dlhd.sx/embed/stream-51.php
200 OK 5.0 kB URL User Request GET HTTP/2 dlhd.sx/embed/stream-51.php
IP
Certificate IssuerGoogle Trust Services LLC
Subjectdlhd.sx
Fingerprint76:51:2D:5A:03:3C:EC:40:F6:2B:C4:26:97:0D:73:F6:FC:37:9C:83
ValidityThu, 19 Oct 2023 17:12:12 GMT - Wed, 17 Jan 2024 17:12:11 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (8668), with CRLF, LF line terminators
Hash 6248bc3623f3295f8354eadfce9dde6d
0e30fffb1d6d3724ab060a866b83f8e9210ce291
1d3622a230d563484cb27913588f256f1094c55b8c5c10b9fd76b4bc79f8ff7c
GET /embed/stream-51.php HTTP/1.1
Host: dlhd.sx
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 01 Dec 2023 07:08:56 GMT
content-type: text/html; charset=UTF-8
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=421m9YKP57DrfWGB01VpfBxYIobfXg3eDELVEQ4kFq79O%2BvZB1seI%2Bu2naTaCy89AuLvXhw%2BXE1Pgn1FrqXD24rr3PX2aDRaUtVf6h8ZjU4gVV6RVKUQR8dq"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82e980723af256cc-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
xd.awashemeers.com/rSDwGOn9YSKf/oRBvJ
200 OK 20 B URL GET HTTP/1.1 xd.awashemeers.com/rSDwGOn9YSKf/oRBvJ
IP
Requested by https://dlhd.sx/embed/stream-51.php
Certificate IssuerLet's Encrypt
Subjectxd.awashemeers.com
Fingerprint2F:C8:2F:2A:87:03:29:41:5B:E0:18:9C:A7:BC:F5:30:66:F7:67:BD
ValiditySat, 11 Nov 2023 23:10:07 GMT - Fri, 09 Feb 2024 23:10:06 GMT
File type gzip compressed data, from Unix\012- data
Hash 7029066c27ac6f5ef18d660d5741979a
46c6643f07aa7f6bfe7118de926b86defc5087c4
59869db34853933b239f1e2219cf7d431da006aa919635478511fabbfc8849d2
GET /rSDwGOn9YSKf/oRBvJ HTTP/1.1
Host: xd.awashemeers.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dlhd.sx/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 01 Dec 2023 07:08:56 GMT
Content-Type: application/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=20
Accept-ch: sec-ch-ua-platform-version,sec-ch-ua-model,sec-ch-ua-full-version
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://dlhd.sx
Access-Control-Allow-Headers: content-type, megageocheckolololo, x-forwarded-for, x-requested-with, cache-control, pragma, expires
Access-Control-Max-Age: 600
Access-Control-Allow-Methods: GET, POST, OPTIONS
Set-Cookie: GL_UI4=eJw9zV1OhDAcBHC%2BWXVBJ%2BEAHqFVQXz0Za%2FgIyntH6wL7aZU0NtLTPRtMvlNJgiCqLpFuGYp4k9R414NvJGs5fKhfmRNUz8JRkPfvvTtc8MFa3Gll86LfiKf4LDMwvnOrwmOIxlyWnbSKipwt6u%2F5mzsZhKkvRNGFUjnXUwF8t7ZbSFXxUiMmAn5STsa7NcuxId1iDmr96zNnkOGyC5VXF4jf9NG7cvyiIizsswC3Fwm4Qfr5k6rLEQ6OqEI4SsOUngarftGrmg5e3sB7KS6f%2F97HG%2BcIVO0aklIrX8n9wNBjE5s; expires=Sat, 02-Dec-2023 07:08:56 GMT; Max-Age=86400; path=/; secure; SameSite=None
GL_GI10=eJwViE0KgzAUBvMeJVAqhY96AE%2BQamsXbmuXRReewGopgZBIEvtz%2B%2BpiBmaEEJwmYD0hqQpV5ao8qeJSgl7gpgUPFrJx%2FtP%2FQB6cn8HeYtcG47LazTYuf8BmbZDG%2Fmr0N%2BucmaN2NoAXtnX%2FMM%2FjrbuDJkng6FaHMRWgtzz8AV7hHdE%3D; expires=Sat, 02-Dec-2023 07:08:56 GMT; Max-Age=86400; path=/; secure; SameSite=None
Content-Encoding: gzip
Vary: Accept-Encoding
Strict-Transport-Security: max-age=1
X-Content-Type-Options: nosniff
historicgraduallyrow.com/dd/d4/30/ddd430767cdbddd8ac0726a842abd6c0.js
23 kB URL historicgraduallyrow.com/dd/d4/30/ddd430767cdbddd8ac0726a842abd6c0.js
IP
ASN #39572 DataWeb Global Group B.V.
File type ASCII text, with very long lines (59739), with no line terminators
Hash bf0d1de805e83b5f11d0ec4de20ad137
f153f625029f40832801cdb0410e61cdf1f85e6b
834755d4473330f46790680319f4303d1ac8c3b58bbfca61793ca7976525d842
GET /dd/d4/30/ddd430767cdbddd8ac0726a842abd6c0.js HTTP/1.1
Host: historicgraduallyrow.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dlhd.sx/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Fri, 01 Dec 2023 07:08:57 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 91b30cdf7220a51c7bb7b175c7c35bc9
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
ocsp.r2m03.amazontrust.com/
471 B URL ocsp.r2m03.amazontrust.com/
IP
Hash 1f5ea1de01644aecc419ef2fd3b7052c
1ec2b3adee6069d46937a34cf5d25d3b2566a9e0
dbd64cba305c05822c6c2b6f98eeae215c443e4370856624be3e3b7a5897e7b5
POST / HTTP/1.1
Host: ocsp.r2m03.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=7200
Date: Fri, 01 Dec 2023 07:08:57 GMT
Last-Modified: Fri, 01 Dec 2023 05:53:14 GMT
Server: ECAcc (ska/F73C)
X-Cache: Miss from cloudfront
Via: 1.1 6a0f63864791329e89a4b233ec4c3a36.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: LECvKgWYrrfR0uQ2E6vZWGvnQXd96zoxVOEDR1s8jqRdxDsSofjIPA==
Age: 4543
proftrafficcounter.com/stats
200 OK 40 B URL GET HTTP/2 proftrafficcounter.com/stats
IP
Requested by https://dlhd.sx/embed/stream-51.php
Certificate IssuerAmazon
Subjectproftrafficcounter.com
FingerprintE3:9F:79:6F:80:C0:BF:F8:C4:EB:45:F3:E9:0F:A7:41:F6:0C:05:E6
ValidityTue, 21 Nov 2023 00:00:00 GMT - Thu, 19 Dec 2024 23:59:59 GMT
File type ASCII text, with no line terminators
Hash 4db12b7472675e2aabe454998a3eccdf
87d3b51a3aefc670eede0af77b1984cd8947bdfe
acad101b97794f6d635a87163871bf8bbef5a0fe7871551f39e74d816991dcd4
GET /stats HTTP/1.1
Host: proftrafficcounter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://dlhd.sx
DNT: 1
Connection: keep-alive
Referer: https://dlhd.sx/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 01 Dec 2023 07:08:57 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: https://dlhd.sx
vary: Origin
access-control-allow-credentials: true
set-cookie: uid_id2=274592f3-7e2e-451c-8649-6399e80057b6:2:1; expires=Mon, 28 Nov 2033 07:08:57 GMT; secure; SameSite=None
X-Firefox-Spdy: h2
youradexchange.com/script/suurl4.php?r=4277835&cbur=0.9375196038741304&cbiframe=0&cbWidth=1280&cbHeight=1024&cbtitle=&cbpage=https%3A%2F%2Fdlhd.sx%2Fembed%2Fstream-51.php&cbref=&cbdescription=&cbkeywords=&cbcdn=achcdn.com&aggr=0&ts=1701414542277&atv=38.3-suv4&srs=e2d3e84cc4f44e4614595173321c1fe7
204 No Content 0 B URL GET HTTP/2 youradexchange.com/script/suurl4.php?r=4277835&cbur=0.9375196038741304&cbiframe=0&cbWidth=1280&cbHeight=1024&cbtitle=&cbpage=https%3A%2F%2Fdlhd.sx%2Fembed%2Fstream-51.php&cbref=&cbdescription=&cbkeywords=&cbcdn=achcdn.com&aggr=0&ts=1701414542277&atv=38.3-suv4&srs=e2d3e84cc4f44e4614595173321c1fe7
IP
Requested by https://dlhd.sx/embed/stream-51.php
Certificate IssuerGoogle Trust Services LLC
Subjectyouradexchange.com
FingerprintFD:52:FD:E8:62:0A:DE:66:86:28:19:39:64:21:57:5C:CB:8A:59:D9
ValidityTue, 17 Oct 2023 07:21:58 GMT - Mon, 15 Jan 2024 07:21:57 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /script/suurl4.php?r=4277835&cbur=0.9375196038741304&cbiframe=0&cbWidth=1280&cbHeight=1024&cbtitle=&cbpage=https%3A%2F%2Fdlhd.sx%2Fembed%2Fstream-51.php&cbref=&cbdescription=&cbkeywords=&cbcdn=achcdn.com&aggr=0&ts=1701414542277&atv=38.3-suv4&srs=e2d3e84cc4f44e4614595173321c1fe7 HTTP/1.1
Host: youradexchange.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://dlhd.sx/
Origin: https://dlhd.sx
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
date: Fri, 01 Dec 2023 07:08:57 GMT
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Content-Type
via: 1.1 google
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=lL3raURt5xdiph1Qg3z%2FcdTatfoFJNOxpabc7h37BZKeAUrTGm%2FBaeNLKu9A696MPEXgvoWg76VV5yRQGQTH6%2FHYwuNDYF7M17z3tvKZ2YMOBWAHHXsiov9xORFb6gRHRqQoAZ0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82e9807bdf3056c4-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
youradexchange.com/ut/hb.php?cb=0.7013585219766565&v=1
204 No Content 0 B URL POST HTTP/3 youradexchange.com/ut/hb.php?cb=0.7013585219766565&v=1
IP
Requested by https://dlhd.sx/embed/stream-51.php
Certificate IssuerGoogle Trust Services LLC
Subjectyouradexchange.com
FingerprintFD:52:FD:E8:62:0A:DE:66:86:28:19:39:64:21:57:5C:CB:8A:59:D9
ValidityTue, 17 Oct 2023 07:21:58 GMT - Mon, 15 Jan 2024 07:21:57 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /ut/hb.php?cb=0.7013585219766565&v=1 HTTP/1.1
Host: youradexchange.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain; charset=utf-8
Content-Length: 721
Origin: https://dlhd.sx
DNT: 1
Connection: keep-alive
Referer: https://dlhd.sx/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/3 204 No Content
