42:13 GMT - Sun, 25 Feb 2024 14:42:12 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pixel/purst?dl=0&th=0&sc=0&rs=2672&rd=2672&fd=2224&bv=23.12.v.1&tmpl=70 HTTP/1.1
Host: velocitypaperwork.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dlhd.sx/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Mon, 11 Dec 2023 07:55:40 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
weblivehdplay.ru/premiumtv/daddyhd.php?id=464
200 OK 37 kB URL GET HTTP/2 weblivehdplay.ru/premiumtv/daddyhd.php?id=464
IP
Requested by https://dlhd.sx/embed/stream-464.php
Certificate IssuerLet's Encrypt
Subjectweblivehdplay.ru
Fingerprint75:CC:BB:75:29:0C:A0:84:3E:66:42:03:4A:12:61:9E:BA:F3:75:8A
ValiditySun, 03 Dec 2023 11:46:52 GMT - Sat, 02 Mar 2024 11:46:51 GMT
File type gzip compressed data, max speed, from Unix
- data
Hash c90e8b48975b3ebfd517fa8d0e487b59
0781854da2595ec3aeb81b7be1930f9773905efd
56ec17d89647f1b84b4dab76af1b34ff22457f020d9cc898198ae81af610ea76
GET /premiumtv/daddyhd.php?id=464 HTTP/1.1
Host: weblivehdplay.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dlhd.sx/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 11 Dec 2023 07:55:40 GMT
content-type: text/html; charset=UTF-8
cache-control: public, max-age=14400, immutable, no-transform
node: PHP
content-encoding: gzip
cf-cache-status: EXPIRED
last-modified: Fri, 08 Dec 2023 17:57:56 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=fh6Z1%2FunsMntuqgWC5y2%2FLJGDx%2B%2BssTJX%2FSX9SxP2US7ipljHnBusr%2BcymfL6Q1Up8%2BkmtCGHErkzpQ9J9y5y7iWcb0LjAKoOF4YIicKFkEMdMEMN%2F4agI8rR%2BSuhbfg77x%2F"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 833c2aa92b975687-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
velocitypaperwork.com/18/43/01/1843019bf263f39accf339e8c46780a9.js
200 OK 15 kB URL GET HTTP/1.1 velocitypaperwork.com/18/43/01/1843019bf263f39accf339e8c46780a9.js
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://dlhd.sx/embed/stream-464.php
Certificate IssuerLet's Encrypt
Subjectvelocitypaperwork.com
FingerprintBB:1C:CD:38:B3:C7:50:D5:4F:08:F7:BF:74:BF:40:9A:C5:26:0B:2E
ValidityMon, 27 Nov 2023 14:42:13 GMT - Sun, 25 Feb 2024 14:42:12 GMT
File type ASCII text, with very long lines (42228), with no line terminators
Hash 984412268b70699507f49be6babd9b0b
27700d4c2f8ab528ed286777d7a5fb689a6e0b65
d123db0a61b5552c8f73ca12964cdf2c4b6f1310ab68546b9a9bef685a9eff2e
GET /18/43/01/1843019bf263f39accf339e8c46780a9.js HTTP/1.1
Host: velocitypaperwork.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dlhd.sx/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Mon, 11 Dec 2023 07:55:40 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 28ddcda73e393a02e74b3b5ef7dbf5f1
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
6.adsco.re/
200 OK 0 B IP
Requested by https://dlhd.sx/embed/stream-464.php
Certificate IssuerSectigo Limited
Subject*.adsco.re
Fingerprint40:64:05:9C:99:0A:1E:9F:A7:49:61:8E:86:4C:4B:06:9C:73:83:73
ValiditySat, 23 Sep 2023 00:00:00 GMT - Sun, 29 Sep 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: 6.adsco.re
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://dlhd.sx
DNT: 1
Connection: keep-alive
Referer: https://dlhd.sx/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 11 Dec 2023 07:55:41 GMT
content-type: text/plain;charset=UTF-8
content-length: 0
access-control-allow-origin: https://dlhd.sx
cache-control: private, max-age=10
access-control-allow-headers: Content-Type
access-control-allow-methods: GET, HEAD, OPTIONS
access-control-max-age: 2592000
vary: Accept-Encoding
server: cloudflare
cf-ray: 833c2ab0886ab50f-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
4.adsco.re/
200 OK 62 B IP
Requested by https://dlhd.sx/embed/stream-464.php
Certificate IssuerSectigo Limited
Subject*.adsco.re
Fingerprint40:64:05:9C:99:0A:1E:9F:A7:49:61:8E:86:4C:4B:06:9C:73:83:73
ValiditySat, 23 Sep 2023 00:00:00 GMT - Sun, 29 Sep 2024 23:59:59 GMT
File type ASCII text, with no line terminators
Hash 5b41cb22f84f645a103acc7bfbf084ff
bac3967b26d5ec4a0d09a580714e8219796816bd
709f0a0dfab9f9e074f4a4a348dcb09150838284d21e75cfb9e5ceaeeb2054bc
GET / HTTP/1.1
Host: 4.adsco.re
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://dlhd.sx
DNT: 1
Connection: keep-alive
Referer: https://dlhd.sx/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 11 Dec 2023 07:55:41 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Methods: GET, HEAD, OPTIONS
Access-Control-Allow-Headers: Content-Type
Access-Control-Allow-Origin: https://dlhd.sx
Access-Control-Max-Age: 2592000
Cache-Control: private, max-age=5
Content-Encoding: gzip
spdez6mnl5jf.l4.adsco.re/
200 OK 0 B URL POST HTTP/2 spdez6mnl5jf.l4.adsco.re/
IP
Requested by https://dlhd.sx/embed/stream-464.php
Certificate IssuerLet's Encrypt
Subject*.l4.adsco.re
Fingerprint30:24:2D:06:44:32:CD:4B:46:E0:81:9A:CF:B1:F6:9B:D2:4F:F3:6F
ValidityMon, 25 Sep 2023 16:35:45 GMT - Sun, 24 Dec 2023 16:35:44 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST / HTTP/1.1
Host: spdez6mnl5jf.l4.adsco.re
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 0
Origin: https://dlhd.sx
DNT: 1
Connection: keep-alive
Referer: https://dlhd.sx/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 11 Dec 2023 07:55:41 GMT
content-type: text/html
content-length: 0
last-modified: Fri, 02 Jun 2023 14:03:32 GMT
etag: "6479f6b4-0"
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
access-control-expose-headers: Content-Length,Content-Range
accept-ranges: bytes
X-Firefox-Spdy: h2
6.adsco.re/
200 OK 0 B IP
Requested by https://dlhd.sx/embed/stream-464.php
Certificate IssuerSectigo Limited
Subject*.adsco.re
Fingerprint40:64:05:9C:99:0A:1E:9F:A7:49:61:8E:86:4C:4B:06:9C:73:83:73
ValiditySat, 23 Sep 2023 00:00:00 GMT - Sun, 29 Sep 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: 6.adsco.re
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://c.adsco.re/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 11 Dec 2023 07:55:41 GMT
content-type: text/plain;charset=UTF-8
content-length: 0
access-control-allow-origin: *
cache-control: private, max-age=10
access-control-allow-headers: Content-Type
access-control-allow-methods: GET, HEAD, OPTIONS
access-control-max-age: 2592000
vary: Accept-Encoding
server: cloudflare
cf-ray: 833c2ab1f989b518-OSL
alt-svc: h3=":443"; ma=86400
4.adsco.re/
200 OK 62 B IP
Requested by https://dlhd.sx/embed/stream-464.php
Certificate IssuerSectigo Limited
Subject*.adsco.re
Fingerprint40:64:05:9C:99:0A:1E:9F:A7:49:61:8E:86:4C:4B:06:9C:73:83:73
ValiditySat, 23 Sep 2023 00:00:00 GMT - Sun, 29 Sep 2024 23:59:59 GMT
File type ASCII text, with no line terminators
Hash 5b41cb22f84f645a103acc7bfbf084ff
bac3967b26d5ec4a0d09a580714e8219796816bd
709f0a0dfab9f9e074f4a4a348dcb09150838284d21e75cfb9e5ceaeeb2054bc
GET / HTTP/1.1
Host: 4.adsco.re
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://c.adsco.re/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 11 Dec 2023 07:55:41 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Methods: GET, HEAD, OPTIONS
Access-Control-Allow-Headers: Content-Type
Access-Control-Allow-Origin: *
Access-Control-Max-Age: 2592000
Cache-Control: private, max-age=5
Content-Encoding: gzip
spdez6mnl5jf.n4.adsco.re/
200 OK 0 B URL POST HTTP/2 spdez6mnl5jf.n4.adsco.re/
IP
Requested by https://dlhd.sx/embed/stream-464.php
Certificate IssuerLet's Encrypt
Subject*.n4.adsco.re
FingerprintAF:10:8A:4D:72:FD:FC:08:77:84:8F:BE:F7:48:3B:D0:52:53:23:0A
ValidityFri, 29 Sep 2023 17:35:50 GMT - Thu, 28 Dec 2023 17:35:49 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST / HTTP/1.1
Host: spdez6mnl5jf.n4.adsco.re
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 0
Origin: https://dlhd.sx
DNT: 1
Connection: keep-alive
Referer: https://dlhd.sx/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 11 Dec 2023 07:55:41 GMT
content-type: text/html
content-length: 0
last-modified: Fri, 16 Jun 2023 08:37:42 GMT
etag: "648c1f56-0"
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
access-control-expose-headers: Content-Length,Content-Range
accept-ranges: bytes
X-Firefox-Spdy: h2
spdez6mnl5jf.s4.adsco.re/
200 OK 0 B URL POST HTTP/2 spdez6mnl5jf.s4.adsco.re/
IP
Requested by https://dlhd.sx/embed/stream-464.php
Certificate IssuerLet's Encrypt
Subject*.s4.adsco.re
Fingerprint64:CA:F8:23:A5:E5:7F:B7:B7:9E:AD:14:92:A0:E1:5C:12:BB:22:C1
