| x2.rusoska.vip/static/images/rusoska.png |  104.21.95.42 | 200 OK | 11 kB |
URL GET HTTP/3x2.rusoska.vip/static/images/rusoska.png IP104.21.95.42:443
Requested byhttps://x2.rusoska.vip/young/2 CertificateIssuerGoogle Trust Services Subjectrusoska.vip FingerprintC2:CE:DA:60:BD:8D:23:87:90:9E:30:C7:33:6C:95:06:9C:7E:4D:19 ValidityTue, 17 Dec 2024 05:25:51 GMT - Mon, 17 Mar 2025 06:23:44 GMT
File typePNG image data, 595 x 90, 8-bit/color RGBA, non-interlaced Hash8f3c93e032d31224444a02ee9952ad58 76572acde3adc465017c3de8b23eb9e6da85c91d a55d0f7211fa65d9f5d1da35edd44a6608d120789656d4d469baa7c231d366c3
GET /static/images/rusoska.png HTTP/1.1
Host: x2.rusoska.vip
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://x2.rusoska.vip/young/2
Cookie: PHPSESSID=8ae6cd657c2554dae9a2cc8945799426; kt_ips=91.90.42.154
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 04 Jan 2025 09:59:11 GMT
content-type: image/png
content-length: 11267
last-modified: Tue, 20 Sep 2022 18:00:13 GMT
etag: "6329ffad-2c03"
expires: Wed, 24 Dec 2025 04:12:46 GMT
cache-control: max-age=31536000
strict-transport-security: max-age=31536000;
cf-cache-status: HIT
age: 971185
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=H%2BByRGnOHtdGfW8OAhBMMRHBGgRy9dIbx9%2FX5aloH5g9mMiJ2H6dPkTqcuFpsfBfS2al27J%2FTSfLSiWKV0u7bo7Lex5mbtFv3tlYBTe%2FQW4pnNPMmnm%2BtiUnGbl3obdDRA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8fca5fd95b3e56bb-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=17567&min_rtt=13652&rtt_var=7915&sent=25&recv=18&lost=0&retrans=0&sent_bytes=6660&recv_bytes=4616&delivery_rate=43142&cwnd=12000&unsent_bytes=0&cid=1622fd8012c0d374&ts=306&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| x2.rusoska.vip/static/images/fonts/icomoon.ttf?nddhpi&v=1 | 104.21.95.42 | 200 OK | 35 kB |
URL GET HTTP/3x2.rusoska.vip/static/images/fonts/icomoon.ttf?nddhpi&v=1 IP104.21.95.42:443
Requested byhttps://x2.rusoska.vip/young/2 CertificateIssuerGoogle Trust Services Subjectrusoska.vip FingerprintC2:CE:DA:60:BD:8D:23:87:90:9E:30:C7:33:6C:95:06:9C:7E:4D:19 ValidityTue, 17 Dec 2024 05:25:51 GMT - Mon, 17 Mar 2025 06:23:44 GMT
File typeTrueType Font data, 11 tables, 1st "OS/2", 14 names, Macintosh, type 1 string, icomoon Hash3187c717d302bdf327ac139aca774853 9b1b7b2207e3b08eaaca6dfa2b003669e1dcc9f2 7a6afab6aa09a865f0684aa8e15454a1696445f754de73a37b1bb1e44986ad06
GET /static/images/fonts/icomoon.ttf?nddhpi&v=1 HTTP/1.1
Host: x2.rusoska.vip
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://x2.rusoska.vip/young/2
Cookie: PHPSESSID=8ae6cd657c2554dae9a2cc8945799426; kt_ips=91.90.42.154
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 04 Jan 2025 09:59:11 GMT
content-type: application/octet-stream
content-length: 35092
last-modified: Tue, 20 Sep 2022 17:04:09 GMT
etag: "6329f289-8914"
strict-transport-security: max-age=31536000;
cache-control: max-age=14400
cf-cache-status: HIT
age: 2417
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2BiS0kDdDE%2FrrZnWhEFx4sLBBu7HAj3FnItMlShdiQMkNc5eh7Bjww%2F5dT4Y22EunjJYo2V3ajasCzpRLRzJHlZ%2BtTJZSVRMlLv01WeSTTgfCxoVg%2FlcQLMRc8xGOjz955Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8fca5fda1bfa56bb-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=7816&min_rtt=1072&rtt_var=9083&sent=163&recv=31&lost=0&retrans=0&sent_bytes=158442&recv_bytes=6916&delivery_rate=28447300&cwnd=96000&unsent_bytes=0&cid=1622fd8012c0d374&ts=431&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| x2.rusoska.vip/static/icon-180x180.png | 104.21.95.42 | 200 OK | 6.7 kB |
URL GET HTTP/3x2.rusoska.vip/static/icon-180x180.png IP104.21.95.42:443
Requested byhttps://x2.rusoska.vip/young/2 CertificateIssuerGoogle Trust Services Subjectrusoska.vip FingerprintC2:CE:DA:60:BD:8D:23:87:90:9E:30:C7:33:6C:95:06:9C:7E:4D:19 ValidityTue, 17 Dec 2024 05:25:51 GMT - Mon, 17 Mar 2025 06:23:44 GMT
File typePNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced Hash7bf6d54a413fbca29056e56d88ee5d85 6882848a4d769d262029e4d70ea49ee5e5df10df c9813c1b574f77b51cee770a64a0f61da4bb158326d6c94468495f35ac5cda7d
GET /static/icon-180x180.png HTTP/1.1
Host: x2.rusoska.vip
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://x2.rusoska.vip/young/2
Cookie: PHPSESSID=8ae6cd657c2554dae9a2cc8945799426; kt_ips=91.90.42.154; visited=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 04 Jan 2025 09:59:11 GMT
content-type: image/png
content-length: 6680
last-modified: Tue, 20 Sep 2022 17:53:00 GMT
etag: "6329fdfc-1a18"
expires: Wed, 24 Dec 2025 04:12:53 GMT
cache-control: max-age=31536000
strict-transport-security: max-age=31536000;
cf-cache-status: HIT
age: 971178
accept-ranges: bytes
priority: u=6,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=yIxo1iGl3%2BDK%2Fjxpl2LVF2c6DULheS0Lg5CvWNmECJMqYjvGgIXJ%2FEKWMTo0Gu1GpM6qboedI1oUwOHFRFXR8h%2BCAGqYN47jbcMBVD7tfbct1b7%2BQ0nozw3cT4gv8n87nA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8fca5fdb3cdd56bb-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=6389&min_rtt=1072&rtt_var=7552&sent=196&recv=35&lost=0&retrans=0&sent_bytes=195212&recv_bytes=7690&delivery_rate=3592464&cwnd=96000&unsent_bytes=0&cid=1622fd8012c0d374&ts=606&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| x2.rusoska.vip/static/icon-16x16.png | 104.21.95.42 | 200 OK | 2.0 kB |
URL GET HTTP/3x2.rusoska.vip/static/icon-16x16.png IP104.21.95.42:443
Requested byhttps://x2.rusoska.vip/young/2 CertificateIssuerGoogle Trust Services Subjectrusoska.vip FingerprintC2:CE:DA:60:BD:8D:23:87:90:9E:30:C7:33:6C:95:06:9C:7E:4D:19 ValidityTue, 17 Dec 2024 05:25:51 GMT - Mon, 17 Mar 2025 06:23:44 GMT
File typePNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced Hash59488bd684e3ba8addfab684fbe60e09 30ceb05299a259f3c0218f23504e26f7cdf5624b 4bd00242d986c1bed84595e0f27f5d4ad80c0a6d0d9ede2cbe41fa8a5f11035c
GET /static/icon-16x16.png HTTP/1.1
Host: x2.rusoska.vip
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://x2.rusoska.vip/young/2
Cookie: PHPSESSID=8ae6cd657c2554dae9a2cc8945799426; kt_ips=91.90.42.154; visited=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 04 Jan 2025 09:59:11 GMT
content-type: image/png
content-length: 1969
last-modified: Tue, 20 Sep 2022 17:53:00 GMT
etag: "6329fdfc-7b1"
expires: Wed, 24 Dec 2025 04:12:53 GMT
cache-control: max-age=31536000
strict-transport-security: max-age=31536000;
cf-cache-status: HIT
age: 971178
accept-ranges: bytes
priority: u=6,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Kn7LFafLhanB%2FsyYxRP8xyK3ulPKsygCPXJVFkYbLP9WYaPDzYME2g8hLAhGrGif76k117FbDTWjkrxnVq9o9NH70rdW4rb7bum95k46QeIcF9mitWWwF0cGQeAQBnhH%2Bg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8fca5fdb3cdf56bb-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=6389&min_rtt=1072&rtt_var=7552&sent=203&recv=35&lost=0&retrans=0&sent_bytes=202817&recv_bytes=7690&delivery_rate=3592464&cwnd=96000&unsent_bytes=0&cid=1622fd8012c0d374&ts=607&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| x2.rusoska.vip/static/styles/jquery.fancybox-metal.css?v=8.3 | 104.21.95.42 | 200 OK | 2.0 kB |
URL GET HTTP/3x2.rusoska.vip/static/styles/jquery.fancybox-metal.css?v=8.3 IP104.21.95.42:443
Requested byhttps://x2.rusoska.vip/young/2 CertificateIssuerGoogle Trust Services Subjectrusoska.vip FingerprintC2:CE:DA:60:BD:8D:23:87:90:9E:30:C7:33:6C:95:06:9C:7E:4D:19 ValidityTue, 17 Dec 2024 05:25:51 GMT - Mon, 17 Mar 2025 06:23:44 GMT
File typegzip compressed data, from Unix Hashd65cb7edd62e52c634c41e094f82ac14 19736981b4b0fabb0d4f98d5a8cf2b75a278bc5d 6f9b273db115736e330035db81770fa5f734e5265efbde404fc8c9efb66168e2
GET /static/styles/jquery.fancybox-metal.css?v=8.3 HTTP/1.1
Host: x2.rusoska.vip
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://x2.rusoska.vip/young/2
Cookie: PHPSESSID=8ae6cd657c2554dae9a2cc8945799426; kt_ips=91.90.42.154
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 04 Jan 2025 09:59:11 GMT
content-type: text/css
last-modified: Tue, 20 Sep 2022 17:03:33 GMT
etag: W/"6329f265-13ed"
expires: Wed, 24 Dec 2025 04:12:46 GMT
cache-control: max-age=31536000
strict-transport-security: max-age=31536000;
content-encoding: gzip
cf-cache-status: HIT
age: 971185
priority: u=2,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=qMizeQdvVovEaiAEgLJUPZpSKGGDyqIxx3ytByb0VI%2Fl%2F3ZLnu1jhNA8i4sQ%2FHdv5QUgYC%2Busd3hcIbrRxPlpm2l3UUfbwOSvqdt77OET3cICTsHhtWf7Zr96QcZk93AjQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8fca5fd95b3f56bb-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=17567&min_rtt=13652&rtt_var=7915&sent=22&recv=17&lost=0&retrans=0&sent_bytes=4348&recv_bytes=4281&delivery_rate=43142&cwnd=12000&unsent_bytes=0&cid=1622fd8012c0d374&ts=305&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| x2.rusoska.vip/static/js/main.min.js?v=8.6 | 104.21.95.42 | 200 OK | 74 kB |
URL GET HTTP/3x2.rusoska.vip/static/js/main.min.js?v=8.6 IP104.21.95.42:443
Requested byhttps://x2.rusoska.vip/young/2 CertificateIssuerGoogle Trust Services Subjectrusoska.vip FingerprintC2:CE:DA:60:BD:8D:23:87:90:9E:30:C7:33:6C:95:06:9C:7E:4D:19 ValidityTue, 17 Dec 2024 05:25:51 GMT - Mon, 17 Mar 2025 06:23:44 GMT
File typegzip compressed data, from Unix Hash3ba436054c1867ccec9297c6719d6b15 cd487536ac3276a3f67de03c6bf7a1d5b3d2d2f1 c14e3e6802a6bdbc463a9f2a0060cb0aa5360f08593a839a78bbbcf7b2b39226
GET /static/js/main.min.js?v=8.6 HTTP/1.1
Host: x2.rusoska.vip
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://x2.rusoska.vip/young/2
Cookie: PHPSESSID=8ae6cd657c2554dae9a2cc8945799426; kt_ips=91.90.42.154
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 04 Jan 2025 09:59:11 GMT
content-type: application/javascript; charset=UTF-8
last-modified: Tue, 01 Aug 2023 17:33:12 GMT
etag: W/"64c941d8-34f5b"
expires: Wed, 24 Dec 2025 04:12:46 GMT
cache-control: max-age=31536000
strict-transport-security: max-age=31536000;
content-encoding: gzip
cf-cache-status: HIT
age: 971185
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=XRmPWkH%2FAn494AqzhB3Zbp%2BDsdeL15RfeoXYPIABu1I1JJNqZDdw2%2FWkhjAfGdh7aTX0br7L4ce1Gr%2Bnpb0nBerUZhzR8x7%2Fl2U6fjTyq9CwaAI12TIgt5LNNGqsmqFNnw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8fca5fd97b6456bb-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=12289&min_rtt=1996&rtt_var=10056&sent=74&recv=26&lost=0&retrans=0&sent_bytes=55798&recv_bytes=6360&delivery_rate=464540&cwnd=48000&unsent_bytes=0&cid=1622fd8012c0d374&ts=322&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| js.capndr.com/advertising.js |  45.133.44.52 | 200 OK | 0 B |
URL GET HTTP/2js.capndr.com/advertising.js IP45.133.44.52:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://x2.rusoska.vip/young/2 CertificateIssuerLet's Encrypt Subjectjs.capndr.com Fingerprint8E:33:84:6E:B8:2C:50:C3:5F:EB:D3:22:D0:50:E3:A1:25:8D:8F:50 ValidityTue, 17 Dec 2024 02:32:03 GMT - Mon, 17 Mar 2025 02:32:02 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /advertising.js HTTP/1.1
Host: js.capndr.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://x2.rusoska.vip/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 04 Jan 2025 09:59:12 GMT
content-type: application/javascript; charset=utf-8
content-length: 0
server: nginx/1.18.0