date: Fri, 01 Dec 2023 07:08:57 GMT
access-control-allow-origin: *
via: 1.1 google
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=aSVd5%2FE%2F2CsP8geIWPXu9HF0Z9aN0fs0WhxIEdYltiPkfqquIzfXTcILUEQK7GhP3ccmaLkYlBJHJEcb5807rxgMO2YAtDStITpYROJ1XB00WwOc%2BQ%2BD7kc5x8xpC1rJrYzMv44%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82e9807cbd5c56c6-OSL
alt-svc: h3=":443"; ma=86400
code.jquery.com/jquery-3.6.0.min.js
200 OK 31 kB URL GET HTTP/2 code.jquery.com/jquery-3.6.0.min.js
IP
Requested by https://weblivehdplay.ru/premiumtv/daddyhd.php?id=51
Certificate IssuerSectigo Limited
Subject*.jquery.com
FingerprintD2:19:0A:AD:CE:BB:9C:61:17:5D:29:4B:A2:54:E8:C6:91:B8:F9:8D
ValidityTue, 11 Jul 2023 00:00:00 GMT - Sun, 14 Jul 2024 23:59:59 GMT
File type ASCII text, with very long lines (65447)
Hash 8fb8fee4fcc3cc86ff6c724154c49c42
b82d238d4e31fdf618bae8ac11a6c812c03dd0d4
ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e
GET /jquery-3.6.0.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://weblivehdplay.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Fri, 18 Oct 1991 12:00:00 GMT
etag: W/"28feccc0-15d9d"
cache-control: public, max-age=31536000, stale-while-revalidate=604800
access-control-allow-origin: *
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Fri, 01 Dec 2023 07:08:57 GMT
age: 811921
x-served-by: cache-lga21931-LGA, cache-bma1622-BMA
x-cache: HIT, HIT
x-cache-hits: 14, 243727
x-timer: S1701414538.857620,VS0,VE0
vary: Accept-Encoding
content-length: 30875
X-Firefox-Spdy: h2
banquetunarmedgrater.com/advertisers.js
200 OK 0 B URL GET HTTP/2 banquetunarmedgrater.com/advertisers.js
IP
Requested by https://dlhd.sx/embed/stream-51.php
Certificate IssuerGoogle Trust Services LLC
Subjectbanquetunarmedgrater.com
Fingerprint92:8E:AD:72:AC:AD:3B:21:99:CD:21:A0:9F:BD:F2:AF:0D:98:D8:57
ValidityThu, 09 Nov 2023 11:40:15 GMT - Wed, 07 Feb 2024 11:40:14 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /advertisers.js HTTP/1.1
Host: banquetunarmedgrater.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dlhd.sx/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 01 Dec 2023 07:08:58 GMT
content-type: application/javascript
content-length: 0
expires: Thu, 01 Jan 1970 00:00:01 GMT
cache-control: max-age=172800
x-request-id: 955d63c8303b8aef16a0cc9c5ed12368
strict-transport-security: max-age=0; includeSubdomains
cf-cache-status: EXPIRED
last-modified: Fri, 01 Dec 2023 07:08:57 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=1E0c7tlttHx9eMgXLn0qP1Lt6ETOWC7kAqgBLqK%2F0%2BZxo%2F7Jc1%2FDqQCOB7qH2rJ%2B4V6Iyon%2BPRlt4A4P%2B3y3Kw1XqBWaa%2B2%2FGXb0zlm9f0tmjRSE8S57aDeINwl4gJLijntholm%2FpWEssSU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82e9807d9c4d56b7-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
overwhelmfarrier.com/pixel/purst?dl=0&th=0&sc=0&rs=1532&rd=1532&fd=1187&bv=23.11.v.9&tmpl=70
0 B URL overwhelmfarrier.com/pixel/purst?dl=0&th=0&sc=0&rs=1532&rd=1532&fd=1187&bv=23.11.v.9&tmpl=70
IP
ASN #39572 DataWeb Global Group B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /pixel/purst?dl=0&th=0&sc=0&rs=1532&rd=1532&fd=1187&bv=23.11.v.9&tmpl=70 HTTP/1.1
Host: overwhelmfarrier.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dlhd.sx/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Fri, 01 Dec 2023 07:08:58 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
friendshipmale.com/sfp.js
200 OK 27 kB URL GET HTTP/3 friendshipmale.com/sfp.js
IP
Requested by https://dlhd.sx/embed/stream-51.php
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint08:6F:D8:CB:9E:0C:0A:98:2E:C5:CD:21:8E:0B:76:2B:50:6F:B6:37
ValiditySat, 18 Feb 2023 00:00:00 GMT - Sat, 17 Feb 2024 23:59:59 GMT
File type Unicode text, UTF-8 text, with very long lines (65529), with no line terminators
Hash 924e967bca1d599992556a8d139b1c5a
222b09dbf164ddc03d39100fd0524a22018d28b2
ac84c2f8288b59f8e04ba77287ce696052bfeee0d462a566d94dc305df646c95
GET /sfp.js HTTP/1.1
Host: friendshipmale.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dlhd.sx/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 01 Dec 2023 07:08:57 GMT
content-type: application/javascript; charset=utf-8
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
access-control-allow-origin: *
expires: Thu, 01 Jan 1970 00:00:01 GMT
cache-control: max-age=14400
x-request-id: d7241aa4379d4eeff0a2afa18dfe71e0
strict-transport-security: max-age=0; includeSubdomains
cf-cache-status: EXPIRED
last-modified: Fri, 01 Dec 2023 07:08:57 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=crFshgJHcK9fozZkC8sgAW2%2Bp55qUb%2BCk%2BGp21GpQERCCwUyrV%2B1EHHB0ZuSsKA9qA5mezQmVn%2BqZ5w07NCStDfjvJ0lXSkKxK8mCYY3Cp4EPJUE%2FXnFyQymBSb6tm%2FmW74Y%2FMI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82e9807c0947b50b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
overwhelmfarrier.com/18/43/01/1843019bf263f39accf339e8c46780a9.js
200 OK 15 kB URL GET HTTP/1.1 overwhelmfarrier.com/18/43/01/1843019bf263f39accf339e8c46780a9.js
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://dlhd.sx/embed/stream-51.php
Certificate IssuerLet's Encrypt
Subjectoverwhelmfarrier.com
Fingerprint73:29:36:67:DF:86:C1:29:CD:54:5E:05:D2:63:9A:F4:E2:BA:9C:C1
ValidityTue, 28 Nov 2023 10:35:32 GMT - Mon, 26 Feb 2024 10:35:31 GMT
File type ASCII text, with very long lines (42830), with no line terminators
Hash ff73693f3a7fa6340b6f6e858989c063
dc01cb4053402dd44e1133dcf75f52d54c19f178
5cb9e77383dae4170fe95633cc33ef0704f328aaa73bf63eba2f27fcb98b2b7b
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /18/43/01/1843019bf263f39accf339e8c46780a9.js HTTP/1.1
Host: overwhelmfarrier.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dlhd.sx/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Fri, 01 Dec 2023 07:08:58 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: ad9db756470bd97a57da58f0338b6cc0
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
me3b56wtow3n.l4.adsco.re/
200 OK 0 B URL POST HTTP/2 me3b56wtow3n.l4.adsco.re/
IP
Requested by https://dlhd.sx/embed/stream-51.php
Certificate IssuerLet's Encrypt
Subject*.l4.adsco.re
Fingerprint30:24:2D:06:44:32:CD:4B:46:E0:81:9A:CF:B1:F6:9B:D2:4F:F3:6F
ValidityMon, 25 Sep 2023 16:35:45 GMT - Sun, 24 Dec 2023 16:35:44 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST / HTTP/1.1
Host: me3b56wtow3n.l4.adsco.re
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 0
Origin: https://dlhd.sx
DNT: 1
Connection: keep-alive
Referer: https://dlhd.sx/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 01 Dec 2023 07:08:58 GMT
content-type: text/html
content-length: 0
last-modified: Fri, 02 Jun 2023 14:03:32 GMT
etag: "6479f6b4-0"
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
access-control-expose-headers: Content-Length,Content-Range
accept-ranges: bytes
X-Firefox-Spdy: h2
4.adsco.re/
200 OK 62 B IP
Requested by https://dlhd.sx/embed/stream-51.php
Certificate IssuerSectigo Limited
Subject*.adsco.re
Fingerprint40:64:05:9C:99:0A:1E:9F:A7:49:61:8E:86:4C:4B:06:9C:73:83:73
ValiditySat, 23 Sep 2023 00:00:00 GMT - Sun, 29 Sep 2024 23:59:59 GMT
File type ASCII text, with no line terminators
Hash 5b41cb22f84f645a103acc7bfbf084ff
bac3967b26d5ec4a0d09a580714e8219796816bd
709f0a0dfab9f9e074f4a4a348dcb09150838284d21e75cfb9e5ceaeeb2054bc
GET / HTTP/1.1
Host: 4.adsco.re
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://dlhd.sx
DNT: 1
Connection: keep-alive
Referer: https://dlhd.sx/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 01 Dec 2023 07:08:58 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Methods: GET, HEAD, OPTIONS
Access-Control-Allow-Headers: Content-Type
Access-Control-Allow-Origin: https://dlhd.sx
Access-Control-Max-Age: 2592000
Cache-Control: private, max-age=5
Content-Encoding: gzip
6.adsco.re/
0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: 6.adsco.re
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://c.adsco.re/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 01 Dec 2023 07:08:58 GMT