ValidityTue, 03 Oct 2023 12:32:24 GMT - Mon, 01 Jan 2024 12:32:23 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST / HTTP/1.1
Host: spdez6mnl5jf.s4.adsco.re
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 0
Origin: https://dlhd.sx
DNT: 1
Connection: keep-alive
Referer: https://dlhd.sx/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 11 Dec 2023 07:55:42 GMT
content-type: text/html
content-length: 0
last-modified: Tue, 03 Oct 2023 13:29:59 GMT
etag: "651c1757-0"
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
access-control-expose-headers: Content-Length,Content-Range
accept-ranges: bytes
X-Firefox-Spdy: h2
adsco.re/p
200 OK 844 B IP
Requested by https://dlhd.sx/embed/stream-464.php
Certificate IssuerSectigo Limited
Subject*.adsco.re
Fingerprint40:64:05:9C:99:0A:1E:9F:A7:49:61:8E:86:4C:4B:06:9C:73:83:73
ValiditySat, 23 Sep 2023 00:00:00 GMT - Sun, 29 Sep 2024 23:59:59 GMT
File type ASCII text, with very long lines (1063), with no line terminators
Hash d6c63ab300d9ee08326129b671e60f9d
04730463d917b867942fbdf6dd181bc6b1264c4c
f71c354070d6a568137a512dbbd0afaf78442dd342472be928e6af4935175735
POST /p HTTP/1.1
Host: adsco.re
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Length: 2174
Origin: https://dlhd.sx
DNT: 1
Connection: keep-alive
Referer: https://dlhd.sx/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 11 Dec 2023 07:55:43 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
AS-P-1: OK lon123
AS-P-2: OK
AS-P-3: OK
Access-Control-Max-Age: 2592000
Cache-Control: no-transform
Accept-CH: Sec-CH-UA, Sec-CH-UA-Mobile, Sec-CH-UA-Full-Version, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Arch, Sec-CH-UA-Model, Device-Memory, Downlink, ECT, RTT, Width, Viewport-Width, DPR
Critical-CH: Sec-CH-UA, Sec-CH-UA-Mobile, Sec-CH-UA-Full-Version, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Arch, Sec-CH-UA-Model, Device-Memory, Downlink, ECT, RTT, Width, Viewport-Width, DPR
Permissions-Policy: ch-ua=(self "https://adsco.re"),ch-ua-mobile=(self "https://adsco.re"),ch-ua-full-version=(self "https://adsco.re"),ch-ua-platform=(self "https://adsco.re"),ch-ua-platform-version=(self "https://adsco.re"),ch-ua-arch=(self "https://adsco.re"),ch-ua-model=(self "https://adsco.re"),ch-device-memory=(self "https://adsco.re"),ch-downlink=(self "https://adsco.re"),ch-ect=(self "https://adsco.re"),ch-rtt=(self "https://adsco.re"),ch-width=(self "https://adsco.re"),ch-viewport-width=(self "https://adsco.re"),ch-dpr=(self "https://adsco.re")
Access-Control-Allow-Origin: https://dlhd.sx
Access-Control-Allow-Credentials: true
Content-Encoding: gzip
dlhd.sx/embed/adblock.php
200 OK 1.5 kB URL GET HTTP/3 dlhd.sx/embed/adblock.php
IP
Requested by https://dlhd.sx/embed/stream-464.php
Certificate IssuerGoogle Trust Services LLC
Subjectdlhd.sx
Fingerprint76:51:2D:5A:03:3C:EC:40:F6:2B:C4:26:97:0D:73:F6:FC:37:9C:83
ValidityThu, 19 Oct 2023 17:12:12 GMT - Wed, 17 Jan 2024 17:12:11 GMT
File type ASCII text, with very long lines (1731)
Hash 69dec0d2bc4e07f3e651b8be117f25c3
0a01f2568356b6d51d2803d54c7c76c743d04ad3
5e899308ec9f09d157816cc4f1925bb983fa2278dc4581d6c55496e5a71ec657
GET /embed/adblock.php HTTP/1.1
Host: dlhd.sx
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dlhd.sx/embed/stream-464.php
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 11 Dec 2023 07:55:38 GMT
content-type: application/javascript
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=TaNAjrG1r0eMI5gY7U%2F5ay%2BO8sr53PznMlRJFX7erKa9Ba6fhcGk1%2BDTMiubd2Goyrp0n7mvVj0VnRJrWtiPnOUFn6RQyzNY7kuZ3e%2BV8Tbojz7Q4pXj6dul"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 833c2a9b1862b518-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
xadsmart.com/qykawppmkhlzkwt?zJRhvOaP=BQMSAAAAAAAACZUAAkJWW5ZpKmm7o_OMgKPKyVyaEp9od_vdK5gSD7MxfWy-5GdMtzobphL2AzQpruwbKeyyyjfM4Bx0qFi9CHBnsS4gXQr9FO9KyXmizPI8g-6uWTBh7eoVWBoTNGNTz5gli0FqRnUzZO5YZpjminuacaz_RzXaenmhJYAFBSU4GVB8qh-5tv5av-TltSASCZlf3nKe-jgZJsz2GBNEX0qnzry3dqpfS3EJQOB6ltOSobNsRc6iZrgwNAh1jL3WwjdeHn_r5FR6SvrqDmedCJItC9M_JgO4wO61k2VSI46CCef_2DjjkPewaq3XidUWPON1MT_WJMFWpDSBli2ENUUQWA_D0nT1s7Q68vxGToiX_d7QHusKd3hW_YGkk3qEkoQWGCgX7HUYWpMfSCGU9Nk4ZQkNcMK49EPsIrCYlp6sciGYkqJtVG9k3i_LOyx__R8YcswalYpIFBmrv5r76Wqqt_MBrXg99H0szP-pRQefNpXgCW8omQ7kPE4yG_ariqoGVHKrqIJAJmeGzxRH6ap0MSBU9SZulADXyGNsTfc0UiGxXTmy9BnfwLP0U8c_APEEJdJli7-fIf5jbCH__eYBvjI9G09xZq_weYnSUqzAwfkh6vyFE87FcRoZyKRCdkqvOq0LWGoPFWcuDuuIio4sguza3s_KzeIJq47TvWEOO7YJMnTqNZDnnjEivCMV2jE1ATny3gKDrmGHwhdcsfgojGVO5qkIQphO6o6b8DAtrnlJ7TqXEzWCgzs1Z--PL-so5KP00gf4OOODZ36zTqZkuJ-JB4ilI9e2UR68XwfOaOasNVTj55o0zUK3Z1mHj6C5FPD2Fa8hnslx3qgtJ5hg47GzdVCY072jc13P6e6zp3-eExu6r841uEj-Yy7TqT_fFc5PskAUIeLMznh0k0SdMQKci7U2U9yrk374pzigr4f2l49_UTYVkR_qUmBkFPFYPMLdv6xaM3a2cH1rSIKCR3c_YJw7rf_720EsJlsuLjUMmyZ_yTIveq3XAE8cc0xbqTSGv7hNr59MKlX9r5wvaXU&UZdFOrHY=4&WbgRVKic=5015229&bLpnoEJm=&MAVCjBYP=0,0&vmPGTlck=&XRGeDkdH=&jOmACvst=1280,1024,1,1280,1024,0
200 OK 44 B URL GET HTTP/2 xadsmart.com/qykawppmkhlzkwt?zJRhvOaP=BQMSAAAAAAAACZUAAkJWW5ZpKmm7o_OMgKPKyVyaEp9od_vdK5gSD7MxfWy-5GdMtzobphL2AzQpruwbKeyyyjfM4Bx0qFi9CHBnsS4gXQr9FO9KyXmizPI8g-6uWTBh7eoVWBoTNGNTz5gli0FqRnUzZO5YZpjminuacaz_RzXaenmhJYAFBSU4GVB8qh-5tv5av-TltSASCZlf3nKe-jgZJsz2GBNEX0qnzry3dqpfS3EJQOB6ltOSobNsRc6iZrgwNAh1jL3WwjdeHn_r5FR6SvrqDmedCJItC9M_JgO4wO61k2VSI46CCef_2DjjkPewaq3XidUWPON1MT_WJMFWpDSBli2ENUUQWA_D0nT1s7Q68vxGToiX_d7QHusKd3hW_YGkk3qEkoQWGCgX7HUYWpMfSCGU9Nk4ZQkNcMK49EPsIrCYlp6sciGYkqJtVG9k3i_LOyx__R8YcswalYpIFBmrv5r76Wqqt_MBrXg99H0szP-pRQefNpXgCW8omQ7kPE4yG_ariqoGVHKrqIJAJmeGzxRH6ap0MSBU9SZulADXyGNsTfc0UiGxXTmy9BnfwLP0U8c_APEEJdJli7-fIf5jbCH__eYBvjI9G09xZq_weYnSUqzAwfkh6vyFE87FcRoZyKRCdkqvOq0LWGoPFWcuDuuIio4sguza3s_KzeIJq47TvWEOO7YJMnTqNZDnnjEivCMV2jE1ATny3gKDrmGHwhdcsfgojGVO5qkIQphO6o6b8DAtrnlJ7TqXEzWCgzs1Z--PL-so5KP00gf4OOODZ36zTqZkuJ-JB4ilI9e2UR68XwfOaOasNVTj55o0zUK3Z1mHj6C5FPD2Fa8hnslx3qgtJ5hg47GzdVCY072jc13P6e6zp3-eExu6r841uEj-Yy7TqT_fFc5PskAUIeLMznh0k0SdMQKci7U2U9yrk374pzigr4f2l49_UTYVkR_qUmBkFPFYPMLdv6xaM3a2cH1rSIKCR3c_YJw7rf_720EsJlsuLjUMmyZ_yTIveq3XAE8cc0xbqTSGv7hNr59MKlX9r5wvaXU&UZdFOrHY=4&WbgRVKic=5015229&bLpnoEJm=&MAVCjBYP=0,0&vmPGTlck=&XRGeDkdH=&jOmACvst=1280,1024,1,1280,1024,0
IP
Requested by https://dlhd.sx/embed/stream-464.php
Certificate IssuerSectigo Limited
Subjectxadsmart.com
FingerprintFC:E8:BA:57:31:46:6D:51:70:B5:42:35:6E:CF:97:6F:AF:38:C5:58
ValidityMon, 14 Aug 2023 00:00:00 GMT - Fri, 13 Sep 2024 23:59:59 GMT
File type ASCII text, with no line terminators
Hash d5f0a25e4d3522d56d48ce7bc3e518fb
86794caff58f7fee6e684c2ba7195f970a8d6f4c
9d781128a8ece413b003d5612b8398bf9340ef7f5b751d12bd125ba523d3ceb5
GET /qykawppmkhlzkwt?zJRhvOaP=BQMSAAAAAAAACZUAAkJWW5ZpKmm7o_OMgKPKyVyaEp9od_vdK5gSD7MxfWy-5GdMtzobphL2AzQpruwbKeyyyjfM4Bx0qFi9CHBnsS4gXQr9FO9KyXmizPI8g-6uWTBh7eoVWBoTNGNTz5gli0FqRnUzZO5YZpjminuacaz_RzXaenmhJYAFBSU4GVB8qh-5tv5av-TltSASCZlf3nKe-jgZJsz2GBNEX0qnzry3dqpfS3EJQOB6ltOSobNsRc6iZrgwNAh1jL3WwjdeHn_r5FR6SvrqDmedCJItC9M_JgO4wO61k2VSI46CCef_2DjjkPewaq3XidUWPON1MT_WJMFWpDSBli2ENUUQWA_D0nT1s7Q68vxGToiX_d7QHusKd3hW_YGkk3qEkoQWGCgX7HUYWpMfSCGU9Nk4ZQkNcMK49EPsIrCYlp6sciGYkqJtVG9k3i_LOyx__R8YcswalYpIFBmrv5r76Wqqt_MBrXg99H0szP-pRQefNpXgCW8omQ7kPE4yG_ariqoGVHKrqIJAJmeGzxRH6ap0MSBU9SZulADXyGNsTfc0UiGxXTmy9BnfwLP0U8c_APEEJdJli7-fIf5jbCH__eYBvjI9G09xZq_weYnSUqzAwfkh6vyFE87FcRoZyKRCdkqvOq0LWGoPFWcuDuuIio4sguza3s_KzeIJq47TvWEOO7YJMnTqNZDnnjEivCMV2jE1ATny3gKDrmGHwhdcsfgojGVO5qkIQphO6o6b8DAtrnlJ7TqXEzWCgzs1Z--PL-so5KP00gf4OOODZ36zTqZkuJ-JB4ilI9e2UR68XwfOaOasNVTj55o0zUK3Z1mHj6C5FPD2Fa8hnslx3qgtJ5hg47GzdVCY072jc13P6e6zp3-eExu6r841uEj-Yy7TqT_fFc5PskAUIeLMznh0k0SdMQKci7U2U9yrk374pzigr4f2l49_UTYVkR_qUmBkFPFYPMLdv6xaM3a2cH1rSIKCR3c_YJw7rf_720EsJlsuLjUMmyZ_yTIveq3XAE8cc0xbqTSGv7hNr59MKlX9r5wvaXU&UZdFOrHY=4&WbgRVKic=5015229&bLpnoEJm=&MAVCjBYP=0,0&vmPGTlck=&XRGeDkdH=&jOmACvst=1280,1024,1,1280,1024,0 HTTP/1.1
Host: xadsmart.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dlhd.sx/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
asf: 9
popads-ec: ASB
content-type: text/javascript;charset=UTF-8
content-length: 44
date: Mon, 11 Dec 2023 07:55:43 GMT
X-Firefox-Spdy: h2
patsyendless.com/sbar.json?key=1843019bf263f39accf339e8c46780a9&uuid=4fee4ce3-3ab7-4dfe-ae97-b364b3283857%3A2%3A1
200 OK 3.2 kB URL GET HTTP/1.1 patsyendless.com/sbar.json?key=1843019bf263f39accf339e8c46780a9&uuid=4fee4ce3-3ab7-4dfe-ae97-b364b3283857%3A2%3A1
IP
Requested by https://dlhd.sx/embed/stream-464.php
Certificate IssuerLet's Encrypt