last-modified: Fri, 14 Jul 2023 08:23:25 GMT
etag: "64b105fd-0"
expires: Sat, 04 Jan 2025 10:04:12 GMT
cache-control: max-age=300
x-proxy-cache: HIT
x-cdn-host-id: ds8137
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| fp.metricswpsh.com/fp?tag_id=76447 |  157.90.84.242 | 204 No Content | 0 B |
URL POST HTTP/1.1fp.metricswpsh.com/fp?tag_id=76447 IP157.90.84.242:443 ASN#24940 Hetzner Online GmbH
Requested byhttps://x2.rusoska.vip/young/2 CertificateIssuerLet's Encrypt Subjectnotification.tubecup.net FingerprintEE:9A:59:DB:A9:CD:73:0A:9C:87:AC:9F:FE:A1:90:AA:A1:7E:F8:D4 ValidityThu, 07 Nov 2024 10:40:28 GMT - Wed, 05 Feb 2025 10:40:27 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /fp?tag_id=76447 HTTP/1.1
Host: fp.metricswpsh.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://x2.rusoska.vip/
Origin: https://x2.rusoska.vip
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 204 No Content
Server: nginx/1.20.1
Date: Sat, 04 Jan 2025 09:59:13 GMT
Connection: keep-alive
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: content-type
Access-Control-Allow-Methods: GET,HEAD,PUT,PATCH,POST,DELETE
Access-Control-Allow-Origin: https://x2.rusoska.vip
Vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
|
|
| fp.metricswpsh.com/fp?tag_id=76447 | 157.90.84.242 | 500 Internal Server Error | 36 B |
URL POST HTTP/1.1fp.metricswpsh.com/fp?tag_id=76447 IP157.90.84.242:443 ASN#24940 Hetzner Online GmbH
Requested byhttps://x2.rusoska.vip/young/2 CertificateIssuerLet's Encrypt Subjectnotification.tubecup.net FingerprintEE:9A:59:DB:A9:CD:73:0A:9C:87:AC:9F:FE:A1:90:AA:A1:7E:F8:D4 ValidityThu, 07 Nov 2024 10:40:28 GMT - Wed, 05 Feb 2025 10:40:27 GMT
Hash0849660b654e3a313882a44c0e7dc08a b1493d6ce204eb99837d9b33849d1458093a6e6d 6e73b83ae8fcdaf81421a4236c9f817a9e4ea0fa931bf696f72872b266bd83e6
POST /fp?tag_id=76447 HTTP/1.1
Host: fp.metricswpsh.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json;charset=utf-8
Content-Length: 1947
Origin: https://x2.rusoska.vip
DNT: 1
Connection: keep-alive
Referer: https://x2.rusoska.vip/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 500 Internal Server Error
Server: nginx/1.20.1
Date: Sat, 04 Jan 2025 09:59:13 GMT
Content-Type: application/json; charset=UTF-8
Content-Length: 36
Connection: keep-alive
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://x2.rusoska.vip
Vary: Origin
|
|
| storage.multstorage.com/log/count.html | 104.21.30.242 | 200 OK | 4.1 kB |
URL GET HTTP/2storage.multstorage.com/log/count.html IP104.21.30.242:443
Requested byhttps://x2.rusoska.vip/young/2 CertificateIssuerGoogle Trust Services Subjectmultstorage.com Fingerprint96:2B:62:41:7C:56:AE:E2:BF:91:30:F3:03:0A:B7:E6:EC:70:67:7B ValidityFri, 08 Nov 2024 05:42:46 GMT - Thu, 06 Feb 2025 05:42:45 GMT
File typeHTML document, ASCII text, with very long lines (700) Hashb728ca9cd183d1b7c3f72116b19b22a3 c1fd73f6b02cf00b8bc60b09cc99495e8494b739 8a7b1ca4bbf273b32ea865d4785a1944d1b2b133678d9b5fe7ee0406f6fd64b2
GET /log/count.html HTTP/1.1
Host: storage.multstorage.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://x2.rusoska.vip/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 04 Jan 2025 09:59:12 GMT
content-type: text/html
last-modified: Mon, 18 Sep 2023 14:39:06 GMT
vary: Accept-Encoding
x-request-id: f9e002fcea51bd88914949432acc6275
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=z6sNl0TE3Je1rlpICmpIucrcjM3IqfkimDNtSre5zyhYdbOXJ3hhKWt%2FjYG4y5yMQRGsjFWj6oxPqhGuwhP9d1g5FEDI8Bwbq6g61J2M8OcvXgq1%2Ft4cDSdMFKksD2pO%2BHEEdv1sw%2B%2Brlw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8fca5fe1ce28b527-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=510&min_rtt=458&rtt_var=127&sent=7&recv=10&lost=0&retrans=0&sent_bytes=3205&recv_bytes=1150&delivery_rate=7412969&cwnd=254&unsent_bytes=0&cid=7e8d6a8437f78f88&ts=59&x=0"
X-Firefox-Spdy: h2
|
|
| octo25.me/ocean/creatives?uid=991786d2-3661-44e7-ae5e-de0aeb41ee73&ClientRequestId=334fc83a-f6b0-49f4-8e6b-601bf256a2cf&zoneId=5884&fingerprint=60fa2ca3ec1520726c2361f1e2f89fc5&previous_referrer=&referrer=https%3A%2F%2Fx2.rusoska.vip%2Fyoung%2F2&alternative=exclude | 104.21.94.29 | 200 OK | 9.3 kB |
URL GET HTTP/2octo25.me/ocean/creatives?uid=991786d2-3661-44e7-ae5e-de0aeb41ee73&ClientRequestId=334fc83a-f6b0-49f4-8e6b-601bf256a2cf&zoneId=5884&fingerprint=60fa2ca3ec1520726c2361f1e2f89fc5&previous_referrer=&referrer=https%3A%2F%2Fx2.rusoska.vip%2Fyoung%2F2&alternative=exclude IP104.21.94.29:443
Requested byhttps://x2.rusoska.vip/young/2 CertificateIssuerGoogle Trust Services Subjectocto25.me FingerprintBC:CC:8D:BE:C1:3C:2E:D6:7C:9A:45:72:A2:81:D4:FD:F9:B6:92:0A ValidityThu, 28 Nov 2024 06:12:04 GMT - Wed, 26 Feb 2025 06:12:03 GMT
Hash992b20364410121692f8deb9ac027253 963c2f5ecc679271643be8cb67559dd8fa32625b bf824b98fb7cca07eca8d98b0b9b8aa5cdfa6b06791aee182b1bb319a46db2f9
GET /ocean/creatives?uid=991786d2-3661-44e7-ae5e-de0aeb41ee73&ClientRequestId=334fc83a-f6b0-49f4-8e6b-601bf256a2cf&zoneId=5884&fingerprint=60fa2ca3ec1520726c2361f1e2f89fc5&previous_referrer=&referrer=https%3A%2F%2Fx2.rusoska.vip%2Fyoung%2F2&alternative=exclude HTTP/1.1
Host: octo25.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://x2.rusoska.vip/
Origin: https://x2.rusoska.vip
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 04 Jan 2025 09:59:12 GMT
content-type: application/json
access-control-allow-origin: https://x2.rusoska.vip
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
access-control-expose-headers: Content-Length,Content-Range
access-control-allow-credentials: true
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=CNWd8ZFmS2uHu7JFJ0PXiX4iusMM%2BWXJUGOZu1toZ%2BJPXZmaJwzU0IdyfpSaJ6jZWlgmepB%2FbeOpW86AKbtVBsTjc6oq%2FfFCWX93ToRf9iADvx5LZoacm0GBp%2Bs%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8fca5fdf4c5a568d-OSL
content-encoding: br
server-timing: cfL4;desc="?proto=TCP&rtt=1061&min_rtt=497&rtt_var=811&sent=12&recv=13&lost=0&retrans=1&sent_bytes=4421&recv_bytes=1393&delivery_rate=6703703&cwnd=256&unsent_bytes=0&cid=5ae025c78f0e0f2d&ts=325&x=0"
X-Firefox-Spdy: h2
|
|
| 71a72bc453.572c52928b.com/in/track?data=eyJ3bCI6MSwic3ViaWQiOjAsInVzZXJfaWQiOiIzMjY3NDYzMzgwMDA3NjQ1MDAwIiwidGltZXpvbmUiOjAsInZlciI6IjMuMTM2LjAiLCJ0YWdfaWQiOjc2NDQ3LCJzY3JlZW5fcmVzb2x1dGlvbiI6IjEyODB4MTAyNCIsImFkYmxvY2siOjAsInRpbWV6b25lX29sc29uIjoiVVRDIiwidXRtX3NvdXJjZSI6IiIsInV0bV9tZWRpdW0iOiIiLCJ1dG1fY2FtcGFpZ24iOiIiLCJ1dG1fY29udGVudCI6IiIsIm1tIjowLCJpbml0X3N0YXJ0X2xhdGVuY3kiOjAuNCwiaXNfdjIiOjAsImlzX3YyX2VtcHR5IjowfQ== | 45.133.44.53 | 200 OK | 0 B |
URL GET HTTP/271a72bc453.572c52928b.com/in/track?data=eyJ3bCI6MSwic3ViaWQiOjAsInVzZXJfaWQiOiIzMjY3NDYzMzgwMDA3NjQ1MDAwIiwidGltZXpvbmUiOjAsInZlciI6IjMuMTM2LjAiLCJ0YWdfaWQiOjc2NDQ3LCJzY3JlZW5fcmVzb2x1dGlvbiI6IjEyODB4MTAyNCIsImFkYmxvY2siOjAsInRpbWV6b25lX29sc29uIjoiVVRDIiwidXRtX3NvdXJjZSI6IiIsInV0bV9tZWRpdW0iOiIiLCJ1dG1fY2FtcGFpZ24iOiIiLCJ1dG1fY29udGVudCI6IiIsIm1tIjowLCJpbml0X3N0YXJ0X2xhdGVuY3kiOjAuNCwiaXNfdjIiOjAsImlzX3YyX2VtcHR5IjowfQ== IP45.133.44.53:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://x2.rusoska.vip/young/2 CertificateIssuerLet's Encrypt Subject71a72bc453.572c52928b.com FingerprintF8:06:65:07:95:31:2E:D5:AD:2B:15:5D:CB:CC:9D:FD:CE:9D:7B:AF ValidityWed, 01 Jan 2025 02:48:00 GMT - Tue, 01 Apr 2025 02:47:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /in/track?data=eyJ3bCI6MSwic3ViaWQiOjAsInVzZXJfaWQiOiIzMjY3NDYzMzgwMDA3NjQ1MDAwIiwidGltZXpvbmUiOjAsInZlciI6IjMuMTM2LjAiLCJ0YWdfaWQiOjc2NDQ3LCJzY3JlZW5fcmVzb2x1dGlvbiI6IjEyODB4MTAyNCIsImFkYmxvY2siOjAsInRpbWV6b25lX29sc29uIjoiVVRDIiwidXRtX3NvdXJjZSI6IiIsInV0bV9tZWRpdW0iOiIiLCJ1dG1fY2FtcGFpZ24iOiIiLCJ1dG1fY29udGVudCI6IiIsIm1tIjowLCJpbml0X3N0YXJ0X2xhdGVuY3kiOjAuNCwiaXNfdjIiOjAsImlzX3YyX2VtcHR5IjowfQ== HTTP/1.1
Host: 71a72bc453.572c52928b.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://x2.rusoska.vip
DNT: 1
Connection: keep-alive
Referer: https://x2.rusoska.vip/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 04 Jan 2025 09:59:13 GMT
content-length: 0
server: nginx/1.18.0
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
x-cdn-host-id: ds8137
X-Firefox-Spdy: h2
|
|
| x2.rusoska.vip/contents/videos_screenshots/191000/191187/642x361/1.jpg | 104.21.95.42 | 200 OK | 34 kB |
URL GET HTTP/3x2.rusoska.vip/contents/videos_screenshots/191000/191187/642x361/1.jpg IP104.21.95.42:443
Requested byhttps://x2.rusoska.vip/young/2 CertificateIssuerGoogle Trust Services Subjectrusoska.vip FingerprintC2:CE:DA:60:BD:8D:23:87:90:9E:30:C7:33:6C:95:06:9C:7E:4D:19 ValidityTue, 17 Dec 2024 05:25:51 GMT - Mon, 17 Mar 2025 06:23:44 GMT
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 642x361, Scaling: [none]x[none], YUV color, decoders should clamp Hashb2ed3366dd904c9e80f28a21110d6c9b a5d3b70fbf30781e4cf64952fd970aa5ae9c8646 0376739b946696166c72dd4b73b424ccb12348d68e59f4f1826be34e94f484da
GET /contents/videos_screenshots/191000/191187/642x361/1.jpg HTTP/1.1
Host: x2.rusoska.vip
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://x2.rusoska.vip/young/2
Cookie: PHPSESSID=8ae6cd657c2554dae9a2cc8945799426; kt_ips=91.90.42.154; visited=1; kt_tcookie=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 04 Jan 2025 09:59:15 GMT
content-type: image/jpeg
content-length: 33920
last-modified: Thu, 26 Dec 2024 11:43:22 GMT
etag: "676d415a-8480"
expires: Fri, 26 Dec 2025 12:50:48 GMT
cache-control: max-age=31536000
strict-transport-security: max-age=31536000;
cf-cache-status: HIT
age: 767307
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=cX3cxTDt1BXGpdcgUFIBPmC1933PF%2Bl3joHdRWjXSGI3PG5lxvrM1hZPB%2B%2BH1ovDkXOkTQcrXwxziVxvR0XaqKsvbk8vhu8A5wxNLLn%2F5hNRc%2Fpe6MXrf7ToemBwsg1N9w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8fca5ff30eaa56bb-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=6206&min_rtt=1072&rtt_var=6030&sent=209&recv=39&lost=0&retrans=0&sent_bytes=205676&recv_bytes=8858&delivery_rate=645898&cwnd=96000&unsent_bytes=0&cid=1622fd8012c0d374&ts=4418&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| x2.rusoska.vip/contents/videos_screenshots/191000/191253/642x361/1.jpg | 104.21.95.42 | 200 OK | 14 kB |
URL GET HTTP/3x2.rusoska.vip/contents/videos_screenshots/191000/191253/642x361/1.jpg IP104.21.95.42:443
Requested byhttps://x2.rusoska.vip/young/2 CertificateIssuerGoogle Trust Services Subjectrusoska.vip FingerprintC2:CE:DA:60:BD:8D:23:87:90:9E:30:C7:33:6C:95:06:9C:7E:4D:19 ValidityTue, 17 Dec 2024 05:25:51 GMT - Mon, 17 Mar 2025 06:23:44 GMT
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 642x361, Scaling: [none]x[none], YUV color, decoders should clamp Hash6c4cac1489df7ed7cf2d90bbd4f884a4 abc89714ae2d670339f0c52453a265221cf4fc95 ff538a311fc05fc640af2c50043bdcc6821fdbd5892b093edb9e47f70e43d6d1
GET /contents/videos_screenshots/191000/191253/642x361/1.jpg HTTP/1.1
Host: x2.rusoska.vip
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://x2.rusoska.vip/young/2
Cookie: PHPSESSID=8ae6cd657c2554dae9a2cc8945799426; kt_ips=91.90.42.154; visited=1; kt_tcookie=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 04 Jan 2025 09:59:15 GMT
content-type: image/jpeg
content-length: 13604
last-modified: Mon, 30 Dec 2024 05:22:12 GMT
