Report - m.nudeshark.mobi/videos/9523/

Report Overview

Visited public
2024-09-19 18:53:30
Tags
URL
m.nudeshark.mobi/videos/9523/
Finishing URL
m.nudeshark.mobi/videos/9523/
IP / ASN
172.67.152.38
#13335 CLOUDFLARENET
Title
Louise Bourgoin nude, scene from Les aventures extraordinaires d'Adele Blanc-Sec (2010)

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
www.nudeshark.me	unknown	2024-08-02	2024-08-21 18:07:57	2024-09-19 19:22:43	2.3 kB	277 kB	162.19.233.148
isopik.com	unknown	2024-06-06	2024-06-08 13:44:13	2024-09-19 15:44:21	1.1 kB	882 B	185.162.85.20
mcizas.com	unknown	2023-12-04	2023-12-04 15:08:10	2024-09-12 13:28:43	462 B	68 kB	172.67.207.240
a.pemsrv.com	unknown	2023-08-01	2023-08-05 14:08:36	2024-09-19 17:11:57	405 B	102 kB	185.76.9.27
r10.o.lencr.org	unknown	2020-06-29	2024-06-06 21:45:11	2024-09-19 18:12:24	2.3 kB	6.2 kB	23.33.119.57
m.nudeshark.mobi	unknown	2024-08-23	2024-09-08 20:14:28	2024-09-19 19:22:57	9.4 kB	7.5 MB	172.67.152.38
s.pemsrv.com	unknown	2023-08-01	2023-08-04 15:10:46	2024-09-19 18:16:34	427 B	269 B	95.211.229.247
smkezc.com	unknown	2024-02-05	2024-04-01 18:48:06	2024-09-19 15:44:21	504 B	247 B	185.162.85.3
r11.o.lencr.org	unknown	2020-06-29	2024-06-07 07:43:57	2024-09-19 18:13:06	2.3 kB	6.2 kB	23.36.76.226
nudeshark.mobi	unknown	2024-08-23	2024-09-06 12:03:46	2024-09-19 20:53:04	2.4 kB	280 kB	172.67.152.38
i.wmgtr.com	13696	2020-09-11	2020-09-11 13:28:07	2024-09-19 09:45:48	828 B	14 kB	45.133.44.33
udzpel.com	unknown	2024-04-23	2024-04-24 11:07:50	2024-09-19 15:44:21	441 B	6.8 kB	104.21.43.91

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2024-09-19	medium	smkezc.com	Sinkholed

ThreatFox

No alerts detected

JavaScript (8)

	URL	From	Size	First Seen	Last Seen
	mcizas.com/pw/waWQiOjExMzA5MzMsInNpZCI6MTMyMzg5NSwid2lkIjo1MzU0OTEsInNyYyI6Mn0=eyJ.js	ScriptElement	68 kB	2024-09-09	2024-10-11
Pretty URL mcizas.com/pw/waWQiOjExMzA5MzMsInNpZCI6MTMyMzg5NSwid2lkIjo1MzU0OTEsInNyYyI6Mn0=eyJ.js IP 172.67.207.240 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2024-09-09 18:54 Last Seen2024-10-11 09:14 Times Seen18 Hash 24b41a6473fd5804b5063dc23b89f460 d294396c360e8351e256a286a98b303620d0c022 811433657177fd61e8f0bc93d37d4393961883a6aa194481286ad2b3e7f7dd5e Loading...

	a.pemsrv.com/popunder1000.js	ScriptElement	101 kB	2024-08-21	2024-10-20
Pretty URL a.pemsrv.com/popunder1000.js IP 185.76.9.27 ASN #60068 Datacamp Limited Introduced by scriptElement Embedded in HTML false Observations First Seen2024-08-21 20:30 Last Seen2024-10-20 23:07 Times Seen169 Hash b194e937b92d9dc9a9c0486bc30ab760 75a53e6fcc145a4793247faa696a9929b716bd59 30bd70daeee3d5f5a3fb5612c5b3439c8481c34705b73d58e5a58bc62dabdf94 Loading...

	m.nudeshark.mobi/videos/9523/	ScriptElement	134 B	2024-09-19	2024-09-19
Pretty URL m.nudeshark.mobi/videos/9523/ IP 172.67.152.38 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2024-09-19 19:32 Last Seen2024-09-19 19:32 Times Seen1 Hash 3a14ca762e65276cf4daa00da4572496 7d785558bb24b62cf975dbacd4d5108bc3042b93 694821c6f178bff21a2b926ebcc9ab412b147a3d884190c274762b291ced9b64 Loading...

	m.nudeshark.mobi/player/kt_player.js?v=5.3.5	ScriptElement	169 kB	2023-07-16	2025-04-19
Pretty URL m.nudeshark.mobi/player/kt_player.js?v=5.3.5 IP 172.67.152.38 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-07-16 19:43 Last Seen2025-04-19 22:49 Times Seen367 Hash cb879d10184e6382683f0ab3d996cfe1 bee93bab8d60fdcec37923bb90e0760dccdbc76f 4069813f63790aaaebd745de2f86b7507be7b27a6c8990c539cdf1d758569b8f Loading...

	m.nudeshark.mobi/videos/9523/	ScriptElement	2.9 kB	2024-09-19	2024-09-19
Pretty URL m.nudeshark.mobi/videos/9523/ IP 172.67.152.38 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2024-09-19 19:32 Last Seen2024-09-19 19:32 Times Seen1 Hash 1844c29552d4db139c55ca15717042b7 2cb15a9f30c3b0628d08a5387c18be409e6feaf5 f4e1bb1ba7344f0ad5ddf270057b4f632d8311654d5f4ab908a6d9de0656eb51 Loading...