Subjectpatsyendless.com
Fingerprint0A:07:2B:06:66:F0:A2:5B:EA:4C:CD:30:8F:4F:51:2E:0D:0A:39:61
ValidityMon, 27 Nov 2023 07:58:29 GMT - Sun, 25 Feb 2024 07:58:28 GMT
File type JSON data
- , ASCII text, with very long lines (5889), with no line terminators
Hash f4a5bb9e1cf28bff511fdef8119ca055
f8f77a033fd11b1156c33790ef583177030d8c5f
3fc2e4dff4eeca40924a0147fda32d81c97914feb45fe0403a9a59c34656b00d
GET /sbar.json?key=1843019bf263f39accf339e8c46780a9&uuid=4fee4ce3-3ab7-4dfe-ae97-b364b3283857%3A2%3A1 HTTP/1.1
Host: patsyendless.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://dlhd.sx
DNT: 1
Connection: keep-alive
Referer: https://dlhd.sx/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Mon, 11 Dec 2023 07:55:52 GMT
Content-Type: text/plain; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://dlhd.sx
Access-Control-Allow-Origin: https://dlhd.sx
Access-Control-Allow-Credentials: true
Set-Cookie: u_pl=16749046; expires=Tue, 12 Dec 2023 07:55:52 GMT; secure; SameSite=None
uid_id2=4fee4ce3-3ab7-4dfe-ae97-b364b3283857:2:1; expires=Mon, 18 Dec 2023 07:55:52 GMT; secure; SameSite=None
pdhtkv=true; expires=Tue, 12 Dec 2023 07:55:52 GMT; secure; SameSite=None
uncs=1; expires=Tue, 12 Dec 2023 07:55:52 GMT; secure; SameSite=None
pdhtkv29=true; expires=Tue, 12 Dec 2023 07:55:52 GMT; secure; SameSite=None
uncs29=1; expires=Tue, 12 Dec 2023 07:55:52 GMT; secure; SameSite=None
slec1843019bf263f39accf339e8c46780a9=[4819892]; expires=Mon, 11 Dec 2023 07:55:57 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 2a8b86a90c265d801c6c6f1339d9bf47
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
patsyendless.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSz2skRRitjhEEQfAHggdhDh7WxUy6p3sy0y4oxjUSjEnYXcnV6qrqSZmarqaqf0xyCi5IwMvszWPnTbJBXRYXvMouExEkIGQ8SA7mbxCEXJWZjAx%2Bh%2F6%2B970ueO9VfXWYXxIPOb3Y%2FFTvSaXoYrPu1m5syYTr0tbW79U8t%2B7eqm3JZCm4VeuNP6Z413Obdfft2seC7ejFhuu5rud6tRVpRKx7ixMWMn0UevXQrQeNutcM0DP%2FxzZ3YKkDXlySVyD56PntX59AsiGS7g%2B3hd3JdPrOR91c0UwbFPzks2Qn0WWC7myMjYM4OZn%2BDW1HhHwzB52cTB1AF0djB4jkiDh%2FeIiSk6lMRMXxtdJIQSSI%2BIsoiyGEGkLSIZi%2BD8nPCcA41jeQdB%2Bua1PS3WuWjtkRmb%2F6G7Ickfk%2FX0PSfbysZK92V6s8kzqx6MUVZG8I2RkizU%2BR7TmQ5SlY9iUk%2F40sXq0h6R5tWKUh%2BcVbQSxEwIS%2F4NOotRDwWCxQEbYWIn8piPxG2283W5OIpBxCxkMo0Qe1c8itg1w6yGMHeeqgyy9qtBnGrtuKo9j32wFjzPcZa7aXeJP7QTt2kbOxhz6ytA%2Bm%2BmBmH6nZx47sw%2BTPYLcrWO7AZgQFr1AKgtISlJSglARlRlAW1TFXtmGrh1zZPPKmvTHtfjXQWeeQHuusIxICavqH6SV5eRLePw%2BusCMual478F0vjOLGkh%2F7IWUs9v1QtFmw1Gq7NISVFaSdA7UO9uSIvP7LC0jl%2BXsDRPQUVp2CyVdB8zdBy0Gr4YJuD4K2i73kMaec7ypZiG1etz1wXSHN5pHtOofqkrwx0bH69Y8Q7IxMC8xUSE2FL%2BTPBB11MLijS3J0R5eWPNlIM9mVe3R8wXczmgnnu0%2FEbqkNX71t%2B99%2BwMbEeHx0T9hsjSZcJh1Lvl%2BWnAuzog0T5KdVuyWizdxuL%2BcmydO1zQ9XVrupEdZKnQxB5fnnT8HkiLx0s5o83RuXNyHNECav0M1nSqU%2BBUv3YdPZzmoCo2Y4Sh2UeTUwjWi2VJJAiRmmUQUrzp7%2B9d%2Bh2XxoD9AxDmh2H0m3QmEqFKoCVX3Y%2FLlBlpqz93%2F3J4VIOYNIGecoUkY9uI7WyouaaMZuLNyGiOIwilvU5WEchBENPdGKmtRDZkeieHbwLwAAAP%2F%2FAQAA%2F%2F%2Fws3gpkgQAAA%3D%3D
200 OK 7 B URL GET HTTP/1.1 patsyendless.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSz2skRRitjhEEQfAHggdhDh7WxUy6p3sy0y4oxjUSjEnYXcnV6qrqSZmarqaqf0xyCi5IwMvszWPnTbJBXRYXvMouExEkIGQ8SA7mbxCEXJWZjAx%2Bh%2F6%2B970ueO9VfXWYXxIPOb3Y%2FFTvSaXoYrPu1m5syYTr0tbW79U8t%2B7eqm3JZCm4VeuNP6Z413Obdfft2seC7ejFhuu5rud6tRVpRKx7ixMWMn0UevXQrQeNutcM0DP%2FxzZ3YKkDXlySVyD56PntX59AsiGS7g%2B3hd3JdPrOR91c0UwbFPzks2Qn0WWC7myMjYM4OZn%2BDW1HhHwzB52cTB1AF0djB4jkiDh%2FeIiSk6lMRMXxtdJIQSSI%2BIsoiyGEGkLSIZi%2BD8nPCcA41jeQdB%2Bua1PS3WuWjtkRmb%2F6G7Ickfk%2FX0PSfbysZK92V6s8kzqx6MUVZG8I2RkizU%2BR7TmQ5SlY9iUk%2F40sXq0h6R5tWKUh%2BcVbQSxEwIS%2F4NOotRDwWCxQEbYWIn8piPxG2283W5OIpBxCxkMo0Qe1c8itg1w6yGMHeeqgyy9qtBnGrtuKo9j32wFjzPcZa7aXeJP7QTt2kbOxhz6ytA%2Bm%2BmBmH6nZx47sw%2BTPYLcrWO7AZgQFr1AKgtISlJSglARlRlAW1TFXtmGrh1zZPPKmvTHtfjXQWeeQHuusIxICavqH6SV5eRLePw%2BusCMual478F0vjOLGkh%2F7IWUs9v1QtFmw1Gq7NISVFaSdA7UO9uSIvP7LC0jl%2BXsDRPQUVp2CyVdB8zdBy0Gr4YJuD4K2i73kMaec7ypZiG1etz1wXSHN5pHtOofqkrwx0bH69Y8Q7IxMC8xUSE2FL%2BTPBB11MLijS3J0R5eWPNlIM9mVe3R8wXczmgnnu0%2FEbqkNX71t%2B99%2BwMbEeHx0T9hsjSZcJh1Lvl%2BWnAuzog0T5KdVuyWizdxuL%2BcmydO1zQ9XVrupEdZKnQxB5fnnT8HkiLx0s5o83RuXNyHNECav0M1nSqU%2BBUv3YdPZzmoCo2Y4Sh2UeTUwjWi2VJJAiRmmUQUrzp7%2B9d%2Bh2XxoD9AxDmh2H0m3QmEqFKoCVX3Y%2FLlBlpqz93%2F3J4VIOYNIGecoUkY9uI7WyouaaMZuLNyGiOIwilvU5WEchBENPdGKmtRDZkeieHbwLwAAAP%2F%2FAQAA%2F%2F%2Fws3gpkgQAAA%3D%3D
IP
Requested by https://dlhd.sx/embed/stream-464.php
Certificate IssuerLet's Encrypt
Subjectpatsyendless.com
Fingerprint0A:07:2B:06:66:F0:A2:5B:EA:4C:CD:30:8F:4F:51:2E:0D:0A:39:61
ValidityMon, 27 Nov 2023 07:58:29 GMT - Sun, 25 Feb 2024 07:58:28 GMT
File type ASCII text, with no line terminators
Hash 132d6af1b46048b45cf86cdee7991d31
eb7007d03d59b65bc6da7e098c4d38fc6dfb6285
ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c
GET /ren.gif?sid=H4sIAAAAAAAC%2F1RSz2skRRitjhEEQfAHggdhDh7WxUy6p3sy0y4oxjUSjEnYXcnV6qrqSZmarqaqf0xyCi5IwMvszWPnTbJBXRYXvMouExEkIGQ8SA7mbxCEXJWZjAx%2Bh%2F6%2B970ueO9VfXWYXxIPOb3Y%2FFTvSaXoYrPu1m5syYTr0tbW79U8t%2B7eqm3JZCm4VeuNP6Z413Obdfft2seC7ejFhuu5rud6tRVpRKx7ixMWMn0UevXQrQeNutcM0DP%2FxzZ3YKkDXlySVyD56PntX59AsiGS7g%2B3hd3JdPrOR91c0UwbFPzks2Qn0WWC7myMjYM4OZn%2BDW1HhHwzB52cTB1AF0djB4jkiDh%2FeIiSk6lMRMXxtdJIQSSI%2BIsoiyGEGkLSIZi%2BD8nPCcA41jeQdB%2Bua1PS3WuWjtkRmb%2F6G7Ickfk%2FX0PSfbysZK92V6s8kzqx6MUVZG8I2RkizU%2BR7TmQ5SlY9iUk%2F40sXq0h6R5tWKUh%2BcVbQSxEwIS%2F4NOotRDwWCxQEbYWIn8piPxG2283W5OIpBxCxkMo0Qe1c8itg1w6yGMHeeqgyy9qtBnGrtuKo9j32wFjzPcZa7aXeJP7QTt2kbOxhz6ytA%2Bm%2BmBmH6nZx47sw%2BTPYLcrWO7AZgQFr1AKgtISlJSglARlRlAW1TFXtmGrh1zZPPKmvTHtfjXQWeeQHuusIxICavqH6SV5eRLePw%2BusCMual478F0vjOLGkh%2F7IWUs9v1QtFmw1Gq7NISVFaSdA7UO9uSIvP7LC0jl%2BXsDRPQUVp2CyVdB8zdBy0Gr4YJuD4K2i73kMaec7ypZiG1etz1wXSHN5pHtOofqkrwx0bH69Y8Q7IxMC8xUSE2FL%2BTPBB11MLijS3J0R5eWPNlIM9mVe3R8wXczmgnnu0%2FEbqkNX71t%2B99%2BwMbEeHx0T9hsjSZcJh1Lvl%2BWnAuzog0T5KdVuyWizdxuL%2BcmydO1zQ9XVrupEdZKnQxB5fnnT8HkiLx0s5o83RuXNyHNECav0M1nSqU%2BBUv3YdPZzmoCo2Y4Sh2UeTUwjWi2VJJAiRmmUQUrzp7%2B9d%2Bh2XxoD9AxDmh2H0m3QmEqFKoCVX3Y%2FLlBlpqz93%2F3J4VIOYNIGecoUkY9uI7WyouaaMZuLNyGiOIwilvU5WEchBENPdGKmtRDZkeieHbwLwAAAP%2F%2FAQAA%2F%2F%2Fws3gpkgQAAA%3D%3D HTTP/1.1
Host: patsyendless.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dlhd.sx/
Cookie: u_pl=16749046; uid_id2=4fee4ce3-3ab7-4dfe-ae97-b364b3283857:2:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; slec1843019bf263f39accf339e8c46780a9=[4819892]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Mon, 11 Dec 2023 07:55:52 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 554d4ac3d9a210f9d6b91295b32bb941
Strict-Transport-Security: max-age=0; includeSubdomains
www.xadsmart.com/ngxOrgChart.min.css
200 OK 11 kB URL GET HTTP/2 www.xadsmart.com/ngxOrgChart.min.css
IP
Requested by https://dlhd.sx/embed/stream-464.php
Certificate IssuerLet's Encrypt
Subject1376341044.rsc.cdn77.org
Fingerprint9E:00:8B:B5:0E:76:AD:0B:E5:63:88:89:93:D0:07:5F:40:2B:28:81
ValidityMon, 02 Oct 2023 18:57:36 GMT - Sun, 31 Dec 2023 18:57:35 GMT
File type gzip compressed data, from Unix
- data
Hash 3d246f6b14cbdb3aadb7d9b87ad7e763
17fd056301f3786cfc57dbf7f2131108e882ed38
6901f034b5714b96d019d546a5551d0d55a2b211d9640fb5c1ebeeaae497ab0a
GET /ngxOrgChart.min.css HTTP/1.1
Host: www.xadsmart.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://dlhd.sx
DNT: 1
Connection: keep-alive
Referer: https://dlhd.sx/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 11 Dec 2023 07:55:40 GMT
content-type: application/x-javascript
vary: Accept-Encoding, Origin
expires: Mon, 18 Dec 2023 07:38:46 GMT
access-control-allow-origin: https://dlhd.sx
link: <https://xadsmart.com/>;rel=preconnect,<https://c.adsco.re/>;rel=preconnect,<https://adsco.re/>;rel=preconnect
cache-control: public, max-age=604800
x-77-nzt: EggBeX8tUAFBDAHUZjgBAff2AwAA
x-77-nzt-ray: c1fb9819ade2f30d7cc07665dfeefc1c
x-accel-expires: @1702885126
x-accel-date: 1702280326
x-77-cache: HIT
x-77-age: 1014
content-encoding: gzip
server: CDN77-Turbo
x-cache-lb: MISS
x-77-pop: copenhagenDK
X-Firefox-Spdy: h2
cdn.creative-bars1.com/sb/notifications/games/hentai-heroes/custom_banner/8/img/close.png
200 OK 9.0 kB URL GET HTTP/2 cdn.creative-bars1.com/sb/notifications/games/hentai-heroes/custom_banner/8/img/close.png
IP
Requested by https://dlhd.sx/embed/stream-464.php
Certificate IssuerGoogle Trust Services LLC
Subjectcreative-bars1.com
Fingerprint2B:CC:32:FC:17:6F:25:69:2F:F4:A0:D9:DC:9C:C2:09:28:32:AB:34