etag: "67722e04-3524"
expires: Tue, 30 Dec 2025 06:06:41 GMT
cache-control: max-age=31536000
strict-transport-security: max-age=31536000;
cf-cache-status: HIT
age: 445954
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2lxeEQNMbfK86igr1fh36%2Fj8YryYLT0QD07ivIzVC8OQa9AQXwLnznTRdICpK6%2FVv40z%2BpwowqV4%2Btxk6ilblYz%2BAcv82m%2FC8G5T1XFJEemlWO6mMD7nxhOuVlolpomlYA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8fca5ff31eb956bb-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=5734&min_rtt=1072&rtt_var=5466&sent=240&recv=41&lost=0&retrans=0&sent_bytes=241232&recv_bytes=9278&delivery_rate=3023188&cwnd=96000&unsent_bytes=0&cid=1622fd8012c0d374&ts=4426&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| x2.rusoska.vip/contents/videos_screenshots/191000/191255/642x361/1.jpg | 104.21.95.42 | 200 OK | 20 kB |
URL GET HTTP/3x2.rusoska.vip/contents/videos_screenshots/191000/191255/642x361/1.jpg IP104.21.95.42:443
Requested byhttps://x2.rusoska.vip/young/2 CertificateIssuerGoogle Trust Services Subjectrusoska.vip FingerprintC2:CE:DA:60:BD:8D:23:87:90:9E:30:C7:33:6C:95:06:9C:7E:4D:19 ValidityTue, 17 Dec 2024 05:25:51 GMT - Mon, 17 Mar 2025 06:23:44 GMT
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 642x361, Scaling: [none]x[none], YUV color, decoders should clamp Hash4e2b8a716555778d900ca0a028a70da3 c10aa0272d22da0bafad5e96cb981b1985953773 9a86a18c55801153a2b9dc6821cff24511307a0d504e59e026a974eb1ab53b56
GET /contents/videos_screenshots/191000/191255/642x361/1.jpg HTTP/1.1
Host: x2.rusoska.vip
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://x2.rusoska.vip/young/2
Cookie: PHPSESSID=8ae6cd657c2554dae9a2cc8945799426; kt_ips=91.90.42.154; visited=1; kt_tcookie=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 04 Jan 2025 09:59:15 GMT
content-type: image/jpeg
content-length: 20316
last-modified: Mon, 30 Dec 2024 05:32:32 GMT
etag: "67723070-4f5c"
expires: Tue, 30 Dec 2025 06:06:21 GMT
cache-control: max-age=31536000
strict-transport-security: max-age=31536000;
cf-cache-status: HIT
age: 445974
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=pugQH6rSrrd5cVwIlBkA3jdl54sDwWyln5Qrle7y7KyxPZON9qo%2BCvfg9zhXL7Ac8vzM24DWO0pgEGK7w%2Bq3E73W1vXT8xPUSAigV6kS25HU%2Boib91iaVFDycXYuJH93%2Fg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8fca5ff31eb256bb-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=5190&min_rtt=1072&rtt_var=5188&sent=254&recv=43&lost=0&retrans=0&sent_bytes=255958&recv_bytes=9698&delivery_rate=3783526&cwnd=96000&unsent_bytes=0&cid=1622fd8012c0d374&ts=4431&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| js.wpshsdk.com/npc/sdk/push.m.js?v=1 | 45.133.44.53 | 200 OK | 30 kB |
URL GET HTTP/2js.wpshsdk.com/npc/sdk/push.m.js?v=1 IP45.133.44.53:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://x2.rusoska.vip/young/2 CertificateIssuerLet's Encrypt Subjectjs.wpshsdk.com Fingerprint96:A0:59:8B:2C:E8:61:1F:B0:E2:7F:5B:B5:8C:AF:B6:E0:E0:43:5F ValidityFri, 15 Nov 2024 04:04:39 GMT - Thu, 13 Feb 2025 04:04:38 GMT
File typegzip compressed data, from Unix Hash51f60ab246231d8afe6c043dd59e540d 399a3f38fbc8bf7c48ce9dc7d215541de8b22bb1 a0f0ae777242259e2cd70cd2025e7db3b467e06878cd8249311b9b7bdb432550
GET /npc/sdk/push.m.js?v=1 HTTP/1.1
Host: js.wpshsdk.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://x2.rusoska.vip/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 04 Jan 2025 09:59:13 GMT
content-type: application/javascript; charset=utf-8
server: nginx/1.18.0
last-modified: Thu, 12 Dec 2024 14:10:43 GMT
etag: W/"675aeee3-83b6"
content-encoding: gzip
expires: Sat, 04 Jan 2025 10:04:13 GMT
cache-control: max-age=300
x-proxy-cache: HIT
x-cdn-host-id: ds8137
access-control-allow-origin: *
X-Firefox-Spdy: h2
|
|
| x2.rusoska.vip/contents/videos_screenshots/191000/191220/642x361/1.jpg | 104.21.95.42 | 200 OK | 16 kB |
URL GET HTTP/3x2.rusoska.vip/contents/videos_screenshots/191000/191220/642x361/1.jpg IP104.21.95.42:443
Requested byhttps://x2.rusoska.vip/young/2 CertificateIssuerGoogle Trust Services Subjectrusoska.vip FingerprintC2:CE:DA:60:BD:8D:23:87:90:9E:30:C7:33:6C:95:06:9C:7E:4D:19 ValidityTue, 17 Dec 2024 05:25:51 GMT - Mon, 17 Mar 2025 06:23:44 GMT
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 642x361, Scaling: [none]x[none], YUV color, decoders should clamp Hasha0da823d5f3d870686c00b7a13ea5ae2 36e680e5ba863f50128a77b4e9f2af16a0984ca5 d9367b60ed6615eb81cde3569013b4c8619c72cded2fa099daab1f018add269a
GET /contents/videos_screenshots/191000/191220/642x361/1.jpg HTTP/1.1
Host: x2.rusoska.vip
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://x2.rusoska.vip/young/2
Cookie: PHPSESSID=8ae6cd657c2554dae9a2cc8945799426; kt_ips=91.90.42.154; visited=1; kt_tcookie=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 04 Jan 2025 09:59:15 GMT
content-type: image/jpeg
content-length: 16478
last-modified: Sun, 29 Dec 2024 00:59:15 GMT
etag: "67709ee3-405e"
expires: Mon, 29 Dec 2025 02:00:50 GMT
cache-control: max-age=31536000
strict-transport-security: max-age=31536000;
cf-cache-status: HIT
age: 547105
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=DyeIgNYQt1ASjz1jhBlYwJ0myrTSOCRzL8UaWd2OrMM3I%2Bzi9Qp1w8yhBMV2Dey8zaNEG48Cgu5UJ7CJoSrbf64HLQ6dY8B2wN78KGRjJBmZJtX7m5rZihjF0Sy3gWzYAw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8fca5ff32ecb56bb-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=4757&min_rtt=1072&rtt_var=4756&sent=289&recv=44&lost=0&retrans=0&sent_bytes=296792&recv_bytes=9744&delivery_rate=4795656&cwnd=96000&unsent_bytes=0&cid=1622fd8012c0d374&ts=4438&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| x2.rusoska.vip/contents/videos_screenshots/191000/191249/642x361/1.jpg | 104.21.95.42 | 200 OK | 15 kB |
URL GET HTTP/3x2.rusoska.vip/contents/videos_screenshots/191000/191249/642x361/1.jpg IP104.21.95.42:443
Requested byhttps://x2.rusoska.vip/young/2 CertificateIssuerGoogle Trust Services Subjectrusoska.vip FingerprintC2:CE:DA:60:BD:8D:23:87:90:9E:30:C7:33:6C:95:06:9C:7E:4D:19 ValidityTue, 17 Dec 2024 05:25:51 GMT - Mon, 17 Mar 2025 06:23:44 GMT
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 642x361, Scaling: [none]x[none], YUV color, decoders should clamp Hashe563acaa486e96007b506c9605f2284b cdf2324c78a73d236fb010375c1fb48571182f38 6b592f5c2a62815b6c629b87410f8181ab940a464cd5bbb6af663c2597ad7ca4
GET /contents/videos_screenshots/191000/191249/642x361/1.jpg HTTP/1.1
Host: x2.rusoska.vip
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://x2.rusoska.vip/young/2
Cookie: PHPSESSID=8ae6cd657c2554dae9a2cc8945799426; kt_ips=91.90.42.154; visited=1; kt_tcookie=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 04 Jan 2025 09:59:15 GMT
content-type: image/jpeg
content-length: 14662
last-modified: Sun, 29 Dec 2024 23:53:19 GMT
etag: "6771e0ef-3946"
expires: Tue, 30 Dec 2025 01:51:16 GMT
cache-control: max-age=31536000
strict-transport-security: max-age=31536000;
cf-cache-status: HIT
age: 461279
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Ds6jcuqO4%2B8d1R%2BXuUaOfgh%2Br%2Fg6h2hsJqDrQXsWvzeAlKh4vJqPmUroj9unRtihMs3S4f3cW6BGxafIdpgPzmbsXpxX%2Fo5e5brVt1jOhR4yQJWzJBJ4YMc9uS34HEMJjg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8fca5ff33ed956bb-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=4392&min_rtt=1072&rtt_var=3310&sent=306&recv=49&lost=0&retrans=0&sent_bytes=314475&recv_bytes=11630&delivery_rate=3020903&cwnd=96000&unsent_bytes=0&cid=1622fd8012c0d374&ts=4451&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| x2.rusoska.vip/contents/videos_screenshots/191000/191268/642x361/1.jpg | 104.21.95.42 | 200 OK | 18 kB |
URL GET HTTP/3x2.rusoska.vip/contents/videos_screenshots/191000/191268/642x361/1.jpg IP104.21.95.42:443
Requested byhttps://x2.rusoska.vip/young/2 CertificateIssuerGoogle Trust Services Subjectrusoska.vip FingerprintC2:CE:DA:60:BD:8D:23:87:90:9E:30:C7:33:6C:95:06:9C:7E:4D:19 ValidityTue, 17 Dec 2024 05:25:51 GMT - Mon, 17 Mar 2025 06:23:44 GMT
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 642x361, Scaling: [none]x[none], YUV color, decoders should clamp Hash74c7b804448d802ead81d128ee4ae558 1327f76e0806e062d5b3918e7c84b751c871f6de ddd9825b61e9588d9e8a49df203e44a8eae95ddf64a0cb183e4f3807c9468bc3
GET /contents/videos_screenshots/191000/191268/642x361/1.jpg HTTP/1.1
Host: x2.rusoska.vip
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://x2.rusoska.vip/young/2
Cookie: PHPSESSID=8ae6cd657c2554dae9a2cc8945799426; kt_ips=91.90.42.154; visited=1; kt_tcookie=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 04 Jan 2025 09:59:15 GMT
content-type: image/jpeg
content-length: 18290
last-modified: Mon, 30 Dec 2024 23:00:16 GMT
etag: "67732600-4772"
expires: Wed, 31 Dec 2025 04:37:26 GMT
cache-control: max-age=31536000
strict-transport-security: max-age=31536000;
cf-cache-status: HIT
age: 364909
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2n5B%2FeI0PIyjpaiA%2FwGcD%2BOVfVeTjfC4L0c%2BJ3Avm1ni6Fb1k%2FQZyUy8R6clE9r%2Fy2SiszozoJb%2FVSfhcthiIXo64rxhzLtfmUFpI9w0KL%2B3%2BDHzOj9gzohsDnDqvKCEcw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8fca5ff34edf56bb-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=4018&min_rtt=1072&rtt_var=3230&sent=321&recv=51&lost=0&retrans=0&sent_bytes=330286&recv_bytes=12050&delivery_rate=5103510&cwnd=96000&unsent_bytes=0&cid=1622fd8012c0d374&ts=4456&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| x2.rusoska.vip/contents/videos_screenshots/191000/191186/642x361/1.jpg | 104.21.95.42 | 200 OK | 54 kB |
URL GET HTTP/3x2.rusoska.vip/contents/videos_screenshots/191000/191186/642x361/1.jpg IP104.21.95.42:443
Requested byhttps://x2.rusoska.vip/young/2 CertificateIssuerGoogle Trust Services Subjectrusoska.vip FingerprintC2:CE:DA:60:BD:8D:23:87:90:9E:30:C7:33:6C:95:06:9C:7E:4D:19 ValidityTue, 17 Dec 2024 05:25:51 GMT - Mon, 17 Mar 2025 06:23:44 GMT
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 642x361, Scaling: [none]x[none], YUV color, decoders should clamp Hash89c99d5b73c3112df5ca3b50ebbc8feb 2afd0ec77ec5e118cac64c5653eb487eeb5eddcc 213e3e02fb4da798ce34e4ace9b54595f67b2d1d9d72ae0f9caa38ad20a43d14
GET /contents/videos_screenshots/191000/191186/642x361/1.jpg HTTP/1.1
Host: x2.rusoska.vip
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://x2.rusoska.vip/young/2
Cookie: PHPSESSID=8ae6cd657c2554dae9a2cc8945799426; kt_ips=91.90.42.154; visited=1; kt_tcookie=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 04 Jan 2025 09:59:15 GMT
content-type: image/jpeg
content-length: 54330
last-modified: Wed, 25 Dec 2024 23:26:00 GMT
etag: "676c9488-d43a"
expires: Thu, 25 Dec 2025 23:30:48 GMT
cache-control: max-age=31536000
strict-transport-security: max-age=31536000;
cf-cache-status: HIT
age: 815307
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2icn4qTy50O8jd2xzEnO2uN%2Fm82jzUzm%2FdKCfopslYCqtZE2b64xPtOd%2B%2BA8bdJiuEoKfO1eerQjxtDO08sLNA9USapC3lxqSO4XpwpPuOJ5Ke7%2FhtVUZHqnkckmKn2tYg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8fca5ff34edd56bb-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=4018&min_rtt=1072&rtt_var=3230&sent=339&recv=52&lost=0&retrans=0&sent_bytes=349822&recv_bytes=12424&delivery_rate=5103510&cwnd=96000&unsent_bytes=0&cid=1622fd8012c0d374&ts=4457&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| x2.rusoska.vip/contents/videos_screenshots/191000/191262/642x361/1.jpg | 104.21.95.42 | 200 OK | 17 kB |