content-type: text/plain;charset=UTF-8
content-length: 0
access-control-allow-origin: *
cache-control: private, max-age=10
access-control-allow-headers: Content-Type
access-control-allow-methods: GET, HEAD, OPTIONS
access-control-max-age: 2592000
vary: Accept-Encoding
server: cloudflare
cf-ray: 82e98080d95cb4ed-OSL
alt-svc: h3=":443"; ma=86400
4.adsco.re/
200 OK 62 B IP
Requested by https://dlhd.sx/embed/stream-51.php
Certificate IssuerSectigo Limited
Subject*.adsco.re
Fingerprint40:64:05:9C:99:0A:1E:9F:A7:49:61:8E:86:4C:4B:06:9C:73:83:73
ValiditySat, 23 Sep 2023 00:00:00 GMT - Sun, 29 Sep 2024 23:59:59 GMT
File type ASCII text, with no line terminators
Hash 5b41cb22f84f645a103acc7bfbf084ff
bac3967b26d5ec4a0d09a580714e8219796816bd
709f0a0dfab9f9e074f4a4a348dcb09150838284d21e75cfb9e5ceaeeb2054bc
GET / HTTP/1.1
Host: 4.adsco.re
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://c.adsco.re/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 01 Dec 2023 07:08:58 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Methods: GET, HEAD, OPTIONS
Access-Control-Allow-Headers: Content-Type
Access-Control-Allow-Origin: *
Access-Control-Max-Age: 2592000
Cache-Control: private, max-age=5
Content-Encoding: gzip
me3b56wtow3n.n4.adsco.re/
0 B URL me3b56wtow3n.n4.adsco.re/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST / HTTP/1.1
Host: me3b56wtow3n.n4.adsco.re
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 0
Origin: https://dlhd.sx
DNT: 1
Connection: keep-alive
Referer: https://dlhd.sx/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 01 Dec 2023 07:08:58 GMT
content-type: text/html
content-length: 0
last-modified: Fri, 16 Jun 2023 08:37:42 GMT
etag: "648c1f56-0"
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
access-control-expose-headers: Content-Length,Content-Range
accept-ranges: bytes
X-Firefox-Spdy: h2
adsco.re/p
200 OK 844 B IP
Requested by https://dlhd.sx/embed/stream-51.php
Certificate IssuerSectigo Limited
Subject*.adsco.re
Fingerprint40:64:05:9C:99:0A:1E:9F:A7:49:61:8E:86:4C:4B:06:9C:73:83:73
ValiditySat, 23 Sep 2023 00:00:00 GMT - Sun, 29 Sep 2024 23:59:59 GMT
File type ASCII text, with very long lines (1063), with no line terminators
Hash 464d9bf37bb73a53477bf14fdc8644e4
03585d0c5376887914c761ec6451593798ba8563
520c9d09b592209b1f2840c0eb4a43cd16dc2129f07b213d295fe75d3e92ac81
POST /p HTTP/1.1
Host: adsco.re
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Length: 2066
Origin: https://dlhd.sx
DNT: 1
Connection: keep-alive
Referer: https://dlhd.sx/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 01 Dec 2023 07:08:59 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
AS-P-1: OK lon123
AS-P-2: OK
AS-P-3: OK
Access-Control-Max-Age: 2592000
Cache-Control: no-transform
Accept-CH: Sec-CH-UA, Sec-CH-UA-Mobile, Sec-CH-UA-Full-Version, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Arch, Sec-CH-UA-Model, Device-Memory, Downlink, ECT, RTT, Width, Viewport-Width, DPR
Critical-CH: Sec-CH-UA, Sec-CH-UA-Mobile, Sec-CH-UA-Full-Version, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Arch, Sec-CH-UA-Model, Device-Memory, Downlink, ECT, RTT, Width, Viewport-Width, DPR
Permissions-Policy: ch-ua=(self "https://adsco.re"),ch-ua-mobile=(self "https://adsco.re"),ch-ua-full-version=(self "https://adsco.re"),ch-ua-platform=(self "https://adsco.re"),ch-ua-platform-version=(self "https://adsco.re"),ch-ua-arch=(self "https://adsco.re"),ch-ua-model=(self "https://adsco.re"),ch-device-memory=(self "https://adsco.re"),ch-downlink=(self "https://adsco.re"),ch-ect=(self "https://adsco.re"),ch-rtt=(self "https://adsco.re"),ch-width=(self "https://adsco.re"),ch-viewport-width=(self "https://adsco.re"),ch-dpr=(self "https://adsco.re")
Access-Control-Allow-Origin: https://dlhd.sx
Access-Control-Allow-Credentials: true
Content-Encoding: gzip
d11enq2rymy0yl.cloudfront.net/scripts/jquery.gray.min.js
11 kB URL d11enq2rymy0yl.cloudfront.net/scripts/jquery.gray.min.js
IP
File type HTML document, ASCII text, with very long lines (1568)
Hash cd2a17947e2d7ab332c97756b2efb52f
123880d5ab56c2d35282654e762b361a1b273673
0dda76009b25530c93f48beee273c2edea388361c1c4c7de48c814248cefdc14
GET /scripts/jquery.gray.min.js HTTP/1.1
Host: d11enq2rymy0yl.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://dlhd.sx
DNT: 1
Connection: keep-alive
Referer: https://dlhd.sx/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/x-javascript
content-length: 10881
expires: Thu, 07 Dec 2023 23:42:31 GMT
access-control-allow-origin: *
link: <https://fqskuzqwpgu.com/>;rel=preconnect,<https://c.adsco.re/>;rel=preconnect,<https://adsco.re/>;rel=preconnect
cache-control: public, max-age=604800
content-encoding: br
date: Thu, 30 Nov 2023 23:42:31 GMT
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 83a23d85c009b0c0e3626072e9f997fe.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 4e7rpBUf9nhx1JA0kc4_T8IyRSiiuAZU3gbAAjKHOzAoQgLXjeFiRw==
age: 26789
X-Firefox-Spdy: h2
adsco.re/t
200 OK 861 B IP
Requested by https://dlhd.sx/embed/stream-51.php
Certificate IssuerSectigo Limited
Subject*.adsco.re
Fingerprint40:64:05:9C:99:0A:1E:9F:A7:49:61:8E:86:4C:4B:06:9C:73:83:73
ValiditySat, 23 Sep 2023 00:00:00 GMT - Sun, 29 Sep 2024 23:59:59 GMT
File type ASCII text, with very long lines (1084), with no line terminators
Hash d60867f6b8369ed9c17e528693aac4c6
999f1e455f2cacf6cd07fdad2913d03281ea9264
be650ab4426341236b996114fd399b44e6e9dcc253303d7be57a64eafbf63cbf
POST /t HTTP/1.1
Host: adsco.re
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Length: 869
Origin: https://dlhd.sx
DNT: 1
Connection: keep-alive
Referer: https://dlhd.sx/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 01 Dec 2023 07:09:00 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
AS-T-Node: lon123
Access-Control-Max-Age: 2592000
Cache-Control: no-transform
Accept-CH: Sec-CH-UA, Sec-CH-UA-Mobile, Sec-CH-UA-Full-Version, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Arch, Sec-CH-UA-Model, Device-Memory, Downlink, ECT, RTT, Width, Viewport-Width, DPR
Critical-CH: Sec-CH-UA, Sec-CH-UA-Mobile, Sec-CH-UA-Full-Version, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Arch, Sec-CH-UA-Model, Device-Memory, Downlink, ECT, RTT, Width, Viewport-Width, DPR
Permissions-Policy: ch-ua=(self "https://adsco.re"),ch-ua-mobile=(self "https://adsco.re"),ch-ua-full-version=(self "https://adsco.re"),ch-ua-platform=(self "https://adsco.re"),ch-ua-platform-version=(self "https://adsco.re"),ch-ua-arch=(self "https://adsco.re"),ch-ua-model=(self "https://adsco.re"),ch-device-memory=(self "https://adsco.re"),ch-downlink=(self "https://adsco.re"),ch-ect=(self "https://adsco.re"),ch-rtt=(self "https://adsco.re"),ch-width=(self "https://adsco.re"),ch-viewport-width=(self "https://adsco.re"),ch-dpr=(self "https://adsco.re")
Access-Control-Allow-Origin: https://dlhd.sx
Access-Control-Allow-Credentials: true
AS-T-CD: null
AS-T: 4x1084
Content-Encoding: gzip
fqskuzqwpgu.com/qbnygpfriomrxjkixgj?LUIwbHBe=BQMiAAAAAAAACZUAAg-PI24ZEm2JLYSFDwQd2q_G7slHhYRc4aISyFwA69siWg9RDz2eWoiS1aQwjtkaEAA-IgI4GXA672gVoWpslj0a9DUcA6RotO9oRfF96hdIssxjybp2xJqZTu0X8T1FEUv3gTfehiP-l_5jwN0CflbUcxL-MFzgHDSaHz83o7VPW0lWZq6KZHv8vBCs4D4AEgvj5k2Ac3ilZ_WT9u0Y2SgNw1Cf3XDsJZI3LvFGP5t7PIUS0rWkYlvV4iaBdU0U3FabSm7xOxdRtPROUzYKNR4FI3M_pKug0YpKIjjBeQ_XB3j6pTzQ_6pUa3koPqc0vQ4O5vXZpX0pzFiYq3664hgq4sYZpP6-FAFIcmuqPx7iBanBZ5Zf13JHeH428lw_6FItq1tol7lM8iMe03L3UiXDzMQRK_qNIYt2-HlyzvzrsJSipMpIFv46JmSpz63fdWa7Xvep7sQjbBe1aK8TJ0PTjvgiV7dgSi7dmNw2Ftu0KvSUtDhJYsacLfEic6fWJ2q6dsF2TqgRlJhXyqHnnDFbyJUjBQ_I36zQ7lIWkuDs6BJkgOwYfUhfqTfMiLDcbWnpfnGdM2BOvfgYJreqG5LMAOv1eChTs2bQXY1oS3OEtwA91MN7HR-vXO4Ao2smBW878dYFlhieQ-qF0RZWqoVRhE8HLOxT8_QUzQFcIM3Ci6RWw2-Ko26X3ifzb1zepbayG3IHh6TmMgmquxB0FzLTvEbvrfYA-QZWs0GJqyqPh7zrqToWLQbqHSbXgy6v0vNuAMRgEJktCVT7WTxsQLRbDIZ7Tqe4-y2yhMWvXbCZy8qFvIHCb-PlT4szbqPeUIDeNXu8S9WFZU2kVkyNBDTC02xBrFwUGe638Tl372aam7LRkr8aWB7Tgrj15oE_2pHt8UYwUozMd626VbdKa9y5sQEjUgbDWHBteiYYJ4kcjoaTMR9kv0pb11Qs0vMYHLLDBlyQzs2COiMZLXFjqv3UiQFnr9oIrztlGQurovpZcB4tuXWSOcC0eSTQVyAjaocFlrnz7ylQG06xrURzWIQCfQ-cKceNne4x4TgbaAV0&maXEcfRY=4&esOWGEDA=5015229&EBRiyqpP=&ScBmhqsC=0,0&TtwWeryM=&gBPHWqhK=&jJzEfnuZ=1280,1024,1,1280,1024,0