ValiditySat, 21 Oct 2023 15:38:40 GMT - Fri, 19 Jan 2024 15:38:39 GMT
File type PNG image data, 497 x 496, 8-bit/color RGBA, non-interlaced
- data
Hash b080cbdd5cc827b5a659a45676c079d4
3502ad6743a3a42dd92ee3cea142616356f47359
c89d28b4be45a7af77493e8f6c76894a7ba86469e5b6733e6ca3cb33eaabcd8f
GET /sb/notifications/games/hentai-heroes/custom_banner/8/img/close.png HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Mon, 11 Dec 2023 07:55:52 GMT
content-type: image/png
content-length: 8952
last-modified: Thu, 19 Oct 2023 15:38:02 GMT
etag: "65314d5a-22f8"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 1041303
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2F7%2FsY3B9VMudbFh4iYzaU8JCheld8BD8cypBFcIrL1THJZiF%2Bz1VeRz9dZ5KZMqW1SLgt95vI0qVzQ7tHjF71j1rMjkV%2BYl3WERdRDC6eppnshoheHF2z94fO5rjBB28cwITxEunr6Z4"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 833c2af7cfc423ca-LHR
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
cdn.creative-bars1.com/sb/notifications/games/hentai-heroes/custom_banner/8/img/button.png
200 OK 3.6 kB URL GET HTTP/2 cdn.creative-bars1.com/sb/notifications/games/hentai-heroes/custom_banner/8/img/button.png
IP
Requested by https://dlhd.sx/embed/stream-464.php
Certificate IssuerGoogle Trust Services LLC
Subjectcreative-bars1.com
Fingerprint2B:CC:32:FC:17:6F:25:69:2F:F4:A0:D9:DC:9C:C2:09:28:32:AB:34
ValiditySat, 21 Oct 2023 15:38:40 GMT - Fri, 19 Jan 2024 15:38:39 GMT
File type PNG image data, 513 x 201, 8-bit colormap, non-interlaced
- data
Hash fb3226b461ade8c506c258950e69a77b
ea44029992a5564fef15abbc73a3a62bb7f0d260
5e8af7875cefc1e7b40fb3622897fb6726204fee54e029649586cf9eafbe95db
GET /sb/notifications/games/hentai-heroes/custom_banner/8/img/button.png HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Mon, 11 Dec 2023 07:55:52 GMT
content-type: image/png
content-length: 3631
last-modified: Thu, 19 Oct 2023 15:38:02 GMT
etag: "65314d5a-e2f"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 1105672
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=1vmEYIfCcCDeNdBCgzMiL6Tsfi%2Bwxyjd3Ra%2B9SvbIGqoBL0VyCqXvSaF3ArBuIU8oR3sqhldB8QUaHshPu7ldjzyYIJ%2Fkv9I%2B%2BskxDW%2BI%2BDj%2BPxfzCfW8FCARQdXj%2Fw8BFyPBCS8QTzN"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 833c2af7e80023ca-LHR
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
cdn.creative-bars1.com/sb/notifications/games/hentai-heroes/custom_banner/8/js/script.js
200 OK 664 B URL GET HTTP/2 cdn.creative-bars1.com/sb/notifications/games/hentai-heroes/custom_banner/8/js/script.js
IP
Requested by https://dlhd.sx/embed/stream-464.php
Certificate IssuerGoogle Trust Services LLC
Subjectcreative-bars1.com
Fingerprint2B:CC:32:FC:17:6F:25:69:2F:F4:A0:D9:DC:9C:C2:09:28:32:AB:34
ValiditySat, 21 Oct 2023 15:38:40 GMT - Fri, 19 Jan 2024 15:38:39 GMT
Hash 82f0ffcce55d9b27d41c29d23758205a
a7d2dcff99786e09163c5ea97cab72543d8e1efa
5605a86d248fd61c62e632b4079811b03ab09143fe03a9e87e27df03bcb22192
GET /sb/notifications/games/hentai-heroes/custom_banner/8/js/script.js HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://dlhd.sx
DNT: 1
Connection: keep-alive
Referer: https://dlhd.sx/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 11 Dec 2023 07:55:52 GMT
content-type: application/javascript
last-modified: Thu, 19 Oct 2023 15:38:04 GMT
etag: W/"65314d5c-18c"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 216376
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=HiZVMIcvKbpBrnd2Cj1FOteAGYvaoZfw0X%2FnMI8btGuuc0o6iyLfzZvmCCPxL6vmyjs4lgO%2FRCRrCRG7nmAYATcpP%2FgKYPRoTxfChTljXu%2FSyjX3dohRzcdOz7cP2E0w8TqOYdhkWDFc"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 833c2af79fa523ca-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
cdn.creative-bars1.com/sb/notifications/games/hentai-heroes/custom_banner/8/img/bg.jpg
200 OK 282 kB URL GET HTTP/2 cdn.creative-bars1.com/sb/notifications/games/hentai-heroes/custom_banner/8/img/bg.jpg
IP
Requested by https://dlhd.sx/embed/stream-464.php
Certificate IssuerGoogle Trust Services LLC
Subjectcreative-bars1.com
Fingerprint2B:CC:32:FC:17:6F:25:69:2F:F4:A0:D9:DC:9C:C2:09:28:32:AB:34
ValiditySat, 21 Oct 2023 15:38:40 GMT - Fri, 19 Jan 2024 15:38:39 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1920x1080, components 3
- data
Size 282 kB (281494 bytes)
Hash 8c14eaeb916683e79c7deb466661a8a5
85d307230af99fd6a6b902c0bd2b6a45925af85d
2a543d991e49ab46653c77ea220cc406475666102bf3ee4f506b85aa184b8317
GET /sb/notifications/games/hentai-heroes/custom_banner/8/img/bg.jpg HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Mon, 11 Dec 2023 07:55:52 GMT
content-type: image/jpeg
content-length: 281494
last-modified: Thu, 19 Oct 2023 15:38:02 GMT
etag: "65314d5a-44b96"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 957498
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=VXC7Kbb5WH52YqIH6qd2ADJxBN4lusRSDOuWgYjMHQxGquLGHKsE05TJG9IoLH8llND9LDcL8A6RdejoA8%2BQkCEhtuM0qIpwSwbUS7YsnyUJe%2FDROI5Dbqvv%2Fp5viMvjwBfx%2F%2BBScD%2FS"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 833c2af7cfc623ca-LHR
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
weblivehdplay.ru/clappr.min.js
200 OK 143 kB URL GET HTTP/3 weblivehdplay.ru/clappr.min.js
IP
Requested by https://weblivehdplay.ru/premiumtv/daddyhd.php?id=464
Certificate IssuerLet's Encrypt
Subjectweblivehdplay.ru
Fingerprint75:CC:BB:75:29:0C:A0:84:3E:66:42:03:4A:12:61:9E:BA:F3:75:8A
ValiditySun, 03 Dec 2023 11:46:52 GMT - Sat, 02 Mar 2024 11:46:51 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Size 143 kB (142758 bytes)
Hash f55c6c796275a41ce7d97bd160e648ff
936285f9c8c85a749a1ef8cfc4d5e84b7ea2bc89
db7ce4b1edd2c3701c3f2585f7cbd70857173195489a99703ab39de16fa45b6c
GET /clappr.min.js HTTP/1.1
Host: weblivehdplay.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://weblivehdplay.ru/premiumtv/daddyhd.php?id=464
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 11 Dec 2023 07:55:40 GMT
content-type: application/javascript
last-modified: Mon, 27 Nov 2023 16:16:06 GMT
etag: W/"6564c0c6-80319"
cache-control: max-age=14400
cf-cache-status: HIT
age: 2474
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Kb23W2hxnrxANQIuCr4UUBKpdl6KOeS8T34PBvsUBR9aBhsLFQp1VDuew13J6spRJTbmaXHkPFyhO%2Fljsb8cIv92IRT0FS4rPWPPr%2FiTxEDqA1kyzVa1PV48umZEHdHp%2BSqO"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 833c2aab4aee712f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
cdn.creative-bars1.com/sb/notifications/games/hentai-heroes/custom_banner/8/css/style.css
200 OK 593 B URL GET HTTP/2 cdn.creative-bars1.com/sb/notifications/games/hentai-heroes/custom_banner/8/css/style.css
IP
Requested by https://dlhd.sx/embed/stream-464.php
Certificate IssuerGoogle Trust Services LLC
Subjectcreative-bars1.com
Fingerprint2B:CC:32:FC:17:6F:25:69:2F:F4:A0:D9:DC:9C:C2:09:28:32:AB:34
ValiditySat, 21 Oct 2023 15:38:40 GMT - Fri, 19 Jan 2024 15:38:39 GMT
Hash 18a91e00872438589c6ba83e5e3662e5
d97dcf0726b70b26c44def91b388d5a7626bf477
960d92ba1a5336648795b14497df5e89eada4a697d0003a22b78604aa2f9ec26
GET /sb/notifications/games/hentai-heroes/custom_banner/8/css/style.css HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://dlhd.sx
DNT: 1
Connection: keep-alive
Referer: https://dlhd.sx/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 11 Dec 2023 07:55:52 GMT
content-type: text/css
last-modified: Thu, 19 Oct 2023 15:38:00 GMT
etag: W/"65314d58-7fa"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 462905
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=g2GJe60yajAm5vAtRqFllVEAxPKeND49uG2jzbnRV%2BaY2gbXXmfLHDhfPjvp9pD8lgb0M3tD15ymH4rVm7FUXS785f0V%2FjdkJyWYa8kgM2uRMjFqBhhO8Yzlz63WLdAd6xhLC8%2BDvVju"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 833c2af79fa723ca-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
patsyendless.com/pixel/sbls?bv=23.49.4947&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fnotifications%2Fgames%2Fhentai-heroes%2Fcustom_banner%2F8%2Fcss%2Fstyle.css&l=2042&fd=138
200 OK 0 B URL GET HTTP/1.1 patsyendless.com/pixel/sbls?bv=23.49.4947&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fnotifications%2Fgames%2Fhentai-heroes%2Fcustom_banner%2F8%2Fcss%2Fstyle.css&l=2042&fd=138
IP
Requested by https://dlhd.sx/embed/stream-464.php
Certificate IssuerLet's Encrypt
Subjectpatsyendless.com
Fingerprint0A:07:2B:06:66:F0:A2:5B:EA:4C:CD:30:8F:4F:51:2E:0D:0A:39:61