URL GET HTTP/3x2.rusoska.vip/contents/videos_screenshots/191000/191262/642x361/1.jpg IP104.21.95.42:443
Requested byhttps://x2.rusoska.vip/young/2 CertificateIssuerGoogle Trust Services Subjectrusoska.vip FingerprintC2:CE:DA:60:BD:8D:23:87:90:9E:30:C7:33:6C:95:06:9C:7E:4D:19 ValidityTue, 17 Dec 2024 05:25:51 GMT - Mon, 17 Mar 2025 06:23:44 GMT
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 642x361, Scaling: [none]x[none], YUV color, decoders should clamp Hashafabcf16816628a25bbd490eb565fd13 25952bb66674a53820ef19b10834dd420265d0d8 0c2d2c2c2389d748ff5d32bb4c56becaf6f032959654b3b55ce47a7d01ebdd10
GET /contents/videos_screenshots/191000/191262/642x361/1.jpg HTTP/1.1
Host: x2.rusoska.vip
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://x2.rusoska.vip/young/2
Cookie: PHPSESSID=8ae6cd657c2554dae9a2cc8945799426; kt_ips=91.90.42.154; visited=1; kt_tcookie=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 04 Jan 2025 09:59:15 GMT
content-type: image/jpeg
content-length: 16694
last-modified: Mon, 30 Dec 2024 11:33:12 GMT
etag: "677284f8-4136"
expires: Tue, 30 Dec 2025 11:38:01 GMT
cache-control: max-age=31536000
strict-transport-security: max-age=31536000;
cf-cache-status: HIT
age: 426074
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4%2BrtWs8v9cZH7kpk10yGy1V%2FeeV%2Bj8UrXHB1vnjGqKJXpjOvSHUdiu%2BSywWg8Lmtf2QDzBJl9qv0WNV6JIYGIJyzBzp3F7JXDqwnTM7Vyqs8p3QY18Adc9nDZDd2OG1IDA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8fca5ff34ee156bb-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=4018&min_rtt=1072&rtt_var=3230&sent=339&recv=52&lost=0&retrans=0&sent_bytes=349822&recv_bytes=12424&delivery_rate=5103510&cwnd=96000&unsent_bytes=0&cid=1622fd8012c0d374&ts=4457&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| x2.rusoska.vip/contents/videos_screenshots/191000/191223/642x361/1.jpg | 104.21.95.42 | 200 OK | 23 kB |
URL GET HTTP/3x2.rusoska.vip/contents/videos_screenshots/191000/191223/642x361/1.jpg IP104.21.95.42:443
Requested byhttps://x2.rusoska.vip/young/2 CertificateIssuerGoogle Trust Services Subjectrusoska.vip FingerprintC2:CE:DA:60:BD:8D:23:87:90:9E:30:C7:33:6C:95:06:9C:7E:4D:19 ValidityTue, 17 Dec 2024 05:25:51 GMT - Mon, 17 Mar 2025 06:23:44 GMT
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 642x361, Scaling: [none]x[none], YUV color, decoders should clamp Hash26630cb095ead9b2c9126ac4bcc9d852 c5566eb67f770a82d23073292549eef66d3759e4 5b0bd5a8c9c4d0ce84ae3636cb89e23eaeb7b5b58c6ada3e6227fe5633ab2b77
GET /contents/videos_screenshots/191000/191223/642x361/1.jpg HTTP/1.1
Host: x2.rusoska.vip
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://x2.rusoska.vip/young/2
Cookie: PHPSESSID=8ae6cd657c2554dae9a2cc8945799426; kt_ips=91.90.42.154; visited=1; kt_tcookie=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 04 Jan 2025 09:59:15 GMT
content-type: image/jpeg
content-length: 22830
last-modified: Sun, 29 Dec 2024 00:53:19 GMT
etag: "67709d7f-592e"
expires: Mon, 29 Dec 2025 02:00:58 GMT
cache-control: max-age=31536000
strict-transport-security: max-age=31536000;
cf-cache-status: HIT
age: 547097
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=pzLpojVRqma9tNqp097RNKKNXFepSeAGLaehVxClF2yL4QN4wwsSdLv6Z8XaCAAlPOjRzAl3SvuLbfhpONIE2Uy2iRdVKynIGo%2B9Vs%2F%2B76D%2FNDXfMI2Igql1KQ2%2FcY4YWg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8fca5ff34ee356bb-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=4018&min_rtt=1072&rtt_var=3230&sent=349&recv=52&lost=0&retrans=0&sent_bytes=361822&recv_bytes=12424&delivery_rate=5103510&cwnd=96000&unsent_bytes=0&cid=1622fd8012c0d374&ts=4458&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| x2.rusoska.vip/contents/videos_screenshots/191000/191269/642x361/1.jpg | 104.21.95.42 | 200 OK | 13 kB |
URL GET HTTP/3x2.rusoska.vip/contents/videos_screenshots/191000/191269/642x361/1.jpg IP104.21.95.42:443
Requested byhttps://x2.rusoska.vip/young/2 CertificateIssuerGoogle Trust Services Subjectrusoska.vip FingerprintC2:CE:DA:60:BD:8D:23:87:90:9E:30:C7:33:6C:95:06:9C:7E:4D:19 ValidityTue, 17 Dec 2024 05:25:51 GMT - Mon, 17 Mar 2025 06:23:44 GMT
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 642x361, Scaling: [none]x[none], YUV color, decoders should clamp Hashf91b509bfe3490ab388b727f9b769d1c f6dd05a541b76089c86f0608ad31e90523d14ec2 a4e6cab3a02faf9ddc9880576a3ba3b76e2416bcbd9bfe1d8c38dfcd5a8a3e5f
GET /contents/videos_screenshots/191000/191269/642x361/1.jpg HTTP/1.1
Host: x2.rusoska.vip
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://x2.rusoska.vip/young/2
Cookie: PHPSESSID=8ae6cd657c2554dae9a2cc8945799426; kt_ips=91.90.42.154; visited=1; kt_tcookie=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 04 Jan 2025 09:59:15 GMT
content-type: image/jpeg
content-length: 13394
last-modified: Mon, 30 Dec 2024 17:51:22 GMT
etag: "6772dd9a-3452"
expires: Tue, 30 Dec 2025 22:56:04 GMT
cache-control: max-age=31536000
strict-transport-security: max-age=31536000;
cf-cache-status: HIT
age: 385391
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xZU0TET1TkPI18hGd%2BdpZVVWt8poZnaiwvccKHgS6z4gY5d%2Fv%2BTdke%2Be9%2BQiLO2hgsgyQCdFLC92hXjSsMPSsjm7UmdK%2BLaSJn%2BFucXnQzC2u9f%2FhI9NTpWNGeyEB1N8Aw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8fca5ff35ee756bb-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3694&min_rtt=1072&rtt_var=3071&sent=423&recv=53&lost=0&retrans=0&sent_bytes=448318&recv_bytes=12470&delivery_rate=4437819&cwnd=115200&unsent_bytes=0&cid=1622fd8012c0d374&ts=4461&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| x2.rusoska.vip/contents/videos_screenshots/191000/191162/642x361/1.jpg | 104.21.95.42 | 200 OK | 20 kB |
URL GET HTTP/3x2.rusoska.vip/contents/videos_screenshots/191000/191162/642x361/1.jpg IP104.21.95.42:443
Requested byhttps://x2.rusoska.vip/young/2 CertificateIssuerGoogle Trust Services Subjectrusoska.vip FingerprintC2:CE:DA:60:BD:8D:23:87:90:9E:30:C7:33:6C:95:06:9C:7E:4D:19 ValidityTue, 17 Dec 2024 05:25:51 GMT - Mon, 17 Mar 2025 06:23:44 GMT
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 642x361, Scaling: [none]x[none], YUV color, decoders should clamp Hash876a82e96e5b4ee894ce52665f21a994 9ad248dcc9b8bf2e46a03576ce2e80ffc843a1e6 6eeb9b21a802be5e6c01971dd7be5160e5dc259924d603bfe715bfc62ab16ef1
GET /contents/videos_screenshots/191000/191162/642x361/1.jpg HTTP/1.1
Host: x2.rusoska.vip
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://x2.rusoska.vip/young/2
Cookie: PHPSESSID=8ae6cd657c2554dae9a2cc8945799426; kt_ips=91.90.42.154; visited=1; kt_tcookie=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 04 Jan 2025 09:59:15 GMT
content-type: image/jpeg
content-length: 19584
last-modified: Tue, 24 Dec 2024 13:13:43 GMT
etag: "676ab387-4c80"
expires: Wed, 24 Dec 2025 13:40:22 GMT
cache-control: max-age=31536000
strict-transport-security: max-age=31536000;
cf-cache-status: HIT
age: 937133
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rskrjPxTm97U1uc6qkRn8ntDXtcSZFCiGCP02zdisuko8ShsFRvsJHkm%2FKvJL%2BeMz%2FdpEUCK%2B1UMoRiPflQa6X9UjZFOH%2BZIqXl5igJvaoiBChGaP3beOtJrLNy74tYP3A%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8fca5ff35eee56bb-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3694&min_rtt=1072&rtt_var=3071&sent=436&recv=53&lost=0&retrans=0&sent_bytes=462813&recv_bytes=12470&delivery_rate=4437819&cwnd=115200&unsent_bytes=0&cid=1622fd8012c0d374&ts=4464&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| x2.rusoska.vip/static/images/flags/jp.svg | 104.21.95.42 | 200 OK | 15 kB |
URL GET HTTP/3x2.rusoska.vip/static/images/flags/jp.svg IP104.21.95.42:443
Requested byhttps://x2.rusoska.vip/young/2 CertificateIssuerGoogle Trust Services Subjectrusoska.vip FingerprintC2:CE:DA:60:BD:8D:23:87:90:9E:30:C7:33:6C:95:06:9C:7E:4D:19 ValidityTue, 17 Dec 2024 05:25:51 GMT - Mon, 17 Mar 2025 06:23:44 GMT
File typegzip compressed data, from Unix Hash771d12fa51210b2eea862659a4501d34 670f5deac9f645ae2a8e134eb95d6058a94e1603 8609d8f50f7bb888d59ac1548b8a5b24a146737a60ee33f3e5f58b9ecf656ede
GET /static/images/flags/jp.svg HTTP/1.1
Host: x2.rusoska.vip
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://x2.rusoska.vip/young/2
Cookie: PHPSESSID=8ae6cd657c2554dae9a2cc8945799426; kt_ips=91.90.42.154
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 04 Jan 2025 09:59:11 GMT
content-type: image/svg+xml
last-modified: Tue, 20 Sep 2022 17:03:35 GMT
etag: W/"6329f267-1da"
expires: Wed, 24 Dec 2025 04:12:48 GMT
cache-control: max-age=31536000
strict-transport-security: max-age=31536000;
content-encoding: gzip
cf-cache-status: HIT
age: 971183
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=qgVBnXqXBlD%2FkqbFUXtWRTU1dQDCu7vgWhL8%2BSGClxuyhLr3LSnXgA0YDsuoCHd%2BVyyzq%2Fhktjxv4f%2B70O5WaA3hKi8Nzly9sKu3URqUyawVZPXRygHpvJ%2BBn%2BIrJzwTTw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8fca5fd96b5956bb-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=12289&min_rtt=1996&rtt_var=10056&sent=69&recv=26&lost=0&retrans=0&sent_bytes=49910&recv_bytes=6360&delivery_rate=464540&cwnd=48000&unsent_bytes=0&cid=1622fd8012c0d374&ts=321&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| x2.rusoska.vip/contents/videos_screenshots/191000/191283/642x361/1.jpg | 104.21.95.42 | 200 OK | 17 kB |
URL GET HTTP/3x2.rusoska.vip/contents/videos_screenshots/191000/191283/642x361/1.jpg IP104.21.95.42:443
Requested byhttps://x2.rusoska.vip/young/2 CertificateIssuerGoogle Trust Services Subjectrusoska.vip FingerprintC2:CE:DA:60:BD:8D:23:87:90:9E:30:C7:33:6C:95:06:9C:7E:4D:19 ValidityTue, 17 Dec 2024 05:25:51 GMT - Mon, 17 Mar 2025 06:23:44 GMT
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 642x361, Scaling: [none]x[none], YUV color, decoders should clamp Hashf2aaaee5a15787e15cd8d39b9650b886 166555b3899374869ae3de99c5d65ae6223828ed afbb282e994fa9fc87322d78b5d537fc48c29a7c825280d5942d07736eaaf90b
GET /contents/videos_screenshots/191000/191283/642x361/1.jpg HTTP/1.1
Host: x2.rusoska.vip
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://x2.rusoska.vip/young/2
Cookie: PHPSESSID=8ae6cd657c2554dae9a2cc8945799426; kt_ips=91.90.42.154; visited=1; kt_tcookie=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 04 Jan 2025 09:59:15 GMT
content-type: image/jpeg
content-length: 16584
last-modified: Tue, 31 Dec 2024 12:46:54 GMT
etag: "6773e7be-40c8"
expires: Wed, 31 Dec 2025 16:45:12 GMT
cache-control: max-age=31536000
strict-transport-security: max-age=31536000;
cf-cache-status: HIT
age: 321243
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=BgzrK1G2K5DSpPY4MJORe%2BKdXPMpF8npyhbzFboZMqzB7HLkETacxFKEmKaH8K02IuuxLERgnUcZ46JcqCvREC7QgZN3yGaeiscGzEnLQox%2BmtrkhRQDwnUazaE%2FEPx70g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8fca5ff38f1256bb-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=4532&min_rtt=1072&rtt_var=3859&sent=468&recv=59&lost=0&retrans=0&sent_bytes=499153&recv_bytes=14350&delivery_rate=1285558&cwnd=147000&unsent_bytes=0&cid=1622fd8012c0d374&ts=4491&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| x2.rusoska.vip/contents/videos_screenshots/191000/191282/642x361/1.jpg | 104.21.95.42 | 200 OK | 14 kB |