200 OK 44 B URL GET HTTP/1.1 fqskuzqwpgu.com/qbnygpfriomrxjkixgj?LUIwbHBe=BQMiAAAAAAAACZUAAg-PI24ZEm2JLYSFDwQd2q_G7slHhYRc4aISyFwA69siWg9RDz2eWoiS1aQwjtkaEAA-IgI4GXA672gVoWpslj0a9DUcA6RotO9oRfF96hdIssxjybp2xJqZTu0X8T1FEUv3gTfehiP-l_5jwN0CflbUcxL-MFzgHDSaHz83o7VPW0lWZq6KZHv8vBCs4D4AEgvj5k2Ac3ilZ_WT9u0Y2SgNw1Cf3XDsJZI3LvFGP5t7PIUS0rWkYlvV4iaBdU0U3FabSm7xOxdRtPROUzYKNR4FI3M_pKug0YpKIjjBeQ_XB3j6pTzQ_6pUa3koPqc0vQ4O5vXZpX0pzFiYq3664hgq4sYZpP6-FAFIcmuqPx7iBanBZ5Zf13JHeH428lw_6FItq1tol7lM8iMe03L3UiXDzMQRK_qNIYt2-HlyzvzrsJSipMpIFv46JmSpz63fdWa7Xvep7sQjbBe1aK8TJ0PTjvgiV7dgSi7dmNw2Ftu0KvSUtDhJYsacLfEic6fWJ2q6dsF2TqgRlJhXyqHnnDFbyJUjBQ_I36zQ7lIWkuDs6BJkgOwYfUhfqTfMiLDcbWnpfnGdM2BOvfgYJreqG5LMAOv1eChTs2bQXY1oS3OEtwA91MN7HR-vXO4Ao2smBW878dYFlhieQ-qF0RZWqoVRhE8HLOxT8_QUzQFcIM3Ci6RWw2-Ko26X3ifzb1zepbayG3IHh6TmMgmquxB0FzLTvEbvrfYA-QZWs0GJqyqPh7zrqToWLQbqHSbXgy6v0vNuAMRgEJktCVT7WTxsQLRbDIZ7Tqe4-y2yhMWvXbCZy8qFvIHCb-PlT4szbqPeUIDeNXu8S9WFZU2kVkyNBDTC02xBrFwUGe638Tl372aam7LRkr8aWB7Tgrj15oE_2pHt8UYwUozMd626VbdKa9y5sQEjUgbDWHBteiYYJ4kcjoaTMR9kv0pb11Qs0vMYHLLDBlyQzs2COiMZLXFjqv3UiQFnr9oIrztlGQurovpZcB4tuXWSOcC0eSTQVyAjaocFlrnz7ylQG06xrURzWIQCfQ-cKceNne4x4TgbaAV0&maXEcfRY=4&esOWGEDA=5015229&EBRiyqpP=&ScBmhqsC=0,0&TtwWeryM=&gBPHWqhK=&jJzEfnuZ=1280,1024,1,1280,1024,0
IP
Requested by https://dlhd.sx/embed/stream-51.php
Certificate IssuerLet's Encrypt
Subjectfqskuzqwpgu.com
Fingerprint21:C9:B3:E4:7D:CA:08:E6:A2:36:D0:C1:74:41:5B:78:7A:FE:3F:11
ValidityThu, 30 Nov 2023 21:27:03 GMT - Wed, 28 Feb 2024 21:27:02 GMT
File type ASCII text, with no line terminators
Hash d5f0a25e4d3522d56d48ce7bc3e518fb
86794caff58f7fee6e684c2ba7195f970a8d6f4c
9d781128a8ece413b003d5612b8398bf9340ef7f5b751d12bd125ba523d3ceb5
GET /qbnygpfriomrxjkixgj?LUIwbHBe=BQMiAAAAAAAACZUAAg-PI24ZEm2JLYSFDwQd2q_G7slHhYRc4aISyFwA69siWg9RDz2eWoiS1aQwjtkaEAA-IgI4GXA672gVoWpslj0a9DUcA6RotO9oRfF96hdIssxjybp2xJqZTu0X8T1FEUv3gTfehiP-l_5jwN0CflbUcxL-MFzgHDSaHz83o7VPW0lWZq6KZHv8vBCs4D4AEgvj5k2Ac3ilZ_WT9u0Y2SgNw1Cf3XDsJZI3LvFGP5t7PIUS0rWkYlvV4iaBdU0U3FabSm7xOxdRtPROUzYKNR4FI3M_pKug0YpKIjjBeQ_XB3j6pTzQ_6pUa3koPqc0vQ4O5vXZpX0pzFiYq3664hgq4sYZpP6-FAFIcmuqPx7iBanBZ5Zf13JHeH428lw_6FItq1tol7lM8iMe03L3UiXDzMQRK_qNIYt2-HlyzvzrsJSipMpIFv46JmSpz63fdWa7Xvep7sQjbBe1aK8TJ0PTjvgiV7dgSi7dmNw2Ftu0KvSUtDhJYsacLfEic6fWJ2q6dsF2TqgRlJhXyqHnnDFbyJUjBQ_I36zQ7lIWkuDs6BJkgOwYfUhfqTfMiLDcbWnpfnGdM2BOvfgYJreqG5LMAOv1eChTs2bQXY1oS3OEtwA91MN7HR-vXO4Ao2smBW878dYFlhieQ-qF0RZWqoVRhE8HLOxT8_QUzQFcIM3Ci6RWw2-Ko26X3ifzb1zepbayG3IHh6TmMgmquxB0FzLTvEbvrfYA-QZWs0GJqyqPh7zrqToWLQbqHSbXgy6v0vNuAMRgEJktCVT7WTxsQLRbDIZ7Tqe4-y2yhMWvXbCZy8qFvIHCb-PlT4szbqPeUIDeNXu8S9WFZU2kVkyNBDTC02xBrFwUGe638Tl372aam7LRkr8aWB7Tgrj15oE_2pHt8UYwUozMd626VbdKa9y5sQEjUgbDWHBteiYYJ4kcjoaTMR9kv0pb11Qs0vMYHLLDBlyQzs2COiMZLXFjqv3UiQFnr9oIrztlGQurovpZcB4tuXWSOcC0eSTQVyAjaocFlrnz7ylQG06xrURzWIQCfQ-cKceNne4x4TgbaAV0&maXEcfRY=4&esOWGEDA=5015229&EBRiyqpP=&ScBmhqsC=0,0&TtwWeryM=&gBPHWqhK=&jJzEfnuZ=1280,1024,1,1280,1024,0 HTTP/1.1
Host: fqskuzqwpgu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dlhd.sx/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
access-control-allow-origin: *
asf: 9
popads-ec: ASB
content-type: text/javascript;charset=UTF-8
content-length: 44
date: Fri, 01 Dec 2023 07:09:00 GMT
confrontbitterly.com/sbar.json?key=1843019bf263f39accf339e8c46780a9&uuid=274592f3-7e2e-451c-8649-6399e80057b6%3A2%3A1
3.4 kB URL confrontbitterly.com/sbar.json?key=1843019bf263f39accf339e8c46780a9&uuid=274592f3-7e2e-451c-8649-6399e80057b6%3A2%3A1
IP
ASN #39572 DataWeb Global Group B.V.
File type JSON data\012- , ASCII text, with very long lines (6024), with no line terminators
Hash cc216cc3c0b8854686def2f64d74f54b
00c68d85aaef188768f0b5bf0acb79f611f60917
6de41fdf5c3e4ca88c0c08928f1677e771b8d061b2a31fc3a4c57d74a98b3469
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /sbar.json?key=1843019bf263f39accf339e8c46780a9&uuid=274592f3-7e2e-451c-8649-6399e80057b6%3A2%3A1 HTTP/1.1
Host: confrontbitterly.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://dlhd.sx
DNT: 1
Connection: keep-alive
Referer: https://dlhd.sx/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Fri, 01 Dec 2023 07:09:10 GMT
Content-Type: text/plain; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://dlhd.sx
Access-Control-Allow-Origin: https://dlhd.sx
Access-Control-Allow-Credentials: true
Set-Cookie: u_pl=16749046; expires=Sat, 02 Dec 2023 07:09:10 GMT; secure; SameSite=None
uid_id2=274592f3-7e2e-451c-8649-6399e80057b6:2:1; expires=Fri, 08 Dec 2023 07:09:10 GMT; secure; SameSite=None
pdhtkv=true; expires=Sat, 02 Dec 2023 07:09:10 GMT; secure; SameSite=None
uncs=1; expires=Sat, 02 Dec 2023 07:09:10 GMT; secure; SameSite=None
pdhtkv29=true; expires=Sat, 02 Dec 2023 07:09:10 GMT; secure; SameSite=None
uncs29=1; expires=Sat, 02 Dec 2023 07:09:10 GMT; secure; SameSite=None
slec1843019bf263f39accf339e8c46780a9=[4766299]; expires=Fri, 01 Dec 2023 07:09:15 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: f3240dc7c8a711f2d0fb87d2d5b3d6d1
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
confrontbitterly.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSTWgkRRit3l1BEA%2FqIngQ5uBhBTPpnu75aRdcXNeswZiE%2FSEHT9VV1ZMyNV1NVff0ZLwEF5Y9zoKIx86bZIO6BNejIMhEBAkIOx4kBwPifS9CrspMBka%2FQ33f%2B14d3ntV93fzU%2BIhpyfrH%2Bm%2BVIou1qtu5cqGTLgubGX1TsVzq%2B7VyoZMGsHVSm9ymO7bnluvum9Wbgq2pRdrrue6nutVlqQRse4tTlnI9HHoVUO3GtSqXj1Az%2Fwf29yBpQ5495S8DMnHz23%2B8gSSjZB0vr0h7Fam07fe7%2BSKZtqgyw%2FuJluJLhJ05mNsHMTJwew2tB0T8uUF6ORg5gC6uzdxgEiOifO7hyg5mMlE1N0%2FVxopiAQRfwFFdwShRpB0BKbvQfKnBGAcq2tIOo9WtSno9jlLJ%2ByYXDr7G7IYk0t%2FXEbSObyuZK9yW6s8kzqx6MUlZG8E2R4hzY%2BQ9R3I4ggs%2BwyS%2F0oWz1aQdPbWrNKQ%2FOSNWjOoh7XYX2iKmlgI6h5baDWCcKHhh6FouW69GTWmEUk5goxHUGIAai8gtw5y6SCPHeSpgw4%2FqdB6GLtuM45i328FjDHfZ6zeavA694NW7CJnEw8DZOkATA3AzA5Ss4MtOYDJf4TdLGG5A5sRdHmJQhAUlqCgBIUkKDKColvuc2VrtnzElc0jb9Zrs%2B6XQ521d%2Bm%2BztoiIaBmsJuekpem4f3z8Axb4qTitQLf9cIorjX82A8pY7Hvh6LFgkaz5dIQVpaQ9gKoddCXY%2FLqz88jlU%2FfGSKiR7DqCEy%2BApq%2FDloMmzUXdHMYtFz0k0NOOd9Wsis2edX2wHWJNLuEbNvZVafktamOD77%2FGIIdX%2Fu8%2F%2BfNw8ufgpkSqSnxifyJoK0eDG%2Fpguzd0oUlT9bSTHZkn04e%2BHZGM3Hx6w%2FFdqENX75hB1%2B9yybEZHx8R9hshSZcJm1LvrkuORdmSRsmyA%2FLdkNE67ndvJ6bJE9X1t9bWu6kRlgrdTIClWNCnn0HJsfkxWd2%2Bnmv3P0L0oxg8hKd%2FJjMClIfgaU7sOl8ZzWBUXMcpQ6KvByaWjRfKkmgxBzTqIT9D47m8659gLZxQLN7SDoluqZEV5WgagCbXxxmqTm%2B9ps%2FLUTKGUbKOHuRMurhebhWnlREPXZj4dZEFIdR3KQuD%2BMgjGjoiWZUpx4yOxby%2Fhf%2FAgAA%2F%2F8BAAD%2F%2FxSR6VWUBAAA
7 B URL confrontbitterly.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSTWgkRRit3l1BEA%2FqIngQ5uBhBTPpnu75aRdcXNeswZiE%2FSEHT9VV1ZMyNV1NVff0ZLwEF5Y9zoKIx86bZIO6BNejIMhEBAkIOx4kBwPifS9CrspMBka%2FQ33f%2B14d3ntV93fzU%2BIhpyfrH%2Bm%2BVIou1qtu5cqGTLgubGX1TsVzq%2B7VyoZMGsHVSm9ymO7bnluvum9Wbgq2pRdrrue6nutVlqQRse4tTlnI9HHoVUO3GtSqXj1Az%2Fwf29yBpQ5495S8DMnHz23%2B8gSSjZB0vr0h7Fam07fe7%2BSKZtqgyw%2FuJluJLhJ05mNsHMTJwew2tB0T8uUF6ORg5gC6uzdxgEiOifO7hyg5mMlE1N0%2FVxopiAQRfwFFdwShRpB0BKbvQfKnBGAcq2tIOo9WtSno9jlLJ%2ByYXDr7G7IYk0t%2FXEbSObyuZK9yW6s8kzqx6MUlZG8E2R4hzY%2BQ9R3I4ggs%2BwyS%2F0oWz1aQdPbWrNKQ%2FOSNWjOoh7XYX2iKmlgI6h5baDWCcKHhh6FouW69GTWmEUk5goxHUGIAai8gtw5y6SCPHeSpgw4%2FqdB6GLtuM45i328FjDHfZ6zeavA694NW7CJnEw8DZOkATA3AzA5Ss4MtOYDJf4TdLGG5A5sRdHmJQhAUlqCgBIUkKDKColvuc2VrtnzElc0jb9Zrs%2B6XQ521d%2Bm%2BztoiIaBmsJuekpem4f3z8Axb4qTitQLf9cIorjX82A8pY7Hvh6LFgkaz5dIQVpaQ9gKoddCXY%2FLqz88jlU%2FfGSKiR7DqCEy%2BApq%2FDloMmzUXdHMYtFz0k0NOOd9Wsis2edX2wHWJNLuEbNvZVafktamOD77%2FGIIdX%2Fu8%2F%2BfNw8ufgpkSqSnxifyJoK0eDG%2Fpguzd0oUlT9bSTHZkn04e%2BHZGM3Hx6w%2FFdqENX75hB1%2B9yybEZHx8R9hshSZcJm1LvrkuORdmSRsmyA%2FLdkNE67ndvJ6bJE9X1t9bWu6kRlgrdTIClWNCnn0HJsfkxWd2%2Bnmv3P0L0oxg8hKd%2FJjMClIfgaU7sOl8ZzWBUXMcpQ6KvByaWjRfKkmgxBzTqIT9D47m8659gLZxQLN7SDoluqZEV5WgagCbXxxmqTm%2B9ps%2FLUTKGUbKOHuRMurhebhWnlREPXZj4dZEFIdR3KQuD%2BMgjGjoiWZUpx4yOxby%2Fhf%2FAgAA%2F%2F8BAAD%2F%2FxSR6VWUBAAA
IP
ASN #39572 DataWeb Global Group B.V.
