i.imgur.com/UzHEmEe.jpg
200 OK 33 kB IP
Requested by https://dlhd.sx/stream/stream-81.php
Certificate IssuerSectigo Limited
Subject*.imgur.com
FingerprintD6:4D:45:03:6D:38:F8:FD:EA:AF:E5:92:B3:4D:85:A5:6B:AF:5C:EC
ValidityMon, 13 Mar 2023 00:00:00 GMT - Tue, 12 Mar 2024 23:59:59 GMT
File type JPEG image data, baseline, precision 8, 500x253, components 3\012- data
Hash 620bdc71dc7a7b3a63abb4ff92a5ba64
dfea97298f016bbcc28ea36c8674005e542bc34a
338d5f323258ddf32dfffc05c16fb30c93cb956dda8bec7776422ee6b29a4060
GET /UzHEmEe.jpg HTTP/1.1
Host: i.imgur.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dlhd.sx/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
last-modified: Tue, 04 Apr 2023 18:23:16 GMT
etag: "620bdc71dc7a7b3a63abb4ff92a5ba64"
x-amz-server-side-encryption: AES256
x-amz-cf-pop: IAD89-P1
x-amz-cf-id: i5TXxirc66FwQHsBWIIdqh10Txv21YvjM0cwlrFPlcjoAiKxZpcxtg==
cache-control: public, max-age=31536000
accept-ranges: bytes
date: Thu, 07 Dec 2023 23:06:44 GMT
age: 1735306
x-served-by: cache-iad-kcgs7200108-IAD, cache-bma1672-BMA
x-cache: Miss from cloudfront, HIT, HIT
x-cache-hits: 12923, 2
x-timer: S1701990405.670977,VS0,VE0
strict-transport-security: max-age=300
access-control-allow-methods: GET, OPTIONS
access-control-allow-origin: *
server: cat factory 1.0
x-content-type-options: nosniff
content-length: 32692
X-Firefox-Spdy: h2
dlhd.sx/stream/styletest4.css
200 OK 47 kB URL GET HTTP/3 dlhd.sx/stream/styletest4.css
IP
Requested by https://dlhd.sx/stream/stream-81.php
Certificate IssuerGoogle Trust Services LLC
Subjectdlhd.sx
Fingerprint76:51:2D:5A:03:3C:EC:40:F6:2B:C4:26:97:0D:73:F6:FC:37:9C:83
ValidityThu, 19 Oct 2023 17:12:12 GMT - Wed, 17 Jan 2024 17:12:11 GMT
Hash aaa547995599bc2ab9e1737a368712ab
5050073d08c5a87becf2b671051513367a011186
048eddb35f9142665b06f6e05c20367d6625a3ab36d80a37de7442ea088842e4
GET /stream/styletest4.css HTTP/1.1
Host: dlhd.sx
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dlhd.sx/stream/stream-81.php
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 07 Dec 2023 23:06:44 GMT
content-type: text/css
last-modified: Wed, 23 Aug 2023 20:23:50 GMT
etag: W/"64e66ad6-80d"
cache-control: max-age=14400
cf-cache-status: HIT
age: 894
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2FI%2FdqnfwqLOOR9GQWqqMiCXd0rfaq9XgE6gDBmCS8dE3DHabqElZ1Yd2XaDiXc%2F0g0K6gdv5n7ueUkBBSF8TPRYDhLHbnZY7g1gntGQKrUeX%2FhRR3KgLnsNz"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 83206bbcbadc56b5-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
dlhd.sx/stream/js/script.js
200 OK 33 kB URL GET HTTP/3 dlhd.sx/stream/js/script.js
IP
Requested by https://dlhd.sx/stream/stream-81.php
Certificate IssuerGoogle Trust Services LLC
Subjectdlhd.sx
Fingerprint76:51:2D:5A:03:3C:EC:40:F6:2B:C4:26:97:0D:73:F6:FC:37:9C:83
ValidityThu, 19 Oct 2023 17:12:12 GMT - Wed, 17 Jan 2024 17:12:11 GMT
File type ASCII text, with CRLF line terminators
Hash af6529c3ecd537a88151a722c6b49380
5fd28f083ef0ca65c553bec855d6cce31535923e
d7277dd72563eb12f1170cce92dc43266ec0b72e2df981f71c53d42a0b38525e
GET /stream/js/script.js HTTP/1.1
Host: dlhd.sx
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dlhd.sx/stream/stream-81.php
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 07 Dec 2023 23:06:44 GMT
content-type: application/javascript
last-modified: Wed, 23 Aug 2023 20:23:51 GMT
etag: W/"64e66ad7-69"
cache-control: max-age=14400
cf-cache-status: HIT
age: 894
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=i8IFs6qQjnEZZo19LbPjFhgX1fpdBe0eZYKkHXTwdqhs1D37ozZ%2FyKUUs4kng%2Ft%2BeEU3%2B3xCoWWJVSmWKtRhSYwhTGWDNxP%2BcQ6z6GW02tGHXDbA3Yoi3r0O"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 83206bbcaad656b5-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
dlhd.sx/stream/js/jquery.cycle.all.min.js
200 OK 49 kB URL GET HTTP/3 dlhd.sx/stream/js/jquery.cycle.all.min.js
IP
Requested by https://dlhd.sx/stream/stream-81.php
Certificate IssuerGoogle Trust Services LLC
Subjectdlhd.sx
Fingerprint76:51:2D:5A:03:3C:EC:40:F6:2B:C4:26:97:0D:73:F6:FC:37:9C:83
ValidityThu, 19 Oct 2023 17:12:12 GMT - Wed, 17 Jan 2024 17:12:11 GMT
File type ASCII text, with very long lines (16382), with CRLF line terminators
Hash 36f1308abb86708a49814e8bfe7fa793
8b61b6c75f240edf8c1f399bb549522e77f32f54
154cae8daf04551719f39f269bdf82207c552c9765eb43225759995f8d19cf19
GET /stream/js/jquery.cycle.all.min.js HTTP/1.1
Host: dlhd.sx
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dlhd.sx/stream/stream-81.php
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 07 Dec 2023 23:06:44 GMT
content-type: application/javascript
last-modified: Wed, 23 Aug 2023 20:23:51 GMT
etag: W/"64e66ad7-6c93"
cache-control: max-age=14400
cf-cache-status: HIT
age: 894
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=01RDvusluBq72LHX25YiDTV4NNlJPKfXBbUoawCubbRxKMhU%2B%2Fd9CHeAOKgDhynBVbCX2NEiWs3OPJyfPuXmz0%2FMdjNCOJ0I4Yr1TTSVxtVnP04kFjYPZfMv"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 83206bbcaad556b5-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
i.imgur.com/963MtIY.png
200 OK 132 kB IP
Requested by https://dlhd.sx/stream/stream-81.php
Certificate IssuerSectigo Limited
Subject*.imgur.com
FingerprintD6:4D:45:03:6D:38:F8:FD:EA:AF:E5:92:B3:4D:85:A5:6B:AF:5C:EC
ValidityMon, 13 Mar 2023 00:00:00 GMT - Tue, 12 Mar 2024 23:59:59 GMT
File type PNG image data, 300 x 210, 8-bit/color RGBA, non-interlaced\012- data
Size 132 kB (132104 bytes)
Hash d91a2640d1a138bf692a79bc4c9d91b9
eb6d026631cd485ef6d16f520f2535ce6317187c
83ac67873c280f449e7811943416d6761fbde6d3b209742807a6f62b8d4baa08
GET /963MtIY.png HTTP/1.1
Host: i.imgur.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dlhd.sx/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/png
last-modified: Fri, 08 Sep 2023 20:10:21 GMT
etag: "d91a2640d1a138bf692a79bc4c9d91b9"
x-amz-server-side-encryption: AES256
x-amz-cf-pop: IAD12-P2
x-amz-cf-id: oxSxYwBKgyF4ig5zhGQl9riS9jV1eG93eetlCa8L35fuauZOGvAuvA==
cache-control: public, max-age=31536000
accept-ranges: bytes
date: Thu, 07 Dec 2023 23:06:44 GMT
age: 2037984
x-served-by: cache-iad-kiad7000090-IAD, cache-bma1672-BMA
x-cache: Miss from cloudfront, HIT, HIT
x-cache-hits: 24008, 1
x-timer: S1701990405.672301,VS0,VE2
strict-transport-security: max-age=300
access-control-allow-methods: GET, OPTIONS
access-control-allow-origin: *
server: cat factory 1.0
x-content-type-options: nosniff
content-length: 132104
X-Firefox-Spdy: h2
i.imgur.com/PmyPoBa.png
200 OK 462 kB IP
Requested by https://dlhd.sx/stream/stream-81.php
Certificate IssuerSectigo Limited
Subject*.imgur.com
FingerprintD6:4D:45:03:6D:38:F8:FD:EA:AF:E5:92:B3:4D:85:A5:6B:AF:5C:EC
ValidityMon, 13 Mar 2023 00:00:00 GMT - Tue, 12 Mar 2024 23:59:59 GMT
File type PNG image data, 500 x 333, 8-bit/color RGBA, non-interlaced\012- data
Size 462 kB (461658 bytes)
Hash 27d2f86b7d65cbc73af11d6e44bf5817
6b400b94898316ff239850155ea13943b9519b4e
4c5e72996ec93c726af81308535d445a8ea1f391222068c5bda2f44fdf9fb973
GET /PmyPoBa.png HTTP/1.1
Host: i.imgur.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dlhd.sx/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/png
last-modified: Sun, 25 Jun 2023 18:24:40 GMT
etag: "27d2f86b7d65cbc73af11d6e44bf5817"
x-amz-storage-class: STANDARD_IA
x-amz-server-side-encryption: AES256
x-amz-cf-pop: IAD12-P2
x-amz-cf-id: VlTLTmz4M4h0CzTnaWRLkZQ5316rt0y3irwMLtmJGPKSLs4iIlHPNw==
cache-control: public, max-age=31536000
accept-ranges: bytes
date: Thu, 07 Dec 2023 23:06:44 GMT
age: 2474978
x-served-by: cache-iad-kcgs7200023-IAD, cache-bma1672-BMA
x-cache: Miss from cloudfront, HIT, HIT
x-cache-hits: 42420, 1
x-timer: S1701990405.671155,VS0,VE3
strict-transport-security: max-age=300
access-control-allow-methods: GET, OPTIONS
access-control-allow-origin: *
server: cat factory 1.0
x-content-type-options: nosniff
content-length: 461658
X-Firefox-Spdy: h2
i.ibb.co/dmySwRd/lewebdecom.jpg
200 OK 96 kB URL GET HTTP/2 i.ibb.co/dmySwRd/lewebdecom.jpg
IP
Requested by https://dlhd.sx/stream/stream-81.php
Certificate IssuerLet's Encrypt
Subjectibb.co
FingerprintCC:72:96:95:90:7F:15:8E:AC:C5:40:3A:D2:6F:83:A3:DF:5E:72:56
ValidityMon, 09 Oct 2023 14:39:49 GMT - Sun, 07 Jan 2024 14:39:48 GMT
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CC 2019 (Windows), datetime=2022:09:02 01:49:23], progressive, precision 8, 500x500, components 3\012- data
Hash e7b807b3b8d6c84c2a880ddd5c9b6600
e0214ef0ce01462b7b50b288a3c5aa7a15b4853a
9d744e0c4f4132b5673a4c8bfcc5c71cfd260bcdea4bc38724d76f7d0bfceff7
GET /dmySwRd/lewebdecom.jpg HTTP/1.1
Host: i.ibb.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dlhd.sx/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 07 Dec 2023 23:06:44 GMT
content-type: image/jpeg
content-length: 95596
last-modified: Tue, 06 Sep 2022 20:58:28 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS
accept-ranges: bytes
X-Firefox-Spdy: h2
dlhd.sx/stream/js/jquery-1.3.2.min.js
200 OK 136 kB URL GET HTTP/3 dlhd.sx/stream/js/jquery-1.3.2.min.js
IP
Requested by https://dlhd.sx/stream/stream-81.php
Certificate IssuerGoogle Trust Services LLC
Subjectdlhd.sx
Fingerprint76:51:2D:5A:03:3C:EC:40:F6:2B:C4:26:97:0D:73:F6:FC:37:9C:83
ValidityThu, 19 Oct 2023 17:12:12 GMT - Wed, 17 Jan 2024 17:12:11 GMT
File type ASCII text, with very long lines (39660)
Size 136 kB (135478 bytes)
Hash bb381e2d19d8eace86b34d20759491a5
3dc9f7c2642efff4482e68c9d9df874bf98f5bcb
c8370a2d050359e9d505acc411e6f457a49b21360a21e6cbc9229bad3a767899
GET /stream/js/jquery-1.3.2.min.js HTTP/1.1
Host: dlhd.sx
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dlhd.sx/stream/stream-81.php
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 07 Dec 2023 23:06:44 GMT
content-type: application/javascript
last-modified: Wed, 23 Aug 2023 20:23:51 GMT
etag: W/"64e66ad7-dfa6"
cache-control: max-age=14400
cf-cache-status: HIT
age: 894
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=nscXwEBhdNbERiaYe%2BlUbwXTer%2FvNTZL3ioZG1JeIvmUlfoE3K%2Beaqa6e4DJaboJoLGTY1hnUt3q0vKTRhxQ1xpVklIHLZymLo6iXbWk8sSzPmXzY4Uf7Alu"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 83206bbcaace56b5-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
xd.awashemeers.com/rSDwGOn9YSKf/oRBvJ
200 OK 20 B URL GET HTTP/1.1 xd.awashemeers.com/rSDwGOn9YSKf/oRBvJ
IP
Requested by https://dlhd.sx/stream/stream-81.php
Certificate IssuerLet's Encrypt
Subjectxd.awashemeers.com
Fingerprint2F:C8:2F:2A:87:03:29:41:5B:E0:18:9C:A7:BC:F5:30:66:F7:67:BD
ValiditySat, 11 Nov 2023 23:10:07 GMT - Fri, 09 Feb 2024 23:10:06 GMT
File type gzip compressed data, from Unix\012- data
Hash 7029066c27ac6f5ef18d660d5741979a
46c6643f07aa7f6bfe7118de926b86defc5087c4
59869db34853933b239f1e2219cf7d431da006aa919635478511fabbfc8849d2
GET /rSDwGOn9YSKf/oRBvJ HTTP/1.1
Host: xd.awashemeers.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dlhd.sx/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 07 Dec 2023 23:06:45 GMT
Content-Type: application/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=20
Accept-ch: sec-ch-ua-platform-version,sec-ch-ua-model,sec-ch-ua-full-version
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://dlhd.sx
Access-Control-Allow-Headers: content-type, megageocheckolololo, x-forwarded-for, x-requested-with, cache-control, pragma, expires
Access-Control-Max-Age: 600
Access-Control-Allow-Methods: GET, POST, OPTIONS
Set-Cookie: GL_UI4=eJw9zV1OhDAcBHC%2BWXVBJ%2BEAHqFVQXz0Za%2FgIyntH6wL7aZU0NtLTPRtMvlNJgiCqLpFuGYp4k9R414NvJGs5fKhfmRNUz8JRkPfvvTtc8MFa3Gll86LfiKf4LDMwvnOrwmOIxlyWnbSKipwt6u%2F5mzsZhKkvRNGFUjnXUwF8t7ZbSFXxUiMmAn5STsa7NcuxId1iDmr96zNnkOGyC5VXF4jf9NG7cvyiIizsswC3Fwm4Qfr5k6rLEQ6OqEI4SsOUngarftGrmg5e3sB7KS6f%2F97HG%2BcIVO0aklIrX8n9wNBjE5s; expires=Fri, 08-Dec-2023 23:06:45 GMT; Max-Age=86400; path=/; secure; SameSite=None
GL_GI10=eJwViE0KgzAUBvMeJVAqhY96AE%2BQamsXbmuXRReewGopgZBIEvtz%2B%2BpiBmaEEJwmYD0hqQpV5ao8qeJSgl7gpgUPFrJx%2FtP%2FQB6cn8HeYtcG47LazTYuf8BmbZDG%2Fmr0N%2BucmaN2NoAXtnX%2FMM%2FjrbuDJkng6FaHMRWgtzz8AV7hHdE%3D; expires=Fri, 08-Dec-2023 23:06:45 GMT; Max-Age=86400; path=/; secure; SameSite=None
Content-Encoding: gzip
Vary: Accept-Encoding
Strict-Transport-Security: max-age=1
X-Content-Type-Options: nosniff
phrasespokesmansurmise.com/62/f4/25/62f425b13c2294da628205a39237b933.js
200 OK 15 kB URL GET HTTP/1.1 phrasespokesmansurmise.com/62/f4/25/62f425b13c2294da628205a39237b933.js
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://dlhd.sx/stream/stream-81.php
Certificate IssuerLet's Encrypt
Subjectphrasespokesmansurmise.com
Fingerprint7E:37:0C:B7:06:A7:24:1D:07:DE:1B:80:70:F4:A4:3A:97:94:ED:D1
ValidityFri, 13 Oct 2023 10:50:21 GMT - Thu, 11 Jan 2024 10:50:20 GMT
File type ASCII text, with very long lines (42185), with no line terminators
Hash aa41c1b265c9fb66498359c5e25016b2
1077e7329673a925644df1218560b61dfcba4ec9
16e97b830dd358e4bf11738ec6cd61d877c4a9b1069f7de9695aed970bc9b630
GET /62/f4/25/62f425b13c2294da628205a39237b933.js HTTP/1.1
Host: phrasespokesmansurmise.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dlhd.sx/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Thu, 07 Dec 2023 23:06:45 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 55e0cd1380f6a8a98d44c110f6343249
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
dlhd.sx/stream/stream-81.php
200 OK 51 kB URL User Request GET HTTP/2 dlhd.sx/stream/stream-81.php
IP
Certificate IssuerGoogle Trust Services LLC
Subjectdlhd.sx
Fingerprint76:51:2D:5A:03:3C:EC:40:F6:2B:C4:26:97:0D:73:F6:FC:37:9C:83
ValidityThu, 19 Oct 2023 17:12:12 GMT - Wed, 17 Jan 2024 17:12:11 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (59261), with CRLF, LF line terminators
Hash 91071e987bc9e1708d51fbed14de20cb
b81931818dfb0a8f6a1eee976caacf1b48924c5d
70e096b49e0dfc262a01440ad3c5fcc5fa31c718a4c8bf079368be5f5fa22e0a
GET /stream/stream-81.php HTTP/1.1
Host: dlhd.sx
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 07 Dec 2023 23:06:44 GMT
content-type: text/html; charset=UTF-8
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=jyI3yVn2ZdmdfkT0n4Gv7vowVNbcYIUTBRlgt77HeSCZv3qkzNJgU627nvswsq64xJgbin9F0SKvbLj8pdtHhfyJkNujoOhLF2UZytTOFf8KqkMLxN0iZk1W"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 83206bba2b8356a2-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.r2m03.amazontrust.com/
471 B URL ocsp.r2m03.amazontrust.com/
IP
Hash 03bf4946c01cdc0a2ec365db5969c9ea
a21f80ba7ecbd5363b5b061c381ab4dd88a67ea3
31e1ca9c7fa8898339f936c35c7e235b71a5e6ddbc1039956b63e06ccfb83eed
POST / HTTP/1.1
Host: ocsp.r2m03.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=7200
Date: Thu, 07 Dec 2023 23:06:45 GMT
Last-Modified: Thu, 07 Dec 2023 21:42:20 GMT
Server: ECAcc (ska/F6E3)
X-Cache: Miss from cloudfront
Via: 1.1 aac54e3fe9825ce24d51e0204433c2c0.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: IyQHrJt3j0vq-5HSjVKQnbpDRUQZD4xBo1X47uaP6TyNukLZxplKhg==
Age: 5065
proftrafficcounter.com/stats
200 OK 40 B URL GET HTTP/2 proftrafficcounter.com/stats
IP
Requested by https://dlhd.sx/stream/stream-81.php
Certificate IssuerAmazon
Subjectproftrafficcounter.com
FingerprintE3:9F:79:6F:80:C0:BF:F8:C4:EB:45:F3:E9:0F:A7:41:F6:0C:05:E6
ValidityTue, 21 Nov 2023 00:00:00 GMT - Thu, 19 Dec 2024 23:59:59 GMT
File type ASCII text, with no line terminators
Hash 4330d32935491fe27ffd748c71f88d55
0bb0ec82c04e00099b7c4cf72b8ec78507d2ed57
729e017c339d84218214abfc535166788ff7e388dee933d8f352f22b7296d53a
GET /stats HTTP/1.1
Host: proftrafficcounter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://dlhd.sx
DNT: 1
Connection: keep-alive
Referer: https://dlhd.sx/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 07 Dec 2023 23:06:45 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: https://dlhd.sx
vary: Origin
access-control-allow-credentials: true
set-cookie: uid_id2=4876c654-6bbe-42d0-9dcd-28214783c675:1:1; expires=Sun, 04 Dec 2033 23:06:45 GMT; secure; SameSite=None
X-Firefox-Spdy: h2
dlhd.sx/stream/style4.css
200 OK 26 kB URL GET HTTP/3 dlhd.sx/stream/style4.css
IP
Requested by https://dlhd.sx/stream/stream-81.php
Certificate IssuerGoogle Trust Services LLC
Subjectdlhd.sx
Fingerprint76:51:2D:5A:03:3C:EC:40:F6:2B:C4:26:97:0D:73:F6:FC:37:9C:83
ValidityThu, 19 Oct 2023 17:12:12 GMT - Wed, 17 Jan 2024 17:12:11 GMT
Hash 7a501e6a95698a0d596502416b346f01
854db86a99f923b31aecf9d059e06536a1c81dc3
2a1260ba5b6510c35656aec82ff4a466c1a2207dda5ab875dd03c5bdd5e11863
GET /stream/style4.css HTTP/1.1
Host: dlhd.sx
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dlhd.sx/stream/stream-81.php
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 07 Dec 2023 23:06:44 GMT
content-type: text/css
last-modified: Wed, 23 Aug 2023 20:23:51 GMT
etag: W/"64e66ad7-2248"
cache-control: max-age=14400
cf-cache-status: HIT
age: 894