URL GET HTTP/3x2.rusoska.vip/contents/videos_screenshots/191000/191282/642x361/1.jpg IP104.21.95.42:443
Requested byhttps://x2.rusoska.vip/young/2 CertificateIssuerGoogle Trust Services Subjectrusoska.vip FingerprintC2:CE:DA:60:BD:8D:23:87:90:9E:30:C7:33:6C:95:06:9C:7E:4D:19 ValidityTue, 17 Dec 2024 05:25:51 GMT - Mon, 17 Mar 2025 06:23:44 GMT
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 642x361, Scaling: [none]x[none], YUV color, decoders should clamp Hash6c275734a1344e7d0cc2fe8bee10a7fb 51c8c5d52b7ccbec60f400a053e7bb6dbcef848e 57537fa8ff9eb7016830896ee62ece748967e0cb9a580592d43e3ed2cf66486d
GET /contents/videos_screenshots/191000/191282/642x361/1.jpg HTTP/1.1
Host: x2.rusoska.vip
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://x2.rusoska.vip/young/2
Cookie: PHPSESSID=8ae6cd657c2554dae9a2cc8945799426; kt_ips=91.90.42.154; visited=1; kt_tcookie=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 04 Jan 2025 09:59:15 GMT
content-type: image/jpeg
content-length: 14326
last-modified: Tue, 31 Dec 2024 12:10:24 GMT
etag: "6773df30-37f6"
expires: Wed, 31 Dec 2025 12:55:10 GMT
cache-control: max-age=31536000
strict-transport-security: max-age=31536000;
cf-cache-status: HIT
age: 335045
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=o%2BOAfvIrA1338Yw%2BTYXQQsCOL281z9fzVUhKlCZvGz4%2F6I4VAgGJeoK4j%2FXcCzRxcDyrHjN66W0s%2BG8CE8xUrVtetaAO36CdocMczKjTPeDVwP1xrdTiA9OWG%2ByXuh4Eng%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8fca5ff38f1356bb-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=4532&min_rtt=1072&rtt_var=3859&sent=485&recv=59&lost=0&retrans=0&sent_bytes=517907&recv_bytes=14350&delivery_rate=1285558&cwnd=147000&unsent_bytes=0&cid=1622fd8012c0d374&ts=4492&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| x2.rusoska.vip/contents/videos_screenshots/191000/191154/642x361/1.jpg | 104.21.95.42 | 200 OK | 22 kB |
URL GET HTTP/3x2.rusoska.vip/contents/videos_screenshots/191000/191154/642x361/1.jpg IP104.21.95.42:443
Requested byhttps://x2.rusoska.vip/young/2 CertificateIssuerGoogle Trust Services Subjectrusoska.vip FingerprintC2:CE:DA:60:BD:8D:23:87:90:9E:30:C7:33:6C:95:06:9C:7E:4D:19 ValidityTue, 17 Dec 2024 05:25:51 GMT - Mon, 17 Mar 2025 06:23:44 GMT
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 642x361, Scaling: [none]x[none], YUV color, decoders should clamp Hash7044ff33bc7d3bafd08b1b189213217b ae5845607de2b63fafe9351c69a4526440dde83b baab31c7243b634f7e14c8f3ce42f6aa7250f75fb73edbfe0a7a4ae248417155
GET /contents/videos_screenshots/191000/191154/642x361/1.jpg HTTP/1.1
Host: x2.rusoska.vip
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://x2.rusoska.vip/young/2
Cookie: PHPSESSID=8ae6cd657c2554dae9a2cc8945799426; kt_ips=91.90.42.154; visited=1; kt_tcookie=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 04 Jan 2025 09:59:15 GMT
content-type: image/jpeg
content-length: 21546
last-modified: Tue, 24 Dec 2024 07:27:53 GMT
etag: "676a6279-542a"
expires: Wed, 24 Dec 2025 07:43:35 GMT
cache-control: max-age=31536000
strict-transport-security: max-age=31536000;
cf-cache-status: HIT
age: 958540
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=BeHSSt6d7RdVXvWDsBkHgDWZWdBgT2%2BvtaYJWq46v8GWy4yZjijiIpx5tcT%2FKxQo5SlNja8fucIsVbC4axN5eAuNDghDYIzI3Cm7T%2BALfMJkQCJdCoZ1741izOi7SDEATg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8fca5ff38f1556bb-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=4532&min_rtt=1072&rtt_var=3859&sent=498&recv=59&lost=0&retrans=0&sent_bytes=533332&recv_bytes=14350&delivery_rate=1285558&cwnd=147000&unsent_bytes=0&cid=1622fd8012c0d374&ts=4493&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| octotracking.com/ | 104.21.5.57 | 200 OK | 2.0 kB |
IP104.21.5.57:443
Requested byhttps://x2.rusoska.vip/young/2 CertificateIssuerGoogle Trust Services Subjectoctotracking.com FingerprintAC:29:90:CB:25:1B:5D:2B:70:67:AF:F8:5F:A4:7E:B2:D1:59:6B:93 ValidityTue, 26 Nov 2024 14:12:08 GMT - Mon, 24 Feb 2025 14:12:07 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (1975), with no line terminators Hasha93fda1c98feffe14121adaabe534cd3 4f009f796f024756c7cd52f30e3aaf08c8de6b41 292c4781652d8c32c55706c5146fcd98f30f9342b21e497664d6c5e3927d8229
GET / HTTP/1.1
Host: octotracking.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://x2.rusoska.vip/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 04 Jan 2025 09:59:12 GMT
content-type: text/html
last-modified: Thu, 03 Oct 2024 07:57:53 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 1290
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dj1aRTPTi4nAL03rykg88zcurrq%2Fqbh2QthZBsWyzYAJ8Lhu%2FCCy7eD78q95FLiG4vvi4ou8o7ZW%2FpqKJoBBA7xOieP9IJP79f3GAn%2FF75exnuRiQkKSNpCyX0SAt2N9sc8Z"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8fca5fdc1f2e5699-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=1316&min_rtt=454&rtt_var=1754&sent=9&recv=11&lost=0&retrans=1&sent_bytes=3302&recv_bytes=1314&delivery_rate=6983922&cwnd=255&unsent_bytes=0&cid=d83b511f8d78fe7d&ts=32&x=0"
X-Firefox-Spdy: h2
|
|
| afae561ed5.3165de3ff8.com/89c6f2d96eaf4cf8b184cce2bcd582d8.js | 45.133.44.53 | 200 OK | 122 kB |
URL GET HTTP/2afae561ed5.3165de3ff8.com/89c6f2d96eaf4cf8b184cce2bcd582d8.js IP45.133.44.53:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://x2.rusoska.vip/young/2 CertificateIssuerLet's Encrypt Subjectafae561ed5.3165de3ff8.com Fingerprint79:25:E0:7A:73:58:C1:6E:B8:40:26:B1:B2:67:EC:65:87:5A:1E:22 ValidityWed, 01 Jan 2025 02:14:58 GMT - Tue, 01 Apr 2025 02:14:57 GMT
Size122 kB (122015 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /89c6f2d96eaf4cf8b184cce2bcd582d8.js HTTP/1.1
Host: afae561ed5.3165de3ff8.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://x2.rusoska.vip
DNT: 1
Connection: keep-alive
Referer: https://x2.rusoska.vip/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 04 Jan 2025 09:59:12 GMT
content-type: application/javascript; charset=utf-8
server: nginx/1.18.0
last-modified: Thu, 05 Dec 2024 14:47:03 GMT
etag: W/"6751bce7-1dc9f"
content-encoding: gzip
expires: Sat, 04 Jan 2025 10:04:12 GMT
cache-control: max-age=300
x-proxy-cache: HIT
x-cdn-host-id: ds8137
access-control-allow-origin: *
X-Firefox-Spdy: h2
|
|
| sitewithg.com/sweetie/hello.min.js?id=1615263669 |  23.109.94.28 | 200 OK | 93 kB |
URL GET HTTP/2sitewithg.com/sweetie/hello.min.js?id=1615263669 IP23.109.94.28:443
Requested byhttps://x2.rusoska.vip/young/2 CertificateIssuerLet's Encrypt Subjectsitewithg.com Fingerprint54:28:2D:1D:2B:A0:DD:BF:D5:18:3C:6E:AA:04:22:96:3C:E9:EE:54 ValidityWed, 18 Dec 2024 05:47:44 GMT - Tue, 18 Mar 2025 05:47:43 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sweetie/hello.min.js?id=1615263669 HTTP/1.1
Host: sitewithg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://x2.rusoska.vip/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.21.6
date: Sat, 04 Jan 2025 09:59:11 GMT
content-type: application/javascript
last-modified: Fri, 27 Dec 2024 10:16:41 GMT
etag: W/"676e7e89-16a61"
expires: Tue, 14 Jan 2025 09:59:11 GMT
cache-control: max-age=864000
x-frame-options: SAMEORIGIN
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| riamiavid.com/sweetie/check.min.js | 23.109.94.28 | 200 OK | 36 kB |
URL GET HTTP/2riamiavid.com/sweetie/check.min.js IP23.109.94.28:443
Requested byhttps://x2.rusoska.vip/young/2 CertificateIssuerLet's Encrypt Subjectriamiavid.com Fingerprint18:EE:DB:04:C3:99:BD:5A:72:F9:96:11:A2:92:C0:AA:54:14:36:AC ValiditySun, 15 Dec 2024 01:35:43 GMT - Sat, 15 Mar 2025 01:35:42 GMT
File typeJavaScript source, ASCII text, with very long lines (36155) Hash7047f38f1e0df7670021c6e775d1e73c 5694642b7de28cb700602411297693756beb094a c85183390b23326532649a0091ba89aa4d9d1422e85535d6c00b36ec1db5ed4f
GET /sweetie/check.min.js HTTP/1.1
Host: riamiavid.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.21.6
date: Sat, 04 Jan 2025 09:59:12 GMT
content-type: application/javascript
last-modified: Thu, 14 Sep 2023 14:24:27 GMT
etag: W/"6503179b-8d3c"
expires: Tue, 14 Jan 2025 09:59:12 GMT
cache-control: max-age=864000
x-frame-options: SAMEORIGIN
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| x2.rusoska.vip/static/images/flags/ru.svg | 104.21.95.42 | 200 OK | 286 B |
URL GET HTTP/3x2.rusoska.vip/static/images/flags/ru.svg IP104.21.95.42:443
Requested byhttps://x2.rusoska.vip/young/2 CertificateIssuerGoogle Trust Services Subjectrusoska.vip FingerprintC2:CE:DA:60:BD:8D:23:87:90:9E:30:C7:33:6C:95:06:9C:7E:4D:19 ValidityTue, 17 Dec 2024 05:25:51 GMT - Mon, 17 Mar 2025 06:23:44 GMT
File typeSVG Scalable Vector Graphics image Hash269627792a27754ea4562bcf973f29cf 18008f07fa5d612bee39e8a5f138eb1c71d2bd1b 96f78e49c822d8e7f20b3c0f8a48210eec10e6e7a80e6a0efaedd294f9b8c15d
GET /static/images/flags/ru.svg HTTP/1.1
Host: x2.rusoska.vip
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://x2.rusoska.vip/young/2
Cookie: PHPSESSID=8ae6cd657c2554dae9a2cc8945799426; kt_ips=91.90.42.154
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 Jan 2025 09:59:11 GMT
content-type: image/svg+xml
last-modified: Tue, 20 Sep 2022 17:03:35 GMT
etag: W/"6329f267-11e"
expires: Wed, 24 Dec 2025 04:12:47 GMT
cache-control: max-age=31536000
strict-transport-security: max-age=31536000;
content-encoding: gzip
cf-cache-status: HIT
age: 971184
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=iF2il%2Fs2oTYQYxnbeD%2F%2Fixe1Y4fEYM5cP8HB7xxke5Q1yQ21JYqXG%2FuadFDmupGJCnx%2B3Wt49pd9L%2BWgo7JAaJNZ1Au7%2FVMxL%2BxCIZLDV2Ui75RSpkPOQVeH8Jzt3J3IXQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8fca5fd95b4056bb-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=17567&min_rtt=13652&rtt_var=7915&sent=34&recv=18&lost=0&retrans=0&sent_bytes=16374&recv_bytes=4616&delivery_rate=43142&cwnd=12000&unsent_bytes=0&cid=1622fd8012c0d374&ts=307&x=1", cfExtPri, cfHdrFlush;dur=1
|
|
| | 104.21.95.42 | 200 OK | 236 kB |
URL User Request GET HTTP/2IP104.21.95.42:443
CertificateIssuerGoogle Trust Services Subjectrusoska.vip FingerprintC2:CE:DA:60:BD:8D:23:87:90:9E:30:C7:33:6C:95:06:9C:7E:4D:19 ValidityTue, 17 Dec 2024 05:25:51 GMT - Mon, 17 Mar 2025 06:23:44 GMT
Size236 kB (236488 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /young/2 HTTP/1.1
Host: x2.rusoska.vip
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 04 Jan 2025 09:59:11 GMT
content-type: text/html; charset=utf-8
x-powered-by: PHP/7.4.33
x-frame-options: SAMEORIGIN
set-cookie: PHPSESSID=8ae6cd657c2554dae9a2cc8945799426; path=/; domain=.x2.rusoska.vip; secure; SameSite=None
kt_ips=91.90.42.154; expires=Sun, 05-Jan-2025 09:59:11 GMT; Max-Age=86400; path=/; domain=.x2.rusoska.vip; secure; SameSite=None
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
strict-transport-security: max-age=31536000;
cf-cache-status: DYNAMIC
vary: accept-encoding
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=NHPVtrEO9HyVg49hr5T%2FfGlkFvq4SIzK%2BUzOu5c6tms4JJ9gO5AeSOoZD8uNQVLggBTZhDLDP%2BuxCmTgOuYBdrDjs8NU772ReZSv4yZaML6i3wAYI5zOLyS4cCE4ikFbAg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8fca5fd6ee3cb503-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=6960&min_rtt=432&rtt_var=12667&sent=9&recv=12&lost=0&retrans=1&sent_bytes=3287&recv_bytes=1299&delivery_rate=6223495&cwnd=256&unsent_bytes=0&cid=e408ea8086d983ad&ts=100&x=0"