ValidityMon, 27 Nov 2023 07:58:29 GMT - Sun, 25 Feb 2024 07:58:28 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pixel/sbls?bv=23.49.4947&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fnotifications%2Fgames%2Fhentai-heroes%2Fcustom_banner%2F8%2Fcss%2Fstyle.css&l=2042&fd=138 HTTP/1.1
Host: patsyendless.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dlhd.sx/
Cookie: u_pl=16749046; uid_id2=4fee4ce3-3ab7-4dfe-ae97-b364b3283857:2:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; slec1843019bf263f39accf339e8c46780a9=[4819892]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Mon, 11 Dec 2023 07:55:53 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
patsyendless.com/pixel/sbls?bv=23.49.4947&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fnotifications%2Fgames%2Fhentai-heroes%2Fcustom_banner%2F8%2Fjs%2Fscript.js&l=396&fd=133
200 OK 0 B URL GET HTTP/1.1 patsyendless.com/pixel/sbls?bv=23.49.4947&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fnotifications%2Fgames%2Fhentai-heroes%2Fcustom_banner%2F8%2Fjs%2Fscript.js&l=396&fd=133
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://dlhd.sx/embed/stream-464.php
Certificate IssuerLet's Encrypt
Subjectpatsyendless.com
Fingerprint0A:07:2B:06:66:F0:A2:5B:EA:4C:CD:30:8F:4F:51:2E:0D:0A:39:61
ValidityMon, 27 Nov 2023 07:58:29 GMT - Sun, 25 Feb 2024 07:58:28 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pixel/sbls?bv=23.49.4947&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fnotifications%2Fgames%2Fhentai-heroes%2Fcustom_banner%2F8%2Fjs%2Fscript.js&l=396&fd=133 HTTP/1.1
Host: patsyendless.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dlhd.sx/
Cookie: u_pl=16749046; uid_id2=4fee4ce3-3ab7-4dfe-ae97-b364b3283857:2:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; slec1843019bf263f39accf339e8c46780a9=[4819892]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Mon, 11 Dec 2023 07:55:53 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
200 OK 16 kB URL GET HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
Requested by https://dlhd.sx/embed/stream-464.php
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint5F:60:69:C9:59:6D:F1:B5:87:82:8D:B0:57:3C:D9:24:10:FD:74:D1
ValidityMon, 20 Nov 2023 08:08:49 GMT - Mon, 12 Feb 2024 08:08:48 GMT
File type Web Open Font Format (Version 2), TrueType, length 15744, version 1.0
- data
Hash 15d9f621c3bd1599f0169dcf0bd5e63e
7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52
f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://dlhd.sx
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 04 Dec 2023 23:43:03 GMT
expires: Tue, 03 Dec 2024 23:43:03 GMT
cache-control: public, max-age=31536000
age: 547970
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
patsyendless.com/impr.gif?sid=H4sIAAAAAAAC%2F1RSz2skRRitjhEEQfAHggdhDh7WxUy6p3syPS4oxjUSjEnYXcnV6qrqSZmarqaqf0xyCi5IwMvszWPnTbJBXRYXvMouExEkIGQ8SA7mbxCEXJWZjAx%2Bh%2F6%2B970ueO9VfXWYXxIPOb3Y%2FFTvSaXoYrPu1m5syYTr0tbW79U8t%2B7eqm3JZCm4VeuNP6Z413Obdfft2seC7ejFhuu5rud6tRVpRKx7ixMWMn3U9upttx406l4zQM%2F8H9vcgaUOeHFJXoHko%2Be3f30CyYZIuj%2FcFnYn0%2Bk7H3VzRTNtUPCTz5KdRJcJurMxNg7i5GT6N7QdEfLNHHRyMnUAXRyNHSCSI%2BL84SFKTqYyERXH10ojBZEg4i%2BiLIYQaghJh2D6PiQ%2FJwDjWN9A0n24rk1Jd69ZOmZHZP7qb8hyROb%2FfA1J9%2FGykr3aXa3yTOrEohdXkL0hZGeIND9FtudAlqdg2ZeQ%2FDeyeLWGpHu0YZWG5BdvBbEQARP%2Bgk%2Bj1kLAY7FARbu1EPlLQeQ3Qj9stiYRSTmEjIdQog9q55BbB7l0kMcO8tRBl1%2FUaLMdu24rjmLfDwPGmO8z1gyXeJP7QRi7yNnYQx9Z2gdTfTCzj9TsY0f2YfJnsNsVLHdgM4KCVygFQWkJSkpQSoIyIyiL6pgr27DVQ65sHnnT3ph2vxrorHNIj3XWEQkBNf3D9JK8PAnvnwdX2BEXNS8MfNdrR3FjyY%2F9NmUs9v22CFmw1Apd2oaVFaSdA7UO9uSIvP7LC0jl%2BXsDRPQUVp2CyVdB8zdBy0Gr4YJuD4LQxV7ymFPOd5UsxDav2x64rpBm88h2nUN1Sd6Y6Fj9%2BkcIdkamBWYqpKbCF%2FJngo46GNzRJTm6o0tLnmykmezKPTq%2B4LsZzYTz3Sdit9SGr962%2FW8%2FYGNiPD66J2y2RhMuk44l3y9LzoVZ0YYJ8tOq3RLRZm63l3OT5Ona5ocrq93UCGulToag8vzzp2ByRF66WU2e7o3Lm5BmCJNX6OYzpVKfgqX7sOlsZzWBUTMcpQ7KvBqYRjRbKkmgxAzTqIIVZ0%2F%2F%2Bu%2FQbD60B%2BgYBzS7j6RboTAVClWBqj5s%2FtwgS83Z%2B7%2F7k0KknEGkjHMUKaMeXEdr5UWt6QUijMIW4zwSjHuthh%2F6rtvgPGi1hddGZkeieHbwLwAAAP%2F%2FAQAA%2F%2F%2Fku%2FbPkgQAAA%3D%3D
200 OK 7 B URL GET HTTP/1.1 patsyendless.com/impr.gif?sid=H4sIAAAAAAAC%2F1RSz2skRRitjhEEQfAHggdhDh7WxUy6p3syPS4oxjUSjEnYXcnV6qrqSZmarqaqf0xyCi5IwMvszWPnTbJBXRYXvMouExEkIGQ8SA7mbxCEXJWZjAx%2Bh%2F6%2B970ueO9VfXWYXxIPOb3Y%2FFTvSaXoYrPu1m5syYTr0tbW79U8t%2B7eqm3JZCm4VeuNP6Z413Obdfft2seC7ejFhuu5rud6tRVpRKx7ixMWMn3U9upttx406l4zQM%2F8H9vcgaUOeHFJXoHko%2Be3f30CyYZIuj%2FcFnYn0%2Bk7H3VzRTNtUPCTz5KdRJcJurMxNg7i5GT6N7QdEfLNHHRyMnUAXRyNHSCSI%2BL84SFKTqYyERXH10ojBZEg4i%2BiLIYQaghJh2D6PiQ%2FJwDjWN9A0n24rk1Jd69ZOmZHZP7qb8hyROb%2FfA1J9%2FGykr3aXa3yTOrEohdXkL0hZGeIND9FtudAlqdg2ZeQ%2FDeyeLWGpHu0YZWG5BdvBbEQARP%2Bgk%2Bj1kLAY7FARbu1EPlLQeQ3Qj9stiYRSTmEjIdQog9q55BbB7l0kMcO8tRBl1%2FUaLMdu24rjmLfDwPGmO8z1gyXeJP7QRi7yNnYQx9Z2gdTfTCzj9TsY0f2YfJnsNsVLHdgM4KCVygFQWkJSkpQSoIyIyiL6pgr27DVQ65sHnnT3ph2vxrorHNIj3XWEQkBNf3D9JK8PAnvnwdX2BEXNS8MfNdrR3FjyY%2F9NmUs9v22CFmw1Apd2oaVFaSdA7UO9uSIvP7LC0jl%2BXsDRPQUVp2CyVdB8zdBy0Gr4YJuD4LQxV7ymFPOd5UsxDav2x64rpBm88h2nUN1Sd6Y6Fj9%2BkcIdkamBWYqpKbCF%2FJngo46GNzRJTm6o0tLnmykmezKPTq%2B4LsZzYTz3Sdit9SGr962%2FW8%2FYGNiPD66J2y2RhMuk44l3y9LzoVZ0YYJ8tOq3RLRZm63l3OT5Ona5ocrq93UCGulToag8vzzp2ByRF66WU2e7o3Lm5BmCJNX6OYzpVKfgqX7sOlsZzWBUTMcpQ7KvBqYRjRbKkmgxAzTqIIVZ0%2F%2F%2Bu%2FQbD60B%2BgYBzS7j6RboTAVClWBqj5s%2FtwgS83Z%2B7%2F7k0KknEGkjHMUKaMeXEdr5UWt6QUijMIW4zwSjHuthh%2F6rtvgPGi1hddGZkeieHbwLwAAAP%2F%2FAQAA%2F%2F%2Fku%2FbPkgQAAA%3D%3D
IP
Requested by https://dlhd.sx/embed/stream-464.php
Certificate IssuerLet's Encrypt
Subjectpatsyendless.com
Fingerprint0A:07:2B:06:66:F0:A2:5B:EA:4C:CD:30:8F:4F:51:2E:0D:0A:39:61
ValidityMon, 27 Nov 2023 07:58:29 GMT - Sun, 25 Feb 2024 07:58:28 GMT
File type ASCII text, with no line terminators
Hash 132d6af1b46048b45cf86cdee7991d31
eb7007d03d59b65bc6da7e098c4d38fc6dfb6285
ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c
GET /impr.gif?sid=H4sIAAAAAAAC%2F1RSz2skRRitjhEEQfAHggdhDh7WxUy6p3syPS4oxjUSjEnYXcnV6qrqSZmarqaqf0xyCi5IwMvszWPnTbJBXRYXvMouExEkIGQ8SA7mbxCEXJWZjAx%2Bh%2F6%2B970ueO9VfXWYXxIPOb3Y%2FFTvSaXoYrPu1m5syYTr0tbW79U8t%2B7eqm3JZCm4VeuNP6Z413Obdfft2seC7ejFhuu5rud6tRVpRKx7ixMWMn3U9upttx406l4zQM%2F8H9vcgaUOeHFJXoHko%2Be3f30CyYZIuj%2FcFnYn0%2Bk7H3VzRTNtUPCTz5KdRJcJurMxNg7i5GT6N7QdEfLNHHRyMnUAXRyNHSCSI%2BL84SFKTqYyERXH10ojBZEg4i%2BiLIYQaghJh2D6PiQ%2FJwDjWN9A0n24rk1Jd69ZOmZHZP7qb8hyROb%2FfA1J9%2FGykr3aXa3yTOrEohdXkL0hZGeIND9FtudAlqdg2ZeQ%2FDeyeLWGpHu0YZWG5BdvBbEQARP%2Bgk%2Bj1kLAY7FARbu1EPlLQeQ3Qj9stiYRSTmEjIdQog9q55BbB7l0kMcO8tRBl1%2FUaLMdu24rjmLfDwPGmO8z1gyXeJP7QRi7yNnYQx9Z2gdTfTCzj9TsY0f2YfJnsNsVLHdgM4KCVygFQWkJSkpQSoIyIyiL6pgr27DVQ65sHnnT3ph2vxrorHNIj3XWEQkBNf3D9JK8PAnvnwdX2BEXNS8MfNdrR3FjyY%2F9NmUs9v22CFmw1Apd2oaVFaSdA7UO9uSIvP7LC0jl%2BXsDRPQUVp2CyVdB8zdBy0Gr4YJuD4LQxV7ymFPOd5UsxDav2x64rpBm88h2nUN1Sd6Y6Fj9%2BkcIdkamBWYqpKbCF%2FJngo46GNzRJTm6o0tLnmykmezKPTq%2B4LsZzYTz3Sdit9SGr962%2FW8%2FYGNiPD66J2y2RhMuk44l3y9LzoVZ0YYJ8tOq3RLRZm63l3OT5Ona5ocrq93UCGulToag8vzzp2ByRF66WU2e7o3Lm5BmCJNX6OYzpVKfgqX7sOlsZzWBUTMcpQ7KvBqYRjRbKkmgxAzTqIIVZ0%2F%2F%2Bu%2FQbD60B%2BgYBzS7j6RboTAVClWBqj5s%2FtwgS83Z%2B7%2F7k0KknEGkjHMUKaMeXEdr5UWt6QUijMIW4zwSjHuthh%2F6rtvgPGi1hddGZkeieHbwLwAAAP%2F%2FAQAA%2F%2F%2Fku%2FbPkgQAAA%3D%3D HTTP/1.1
Host: patsyendless.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dlhd.sx/
Cookie: u_pl=16749046; uid_id2=4fee4ce3-3ab7-4dfe-ae97-b364b3283857:2:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; slec1843019bf263f39accf339e8c46780a9=[4819892]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Mon, 11 Dec 2023 07:55:53 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: bf1f60a1a2a04302abeeb70865abfcc9
Strict-Transport-Security: max-age=0; includeSubdomains
patsyendless.com/pixel/sbs?c=1
200 OK 0 B URL GET HTTP/1.1 patsyendless.com/pixel/sbs?c=1
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://dlhd.sx/embed/stream-464.php
Certificate IssuerLet's Encrypt
Subjectpatsyendless.com
Fingerprint0A:07:2B:06:66:F0:A2:5B:EA:4C:CD:30:8F:4F:51:2E:0D:0A:39:61
ValidityMon, 27 Nov 2023 07:58:29 GMT - Sun, 25 Feb 2024 07:58:28 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pixel/sbs?c=1 HTTP/1.1
Host: patsyendless.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dlhd.sx/
Cookie: u_pl=16749046; uid_id2=4fee4ce3-3ab7-4dfe-ae97-b364b3283857:2:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; slec1843019bf263f39accf339e8c46780a9=[4819892]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Mon, 11 Dec 2023 07:55:53 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