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=KBLFZAkJb60sn9uaKkRHdFtG%2Fu2G2iHAO5eqTelbpzYwdymUE%2BzWes6WI50vFiAJ%2BM3ddNu7XOAes8%2BXW2NcMCl1aKdhhbQkAEjzLA0o4aAXdIKSsfpj%2BPVg"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 83206bbc9acd56b5-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
fonts.gstatic.com/s/lato/v24/S6uyw4BMUTPHjx4wXg.woff2
200 OK 24 kB URL GET HTTP/2 fonts.gstatic.com/s/lato/v24/S6uyw4BMUTPHjx4wXg.woff2
IP
Requested by https://dlhd.sx/stream/stream-81.php
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 23580, version 1.0\012- data
Hash e1b3b5908c9cf23dfb2b9c52b9a023ab
fcd4136085f2a03481d9958cc6793a5ed98e714c
918b7dc3e2e2d015c16ce08b57bcb64d2253bafc1707658f361e72865498e537
GET /s/lato/v24/S6uyw4BMUTPHjx4wXg.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://dlhd.sx
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 23580
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 07 Dec 2023 15:40:33 GMT
expires: Fri, 06 Dec 2024 15:40:33 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 02 May 2023 15:17:22 GMT
content-type: font/woff2
age: 26773
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/lato/v24/S6u9w4BMUTPHh50XSwiPGQ.woff2
200 OK 22 kB URL GET HTTP/2 fonts.gstatic.com/s/lato/v24/S6u9w4BMUTPHh50XSwiPGQ.woff2
IP
Requested by https://dlhd.sx/stream/stream-81.php
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 22504, version 1.0\012- data
Hash 1c6c65523675abc6fcd78e804325bd77
898d9808304dc157f5dcb18ca169ec6e2b96b3d7
08664859baab5ed98f0bf818ed77e38464ff1826dc6406d5ecbd651409afbd92
GET /s/lato/v24/S6u9w4BMUTPHh50XSwiPGQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://dlhd.sx
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 22504
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 06 Dec 2023 21:37:20 GMT
expires: Thu, 05 Dec 2024 21:37:20 GMT
cache-control: public, max-age=31536000
age: 91766
last-modified: Tue, 02 May 2023 15:12:45 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/lato/v24/S6u9w4BMUTPHh6UVSwiPGQ.woff2
200 OK 23 kB URL GET HTTP/2 fonts.gstatic.com/s/lato/v24/S6u9w4BMUTPHh6UVSwiPGQ.woff2
IP
Requested by https://dlhd.sx/stream/stream-81.php
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 23040, version 1.0\012- data
Hash de69cf9e514df447d1b0bb16f49d2457
2ac78601179c3a63ba3f3f3081556b12ddcaf655
c447dd7677b419db7b21dbdfc6277c7816a913ffda76fd2e52702df538de0e49
GET /s/lato/v24/S6u9w4BMUTPHh6UVSwiPGQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://dlhd.sx
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 23040
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 07 Dec 2023 15:49:49 GMT
expires: Fri, 06 Dec 2024 15:49:49 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 02 May 2023 15:07:25 GMT
content-type: font/woff2
age: 26217
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
code.jquery.com/jquery-3.6.0.min.js
200 OK 31 kB URL GET HTTP/2 code.jquery.com/jquery-3.6.0.min.js
IP
Requested by https://weblivehdplay.ru/premiumtv/daddylivehd.php?id=81
Certificate IssuerSectigo Limited
Subject*.jquery.com
FingerprintD2:19:0A:AD:CE:BB:9C:61:17:5D:29:4B:A2:54:E8:C6:91:B8:F9:8D
ValidityTue, 11 Jul 2023 00:00:00 GMT - Sun, 14 Jul 2024 23:59:59 GMT
File type ASCII text, with very long lines (65447)
Hash 8fb8fee4fcc3cc86ff6c724154c49c42
b82d238d4e31fdf618bae8ac11a6c812c03dd0d4
ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e
GET /jquery-3.6.0.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://weblivehdplay.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Fri, 18 Oct 1991 12:00:00 GMT
etag: W/"28feccc0-15d9d"
cache-control: public, max-age=31536000, stale-while-revalidate=604800
access-control-allow-origin: *
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Thu, 07 Dec 2023 23:06:46 GMT
age: 1387789
x-served-by: cache-lga21931-LGA, cache-bma1651-BMA
x-cache: HIT, HIT
x-cache-hits: 14, 374625
x-timer: S1701990406.391315,VS0,VE0
vary: Accept-Encoding
content-length: 30875
X-Firefox-Spdy: h2
dlhd.sx/stream/stream-81.php
200 OK 0 B URL User Request GET HTTP/2 dlhd.sx/stream/stream-81.php
IP
Certificate IssuerGoogle Trust Services LLC
Subjectdlhd.sx
Fingerprint76:51:2D:5A:03:3C:EC:40:F6:2B:C4:26:97:0D:73:F6:FC:37:9C:83
ValidityThu, 19 Oct 2023 17:12:12 GMT - Wed, 17 Jan 2024 17:12:11 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
HEAD /stream/stream-81.php HTTP/1.1
Host: dlhd.sx
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dlhd.sx/stream/stream-81.php
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 07 Dec 2023 23:06:46 GMT
content-type: text/html; charset=UTF-8
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=FGfZpayrJ5NIvcXPFxVdaKg6sUc2rQ409m7tRoktIQeBOKehAbjBDvfZtpmDd%2FqpA0E9aRdRdNKo7gijw%2Fayr3AOcGFNodVeu7NaUgqrYgHX0GEfjcFtNig9"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 83206bc7db5856b5-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
nukeluck.net/tag.min.js
200 OK 26 kB IP
Requested by https://dlhd.sx/stream/stream-81.php
Certificate IssuerLet's Encrypt
Subjectnukeluck.net
Fingerprint10:9E:8F:E3:6A:F8:48:21:94:4C:23:4D:4E:96:D5:07:46:36:8E:4F
ValiditySun, 08 Oct 2023 09:09:43 GMT - Sat, 06 Jan 2024 09:09:42 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Hash 92890ed47354a4feedfe927f16006382
a02d571e9167ada7bb30d240f2b91250178746a4
a0e3d6c4c071553654c21c9afa482efe26f06ffd4bfdab35c5cbb7b9eb4480ab
GET /tag.min.js HTTP/1.1
Host: nukeluck.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dlhd.sx/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Thu, 07 Dec 2023 23:06:46 GMT
content-type: text/javascript; charset=utf-8
content-length: 25674
content-encoding: br
x-trace-id: cc20836882d80dcce3dd3096db73003c
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
accept-ranges: bytes
last-modified: Thu, 07 Dec 2023 19:00:28 GMT
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Wow64
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace
access-control-max-age: 86400
pragma: no-cache
expires: Tue, 11 Jan 1994 10:00:00 GMT
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
my.rtmark.net/gid.js
200 OK 65 B IP
Requested by https://dlhd.sx/stream/stream-81.php
Certificate IssuerLet's Encrypt
Subjectrtmark.net
FingerprintE8:81:4E:79:89:89:BE:CE:75:1F:E0:2A:60:54:8A:A4:11:2E:F7:42
ValiditySat, 07 Oct 2023 15:22:00 GMT - Fri, 05 Jan 2024 15:21:59 GMT
File type JSON data\012- , ASCII text
Hash c39472d0380766247d2d61f5e040566d
63220990a0350c2875320dbaa6593d8d8ff45f9a
c3b4fe58174624b760d907ce3dec4dac86fbced40f0eae473e0663454f9498e6
GET /gid.js HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://dlhd.sx
DNT: 1
Connection: keep-alive
Referer: https://dlhd.sx/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Thu, 07 Dec 2023 23:06:46 GMT
content-type: application/json; charset=utf-8
content-length: 65
access-control-allow-origin: https://dlhd.sx
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
set-cookie: ID=7fb5496039fe45a4a1ddd06f5c9c1da0; expires=Fri, 06 Dec 2024 23:06:46 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
static.a-ads.com/a-ads-banners/452148/970x90?region=eu-central-1
200 OK 40 kB URL GET HTTP/2 static.a-ads.com/a-ads-banners/452148/970x90?region=eu-central-1
IP
ASN #24940 Hetzner Online GmbH
Requested by https://ad.a-ads.com/2251273?size=970x90
Certificate IssuerSectigo Limited
Subject*.a-ads.com
Fingerprint34:68:C2:05:E5:2A:4E:C3:F9:FC:94:69:D3:A6:BE:F2:21:A2:DE:AE
ValidityWed, 21 Dec 2022 00:00:00 GMT - Sun, 21 Jan 2024 23:59:59 GMT
File type GIF image data, version 89a, 970 x 90\012- data
Hash 8af00f6f50fe744b6e77d5a1709ed85f
33fb1772e9adac98fc72cc6d9d1362338eb9fedc
1a532a25f231cc2d9e828df7516b1804b2b035c48b129887e6af448929ada705
GET /a-ads-banners/452148/970x90?region=eu-central-1 HTTP/1.1
Host: static.a-ads.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ad.a-ads.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Thu, 07 Dec 2023 23:06:46 GMT
content-type: image/gif
content-length: 40458
x-amz-id-2: GgfOV/Z8c7Ad2eiH9TB36T3EVy/PViSLCg1CFQxJP2rI0hm9yz775C8FIn/+Nv2BC0YvFf8TfMI=
x-amz-request-id: 5S1G008H4D391JN8
x-amz-replication-status: COMPLETED
last-modified: Sat, 29 Apr 2023 12:10:47 GMT
etag: "8af00f6f50fe744b6e77d5a1709ed85f"
x-amz-server-side-encryption: AES256
cache-control: max-age=315360000
x-amz-version-id: 9vDHWNnrX4FU7hHzA9QsxzcKlcmQXJIz
expires: Thu, 31 Dec 2037 23:55:55 GMT
accept-ranges: bytes
X-Firefox-Spdy: h2
static.a-ads.com/a-ads-banners/482509/320x50?region=eu-central-1
200 OK 117 kB URL GET HTTP/2 static.a-ads.com/a-ads-banners/482509/320x50?region=eu-central-1
IP
ASN #24940 Hetzner Online GmbH
Requested by https://acceptable.a-ads.com/2251272
Certificate IssuerSectigo Limited
Subject*.a-ads.com
Fingerprint34:68:C2:05:E5:2A:4E:C3:F9:FC:94:69:D3:A6:BE:F2:21:A2:DE:AE
ValidityWed, 21 Dec 2022 00:00:00 GMT - Sun, 21 Jan 2024 23:59:59 GMT
File type GIF image data, version 89a, 320 x 50\012- data
Size 117 kB (116786 bytes)
Hash 931f7b15d02b187a16f8e86d38acb67e
9842640e0b3ef0c10bfd1f1aa0fd58dd0dcc40a0
ca42d0196d3db223d6fc366a7eb329d9d203848c9df393becacd65fdda50c422
GET /a-ads-banners/482509/320x50?region=eu-central-1 HTTP/1.1
Host: static.a-ads.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://acceptable.a-ads.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Thu, 07 Dec 2023 23:06:46 GMT
content-type: image/gif
content-length: 116786
x-amz-id-2: abXEvcnZkvci/GnV7gd97wATJ3QWWTPjByWZMc/0vtqjcV+z37Ul9QMAD/rHgptPbYhXc2bPf+s=
x-amz-request-id: G2GVA1KPEYFF6KFF
x-amz-replication-status: COMPLETED
last-modified: Thu, 05 Oct 2023 18:02:07 GMT
etag: "931f7b15d02b187a16f8e86d38acb67e"
x-amz-server-side-encryption: AES256
cache-control: max-age=315360000
x-amz-version-id: umKxpRWZ_Has.j6VmsbFNtKD_tDq.eLa
expires: Thu, 31 Dec 2037 23:55:55 GMT
accept-ranges: bytes
X-Firefox-Spdy: h2
static.a-ads.com/a-ads-banners/406687/970x90?region=eu-central-1
200 OK 687 kB URL GET HTTP/2 static.a-ads.com/a-ads-banners/406687/970x90?region=eu-central-1
IP
ASN #24940 Hetzner Online GmbH
Requested by https://ad.a-ads.com/2251270?size=970x90
Certificate IssuerSectigo Limited
Subject*.a-ads.com
Fingerprint34:68:C2:05:E5:2A:4E:C3:F9:FC:94:69:D3:A6:BE:F2:21:A2:DE:AE
ValidityWed, 21 Dec 2022 00:00:00 GMT - Sun, 21 Jan 2024 23:59:59 GMT
File type GIF image data, version 89a, 970 x 90\012- data
Size 687 kB (687035 bytes)
Hash c4a50609eca4d27dd9a67fa15a0958e9
471b43b945897309abddef35b98f12263cb8094c
eed8466be5c856d30b41eef43c02aa38ab90a89c57f1c5d9d038a857baeac8c5
GET /a-ads-banners/406687/970x90?region=eu-central-1 HTTP/1.1
Host: static.a-ads.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ad.a-ads.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Thu, 07 Dec 2023 23:06:46 GMT
content-type: image/gif
content-length: 687035
x-amz-id-2: WqS/gY3r4FnK8FD1xjq4G/yEnZ+19D+IIwL7SY5btt8uIZXMO6ouGxA6wC9N/WBPB3dj8ALHDd4=
x-amz-request-id: MT0MH3Q02D3A93FT
x-amz-replication-status: COMPLETED
last-modified: Thu, 04 Aug 2022 08:12:39 GMT
etag: "c4a50609eca4d27dd9a67fa15a0958e9"
cache-control: max-age=315360000
x-amz-version-id: QcgRjdwql2oPLsJfAGHEpvqlQzqvFVng
expires: Thu, 31 Dec 2037 23:55:55 GMT
accept-ranges: bytes
X-Firefox-Spdy: h2
st.chatango.com/h5/gz/r0925230558/id.html
200 OK 224 kB URL GET HTTP/1.1 st.chatango.com/h5/gz/r0925230558/id.html
IP
Requested by https://dlhd.sx/stream/stream-81.php
Certificate IssuerSectigo Limited
Subject*.chatango.com
Fingerprint51:E2:E1:03:43:73:D8:C8:D4:4D:E0:E4:4A:BF:4F:DB:B5:CB:6E:A0
ValiditySat, 03 Jun 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (54430), with CRLF, LF line terminators
Size 224 kB (224195 bytes)
Hash 0a71e50fd4bb2c4b9bb43f2c0cc4645c
b24dcf8f8fa8a49c89332918024e36cbe23df6f9
06ffbd69d3f9f08dfb4040174e5addaa1a9c4b9a26ffd0e6308d763f7c14c0d6
GET /h5/gz/r0925230558/id.html HTTP/1.1
Host: st.chatango.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dlhd.sx/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 07 Dec 2023 23:06:46 GMT
Content-Type: text/html
Content-Length: 224195
Last-Modified: Mon, 25 Sep 2023 13:02:22 GMT
Connection: keep-alive
Expires: Fri, 06 Dec 2024 23:06:46 GMT
Cache-Control: max-age=31536000
Content-Encoding: gzip
P3P: CP="Chatango does not have a P3P policy. Please see our privacy policy: http://chatango.com/page?full_privacy"
Accept-Ranges: bytes
static.a-ads.com/a-ads-banners/482527/300x250?region=eu-central-1
200 OK 419 kB URL GET HTTP/2 static.a-ads.com/a-ads-banners/482527/300x250?region=eu-central-1
IP
ASN #24940 Hetzner Online GmbH
Requested by https://ad.a-ads.com/2251271?size=300x250
Certificate IssuerSectigo Limited
Subject*.a-ads.com
Fingerprint34:68:C2:05:E5:2A:4E:C3:F9:FC:94:69:D3:A6:BE:F2:21:A2:DE:AE
ValidityWed, 21 Dec 2022 00:00:00 GMT - Sun, 21 Jan 2024 23:59:59 GMT
File type GIF image data, version 89a, 300 x 250\012- data
Size 419 kB (419447 bytes)
Hash 415d72cd769d66307391298d960a6e6b
347005d60c95df0e6fbc6c04f19439b0202dcdad
b11edb7f06e794d1e71008ed040f2021012500d4242d6b2b0a07e327b7f36f1a
GET /a-ads-banners/482527/300x250?region=eu-central-1 HTTP/1.1
Host: static.a-ads.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ad.a-ads.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Thu, 07 Dec 2023 23:06:46 GMT
content-type: image/gif
content-length: 419447
x-amz-id-2: T2LT6nGntSKWOLn5ldqubtKpvGXsDUlXYsZ4HazzGLHrNA6Xdqy5wk8pps8Bk1pUJUtmX6l5lwU=
x-amz-request-id: 4Y00QZTJFAYVB1ZP
x-amz-replication-status: COMPLETED
last-modified: Thu, 05 Oct 2023 18:03:49 GMT
etag: "415d72cd769d66307391298d960a6e6b"
x-amz-server-side-encryption: AES256
cache-control: max-age=315360000
x-amz-version-id: Inra92TSkbZZ3sFiDU2prIv_2BK3JdTn
expires: Thu, 31 Dec 2037 23:55:55 GMT
accept-ranges: bytes
X-Firefox-Spdy: h2
crawledlikely.com/sbar.json?key=62f425b13c2294da628205a39237b933
200 OK 3.2 kB URL GET HTTP/1.1 crawledlikely.com/sbar.json?key=62f425b13c2294da628205a39237b933
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://dlhd.sx/stream/stream-81.php
Certificate IssuerLet's Encrypt
Subjectcrawledlikely.com
FingerprintF2:17:B8:C3:A7:3F:04:71:84:9A:C7:BB:25:B0:76:52:8D:CD:55:36
ValidityTue, 28 Nov 2023 10:58:09 GMT - Mon, 26 Feb 2024 10:58:08 GMT
File type JSON data\012- , ASCII text, with very long lines (5860), with no line terminators
Hash 5b98ff448241e23ff94f7166abe1a689
5cbc5a915c286905df00f8293f58c33e4f801a24
aaeecb37ebc93237a2cb6f1d2885a8a9d1d8b9001d873cc20777a58679f2f37c
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /sbar.json?key=62f425b13c2294da628205a39237b933 HTTP/1.1
Host: crawledlikely.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://dlhd.sx
DNT: 1
Connection: keep-alive
Referer: https://dlhd.sx/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Thu, 07 Dec 2023 23:06:47 GMT
Content-Type: text/plain; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://dlhd.sx
Access-Control-Allow-Origin: https://dlhd.sx
Access-Control-Allow-Credentials: true
Set-Cookie: u_pl=16066835; expires=Fri, 08 Dec 2023 23:06:46 GMT; secure; SameSite=None
pdhtkv=true; expires=Fri, 08 Dec 2023 23:06:47 GMT; secure; SameSite=None
uncs=1; expires=Fri, 08 Dec 2023 23:06:47 GMT; secure; SameSite=None
pdhtkv29=true; expires=Fri, 08 Dec 2023 23:06:47 GMT; secure; SameSite=None
uncs29=1; expires=Fri, 08 Dec 2023 23:06:47 GMT; secure; SameSite=None
slec62f425b13c2294da628205a39237b933=[4766299]; expires=Thu, 07 Dec 2023 23:06:52 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 46bfe2082dfdc534fae16a15df9cf9b2
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
6.adsco.re/
200 OK 0 B IP
Requested by https://dlhd.sx/stream/stream-81.php
Certificate IssuerSectigo Limited
Subject*.adsco.re
Fingerprint40:64:05:9C:99:0A:1E:9F:A7:49:61:8E:86:4C:4B:06:9C:73:83:73
ValiditySat, 23 Sep 2023 00:00:00 GMT - Sun, 29 Sep 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: 6.adsco.re
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://dlhd.sx
DNT: 1
Connection: keep-alive
Referer: https://dlhd.sx/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 07 Dec 2023 23:06:47 GMT
content-type: text/plain;charset=UTF-8
content-length: 0
access-control-allow-origin: https://dlhd.sx
cache-control: private, max-age=10
access-control-allow-headers: Content-Type
access-control-allow-methods: GET, HEAD, OPTIONS
access-control-max-age: 2592000
vary: Accept-Encoding
server: cloudflare
cf-ray: 83206bcdca00b511-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
4.adsco.re/
200 OK 62 B IP
Requested by https://dlhd.sx/stream/stream-81.php
Certificate IssuerSectigo Limited
Subject*.adsco.re
Fingerprint40:64:05:9C:99:0A:1E:9F:A7:49:61:8E:86:4C:4B:06:9C:73:83:73
ValiditySat, 23 Sep 2023 00:00:00 GMT - Sun, 29 Sep 2024 23:59:59 GMT
File type ASCII text, with no line terminators
Hash 5b41cb22f84f645a103acc7bfbf084ff
bac3967b26d5ec4a0d09a580714e8219796816bd
709f0a0dfab9f9e074f4a4a348dcb09150838284d21e75cfb9e5ceaeeb2054bc
GET / HTTP/1.1
Host: 4.adsco.re