File type ASCII text, with no line terminators
Hash 132d6af1b46048b45cf86cdee7991d31
eb7007d03d59b65bc6da7e098c4d38fc6dfb6285
ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /ren.gif?sid=H4sIAAAAAAAC%2F1RSTWgkRRit3l1BEA%2FqIngQ5uBhBTPpnu75aRdcXNeswZiE%2FSEHT9VV1ZMyNV1NVff0ZLwEF5Y9zoKIx86bZIO6BNejIMhEBAkIOx4kBwPifS9CrspMBka%2FQ33f%2B14d3ntV93fzU%2BIhpyfrH%2Bm%2BVIou1qtu5cqGTLgubGX1TsVzq%2B7VyoZMGsHVSm9ymO7bnluvum9Wbgq2pRdrrue6nutVlqQRse4tTlnI9HHoVUO3GtSqXj1Az%2Fwf29yBpQ5495S8DMnHz23%2B8gSSjZB0vr0h7Fam07fe7%2BSKZtqgyw%2FuJluJLhJ05mNsHMTJwew2tB0T8uUF6ORg5gC6uzdxgEiOifO7hyg5mMlE1N0%2FVxopiAQRfwFFdwShRpB0BKbvQfKnBGAcq2tIOo9WtSno9jlLJ%2ByYXDr7G7IYk0t%2FXEbSObyuZK9yW6s8kzqx6MUlZG8E2R4hzY%2BQ9R3I4ggs%2BwyS%2F0oWz1aQdPbWrNKQ%2FOSNWjOoh7XYX2iKmlgI6h5baDWCcKHhh6FouW69GTWmEUk5goxHUGIAai8gtw5y6SCPHeSpgw4%2FqdB6GLtuM45i328FjDHfZ6zeavA694NW7CJnEw8DZOkATA3AzA5Ss4MtOYDJf4TdLGG5A5sRdHmJQhAUlqCgBIUkKDKColvuc2VrtnzElc0jb9Zrs%2B6XQ521d%2Bm%2BztoiIaBmsJuekpem4f3z8Axb4qTitQLf9cIorjX82A8pY7Hvh6LFgkaz5dIQVpaQ9gKoddCXY%2FLqz88jlU%2FfGSKiR7DqCEy%2BApq%2FDloMmzUXdHMYtFz0k0NOOd9Wsis2edX2wHWJNLuEbNvZVafktamOD77%2FGIIdX%2Fu8%2F%2BfNw8ufgpkSqSnxifyJoK0eDG%2Fpguzd0oUlT9bSTHZkn04e%2BHZGM3Hx6w%2FFdqENX75hB1%2B9yybEZHx8R9hshSZcJm1LvrkuORdmSRsmyA%2FLdkNE67ndvJ6bJE9X1t9bWu6kRlgrdTIClWNCnn0HJsfkxWd2%2Bnmv3P0L0oxg8hKd%2FJjMClIfgaU7sOl8ZzWBUXMcpQ6KvByaWjRfKkmgxBzTqIT9D47m8659gLZxQLN7SDoluqZEV5WgagCbXxxmqTm%2B9ps%2FLUTKGUbKOHuRMurhebhWnlREPXZj4dZEFIdR3KQuD%2BMgjGjoiWZUpx4yOxby%2Fhf%2FAgAA%2F%2F8BAAD%2F%2FxSR6VWUBAAA HTTP/1.1
Host: confrontbitterly.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dlhd.sx/
Cookie: u_pl=16749046; uid_id2=274592f3-7e2e-451c-8649-6399e80057b6:2:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Fri, 01 Dec 2023 07:09:11 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 08d5587eb730330046514c40bf8a993a
Strict-Transport-Security: max-age=0; includeSubdomains
cdn.creative-bars1.com/sb/ssp/vpn/classic-push/big1/img/close.png
591 B URL cdn.creative-bars1.com/sb/ssp/vpn/classic-push/big1/img/close.png
IP
File type PNG image data, 12 x 12, 8-bit/color RGBA, non-interlaced\012- data
Hash 9fd5bcb6103d86e317bd1eb019bcbe71
6b5a52ea669dcb74946f2bed4bdd7ec985026113
0ddd3be104ac7945fb062096df62034a6a24ecc76ba92493c35c62c3c25982ae
GET /sb/ssp/vpn/classic-push/big1/img/close.png HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 01 Dec 2023 07:09:11 GMT
content-type: image/png
content-length: 591
last-modified: Mon, 21 Feb 2022 10:06:44 GMT
etag: "62136434-24f"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 1653613
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=M4shLp18ufe283DLAiqwb1%2FQtAYek8cjyjBoidxnMniJioIxTRDpX6ERdpRXis5HM06WvWx2isbLbVw%2B8ctnCe1iaH%2BSXpJmjfJY3VIkK24Q%2FWWZsipyc2Fwc9CTSnwNttalEOlvjVLW"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82e980d1aa1006f9-LHR
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
cdn.creative-bars1.com/sb/ssp/vpn/classic-push/big1/css/style.css
1.5 kB URL cdn.creative-bars1.com/sb/ssp/vpn/classic-push/big1/css/style.css
IP
Hash aae84ccade4cab86c1afdf4c4532762a
b08de856858a730e980fb2a0ca2f0e1442c03d46
6e45c9c8dba52c75144c153e63a04d055f15e5f39897ab3f2413154c9cf2e91f
GET /sb/ssp/vpn/classic-push/big1/css/style.css HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://dlhd.sx
DNT: 1
Connection: keep-alive
Referer: https://dlhd.sx/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 01 Dec 2023 07:09:11 GMT
content-type: text/css
last-modified: Mon, 21 Feb 2022 10:59:09 GMT
etag: W/"6213707d-1048"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 134596
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Kox9PpHx8LIh8dkKRlM%2B2uMqyt0%2Byww%2Bt375%2F3xUQzg9q0CzZUMe1gbTVsNsy%2FZhDZ8CbEfaZcS2QwWdXO4RsWziJK4e2TUKTaotywvKOaowedQS6uP9c6nvlehbK44HQcVwUlTdlgGv"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82e980d179e806f9-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
cdn.cloudimagesb.com/si/3c/d5/62/3cd562dd264800ee586ac2da770e9a65/1700491951.png
20 kB URL cdn.cloudimagesb.com/si/3c/d5/62/3cd562dd264800ee586ac2da770e9a65/1700491951.png
IP
ASN #39572 DataWeb Global Group B.V.
File type PNG image data, 320 x 180, 8-bit/color RGBA, non-interlaced\012- data
Hash ea31001ce8fa95eb2ac1617515105332
d505ca04808c25cfa33a555c96886f421ddbbde7
0267f5cd21fe5609405724c20d6f021b8932a696ada766b8e86e42c670000ab3
GET /si/3c/d5/62/3cd562dd264800ee586ac2da770e9a65/1700491951.png HTTP/1.1
Host: cdn.cloudimagesb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 01 Dec 2023 07:09:11 GMT
content-type: image/png
content-length: 20001
server: nginx/1.21.6
last-modified: Mon, 20 Nov 2023 14:52:40 GMT
etag: "655b72b8-4e21"
expires: Sun, 03 Dec 2023 07:09:11 GMT
cache-control: max-age=172800
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
cdn.cloudimagesb.com/si/98/58/2f/98582fa31e3a411721a1f890fd22419a/1700491903.png
9.0 kB URL cdn.cloudimagesb.com/si/98/58/2f/98582fa31e3a411721a1f890fd22419a/1700491903.png
IP
ASN #39572 DataWeb Global Group B.V.
File type PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced\012- data
Hash a56f06ca83ee06488a213b352e00bd90
aec437b74eb6f1143683872fb2d664286da4a664
7144c526762a9d91bdde1939194c2835f2cb1afe0ebac298bbdf1e9239b539ec
GET /si/98/58/2f/98582fa31e3a411721a1f890fd22419a/1700491903.png HTTP/1.1
Host: cdn.cloudimagesb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 01 Dec 2023 07:09:11 GMT
content-type: image/png
content-length: 9016
server: nginx/1.21.6
last-modified: Mon, 20 Nov 2023 14:51:52 GMT
etag: "655b7288-2338"
expires: Sun, 03 Dec 2023 07:09:11 GMT
cache-control: max-age=172800
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
16 kB URL fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15860, version 1.0\012- data
Hash e9f5aaf547f165386cd313b995dddd8e
acdef5603c2387b0e5bffd744b679a24a8bc1968
f5aebdfea35d1e7656ef4acc5db1f243209755ae3300943ef8fc6280f363c860
GET /s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://dlhd.sx
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15860
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 29 Nov 2023 21:13:56 GMT
expires: Thu, 28 Nov 2024 21:13:56 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 11 May 2022 19:24:42 GMT
content-type: font/woff2
age: 122115
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
16 kB URL fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15744, version 1.0\012- data
Hash 15d9f621c3bd1599f0169dcf0bd5e63e
7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52
f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://dlhd.sx
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 04:57:34 GMT
expires: Fri, 29 Nov 2024 04:57:34 GMT
cache-control: public, max-age=31536000
age: 94297
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
confrontbitterly.com/impr.gif?sid=H4sIAAAAAAAC%2F1RSTYgcRRitTiII4kENggdhDh4iuLP9NzPdBgzGmBiMScgPOXiqrqqeLbemq6nqnp4dL8FAyHECIh573%2BxmUcNiPAqCzIogC0LGg%2BzBBfGei7BXZWYHRr9Dfd%2F7Xh3ee1X3N8tD4qGkB9c%2F0kOpFF1tNd3GmTsy47qyjau3Gp7bdM827sisHZ5tDGaH6b%2Ftua2m%2B2bjkmDretV3Pdf1XK9xURqR6sHqnIXMH8deM3abod%2F0WiEG5v%2FYlg4sdcD7h%2BRlSD59bu2XJ5Bsgqz37QVh1wudv%2FV%2Br1S00AZ9vnM7W890laG3HFPjIM12Freh7ZSQL09AZzsLB9D9rZkDJHJKnN89JNnOQiaS%2Fvax0kRBZEj4C6j6Ewg1gaQTMH0Pkj8lAOO4eg1Z79FVbSq6cczSGTslp47%2Bhqym5NQfp5H1ds8rOWjc1KospM4sBmkNOZhAdifIyz0UQwey2gMrPoPkv5LVoyvIelvXrNKQ%2FOANvxO2Yj8NVjrCFythy2MrUTuMV9pBHIvIdVudpD2PSMoJZDqBEiNQewKldVBKB2XqoMwd9PhBg7bi1HU7aZIGQRQyxoKAsVbU5i0ehFHqomQzDyMU%2BQhMjcDMXeTmLtblCKb8EXathuUObEHQ5zUqQVBZgooSVJKgKgiqfr3NlfVt%2FYgrWybeovuLHtRjXXQ36bYuuiIjoGa0mR%2BSl%2Bbh%2FfPwCOvioOFFYeB6cZL67SANYspYGgSxiFjY7kQujWFlDWlPgFoHQzklr%2F78PHL59J0xEroHq%2FbA5Cug5eug1bjju6Br4zByMcx2OeV8Q8m%2BWONNOwDXNfLiFIoNZ1MdktfmOj74%2FmMItn%2Fu8%2BGfl3ZPfwpmauSmxifyJ4KuejC%2BoSuydUNXljy5lheyJ4d09sA3C1qIk19%2FKDYqbfjlC3b01btsRszGx7eELa7QjMusa8k35yXnwlzUhgnyw2V7RyTXS7t2vjRZmV%2B5%2Ft7Fy73cCGulziagckrIs%2B%2FA5JS8%2BMzOP%2B%2BZ239BmglMWaNX7pNFQeo9sPwubL7cWU1g1BInuYOqrMfGT5ZLJQmUWGKa1LD%2Fwcly3rQP0DUOaHEPWa9G39ToqxpUjWDLk%2BMiN%2FvnfgvmhUQ540QZZytRRj08DtfKg0bLC0WURB3GeSIY9zp%2BEAWu63MedmLhxSjsVMj7X%2FwLAAD%2F%2FwEAAP%2F%2FAJlns5QEAAA%3D