my.rtmark.net/gid.js?userId=28b10cfbd9f449cfa937757e82757d75
200 OK 65 B URL GET HTTP/2 my.rtmark.net/gid.js?userId=28b10cfbd9f449cfa937757e82757d75
IP
Requested by https://dlhd.sx/embed/stream-464.php
Certificate IssuerLet's Encrypt
Subjectrtmark.net
FingerprintE8:81:4E:79:89:89:BE:CE:75:1F:E0:2A:60:54:8A:A4:11:2E:F7:42
ValiditySat, 07 Oct 2023 15:22:00 GMT - Fri, 05 Jan 2024 15:21:59 GMT
File type troff or preprocessor input, ASCII text, with no line terminators
Hash 138feca4d2c1edca243fee0ece630873
7cd810803e0f9361d8a322360d44f1d851042c66
b394f0649e4d071508db048482ee2efad4e471c19256fac25383357852f2148e
GET /gid.js?userId=28b10cfbd9f449cfa937757e82757d75 HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://dlhd.sx
DNT: 1
Connection: keep-alive
Referer: https://dlhd.sx/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 11 Dec 2023 07:55:41 GMT
content-type: application/json; charset=utf-8
content-length: 65
access-control-allow-origin: https://dlhd.sx
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
set-cookie: ID=28b10cfbd9f449cfa937757e82757d75; expires=Tue, 10 Dec 2024 07:55:41 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
c.adsco.re/
0 B IP
Requested by https://dlhd.sx/embed/stream-464.php
Certificate IssuerSectigo Limited
Subject*.adsco.re
Fingerprint40:64:05:9C:99:0A:1E:9F:A7:49:61:8E:86:4C:4B:06:9C:73:83:73
ValiditySat, 23 Sep 2023 00:00:00 GMT - Sun, 29 Sep 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: c.adsco.re
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dlhd.sx/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 11 Dec 2023 07:55:40 GMT
content-type: text/html
cache-control: public, max-age=2678400
accept-ch: Sec-CH-UA, Sec-CH-UA-Mobile, Sec-CH-UA-Full-Version, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Arch, Sec-CH-UA-Model, Device-Memory, Downlink, ECT, RTT, Width, Viewport-Width, DPR
permissions-policy: ch-ua=(self "https://adsco.re"),ch-ua-mobile=(self "https://adsco.re"),ch-ua-full-version=(self "https://adsco.re"),ch-ua-platform=(self "https://adsco.re"),ch-ua-platform-version=(self "https://adsco.re"),ch-ua-arch=(self "https://adsco.re"),ch-ua-model=(self "https://adsco.re"),ch-device-memory=(self "https://adsco.re"),ch-downlink=(self "https://adsco.re"),ch-ect=(self "https://adsco.re"),ch-rtt=(self "https://adsco.re"),ch-width=(self "https://adsco.re"),ch-viewport-width=(self "https://adsco.re"),ch-dpr=(self "https://adsco.re")
link: <//6.adsco.re/>;rel=prefetch;crossorigin;as=fetch,<//4.adsco.re/>;rel=prefetch;crossorigin;as=fetch,<//adsco.re/>;rel=preconnect
expires: Thu, 11 Jan 2024 07:55:40 GMT
etag: W/"QbONdm6N+fFtme5WVlUGEw=="
cf-cache-status: HIT
age: 922418
vary: Accept-Encoding
server: cloudflare
cf-ray: 833c2aacabb7b509-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
nukeluck.net/?rb=aUlW4VH6NCzGcDM12MFKRd3VLsw3SxC18DE8ETJBEu_LObFvUp1eSy11fVHU4YmJN9KIMR6v86CcZu5WjAB54xz3xAGEl1oPpv80j6647dzesiBXp6YzUdtJeovdHJAw78HL7v2bS_RXn5A9atYCgzjWRYWvU__1HavL5IPfFAQcSgkQ5jUVqfB40Gb3P6OnIzh6RODCbTS1wVsQS4l_Co5mQ8EgaolI&request_ab2=0&zoneid=6712285&js_build=iclick-v1.642.2-auto&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wih=1024&wiw=1280&wfc=5&pl=https%3A%2F%2Fdlhd.sx%2Fembed%2Fstream-464.php&drf=&np=1&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false&btz=UTC&bto=0&wgl=&js_build=iclick-v1.642.2-auto&bs=651ea3d2-80b7-4a84-9985-5fed8dd60256&userId=28b10cfbd9f449cfa937757e82757d75&m=link
200 OK 2.2 kB URL GET HTTP/2 nukeluck.net/?rb=aUlW4VH6NCzGcDM12MFKRd3VLsw3SxC18DE8ETJBEu_LObFvUp1eSy11fVHU4YmJN9KIMR6v86CcZu5WjAB54xz3xAGEl1oPpv80j6647dzesiBXp6YzUdtJeovdHJAw78HL7v2bS_RXn5A9atYCgzjWRYWvU__1HavL5IPfFAQcSgkQ5jUVqfB40Gb3P6OnIzh6RODCbTS1wVsQS4l_Co5mQ8EgaolI&request_ab2=0&zoneid=6712285&js_build=iclick-v1.642.2-auto&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wih=1024&wiw=1280&wfc=5&pl=https%3A%2F%2Fdlhd.sx%2Fembed%2Fstream-464.php&drf=&np=1&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false&btz=UTC&bto=0&wgl=&js_build=iclick-v1.642.2-auto&bs=651ea3d2-80b7-4a84-9985-5fed8dd60256&userId=28b10cfbd9f449cfa937757e82757d75&m=link
IP
Requested by https://dlhd.sx/embed/stream-464.php
Certificate IssuerLet's Encrypt
Subjectnukeluck.net
Fingerprint10:9E:8F:E3:6A:F8:48:21:94:4C:23:4D:4E:96:D5:07:46:36:8E:4F
ValiditySun, 08 Oct 2023 09:09:43 GMT - Sat, 06 Jan 2024 09:09:42 GMT
File type troff or preprocessor input, ASCII text, with very long lines (2256), with no line terminators
Hash c123788d195d8407224345bdc0b7d479
7d38b48ece2493bdd85361b1c8ddfbb3fefe27be
f5074b82e44a58950f169f7a88f6c8db9bbe1d08a13d1c5e0298b04c98300ba4
GET /?rb=aUlW4VH6NCzGcDM12MFKRd3VLsw3SxC18DE8ETJBEu_LObFvUp1eSy11fVHU4YmJN9KIMR6v86CcZu5WjAB54xz3xAGEl1oPpv80j6647dzesiBXp6YzUdtJeovdHJAw78HL7v2bS_RXn5A9atYCgzjWRYWvU__1HavL5IPfFAQcSgkQ5jUVqfB40Gb3P6OnIzh6RODCbTS1wVsQS4l_Co5mQ8EgaolI&request_ab2=0&zoneid=6712285&js_build=iclick-v1.642.2-auto&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wih=1024&wiw=1280&wfc=5&pl=https%3A%2F%2Fdlhd.sx%2Fembed%2Fstream-464.php&drf=&np=1&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false&btz=UTC&bto=0&wgl=&js_build=iclick-v1.642.2-auto&bs=651ea3d2-80b7-4a84-9985-5fed8dd60256&userId=28b10cfbd9f449cfa937757e82757d75&m=link HTTP/1.1
Host: nukeluck.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://dlhd.sx/
Origin: https://dlhd.sx
DNT: 1
Connection: keep-alive
Cookie: OAID=28b10cfbd9f449cfa937757e82757d75; oaidts=1702281340
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 11 Dec 2023 07:55:41 GMT
content-type: application/json
x-trace-id: 1558b91d21374822cf2a0a5063dc23ff
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Wow64
access-control-allow-origin: https://dlhd.sx
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace
access-control-max-age: 86400
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
set-cookie: OAID=28b10cfbd9f449cfa937757e82757d75; expires=Tue, 10 Dec 2024 07:55:41 GMT; path=/; secure; SameSite=None
oaidts=1702281341; expires=Tue, 10 Dec 2024 07:55:41 GMT; path=/; secure; SameSite=None
syncedCookie=true; expires=Mon, 18 Dec 2023 07:55:41 GMT; path=/; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
content-encoding: gzip
X-Firefox-Spdy: h2
patsyendless.com/pixel/sbls?bv=23.49.4947&tmpl=482&u=https%3A%2F%2Fcdn.yourwebbars.com%2Fsb%2Fnotifications%2Fgames%2Fhentai-heroes%2Fcustom_banner%2F8%2Findex.html&l=1215&fd=38
200 OK 0 B URL GET HTTP/1.1 patsyendless.com/pixel/sbls?bv=23.49.4947&tmpl=482&u=https%3A%2F%2Fcdn.yourwebbars.com%2Fsb%2Fnotifications%2Fgames%2Fhentai-heroes%2Fcustom_banner%2F8%2Findex.html&l=1215&fd=38
IP
Requested by https://dlhd.sx/embed/stream-464.php
Certificate IssuerLet's Encrypt
Subjectpatsyendless.com
Fingerprint0A:07:2B:06:66:F0:A2:5B:EA:4C:CD:30:8F:4F:51:2E:0D:0A:39:61
ValidityMon, 27 Nov 2023 07:58:29 GMT - Sun, 25 Feb 2024 07:58:28 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pixel/sbls?bv=23.49.4947&tmpl=482&u=https%3A%2F%2Fcdn.yourwebbars.com%2Fsb%2Fnotifications%2Fgames%2Fhentai-heroes%2Fcustom_banner%2F8%2Findex.html&l=1215&fd=38 HTTP/1.1
Host: patsyendless.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dlhd.sx/
Cookie: u_pl=16749046; uid_id2=4fee4ce3-3ab7-4dfe-ae97-b364b3283857:2:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; slec1843019bf263f39accf339e8c46780a9=[4819892]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Mon, 11 Dec 2023 07:55:52 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
fonts.googleapis.com/css?family=Roboto:300,400,700&display=swap
200 OK 6.8 kB URL GET HTTP/2 fonts.googleapis.com/css?family=Roboto:300,400,700&display=swap
IP
Requested by https://dlhd.sx/embed/stream-464.php
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint10:D0:ED:9A:F4:53:C8:99:DE:B6:5E:5C:04:E6:20:0B:68:7D:46:EC
ValidityMon, 20 Nov 2023 08:08:50 GMT - Mon, 12 Feb 2024 08:08:49 GMT
File type ASCII text, with very long lines (7013), with no line terminators
Hash 49475c425d6c00477bb339179326c49b
bd97deeb753f44f43a21feafa92d98239fa511bd
598841a98ad357d2896d2f093ea3e4e1d44e24b3351268ffd45e61ff8c1d0e09
GET /css?family=Roboto:300,400,700&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Mon, 11 Dec 2023 07:55:53 GMT
date: Mon, 11 Dec 2023 07:55:53 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