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://dlhd.sx
DNT: 1
Connection: keep-alive
Referer: https://dlhd.sx/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 07 Dec 2023 23:06:47 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Methods: GET, HEAD, OPTIONS
Access-Control-Allow-Headers: Content-Type
Access-Control-Allow-Origin: https://dlhd.sx
Access-Control-Max-Age: 2592000
Cache-Control: private, max-age=5
Content-Encoding: gzip
st.chatango.com/cfg/nc/r.json?6327570020000328838114308
200 OK 20 B URL GET HTTP/1.1 st.chatango.com/cfg/nc/r.json?6327570020000328838114308
IP
Requested by https://dlhd.sx/stream/stream-81.php
Certificate IssuerSectigo Limited
Subject*.chatango.com
Fingerprint51:E2:E1:03:43:73:D8:C8:D4:4D:E0:E4:4A:BF:4F:DB:B5:CB:6E:A0
ValiditySat, 03 Jun 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT
File type JSON data\012- , ASCII text
Hash 779cc59be8faa109ef9886b2913cee3a
8f4eb98975d87b07ea199cd34f7519537d78dca3
4fb3560401e43be312d784a722dd988a0278cff49c8ae188965651efd5566a6b
GET /cfg/nc/r.json?6327570020000328838114308 HTTP/1.1
Host: st.chatango.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://dlhd.sx
DNT: 1
Connection: keep-alive
Referer: https://dlhd.sx/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 07 Dec 2023 23:06:47 GMT
Content-Type: application/octet-stream
Content-Length: 20
Last-Modified: Mon, 25 Sep 2023 13:02:22 GMT
Connection: keep-alive
Cache-Control: max-age=0, no-cache, no-store, must-revalidate
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
ad.a-ads.com/2251271?size=300x250
200 OK 12 kB URL GET HTTP/2 ad.a-ads.com/2251271?size=300x250
IP
ASN #24940 Hetzner Online GmbH
Requested by https://dlhd.sx/stream/stream-81.php
Certificate IssuerSectigo Limited
Subject*.a-ads.com
Fingerprint34:68:C2:05:E5:2A:4E:C3:F9:FC:94:69:D3:A6:BE:F2:21:A2:DE:AE
ValidityWed, 21 Dec 2022 00:00:00 GMT - Sun, 21 Jan 2024 23:59:59 GMT
File type gzip compressed data, from Unix\012- data
Hash 27dfba0b238c51108aa83fc825a47782
58bd9d29826836c85ac456a9bc674e70cd2d5469
0c907ecad565d0f85766b874d25f4e82211eb5e5f19585bd492005f95f161e73
GET /2251271?size=300x250 HTTP/1.1
Host: ad.a-ads.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dlhd.sx/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Thu, 07 Dec 2023 23:06:46 GMT
content-type: text/html;charset=utf-8
vary: Accept-Encoding, Accept-Encoding
status: 200 OK
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-powered-by: Phusion Passenger(R)
x-original-referer: https://dlhd.sx/
x-robots-tag: noindex, nofollow, nosnippet, noarchive
content-encoding: gzip
X-Firefox-Spdy: h2
v12q7gfwpm9o.n4.adsco.re/
200 OK 0 B URL POST HTTP/2 v12q7gfwpm9o.n4.adsco.re/
IP
Requested by https://dlhd.sx/stream/stream-81.php
Certificate IssuerLet's Encrypt
Subject*.n4.adsco.re
FingerprintAF:10:8A:4D:72:FD:FC:08:77:84:8F:BE:F7:48:3B:D0:52:53:23:0A
ValidityFri, 29 Sep 2023 17:35:50 GMT - Thu, 28 Dec 2023 17:35:49 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST / HTTP/1.1
Host: v12q7gfwpm9o.n4.adsco.re
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 0
Origin: https://dlhd.sx
DNT: 1
Connection: keep-alive
Referer: https://dlhd.sx/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 07 Dec 2023 23:06:47 GMT
content-type: text/html
content-length: 0
last-modified: Fri, 16 Jun 2023 08:37:42 GMT
etag: "648c1f56-0"
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
access-control-expose-headers: Content-Length,Content-Range
accept-ranges: bytes
X-Firefox-Spdy: h2
6.adsco.re/
200 OK 0 B IP
Requested by https://dlhd.sx/stream/stream-81.php
Certificate IssuerSectigo Limited
Subject*.adsco.re
Fingerprint40:64:05:9C:99:0A:1E:9F:A7:49:61:8E:86:4C:4B:06:9C:73:83:73
ValiditySat, 23 Sep 2023 00:00:00 GMT - Sun, 29 Sep 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: 6.adsco.re
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://c.adsco.re/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 07 Dec 2023 23:06:47 GMT
content-type: text/plain;charset=UTF-8
content-length: 0
access-control-allow-origin: *
cache-control: private, max-age=10
access-control-allow-headers: Content-Type
access-control-allow-methods: GET, HEAD, OPTIONS
access-control-max-age: 2592000
vary: Accept-Encoding
server: cloudflare
cf-ray: 83206bd0af25712b-OSL
alt-svc: h3=":443"; ma=86400
my.rtmark.net/gid.js?userId=a5bm402398ol507408936a6i8qnwx616
200 OK 65 B URL GET HTTP/2 my.rtmark.net/gid.js?userId=a5bm402398ol507408936a6i8qnwx616
IP
Requested by https://dlhd.sx/stream/stream-81.php
Certificate IssuerLet's Encrypt
Subjectrtmark.net
FingerprintE8:81:4E:79:89:89:BE:CE:75:1F:E0:2A:60:54:8A:A4:11:2E:F7:42
ValiditySat, 07 Oct 2023 15:22:00 GMT - Fri, 05 Jan 2024 15:21:59 GMT
File type JSON data\012- , ASCII text
Hash c39472d0380766247d2d61f5e040566d
63220990a0350c2875320dbaa6593d8d8ff45f9a
c3b4fe58174624b760d907ce3dec4dac86fbced40f0eae473e0663454f9498e6
GET /gid.js?userId=a5bm402398ol507408936a6i8qnwx616 HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://dlhd.sx
DNT: 1
Connection: keep-alive
Referer: https://dlhd.sx/
Cookie: ID=7fb5496039fe45a4a1ddd06f5c9c1da0
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 07 Dec 2023 23:06:47 GMT
content-type: application/json; charset=utf-8
content-length: 65
access-control-allow-origin: https://dlhd.sx
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
set-cookie: ID=7fb5496039fe45a4a1ddd06f5c9c1da0; expires=Fri, 06 Dec 2024 23:06:47 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
esaidees.com/500/4579215?excludes=&oaid=a5bm402398ol507408936a6i8qnwx616&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=981&wfc=10&pl=https%3A%2F%2Fdlhd.sx%2Fstream%2Fstream-81.php&drf=&np=1&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false&tzofs=0&js_build=8&sw_version=v1.312.0
200 OK 0 B URL GET HTTP/2 esaidees.com/500/4579215?excludes=&oaid=a5bm402398ol507408936a6i8qnwx616&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=981&wfc=10&pl=https%3A%2F%2Fdlhd.sx%2Fstream%2Fstream-81.php&drf=&np=1&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false&tzofs=0&js_build=8&sw_version=v1.312.0
IP
Requested by https://dlhd.sx/stream/stream-81.php
Certificate IssuerLet's Encrypt
Subjectesaidees.com
Fingerprint60:0A:18:98:3E:8B:FA:E2:70:D5:EF:09:C1:DA:B2:85:C1:7A:BC:6A
ValidityWed, 25 Oct 2023 09:19:27 GMT - Tue, 23 Jan 2024 09:19:26 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
OPTIONS /500/4579215?excludes=&oaid=a5bm402398ol507408936a6i8qnwx616&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=981&wfc=10&pl=https%3A%2F%2Fdlhd.sx%2Fstream%2Fstream-81.php&drf=&np=1&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false&tzofs=0&js_build=8&sw_version=v1.312.0 HTTP/1.1
Host: esaidees.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: content-type
Referer: https://dlhd.sx/
Origin: https://dlhd.sx
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Thu, 07 Dec 2023 23:06:48 GMT
content-length: 0
allow: GET, OPTIONS
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-origin: https://dlhd.sx
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace
access-control-allow-credentials: true
access-control-max-age: 600
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Wow64
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *
X-Firefox-Spdy: h2
4.adsco.re/
200 OK 62 B IP
Requested by https://dlhd.sx/stream/stream-81.php
Certificate IssuerSectigo Limited
Subject*.adsco.re
Fingerprint40:64:05:9C:99:0A:1E:9F:A7:49:61:8E:86:4C:4B:06:9C:73:83:73
ValiditySat, 23 Sep 2023 00:00:00 GMT - Sun, 29 Sep 2024 23:59:59 GMT
File type ASCII text, with no line terminators
Hash 5b41cb22f84f645a103acc7bfbf084ff
bac3967b26d5ec4a0d09a580714e8219796816bd
709f0a0dfab9f9e074f4a4a348dcb09150838284d21e75cfb9e5ceaeeb2054bc
GET / HTTP/1.1
Host: 4.adsco.re
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://c.adsco.re/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 07 Dec 2023 23:06:48 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Methods: GET, HEAD, OPTIONS
Access-Control-Allow-Headers: Content-Type
Access-Control-Allow-Origin: *
Access-Control-Max-Age: 2592000
Cache-Control: private, max-age=5
Content-Encoding: gzip
fleraprt.com/log/add?cid=1db9169f-90f4-4b2d-b517-bc47aab19c1f
200 OK 12 B URL POST HTTP/1.1 fleraprt.com/log/add?cid=1db9169f-90f4-4b2d-b517-bc47aab19c1f
IP
Requested by https://dlhd.sx/stream/stream-81.php
Certificate IssuerSectigo Limited
Subjectfleraprt.com
FingerprintA4:AF:A0:00:99:C9:85:E5:30:F6:F3:F2:B5:4F:AE:4F:D0:46:74:A9
ValidityMon, 09 Jan 2023 00:00:00 GMT - Sun, 14 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash adb4650bfc9d2a73d4dd69583b0ceb14
1ce399d6e936232aaf2192cd7903a279c5015f22
21c1f682de27109caabcca9016511974defcec217c0441fd3f1b50ecdf8247ed
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
POST /log/add?cid=1db9169f-90f4-4b2d-b517-bc47aab19c1f HTTP/1.1
Host: fleraprt.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 1365
Origin: https://dlhd.sx
DNT: 1
Connection: keep-alive
Referer: https://dlhd.sx/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.10
Date: Thu, 07 Dec 2023 23:07:32 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 12
Connection: keep-alive
Access-Control-Allow-Origin: https://dlhd.sx
Access-Control-Allow-Methods: POST, GET, OPTIONS, PUT, DELETE
Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, X-Forwarded-For, If-None-Match
Access-Control-Allow-Credentials: true
ad.a-ads.com/2251270?size=970x90
200 OK 33 kB URL GET HTTP/2 ad.a-ads.com/2251270?size=970x90
IP
ASN #24940 Hetzner Online GmbH
Requested by https://dlhd.sx/stream/stream-81.php
Certificate IssuerSectigo Limited
Subject*.a-ads.com
Fingerprint34:68:C2:05:E5:2A:4E:C3:F9:FC:94:69:D3:A6:BE:F2:21:A2:DE:AE
ValidityWed, 21 Dec 2022 00:00:00 GMT - Sun, 21 Jan 2024 23:59:59 GMT
File type gzip compressed data, from Unix\012- data
Hash 55b65a27dc724914bb5b99f899f17ac5
e9829fec09fb735d176a4ca4e73f34cf9f9fe986
c0b2fcf739c5b7a1218c1c959712f73e5ec6604045f40a4491213f972cd6bd65
GET /2251270?size=970x90 HTTP/1.1
Host: ad.a-ads.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dlhd.sx/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Thu, 07 Dec 2023 23:06:46 GMT
content-type: text/html;charset=utf-8
vary: Accept-Encoding, Accept-Encoding
status: 200 OK
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-powered-by: Phusion Passenger(R)
x-original-referer: https://dlhd.sx/
x-robots-tag: noindex, nofollow, nosnippet, noarchive
content-encoding: gzip
X-Firefox-Spdy: h2
ust.chatango.com/groupinfo/d/a/daddylivehd/gprofile.xml
200 OK 237 B URL GET HTTP/1.1 ust.chatango.com/groupinfo/d/a/daddylivehd/gprofile.xml
IP
Requested by https://st.chatango.com/h5/gz/r0925230558/id.html
Certificate IssuerSectigo Limited
Subject*.chatango.com
Fingerprint51:E2:E1:03:43:73:D8:C8:D4:4D:E0:E4:4A:BF:4F:DB:B5:CB:6E:A0
ValiditySat, 03 Jun 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT
File type XML 1.0 document text\012- XML document text\012- HTML document, ASCII text, with no line terminators
Hash eb4962058e4cea8315f3940f214029df
604144b12267a7aae0beba5e79e13c9f0ca91424
6c7e59b57a66c1ba4645dc5fae254df52b572797764e7228ecca2ce399e97852
GET /groupinfo/d/a/daddylivehd/gprofile.xml HTTP/1.1
Host: ust.chatango.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://st.chatango.com
DNT: 1
Connection: keep-alive
Referer: https://st.chatango.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 07 Dec 2023 23:06:48 GMT
Content-Type: text/xml
Content-Length: 237
Last-Modified: Wed, 23 Aug 2023 20:44:41 GMT
Connection: keep-alive
ETag: "64e66fb9-ed"
Expires: Thu, 07 Dec 2023 23:06:48 GMT
Cache-Control: max-age=0
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
s50.chatango.com:8081/
0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: s50.chatango.com:8081
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://st.chatango.com
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: eECsY01VIhonRuxrKxL/0A==
DNT: 1
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Upgrade: websocket
Connection: Upgrade
Sec-WebSocket-Accept: 7504EyCZGfniaE0waMDELyJcDEg=
esaidees.com/500/4579215?excludes=&oaid=a5bm402398ol507408936a6i8qnwx616&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=981&wfc=10&pl=https%3A%2F%2Fdlhd.sx%2Fstream%2Fstream-81.php&drf=&np=1&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false&tzofs=0&js_build=8&sw_version=v1.312.0
200 OK 1.1 kB URL GET HTTP/2 esaidees.com/500/4579215?excludes=&oaid=a5bm402398ol507408936a6i8qnwx616&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=981&wfc=10&pl=https%3A%2F%2Fdlhd.sx%2Fstream%2Fstream-81.php&drf=&np=1&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false&tzofs=0&js_build=8&sw_version=v1.312.0
IP
Requested by https://dlhd.sx/stream/stream-81.php
Certificate IssuerLet's Encrypt
Subjectesaidees.com
Fingerprint60:0A:18:98:3E:8B:FA:E2:70:D5:EF:09:C1:DA:B2:85:C1:7A:BC:6A
ValidityWed, 25 Oct 2023 09:19:27 GMT - Tue, 23 Jan 2024 09:19:26 GMT
File type gzip compressed data, max speed, from Unix\012- data
Hash 851b005c3a0206b3f75aa11525d49d48
6561f68e97357cd500168bdbb81efc323e85bf28
4740eb6122ce0e472ed80c5855d8edf9d9c27cb551c9f3904a84637e5b38a17b
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /500/4579215?excludes=&oaid=a5bm402398ol507408936a6i8qnwx616&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=981&wfc=10&pl=https%3A%2F%2Fdlhd.sx%2Fstream%2Fstream-81.php&drf=&np=1&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false&tzofs=0&js_build=8&sw_version=v1.312.0 HTTP/1.1
Host: esaidees.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Origin: https://dlhd.sx
DNT: 1
Connection: keep-alive
Referer: https://dlhd.sx/
Cookie: OAID=0a3b7570657a44b188021d42df052e00
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 07 Dec 2023 23:06:48 GMT
content-type: application/javascript
x-trace-id: 84cbf77cff59fd003cc0b65757db3f19
pragma: no-cache
expires: Tue, 11 Jan 1994 10:00:00 GMT
cache-control: no-cache, no-store, no-transform, must-revalidate, private, max-age=0
vary: Origin
access-control-allow-origin: https://dlhd.sx
access-control-expose-headers: Link
access-control-allow-credentials: true
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Wow64
set-cookie: OAID=a5bm402398ol507408936a6i8qnwx616; expires=Fri, 06 Dec 2024 23:06:48 GMT; path=/; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
content-encoding: gzip
X-Firefox-Spdy: h2
ust.chatango.com/profileimg/d/a/daddyhd/msgbg.xml
200 OK 118 B URL GET HTTP/1.1 ust.chatango.com/profileimg/d/a/daddyhd/msgbg.xml
IP
Requested by https://st.chatango.com/h5/gz/r0925230558/id.html
Certificate IssuerSectigo Limited
Subject*.chatango.com
Fingerprint51:E2:E1:03:43:73:D8:C8:D4:4D:E0:E4:4A:BF:4F:DB:B5:CB:6E:A0
ValiditySat, 03 Jun 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT
File type XML 1.0 document text\012- XML document, ASCII text
Hash 85077adef02e1e52e7c4c36483c5fa31
1e0eb957b74aad4b33de385cf39ade7088f3e795
1e22845873b64a933c09333c316c03cd2e2bdd6816825ab42d79abba6baf6bdc
GET /profileimg/d/a/daddyhd/msgbg.xml HTTP/1.1
Host: ust.chatango.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://st.chatango.com
DNT: 1
Connection: keep-alive
Referer: https://st.chatango.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 07 Dec 2023 23:06:49 GMT
Content-Type: text/xml
Content-Length: 118
Last-Modified: Sun, 05 Feb 2023 19:32:09 GMT
Connection: keep-alive
ETag: "63e00439-76"
Expires: Thu, 07 Dec 2023 23:06:49 GMT
Cache-Control: max-age=0
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
ust.chatango.com/profileimg/d/a/daddyhd/thumb.jpg
200 OK 1.3 kB URL GET HTTP/1.1 ust.chatango.com/profileimg/d/a/daddyhd/thumb.jpg
IP
Requested by https://st.chatango.com/h5/gz/r0925230558/id.html
Certificate IssuerSectigo Limited
Subject*.chatango.com
Fingerprint51:E2:E1:03:43:73:D8:C8:D4:4D:E0:E4:4A:BF:4F:DB:B5:CB:6E:A0
ValiditySat, 03 Jun 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 50x50, components 3\012- data
Hash f95795e9767d9bca66c5f1c24c29fb80
bd70a9c657f0aa3d5c77b614e997efb91513fc1c
0b45e3c3d229fa01fc0111122ab281ebaa616ee148c55e3159232410855ee2dd
GET /profileimg/d/a/daddyhd/thumb.jpg HTTP/1.1
Host: ust.chatango.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://st.chatango.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 07 Dec 2023 23:06:50 GMT
Content-Type: image/jpeg
Content-Length: 1290
Last-Modified: Sun, 23 Apr 2023 01:47:21 GMT
Connection: keep-alive
ETag: "64448e29-50a"
Expires: Thu, 07 Dec 2023 23:06:50 GMT
Cache-Control: max-age=0
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
ust.chatango.com/profileimg/h/a/hawk65/thumb.jpg
200 OK 640 B URL GET HTTP/1.1 ust.chatango.com/profileimg/h/a/hawk65/thumb.jpg
IP
Requested by https://st.chatango.com/h5/gz/r0925230558/id.html