7 B URL confrontbitterly.com/impr.gif?sid=H4sIAAAAAAAC%2F1RSTYgcRRitTiII4kENggdhDh4iuLP9NzPdBgzGmBiMScgPOXiqrqqeLbemq6nqnp4dL8FAyHECIh573%2BxmUcNiPAqCzIogC0LGg%2BzBBfGei7BXZWYHRr9Dfd%2F7Xh3ee1X3N8tD4qGkB9c%2F0kOpFF1tNd3GmTsy47qyjau3Gp7bdM827sisHZ5tDGaH6b%2Ftua2m%2B2bjkmDretV3Pdf1XK9xURqR6sHqnIXMH8deM3abod%2F0WiEG5v%2FYlg4sdcD7h%2BRlSD59bu2XJ5Bsgqz37QVh1wudv%2FV%2Br1S00AZ9vnM7W890laG3HFPjIM12Freh7ZSQL09AZzsLB9D9rZkDJHJKnN89JNnOQiaS%2Fvax0kRBZEj4C6j6Ewg1gaQTMH0Pkj8lAOO4eg1Z79FVbSq6cczSGTslp47%2Bhqym5NQfp5H1ds8rOWjc1KospM4sBmkNOZhAdifIyz0UQwey2gMrPoPkv5LVoyvIelvXrNKQ%2FOANvxO2Yj8NVjrCFythy2MrUTuMV9pBHIvIdVudpD2PSMoJZDqBEiNQewKldVBKB2XqoMwd9PhBg7bi1HU7aZIGQRQyxoKAsVbU5i0ehFHqomQzDyMU%2BQhMjcDMXeTmLtblCKb8EXathuUObEHQ5zUqQVBZgooSVJKgKgiqfr3NlfVt%2FYgrWybeovuLHtRjXXQ36bYuuiIjoGa0mR%2BSl%2Bbh%2FfPwCOvioOFFYeB6cZL67SANYspYGgSxiFjY7kQujWFlDWlPgFoHQzklr%2F78PHL59J0xEroHq%2FbA5Cug5eug1bjju6Br4zByMcx2OeV8Q8m%2BWONNOwDXNfLiFIoNZ1MdktfmOj74%2FmMItn%2Fu8%2BGfl3ZPfwpmauSmxifyJ4KuejC%2BoSuydUNXljy5lheyJ4d09sA3C1qIk19%2FKDYqbfjlC3b01btsRszGx7eELa7QjMusa8k35yXnwlzUhgnyw2V7RyTXS7t2vjRZmV%2B5%2Ft7Fy73cCGulziagckrIs%2B%2FA5JS8%2BMzOP%2B%2BZ239BmglMWaNX7pNFQeo9sPwubL7cWU1g1BInuYOqrMfGT5ZLJQmUWGKa1LD%2Fwcly3rQP0DUOaHEPWa9G39ToqxpUjWDLk%2BMiN%2FvnfgvmhUQ540QZZytRRj08DtfKg0bLC0WURB3GeSIY9zp%2BEAWu63MedmLhxSjsVMj7X%2FwLAAD%2F%2FwEAAP%2F%2FAJlns5QEAAA%3D
IP
ASN #39572 DataWeb Global Group B.V.
File type ASCII text, with no line terminators
Hash 132d6af1b46048b45cf86cdee7991d31
eb7007d03d59b65bc6da7e098c4d38fc6dfb6285
ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /impr.gif?sid=H4sIAAAAAAAC%2F1RSTYgcRRitTiII4kENggdhDh4iuLP9NzPdBgzGmBiMScgPOXiqrqqeLbemq6nqnp4dL8FAyHECIh573%2BxmUcNiPAqCzIogC0LGg%2BzBBfGei7BXZWYHRr9Dfd%2F7Xh3ee1X3N8tD4qGkB9c%2F0kOpFF1tNd3GmTsy47qyjau3Gp7bdM827sisHZ5tDGaH6b%2Ftua2m%2B2bjkmDretV3Pdf1XK9xURqR6sHqnIXMH8deM3abod%2F0WiEG5v%2FYlg4sdcD7h%2BRlSD59bu2XJ5Bsgqz37QVh1wudv%2FV%2Br1S00AZ9vnM7W890laG3HFPjIM12Freh7ZSQL09AZzsLB9D9rZkDJHJKnN89JNnOQiaS%2Fvax0kRBZEj4C6j6Ewg1gaQTMH0Pkj8lAOO4eg1Z79FVbSq6cczSGTslp47%2Bhqym5NQfp5H1ds8rOWjc1KospM4sBmkNOZhAdifIyz0UQwey2gMrPoPkv5LVoyvIelvXrNKQ%2FOANvxO2Yj8NVjrCFythy2MrUTuMV9pBHIvIdVudpD2PSMoJZDqBEiNQewKldVBKB2XqoMwd9PhBg7bi1HU7aZIGQRQyxoKAsVbU5i0ehFHqomQzDyMU%2BQhMjcDMXeTmLtblCKb8EXathuUObEHQ5zUqQVBZgooSVJKgKgiqfr3NlfVt%2FYgrWybeovuLHtRjXXQ36bYuuiIjoGa0mR%2BSl%2Bbh%2FfPwCOvioOFFYeB6cZL67SANYspYGgSxiFjY7kQujWFlDWlPgFoHQzklr%2F78PHL59J0xEroHq%2FbA5Cug5eug1bjju6Br4zByMcx2OeV8Q8m%2BWONNOwDXNfLiFIoNZ1MdktfmOj74%2FmMItn%2Fu8%2BGfl3ZPfwpmauSmxifyJ4KuejC%2BoSuydUNXljy5lheyJ4d09sA3C1qIk19%2FKDYqbfjlC3b01btsRszGx7eELa7QjMusa8k35yXnwlzUhgnyw2V7RyTXS7t2vjRZmV%2B5%2Ft7Fy73cCGulziagckrIs%2B%2FA5JS8%2BMzOP%2B%2BZ239BmglMWaNX7pNFQeo9sPwubL7cWU1g1BInuYOqrMfGT5ZLJQmUWGKa1LD%2Fwcly3rQP0DUOaHEPWa9G39ToqxpUjWDLk%2BMiN%2FvnfgvmhUQ540QZZytRRj08DtfKg0bLC0WURB3GeSIY9zp%2BEAWu63MedmLhxSjsVMj7X%2FwLAAD%2F%2FwEAAP%2F%2FAJlns5QEAAA%3D HTTP/1.1
Host: confrontbitterly.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dlhd.sx/
Cookie: u_pl=16749046; uid_id2=274592f3-7e2e-451c-8649-6399e80057b6:2:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Fri, 01 Dec 2023 07:09:11 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 1258e2cb72316835beb8b2cb61e9b673
Strict-Transport-Security: max-age=0; includeSubdomains
confrontbitterly.com/pixel/sbs?c=1
0 B URL confrontbitterly.com/pixel/sbs?c=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /pixel/sbs?c=1 HTTP/1.1
Host: confrontbitterly.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dlhd.sx/
Cookie: u_pl=16749046; uid_id2=274592f3-7e2e-451c-8649-6399e80057b6:2:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Fri, 01 Dec 2023 07:09:12 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
c.adsco.re/
0 B IP
Requested by https://dlhd.sx/embed/stream-51.php
Certificate IssuerSectigo Limited
Subject*.adsco.re
Fingerprint40:64:05:9C:99:0A:1E:9F:A7:49:61:8E:86:4C:4B:06:9C:73:83:73
ValiditySat, 23 Sep 2023 00:00:00 GMT - Sun, 29 Sep 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: c.adsco.re
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dlhd.sx/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 01 Dec 2023 07:08:57 GMT
content-type: text/html
cache-control: public, max-age=2678400
accept-ch: Sec-CH-UA, Sec-CH-UA-Mobile, Sec-CH-UA-Full-Version, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Arch, Sec-CH-UA-Model, Device-Memory, Downlink, ECT, RTT, Width, Viewport-Width, DPR
permissions-policy: ch-ua=(self "https://adsco.re"),ch-ua-mobile=(self "https://adsco.re"),ch-ua-full-version=(self "https://adsco.re"),ch-ua-platform=(self "https://adsco.re"),ch-ua-platform-version=(self "https://adsco.re"),ch-ua-arch=(self "https://adsco.re"),ch-ua-model=(self "https://adsco.re"),ch-device-memory=(self "https://adsco.re"),ch-downlink=(self "https://adsco.re"),ch-ect=(self "https://adsco.re"),ch-rtt=(self "https://adsco.re"),ch-width=(self "https://adsco.re"),ch-viewport-width=(self "https://adsco.re"),ch-dpr=(self "https://adsco.re")
link: <//6.adsco.re/>;rel=prefetch;crossorigin;as=fetch,<//4.adsco.re/>;rel=prefetch;crossorigin;as=fetch,<//adsco.re/>;rel=preconnect
expires: Mon, 01 Jan 2024 07:08:57 GMT
etag: W/"QbONdm6N+fFtme5WVlUGEw=="
cf-cache-status: HIT
age: 55615
vary: Accept-Encoding
server: cloudflare
cf-ray: 82e9807d9ed77129-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
me3b56wtow3n.s4.adsco.re/
0 B URL POST me3b56wtow3n.s4.adsco.re/
IP
Requested by https://dlhd.sx/embed/stream-51.php
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST / HTTP/1.1
Host: me3b56wtow3n.s4.adsco.re
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 0
Origin: https://dlhd.sx
DNT: 1
Connection: keep-alive
Referer: https://dlhd.sx/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
dlhd.sx/favicon.ico
404 Not Found 146 B IP
Requested by https://dlhd.sx/embed/stream-51.php
Certificate IssuerGoogle Trust Services LLC
Subjectdlhd.sx
Fingerprint76:51:2D:5A:03:3C:EC:40:F6:2B:C4:26:97:0D:73:F6:FC:37:9C:83
ValidityThu, 19 Oct 2023 17:12:12 GMT - Wed, 17 Jan 2024 17:12:11 GMT
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with no line terminators
Hash 40b3fc14254227ec5012d996bf90c4e1
b0dd06eb5a779151151101337889ff09953f8ac0
740816c1b61e4a8443c26d30d3eecfea04815fca8cd605a142f9d8a35f86ceca
GET /favicon.ico HTTP/1.1
Host: dlhd.sx
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dlhd.sx/embed/stream-51.php
Cookie: pp_show_on_ddd430767cdbddd8ac0726a842abd6c0=1; dom3ic8zudi28v8lr6fgphwffqoz0j6c=274592f3-7e2e-451c-8649-6399e80057b6%3A2%3A1; a=e8GyO953iqC8JuTvmmEq51W6yC7i1ZgO
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
date: Fri, 01 Dec 2023 07:08:58 GMT
content-type: text/html
cache-control: max-age=14400
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=s4cBlr7Dw6hK9cB8%2BVcdaL8ZOPmUhSgVdyuuChAie3RbqPTXjKJ6kbd500ucx5hJ1sDAIuAUO1EnJRhU3vqRxmkQfKe5qu74W75upC2Wulr%2BZlayMoe8ah%2FF"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82e9808109770b02-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