X-Firefox-Spdy: h2
|
|
| x2.rusoska.vip/contents/videos_screenshots/191000/191161/642x361/1.jpg | 104.21.95.42 | 200 OK | 14 kB |
URL GET HTTP/3x2.rusoska.vip/contents/videos_screenshots/191000/191161/642x361/1.jpg IP104.21.95.42:443
Requested byhttps://x2.rusoska.vip/young/2 CertificateIssuerGoogle Trust Services Subjectrusoska.vip FingerprintC2:CE:DA:60:BD:8D:23:87:90:9E:30:C7:33:6C:95:06:9C:7E:4D:19 ValidityTue, 17 Dec 2024 05:25:51 GMT - Mon, 17 Mar 2025 06:23:44 GMT
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 642x361, Scaling: [none]x[none], YUV color, decoders should clamp Hashacfcc600d2ea3f2fbdb7ad9b72fc6c24 6795c6e24265894f361654dcbd561c25e99b0f94 7c3dc663cde5d9e247680fe1bf5077e1b4ffbfd7951436f693d078cf5884a34e
GET /contents/videos_screenshots/191000/191161/642x361/1.jpg HTTP/1.1
Host: x2.rusoska.vip
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://x2.rusoska.vip/young/2
Cookie: PHPSESSID=8ae6cd657c2554dae9a2cc8945799426; kt_ips=91.90.42.154; visited=1; kt_tcookie=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 Jan 2025 09:59:15 GMT
content-type: image/jpeg
content-length: 14378
last-modified: Tue, 24 Dec 2024 13:07:31 GMT
etag: "676ab213-382a"
expires: Wed, 24 Dec 2025 13:40:22 GMT
cache-control: max-age=31536000
strict-transport-security: max-age=31536000;
cf-cache-status: HIT
age: 937133
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=nO%2FADomqA3YI8OEDtoOsK63s5o%2BcXFV2rMKHO8kyPMfT%2FyeYvykA4%2BqxaDrcd3MqHKptYKgf8nWlthj6eL1UtBm7UY4BOcW0q16Iwj2%2B4uH0%2FgnNGNMvzg4PYzu6Bucm5w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8fca5ff37f0a56bb-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=4952&min_rtt=1072&rtt_var=5061&sent=455&recv=57&lost=0&retrans=0&sent_bytes=483678&recv_bytes=14258&delivery_rate=6053234&cwnd=147000&unsent_bytes=0&cid=1622fd8012c0d374&ts=4485&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| sitewithg.com/silence/4010?n=bmigxycm&ab=0&ts=1735984755993&&&rt=0&id=1735984752117&tz=0&ps=1735984751127&meta%5BapplePay%5D=0&meta%5Barch%5D=255&meta%5Bwidth%5D=1280&meta%5Bheight%5D=1024&meta%5Bratio%5D=1&&&meta%5BcolorDepth%5D=24&meta%5Bgamut%5D=srgb&meta%5Bcores%5D=48&meta%5BhashC%5D=8042803751899180&meta%5BhashM%5D=7636566414559532&&action=link&userAgent=Mozilla%2F5.0%20%28X11%3B%20Linux%20x86_64%3B%20rv%3A96.0%29%20Gecko%2F20100101%20Firefox%2F96.0&location=https%3A%2F%2Fx2.rusoska.vip%2Fyoung%2F2&title=%D0%9C%D0%BE%D0%BB%D0%BE%D0%B4%D1%8B%D0%B5%20%D0%BF%D0%BE%D1%80%D0%BD%D0%BE.%20%D0%A1%D0%BC%D0%BE%D1%82%D1%80%D0%B5%D1%82%D1%8C%20%D0%BE%D0%BD%D0%BB%D0%B0%D0%B9%D0%BD%2025588%20%D0%BF%D0%BE%D1%80%D0%BD%D0%BE%20%D0%B2%D0%B8%D0%B4%D0%B5%D0%BE%21%2C%20%D1%81%D1%82%D1%80%D0%B0%D0%BD%D0%B8%D1%86%D0%B0%202&hardwareLogical=48&orientation=landscape&&resolution=1280x1024&screenWidth=1280&screenHeight=1024&devicePixelRatio=1&description=%D0%9B%D1%83%D1%87%D1%88%D0%B5%D0%B5%20%D0%BF%D0%BE%D1%80%D0%BD%D0%BE%20%D0%9C%D0%BE%D0%BB%D0%BE%D0%B4%D1%8B%D0%B5%20-%20%D0%B1%D1%8B%D0%BB%D0%BE%20%D0%B4%D0%BE%D0%B1%D0%B0%D0%B2%D0%BB%D0%B5%D0%BD%D0%BE%2025588%20%D1%81%D0%B5%D0%BA%D1%81%20%D0%B2%D0%B8%D0%B4%D0%B5%D0%BE%20%28%D0%BC%D0%BE%D0%B6%D0%BD%D0%BE%20%D1%81%D0%BC%D0%BE%D1%82%D1%80%D0%B5%D1%82%D1%8C%20%D0%BE%D0%BD%D0%BB%D0%B0%D0%B9%D0%BD%20%D0%B1%D0%B5%D1%81%D0%BF%D0%BB%D0%B0%D1%82%D0%BD%D0%BE%29.%20%D1%81%D1%82%D1%80%D0%B0%D0%BD%D0%B8%D1%86%D0%B0%202.& | 0.0.0.0 | 200 OK | 0 B |
URL GET sitewithg.com/silence/4010?n=bmigxycm&ab=0&ts=1735984755993&&&rt=0&id=1735984752117&tz=0&ps=1735984751127&meta%5BapplePay%5D=0&meta%5Barch%5D=255&meta%5Bwidth%5D=1280&meta%5Bheight%5D=1024&meta%5Bratio%5D=1&&&meta%5BcolorDepth%5D=24&meta%5Bgamut%5D=srgb&meta%5Bcores%5D=48&meta%5BhashC%5D=8042803751899180&meta%5BhashM%5D=7636566414559532&&action=link&userAgent=Mozilla%2F5.0%20%28X11%3B%20Linux%20x86_64%3B%20rv%3A96.0%29%20Gecko%2F20100101%20Firefox%2F96.0&location=https%3A%2F%2Fx2.rusoska.vip%2Fyoung%2F2&title=%D0%9C%D0%BE%D0%BB%D0%BE%D0%B4%D1%8B%D0%B5%20%D0%BF%D0%BE%D1%80%D0%BD%D0%BE.%20%D0%A1%D0%BC%D0%BE%D1%82%D1%80%D0%B5%D1%82%D1%8C%20%D0%BE%D0%BD%D0%BB%D0%B0%D0%B9%D0%BD%2025588%20%D0%BF%D0%BE%D1%80%D0%BD%D0%BE%20%D0%B2%D0%B8%D0%B4%D0%B5%D0%BE%21%2C%20%D1%81%D1%82%D1%80%D0%B0%D0%BD%D0%B8%D1%86%D0%B0%202&hardwareLogical=48&orientation=landscape&&resolution=1280x1024&screenWidth=1280&screenHeight=1024&devicePixelRatio=1&description=%D0%9B%D1%83%D1%87%D1%88%D0%B5%D0%B5%20%D0%BF%D0%BE%D1%80%D0%BD%D0%BE%20%D0%9C%D0%BE%D0%BB%D0%BE%D0%B4%D1%8B%D0%B5%20-%20%D0%B1%D1%8B%D0%BB%D0%BE%20%D0%B4%D0%BE%D0%B1%D0%B0%D0%B2%D0%BB%D0%B5%D0%BD%D0%BE%2025588%20%D1%81%D0%B5%D0%BA%D1%81%20%D0%B2%D0%B8%D0%B4%D0%B5%D0%BE%20%28%D0%BC%D0%BE%D0%B6%D0%BD%D0%BE%20%D1%81%D0%BC%D0%BE%D1%82%D1%80%D0%B5%D1%82%D1%8C%20%D0%BE%D0%BD%D0%BB%D0%B0%D0%B9%D0%BD%20%D0%B1%D0%B5%D1%81%D0%BF%D0%BB%D0%B0%D1%82%D0%BD%D0%BE%29.%20%D1%81%D1%82%D1%80%D0%B0%D0%BD%D0%B8%D1%86%D0%B0%202.& IP0.0.0.0:0
Requested byhttps://x2.rusoska.vip/young/2 CertificateIssuerLet's Encrypt Subjectsitewithg.com Fingerprint54:28:2D:1D:2B:A0:DD:BF:D5:18:3C:6E:AA:04:22:96:3C:E9:EE:54 ValidityWed, 18 Dec 2024 05:47:44 GMT - Tue, 18 Mar 2025 05:47:43 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /silence/4010?n=bmigxycm&ab=0&ts=1735984755993&&&rt=0&id=1735984752117&tz=0&ps=1735984751127&meta%5BapplePay%5D=0&meta%5Barch%5D=255&meta%5Bwidth%5D=1280&meta%5Bheight%5D=1024&meta%5Bratio%5D=1&&&meta%5BcolorDepth%5D=24&meta%5Bgamut%5D=srgb&meta%5Bcores%5D=48&meta%5BhashC%5D=8042803751899180&meta%5BhashM%5D=7636566414559532&&action=link&userAgent=Mozilla%2F5.0%20%28X11%3B%20Linux%20x86_64%3B%20rv%3A96.0%29%20Gecko%2F20100101%20Firefox%2F96.0&location=https%3A%2F%2Fx2.rusoska.vip%2Fyoung%2F2&title=%D0%9C%D0%BE%D0%BB%D0%BE%D0%B4%D1%8B%D0%B5%20%D0%BF%D0%BE%D1%80%D0%BD%D0%BE.%20%D0%A1%D0%BC%D0%BE%D1%82%D1%80%D0%B5%D1%82%D1%8C%20%D0%BE%D0%BD%D0%BB%D0%B0%D0%B9%D0%BD%2025588%20%D0%BF%D0%BE%D1%80%D0%BD%D0%BE%20%D0%B2%D0%B8%D0%B4%D0%B5%D0%BE%21%2C%20%D1%81%D1%82%D1%80%D0%B0%D0%BD%D0%B8%D1%86%D0%B0%202&hardwareLogical=48&orientation=landscape&&resolution=1280x1024&screenWidth=1280&screenHeight=1024&devicePixelRatio=1&description=%D0%9B%D1%83%D1%87%D1%88%D0%B5%D0%B5%20%D0%BF%D0%BE%D1%80%D0%BD%D0%BE%20%D0%9C%D0%BE%D0%BB%D0%BE%D0%B4%D1%8B%D0%B5%20-%20%D0%B1%D1%8B%D0%BB%D0%BE%20%D0%B4%D0%BE%D0%B1%D0%B0%D0%B2%D0%BB%D0%B5%D0%BD%D0%BE%2025588%20%D1%81%D0%B5%D0%BA%D1%81%20%D0%B2%D0%B8%D0%B4%D0%B5%D0%BE%20%28%D0%BC%D0%BE%D0%B6%D0%BD%D0%BE%20%D1%81%D0%BC%D0%BE%D1%82%D1%80%D0%B5%D1%82%D1%8C%20%D0%BE%D0%BD%D0%BB%D0%B0%D0%B9%D0%BD%20%D0%B1%D0%B5%D1%81%D0%BF%D0%BB%D0%B0%D1%82%D0%BD%D0%BE%29.%20%D1%81%D1%82%D1%80%D0%B0%D0%BD%D0%B8%D1%86%D0%B0%202.& HTTP/1.1
Host: sitewithg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://x2.rusoska.vip/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.21.6
date: Sat, 04 Jan 2025 09:59:21 GMT
content-type: text/html; charset=utf-8
access-control-allow-credentials: true
access-control-allow-origin:
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-WoW64, Sec-CH-UA-Model
x-frame-options: SAMEORIGIN
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| x2.rusoska.vip/static/images/flags/it.svg | 104.21.95.42 | 200 OK | 292 B |
URL GET HTTP/3x2.rusoska.vip/static/images/flags/it.svg IP104.21.95.42:443
Requested byhttps://x2.rusoska.vip/young/2 CertificateIssuerGoogle Trust Services Subjectrusoska.vip FingerprintC2:CE:DA:60:BD:8D:23:87:90:9E:30:C7:33:6C:95:06:9C:7E:4D:19 ValidityTue, 17 Dec 2024 05:25:51 GMT - Mon, 17 Mar 2025 06:23:44 GMT
File typeSVG Scalable Vector Graphics image Hash2d1933c24fdbbfc19bd92ed694bcd88e c71c74e8d8b5b7f7c224802e14e84465de57ee1b deb89f6ab426f6da6bdc32b287a1d21e16dfb05f0b65f3ed0534e9d66d928088
GET /static/images/flags/it.svg HTTP/1.1
Host: x2.rusoska.vip
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://x2.rusoska.vip/young/2
Cookie: PHPSESSID=8ae6cd657c2554dae9a2cc8945799426; kt_ips=91.90.42.154
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 Jan 2025 09:59:11 GMT
content-type: image/svg+xml
last-modified: Tue, 20 Sep 2022 17:03:52 GMT
etag: W/"6329f278-124"
expires: Wed, 24 Dec 2025 04:12:47 GMT
cache-control: max-age=31536000
strict-transport-security: max-age=31536000;
content-encoding: gzip
cf-cache-status: HIT
age: 971184
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jQJET4ZbZ1T%2FD%2Bp2K5Nr%2FSuNIKxKqTkKGqIDGUKrtUCTsdMZUVFfagOiZ2nsGITqVCmEXM9m%2BkJ%2BnPMP%2FGycjSw2LahiBQtpr4N3qwgN8IzGxiVWadED%2B7FYjUB0kZ2yiQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8fca5fd95b4956bb-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=16728&min_rtt=10858&rtt_var=7613&sent=41&recv=20&lost=0&retrans=0&sent_bytes=22400&recv_bytes=4995&delivery_rate=42821&cwnd=24000&unsent_bytes=0&cid=1622fd8012c0d374&ts=309&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| octo25.me/ocean/zone?zoneId=5884 | 104.21.94.29 | 200 OK | 454 B |
URL GET HTTP/2octo25.me/ocean/zone?zoneId=5884 IP104.21.94.29:443
Requested byhttps://x2.rusoska.vip/young/2 CertificateIssuerGoogle Trust Services Subjectocto25.me FingerprintBC:CC:8D:BE:C1:3C:2E:D6:7C:9A:45:72:A2:81:D4:FD:F9:B6:92:0A ValidityThu, 28 Nov 2024 06:12:04 GMT - Wed, 26 Feb 2025 06:12:03 GMT
File typetroff or preprocessor input, ASCII text, with very long lines (531), with no line terminators Hash3742ded24cf4e86a60d02d5c253fb467 5e2a6a536b61fe261802c1eaf9b30d32d4e36ec1 ecb5bca145635949a39068c4104a2aa119033c2d5cbbd5f1c35e63127d47e1c6
GET /ocean/zone?zoneId=5884 HTTP/1.1
Host: octo25.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://x2.rusoska.vip/
Origin: https://x2.rusoska.vip
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 04 Jan 2025 09:59:12 GMT
content-type: application/json
access-control-allow-origin: https://x2.rusoska.vip
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
access-control-expose-headers: Content-Length,Content-Range
access-control-allow-credentials: true
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RNgXek5k8Ud41iavn3X6%2BDnw1cnRvBSv%2FnVJJJDOWTjOThmvpRT%2FT0Js8yODYpNmEyuVboftYBTxk3RhGjdgpPmwP3DSBO7d0TrFsdZ1YAMbEwCZx6nhf%2FjXyPY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8fca5fde8b9d568d-OSL
content-encoding: br
server-timing: cfL4;desc="?proto=TCP&rtt=1047&min_rtt=497&rtt_var=1044&sent=9&recv=11&lost=0&retrans=1&sent_bytes=3282&recv_bytes=1134&delivery_rate=6703703&cwnd=256&unsent_bytes=0&cid=5ae025c78f0e0f2d&ts=66&x=0"
X-Firefox-Spdy: h2
|
|
| x2.rusoska.vip/static/images/flags/fr.svg | 104.21.95.42 | 200 OK | 292 B |
URL GET HTTP/3x2.rusoska.vip/static/images/flags/fr.svg IP104.21.95.42:443
Requested byhttps://x2.rusoska.vip/young/2 CertificateIssuerGoogle Trust Services Subjectrusoska.vip FingerprintC2:CE:DA:60:BD:8D:23:87:90:9E:30:C7:33:6C:95:06:9C:7E:4D:19 ValidityTue, 17 Dec 2024 05:25:51 GMT - Mon, 17 Mar 2025 06:23:44 GMT
File typeSVG Scalable Vector Graphics image Hash5af1c1673ee1534dc3ff21669d263082 55cbbc4fc89e14b8da334216136b439febca5d28 068a218c9a91d8a8994e00384da7f598b924e27a046edfb22da1541994392a48