cdn.yourwebbars.com/sb/notifications/games/hentai-heroes/custom_banner/8/index.html
200 OK 1.2 kB URL GET HTTP/2 cdn.yourwebbars.com/sb/notifications/games/hentai-heroes/custom_banner/8/index.html
IP
Requested by https://dlhd.sx/embed/stream-464.php
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint84:82:6E:35:03:D4:C4:FC:BA:08:CD:C8:E6:A3:97:A9:20:2F:F5:49
ValiditySun, 23 Jul 2023 00:00:00 GMT - Mon, 22 Jul 2024 23:59:59 GMT
File type HTML document text
- HTML document, ASCII text, with very long lines (1284), with no line terminators
Hash c027918f527566bdc59148bde3bb5b0c
904fa0b527a1d76c083a23e10e9d04701426afa4
6fdb255aef0fb622623e2fc5b56ccdabd6b8c04d7a2339eaa31eb446040016d2
GET /sb/notifications/games/hentai-heroes/custom_banner/8/index.html HTTP/1.1
Host: cdn.yourwebbars.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://dlhd.sx
DNT: 1
Connection: keep-alive
Referer: https://dlhd.sx/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 11 Dec 2023 07:55:52 GMT
content-type: text/html
last-modified: Thu, 19 Oct 2023 15:37:59 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 229912
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ZwY3v8waopcpyHkxSTJ8b7dIQW%2FQk%2FqSEx9PVXVfwIJLdYfH0YkB%2FrNqN3muGIx7OkGK5RKx4qLXl7ufne9nvrthcayljQ7iDfTjh6T3a5tI909IEAZgeS1UTIZgX4S%2FcfFNB1w%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 833c2af6885856c4-OSL
content-encoding: br
X-Firefox-Spdy: h2
nsjyfpo.com/script/ut.js?cb=1702281340483
200 OK 82 kB URL GET HTTP/3 nsjyfpo.com/script/ut.js?cb=1702281340483
IP
Requested by https://dlhd.sx/embed/stream-464.php
Certificate IssuerGoogle Trust Services LLC
Subjectnsjyfpo.com
Fingerprint74:A6:20:2C:D1:2C:27:ED:B9:B3:BC:0B:48:F3:00:1D:20:45:45:2F
ValidityTue, 05 Dec 2023 18:36:01 GMT - Mon, 04 Mar 2024 18:36:00 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /script/ut.js?cb=1702281340483 HTTP/1.1
Host: nsjyfpo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dlhd.sx/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 11 Dec 2023 07:55:40 GMT
content-type: text/javascript
x-guploader-uploadid: ABPtcPpknPKWEfx8mmf75u8OoAr8VOJELPRUdiVM19qBf6sa6sgKouN8JZJQdW_gmSgLDQBwpU0LLIM-Lw
x-goog-generation: 1701698737164870
x-goog-metageneration: 2
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 82092
x-goog-hash: crc32c=2nkS8g==, md5=Ht/tgHkwwd6oGKwYwpkVTA==
x-goog-storage-class: MULTI_REGIONAL
access-control-allow-origin: *
expires: Mon, 11 Dec 2023 08:19:31 GMT
cache-control: public, max-age=14400
age: 1804
last-modified: Mon, 04 Dec 2023 14:05:37 GMT
etag: W/"1edfed807930c1dea818ac18c299154c"
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=tKJLgUGC5Cm3ElzOjmvCsZM%2F7ppoHLWN8DIR0881mxbjlrpvv7EcAiqrsbwOAEm9cqZdPBaMfzaZn85klI7oobuvdqdRCoRC5r7DmzUq7VABAOwrtpC%2FoNQtW1YhRA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 833c2aa95ea91c06-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
dlhd.sx/favicon.ico
404 Not Found 146 B IP
Requested by https://dlhd.sx/embed/stream-464.php
Certificate IssuerGoogle Trust Services LLC
Subjectdlhd.sx
Fingerprint76:51:2D:5A:03:3C:EC:40:F6:2B:C4:26:97:0D:73:F6:FC:37:9C:83
ValidityThu, 19 Oct 2023 17:12:12 GMT - Wed, 17 Jan 2024 17:12:11 GMT
File type HTML document text
- HTML document text
- HTML document, ASCII text, with no line terminators
Hash 40b3fc14254227ec5012d996bf90c4e1
b0dd06eb5a779151151101337889ff09953f8ac0
740816c1b61e4a8443c26d30d3eecfea04815fca8cd605a142f9d8a35f86ceca
GET /favicon.ico HTTP/1.1
Host: dlhd.sx
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dlhd.sx/embed/stream-464.php
Cookie: pp_show_on_ddd430767cdbddd8ac0726a842abd6c0=1; dom3ic8zudi28v8lr6fgphwffqoz0j6c=4fee4ce3-3ab7-4dfe-ae97-b364b3283857%3A2%3A1; pp_main_ddd430767cdbddd8ac0726a842abd6c0=1; pp_exp_ddd430767cdbddd8ac0726a842abd6c0=1702288540889; prefetchAd_6712285=true
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
date: Mon, 11 Dec 2023 07:55:41 GMT
content-type: text/html
cache-control: max-age=14400
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=EkOtfcIylfcn7mPwbCV0rWzi9zsH5kjN5TuGT84CN0NV3xzjtoFJJ1sUR9pZumcsZwWdY%2FTs%2BzW346QRPDLSaWkkwz%2BtnXm2GeKRW5Ts94BPMhP0QwtkRT8H"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 833c2ab138d7b518-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
friendshipmale.com/sfp.js
200 OK 86 kB URL GET HTTP/2 friendshipmale.com/sfp.js
IP
Requested by https://dlhd.sx/embed/stream-464.php
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint08:6F:D8:CB:9E:0C:0A:98:2E:C5:CD:21:8E:0B:76:2B:50:6F:B6:37
ValiditySat, 18 Feb 2023 00:00:00 GMT - Sat, 17 Feb 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sfp.js HTTP/1.1
Host: friendshipmale.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dlhd.sx/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 11 Dec 2023 07:55:40 GMT
content-type: application/javascript; charset=utf-8
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
access-control-allow-origin: *
expires: Thu, 01 Jan 1970 00:00:01 GMT
cache-control: max-age=14400
x-request-id: 1469e49eae19a330ca71b046e2a216fc
strict-transport-security: max-age=0; includeSubdomains
cf-cache-status: EXPIRED
last-modified: Mon, 11 Dec 2023 07:55:40 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Id0iKJr6Tv8KPrNmPOpbt5JMvvVTZ24eepbyz4yph5pWQPv%2B%2F9KnfGOKT8AV808ySPOdBQTyhCYzb2EWHHZStOs7hVX1yrhtA4SN0WEJU%2FBEz39cI5K0qSV2MPKzWqJ4dSVi9JU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 833c2aa8c9c9b50c-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
friendshipmale.com/sfp.js
200 OK 86 kB URL GET HTTP/3 friendshipmale.com/sfp.js
IP
Requested by https://dlhd.sx/embed/stream-464.php
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint08:6F:D8:CB:9E:0C:0A:98:2E:C5:CD:21:8E:0B:76:2B:50:6F:B6:37
ValiditySat, 18 Feb 2023 00:00:00 GMT - Sat, 17 Feb 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sfp.js HTTP/1.1
Host: friendshipmale.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dlhd.sx/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 11 Dec 2023 07:55:41 GMT
content-type: application/javascript; charset=utf-8
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
access-control-allow-origin: *
expires: Thu, 01 Jan 1970 00:00:01 GMT
cache-control: max-age=14400
x-request-id: 41ebfdf530ee42f811cde9ed374dc729
strict-transport-security: max-age=0; includeSubdomains
cf-cache-status: EXPIRED
last-modified: Mon, 11 Dec 2023 07:55:41 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=sz2u88fqoicdeJPoFCTKPz1Txv4RERsGEjlCxK%2FP9zajLz%2BOOFrVRdEBPisKv0QSYWNxhakugs8gQjm1IhPARqkDRfPo%2BZgfd6xPyPQh79WjhtKKMd6yceHZK5NSEQGCC555pSk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 833c2aae4d591c0a-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
nsjyfpo.com/script/utils.js
200 OK 173 kB URL GET HTTP/2 nsjyfpo.com/script/utils.js
IP
Requested by https://dlhd.sx/embed/stream-464.php
Certificate IssuerGoogle Trust Services LLC
Subjectnsjyfpo.com
Fingerprint74:A6:20:2C:D1:2C:27:ED:B9:B3:BC:0B:48:F3:00:1D:20:45:45:2F
ValidityTue, 05 Dec 2023 18:36:01 GMT - Mon, 04 Mar 2024 18:36:00 GMT
Size 173 kB (172787 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /script/utils.js HTTP/1.1
Host: nsjyfpo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dlhd.sx/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 11 Dec 2023 07:55:38 GMT
content-type: text/javascript
x-guploader-uploadid: ABPtcPo0iySCzwpTycZ1lvHvegtezUMO28GdC3I1LtiQbocDeQa-bniR1W86Q4qX9Mp2cIjifwvlhTrd1A
x-goog-generation: 1701698751454949
x-goog-metageneration: 2
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 172787
x-goog-hash: crc32c=7VegwA==, md5=OLoCSXZxwtgwzVewK+JFgg==
x-goog-storage-class: MULTI_REGIONAL
access-control-allow-origin: *
expires: Mon, 11 Dec 2023 08:26:03 GMT
cache-control: public, max-age=14400
age: 1775
last-modified: Mon, 04 Dec 2023 14:05:51 GMT
etag: W/"38ba02497671c2d830cd57b02be24582"
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=fMxpBMPI0nfRcTuM%2FTX4Svmj2YaJeHyHGjh5VltqPGJpf3sbujAZWGCLc4V2hc3hcWIp0JiWIzVxGy9yyXYlfZ31Tw0%2F5iMpw4TmWUvM1ZP5SyDanRj1dVnEK106rg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 833c2a9c6bafb515-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
nukeluck.net/5/6712285/?oo=1&aab=1
200 OK 2.8 kB URL GET HTTP/2 nukeluck.net/5/6712285/?oo=1&aab=1
IP
Requested by https://dlhd.sx/embed/stream-464.php