Certificate IssuerSectigo Limited
Subject*.chatango.com
Fingerprint51:E2:E1:03:43:73:D8:C8:D4:4D:E0:E4:4A:BF:4F:DB:B5:CB:6E:A0
ValiditySat, 03 Jun 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 50x50, components 3\012- data
Hash 81a620d0a6b17b31632ca56ac588ecbb
c93fc7d3b7c2ab12a68edf54be4b71753cb8f5e8
fcfa793d204b4144bf54f59bd9c5c720843af02dd02999d1653c8fafc0ebd8ea
GET /profileimg/h/a/hawk65/thumb.jpg HTTP/1.1
Host: ust.chatango.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://st.chatango.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 07 Dec 2023 23:06:50 GMT
Content-Type: image/jpeg
Content-Length: 640
Last-Modified: Tue, 09 Jun 2009 03:36:06 GMT
Connection: keep-alive
ETag: "4a2dd8a6-280"
Expires: Thu, 07 Dec 2023 23:06:50 GMT
Cache-Control: max-age=0
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
ust.chatango.com/profileimg/s/h/shadowthahedgee/thumb.jpg
200 OK 1.8 kB URL GET HTTP/1.1 ust.chatango.com/profileimg/s/h/shadowthahedgee/thumb.jpg
IP
Requested by https://st.chatango.com/h5/gz/r0925230558/id.html
Certificate IssuerSectigo Limited
Subject*.chatango.com
Fingerprint51:E2:E1:03:43:73:D8:C8:D4:4D:E0:E4:4A:BF:4F:DB:B5:CB:6E:A0
ValiditySat, 03 Jun 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 50x50, components 3\012- data
Hash 5fec6356e2a31492f36bbb4490a941f4
575991e6b5525311150c9945514aa7307378adca
35d90d303789f2f02d03b9221e51f0fb5f63fc19d510e09244fa9ef6db3df829
GET /profileimg/s/h/shadowthahedgee/thumb.jpg HTTP/1.1
Host: ust.chatango.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://st.chatango.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 07 Dec 2023 23:06:50 GMT
Content-Type: image/jpeg
Content-Length: 1753
Last-Modified: Fri, 18 Feb 2022 01:13:15 GMT
Connection: keep-alive
ETag: "620ef2ab-6d9"
Expires: Thu, 07 Dec 2023 23:06:50 GMT
Cache-Control: max-age=0
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
ust.chatango.com/profileimg/c/o/corndoglover/thumb.jpg
200 OK 1.3 kB URL GET HTTP/1.1 ust.chatango.com/profileimg/c/o/corndoglover/thumb.jpg
IP
Requested by https://st.chatango.com/h5/gz/r0925230558/id.html
Certificate IssuerSectigo Limited
Subject*.chatango.com
Fingerprint51:E2:E1:03:43:73:D8:C8:D4:4D:E0:E4:4A:BF:4F:DB:B5:CB:6E:A0
ValiditySat, 03 Jun 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 50x50, components 3\012- data
Hash 394edcb270b13a78c4ef72a19eea7bc8
f388142955d5de81f00666ffa8fa600c87c84e60
7517298923099fa6561a760dd404bb3dd61a15ca3782d99a471ecbb29737bb53
GET /profileimg/c/o/corndoglover/thumb.jpg HTTP/1.1
Host: ust.chatango.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://st.chatango.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 07 Dec 2023 23:06:50 GMT
Content-Type: image/jpeg
Content-Length: 1271
Last-Modified: Fri, 03 Nov 2023 00:02:53 GMT
Connection: keep-alive
ETag: "654438ad-4f7"
Expires: Thu, 07 Dec 2023 23:06:50 GMT
Cache-Control: max-age=0
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
ust.chatango.com/profileimg/s/t/staffhelper1/thumb.jpg
200 OK 1.6 kB URL GET HTTP/1.1 ust.chatango.com/profileimg/s/t/staffhelper1/thumb.jpg
IP
Requested by https://st.chatango.com/h5/gz/r0925230558/id.html
Certificate IssuerSectigo Limited
Subject*.chatango.com
Fingerprint51:E2:E1:03:43:73:D8:C8:D4:4D:E0:E4:4A:BF:4F:DB:B5:CB:6E:A0
ValiditySat, 03 Jun 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 50x50, components 3\012- data
Hash 4cda8919920766b0bc3e455dc06977f6
28cd07a8eb63c0a1e282f48ab574c6dc8052a039
a42950ccea7250ae2181c16b5d0c626cdd9d2c37b5b330efe22d5a392026164b
GET /profileimg/s/t/staffhelper1/thumb.jpg HTTP/1.1
Host: ust.chatango.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://st.chatango.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 07 Dec 2023 23:06:50 GMT
Content-Type: image/jpeg
Content-Length: 1620
Last-Modified: Mon, 06 Mar 2023 17:32:07 GMT
Connection: keep-alive
ETag: "64062397-654"
Expires: Thu, 07 Dec 2023 23:06:50 GMT
Cache-Control: max-age=0
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
ust.chatango.com/profileimg/o/l/olglug/thumb.jpg
200 OK 1.4 kB URL GET HTTP/1.1 ust.chatango.com/profileimg/o/l/olglug/thumb.jpg
IP
Requested by https://st.chatango.com/h5/gz/r0925230558/id.html
Certificate IssuerSectigo Limited
Subject*.chatango.com
Fingerprint51:E2:E1:03:43:73:D8:C8:D4:4D:E0:E4:4A:BF:4F:DB:B5:CB:6E:A0
ValiditySat, 03 Jun 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 50x50, components 3\012- data
Hash 2f6ab5e20780844011d7fdf2e00ca5d8
d86f5100d96219a804e125566969440d0d9399fb
301016e4bd8821c88687480444105ce3c1658c2f9dd4b09dc5194d4325c63a47
GET /profileimg/o/l/olglug/thumb.jpg HTTP/1.1
Host: ust.chatango.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://st.chatango.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 07 Dec 2023 23:06:50 GMT
Content-Type: image/jpeg
Content-Length: 1390
Last-Modified: Sun, 15 Oct 2023 16:07:14 GMT
Connection: keep-alive
ETag: "652c0e32-56e"
Expires: Thu, 07 Dec 2023 23:06:50 GMT
Cache-Control: max-age=0
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
ust.chatango.com/profileimg/l/o/logworm/thumb.jpg
200 OK 1.6 kB URL GET HTTP/1.1 ust.chatango.com/profileimg/l/o/logworm/thumb.jpg
IP
Requested by https://st.chatango.com/h5/gz/r0925230558/id.html
Certificate IssuerSectigo Limited
Subject*.chatango.com
Fingerprint51:E2:E1:03:43:73:D8:C8:D4:4D:E0:E4:4A:BF:4F:DB:B5:CB:6E:A0
ValiditySat, 03 Jun 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 50x50, components 3\012- data
Hash 0b89010cc246046bf700ab08426d5f4e
7d84091343fa1498f1f1ebfa5195772991f453ac
1d0eee7fb7371ebe24970ad1e95054c7ddbdb33a08eaf82eaa3113f01d348236
GET /profileimg/l/o/logworm/thumb.jpg HTTP/1.1
Host: ust.chatango.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://st.chatango.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 07 Dec 2023 23:06:50 GMT
Content-Type: image/jpeg
Content-Length: 1615
Last-Modified: Thu, 23 Mar 2023 21:06:26 GMT
Connection: keep-alive
ETag: "641cbf52-64f"
Expires: Thu, 07 Dec 2023 23:06:50 GMT
Cache-Control: max-age=0
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
ust.chatango.com/profileimg/g/m/gman2023/thumb.jpg
200 OK 640 B URL GET HTTP/1.1 ust.chatango.com/profileimg/g/m/gman2023/thumb.jpg
IP
Requested by https://st.chatango.com/h5/gz/r0925230558/id.html
Certificate IssuerSectigo Limited
Subject*.chatango.com
Fingerprint51:E2:E1:03:43:73:D8:C8:D4:4D:E0:E4:4A:BF:4F:DB:B5:CB:6E:A0
ValiditySat, 03 Jun 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 50x50, components 3\012- data
Hash 81a620d0a6b17b31632ca56ac588ecbb
c93fc7d3b7c2ab12a68edf54be4b71753cb8f5e8
fcfa793d204b4144bf54f59bd9c5c720843af02dd02999d1653c8fafc0ebd8ea
GET /profileimg/g/m/gman2023/thumb.jpg HTTP/1.1
Host: ust.chatango.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://st.chatango.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 07 Dec 2023 23:06:50 GMT
Content-Type: image/jpeg
Content-Length: 640
Last-Modified: Tue, 09 Jun 2009 03:36:06 GMT
Connection: keep-alive
ETag: "4a2dd8a6-280"
Expires: Thu, 07 Dec 2023 23:06:50 GMT
Cache-Control: max-age=0
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
esaidees.com/400/4579215
200 OK 32 kB IP
Requested by https://dlhd.sx/stream/stream-81.php
Certificate IssuerLet's Encrypt
Subjectesaidees.com
Fingerprint60:0A:18:98:3E:8B:FA:E2:70:D5:EF:09:C1:DA:B2:85:C1:7A:BC:6A
ValidityWed, 25 Oct 2023 09:19:27 GMT - Tue, 23 Jan 2024 09:19:26 GMT
File type gzip compressed data, max speed, from Unix\012- data
Hash 56256676eb515d0edb861ecd7ccee831
dfad1cdc5b6d58d110e280a292fa660c719a4212
dcf57c6a2dcd126aee9f18b7b8e5033f0afbc74cc45d5e7320e4fc7385d69d06
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /400/4579215 HTTP/1.1
Host: esaidees.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dlhd.sx/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Thu, 07 Dec 2023 23:06:45 GMT
content-type: application/javascript
x-trace-id: 5694c424c88ef697f9c638c39de97b80
pragma: no-cache
expires: Tue, 11 Jan 1994 10:00:00 GMT
cache-control: no-cache, no-store, no-transform, must-revalidate, private, max-age=0
vary: Origin
access-control-allow-origin: *
access-control-expose-headers: Link
access-control-allow-credentials: true
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Wow64
set-cookie: OAID=0a3b7570657a44b188021d42df052e00; expires=Fri, 06 Dec 2024 23:06:45 GMT; path=/; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
content-encoding: gzip
X-Firefox-Spdy: h2
ust.chatango.com/profileimg/m/x/mxyxptlk/thumb.jpg
200 OK 640 B URL GET HTTP/1.1 ust.chatango.com/profileimg/m/x/mxyxptlk/thumb.jpg
IP
Requested by https://st.chatango.com/h5/gz/r0925230558/id.html
Certificate IssuerSectigo Limited
Subject*.chatango.com
Fingerprint51:E2:E1:03:43:73:D8:C8:D4:4D:E0:E4:4A:BF:4F:DB:B5:CB:6E:A0
ValiditySat, 03 Jun 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 50x50, components 3\012- data
Hash 81a620d0a6b17b31632ca56ac588ecbb
c93fc7d3b7c2ab12a68edf54be4b71753cb8f5e8
fcfa793d204b4144bf54f59bd9c5c720843af02dd02999d1653c8fafc0ebd8ea
GET /profileimg/m/x/mxyxptlk/thumb.jpg HTTP/1.1
Host: ust.chatango.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://st.chatango.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 07 Dec 2023 23:06:50 GMT
Content-Type: image/jpeg
Content-Length: 640
Last-Modified: Tue, 09 Jun 2009 03:36:06 GMT
Connection: keep-alive
ETag: "4a2dd8a6-280"
Expires: Thu, 07 Dec 2023 23:06:50 GMT
Cache-Control: max-age=0
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
ust.chatango.com/profileimg/t/h/thedublinman/thumb.jpg
200 OK 1.6 kB URL GET HTTP/1.1 ust.chatango.com/profileimg/t/h/thedublinman/thumb.jpg
IP
Requested by https://st.chatango.com/h5/gz/r0925230558/id.html
Certificate IssuerSectigo Limited
Subject*.chatango.com
Fingerprint51:E2:E1:03:43:73:D8:C8:D4:4D:E0:E4:4A:BF:4F:DB:B5:CB:6E:A0
ValiditySat, 03 Jun 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 50x50, components 3\012- data
Hash 4ac304cccd62b0ccede5de02b660522f
a48d71a34d38381cac48d47a3a4ee1d83a029b83
0ac4cc9ef1194044e3a9163a7d686bf93ec5ac7d5221353388a769056db37387
GET /profileimg/t/h/thedublinman/thumb.jpg HTTP/1.1
Host: ust.chatango.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://st.chatango.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 07 Dec 2023 23:06:50 GMT
Content-Type: image/jpeg
Content-Length: 1648
Last-Modified: Wed, 02 Jun 2021 07:41:44 GMT
Connection: keep-alive
ETag: "60b73638-670"
Expires: Thu, 07 Dec 2023 23:06:50 GMT
Cache-Control: max-age=0
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
ust.chatango.com/profileimg/d/a/daddyhd/msgbg.jpg?1701990416722
200 OK 1.0 kB URL GET HTTP/1.1 ust.chatango.com/profileimg/d/a/daddyhd/msgbg.jpg?1701990416722
IP
Requested by https://st.chatango.com/h5/gz/r0925230558/id.html
Certificate IssuerSectigo Limited
Subject*.chatango.com
Fingerprint51:E2:E1:03:43:73:D8:C8:D4:4D:E0:E4:4A:BF:4F:DB:B5:CB:6E:A0
ValiditySat, 03 Jun 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 59x12, components 3\012- data
Hash b3098f0ee63b946a7006dd0de81f75f9
1d4b8be7d7c211e5d10f507ce8216753f7a18a55
3d1c95566aeb10a6c5bc1255b351e9b6825316e044de7585d201d9b3f9c3560e
GET /profileimg/d/a/daddyhd/msgbg.jpg?1701990416722 HTTP/1.1
Host: ust.chatango.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://st.chatango.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 07 Dec 2023 23:06:50 GMT
Content-Type: image/jpeg
Content-Length: 1005
Last-Modified: Sun, 05 Feb 2023 19:32:08 GMT
Connection: keep-alive
Expires: Thu, 07 Dec 2023 23:06:50 GMT
Cache-Control: max-age=0
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
ust.chatango.com/profileimg/c/l/classic3d2/thumb.jpg
200 OK 1.5 kB URL GET HTTP/1.1 ust.chatango.com/profileimg/c/l/classic3d2/thumb.jpg
IP
Requested by https://st.chatango.com/h5/gz/r0925230558/id.html
Certificate IssuerSectigo Limited
Subject*.chatango.com
Fingerprint51:E2:E1:03:43:73:D8:C8:D4:4D:E0:E4:4A:BF:4F:DB:B5:CB:6E:A0
ValiditySat, 03 Jun 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 50x50, components 3\012- data
Hash 2ffe239cd680bfbc21a029e2651c7fec
d5c991e3e20e6c550f0337904eac89574f7a0b38
fe2558a4a962cefc78cf89791f02f3d6b4b0188b4ab9c4345b2ed7bf5640828d
GET /profileimg/c/l/classic3d2/thumb.jpg HTTP/1.1
Host: ust.chatango.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://st.chatango.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 07 Dec 2023 23:06:50 GMT
Content-Type: image/jpeg
Content-Length: 1516
Last-Modified: Thu, 05 Oct 2023 04:13:04 GMT
Connection: keep-alive
Expires: Thu, 07 Dec 2023 23:06:50 GMT
Cache-Control: max-age=0
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
ust.chatango.com/profileimg/p/a/papiou1717/thumb.jpg
200 OK 640 B URL GET HTTP/1.1 ust.chatango.com/profileimg/p/a/papiou1717/thumb.jpg
IP
Requested by https://st.chatango.com/h5/gz/r0925230558/id.html
Certificate IssuerSectigo Limited
Subject*.chatango.com
Fingerprint51:E2:E1:03:43:73:D8:C8:D4:4D:E0:E4:4A:BF:4F:DB:B5:CB:6E:A0
ValiditySat, 03 Jun 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 50x50, components 3\012- data
Hash 81a620d0a6b17b31632ca56ac588ecbb
c93fc7d3b7c2ab12a68edf54be4b71753cb8f5e8
fcfa793d204b4144bf54f59bd9c5c720843af02dd02999d1653c8fafc0ebd8ea
GET /profileimg/p/a/papiou1717/thumb.jpg HTTP/1.1
Host: ust.chatango.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://st.chatango.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 07 Dec 2023 23:06:50 GMT
Content-Type: image/jpeg
Content-Length: 640
Last-Modified: Tue, 09 Jun 2009 03:36:06 GMT
Connection: keep-alive
ETag: "4a2dd8a6-280"
Expires: Thu, 07 Dec 2023 23:06:50 GMT
Cache-Control: max-age=0
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
ust.chatango.com/profileimg/k/r/kraken722/thumb.jpg
200 OK 1.2 kB URL GET HTTP/1.1 ust.chatango.com/profileimg/k/r/kraken722/thumb.jpg
IP
Requested by https://st.chatango.com/h5/gz/r0925230558/id.html
Certificate IssuerSectigo Limited
Subject*.chatango.com
Fingerprint51:E2:E1:03:43:73:D8:C8:D4:4D:E0:E4:4A:BF:4F:DB:B5:CB:6E:A0
ValiditySat, 03 Jun 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 50x50, components 3\012- data
Hash 484dfbf9c71df7bbf5b040c729982901
86c4636aa3acd14f75eb7cd346bfb4e144867f5b
ea30f09960ccc2cd73a631b757b7669ade5496a7a85084f58b6879e23d6c5c62
GET /profileimg/k/r/kraken722/thumb.jpg HTTP/1.1
Host: ust.chatango.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://st.chatango.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 07 Dec 2023 23:06:50 GMT
Content-Type: image/jpeg
Content-Length: 1204
Last-Modified: Thu, 12 Oct 2023 16:43:29 GMT
Connection: keep-alive
ETag: "65282231-4b4"
Expires: Thu, 07 Dec 2023 23:06:50 GMT
Cache-Control: max-age=0
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
ust.chatango.com/um/s/h/shadowthahedgee/img/t_1570.jpg
200 OK 9.3 kB URL GET HTTP/1.1 ust.chatango.com/um/s/h/shadowthahedgee/img/t_1570.jpg
IP
Requested by https://st.chatango.com/h5/gz/r0925230558/id.html
Certificate IssuerSectigo Limited
Subject*.chatango.com
Fingerprint51:E2:E1:03:43:73:D8:C8:D4:4D:E0:E4:4A:BF:4F:DB:B5:CB:6E:A0
ValiditySat, 03 Jun 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x230, components 3\012- data
Hash dde06ce94631484f36b562db96e41c92
68f4b2825c924e22e93f17c926e40ebe3d724f49
ca2b4e5f2025a2d912303253bc3875ee6dddf0cab7740b2d0d1c2fd2cf183151
GET /um/s/h/shadowthahedgee/img/t_1570.jpg HTTP/1.1
Host: ust.chatango.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://st.chatango.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 07 Dec 2023 23:06:50 GMT
Content-Type: image/jpeg
Content-Length: 9266
Last-Modified: Thu, 07 Dec 2023 21:40:24 GMT
Connection: keep-alive
ETag: "65723bc8-2432"
Expires: Thu, 07 Dec 2023 23:16:50 GMT
Cache-Control: max-age=600
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
adsco.re/p
200 OK 845 B IP
Requested by https://dlhd.sx/stream/stream-81.php
Certificate IssuerSectigo Limited
Subject*.adsco.re
Fingerprint40:64:05:9C:99:0A:1E:9F:A7:49:61:8E:86:4C:4B:06:9C:73:83:73
ValiditySat, 23 Sep 2023 00:00:00 GMT - Sun, 29 Sep 2024 23:59:59 GMT
File type ASCII text, with very long lines (1063), with no line terminators
Hash d6ff502d4e95cb0b898f2745e5aa581c
2947d11bd769ad453314de800372580dab0ab008
9871576f09311a795143a26f73bd24d9192bff9eb260c4f8efa0193d983eadfe
POST /p HTTP/1.1
Host: adsco.re
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Length: 2251
Origin: https://dlhd.sx
DNT: 1
Connection: keep-alive
Referer: https://dlhd.sx/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 07 Dec 2023 23:06:51 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
AS-P-1: OK lon123
AS-P-2: OK
AS-P-3: OK
Access-Control-Max-Age: 2592000
Cache-Control: no-transform