xadsmart.com/mlpxnoijpjprssfs?YCQrVXmL=BQMSAAAAAAAACZUAAhBSqPEyF5Km6uzNvrBTj22ZvQpqj1k6mQD8Pzf-bHqzvVYoKcGky9AwzA5THpfj2RSjdxxuSeG9Wex980jMq6j0NRxbnKFDXu_Z14nX6qOgVVkPpfEX8xl05Dkb5LCAJHNdbrFo8rVNsGZFd07IA4WYAQ5rJfqLVhUapxCPLRWQvY1WmZ4RYIrNp1GekFkQHQLfB5-Dah3uifTd9cZHYGumazG12sVpghWUAKHdZUqTk9-0vGN-hA4IwAM__hPRMXrvHA9rHvtYQB_8ArThzwRE7jPu7Rg1hHPrV--NQbfXXlxpdZ6fdHJo7A91tVp8sJ4WcY9x0khXyN1XpRNxriHIZ_o5n6D2r8oSGZF8HxX7NiGfKDuJ2AUdOwj3EmYWvdxQWE0uhb_e7hAy80-Pwzi7rQYMY5OleTkf0IXMpkXlck54LJHJK6j6GWumk_xPUbGY1mGGmEIFkk4Dw_rCpz8w-dPU2fHSxmIb2OVNVGExuZtgvmEyWAVBL4yieCiwxzIMR5TypynUi9LxNTa1fP5p5rRyiYlvektqkMuLS3nf7rhfvGHFYassbxyh_tiT6_CyrAYck4ACH7BEUfhmn48HV1jCvF2V3xiqVRWt4TCkMoExl09q57-WgAJZCylUZdk1lhSTKCtvDVlmVe7lEomVwcjP_lhxH02meWZfAYu9n8o2CvhCHWF0zurjCShyX9_jm16VlblwYT-F6Xf9W6QRqqQZYuKhMNSPw71Vbt6XKwFfRvd2lhQcn_WSRePy8Ba_7uuvNseePdsOMTt4IY3hMjmQEA2JKpiHb2SND9yAx5AGOQ1iQtFErkjGBvfRO4YFZ_a0lbq3LTcQJt63dls0H3OZo2XAAlMncL3Hz0LLQsIrxeoaQG03by_HqbNM6Zox-wHNkE2LU_Y7rZGUh6oW4sFv-_RnFKjzo83C_7W0GqXh3gu49BUBWiJ-qiaJe3aSf9B2BeVdXKn6l-7vV1DQ1U9dxMcvSrdQ5Go0ossbG6XGQvPmdnAgnFj6N8CaRfiBkoeJAPaXCZomVpoRrAA&QePJkyvj=4&kQnShKYU=5015229&TFUkbavG=&rfxRwEKB=0,0&DbAtYgcF=&piYLroKP=&ChGnfEHJ=1280,1024,1,1280,1024,0
0 B URL GET xadsmart.com/mlpxnoijpjprssfs?YCQrVXmL=BQMSAAAAAAAACZUAAhBSqPEyF5Km6uzNvrBTj22ZvQpqj1k6mQD8Pzf-bHqzvVYoKcGky9AwzA5THpfj2RSjdxxuSeG9Wex980jMq6j0NRxbnKFDXu_Z14nX6qOgVVkPpfEX8xl05Dkb5LCAJHNdbrFo8rVNsGZFd07IA4WYAQ5rJfqLVhUapxCPLRWQvY1WmZ4RYIrNp1GekFkQHQLfB5-Dah3uifTd9cZHYGumazG12sVpghWUAKHdZUqTk9-0vGN-hA4IwAM__hPRMXrvHA9rHvtYQB_8ArThzwRE7jPu7Rg1hHPrV--NQbfXXlxpdZ6fdHJo7A91tVp8sJ4WcY9x0khXyN1XpRNxriHIZ_o5n6D2r8oSGZF8HxX7NiGfKDuJ2AUdOwj3EmYWvdxQWE0uhb_e7hAy80-Pwzi7rQYMY5OleTkf0IXMpkXlck54LJHJK6j6GWumk_xPUbGY1mGGmEIFkk4Dw_rCpz8w-dPU2fHSxmIb2OVNVGExuZtgvmEyWAVBL4yieCiwxzIMR5TypynUi9LxNTa1fP5p5rRyiYlvektqkMuLS3nf7rhfvGHFYassbxyh_tiT6_CyrAYck4ACH7BEUfhmn48HV1jCvF2V3xiqVRWt4TCkMoExl09q57-WgAJZCylUZdk1lhSTKCtvDVlmVe7lEomVwcjP_lhxH02meWZfAYu9n8o2CvhCHWF0zurjCShyX9_jm16VlblwYT-F6Xf9W6QRqqQZYuKhMNSPw71Vbt6XKwFfRvd2lhQcn_WSRePy8Ba_7uuvNseePdsOMTt4IY3hMjmQEA2JKpiHb2SND9yAx5AGOQ1iQtFErkjGBvfRO4YFZ_a0lbq3LTcQJt63dls0H3OZo2XAAlMncL3Hz0LLQsIrxeoaQG03by_HqbNM6Zox-wHNkE2LU_Y7rZGUh6oW4sFv-_RnFKjzo83C_7W0GqXh3gu49BUBWiJ-qiaJe3aSf9B2BeVdXKn6l-7vV1DQ1U9dxMcvSrdQ5Go0ossbG6XGQvPmdnAgnFj6N8CaRfiBkoeJAPaXCZomVpoRrAA&QePJkyvj=4&kQnShKYU=5015229&TFUkbavG=&rfxRwEKB=0,0&DbAtYgcF=&piYLroKP=&ChGnfEHJ=1280,1024,1,1280,1024,0
IP
Requested by https://dlhd.sx/embed/stream-51.php
Certificate IssuerSectigo Limited
Subjectxadsmart.com
FingerprintFC:E8:BA:57:31:46:6D:51:70:B5:42:35:6E:CF:97:6F:AF:38:C5:58
ValidityMon, 14 Aug 2023 00:00:00 GMT - Fri, 13 Sep 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /mlpxnoijpjprssfs?YCQrVXmL=BQMSAAAAAAAACZUAAhBSqPEyF5Km6uzNvrBTj22ZvQpqj1k6mQD8Pzf-bHqzvVYoKcGky9AwzA5THpfj2RSjdxxuSeG9Wex980jMq6j0NRxbnKFDXu_Z14nX6qOgVVkPpfEX8xl05Dkb5LCAJHNdbrFo8rVNsGZFd07IA4WYAQ5rJfqLVhUapxCPLRWQvY1WmZ4RYIrNp1GekFkQHQLfB5-Dah3uifTd9cZHYGumazG12sVpghWUAKHdZUqTk9-0vGN-hA4IwAM__hPRMXrvHA9rHvtYQB_8ArThzwRE7jPu7Rg1hHPrV--NQbfXXlxpdZ6fdHJo7A91tVp8sJ4WcY9x0khXyN1XpRNxriHIZ_o5n6D2r8oSGZF8HxX7NiGfKDuJ2AUdOwj3EmYWvdxQWE0uhb_e7hAy80-Pwzi7rQYMY5OleTkf0IXMpkXlck54LJHJK6j6GWumk_xPUbGY1mGGmEIFkk4Dw_rCpz8w-dPU2fHSxmIb2OVNVGExuZtgvmEyWAVBL4yieCiwxzIMR5TypynUi9LxNTa1fP5p5rRyiYlvektqkMuLS3nf7rhfvGHFYassbxyh_tiT6_CyrAYck4ACH7BEUfhmn48HV1jCvF2V3xiqVRWt4TCkMoExl09q57-WgAJZCylUZdk1lhSTKCtvDVlmVe7lEomVwcjP_lhxH02meWZfAYu9n8o2CvhCHWF0zurjCShyX9_jm16VlblwYT-F6Xf9W6QRqqQZYuKhMNSPw71Vbt6XKwFfRvd2lhQcn_WSRePy8Ba_7uuvNseePdsOMTt4IY3hMjmQEA2JKpiHb2SND9yAx5AGOQ1iQtFErkjGBvfRO4YFZ_a0lbq3LTcQJt63dls0H3OZo2XAAlMncL3Hz0LLQsIrxeoaQG03by_HqbNM6Zox-wHNkE2LU_Y7rZGUh6oW4sFv-_RnFKjzo83C_7W0GqXh3gu49BUBWiJ-qiaJe3aSf9B2BeVdXKn6l-7vV1DQ1U9dxMcvSrdQ5Go0ossbG6XGQvPmdnAgnFj6N8CaRfiBkoeJAPaXCZomVpoRrAA&QePJkyvj=4&kQnShKYU=5015229&TFUkbavG=&rfxRwEKB=0,0&DbAtYgcF=&piYLroKP=&ChGnfEHJ=1280,1024,1,1280,1024,0 HTTP/1.1
Host: xadsmart.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dlhd.sx/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
mvujvxc.com/script/suv5.js
200 OK 97 kB URL GET HTTP/3 mvujvxc.com/script/suv5.js
IP
Requested by https://dlhd.sx/embed/stream-51.php
Certificate IssuerGoogle Trust Services LLC
Subjectmvujvxc.com
FingerprintCD:A2:4D:D7:20:92:D4:29:4A:DA:50:AC:4E:C5:B1:1B:3B:51:D4:77
ValidityMon, 27 Nov 2023 11:39:15 GMT - Sun, 25 Feb 2024 11:39:14 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /script/suv5.js HTTP/1.1
Host: mvujvxc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dlhd.sx/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 01 Dec 2023 07:08:56 GMT
content-type: text/javascript
x-guploader-uploadid: ABPtcPqg1kWwGoAPRgzoz4c557aWp3BKUe6rcikhhOF66UvZXUM7hsPfJ0PQHJNdYYkpWx3LX8vzgP75eeJnmtJr0rl3Lw
x-goog-generation: 1701078144239592
x-goog-metageneration: 2
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 97361
x-goog-hash: crc32c=RNemrA==, md5=sO8X3U2eRJWY9eb3JLF3YQ==
x-goog-storage-class: MULTI_REGIONAL
access-control-allow-origin: *
expires: Fri, 01 Dec 2023 07:21:03 GMT
cache-control: public, max-age=14400
age: 2528
last-modified: Mon, 27 Nov 2023 09:42:24 GMT
etag: W/"b0ef17dd4d9e449598f5e6f724b17761"
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=7KoQPZtMZEewQjAxZWRwRxSjGVrzM49v26iiAD0nLY5VYGIDbFJvwEP1co9XjdmZUnfKCPXR0AYzB47KJX44VrkYdOyOPme9C7cdWEM6xAz8racX788%2BfwwbOtbzbg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82e980773a801c0a-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
mvujvxc.com/script/ut.js?cb=1701414542378
200 OK 82 kB URL GET HTTP/3 mvujvxc.com/script/ut.js?cb=1701414542378
IP
Requested by https://dlhd.sx/embed/stream-51.php
Certificate IssuerGoogle Trust Services LLC
Subjectmvujvxc.com
FingerprintCD:A2:4D:D7:20:92:D4:29:4A:DA:50:AC:4E:C5:B1:1B:3B:51:D4:77
ValidityMon, 27 Nov 2023 11:39:15 GMT - Sun, 25 Feb 2024 11:39:14 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /script/ut.js?cb=1701414542378 HTTP/1.1
Host: mvujvxc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dlhd.sx/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 01 Dec 2023 07:08:57 GMT
content-type: text/javascript
x-guploader-uploadid: ABPtcPq6rFJY9A3MZyvzq3fN92FcDb_ZSF-bFsf2IGgBk1farM7sQjf5uiWON2A1lM0yKHxS1BxnvYjrFDMDsC7ELfxDeZgmSe3o
x-goog-generation: 1701078201797678
x-goog-metageneration: 2
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 82099
x-goog-hash: crc32c=GKpGKQ==, md5=hSTtUFVQcINAGNFMKOKS5Q==
x-goog-storage-class: MULTI_REGIONAL
access-control-allow-origin: *
expires: Fri, 01 Dec 2023 06:31:17 GMT
cache-control: public, max-age=14400
age: 2529
last-modified: Mon, 27 Nov 2023 09:43:21 GMT
etag: W/"8524ed50555070834018d14c28e292e5"
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=R9qbybytpKM7osz%2BZNK2slhmS8i%2FxLNf4LZ3mW0TmOsGR4RSn4t5xMMcd1e2y58QAclGaaPG0K1Zva8KDMHTX1dtN9yRR8MOMs8%2BNAB4JP%2B1J3fwgZ5C2dCWiOMZbg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82e9807cbc851c0a-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
dlhd.sx/embed/adblock.php
200 OK 1.7 kB URL GET HTTP/3 dlhd.sx/embed/adblock.php
IP
Requested by https://dlhd.sx/embed/stream-51.php
Certificate IssuerGoogle Trust Services LLC
Subjectdlhd.sx
Fingerprint76:51:2D:5A:03:3C:EC:40:F6:2B:C4:26:97:0D:73:F6:FC:37:9C:83
ValidityThu, 19 Oct 2023 17:12:12 GMT - Wed, 17 Jan 2024 17:12:11 GMT
File type ASCII text, with very long lines (1779), with no line terminators
Hash bcf1174f5581f48885c3809c034ec1cd