Certificate IssuerLet's Encrypt
Subjectnukeluck.net
Fingerprint10:9E:8F:E3:6A:F8:48:21:94:4C:23:4D:4E:96:D5:07:46:36:8E:4F
ValiditySun, 08 Oct 2023 09:09:43 GMT - Sat, 06 Jan 2024 09:09:42 GMT
File type troff or preprocessor input, ASCII text, with very long lines (2995), with no line terminators
Hash 31062e14b3f1951558d2ef17df32ad47
ac401237cc4a13c595814c74d26a3bbadd865f83
4af374c69168666e5df0ab41d84c95afbfd5cecdf80325a75414a7f60a880066
GET /5/6712285/?oo=1&aab=1 HTTP/1.1
Host: nukeluck.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://dlhd.sx
DNT: 1
Connection: keep-alive
Referer: https://dlhd.sx/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 11 Dec 2023 07:55:40 GMT
content-type: application/json
x-trace-id: bf9f00d29652022f85dd9a26bc22782f
link: <https://my.rtmark.net>; rel="preconnect dns-prefetch",<https://propeller-tracking.com>; rel="preconnect dns-prefetch",<https://sr7pv7n5x.com>; rel="preconnect dns-prefetch"
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Wow64
access-control-allow-origin: https://dlhd.sx
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace
access-control-max-age: 86400
timing-allow-origin: *
set-cookie: OAID=28b10cfbd9f449cfa937757e82757d75; expires=Tue, 10 Dec 2024 07:55:40 GMT; path=/; secure; SameSite=None
oaidts=1702281340; expires=Tue, 10 Dec 2024 07:55:40 GMT; path=/; secure; SameSite=None
syncedCookie=; expires=Tue, 10 Nov 2009 23:00:00 GMT
pragma: no-cache, no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT, Mon, 26 Jul 1997 05:00:00 GMT
content-encoding: gzip
X-Firefox-Spdy: h2
cdn.creative-bars1.com/sb/notifications/games/hentai-heroes/custom_banner/8/css/animate.css
200 OK 79 kB URL GET HTTP/2 cdn.creative-bars1.com/sb/notifications/games/hentai-heroes/custom_banner/8/css/animate.css
IP
Requested by https://dlhd.sx/embed/stream-464.php
Certificate IssuerGoogle Trust Services LLC
Subjectcreative-bars1.com
Fingerprint2B:CC:32:FC:17:6F:25:69:2F:F4:A0:D9:DC:9C:C2:09:28:32:AB:34
ValiditySat, 21 Oct 2023 15:38:40 GMT - Fri, 19 Jan 2024 15:38:39 GMT
Hash e1d8acd5ee9d1a90ea09313cbd8f2b02
8a8327b115d1356715e63270d1ce6d46124c7b1a
3028c87fc798ac3741f02079034e6c23462afc0c5e6c8d321188ce3716c8472a
GET /sb/notifications/games/hentai-heroes/custom_banner/8/css/animate.css HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://dlhd.sx
DNT: 1
Connection: keep-alive
Referer: https://dlhd.sx/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 11 Dec 2023 07:55:52 GMT
content-type: text/css
last-modified: Thu, 19 Oct 2023 15:38:00 GMT
etag: W/"65314d58-13591"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 216376
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=J1qoSvKvLTdba2L8vxKIP9vS8Gds%2FMhu6pOpyBQDZB%2FG27NROgko7b%2BZUXsibeIC%2BvELhFO%2BKBB8uyWPzrdZNqkZ8%2FOuk4vxH5cl8R6yV7aEizO4GkN%2BbLXM6x%2FXBKacTqLpWM3g%2BfEI"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 833c2af77f8623ca-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
patsyendless.com/pixel/sbls?bv=23.49.4947&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fnotifications%2Fgames%2Fhentai-heroes%2Fcustom_banner%2F8%2Fcss%2Fanimate.css&l=79249&fd=122
200 OK 0 B URL GET HTTP/1.1 patsyendless.com/pixel/sbls?bv=23.49.4947&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fnotifications%2Fgames%2Fhentai-heroes%2Fcustom_banner%2F8%2Fcss%2Fanimate.css&l=79249&fd=122
IP
Requested by https://dlhd.sx/embed/stream-464.php
Certificate IssuerLet's Encrypt
Subjectpatsyendless.com
Fingerprint0A:07:2B:06:66:F0:A2:5B:EA:4C:CD:30:8F:4F:51:2E:0D:0A:39:61
ValidityMon, 27 Nov 2023 07:58:29 GMT - Sun, 25 Feb 2024 07:58:28 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pixel/sbls?bv=23.49.4947&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fnotifications%2Fgames%2Fhentai-heroes%2Fcustom_banner%2F8%2Fcss%2Fanimate.css&l=79249&fd=122 HTTP/1.1
Host: patsyendless.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dlhd.sx/
Cookie: u_pl=16749046; uid_id2=4fee4ce3-3ab7-4dfe-ae97-b364b3283857:2:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; slec1843019bf263f39accf339e8c46780a9=[4819892]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Mon, 11 Dec 2023 07:55:53 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
youradexchange.com/script/suurl5.php?r=6707202&cbur=0.563091308460606&cbiframe=0&cbWidth=1280&cbHeight=1024&cbtitle=&cbpage=https%3A%2F%2Fdlhd.sx%2Fembed%2Fstream-464.php&cbref=&cbdescription=&cbkeywords=&cbcdn=nsjyfpo.com&ts=1702281338651&srs=d27925a0a2c5ad4557586ff82667c82b&atv=38.4-sw-adbl-suv5&abtg=1
200 OK 917 B URL GET HTTP/2 youradexchange.com/script/suurl5.php?r=6707202&cbur=0.563091308460606&cbiframe=0&cbWidth=1280&cbHeight=1024&cbtitle=&cbpage=https%3A%2F%2Fdlhd.sx%2Fembed%2Fstream-464.php&cbref=&cbdescription=&cbkeywords=&cbcdn=nsjyfpo.com&ts=1702281338651&srs=d27925a0a2c5ad4557586ff82667c82b&atv=38.4-sw-adbl-suv5&abtg=1
IP
Requested by https://dlhd.sx/embed/stream-464.php
Certificate IssuerGoogle Trust Services LLC
Subjectyouradexchange.com
FingerprintFD:52:FD:E8:62:0A:DE:66:86:28:19:39:64:21:57:5C:CB:8A:59:D9
ValidityTue, 17 Oct 2023 07:21:58 GMT - Mon, 15 Jan 2024 07:21:57 GMT
File type troff or preprocessor input, ASCII text, with very long lines (943), with no line terminators
Hash da8cb592687e19ac440f480e4f71ce6a
649e38f996c26b7ed02d7a8344eb63ff39ecd6e1
ca70f569d08209ad52852a8f87e4229fa28a2640beb7d33bdaf9a695205a19f5
GET /script/suurl5.php?r=6707202&cbur=0.563091308460606&cbiframe=0&cbWidth=1280&cbHeight=1024&cbtitle=&cbpage=https%3A%2F%2Fdlhd.sx%2Fembed%2Fstream-464.php&cbref=&cbdescription=&cbkeywords=&cbcdn=nsjyfpo.com&ts=1702281338651&srs=d27925a0a2c5ad4557586ff82667c82b&atv=38.4-sw-adbl-suv5&abtg=1 HTTP/1.1
Host: youradexchange.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://dlhd.sx/
Origin: https://dlhd.sx
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 11 Dec 2023 07:55:38 GMT
content-type: application/json; charset=utf-8
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Content-Type
via: 1.1 google
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=4Zb8HKrsfa%2B35Rx5IUQ%2FW38SyyW1DeGd7Qp94v34JM9yqisrB7xEWqCEVn5m3F5uDb52tvzZfI%2BDcYLBFmTJ3P3LjzILx4J45TTZ8cLrt0ImCbOVG%2FkyD%2BJKZB%2B42aaZ2K06XXU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 833c2a9dd96bb50b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
c.adsco.re/
200 OK 80 kB IP
Requested by https://dlhd.sx/embed/stream-464.php
Certificate IssuerSectigo Limited
Subject*.adsco.re
Fingerprint40:64:05:9C:99:0A:1E:9F:A7:49:61:8E:86:4C:4B:06:9C:73:83:73
ValiditySat, 23 Sep 2023 00:00:00 GMT - Sun, 29 Sep 2024 23:59:59 GMT
File type HTML document text
- HTML document text
- HTML document text
- exported SGML document, ASCII text, with very long lines (881)
Hash 41b38d766e8df9f16d99ee5656550613
4b040e742fafccbf1f9afa059258568e320fd9d8
65802711d89571b28699f3399d58f642a270d1e2bc5e155a8a0c73c94c66ec3a
GET / HTTP/1.1
Host: c.adsco.re
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dlhd.sx/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 11 Dec 2023 07:55:41 GMT
content-type: text/html
cache-control: public, max-age=2678400
accept-ch: Sec-CH-UA, Sec-CH-UA-Mobile, Sec-CH-UA-Full-Version, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Arch, Sec-CH-UA-Model, Device-Memory, Downlink, ECT, RTT, Width, Viewport-Width, DPR
permissions-policy: ch-ua=(self "https://adsco.re"),ch-ua-mobile=(self "https://adsco.re"),ch-ua-full-version=(self "https://adsco.re"),ch-ua-platform=(self "https://adsco.re"),ch-ua-platform-version=(self "https://adsco.re"),ch-ua-arch=(self "https://adsco.re"),ch-ua-model=(self "https://adsco.re"),ch-device-memory=(self "https://adsco.re"),ch-downlink=(self "https://adsco.re"),ch-ect=(self "https://adsco.re"),ch-rtt=(self "https://adsco.re"),ch-width=(self "https://adsco.re"),ch-viewport-width=(self "https://adsco.re"),ch-dpr=(self "https://adsco.re")
link: <//6.adsco.re/>;rel=prefetch;crossorigin;as=fetch,<//4.adsco.re/>;rel=prefetch;crossorigin;as=fetch,<//adsco.re/>;rel=preconnect
expires: Thu, 11 Jan 2024 07:55:41 GMT
etag: W/"QbONdm6N+fFtme5WVlUGEw=="
cf-cache-status: HIT
age: 922419
vary: Accept-Encoding
server: cloudflare
cf-ray: 833c2ab02ffcb518-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
104.21.93.65
192.243.59.12
139.45.195.8
185.200.116.51
121.127.45.81
23.109.248.184
18.184.210.76