Accept-CH: Sec-CH-UA, Sec-CH-UA-Mobile, Sec-CH-UA-Full-Version, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Arch, Sec-CH-UA-Model, Device-Memory, Downlink, ECT, RTT, Width, Viewport-Width, DPR
Critical-CH: Sec-CH-UA, Sec-CH-UA-Mobile, Sec-CH-UA-Full-Version, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Arch, Sec-CH-UA-Model, Device-Memory, Downlink, ECT, RTT, Width, Viewport-Width, DPR
Permissions-Policy: ch-ua=(self "https://adsco.re"),ch-ua-mobile=(self "https://adsco.re"),ch-ua-full-version=(self "https://adsco.re"),ch-ua-platform=(self "https://adsco.re"),ch-ua-platform-version=(self "https://adsco.re"),ch-ua-arch=(self "https://adsco.re"),ch-ua-model=(self "https://adsco.re"),ch-device-memory=(self "https://adsco.re"),ch-downlink=(self "https://adsco.re"),ch-ect=(self "https://adsco.re"),ch-rtt=(self "https://adsco.re"),ch-width=(self "https://adsco.re"),ch-viewport-width=(self "https://adsco.re"),ch-dpr=(self "https://adsco.re")
Access-Control-Allow-Origin: https://dlhd.sx
Access-Control-Allow-Credentials: true
Content-Encoding: gzip
my.rtmark.net/gid.js?userId=80baff3262de439e97515ec070f8ef0b
200 OK 65 B URL GET HTTP/2 my.rtmark.net/gid.js?userId=80baff3262de439e97515ec070f8ef0b
IP
Requested by https://dlhd.sx/stream/stream-81.php
Certificate IssuerLet's Encrypt
Subjectrtmark.net
FingerprintE8:81:4E:79:89:89:BE:CE:75:1F:E0:2A:60:54:8A:A4:11:2E:F7:42
ValiditySat, 07 Oct 2023 15:22:00 GMT - Fri, 05 Jan 2024 15:21:59 GMT
File type JSON data\012- , ASCII text
Hash c39472d0380766247d2d61f5e040566d
63220990a0350c2875320dbaa6593d8d8ff45f9a
c3b4fe58174624b760d907ce3dec4dac86fbced40f0eae473e0663454f9498e6
GET /gid.js?userId=80baff3262de439e97515ec070f8ef0b HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://dlhd.sx
DNT: 1
Connection: keep-alive
Referer: https://dlhd.sx/
Cookie: ID=7fb5496039fe45a4a1ddd06f5c9c1da0
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 07 Dec 2023 23:06:51 GMT
content-type: application/json; charset=utf-8
content-length: 65
access-control-allow-origin: https://dlhd.sx
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
set-cookie: ID=7fb5496039fe45a4a1ddd06f5c9c1da0; expires=Fri, 06 Dec 2024 23:06:51 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
my.rtmark.net/gid.js?userId=a5bm402398ol507408936a6i8qnwx616
200 OK 65 B URL GET HTTP/2 my.rtmark.net/gid.js?userId=a5bm402398ol507408936a6i8qnwx616
IP
Requested by https://dlhd.sx/stream/stream-81.php
Certificate IssuerLet's Encrypt
Subjectrtmark.net
FingerprintE8:81:4E:79:89:89:BE:CE:75:1F:E0:2A:60:54:8A:A4:11:2E:F7:42
ValiditySat, 07 Oct 2023 15:22:00 GMT - Fri, 05 Jan 2024 15:21:59 GMT
File type JSON data\012- , ASCII text
Hash c39472d0380766247d2d61f5e040566d
63220990a0350c2875320dbaa6593d8d8ff45f9a
c3b4fe58174624b760d907ce3dec4dac86fbced40f0eae473e0663454f9498e6
GET /gid.js?userId=a5bm402398ol507408936a6i8qnwx616 HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://dlhd.sx
DNT: 1
Connection: keep-alive
Referer: https://dlhd.sx/
Cookie: ID=7fb5496039fe45a4a1ddd06f5c9c1da0
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 07 Dec 2023 23:06:51 GMT
content-type: application/json; charset=utf-8
content-length: 65
access-control-allow-origin: https://dlhd.sx
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
set-cookie: ID=7fb5496039fe45a4a1ddd06f5c9c1da0; expires=Fri, 06 Dec 2024 23:06:51 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
offerimage.com/www/images/59d005e99dabed8d7a753617b9dfe4d6.jpeg
200 OK 12 kB URL GET HTTP/2 offerimage.com/www/images/59d005e99dabed8d7a753617b9dfe4d6.jpeg
IP
Requested by https://dlhd.sx/stream/stream-81.php
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintDB:4D:42:F8:E2:4C:E3:E4:BB:22:D8:D1:F7:64:B5:9A:10:B6:25:E0
ValiditySun, 07 May 2023 00:00:00 GMT - Mon, 06 May 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 192x192, components 3\012- data
Hash 59d005e99dabed8d7a753617b9dfe4d6
5b4b05e20f8496be4f1f8d9e93adc1e1ccfbe383
d09719c31f8376e40f2a23e1e9833214527ec837e61e2e715752d58a1154bd31
GET /www/images/59d005e99dabed8d7a753617b9dfe4d6.jpeg HTTP/1.1
Host: offerimage.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dlhd.sx/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 07 Dec 2023 23:06:51 GMT
content-type: image/jpeg
content-length: 11455
cache-control: max-age=86400
cf-bgj: h2pri
etag: "631844d9-2cbf"
expires: Fri, 08 Dec 2023 05:32:44 GMT
last-modified: Wed, 07 Sep 2022 07:14:33 GMT
timing-allow-origin: *
cf-cache-status: HIT
age: 63247
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 83206be74a6b2d74-ARN
X-Firefox-Spdy: h2
crawledlikely.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSTWgkRRit3l1REA%2B6i%2BBB6OMuyKR%2FZpKMCy7GNWswJnF%2FyMFTVVf1pEx1V1PVP5PxElyQPY7gwWPnTbJBXYLrURBkIoIEhB0PkoMB8b4Xcc8yk4HRD7q%2F975Xh%2Fe%2Bqs%2F2ijPio6CnGx%2FonlSKzrUannt1U6ZcV9Zdu%2Bv6XsO77m7KdL553e2Of6Z80%2FdaDe%2Bae0tE23ou8HzP8z3fXZZGxLo7N1Ehs0dtv9H2Gs2g4bea6Jr%2Fc1s4sNQBL8%2FIK5B89NzWL48hoyHS5Nubwm7nOnvj3aRQNNcGJT%2B8l26nukqRzGBsHMTp4fQ0tB0R8uUF6PRwmgC63B8nAJMj4vzug6WHU5tg5cG5U6YgUjD%2BIqpyCKGGkHSISN%2BH5E8IEHGsrSNNHq5pU9Gdc5WO1RG59OxvyGpELv1xBWlytKRk172jVZFLnVp04xqyO4TsDJEVx8h7DmR1jCj%2FFJL%2FSuaerSJN9tet0pC8nqSXcggZD6FEH9Q6KMafdFDEDorMQcJPXdpqx563ELM4DBebURSFYRS1Fud5i4fNxdhDEY3t9ZFnfUSqj8jsIjO72JZ9mOJH2K0aljuw%2BYg4H%2B6i5DUqQVBZgooSVJKgygmqsj7gyga2fsiVLZg%2F7cG0h%2FVA5509eqDzjkgJqOnvZWfk5clu%2Frl2Gdvi1J0P4mbQYn4YBUG7yel8sBh4LRq2g3CBtcMQVtaQ9sIkbk%2BOyKs%2Fv4BMPnlrAEaPYdUxInkZtHgdtBosBB7o1qC56KGXHnHK%2BY6SpdjiDdsF1zWy%2FBLyHWdPnZHXJj7e%2B%2F4jiOjkxhe9P28dXfkEkamRmRofy58IOurB4LauyP5tXVnyeD3LZSJ7dHx%2Fd3Kai4tfvy92Km34yk3b%2F%2BrtaCyM4aO7wuarNOUy7VjyzZLkXJhlbSJBflixm4JtFHZrqTBpka1uvLO8kmRGWCt1OgSVI0KefodIjshLT%2B3kbV699xekGcIUNZLihEwLUh8jynZhs9nMagKjZpxlDqqiHpiAzYZKEigx45TVsP%2FhbIb37AN0jAOa30ea1ChNjVLVoKoPW1wc5Jk5ufFbOCkw5QyYMs4%2BU0Z9fr5cK09d0Yq9WHiBYHGbxQvU4%2B242Wa07YsF1qI%2BcjsSZuP5fwEAAP%2F%2FAQAA%2F%2F91z8CLcwQAAA%3D%3D
200 OK 7 B URL GET HTTP/1.1 crawledlikely.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSTWgkRRit3l1REA%2B6i%2BBB6OMuyKR%2FZpKMCy7GNWswJnF%2FyMFTVVf1pEx1V1PVP5PxElyQPY7gwWPnTbJBXYLrURBkIoIEhB0PkoMB8b4Xcc8yk4HRD7q%2F975Xh%2Fe%2Bqs%2F2ijPio6CnGx%2FonlSKzrUannt1U6ZcV9Zdu%2Bv6XsO77m7KdL553e2Of6Z80%2FdaDe%2Bae0tE23ou8HzP8z3fXZZGxLo7N1Ehs0dtv9H2Gs2g4bea6Jr%2Fc1s4sNQBL8%2FIK5B89NzWL48hoyHS5Nubwm7nOnvj3aRQNNcGJT%2B8l26nukqRzGBsHMTp4fQ0tB0R8uUF6PRwmgC63B8nAJMj4vzug6WHU5tg5cG5U6YgUjD%2BIqpyCKGGkHSISN%2BH5E8IEHGsrSNNHq5pU9Gdc5WO1RG59OxvyGpELv1xBWlytKRk172jVZFLnVp04xqyO4TsDJEVx8h7DmR1jCj%2FFJL%2FSuaerSJN9tet0pC8nqSXcggZD6FEH9Q6KMafdFDEDorMQcJPXdpqx563ELM4DBebURSFYRS1Fud5i4fNxdhDEY3t9ZFnfUSqj8jsIjO72JZ9mOJH2K0aljuw%2BYg4H%2B6i5DUqQVBZgooSVJKgygmqsj7gyga2fsiVLZg%2F7cG0h%2FVA5509eqDzjkgJqOnvZWfk5clu%2Frl2Gdvi1J0P4mbQYn4YBUG7yel8sBh4LRq2g3CBtcMQVtaQ9sIkbk%2BOyKs%2Fv4BMPnlrAEaPYdUxInkZtHgdtBosBB7o1qC56KGXHnHK%2BY6SpdjiDdsF1zWy%2FBLyHWdPnZHXJj7e%2B%2F4jiOjkxhe9P28dXfkEkamRmRofy58IOurB4LauyP5tXVnyeD3LZSJ7dHx%2Fd3Kai4tfvy92Km34yk3b%2F%2BrtaCyM4aO7wuarNOUy7VjyzZLkXJhlbSJBflixm4JtFHZrqTBpka1uvLO8kmRGWCt1OgSVI0KefodIjshLT%2B3kbV699xekGcIUNZLihEwLUh8jynZhs9nMagKjZpxlDqqiHpiAzYZKEigx45TVsP%2FhbIb37AN0jAOa30ea1ChNjVLVoKoPW1wc5Jk5ufFbOCkw5QyYMs4%2BU0Z9fr5cK09d0Yq9WHiBYHGbxQvU4%2B242Wa07YsF1qI%2BcjsSZuP5fwEAAP%2F%2FAQAA%2F%2F91z8CLcwQAAA%3D%3D
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://dlhd.sx/stream/stream-81.php
Certificate IssuerLet's Encrypt
Subjectcrawledlikely.com
FingerprintF2:17:B8:C3:A7:3F:04:71:84:9A:C7:BB:25:B0:76:52:8D:CD:55:36
ValidityTue, 28 Nov 2023 10:58:09 GMT - Mon, 26 Feb 2024 10:58:08 GMT
File type ASCII text, with no line terminators
Hash 132d6af1b46048b45cf86cdee7991d31
eb7007d03d59b65bc6da7e098c4d38fc6dfb6285
ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /ren.gif?sid=H4sIAAAAAAAC%2F1RSTWgkRRit3l1REA%2B6i%2BBB6OMuyKR%2FZpKMCy7GNWswJnF%2FyMFTVVf1pEx1V1PVP5PxElyQPY7gwWPnTbJBXYLrURBkIoIEhB0PkoMB8b4Xcc8yk4HRD7q%2F975Xh%2Fe%2Bqs%2F2ijPio6CnGx%2FonlSKzrUannt1U6ZcV9Zdu%2Bv6XsO77m7KdL553e2Of6Z80%2FdaDe%2Bae0tE23ou8HzP8z3fXZZGxLo7N1Ehs0dtv9H2Gs2g4bea6Jr%2Fc1s4sNQBL8%2FIK5B89NzWL48hoyHS5Nubwm7nOnvj3aRQNNcGJT%2B8l26nukqRzGBsHMTp4fQ0tB0R8uUF6PRwmgC63B8nAJMj4vzug6WHU5tg5cG5U6YgUjD%2BIqpyCKGGkHSISN%2BH5E8IEHGsrSNNHq5pU9Gdc5WO1RG59OxvyGpELv1xBWlytKRk172jVZFLnVp04xqyO4TsDJEVx8h7DmR1jCj%2FFJL%2FSuaerSJN9tet0pC8nqSXcggZD6FEH9Q6KMafdFDEDorMQcJPXdpqx563ELM4DBebURSFYRS1Fud5i4fNxdhDEY3t9ZFnfUSqj8jsIjO72JZ9mOJH2K0aljuw%2BYg4H%2B6i5DUqQVBZgooSVJKgygmqsj7gyga2fsiVLZg%2F7cG0h%2FVA5509eqDzjkgJqOnvZWfk5clu%2Frl2Gdvi1J0P4mbQYn4YBUG7yel8sBh4LRq2g3CBtcMQVtaQ9sIkbk%2BOyKs%2Fv4BMPnlrAEaPYdUxInkZtHgdtBosBB7o1qC56KGXHnHK%2BY6SpdjiDdsF1zWy%2FBLyHWdPnZHXJj7e%2B%2F4jiOjkxhe9P28dXfkEkamRmRofy58IOurB4LauyP5tXVnyeD3LZSJ7dHx%2Fd3Kai4tfvy92Km34yk3b%2F%2BrtaCyM4aO7wuarNOUy7VjyzZLkXJhlbSJBflixm4JtFHZrqTBpka1uvLO8kmRGWCt1OgSVI0KefodIjshLT%2B3kbV699xekGcIUNZLihEwLUh8jynZhs9nMagKjZpxlDqqiHpiAzYZKEigx45TVsP%2FhbIb37AN0jAOa30ea1ChNjVLVoKoPW1wc5Jk5ufFbOCkw5QyYMs4%2BU0Z9fr5cK09d0Yq9WHiBYHGbxQvU4%2B242Wa07YsF1qI%2BcjsSZuP5fwEAAP%2F%2FAQAA%2F%2F91z8CLcwQAAA%3D%3D HTTP/1.1
Host: crawledlikely.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dlhd.sx/
Cookie: u_pl=16066835; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Thu, 07 Dec 2023 23:06:51 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: a544cb6231bbae54185a13c121012a38
Strict-Transport-Security: max-age=0; includeSubdomains
cdn.creative-bars1.com/sb/ssp/vpn/classic-push/big1/img/close.png
200 OK 591 B URL GET HTTP/2 cdn.creative-bars1.com/sb/ssp/vpn/classic-push/big1/img/close.png
IP
Requested by https://dlhd.sx/stream/stream-81.php
Certificate IssuerGoogle Trust Services LLC
Subjectcreative-bars1.com
Fingerprint2B:CC:32:FC:17:6F:25:69:2F:F4:A0:D9:DC:9C:C2:09:28:32:AB:34
ValiditySat, 21 Oct 2023 15:38:40 GMT - Fri, 19 Jan 2024 15:38:39 GMT
File type PNG image data, 12 x 12, 8-bit/color RGBA, non-interlaced\012- data
Hash 9fd5bcb6103d86e317bd1eb019bcbe71
6b5a52ea669dcb74946f2bed4bdd7ec985026113
0ddd3be104ac7945fb062096df62034a6a24ecc76ba92493c35c62c3c25982ae
GET /sb/ssp/vpn/classic-push/big1/img/close.png HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 07 Dec 2023 23:06:51 GMT
content-type: image/png
content-length: 591
last-modified: Mon, 21 Feb 2022 10:06:44 GMT
etag: "62136434-24f"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 2040723
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Ungh9vqre%2B7totVx3iWmub%2BxJLmI%2F0Yszg1lKsP7A83ZIvjIyw72XkganqEx0OtqYFub08b4OzSyL9t%2FxKF8xchNjWhEwKU11aabC5jS%2Fua4p60AiFHMyMxvkttm%2FAxU1t9h9EXAIpRs"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 83206be8fd9d71e4-LHR
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
cdn.cloudimagesb.com/si/98/58/2f/98582fa31e3a411721a1f890fd22419a/1700491903.png
200 OK 9.0 kB URL GET HTTP/2 cdn.cloudimagesb.com/si/98/58/2f/98582fa31e3a411721a1f890fd22419a/1700491903.png
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://dlhd.sx/stream/stream-81.php
Certificate IssuerLet's Encrypt
Subjectcdn.cloudimagesb.com
Fingerprint71:EC:C0:22:20:76:60:90:92:4C:5C:F3:AD:17:3C:41:B5:00:25:AF
ValidityThu, 23 Nov 2023 05:00:53 GMT - Wed, 21 Feb 2024 05:00:52 GMT
File type PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced\012- data
Hash a56f06ca83ee06488a213b352e00bd90
aec437b74eb6f1143683872fb2d664286da4a664
7144c526762a9d91bdde1939194c2835f2cb1afe0ebac298bbdf1e9239b539ec
GET /si/98/58/2f/98582fa31e3a411721a1f890fd22419a/1700491903.png HTTP/1.1
Host: cdn.cloudimagesb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 07 Dec 2023 23:06:51 GMT
content-type: image/png
content-length: 9016
server: nginx/1.21.6
last-modified: Mon, 20 Nov 2023 14:51:52 GMT
etag: "655b7288-2338"
expires: Sat, 09 Dec 2023 23:06:51 GMT
cache-control: max-age=172800
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
cdn.cloudimagesb.com/si/3c/d5/62/3cd562dd264800ee586ac2da770e9a65/1700491951.png
200 OK 20 kB URL GET HTTP/2 cdn.cloudimagesb.com/si/3c/d5/62/3cd562dd264800ee586ac2da770e9a65/1700491951.png
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://dlhd.sx/stream/stream-81.php
Certificate IssuerLet's Encrypt
Subjectcdn.cloudimagesb.com
Fingerprint71:EC:C0:22:20:76:60:90:92:4C:5C:F3:AD:17:3C:41:B5:00:25:AF
ValidityThu, 23 Nov 2023 05:00:53 GMT - Wed, 21 Feb 2024 05:00:52 GMT
File type PNG image data, 320 x 180, 8-bit/color RGBA, non-interlaced\012- data
Hash ea31001ce8fa95eb2ac1617515105332
d505ca04808c25cfa33a555c96886f421ddbbde7
0267f5cd21fe5609405724c20d6f021b8932a696ada766b8e86e42c670000ab3
GET /si/3c/d5/62/3cd562dd264800ee586ac2da770e9a65/1700491951.png HTTP/1.1
Host: cdn.cloudimagesb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 07 Dec 2023 23:06:51 GMT
content-type: image/png
content-length: 20001
server: nginx/1.21.6
last-modified: Mon, 20 Nov 2023 14:52:40 GMT
etag: "655b72b8-4e21"
expires: Sat, 09 Dec 2023 23:06:51 GMT
cache-control: max-age=172800
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
xadsmart.com/orjxdlygyn?yBuMEYbc=BQMSAAAAAAAACZUAAly4v8yicaAoz_dtkNpZNSMrwb3-TTocZEn53r-NikVSdGoyAzKKA2RB4comt_MIvWDxxM3WaqrkBB9Y-TU_vPporE_TMhwU2cxugaAztiAzY3Q1xqj9aLHUx5G-XO9cQkPopk7prQUWaI9Gg8koY06OjBUOAHl8JCKQCle1a-YvraHoRWvCoLKiSWT5ATVQFTGfV1Z8LU9cU7e_oam9sOuzGIaKwHG8IXLgERA8JEU9FeF2abxZl-YyiI6y4BWMp9scq1LQ7opESoVHDHPybxooDKzOJrYbpvAWLlg4wARZOClGO7ENtsrx7KDMI-82kkhEH-XjuDLiMFw3P9QvxisvkUWdBxmYxYQlsqBcaGK6WRH1RaSXrn4WA-pGlpDH5t6aGbyIRH3aCxlhL1-CDfXIMswWiiFkiCztY8Ps1rY3jLr1Cwgou_uhoukZmhiggs6id0qnHhdIarxNIMrpBKTr1aq8Ev__pfVcHLboMxSVQgDGOOKgPHsaeo2dgLt-Wmy7pOREnrx4JSptjrd1kgYGsA5LYnumZ7VNvOEb9xvY2Q3C_vu_pSHIzWszKevlID7jAQTP0x7kHLsSaR-pJGHQgno3fcMhfPQy1ovFb5Ro3VvzVi1XDEQ7B7qmBngj6g3b-kTH2LabP4tSHiYTqHdrKMX0cRmRACtuqhzoeIdnI-JbvRh_mLCcZSgXeospBOb7l4_Mzr_-YtlYv4EdOmpmV0x09JJR3e0KvdtUu8uBhAwrCaSomqU5Yzvu6my-Xlqh_GCgC29DOqTGx57xJ9IXn5ZI6fZOS3ukbx_6qSFknXpFAhiAJpr4sEa_JGHOcPLt-9mRclM1JcYCiXt1Ahb87iCdURHgo51j53I1YiDydqznbCBNxILf37lCzY4pE4caQOfS6eWf631Q7LLhJABqh7-KAgKIK4szpZ03956pNDRLfsrqn2XLYwVONCTKgxffx5Xwkcs7ngwMx_CUOR-uAfOQF5nbdQSC6HveUQHyXAL1ye9w2Nmd5Aj0cTRglxDeOJIWe9LTjM47nGllk2c&YPDawJrb=4&CtmiSTDI=5015229&UTnErcJd=&bkcXVpJm=0,0&CHWSMenF=&oAWIdJUh=&FyrmIncV=1280,1024,1,1280,1024,0
200 OK 44 B URL GET HTTP/2 xadsmart.com/orjxdlygyn?yBuMEYbc=BQMSAAAAAAAACZUAAly4v8yicaAoz_dtkNpZNSMrwb3-TTocZEn53r-NikVSdGoyAzKKA2RB4comt_MIvWDxxM3WaqrkBB9Y-TU_vPporE_TMhwU2cxugaAztiAzY3Q1xqj9aLHUx5G-XO9cQkPopk7prQUWaI9Gg8koY06OjBUOAHl8JCKQCle1a-YvraHoRWvCoLKiSWT5ATVQFTGfV1Z8LU9cU7e_oam9sOuzGIaKwHG8IXLgERA8JEU9FeF2abxZl-YyiI6y4BWMp9scq1LQ7opESoVHDHPybxooDKzOJrYbpvAWLlg4wARZOClGO7ENtsrx7KDMI-82kkhEH-XjuDLiMFw3P9QvxisvkUWdBxmYxYQlsqBcaGK6WRH1RaSXrn4WA-pGlpDH5t6aGbyIRH3aCxlhL1-CDfXIMswWiiFkiCztY8Ps1rY3jLr1Cwgou_uhoukZmhiggs6id0qnHhdIarxNIMrpBKTr1aq8Ev__pfVcHLboMxSVQgDGOOKgPHsaeo2dgLt-Wmy7pOREnrx4JSptjrd1kgYGsA5LYnumZ7VNvOEb9xvY2Q3C_vu_pSHIzWszKevlID7jAQTP0x7kHLsSaR-pJGHQgno3fcMhfPQy1ovFb5Ro3VvzVi1XDEQ7B7qmBngj6g3b-kTH2LabP4tSHiYTqHdrKMX0cRmRACtuqhzoeIdnI-JbvRh_mLCcZSgXeospBOb7l4_Mzr_-YtlYv4EdOmpmV0x09JJR3e0KvdtUu8uBhAwrCaSomqU5Yzvu6my-Xlqh_GCgC29DOqTGx57xJ9IXn5ZI6fZOS3ukbx_6qSFknXpFAhiAJpr4sEa_JGHOcPLt-9mRclM1JcYCiXt1Ahb87iCdURHgo51j53I1YiDydqznbCBNxILf37lCzY4pE4caQOfS6eWf631Q7LLhJABqh7-KAgKIK4szpZ03956pNDRLfsrqn2XLYwVONCTKgxffx5Xwkcs7ngwMx_CUOR-uAfOQF5nbdQSC6HveUQHyXAL1ye9w2Nmd5Aj0cTRglxDeOJIWe9LTjM47nGllk2c&YPDawJrb=4&CtmiSTDI=5015229&UTnErcJd=&bkcXVpJm=0,0&CHWSMenF=&oAWIdJUh=&FyrmIncV=1280,1024,1,1280,1024,0
IP
Requested by https://dlhd.sx/stream/stream-81.php
Certificate IssuerSectigo Limited
Subjectxadsmart.com
FingerprintFC:E8:BA:57:31:46:6D:51:70:B5:42:35:6E:CF:97:6F:AF:38:C5:58
ValidityMon, 14 Aug 2023 00:00:00 GMT - Fri, 13 Sep 2024 23:59:59 GMT
File type ASCII text, with no line terminators
Hash d5f0a25e4d3522d56d48ce7bc3e518fb
86794caff58f7fee6e684c2ba7195f970a8d6f4c
9d781128a8ece413b003d5612b8398bf9340ef7f5b751d12bd125ba523d3ceb5
GET /orjxdlygyn?yBuMEYbc=BQMSAAAAAAAACZUAAly4v8yicaAoz_dtkNpZNSMrwb3-TTocZEn53r-NikVSdGoyAzKKA2RB4comt_MIvWDxxM3WaqrkBB9Y-TU_vPporE_TMhwU2cxugaAztiAzY3Q1xqj9aLHUx5G-XO9cQkPopk7prQUWaI9Gg8koY06OjBUOAHl8JCKQCle1a-YvraHoRWvCoLKiSWT5ATVQFTGfV1Z8LU9cU7e_oam9sOuzGIaKwHG8IXLgERA8JEU9FeF2abxZl-YyiI6y4BWMp9scq1LQ7opESoVHDHPybxooDKzOJrYbpvAWLlg4wARZOClGO7ENtsrx7KDMI-82kkhEH-XjuDLiMFw3P9QvxisvkUWdBxmYxYQlsqBcaGK6WRH1RaSXrn4WA-pGlpDH5t6aGbyIRH3aCxlhL1-CDfXIMswWiiFkiCztY8Ps1rY3jLr1Cwgou_uhoukZmhiggs6id0qnHhdIarxNIMrpBKTr1aq8Ev__pfVcHLboMxSVQgDGOOKgPHsaeo2dgLt-Wmy7pOREnrx4JSptjrd1kgYGsA5LYnumZ7VNvOEb9xvY2Q3C_vu_pSHIzWszKevlID7jAQTP0x7kHLsSaR-pJGHQgno3fcMhfPQy1ovFb5Ro3VvzVi1XDEQ7B7qmBngj6g3b-kTH2LabP4tSHiYTqHdrKMX0cRmRACtuqhzoeIdnI-JbvRh_mLCcZSgXeospBOb7l4_Mzr_-YtlYv4EdOmpmV0x09JJR3e0KvdtUu8uBhAwrCaSomqU5Yzvu6my-Xlqh_GCgC29DOqTGx57xJ9IXn5ZI6fZOS3ukbx_6qSFknXpFAhiAJpr4sEa_JGHOcPLt-9mRclM1JcYCiXt1Ahb87iCdURHgo51j53I1YiDydqznbCBNxILf37lCzY4pE4caQOfS6eWf631Q7LLhJABqh7-KAgKIK4szpZ03956pNDRLfsrqn2XLYwVONCTKgxffx5Xwkcs7ngwMx_CUOR-uAfOQF5nbdQSC6HveUQHyXAL1ye9w2Nmd5Aj0cTRglxDeOJIWe9LTjM47nGllk2c&YPDawJrb=4&CtmiSTDI=5015229&UTnErcJd=&bkcXVpJm=0,0&CHWSMenF=&oAWIdJUh=&FyrmIncV=1280,1024,1,1280,1024,0 HTTP/1.1