125d6f237e82b2712cf86887c8b62f8ee320549b
b3271c7c2f895ff108d2027c5ecba855f5c94c4f48c285ea0de796862fa13999
GET /embed/adblock.php HTTP/1.1
Host: dlhd.sx
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dlhd.sx/embed/stream-51.php
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 01 Dec 2023 07:08:56 GMT
content-type: application/javascript
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=RQ7SMrujhgH%2Fn6Jl2GxrjBfZmAUPjXipOjJoK%2BMZpYgkf0BnmHVifTNxnMdfsMjWLNElSlLfooNvMe8muwlXbG%2BGhlqTktoT6ceQjVmGBgPXJh0f%2Fu7AD%2BDM"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82e980748ac30b02-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
achcdn.com/script/suv4.js
200 OK 203 kB URL GET HTTP/2 achcdn.com/script/suv4.js
IP
Requested by https://dlhd.sx/embed/stream-51.php
Certificate IssuerGoogle Trust Services LLC
Subjectachcdn.com
Fingerprint52:9D:4F:AD:60:0D:A1:64:0A:07:87:97:4E:F6:92:D9:02:CF:2A:D6
ValidityTue, 24 Oct 2023 11:00:13 GMT - Mon, 22 Jan 2024 11:00:12 GMT
Size 203 kB (202851 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /script/suv4.js HTTP/1.1
Host: achcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dlhd.sx/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 01 Dec 2023 07:08:56 GMT
content-type: text/javascript
x-guploader-uploadid: ABPtcPqj4J0Stx6Fe-5LrooBAphoPiL3hwj9APR2BIRowKf_NyNBX-6x-eMLK0fZCPUqYD55r_erIJKoDXbLLHrjXleQOctATTQF
x-goog-generation: 1701078116653425
x-goog-metageneration: 2
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 202851
x-goog-hash: crc32c=U3QS7A==, md5=3lRpDtr/hi19RVmTJsWEng==
x-goog-storage-class: MULTI_REGIONAL
access-control-allow-origin: *
expires: Fri, 01 Dec 2023 07:36:08 GMT
cache-control: public, max-age=14400
last-modified: Mon, 27 Nov 2023 09:41:56 GMT
etag: W/"de54690edaff862d7d45599326c5849e"
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=96AmA6Eno4cnqtBU4kWjTF2MkoQU4o80MoaK4vPiV997I4Xxb2UqPlkbI1pmbC%2FqEE0DSQsM2bEfdonNFKjsA6vzdolPJZjniBrBo5GmjUXWQHejW9m1YFsgTxaa"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82e98074dacd5695-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
weblivehdplay.ru/premiumtv/daddyhd.php?id=51
200 OK 89 kB URL GET HTTP/2 weblivehdplay.ru/premiumtv/daddyhd.php?id=51
IP
Requested by https://dlhd.sx/embed/stream-51.php
Certificate IssuerLet's Encrypt
Subjectweblivehdplay.ru
Fingerprint8F:C7:52:FE:60:C0:88:C8:17:25:6E:98:6D:F5:97:E1:5F:B3:91:C1
ValidityThu, 05 Oct 2023 12:26:27 GMT - Wed, 03 Jan 2024 12:26:26 GMT
File type HTML document text\012- exported SGML document, ASCII text, with very long lines (64709), with CRLF line terminators
Hash aa3b684df2c6833a834b45cc8c845940
93c5b80de82127afc19541bed9d34a90d15c57d4
a286db9b90bae763264f0f1e82666a081bbb91ef17ad734cd7cd6aa36d931938
GET /premiumtv/daddyhd.php?id=51 HTTP/1.1
Host: weblivehdplay.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dlhd.sx/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 01 Dec 2023 07:08:57 GMT
content-type: text/html; charset=UTF-8
cache-control: public, max-age=14400, immutable, no-transform
node: PHP
content-encoding: gzip
cf-cache-status: EXPIRED
last-modified: Thu, 30 Nov 2023 00:55:39 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=0MhSbojh3PIGmM8L6M3zVAvcvBaX3RRnSRU36eo8ERgeiY1opUk5WDEzM1wjjkFH%2FwhKw832YoduG6uZhU0OywKVOMvPTUNGYwaeS32036JBWzBxO3bI1vW8LQVKBsxgvUKh"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82e9807c2d2456b4-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
achcdn.com/script/ut.js?cb=1701414542271
200 OK 82 kB URL GET HTTP/3 achcdn.com/script/ut.js?cb=1701414542271
IP
Requested by https://dlhd.sx/embed/stream-51.php
Certificate IssuerGoogle Trust Services LLC
Subjectachcdn.com
Fingerprint52:9D:4F:AD:60:0D:A1:64:0A:07:87:97:4E:F6:92:D9:02:CF:2A:D6
ValidityTue, 24 Oct 2023 11:00:13 GMT - Mon, 22 Jan 2024 11:00:12 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /script/ut.js?cb=1701414542271 HTTP/1.1
Host: achcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dlhd.sx/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 01 Dec 2023 07:08:57 GMT
content-type: text/javascript
x-guploader-uploadid: ABPtcPoMxnjoTECm23fSTshPvm-N8Uf2eh1psYScOlZgSQ-5WbSKIR2CPpTXXBPzLMrJAw5ibGUZIX9tLRcoawTw1pfvllmHqQhJ
x-goog-generation: 1701078201797678
x-goog-metageneration: 2
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 82099
x-goog-hash: crc32c=GKpGKQ==, md5=hSTtUFVQcINAGNFMKOKS5Q==
x-goog-storage-class: MULTI_REGIONAL
access-control-allow-origin: *
expires: Fri, 01 Dec 2023 06:31:17 GMT
cache-control: public, max-age=14400
age: 2301
last-modified: Mon, 27 Nov 2023 09:43:21 GMT
etag: W/"8524ed50555070834018d14c28e292e5"
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=sShlrzFj3XJQZ34fudytvdRVszdqmNjAblxTo7vy%2FXJP2dEKHtcCi77rVuhvwdTwi7tGeKAJJHmdBM1%2BWR87R7i3u5xwpy7ubI5Exw5Y4262XyEqVXTaIFL51Dke"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82e9807bdce9b4fd-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
weblivehdplay.ru/clappr.min.js
200 OK 525 kB URL GET HTTP/3 weblivehdplay.ru/clappr.min.js
IP
Requested by https://weblivehdplay.ru/premiumtv/daddyhd.php?id=51
Certificate IssuerLet's Encrypt
Subjectweblivehdplay.ru
Fingerprint8F:C7:52:FE:60:C0:88:C8:17:25:6E:98:6D:F5:97:E1:5F:B3:91:C1
ValidityThu, 05 Oct 2023 12:26:27 GMT - Wed, 03 Jan 2024 12:26:26 GMT
Size 525 kB (525081 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /clappr.min.js HTTP/1.1
Host: weblivehdplay.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://weblivehdplay.ru/premiumtv/daddyhd.php?id=51
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 01 Dec 2023 07:08:57 GMT
content-type: application/javascript
last-modified: Mon, 27 Nov 2023 16:16:06 GMT
etag: W/"6564c0c6-80319"
cache-control: max-age=14400
cf-cache-status: HIT
age: 685
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=UOKNUn4qyuGcSvW3JH58KSpH5dRP40SrDPO%2FSnvl2GCIo%2FaBKv4Priob%2FzUGX6aHFYa6qUsLb2N6usKB3R5D%2F5hnXhkETt7zVZeaPNrtX%2FbNsTKRYlxKPHF%2ByEEbgZ4pyCid"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82e9807d69a556c5-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
cdn.creative-bars1.com/sb/ssp/vpn/classic-push/big1/css/animate.css
79 kB URL GET cdn.creative-bars1.com/sb/ssp/vpn/classic-push/big1/css/animate.css
IP
Requested by https://dlhd.sx/embed/stream-51.php
Certificate IssuerGoogle Trust Services LLC
Subjectcreative-bars1.com
Fingerprint2B:CC:32:FC:17:6F:25:69:2F:F4:A0:D9:DC:9C:C2:09:28:32:AB:34
ValiditySat, 21 Oct 2023 15:38:40 GMT - Fri, 19 Jan 2024 15:38:39 GMT
Hash e1d8acd5ee9d1a90ea09313cbd8f2b02
8a8327b115d1356715e63270d1ce6d46124c7b1a
3028c87fc798ac3741f02079034e6c23462afc0c5e6c8d321188ce3716c8472a
GET /sb/ssp/vpn/classic-push/big1/css/animate.css HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://dlhd.sx
DNT: 1
Connection: keep-alive
Referer: https://dlhd.sx/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 01 Dec 2023 07:09:11 GMT
content-type: text/css
last-modified: Mon, 21 Feb 2022 10:06:42 GMT
etag: W/"62136432-13591"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 30357
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=GXdX%2Fu%2B2advrxGKBZIIK5ozPfpc3WVY2WZ%2BNvaErxRpzBFczRRl1RghnxoGkf6B8LF5A3knaAiKIJ69CQWRxawwJcLhbb2tSMojX4%2B0LDHzwDKvxCOI77Yf12D8riAVIGalEXXNNxurk"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82e980d169e406f9-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
188.114.96.1
162.252.214.5
104.17.166.186
35.157.159.40
185.200.118.51
23.109.82.97
185.200.116.90
0.0.0.0