GET /static/images/flags/fr.svg HTTP/1.1
Host: x2.rusoska.vip
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://x2.rusoska.vip/young/2
Cookie: PHPSESSID=8ae6cd657c2554dae9a2cc8945799426; kt_ips=91.90.42.154
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 Jan 2025 09:59:11 GMT
content-type: image/svg+xml
last-modified: Tue, 20 Sep 2022 17:03:33 GMT
etag: W/"6329f265-124"
expires: Wed, 24 Dec 2025 04:12:47 GMT
cache-control: max-age=31536000
strict-transport-security: max-age=31536000;
content-encoding: gzip
cf-cache-status: HIT
age: 971184
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vrW%2FDeh96gwcF0ZuPzXxYLtpliXhSVVlKCGDNcNscd0cTlbGOoq%2FSM%2BaJXg61Qlh8psMNHDI9UOB0NOZOq%2Fs5bIjJ9PBvRzjW1H5AX08I7Ws7wTAQYemC89tY5HCHVBRcA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8fca5fd95b4856bb-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=13688&min_rtt=1996&rtt_var=9677&sent=68&recv=25&lost=0&retrans=0&sent_bytes=48935&recv_bytes=6316&delivery_rate=3688615&cwnd=48000&unsent_bytes=0&cid=1622fd8012c0d374&ts=318&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| x2.rusoska.vip/static/images/flags/ua.svg | 104.21.95.42 | 200 OK | 238 B |
URL GET HTTP/3x2.rusoska.vip/static/images/flags/ua.svg IP104.21.95.42:443
Requested byhttps://x2.rusoska.vip/young/2 CertificateIssuerGoogle Trust Services Subjectrusoska.vip FingerprintC2:CE:DA:60:BD:8D:23:87:90:9E:30:C7:33:6C:95:06:9C:7E:4D:19 ValidityTue, 17 Dec 2024 05:25:51 GMT - Mon, 17 Mar 2025 06:23:44 GMT
File typeSVG Scalable Vector Graphics image Hash7275b83d73ae80d088aa0f64b2067677 617b5b21d59cec8fe8707afa27b608a3c90954e8 46c34eb355378e3056d8e1401d9a60314586a364187b75c6074d805d55ad33d6
GET /static/images/flags/ua.svg HTTP/1.1
Host: x2.rusoska.vip
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://x2.rusoska.vip/young/2
Cookie: PHPSESSID=8ae6cd657c2554dae9a2cc8945799426; kt_ips=91.90.42.154
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 Jan 2025 09:59:11 GMT
content-type: image/svg+xml
last-modified: Tue, 20 Sep 2022 17:03:42 GMT
etag: W/"6329f26e-ee"
expires: Wed, 24 Dec 2025 04:12:47 GMT
cache-control: max-age=31536000
strict-transport-security: max-age=31536000;
content-encoding: gzip
cf-cache-status: HIT
age: 971184
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LnbPqyYE19S4My1d%2F0R%2FE3B%2FcZDlVBZRola1ZMh%2BMl9M%2Bt50oRicFgMtgt5SWFp1D4f3cvlPos1JQLnFehIaFUheMyO4Q9yrKqRwJnYplpWsF3Sp5GYvPHBK0BBNVAzviQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8fca5fd96b4e56bb-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=16728&min_rtt=10858&rtt_var=7613&sent=58&recv=21&lost=0&retrans=0&sent_bytes=40400&recv_bytes=5330&delivery_rate=42821&cwnd=24000&unsent_bytes=0&cid=1622fd8012c0d374&ts=314&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| sitewithg.com/silence/4010?n=bmvzqVDb&ab=0&ts=1735984752118&&&rt=0&id=1735984752117&tz=0&ps=1735984751127&meta=undefined&action=init | 0.0.0.0 | 200 OK | 0 B |
URL GET sitewithg.com/silence/4010?n=bmvzqVDb&ab=0&ts=1735984752118&&&rt=0&id=1735984752117&tz=0&ps=1735984751127&meta=undefined&action=init IP0.0.0.0:0
Requested byhttps://x2.rusoska.vip/young/2 CertificateIssuerLet's Encrypt Subjectsitewithg.com Fingerprint54:28:2D:1D:2B:A0:DD:BF:D5:18:3C:6E:AA:04:22:96:3C:E9:EE:54 ValidityWed, 18 Dec 2024 05:47:44 GMT - Tue, 18 Mar 2025 05:47:43 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /silence/4010?n=bmvzqVDb&ab=0&ts=1735984752118&&&rt=0&id=1735984752117&tz=0&ps=1735984751127&meta=undefined&action=init HTTP/1.1
Host: sitewithg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://x2.rusoska.vip/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.21.6
date: Sat, 04 Jan 2025 09:59:15 GMT
content-type: text/html; charset=utf-8
access-control-allow-credentials: true
access-control-allow-origin:
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-WoW64, Sec-CH-UA-Model
x-frame-options: SAMEORIGIN
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| x2.rusoska.vip/static/images/flags/eg.svg | 104.21.95.42 | 200 OK | 9.9 kB |
URL GET HTTP/3x2.rusoska.vip/static/images/flags/eg.svg IP104.21.95.42:443
Requested byhttps://x2.rusoska.vip/young/2 CertificateIssuerGoogle Trust Services Subjectrusoska.vip FingerprintC2:CE:DA:60:BD:8D:23:87:90:9E:30:C7:33:6C:95:06:9C:7E:4D:19 ValidityTue, 17 Dec 2024 05:25:51 GMT - Mon, 17 Mar 2025 06:23:44 GMT
File typeSVG Scalable Vector Graphics image Hash9beb03332539696ff88fcecb004f5ef8 54fb219ff3223e221b9de8e7abaa772fd81d4520 11c049f134e2dbd742a725551366b387e8af8136a4407738a36432e10b51c2b3
GET /static/images/flags/eg.svg HTTP/1.1
Host: x2.rusoska.vip
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://x2.rusoska.vip/young/2
Cookie: PHPSESSID=8ae6cd657c2554dae9a2cc8945799426; kt_ips=91.90.42.154
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 Jan 2025 09:59:11 GMT
content-type: image/svg+xml
last-modified: Tue, 20 Sep 2022 17:03:56 GMT
etag: W/"6329f27c-26ab"
expires: Wed, 24 Dec 2025 04:12:48 GMT
cache-control: max-age=31536000
strict-transport-security: max-age=31536000;
content-encoding: gzip
cf-cache-status: HIT
age: 971183
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HqceWhcdttTK%2F2NRK1lm46Yf2I%2BZ2LihsQqXuDn2h3UwqMVjkAmlu%2BrMMSiGtjo5jyrv%2B9Mfs83K7qwAM0%2BvlYSEVkOtCUbOAUElXeFASu0lMtZ02EcmIjsax5ISKMLarw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8fca5fd97b6356bb-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=12289&min_rtt=1996&rtt_var=10056&sent=70&recv=26&lost=0&retrans=0&sent_bytes=51003&recv_bytes=6360&delivery_rate=464540&cwnd=48000&unsent_bytes=0&cid=1622fd8012c0d374&ts=322&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| x2.rusoska.vip/contents/videos_screenshots/191000/191221/642x361/1.jpg | 104.21.95.42 | 200 OK | 18 kB |
URL GET HTTP/3x2.rusoska.vip/contents/videos_screenshots/191000/191221/642x361/1.jpg IP104.21.95.42:443
Requested byhttps://x2.rusoska.vip/young/2 CertificateIssuerGoogle Trust Services Subjectrusoska.vip FingerprintC2:CE:DA:60:BD:8D:23:87:90:9E:30:C7:33:6C:95:06:9C:7E:4D:19 ValidityTue, 17 Dec 2024 05:25:51 GMT - Mon, 17 Mar 2025 06:23:44 GMT
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 642x361, Scaling: [none]x[none], YUV color, decoders should clamp Hash4599101f76b63376d53b8465cf3ea7d3 e8a248a6920a82aaa47087e3abe37e7c3cd987ae e310f37361f81bc47ec0f52c85caabab909344a5bab0d5104d79f66e07ad80b9
GET /contents/videos_screenshots/191000/191221/642x361/1.jpg HTTP/1.1
Host: x2.rusoska.vip
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://x2.rusoska.vip/young/2
Cookie: PHPSESSID=8ae6cd657c2554dae9a2cc8945799426; kt_ips=91.90.42.154; visited=1; kt_tcookie=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 Jan 2025 09:59:15 GMT
content-type: image/jpeg
content-length: 18058
last-modified: Sun, 29 Dec 2024 00:48:20 GMT
etag: "67709c54-468a"
expires: Mon, 29 Dec 2025 00:57:56 GMT
cache-control: max-age=31536000
strict-transport-security: max-age=31536000;
cf-cache-status: HIT
age: 550879
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=czPaNllpSzE6fiT1yyRP0FYVvuTpo3xmpIDGNUp0%2BLo0RzszMbXJpYEI7%2BngqfU%2Fdrl4fN1Om%2BSETKSofx3m4Pll9KpDHNm4cFGWlxBCj7IfMUK1vkk%2Fh6FkbtuHQj1TvA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8fca5ff32ec256bb-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=5190&min_rtt=1072&rtt_var=5188&sent=272&recv=43&lost=0&retrans=0&sent_bytes=277518&recv_bytes=9698&delivery_rate=3783526&cwnd=96000&unsent_bytes=0&cid=1622fd8012c0d374&ts=4432&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| x2.rusoska.vip/static/images/flags/pt.svg | 104.21.95.42 | 200 OK | 8.3 kB |
URL GET HTTP/3x2.rusoska.vip/static/images/flags/pt.svg IP104.21.95.42:443
Requested byhttps://x2.rusoska.vip/young/2 CertificateIssuerGoogle Trust Services Subjectrusoska.vip FingerprintC2:CE:DA:60:BD:8D:23:87:90:9E:30:C7:33:6C:95:06:9C:7E:4D:19 ValidityTue, 17 Dec 2024 05:25:51 GMT - Mon, 17 Mar 2025 06:23:44 GMT
File typeSVG Scalable Vector Graphics image Hash869d993cc78a8237a505b94a3a3d0001 cbee19b993e758cd1d354d6e25c939f5428bf339 3e32af0e9f4fa0725e48b90d15d9445c0477dd2e9f42c0b07ae6f7f5151dda36
GET /static/images/flags/pt.svg HTTP/1.1
Host: x2.rusoska.vip
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://x2.rusoska.vip/young/2
Cookie: PHPSESSID=8ae6cd657c2554dae9a2cc8945799426; kt_ips=91.90.42.154
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 Jan 2025 09:59:11 GMT
content-type: image/svg+xml
last-modified: Tue, 20 Sep 2022 17:03:54 GMT
etag: W/"6329f27a-2058"
expires: Wed, 24 Dec 2025 04:12:47 GMT
cache-control: max-age=31536000
strict-transport-security: max-age=31536000;
content-encoding: gzip
cf-cache-status: HIT
age: 971184
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RfKuwrIVaZNWvuy50ugsFKLbeceF75hxZNWtXgPaWgqXLt%2B3yvRPbOIs5IDw1B9G3GhmDujP1qmh44CqS29tk5%2Fet%2F2HKA5o%2F%2FoOLyzsGarErYC2Vsts%2FkJcDeuXjRMZbA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8fca5fd95b4c56bb-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=16728&min_rtt=10858&rtt_var=7613&sent=58&recv=21&lost=0&retrans=0&sent_bytes=40400&recv_bytes=5330&delivery_rate=42821&cwnd=24000&unsent_bytes=0&cid=1622fd8012c0d374&ts=311&x=1", cfExtPri, cfHdrFlush;dur=3
|
|
| x2.rusoska.vip/static/images/flags/cn.svg | 104.21.95.42 | 200 OK | 801 B |
URL GET HTTP/3x2.rusoska.vip/static/images/flags/cn.svg IP104.21.95.42:443
Requested byhttps://x2.rusoska.vip/young/2 CertificateIssuerGoogle Trust Services Subjectrusoska.vip FingerprintC2:CE:DA:60:BD:8D:23:87:90:9E:30:C7:33:6C:95:06:9C:7E:4D:19 ValidityTue, 17 Dec 2024 05:25:51 GMT - Mon, 17 Mar 2025 06:23:44 GMT
File typeSVG Scalable Vector Graphics image Hash24b98bd17b8eef6c3cf2d5bf672187d9 154db143923b3ea92fe87ce3bd81ac4d4c107ef6 21ce8aa554578f015da4218649a06a2dd71cf07bbdb66b121cf245f526cf44e4
GET /static/images/flags/cn.svg HTTP/1.1
Host: x2.rusoska.vip
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://x2.rusoska.vip/young/2
Cookie: PHPSESSID=8ae6cd657c2554dae9a2cc8945799426; kt_ips=91.90.42.154
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 Jan 2025 09:59:11 GMT
content-type: image/svg+xml
last-modified: Tue, 20 Sep 2022 17:03:45 GMT
etag: W/"6329f271-321"
expires: Wed, 24 Dec 2025 04:12:47 GMT
cache-control: max-age=31536000
strict-transport-security: max-age=31536000;
content-encoding: gzip
cf-cache-status: HIT
age: 971184
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=fZ7psup9zA3JdA6yVxN8DXSmyuZPi%2BwzbNAb49mmLcQ5rylLRzzAbVXEQoGGPTq6dSpwS52zcI1bCP%2Fw68h2xVbeQpzv8uu1buwVN6YhF1Tamj2U1MyrXMnPY2KpcxIyhg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8fca5fd96b5756bb-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=15358&min_rtt=5771&rtt_var=8449&sent=67&recv=24&lost=0&retrans=0&sent_bytes=47815&recv_bytes=6272&delivery_rate=4158473&cwnd=48000&unsent_bytes=0&cid=1622fd8012c0d374&ts=316&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| x2.rusoska.vip/static/js/q.js | 104.21.95.42 | 200 OK | 292 B |
URL GET HTTP/3x2.rusoska.vip/static/js/q.js IP104.21.95.42:443