Host: xadsmart.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dlhd.sx/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
asf: 9
popads-ec: ASB
content-type: text/javascript;charset=UTF-8
content-length: 44
date: Thu, 07 Dec 2023 23:06:51 GMT
X-Firefox-Spdy: h2
cdn.creative-bars1.com/sb/ssp/vpn/classic-push/big1/css/animate.css
200 OK 21 kB URL GET HTTP/2 cdn.creative-bars1.com/sb/ssp/vpn/classic-push/big1/css/animate.css
IP
Requested by https://dlhd.sx/stream/stream-81.php
Certificate IssuerGoogle Trust Services LLC
Subjectcreative-bars1.com
Fingerprint2B:CC:32:FC:17:6F:25:69:2F:F4:A0:D9:DC:9C:C2:09:28:32:AB:34
ValiditySat, 21 Oct 2023 15:38:40 GMT - Fri, 19 Jan 2024 15:38:39 GMT
Hash e1d8acd5ee9d1a90ea09313cbd8f2b02
8a8327b115d1356715e63270d1ce6d46124c7b1a
3028c87fc798ac3741f02079034e6c23462afc0c5e6c8d321188ce3716c8472a
GET /sb/ssp/vpn/classic-push/big1/css/animate.css HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://dlhd.sx
DNT: 1
Connection: keep-alive
Referer: https://dlhd.sx/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 07 Dec 2023 23:06:51 GMT
content-type: text/css
last-modified: Mon, 21 Feb 2022 10:06:42 GMT
etag: W/"62136432-13591"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 13599
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=GRkqF2w0RLRIryi8w6qcauWAaK0xtdsjgmrUS5YPkK%2F9Bcj%2BiY1%2F27zeKDVO4UkvX%2BE2ouf%2FXysCaCSwfawbJBxhVFZNkTb1G%2F2u7ZuLMQd5bZ%2FrGQfD%2FJEUEm5MJz5rR5zPvTNQ2HI6"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 83206be8bd6871e4-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
cdn.creative-bars1.com/sb/ssp/vpn/classic-push/big1/css/style.css
200 OK 17 kB URL GET HTTP/2 cdn.creative-bars1.com/sb/ssp/vpn/classic-push/big1/css/style.css
IP
Requested by https://dlhd.sx/stream/stream-81.php
Certificate IssuerGoogle Trust Services LLC
Subjectcreative-bars1.com
Fingerprint2B:CC:32:FC:17:6F:25:69:2F:F4:A0:D9:DC:9C:C2:09:28:32:AB:34
ValiditySat, 21 Oct 2023 15:38:40 GMT - Fri, 19 Jan 2024 15:38:39 GMT
Hash aae84ccade4cab86c1afdf4c4532762a
b08de856858a730e980fb2a0ca2f0e1442c03d46
6e45c9c8dba52c75144c153e63a04d055f15e5f39897ab3f2413154c9cf2e91f
GET /sb/ssp/vpn/classic-push/big1/css/style.css HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://dlhd.sx
DNT: 1
Connection: keep-alive
Referer: https://dlhd.sx/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 07 Dec 2023 23:06:51 GMT
content-type: text/css
last-modified: Mon, 21 Feb 2022 10:59:09 GMT
etag: W/"6213707d-1048"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 1827702
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=P6C0SFOG9geYZOTFUAhm3u6uZbdVj9t3pfViLYSCVFHRCYM%2FSVk2a8vp6I4ZZ61fM7u3c6G%2FfxW82viAg0fzIqEy3MGdhShhF2SzlooF%2FUpvnDwcS5GH1NqTkEmAjRAiXOtuEV1HRC02"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 83206be8bd6b71e4-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
nukeluck.net/?rb=N8pCWH4y2GKFzTDs2InFaypfeGd2J7wP1ij4Go9EzyXc_TdwkQLijSeGoY3-MWjZKmzgFTG3V_f6FTmaT_SJMaBXoBaWFMXMzuKSADzqA881PhNfx5gJOdh7eijVfTD9RAbj32U2N3_KCUuQ5zRgpG4020qIr69YkoTAQ5MqHPLh2I9pMgpvL5ojIDRsvVP-GeaTFkGeueQm9BSOEqIPCq3MytjvOsNj&request_ab2=0&zoneid=6712285&js_build=iclick-v1.641.1-auto&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wih=981&wiw=1280&wfc=9&pl=https%3A%2F%2Fdlhd.sx%2Fstream%2Fstream-81.php&drf=&np=1&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false&btz=UTC&bto=0&wgl=&js_build=iclick-v1.641.1-auto&bs=b47162d0-0fff-4963-82ee-2ab0b18406bf&userId=a5bm402398ol507408936a6i8qnwx616&m=link
200 OK 1.8 kB URL GET HTTP/2 nukeluck.net/?rb=N8pCWH4y2GKFzTDs2InFaypfeGd2J7wP1ij4Go9EzyXc_TdwkQLijSeGoY3-MWjZKmzgFTG3V_f6FTmaT_SJMaBXoBaWFMXMzuKSADzqA881PhNfx5gJOdh7eijVfTD9RAbj32U2N3_KCUuQ5zRgpG4020qIr69YkoTAQ5MqHPLh2I9pMgpvL5ojIDRsvVP-GeaTFkGeueQm9BSOEqIPCq3MytjvOsNj&request_ab2=0&zoneid=6712285&js_build=iclick-v1.641.1-auto&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wih=981&wiw=1280&wfc=9&pl=https%3A%2F%2Fdlhd.sx%2Fstream%2Fstream-81.php&drf=&np=1&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false&btz=UTC&bto=0&wgl=&js_build=iclick-v1.641.1-auto&bs=b47162d0-0fff-4963-82ee-2ab0b18406bf&userId=a5bm402398ol507408936a6i8qnwx616&m=link
IP
Requested by https://dlhd.sx/stream/stream-81.php
Certificate IssuerLet's Encrypt
Subjectnukeluck.net
Fingerprint10:9E:8F:E3:6A:F8:48:21:94:4C:23:4D:4E:96:D5:07:46:36:8E:4F
ValiditySun, 08 Oct 2023 09:09:43 GMT - Sat, 06 Jan 2024 09:09:42 GMT
File type gzip compressed data, max speed, from Unix\012- data
Hash b41a4461c8feba8d885ad7dbb86b415f
5b902838af034ad640aa0cc36bff82e6efa54251
18ade80fa4cc4c0c375a33734031c58442e0257a3c7519384527d9bbeb7dd36e
GET /?rb=N8pCWH4y2GKFzTDs2InFaypfeGd2J7wP1ij4Go9EzyXc_TdwkQLijSeGoY3-MWjZKmzgFTG3V_f6FTmaT_SJMaBXoBaWFMXMzuKSADzqA881PhNfx5gJOdh7eijVfTD9RAbj32U2N3_KCUuQ5zRgpG4020qIr69YkoTAQ5MqHPLh2I9pMgpvL5ojIDRsvVP-GeaTFkGeueQm9BSOEqIPCq3MytjvOsNj&request_ab2=0&zoneid=6712285&js_build=iclick-v1.641.1-auto&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wih=981&wiw=1280&wfc=9&pl=https%3A%2F%2Fdlhd.sx%2Fstream%2Fstream-81.php&drf=&np=1&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false&btz=UTC&bto=0&wgl=&js_build=iclick-v1.641.1-auto&bs=b47162d0-0fff-4963-82ee-2ab0b18406bf&userId=a5bm402398ol507408936a6i8qnwx616&m=link HTTP/1.1
Host: nukeluck.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://dlhd.sx/
Origin: https://dlhd.sx
DNT: 1
Connection: keep-alive
Cookie: OAID=80baff3262de439e97515ec070f8ef0b; oaidts=1701990406
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 07 Dec 2023 23:06:51 GMT
content-type: application/json
x-trace-id: 08c678deacaddd232ab0468cd8d49269
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Wow64
access-control-allow-origin: https://dlhd.sx
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace
access-control-max-age: 86400
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
set-cookie: OAID=a5bm402398ol507408936a6i8qnwx616; expires=Fri, 06 Dec 2024 23:06:51 GMT; path=/; secure; SameSite=None
oaidts=1701990411; expires=Fri, 06 Dec 2024 23:06:51 GMT; path=/; secure; SameSite=None
syncedCookie=true; expires=Thu, 14 Dec 2023 23:06:51 GMT; path=/; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
content-encoding: gzip
X-Firefox-Spdy: h2
crawledlikely.com/pixel/sbs?c=1
200 OK 0 B URL GET HTTP/1.1 crawledlikely.com/pixel/sbs?c=1
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://dlhd.sx/stream/stream-81.php
Certificate IssuerLet's Encrypt
Subjectcrawledlikely.com
FingerprintF2:17:B8:C3:A7:3F:04:71:84:9A:C7:BB:25:B0:76:52:8D:CD:55:36
ValidityTue, 28 Nov 2023 10:58:09 GMT - Mon, 26 Feb 2024 10:58:08 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /pixel/sbs?c=1 HTTP/1.1
Host: crawledlikely.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dlhd.sx/
Cookie: u_pl=16066835; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Thu, 07 Dec 2023 23:06:52 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
fonts.googleapis.com/css?family=Roboto:300,400,700&display=swap
200 OK 1.1 kB URL GET HTTP/3 fonts.googleapis.com/css?family=Roboto:300,400,700&display=swap
IP
Requested by https://dlhd.sx/stream/stream-81.php
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
FingerprintCC:96:E0:52:E0:9B:EA:A9:A0:F8:88:9A:90:20:11:47:61:00:3C:42
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type gzip compressed data, max compression\012- data
Hash 911112e081a8888021b0f1c7db410bdb
39fe582fe989519b188344932961a5e156a0330c
cc73a2806b7da57d22253145c1be2b31cddbe9ee74b44ac522e22000c444caf5
GET /css?family=Roboto:300,400,700&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Thu, 07 Dec 2023 23:06:51 GMT
date: Thu, 07 Dec 2023 23:06:51 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
offerimage.com/www/images/59d005e99dabed8d7a753617b9dfe4d6.jpeg
200 OK 12 kB URL GET HTTP/2 offerimage.com/www/images/59d005e99dabed8d7a753617b9dfe4d6.jpeg
IP
Requested by https://dlhd.sx/stream/stream-81.php
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintDB:4D:42:F8:E2:4C:E3:E4:BB:22:D8:D1:F7:64:B5:9A:10:B6:25:E0
ValiditySun, 07 May 2023 00:00:00 GMT - Mon, 06 May 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 192x192, components 3\012- data
Hash 59d005e99dabed8d7a753617b9dfe4d6
5b4b05e20f8496be4f1f8d9e93adc1e1ccfbe383
d09719c31f8376e40f2a23e1e9833214527ec837e61e2e715752d58a1154bd31
GET /www/images/59d005e99dabed8d7a753617b9dfe4d6.jpeg HTTP/1.1
Host: offerimage.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 07 Dec 2023 23:06:56 GMT
content-type: image/jpeg
content-length: 11455
cache-control: max-age=86400
cf-bgj: h2pri
etag: "631844d9-2cbf"
expires: Fri, 08 Dec 2023 05:32:44 GMT
last-modified: Wed, 07 Sep 2022 07:14:33 GMT
timing-allow-origin: *
cf-cache-status: HIT
age: 63252
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 83206c089c282d74-ARN
X-Firefox-Spdy: h2
s50.chatango.com:8081/
101 Switching Protocols 0 B IP
Requested by https://st.chatango.com/h5/gz/r0925230558/id.html
Certificate IssuerSectigo Limited
Subject*.chatango.com
Fingerprint51:E2:E1:03:43:73:D8:C8:D4:4D:E0:E4:4A:BF:4F:DB:B5:CB:6E:A0
ValiditySat, 03 Jun 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: s50.chatango.com:8081
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://st.chatango.com
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: eECsY01VIhonRuxrKxL/0A==
DNT: 1
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Upgrade: websocket
Connection: Upgrade
Sec-WebSocket-Accept: 7504EyCZGfniaE0waMDELyJcDEg=
nukeluck.net/5/6712285/?oo=1&aab=1
200 OK 2.8 kB URL GET HTTP/2 nukeluck.net/5/6712285/?oo=1&aab=1
IP
Requested by https://dlhd.sx/stream/stream-81.php
Certificate IssuerLet's Encrypt
Subjectnukeluck.net
Fingerprint10:9E:8F:E3:6A:F8:48:21:94:4C:23:4D:4E:96:D5:07:46:36:8E:4F
ValiditySun, 08 Oct 2023 09:09:43 GMT - Sat, 06 Jan 2024 09:09:42 GMT
File type troff or preprocessor input, ASCII text, with very long lines (2995), with no line terminators
Hash cc9a3cea0b9cc08600e44478e20d6ebe
4f83eb2dde23b73419daaca00c9eff89ba9f35f4
f7ab4caf6c5b0c295d1c49e653a15dc57d05f9f7755a39b7cba91ef9bff2d801
GET /5/6712285/?oo=1&aab=1 HTTP/1.1
Host: nukeluck.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://dlhd.sx
DNT: 1
Connection: keep-alive
Referer: https://dlhd.sx/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Thu, 07 Dec 2023 23:06:46 GMT
content-type: application/json
x-trace-id: 558b8b7e8460285f257b4e4d3aa9745e
link: <https://my.rtmark.net>; rel="preconnect dns-prefetch",<https://propeller-tracking.com>; rel="preconnect dns-prefetch",<https://sr7pv7n5x.com>; rel="preconnect dns-prefetch"
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Wow64
access-control-allow-origin: https://dlhd.sx
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace
access-control-max-age: 86400
timing-allow-origin: *
set-cookie: OAID=80baff3262de439e97515ec070f8ef0b; expires=Fri, 06 Dec 2024 23:06:46 GMT; path=/; secure; SameSite=None
oaidts=1701990406; expires=Fri, 06 Dec 2024 23:06:46 GMT; path=/; secure; SameSite=None
syncedCookie=; expires=Tue, 10 Nov 2009 23:00:00 GMT
pragma: no-cache, no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT, Mon, 26 Jul 1997 05:00:00 GMT
content-encoding: gzip
X-Firefox-Spdy: h2
crawledlikely.com/impr.gif?sid=H4sIAAAAAAAC%2F1RSTWgkRRit3l1REA%2B6i%2BBBmOMuyKR%2FZjIzLrgY16zBmMT9IQdP1VXVkzLVXU1V%2F0zGS3BB9jiCB4%2BdN8kGdQmuR0GQiQgSEHY8SA4GxPtexD3LTAZGP%2Bj%2B3vteHd77qj7by8%2BIh5yebnyg%2B1IputCsu7WrmzLhurS1tbs1z62712ubMllsXK%2F1Jj9TvOm5zbp7rXZLsG294Lue63quV1uWRkS6tzBVIdNHHa%2FecesNv%2B41G%2BiZ%2F3ObO7DUAS%2FOyCuQfPzc1i%2BPIdkISfztTWG3M52%2B8W6cK5ppg4If3ku2E10miOcwMg6i5HB2GtqOCfnyAnRyOEsAXexPEiCUY%2BL87iFMDmc2ERYH505DBZEg5C%2BiLEYQagRJR2D6PiR%2FQgDGsbaOJH64pk1Jd85VOlHH5NKzvyHLMbn0xxUk8dGSkr3aHa3yTOrEohdVkL0RZHeEND9G1ncgy2Ow7FNI%2FitZeLaKJN5ft0pD8mqaXsoRZDSCEgNQ6yCffNJBHjnIUwcxP63RZidy3VYURkHQbjDGgoCxZnuRN3nQaEcucjaxN0CWDsDUAMzsIjW72JYDmPxH2K0Kljuw2Zg4H%2B6i4BVKQVBagpISlJKgzAjKojrgyvq2esiVzUNv1v1ZD6qhzrp79EBnXZEQUDPYS8%2FIy9Pd%2FHPtMrbFaW3Rjxp%2BM%2FQC5vudBqeLftt3mzTo%2BEEr7AQBrKwg7YVp3L4ck1d%2FfgGpfPLWECE9hlXHYPIyaP46aDls%2BS7o1rDRdtFPjjjlfEfJQmzxuu2B6wppdgnZjrOnzshrUx%2Fvff8RBDu58UX%2Fz1tHVz4BMxVSU%2BFj%2BRNBVz0Y3tYl2b%2BtS0ser6eZjGWfTu7vTkYzcfHr98VOqQ1fuWkHX73NJsIEProrbLZKEy6TriXfLEnOhVnWhgnyw4rdFOFGbreWcpPk6erGO8srcWqEtVInI1A5JuTpd2ByTF56aqdv8%2Bq9vyDNCCavEOcnZFaQ%2Bhgs3YVN5zOrCYya8zB1UObV0PjhfKgkgRJzTsMK9j88nOM9%2BwBd44Bm95HEFQpToVAVqBrA5heHWWpObvwWTAuhcoahMs5%2BqIz6%2FHy5Vp7Wml5DtMN2i3EeCsa9lh%2B0A9f1OW%2B0OsLrILNjYTae%2FxcAAP%2F%2FAQAA%2F%2F9hx05tcwQAAA%3D%3D
200 OK 0 B URL GET HTTP/1.1 crawledlikely.com/impr.gif?sid=H4sIAAAAAAAC%2F1RSTWgkRRit3l1REA%2B6i%2BBBmOMuyKR%2FZjIzLrgY16zBmMT9IQdP1VXVkzLVXU1V%2F0zGS3BB9jiCB4%2BdN8kGdQmuR0GQiQgSEHY8SA4GxPtexD3LTAZGP%2Bj%2B3vteHd77qj7by8%2BIh5yebnyg%2B1IputCsu7WrmzLhurS1tbs1z62712ubMllsXK%2F1Jj9TvOm5zbp7rXZLsG294Lue63quV1uWRkS6tzBVIdNHHa%2FecesNv%2B41G%2BiZ%2F3ObO7DUAS%2FOyCuQfPzc1i%2BPIdkISfztTWG3M52%2B8W6cK5ppg4If3ku2E10miOcwMg6i5HB2GtqOCfnyAnRyOEsAXexPEiCUY%2BL87iFMDmc2ERYH505DBZEg5C%2BiLEYQagRJR2D6PiR%2FQgDGsbaOJH64pk1Jd85VOlHH5NKzvyHLMbn0xxUk8dGSkr3aHa3yTOrEohdVkL0RZHeEND9G1ncgy2Ow7FNI%2FitZeLaKJN5ft0pD8mqaXsoRZDSCEgNQ6yCffNJBHjnIUwcxP63RZidy3VYURkHQbjDGgoCxZnuRN3nQaEcucjaxN0CWDsDUAMzsIjW72JYDmPxH2K0Kljuw2Zg4H%2B6i4BVKQVBagpISlJKgzAjKojrgyvq2esiVzUNv1v1ZD6qhzrp79EBnXZEQUDPYS8%2FIy9Pd%2FHPtMrbFaW3Rjxp%2BM%2FQC5vudBqeLftt3mzTo%2BEEr7AQBrKwg7YVp3L4ck1d%2FfgGpfPLWECE9hlXHYPIyaP46aDls%2BS7o1rDRdtFPjjjlfEfJQmzxuu2B6wppdgnZjrOnzshrUx%2Fvff8RBDu58UX%2Fz1tHVz4BMxVSU%2BFj%2BRNBVz0Y3tYl2b%2BtS0ser6eZjGWfTu7vTkYzcfHr98VOqQ1fuWkHX73NJsIEProrbLZKEy6TriXfLEnOhVnWhgnyw4rdFOFGbreWcpPk6erGO8srcWqEtVInI1A5JuTpd2ByTF56aqdv8%2Bq9vyDNCCavEOcnZFaQ%2Bhgs3YVN5zOrCYya8zB1UObV0PjhfKgkgRJzTsMK9j88nOM9%2BwBd44Bm95HEFQpToVAVqBrA5heHWWpObvwWTAuhcoahMs5%2BqIz6%2FHy5Vp7Wml5DtMN2i3EeCsa9lh%2B0A9f1OW%2B0OsLrILNjYTae%2FxcAAP%2F%2FAQAA%2F%2F9hx05tcwQAAA%3D%3D
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://dlhd.sx/stream/stream-81.php
Certificate IssuerLet's Encrypt
Subjectcrawledlikely.com
FingerprintF2:17:B8:C3:A7:3F:04:71:84:9A:C7:BB:25:B0:76:52:8D:CD:55:36
ValidityTue, 28 Nov 2023 10:58:09 GMT - Mon, 26 Feb 2024 10:58:08 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /impr.gif?sid=H4sIAAAAAAAC%2F1RSTWgkRRit3l1REA%2B6i%2BBBmOMuyKR%2FZjIzLrgY16zBmMT9IQdP1VXVkzLVXU1V%2F0zGS3BB9jiCB4%2BdN8kGdQmuR0GQiQgSEHY8SA4GxPtexD3LTAZGP%2Bj%2B3vteHd77qj7by8%2BIh5yebnyg%2B1IputCsu7WrmzLhurS1tbs1z62712ubMllsXK%2F1Jj9TvOm5zbp7rXZLsG294Lue63quV1uWRkS6tzBVIdNHHa%2FecesNv%2B41G%2BiZ%2F3ObO7DUAS%2FOyCuQfPzc1i%2BPIdkISfztTWG3M52%2B8W6cK5ppg4If3ku2E10miOcwMg6i5HB2GtqOCfnyAnRyOEsAXexPEiCUY%2BL87iFMDmc2ERYH505DBZEg5C%2BiLEYQagRJR2D6PiR%2FQgDGsbaOJH64pk1Jd85VOlHH5NKzvyHLMbn0xxUk8dGSkr3aHa3yTOrEohdVkL0RZHeEND9G1ncgy2Ow7FNI%2FitZeLaKJN5ft0pD8mqaXsoRZDSCEgNQ6yCffNJBHjnIUwcxP63RZidy3VYURkHQbjDGgoCxZnuRN3nQaEcucjaxN0CWDsDUAMzsIjW72JYDmPxH2K0Kljuw2Zg4H%2B6i4BVKQVBagpISlJKgzAjKojrgyvq2esiVzUNv1v1ZD6qhzrp79EBnXZEQUDPYS8%2FIy9Pd%2FHPtMrbFaW3Rjxp%2BM%2FQC5vudBqeLftt3mzTo%2BEEr7AQBrKwg7YVp3L4ck1d%2FfgGpfPLWECE9hlXHYPIyaP46aDls%2BS7o1rDRdtFPjjjlfEfJQmzxuu2B6wppdgnZjrOnzshrUx%2Fvff8RBDu58UX%2Fz1tHVz4BMxVSU%2BFj%2BRNBVz0Y3tYl2b%2BtS0ser6eZjGWfTu7vTkYzcfHr98VOqQ1fuWkHX73NJsIEProrbLZKEy6TriXfLEnOhVnWhgnyw4rdFOFGbreWcpPk6erGO8srcWqEtVInI1A5JuTpd2ByTF56aqdv8%2Bq9vyDNCCavEOcnZFaQ%2Bhgs3YVN5zOrCYya8zB1UObV0PjhfKgkgRJzTsMK9j88nOM9%2BwBd44Bm95HEFQpToVAVqBrA5heHWWpObvwWTAuhcoahMs5%2BqIz6%2FHy5Vp7Wml5DtMN2i3EeCsa9lh%2B0A9f1OW%2B0OsLrILNjYTae%2FxcAAP%2F%2FAQAA%2F%2F9hx05tcwQAAA%3D%3D HTTP/1.1
Host: crawledlikely.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dlhd.sx/
Cookie: u_pl=16066835; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Thu, 07 Dec 2023 23:06:52 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 15db5bc313043f4fe6aac2729762bccc
Strict-Transport-Security: max-age=0; includeSubdomains
weblivehdplay.ru/clappr.min.js
200 OK 525 kB URL GET HTTP/3 weblivehdplay.ru/clappr.min.js
IP
Requested by https://weblivehdplay.ru/premiumtv/daddylivehd.php?id=81
Certificate IssuerLet's Encrypt
Subjectweblivehdplay.ru
Fingerprint75:CC:BB:75:29:0C:A0:84:3E:66:42:03:4A:12:61:9E:BA:F3:75:8A
ValiditySun, 03 Dec 2023 11:46:52 GMT - Sat, 02 Mar 2024 11:46:51 GMT
Size 525 kB (525081 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /clappr.min.js HTTP/1.1
Host: weblivehdplay.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://weblivehdplay.ru/premiumtv/daddylivehd.php?id=81
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 07 Dec 2023 23:06:46 GMT
content-type: application/javascript
last-modified: Mon, 27 Nov 2023 16:16:06 GMT
etag: W/"6564c0c6-80319"
cache-control: max-age=14400
cf-cache-status: HIT
age: 895