Requested byhttps://x2.rusoska.vip/young/2 CertificateIssuerGoogle Trust Services Subjectrusoska.vip FingerprintC2:CE:DA:60:BD:8D:23:87:90:9E:30:C7:33:6C:95:06:9C:7E:4D:19 ValidityTue, 17 Dec 2024 05:25:51 GMT - Mon, 17 Mar 2025 06:23:44 GMT
File typeASCII text, with very long lines (310), with no line terminators Hashc9f17a85cd661e493f515ed85067b6d5 e19c5a0a4e0375cc713c2b6bca711809d9475b91 c141782002cefc6cee2caf3db07178f8682c65d9b391fc9b543fd57561d186fb
GET /static/js/q.js HTTP/1.1
Host: x2.rusoska.vip
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://x2.rusoska.vip/young/2
Cookie: PHPSESSID=8ae6cd657c2554dae9a2cc8945799426; kt_ips=91.90.42.154; visited=1; kt_tcookie=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 Jan 2025 09:59:15 GMT
content-type: application/javascript; charset=UTF-8
last-modified: Fri, 18 Nov 2022 08:09:21 GMT
etag: W/"63773db1-124"
expires: Wed, 24 Dec 2025 04:12:53 GMT
cache-control: max-age=31536000
strict-transport-security: max-age=31536000;
content-encoding: gzip
cf-cache-status: HIT
age: 971182
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=EZZbWyeGjNWYCz9sDTMa3q67h43AYWeog1Xho%2FiW70r2iaZQOUVzRlEwtg6999qmK%2BYDo0pGbZfTUyvUZzVt4L6QmGVYzlFagcWKaIyqVqB41e4jPxSkZDBB0%2BWgOC96DA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8fca5ff38f1656bb-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=4532&min_rtt=1072&rtt_var=3859&sent=483&recv=59&lost=0&retrans=0&sent_bytes=516892&recv_bytes=14350&delivery_rate=1285558&cwnd=147000&unsent_bytes=0&cid=1622fd8012c0d374&ts=4492&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| x2.rusoska.vip/static/images/flags/es.svg | 104.21.95.42 | 200 OK | 91 kB |
URL GET HTTP/3x2.rusoska.vip/static/images/flags/es.svg IP104.21.95.42:443
Requested byhttps://x2.rusoska.vip/young/2 CertificateIssuerGoogle Trust Services Subjectrusoska.vip FingerprintC2:CE:DA:60:BD:8D:23:87:90:9E:30:C7:33:6C:95:06:9C:7E:4D:19 ValidityTue, 17 Dec 2024 05:25:51 GMT - Mon, 17 Mar 2025 06:23:44 GMT
File typeSVG Scalable Vector Graphics image Hash50623e6a761b392b5381ce35e8a77f99 ca76a86214554c7540cd3c98d8ceb2d2e22b6238 ab3d438837b7f1c4ebce6980cc9274cd2e6adcc8af9be6f5cfc47ef2c4c464e3
GET /static/images/flags/es.svg HTTP/1.1
Host: x2.rusoska.vip
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://x2.rusoska.vip/young/2
Cookie: PHPSESSID=8ae6cd657c2554dae9a2cc8945799426; kt_ips=91.90.42.154
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 Jan 2025 09:59:11 GMT
content-type: image/svg+xml
last-modified: Tue, 20 Sep 2022 17:03:57 GMT
etag: W/"6329f27d-162c3"
expires: Wed, 24 Dec 2025 04:12:47 GMT
cache-control: max-age=31536000
strict-transport-security: max-age=31536000;
content-encoding: gzip
cf-cache-status: HIT
age: 971184
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=b4GIBs%2BBXRhtNY%2F9RTqdPYa8dh50Jzr2yYERFochSe0dUL8QYa770mqRs594szNwnDIfEzz2KlUKqclTJu1ErTTgNGAQX9KWMhyhFD43ma%2FDXW9pUti0XYcSM5JyzSa0aQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8fca5fd95b4a56bb-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=16728&min_rtt=10858&rtt_var=7613&sent=43&recv=21&lost=0&retrans=0&sent_bytes=23406&recv_bytes=5330&delivery_rate=42821&cwnd=24000&unsent_bytes=0&cid=1622fd8012c0d374&ts=309&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| afae561ed5.3165de3ff8.com/f790c4edb01e6166f78f8a137a17a691/76447?version_name=b&domain=x2.rusoska.vip | 45.133.44.53 | 200 OK | 1.3 kB |
URL GET HTTP/2afae561ed5.3165de3ff8.com/f790c4edb01e6166f78f8a137a17a691/76447?version_name=b&domain=x2.rusoska.vip IP45.133.44.53:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://x2.rusoska.vip/young/2 CertificateIssuerLet's Encrypt Subjectafae561ed5.3165de3ff8.com Fingerprint79:25:E0:7A:73:58:C1:6E:B8:40:26:B1:B2:67:EC:65:87:5A:1E:22 ValidityWed, 01 Jan 2025 02:14:58 GMT - Tue, 01 Apr 2025 02:14:57 GMT
File typetroff or preprocessor input, ASCII text, with very long lines (1408), with no line terminators Hash2c0df69527df6f4b31bab179042f5572 3c683ebd888b190547d1cb53bac7fef30bb33003 6427fbcf35db93315de73102312dd393788e4c958ecca950bf8c83d49b9b98d6
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /f790c4edb01e6166f78f8a137a17a691/76447?version_name=b&domain=x2.rusoska.vip HTTP/1.1
Host: afae561ed5.3165de3ff8.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://x2.rusoska.vip
DNT: 1
Connection: keep-alive
Referer: https://x2.rusoska.vip/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 04 Jan 2025 09:59:12 GMT
content-type: application/json
content-length: 1257
server: nginx/1.18.0
cache-control: max-age=300
expires: Sat, 04 Jan 2025 10:04:12 GMT
x-proxy-cache: HIT
x-cdn-host-id: ds8137
access-control-allow-origin: *
X-Firefox-Spdy: h2
|
|
| x2.rusoska.vip/static/images/flags/us.svg | 104.21.95.42 | 200 OK | 4.5 kB |
URL GET HTTP/3x2.rusoska.vip/static/images/flags/us.svg IP104.21.95.42:443
Requested byhttps://x2.rusoska.vip/young/2 CertificateIssuerGoogle Trust Services Subjectrusoska.vip FingerprintC2:CE:DA:60:BD:8D:23:87:90:9E:30:C7:33:6C:95:06:9C:7E:4D:19 ValidityTue, 17 Dec 2024 05:25:51 GMT - Mon, 17 Mar 2025 06:23:44 GMT
File typeSVG Scalable Vector Graphics image Hashc925db37d9f0b1b51a9ecb3b92a33b54 ef0c90f49243c765b8d225abb85eb3b31a3832ef 52c2c755c1d8c60ec8dd0afa486d562364888aa5a7380ae5508e39867b63d553
GET /static/images/flags/us.svg HTTP/1.1
Host: x2.rusoska.vip
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://x2.rusoska.vip/young/2
Cookie: PHPSESSID=8ae6cd657c2554dae9a2cc8945799426; kt_ips=91.90.42.154
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 Jan 2025 09:59:11 GMT
content-type: image/svg+xml
last-modified: Tue, 20 Sep 2022 17:03:41 GMT
etag: W/"6329f26d-116d"
expires: Wed, 24 Dec 2025 04:12:46 GMT
cache-control: max-age=31536000
strict-transport-security: max-age=31536000;
content-encoding: gzip
cf-cache-status: HIT
age: 971185
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1E%2BURj8o7XsWZQMony4vfwbk%2BKHTuZR9v1GrtL21QgqL4K0lUsBnIFpWyyPcnqJ0mFEvhL65Eu2bkZsTOrS20vUaGegksoAY5RQLV2dHMQ7TfIq7Y4xWj3v3l3LquY94Ig%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8fca5fd95b4356bb-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=17567&min_rtt=13652&rtt_var=7915&sent=34&recv=18&lost=0&retrans=0&sent_bytes=16374&recv_bytes=4616&delivery_rate=43142&cwnd=12000&unsent_bytes=0&cid=1622fd8012c0d374&ts=306&x=1", cfExtPri, cfHdrFlush;dur=2
|
|
| x2.rusoska.vip/static/images/flags/de.svg | 104.21.95.42 | 200 OK | 213 B |
URL GET HTTP/3x2.rusoska.vip/static/images/flags/de.svg IP104.21.95.42:443
Requested byhttps://x2.rusoska.vip/young/2 CertificateIssuerGoogle Trust Services Subjectrusoska.vip FingerprintC2:CE:DA:60:BD:8D:23:87:90:9E:30:C7:33:6C:95:06:9C:7E:4D:19 ValidityTue, 17 Dec 2024 05:25:51 GMT - Mon, 17 Mar 2025 06:23:44 GMT
File typeSVG Scalable Vector Graphics image Hasha729e34a15271bd10545770c4c452b3f 93bc2877751d98c4415fe419a93557ae2a8a32f1 a0e32e9ed9ab615cd1190d36b5ac65fcf5abb21892eeca718fed49f9acaa7bf2
GET /static/images/flags/de.svg HTTP/1.1
Host: x2.rusoska.vip
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://x2.rusoska.vip/young/2
Cookie: PHPSESSID=8ae6cd657c2554dae9a2cc8945799426; kt_ips=91.90.42.154
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 Jan 2025 09:59:11 GMT
content-type: image/svg+xml
last-modified: Tue, 20 Sep 2022 17:03:53 GMT
etag: W/"6329f279-d5"
expires: Wed, 24 Dec 2025 04:12:46 GMT
cache-control: max-age=31536000
strict-transport-security: max-age=31536000;
content-encoding: gzip
cf-cache-status: HIT
age: 971185
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=PmbHsHLJfKxArfzTD04p3ychPknWQSHFa2G7Qsl7HGYWP6wsQ5UFGhkpqFq7RIWtYxNWwI2AM1KGOELrNJDyuNfdQpgIGvSIVvzExB5%2FWUTZuyPc0sS9TrGFD3%2Bh%2FNahUw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8fca5fd95b4456bb-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=17567&min_rtt=13652&rtt_var=7915&sent=34&recv=18&lost=0&retrans=0&sent_bytes=16374&recv_bytes=4616&delivery_rate=43142&cwnd=12000&unsent_bytes=0&cid=1622fd8012c0d374&ts=308&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| x2.rusoska.vip/static/images/flags/tr.svg | 104.21.95.42 | 200 OK | 554 B |
URL GET HTTP/3x2.rusoska.vip/static/images/flags/tr.svg IP104.21.95.42:443
Requested byhttps://x2.rusoska.vip/young/2 CertificateIssuerGoogle Trust Services Subjectrusoska.vip FingerprintC2:CE:DA:60:BD:8D:23:87:90:9E:30:C7:33:6C:95:06:9C:7E:4D:19 ValidityTue, 17 Dec 2024 05:25:51 GMT - Mon, 17 Mar 2025 06:23:44 GMT
File typeSVG Scalable Vector Graphics image Hash0b8f85761c15541e09a258141935e660 e04dea68f1572fc1b71e036a59e5829fa9e5ca54 e1fdeeda8af50b5d97c3198ab6090b650f5f082ebf3ec32b3f7a06cee8132673
GET /static/images/flags/tr.svg HTTP/1.1
Host: x2.rusoska.vip
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://x2.rusoska.vip/young/2
Cookie: PHPSESSID=8ae6cd657c2554dae9a2cc8945799426; kt_ips=91.90.42.154
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 Jan 2025 09:59:11 GMT
content-type: image/svg+xml
last-modified: Tue, 20 Sep 2022 17:03:43 GMT
etag: W/"6329f26f-22a"
expires: Wed, 24 Dec 2025 04:12:47 GMT
cache-control: max-age=31536000
strict-transport-security: max-age=31536000;
content-encoding: gzip
cf-cache-status: HIT
age: 971184
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=pmy%2FcI6QEd6BuSEb2UgrehbfMOFYuarTXeW6Kh2OTE6tjK7fJgKt2vpscu%2F0ebq%2BMm117k9TlLhSdlFFcXNrjUVn85mIssMSOpHHy9G9SVZLmOqhuxw3gZp9dSa3prByeQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8fca5fd96b5056bb-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=16728&min_rtt=10858&rtt_var=7613&sent=58&recv=21&lost=0&retrans=0&sent_bytes=40400&recv_bytes=5330&delivery_rate=42821&cwnd=24000&unsent_bytes=0&cid=1622fd8012c0d374&ts=312&x=1", cfExtPri, cfHdrFlush;dur=2
|
|
| x2.rusoska.vip/static/js/ad.js | 104.21.95.42 | 200 OK | 98 kB |
URL GET HTTP/3x2.rusoska.vip/static/js/ad.js IP104.21.95.42:443
Requested byhttps://x2.rusoska.vip/young/2 CertificateIssuerGoogle Trust Services Subjectrusoska.vip FingerprintC2:CE:DA:60:BD:8D:23:87:90:9E:30:C7:33:6C:95:06:9C:7E:4D:19 ValidityTue, 17 Dec 2024 05:25:51 GMT - Mon, 17 Mar 2025 06:23:44 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /static/js/ad.js HTTP/1.1
Host: x2.rusoska.vip
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://x2.rusoska.vip/young/2
Cookie: PHPSESSID=8ae6cd657c2554dae9a2cc8945799426; kt_ips=91.90.42.154
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 Jan 2025 09:59:11 GMT
content-type: application/javascript; charset=UTF-8
last-modified: Wed, 20 Nov 2024 07:42:45 GMT
etag: W/"673d92f5-17d90"
expires: Wed, 24 Dec 2025 04:12:46 GMT
cache-control: max-age=31536000
strict-transport-security: max-age=31536000;
content-encoding: gzip
cf-cache-status: HIT
age: 971185
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=x0IweRSC90bqYayzFA7VUK5yHVPpiI7PJ1fv7aAKgPvRdObpbO2L7XBRN4pI0FTxr%2FAFZSl%2BcWjEEAP65ZJxduFXIG540tDe4QqBIynrp5tJ7rFsJToyd9HDpIVAfCO2sg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8fca5fd97b6556bb-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=9799&min_rtt=1072&rtt_var=10014&sent=138&recv=28&lost=0&retrans=0&sent_bytes=130482&recv_bytes=6451&delivery_rate=5592121&cwnd=96000&unsent_bytes=0&cid=1622fd8012c0d374&ts=326&x=1", cfExtPri, cfHdrFlush;dur=0
|
|