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=5aKT3VI3ujLY7%2F8Ohj82qXBEQlT03hU4yKt3Y88NXlvOI8E1Oikf%2B9JA%2FRL52ZZuWbhB%2B4ORknR14Az3rM6lVUErR97Bc%2BSyWgEkxJJ5SGHn9qJ6%2BOqho%2FKeqo8HVjJMu%2BAq"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 83206bc78f8a5688-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
i.ibb.co/HTvK8Lh/nfl2023.jpg
200 OK 115 kB URL GET HTTP/2 i.ibb.co/HTvK8Lh/nfl2023.jpg
IP
Requested by https://dlhd.sx/stream/stream-81.php
Certificate IssuerLet's Encrypt
Subjectibb.co
FingerprintCC:72:96:95:90:7F:15:8E:AC:C5:40:3A:D2:6F:83:A3:DF:5E:72:56
ValidityMon, 09 Oct 2023 14:39:49 GMT - Sun, 07 Jan 2024 14:39:48 GMT
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=5, orientation=upper-left, xresolution=74, yresolution=82, resolutionunit=2], progressive, precision 8, 640x360, components 3\012- data
Size 115 kB (115005 bytes)
Hash d47a7766de138c48205d4c61152f8b19
47b27968886dc7f4fa358c6141d21ec79b90016d
1ad2fe7e2d1ebd1a45bd25b1e3c66aa3ff47ea4456314fe173c25d54c5b6f54e
GET /HTvK8Lh/nfl2023.jpg HTTP/1.1
Host: i.ibb.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dlhd.sx/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Thu, 07 Dec 2023 23:06:44 GMT
content-type: image/jpeg
content-length: 115005
last-modified: Sat, 09 Sep 2023 14:42:15 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS
accept-ranges: bytes
X-Firefox-Spdy: h2
friendshipmale.com/sfp.js
200 OK 86 kB URL GET HTTP/2 friendshipmale.com/sfp.js
IP
Requested by https://dlhd.sx/stream/stream-81.php
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint08:6F:D8:CB:9E:0C:0A:98:2E:C5:CD:21:8E:0B:76:2B:50:6F:B6:37
ValiditySat, 18 Feb 2023 00:00:00 GMT - Sat, 17 Feb 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sfp.js HTTP/1.1
Host: friendshipmale.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dlhd.sx/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 07 Dec 2023 23:06:45 GMT
content-type: application/javascript; charset=utf-8
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
access-control-allow-origin: *
expires: Thu, 01 Jan 1970 00:00:01 GMT
cache-control: max-age=14400
x-request-id: b56f255ce5a6ba2dece428d1ec682f94
strict-transport-security: max-age=0; includeSubdomains
cf-cache-status: EXPIRED
last-modified: Thu, 07 Dec 2023 23:06:45 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=k06MAWbcUwMjFRdnnTcTAeSIultxK%2Ftlrg3uQCTHZN3M396rSalMDTxS0h3yb3kRl4HeS2Zj4ClLUH%2Bj0hP2ChUFnVQXxF%2FBkMkJXypPlCrT%2FAYZcYwEm3eXtzY0Ml9nceGdIds%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 83206bc38ecd376f-HEL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
weblivehdplay.ru/blast.js
200 OK 78 kB URL GET HTTP/3 weblivehdplay.ru/blast.js
IP
Requested by https://weblivehdplay.ru/premiumtv/daddylivehd.php?id=81
Certificate IssuerLet's Encrypt
Subjectweblivehdplay.ru
Fingerprint75:CC:BB:75:29:0C:A0:84:3E:66:42:03:4A:12:61:9E:BA:F3:75:8A
ValiditySun, 03 Dec 2023 11:46:52 GMT - Sat, 02 Mar 2024 11:46:51 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Hash 091faec928970e76d37a3601c19fcf8a
6441e8eebe90eb8d4a40e7c25440ff99caba3520
eb06375118b1eb73f43b8f1851472008f84999a1b27359c075bf5da6feef9a12
GET /blast.js HTTP/1.1
Host: weblivehdplay.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://weblivehdplay.ru/premiumtv/daddylivehd.php?id=81
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 07 Dec 2023 23:06:46 GMT
content-type: application/javascript
last-modified: Mon, 27 Nov 2023 16:16:01 GMT
etag: W/"6564c0c1-13040"
cache-control: max-age=14400
cf-cache-status: HIT
age: 895
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=WdVBLHiqNHHSfUjtbXkJ5O1rzND5YUelZcIvteKF2qP8xDdprnabwntdg%2BNW6eKoEx%2FSFPONV%2Bota4BUC5%2F3X4zeH6npaWTESPhx%2BaUvMzUpV1t98IczI01uhG1E3AyHqG%2B%2B"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 83206bc79f8d5688-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
www.xadsmart.com/dipaddr.min.css
200 OK 35 kB URL GET HTTP/2 www.xadsmart.com/dipaddr.min.css
IP
ASN #60068 Datacamp Limited
Requested by https://dlhd.sx/stream/stream-81.php
Certificate IssuerLet's Encrypt
Subject1376341044.rsc.cdn77.org
Fingerprint9E:00:8B:B5:0E:76:AD:0B:E5:63:88:89:93:D0:07:5F:40:2B:28:81
ValidityMon, 02 Oct 2023 18:57:36 GMT - Sun, 31 Dec 2023 18:57:35 GMT
File type HTML document, ASCII text, with very long lines (1568)
Hash fb5bcccdfb8a8916f66979e6a1995e4b
760e8b5f37adf3631b43dba5728900cfe757d69f
cb95ddb775bbe357afa90af7398173eb47848cc79da6d0c285d767de75b1abd0
GET /dipaddr.min.css HTTP/1.1
Host: www.xadsmart.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://dlhd.sx
DNT: 1
Connection: keep-alive
Referer: https://dlhd.sx/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 07 Dec 2023 23:06:45 GMT
content-type: application/x-javascript
vary: Accept-Encoding, Origin
expires: Wed, 13 Dec 2023 23:11:57 GMT
access-control-allow-origin: https://dlhd.sx
link: <https://xadsmart.com/>;rel=preconnect,<https://c.adsco.re/>;rel=preconnect,<https://adsco.re/>;rel=preconnect
cache-control: public, max-age=604800
x-77-nzt: EwwBuUwJDQH3FwEAAAwBuUwKCQH3N04BAAwB1GY4mQH3+gAAAA
x-77-nzt-ray: c0a4cc28ce4c900905507265be95df2d
x-accel-expires: @1702509117
x-accel-date: 1701990126
x-77-cache: HIT
x-77-age: 86088
content-encoding: gzip
server: CDN77-Turbo
x-cache-lb: HIT, HIT
x-age-lb: 85559, 279
x-77-pop: stockholmSE
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
200 OK 16 kB URL GET HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
IP
Requested by https://dlhd.sx/stream/stream-81.php
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 15860, version 1.0\012- data
Hash e9f5aaf547f165386cd313b995dddd8e
acdef5603c2387b0e5bffd744b679a24a8bc1968
f5aebdfea35d1e7656ef4acc5db1f243209755ae3300943ef8fc6280f363c860
GET /s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://dlhd.sx
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15860
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 07 Dec 2023 15:46:25 GMT
expires: Fri, 06 Dec 2024 15:46:25 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 11 May 2022 19:24:42 GMT
content-type: font/woff2
age: 26427
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
i.imgur.com/ZP1w7Bi.jpg
200 OK 46 kB IP
Requested by https://dlhd.sx/stream/stream-81.php
Certificate IssuerSectigo Limited
Subject*.imgur.com
FingerprintD6:4D:45:03:6D:38:F8:FD:EA:AF:E5:92:B3:4D:85:A5:6B:AF:5C:EC
ValidityMon, 13 Mar 2023 00:00:00 GMT - Tue, 12 Mar 2024 23:59:59 GMT
File type JPEG image data, baseline, precision 8, 387x258, components 3\012- data
Hash f5b3b166b24076584f264613ba564896
2de373314aafbfc590a857114c273e99c48d0769
904837b2bccb1d8ff2bbec8aa12723630931397ba4f1830b276fe29ab7df9b07
GET /ZP1w7Bi.jpg HTTP/1.1
Host: i.imgur.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dlhd.sx/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/jpeg
last-modified: Mon, 31 Jul 2023 21:31:41 GMT
etag: "f5b3b166b24076584f264613ba564896"
x-amz-server-side-encryption: AES256
x-amz-cf-pop: IAD89-P1
x-amz-cf-id: LoUbQnHAaLF2m_9eWekHMGmxqxhKhAibTRG9hID_I1I6V-BsPWShiA==
cache-control: public, max-age=31536000
accept-ranges: bytes
date: Thu, 07 Dec 2023 23:06:44 GMT
age: 3770251
x-served-by: cache-iad-kcgs7200144-IAD, cache-bma1672-BMA
x-cache: Miss from cloudfront, HIT, HIT
x-cache-hits: 15203, 2
x-timer: S1701990405.671394,VS0,VE0
strict-transport-security: max-age=300
access-control-allow-methods: GET, OPTIONS
access-control-allow-origin: *
server: cat factory 1.0
x-content-type-options: nosniff
content-length: 46208
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Lato:400,700,900,300
200 OK 2.9 kB URL GET HTTP/2 fonts.googleapis.com/css?family=Lato:400,700,900,300
IP
Requested by https://dlhd.sx/stream/stream-81.php
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
FingerprintCC:96:E0:52:E0:9B:EA:A9:A0:F8:88:9A:90:20:11:47:61:00:3C:42
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type ASCII text, with very long lines (2956), with no line terminators
Hash 6c66969d7f293b59915db8d63cd153a8
419b2c35783cbcc4872b2cc731202f9513bff86d
6980666e606df30f7b9598bf657f928f3a93da9e9f316e8e431cbf0d01ec2d4a
GET /css?family=Lato:400,700,900,300 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dlhd.sx/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Thu, 07 Dec 2023 23:06:45 GMT
date: Thu, 07 Dec 2023 23:06:45 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
st.chatango.com/js/gz/emb.js
200 OK 70 kB URL GET HTTP/1.1 st.chatango.com/js/gz/emb.js
IP
Requested by https://dlhd.sx/stream/stream-81.php
Certificate IssuerSectigo Limited
Subject*.chatango.com
Fingerprint51:E2:E1:03:43:73:D8:C8:D4:4D:E0:E4:4A:BF:4F:DB:B5:CB:6E:A0
ValiditySat, 03 Jun 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT
File type ASCII text, with very long lines (1651)
Hash c1a289685475db88938201b4a2735cb6
b3e9e7e9104c3e76ea85fe3d20c5978d038355f0
509a9e10fd20643e27986373ca0342aa25d85a7c60772c80fe0a2d73593c877e
GET /js/gz/emb.js HTTP/1.1
Host: st.chatango.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dlhd.sx/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 07 Dec 2023 23:06:45 GMT
Content-Type: application/x-javascript
Content-Length: 23805
Last-Modified: Mon, 25 Sep 2023 13:02:22 GMT
Connection: keep-alive
Expires: Thu, 07 Dec 2023 23:06:45 GMT
Cache-Control: max-age=0
Content-Encoding: gzip
Accept-Ranges: bytes
c.adsco.re/
200 OK 80 kB IP
Requested by https://dlhd.sx/stream/stream-81.php
Certificate IssuerSectigo Limited
Subject*.adsco.re
Fingerprint40:64:05:9C:99:0A:1E:9F:A7:49:61:8E:86:4C:4B:06:9C:73:83:73
ValiditySat, 23 Sep 2023 00:00:00 GMT - Sun, 29 Sep 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (881)
Hash 41b38d766e8df9f16d99ee5656550613
4b040e742fafccbf1f9afa059258568e320fd9d8
65802711d89571b28699f3399d58f642a270d1e2bc5e155a8a0c73c94c66ec3a
GET / HTTP/1.1
Host: c.adsco.re
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dlhd.sx/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 07 Dec 2023 23:06:47 GMT
content-type: text/html
cache-control: public, max-age=2678400
accept-ch: Sec-CH-UA, Sec-CH-UA-Mobile, Sec-CH-UA-Full-Version, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Arch, Sec-CH-UA-Model, Device-Memory, Downlink, ECT, RTT, Width, Viewport-Width, DPR
permissions-policy: ch-ua=(self "https://adsco.re"),ch-ua-mobile=(self "https://adsco.re"),ch-ua-full-version=(self "https://adsco.re"),ch-ua-platform=(self "https://adsco.re"),ch-ua-platform-version=(self "https://adsco.re"),ch-ua-arch=(self "https://adsco.re"),ch-ua-model=(self "https://adsco.re"),ch-device-memory=(self "https://adsco.re"),ch-downlink=(self "https://adsco.re"),ch-ect=(self "https://adsco.re"),ch-rtt=(self "https://adsco.re"),ch-width=(self "https://adsco.re"),ch-viewport-width=(self "https://adsco.re"),ch-dpr=(self "https://adsco.re")
link: <//6.adsco.re/>;rel=prefetch;crossorigin;as=fetch,<//4.adsco.re/>;rel=prefetch;crossorigin;as=fetch,<//adsco.re/>;rel=preconnect
expires: Sun, 07 Jan 2024 23:06:47 GMT
etag: W/"QbONdm6N+fFtme5WVlUGEw=="
cf-cache-status: HIT
age: 631485
vary: Accept-Encoding
server: cloudflare
cf-ray: 83206bcc5c00712b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
acceptable.a-ads.com/2251272
200 OK 25 kB URL GET HTTP/2 acceptable.a-ads.com/2251272
IP
ASN #24940 Hetzner Online GmbH
Requested by https://dlhd.sx/stream/stream-81.php
Certificate IssuerSectigo Limited
Subject*.a-ads.com
Fingerprint34:68:C2:05:E5:2A:4E:C3:F9:FC:94:69:D3:A6:BE:F2:21:A2:DE:AE
ValidityWed, 21 Dec 2022 00:00:00 GMT - Sun, 21 Jan 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (6851)
Hash e9f6097157e8099c1a836c377e4f2794
d9803edc9a0240b7ba918258d80f95cf41e3b4b3
24ba08fb6089fb3039735a5dde0a15aadf600dc7ed197521d0cede178cfd9e5d
GET /2251272 HTTP/1.1
Host: acceptable.a-ads.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dlhd.sx/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Thu, 07 Dec 2023 23:06:46 GMT
content-type: text/html;charset=utf-8
vary: Accept-Encoding, Accept-Encoding
status: 200 OK
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-powered-by: Phusion Passenger(R)
x-original-referer: https://dlhd.sx/
x-robots-tag: noindex, nofollow, nosnippet, noarchive
content-encoding: gzip
X-Firefox-Spdy: h2
c.adsco.re/
0 B IP
Requested by https://dlhd.sx/stream/stream-81.php
Certificate IssuerSectigo Limited
Subject*.adsco.re
Fingerprint40:64:05:9C:99:0A:1E:9F:A7:49:61:8E:86:4C:4B:06:9C:73:83:73
ValiditySat, 23 Sep 2023 00:00:00 GMT - Sun, 29 Sep 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: c.adsco.re
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dlhd.sx/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 07 Dec 2023 23:06:46 GMT
content-type: text/html
cache-control: public, max-age=2678400
accept-ch: Sec-CH-UA, Sec-CH-UA-Mobile, Sec-CH-UA-Full-Version, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Arch, Sec-CH-UA-Model, Device-Memory, Downlink, ECT, RTT, Width, Viewport-Width, DPR
permissions-policy: ch-ua=(self "https://adsco.re"),ch-ua-mobile=(self "https://adsco.re"),ch-ua-full-version=(self "https://adsco.re"),ch-ua-platform=(self "https://adsco.re"),ch-ua-platform-version=(self "https://adsco.re"),ch-ua-arch=(self "https://adsco.re"),ch-ua-model=(self "https://adsco.re"),ch-device-memory=(self "https://adsco.re"),ch-downlink=(self "https://adsco.re"),ch-ect=(self "https://adsco.re"),ch-rtt=(self "https://adsco.re"),ch-width=(self "https://adsco.re"),ch-viewport-width=(self "https://adsco.re"),ch-dpr=(self "https://adsco.re")
link: <//6.adsco.re/>;rel=prefetch;crossorigin;as=fetch,<//4.adsco.re/>;rel=prefetch;crossorigin;as=fetch,<//adsco.re/>;rel=preconnect
expires: Sun, 07 Jan 2024 23:06:46 GMT
etag: W/"QbONdm6N+fFtme5WVlUGEw=="
cf-cache-status: HIT
age: 631484
vary: Accept-Encoding
server: cloudflare
cf-ray: 83206bc93bcd0b65-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
200 OK 16 kB URL GET HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
Requested by https://dlhd.sx/stream/stream-81.php
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 15744, version 1.0\012- data
Hash 15d9f621c3bd1599f0169dcf0bd5e63e
7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52
f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://dlhd.sx
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 07 Dec 2023 04:57:34 GMT
expires: Fri, 06 Dec 2024 04:57:34 GMT
cache-control: public, max-age=31536000
age: 65358
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
v12q7gfwpm9o.s4.adsco.re/
200 OK 0 B URL POST HTTP/2 v12q7gfwpm9o.s4.adsco.re/
IP
Requested by https://dlhd.sx/stream/stream-81.php
Certificate IssuerLet's Encrypt
Subject*.s4.adsco.re
Fingerprint64:CA:F8:23:A5:E5:7F:B7:B7:9E:AD:14:92:A0:E1:5C:12:BB:22:C1
ValidityTue, 03 Oct 2023 12:32:24 GMT - Mon, 01 Jan 2024 12:32:23 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST / HTTP/1.1
Host: v12q7gfwpm9o.s4.adsco.re
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 0
Origin: https://dlhd.sx
DNT: 1
Connection: keep-alive
Referer: https://dlhd.sx/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 07 Dec 2023 23:06:48 GMT
content-type: text/html
content-length: 0
last-modified: Tue, 03 Oct 2023 13:29:59 GMT
etag: "651c1757-0"
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
access-control-expose-headers: Content-Length,Content-Range
accept-ranges: bytes
X-Firefox-Spdy: h2
v12q7gfwpm9o.l4.adsco.re/
200 OK 0 B URL POST HTTP/2 v12q7gfwpm9o.l4.adsco.re/
IP
Requested by https://dlhd.sx/stream/stream-81.php
Certificate IssuerLet's Encrypt
Subject*.l4.adsco.re
Fingerprint30:24:2D:06:44:32:CD:4B:46:E0:81:9A:CF:B1:F6:9B:D2:4F:F3:6F
ValidityMon, 25 Sep 2023 16:35:45 GMT - Sun, 24 Dec 2023 16:35:44 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST / HTTP/1.1
Host: v12q7gfwpm9o.l4.adsco.re
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 0
Origin: https://dlhd.sx
DNT: 1
Connection: keep-alive
Referer: https://dlhd.sx/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 07 Dec 2023 23:06:47 GMT
content-type: text/html
content-length: 0
last-modified: Fri, 02 Jun 2023 14:03:32 GMT
etag: "6479f6b4-0"
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
access-control-expose-headers: Content-Length,Content-Range
accept-ranges: bytes
X-Firefox-Spdy: h2
cdn.barscreative1.com/sb/au/48/48/eb/4848ebd6f7295875a5d388ec2488aba3/1648542421.html
200 OK 1.5 kB URL GET HTTP/2 cdn.barscreative1.com/sb/au/48/48/eb/4848ebd6f7295875a5d388ec2488aba3/1648542421.html
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://dlhd.sx/stream/stream-81.php
Certificate IssuerLet's Encrypt
Subjectcdn.barscreative1.com
Fingerprint55:06:B7:F1:EF:E9:55:FB:7C:8C:4F:5D:DB:05:C9:15:19:90:9B:2F
ValiditySat, 11 Nov 2023 03:00:51 GMT - Fri, 09 Feb 2024 03:00:50 GMT
File type HTML document text\012- HTML document, ASCII text, with very long lines (1639), with no line terminators
Hash 97b357c624104a8e915d01424dfe16ce
6bd7fcedfb7986b149601b1bc840f525b67a8f06
8d010e7163298acf3671bb429a2e0b1d69033a5adc314fa4bddebf74b9775e6e
GET /sb/au/48/48/eb/4848ebd6f7295875a5d388ec2488aba3/1648542421.html HTTP/1.1
Host: cdn.barscreative1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://dlhd.sx
DNT: 1
Connection: keep-alive
Referer: https://dlhd.sx/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 07 Dec 2023 23:06:51 GMT
content-type: text/html; charset=utf-8
server: nginx/1.21.6
last-modified: Tue, 29 Mar 2022 08:27:10 GMT
etag: W/"6242c2de-602"
cache-control: max-age=3600
access-control-allow-origin: *
access-control-expose-headers: Date
content-encoding: gzip
expires: Fri, 08 Dec 2023 00:06:51 GMT
x-proxy-cache: HIT
X-Firefox-Spdy: h2
ad.a-ads.com/2251273?size=970x90
200 OK 12 kB URL GET HTTP/2 ad.a-ads.com/2251273?size=970x90
IP
ASN #24940 Hetzner Online GmbH
Requested by https://dlhd.sx/stream/stream-81.php
Certificate IssuerSectigo Limited
Subject*.a-ads.com
Fingerprint34:68:C2:05:E5:2A:4E:C3:F9:FC:94:69:D3:A6:BE:F2:21:A2:DE:AE
ValidityWed, 21 Dec 2022 00:00:00 GMT - Sun, 21 Jan 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (11011)
Hash cc6eb5e79a2a95a684f541aea90b906f
85d8cfc5d6de4d4d3f67966b7368a9829e4abb47
bf374bed085f95fdf20cdfdfe399131422d68ccae053c5776d5fd67e434c8d37
GET /2251273?size=970x90 HTTP/1.1
Host: ad.a-ads.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dlhd.sx/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Thu, 07 Dec 2023 23:06:46 GMT
content-type: text/html;charset=utf-8
vary: Accept-Encoding, Accept-Encoding
status: 200 OK
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-powered-by: Phusion Passenger(R)
x-original-referer: https://dlhd.sx/
x-robots-tag: noindex, nofollow, nosnippet, noarchive
content-encoding: gzip
X-Firefox-Spdy: h2
ust.chatango.com/profileimg/b/s/bschween2023/thumb.jpg
200 OK 640 B URL GET HTTP/1.1 ust.chatango.com/profileimg/b/s/bschween2023/thumb.jpg
IP
Requested by https://st.chatango.com/h5/gz/r0925230558/id.html
Certificate IssuerSectigo Limited
Subject*.chatango.com
Fingerprint51:E2:E1:03:43:73:D8:C8:D4:4D:E0:E4:4A:BF:4F:DB:B5:CB:6E:A0
ValiditySat, 03 Jun 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 50x50, components 3\012- data
Hash 81a620d0a6b17b31632ca56ac588ecbb
c93fc7d3b7c2ab12a68edf54be4b71753cb8f5e8
fcfa793d204b4144bf54f59bd9c5c720843af02dd02999d1653c8fafc0ebd8ea
GET /profileimg/b/s/bschween2023/thumb.jpg HTTP/1.1
Host: ust.chatango.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://st.chatango.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 07 Dec 2023 23:06:50 GMT
Content-Type: image/jpeg
Content-Length: 640
Last-Modified: Tue, 09 Jun 2009 03:36:06 GMT
Connection: keep-alive
ETag: "4a2dd8a6-280"
Expires: Thu, 07 Dec 2023 23:06:50 GMT
Cache-Control: max-age=0
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
weblivehdplay.ru/premiumtv/daddylivehd.php?id=81
200 OK 89 kB URL GET HTTP/2 weblivehdplay.ru/premiumtv/daddylivehd.php?id=81
IP
Requested by https://dlhd.sx/stream/stream-81.php
Certificate IssuerLet's Encrypt
Subjectweblivehdplay.ru
Fingerprint75:CC:BB:75:29:0C:A0:84:3E:66:42:03:4A:12:61:9E:BA:F3:75:8A
ValiditySun, 03 Dec 2023 11:46:52 GMT - Sat, 02 Mar 2024 11:46:51 GMT
File type HTML document text\012- exported SGML document, ASCII text, with very long lines (64709), with CRLF line terminators
Hash 44dd8bde97aa74f05f6ad82db27c2bbe
85b06f98b21af0cb4418d7b0b74803570afb3a83
0d8aa79abf7ef429de690e8f83c187e3eeca5a7080371fd0f601181c17a1a8fa
GET /premiumtv/daddylivehd.php?id=81 HTTP/1.1
Host: weblivehdplay.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dlhd.sx/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 07 Dec 2023 23:06:45 GMT
content-type: text/html; charset=UTF-8
cache-control: public, max-age=14400, immutable, no-transform
node: PHP
content-encoding: gzip
cf-cache-status: EXPIRED
last-modified: Thu, 07 Dec 2023 18:23:23 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ZlMeiCuAS23VLvCw4%2BHzuTnR5942tbLHDvN2iUEUngoOjGZRTIaBDynTgysx7tJytYZDJs%2FQXXNnvIqjybfPHzF5th%2FGyiIpcsHstIJi99Nz2m13dc7898%2Bec2K6V1z78FaM"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 83206bc42a6cb4ee-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
tzegilo.com/stattag.js
200 OK 19 kB IP
Requested by https://dlhd.sx/stream/stream-81.php
Certificate IssuerGoogle Trust Services LLC
Subjecttzegilo.com
FingerprintF2:F3:F8:C4:40:73:B6:FE:DD:58:70:D7:13:25:D2:51:21:88:50:0B
ValiditySun, 03 Dec 2023 17:24:18 GMT - Sat, 02 Mar 2024 17:24:17 GMT
File type ASCII text, with very long lines (18369)
Hash 89e89aea544ea2785d49cc4cd9cf26f6
7d53437a89eb9861038ee27a8ff0e3bb70fa2a0b
86da38693fcea056d36588a4146e85392f784c457511de416fec32034aafa4f9
GET /stattag.js HTTP/1.1
Host: tzegilo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dlhd.sx/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 07 Dec 2023 23:06:46 GMT
content-type: application/javascript
last-modified: Thu, 07 Sep 2023 08:19:52 GMT
etag: W/"64f987a8-4a4b"
link: <https://flerap.com/>; rel=preconnect; crossorigin, <https://fleraprt.com/>; rel=preconnect; crossorigin
cache-control: max-age=14400
cf-cache-status: HIT
age: 480
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=jrZxHDw%2FlTP2BA3r%2Fm3%2FY3s%2Fr65QcAi64OZ1rDG0IcW0w9S0Te8hsKtVqAgAhfxJG0XMGvv4pqvCSSPkWnp8vSw%2BrNktIaa5gD5rBayG3c0SR6oi8sfpOHRlUJ4e3w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 83206bc90c32b4f9-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
cdn.creative-bars1.com/sb/ssp/vpn/classic-push/big1/js/script.js
200 OK 958 B URL GET HTTP/2 cdn.creative-bars1.com/sb/ssp/vpn/classic-push/big1/js/script.js
IP
Requested by https://dlhd.sx/stream/stream-81.php
Certificate IssuerGoogle Trust Services LLC
Subjectcreative-bars1.com
Fingerprint2B:CC:32:FC:17:6F:25:69:2F:F4:A0:D9:DC:9C:C2:09:28:32:AB:34
ValiditySat, 21 Oct 2023 15:38:40 GMT - Fri, 19 Jan 2024 15:38:39 GMT
File type ASCII text, with very long lines (1009), with no line terminators
Hash 04835fd7dd7f8cfbad901bee8cff2170
38e9ed1e93f8f0beba9447a99afe3995e63b6f3e
be63bbd38c66ca9a9ee1c8abfed042fd5fc090c40b91ad561e922744ece47c41
GET /sb/ssp/vpn/classic-push/big1/js/script.js HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://dlhd.sx
DNT: 1
Connection: keep-alive
Referer: https://dlhd.sx/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 07 Dec 2023 23:06:51 GMT
content-type: application/javascript
last-modified: Mon, 21 Feb 2022 10:06:46 GMT
etag: W/"62136436-3be"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 1827696
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=AbOzYdaq0ZuZswuaMBE2vR%2BRHls3Hz4uc2SuLqeHXtCFx3DjoLX6nwRyZK5rj%2BNUxpb95O1%2BCQOlHadCvz2BJtnWdUgN6LnRQ4f752B0nRR4Cc4ajPGQhfKQ2KE%2BY2UHtlrqkZOGX%2BSL"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 83206bea4f1c71e4-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
i.imgur.com/pFlxPFz.jpg
200 OK 33 kB IP
Requested by https://dlhd.sx/stream/stream-81.php
Certificate IssuerSectigo Limited
Subject*.imgur.com
FingerprintD6:4D:45:03:6D:38:F8:FD:EA:AF:E5:92:B3:4D:85:A5:6B:AF:5C:EC
ValidityMon, 13 Mar 2023 00:00:00 GMT - Tue, 12 Mar 2024 23:59:59 GMT
File type JPEG image data, baseline, precision 8, 380x213, components 3\012- data
Hash 92699a25d117c4a9446a107598340645
833125573ca35fedd30d8590a2d69ba50dcf48d1
3624eb0c60f54b2aa2df6811ddf35ec81af6dad84fee5a5ab3b22bf583c8b436
GET /pFlxPFz.jpg HTTP/1.1
Host: i.imgur.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dlhd.sx/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/jpeg
last-modified: Tue, 28 Nov 2023 14:34:42 GMT
etag: "92699a25d117c4a9446a107598340645"
x-amz-server-side-encryption: AES256
x-amz-cf-pop: IAD12-P2
x-amz-cf-id: V6Xx5mWl8HYgxHCL_GZAzsq5aQjGqOkZj148rmn5Mqj5W7yU1dWy6g==
cache-control: public, max-age=31536000
accept-ranges: bytes
date: Thu, 07 Dec 2023 23:06:44 GMT
age: 808323
x-served-by: cache-iad-kiad7000123-IAD, cache-bma1672-BMA
x-cache: Miss from cloudfront, HIT, HIT
x-cache-hits: 7585, 2
x-timer: S1701990405.671997,VS0,VE0
strict-transport-security: max-age=300
access-control-allow-methods: GET, OPTIONS
access-control-allow-origin: *
server: cat factory 1.0
x-content-type-options: nosniff
content-length: 32832
X-Firefox-Spdy: h2
esaidees.com/impression/oSVk_A0V9GFnXyWLuk90kozUc1aPAY9B6Yb_pb1QvYO6zDr1z1BCPjyB9wWu8K1bD7loCwHRavyWBgM3JWI4cghuJ0dF7wjMNh8WsqRdAODlf9PVqXqdATCLxas0DFyohLT9YrdDq2hRUBESQrW8frujQbuivJSLD066T6xIG80ZvbINo4Kik0I4nRu9KLNixmUeqphTcovrfWYVVmnXYStk7mj9ZdFMhMMTfZTFEFzBH2tatdbYqEDmCAJyUxsX2hPOdsDsRRnhMMgx4T-lYUdbKxH5SkhDIB6fZe3IY1kNhU0TgG-OqHLSsQWOFDtVPFDgPdNJHkzWILqbPNK-KxUrY1e4Wx61CuYpFiOrpjCJZmWJXoV8EGD9ULkCAEnygwcfhwoLCcQrB2pSffQXpkkKH8o6HI219iwdYRiU9KsxpHUAzht8UBatTD0i-wFZFXs5m30FwGmlOOYRcp4bvpnGz-Dnw42H9Duubq_0zuHw8QcMDHJK4Nja7YxIr0PrYHacYkfvUKQlWxMoSpcByQoeJ_-joc6BuvGuC7_4KhKMECboxBrSSlTq2s8AnKfZCRmV_m8pdBg=?_z=4579215&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=981&wfc=10&pl=https%3A%2F%2Fdlhd.sx%2Fstream%2Fstream-81.php&drf=&np=1&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false&tzofs=0&js_build=8&sw_version=v1.312.0
200 OK 43 B URL GET HTTP/2 esaidees.com/impression/oSVk_A0V9GFnXyWLuk90kozUc1aPAY9B6Yb_pb1QvYO6zDr1z1BCPjyB9wWu8K1bD7loCwHRavyWBgM3JWI4cghuJ0dF7wjMNh8WsqRdAODlf9PVqXqdATCLxas0DFyohLT9YrdDq2hRUBESQrW8frujQbuivJSLD066T6xIG80ZvbINo4Kik0I4nRu9KLNixmUeqphTcovrfWYVVmnXYStk7mj9ZdFMhMMTfZTFEFzBH2tatdbYqEDmCAJyUxsX2hPOdsDsRRnhMMgx4T-lYUdbKxH5SkhDIB6fZe3IY1kNhU0TgG-OqHLSsQWOFDtVPFDgPdNJHkzWILqbPNK-KxUrY1e4Wx61CuYpFiOrpjCJZmWJXoV8EGD9ULkCAEnygwcfhwoLCcQrB2pSffQXpkkKH8o6HI219iwdYRiU9KsxpHUAzht8UBatTD0i-wFZFXs5m30FwGmlOOYRcp4bvpnGz-Dnw42H9Duubq_0zuHw8QcMDHJK4Nja7YxIr0PrYHacYkfvUKQlWxMoSpcByQoeJ_-joc6BuvGuC7_4KhKMECboxBrSSlTq2s8AnKfZCRmV_m8pdBg=?_z=4579215&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=981&wfc=10&pl=https%3A%2F%2Fdlhd.sx%2Fstream%2Fstream-81.php&drf=&np=1&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false&tzofs=0&js_build=8&sw_version=v1.312.0
IP
Requested by https://dlhd.sx/stream/stream-81.php
Certificate IssuerLet's Encrypt
Subjectesaidees.com
Fingerprint60:0A:18:98:3E:8B:FA:E2:70:D5:EF:09:C1:DA:B2:85:C1:7A:BC:6A
ValidityWed, 25 Oct 2023 09:19:27 GMT - Tue, 23 Jan 2024 09:19:26 GMT
File type GIF image data, version 89a, 1 x 1\012- data
Hash b4491705564909da7f9eaf749dbbfbb1
279315d507855c6a4351e1e2c2f39dd9cd2fccd8
4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /impression/oSVk_A0V9GFnXyWLuk90kozUc1aPAY9B6Yb_pb1QvYO6zDr1z1BCPjyB9wWu8K1bD7loCwHRavyWBgM3JWI4cghuJ0dF7wjMNh8WsqRdAODlf9PVqXqdATCLxas0DFyohLT9YrdDq2hRUBESQrW8frujQbuivJSLD066T6xIG80ZvbINo4Kik0I4nRu9KLNixmUeqphTcovrfWYVVmnXYStk7mj9ZdFMhMMTfZTFEFzBH2tatdbYqEDmCAJyUxsX2hPOdsDsRRnhMMgx4T-lYUdbKxH5SkhDIB6fZe3IY1kNhU0TgG-OqHLSsQWOFDtVPFDgPdNJHkzWILqbPNK-KxUrY1e4Wx61CuYpFiOrpjCJZmWJXoV8EGD9ULkCAEnygwcfhwoLCcQrB2pSffQXpkkKH8o6HI219iwdYRiU9KsxpHUAzht8UBatTD0i-wFZFXs5m30FwGmlOOYRcp4bvpnGz-Dnw42H9Duubq_0zuHw8QcMDHJK4Nja7YxIr0PrYHacYkfvUKQlWxMoSpcByQoeJ_-joc6BuvGuC7_4KhKMECboxBrSSlTq2s8AnKfZCRmV_m8pdBg=?_z=4579215&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=981&wfc=10&pl=https%3A%2F%2Fdlhd.sx%2Fstream%2Fstream-81.php&drf=&np=1&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false&tzofs=0&js_build=8&sw_version=v1.312.0 HTTP/1.1
Host: esaidees.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dlhd.sx/
Cookie: OAID=a5bm402398ol507408936a6i8qnwx616
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Thu, 07 Dec 2023 23:06:56 GMT
content-type: image/gif
content-length: 43
x-trace-id: de1dafe60e5058be7f5c7557e6937452
cache-control: no-cache, no-store, no-transform, must-revalidate, private, max-age=0
pragma: no-cache
expires: Tue, 11 Jan 1994 10:00:00 GMT
vary: Origin
access-control-allow-origin: *
access-control-expose-headers: Link
access-control-allow-credentials: true
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Wow64
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
i.imgur.com/qfTC0tD.jpg
200 OK 42 kB IP
Requested by https://dlhd.sx/stream/stream-81.php
Certificate IssuerSectigo Limited
Subject*.imgur.com
FingerprintD6:4D:45:03:6D:38:F8:FD:EA:AF:E5:92:B3:4D:85:A5:6B:AF:5C:EC
ValidityMon, 13 Mar 2023 00:00:00 GMT - Tue, 12 Mar 2024 23:59:59 GMT
File type JPEG image data, baseline, precision 8, 400x210, components 3\012- data
Hash ce054092dc2f647fd175cdb1de1a265e
a0eface45788d930c2bcf966573a9f3fca5f465e
d58fbaf2d774d8dff629e1e2d6d153a1d5510e9f95c2952232020c6fe8ad970b
GET /qfTC0tD.jpg HTTP/1.1
Host: i.imgur.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dlhd.sx/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/jpeg
last-modified: Tue, 28 Nov 2023 14:28:50 GMT
etag: "ce054092dc2f647fd175cdb1de1a265e"
x-amz-server-side-encryption: AES256
x-amz-cf-pop: IAD12-P2
x-amz-cf-id: VhKHyf9QDRO37U6xdjNktLUXw_vvx1SpzpYsXCQJat8N6bhJ-dBN2Q==
cache-control: public, max-age=31536000
accept-ranges: bytes
date: Thu, 07 Dec 2023 23:06:44 GMT
age: 808674
x-served-by: cache-iad-kcgs7200107-IAD, cache-bma1672-BMA
x-cache: Miss from cloudfront, HIT, HIT
x-cache-hits: 180, 1034
x-timer: S1701990405.671376,VS0,VE0
strict-transport-security: max-age=300
access-control-allow-methods: GET, OPTIONS
access-control-allow-origin: *
server: cat factory 1.0
x-content-type-options: nosniff
content-length: 41577
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Open%20Sans
200 OK 2.9 kB URL GET HTTP/2 fonts.googleapis.com/css?family=Open%20Sans
IP
Requested by https://dlhd.sx/stream/stream-81.php
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
FingerprintCC:96:E0:52:E0:9B:EA:A9:A0:F8:88:9A:90:20:11:47:61:00:3C:42
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type ASCII text, with very long lines (2967), with no line terminators
Hash 4e76b01dc618cbe0334ff1cf6998cc31
5fb4ff667edbbe6929e8f8fe657452703a08e0db
161cdfb1817d7d022db1c06020336329d00502dd11e4cee099f5d9075111c070
GET /css?family=Open%20Sans HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dlhd.sx/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Thu, 07 Dec 2023 23:06:44 GMT
date: Thu, 07 Dec 2023 23:06:44 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
dlhd.sx/favicon.ico
404 Not Found 146 B IP
Requested by https://dlhd.sx/stream/stream-81.php
Certificate IssuerGoogle Trust Services LLC
Subjectdlhd.sx
Fingerprint76:51:2D:5A:03:3C:EC:40:F6:2B:C4:26:97:0D:73:F6:FC:37:9C:83
ValidityThu, 19 Oct 2023 17:12:12 GMT - Wed, 17 Jan 2024 17:12:11 GMT
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with no line terminators
Hash 40b3fc14254227ec5012d996bf90c4e1
b0dd06eb5a779151151101337889ff09953f8ac0
740816c1b61e4a8443c26d30d3eecfea04815fca8cd605a142f9d8a35f86ceca
GET /favicon.ico HTTP/1.1
Host: dlhd.sx
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dlhd.sx/stream/stream-81.php
Cookie: sb_main_62f425b13c2294da628205a39237b933=1; sb_count_62f425b13c2294da628205a39237b933=1; a=iqQWBTob0mTxnT3z2NCs7Ico1vTvNIgK
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
date: Thu, 07 Dec 2023 23:06:47 GMT
content-type: text/html
cache-control: max-age=14400
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=2n3oAR6LnKbsd7fzZoe22Zuihcus4RQLzEhwxPaAqS1Gn%2Fh60JbQoGQQpHCbWagDSsIPK573yn6pHReBdOHyvVNW7Mjea9ojhu7rUjQD4ZJOvxgA5eGKo8GZ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 83206bcf696856b5-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
cdn.creative-bars1.com/sb/ssp/vpn/classic-push/big1/js/jquery.min.js
200 OK 84 kB URL GET HTTP/2 cdn.creative-bars1.com/sb/ssp/vpn/classic-push/big1/js/jquery.min.js
IP
Requested by https://dlhd.sx/stream/stream-81.php
Certificate IssuerGoogle Trust Services LLC
Subjectcreative-bars1.com
Fingerprint2B:CC:32:FC:17:6F:25:69:2F:F4:A0:D9:DC:9C:C2:09:28:32:AB:34
ValiditySat, 21 Oct 2023 15:38:40 GMT - Fri, 19 Jan 2024 15:38:39 GMT
File type ASCII text, with very long lines (32025)
Hash 4a356126b9573eb7bd1e9a7494737410
8258d046f17dd3c15a5d3984e1868b7b5d1db329
22642f202577f0ba2f22cbe56b6cf291a09374487567cd3563e0d2a29f75c0c5
GET /sb/ssp/vpn/classic-push/big1/js/jquery.min.js HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 07 Dec 2023 23:06:51 GMT
content-type: application/javascript
last-modified: Mon, 21 Feb 2022 10:06:46 GMT
etag: W/"62136436-1499c"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 839008
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=MXuhjlDoaVqTSwzPMMLFKen3G3v%2FhSi8rTJirln74%2Fl%2FiJjn8w3XSc91Mc012ENSMPrCCDIJvurTtg4QsmlbE02T8Wm%2Fpu6b72FBhl7Ad7UudyakiRkpJYoKcE7OX%2BlEec3XPbHqrLr6"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 83206be8fda071e4-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
188.114.96.1
104.21.234.33
172.67.193.52
151.101.84.193
185.200.118.51
23.109.82.15
18.184.210.76
185.200.116.51
162.19.58.159
0.0.0.0