	m.nudeshark.mobi/static/js/main.min.js?v=9.0	ScriptElement	208 kB	2023-11-05	2025-04-03
Pretty URL m.nudeshark.mobi/static/js/main.min.js?v=9.0 IP 172.67.152.38 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-11-05 00:12 Last Seen2025-04-03 22:53 Times Seen65 Hash 6902034bee8fe4f447869d9448001556 963b568bd6792c4f56b6a8ef2e919a98df8773cb 1ab3ac54b4f1aac0cb4698c7af949bb256559982d8547a24a5c83f49e11a8c0f Loading...

	m.nudeshark.mobi/videos/9523/	ScriptElement	229 B	2024-09-08	2024-10-25
Pretty URL m.nudeshark.mobi/videos/9523/ IP 172.67.152.38 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2024-09-08 20:15 Last Seen2024-10-25 23:46 Times Seen29 Hash d05a63ca26356468b103c7f34ddd5792 e1b7a9379105c4e9d1227cdd4e0de55431f5800f 1622bcbcd4486db928783ca63e429915414907a464469902bd5c0fc1d4b6abfd Loading...

	m.nudeshark.mobi/videos/9523/	ScriptElement	0 B	0001-01-01	2025-05-14
Pretty URL m.nudeshark.mobi/videos/9523/ IP 172.67.152.38 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen0001-01-01 00:00 Last Seen2025-05-14 03:19 Times Seen4677106 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Loading...

HTTP Transactions (49)

URL IP Response Size

r10.o.lencr.org/

23.33.119.57

504 B

URL
r10.o.lencr.org/
IP
23.33.119.57:0
ASN
#20940 Akamai International B.V.

File type
data
Size
504 B (504 bytes)
Hash
7f94384c88afd251a59fa1bd27d01a3d
4702ce94766111cd58b4a6e0a642ee2380a51013
48ddf84345fb7c618dd7e3ab12b5f393cc02d5854e392b617ea7d751c8c957b0

HTTP Headers

POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "48DDF84345FB7C618DD7E3AB12B5F393CC02D5854E392B617EA7D751C8C957B0"
Last-Modified: Wed, 18 Sep 2024 09:19:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12412
Expires: Thu, 19 Sep 2024 22:19:54 GMT
Date: Thu, 19 Sep 2024 18:53:02 GMT
Connection: keep-alive

r10.o.lencr.org/

23.33.119.57

504 B

URL
r10.o.lencr.org/
IP
23.33.119.57:0
ASN
#20940 Akamai International B.V.

File type
data
Size
504 B (504 bytes)
Hash
0f9757cb982e022e57ae0b157b0af7b7
90769501ea6239546cff766263e45cf29f25b99f
413adcbc92ad4ada2720b8c7a0385501d48e3eec5cf1c8833792b3e565c0a51b

HTTP Headers

POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "413ADCBC92AD4ADA2720B8C7A0385501D48E3EEC5CF1C8833792B3E565C0A51B"
Last-Modified: Thu, 19 Sep 2024 12:52:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10217
Expires: Thu, 19 Sep 2024 21:43:19 GMT
Date: Thu, 19 Sep 2024 18:53:02 GMT
Connection: keep-alive

r10.o.lencr.org/

23.33.119.57

504 B

URL
r10.o.lencr.org/
IP
23.33.119.57:0
ASN
#20940 Akamai International B.V.

File type
data
Size
504 B (504 bytes)
Hash
946bd983da8ed3f6d5c12abcab5273e0
eaf94210f1202240080722b9f0a78aa64b6cc1b3
f772e410f6d95169a72a7473bf8ff96f7c642b0e8cd820c34b9debdfc367c44e

HTTP Headers

POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "F772E410F6D95169A72A7473BF8FF96F7C642B0E8CD820C34B9DEBDFC367C44E"
Last-Modified: Tue, 17 Sep 2024 14:37:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8727
Expires: Thu, 19 Sep 2024 21:18:30 GMT
Date: Thu, 19 Sep 2024 18:53:03 GMT
Connection: keep-alive

r10.o.lencr.org/

23.33.119.57

504 B

URL
r10.o.lencr.org/
IP
23.33.119.57:0
ASN
#20940 Akamai International B.V.

File type
data
Size
504 B (504 bytes)
Hash
a31eb23bb83183cf82d06967d5e3f31e
803053eed17ab1e4d902c93d5f20ae6e930c89e4
116549023fd841d0418e44c97968a7f84c98b643b76ce6b9a94ca70446de13f1

HTTP Headers

POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "116549023FD841D0418E44C97968A7F84C98B643B76CE6B9A94CA70446DE13F1"
Last-Modified: Tue, 17 Sep 2024 14:38:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12616
Expires: Thu, 19 Sep 2024 22:23:19 GMT
Date: Thu, 19 Sep 2024 18:53:03 GMT
Connection: keep-alive

m.nudeshark.mobi/contents2/wssdulntdfkd/theme/logo.png

172.67.152.38

200 OK

6.9 kB

URL GET HTTP/2
m.nudeshark.mobi/contents2/wssdulntdfkd/theme/logo.png
IP
172.67.152.38:443
ASN
#13335 CLOUDFLARENET

Requested by
https://m.nudeshark.mobi/videos/9523/
Certificate
IssuerGoogle Trust Services
Subjectnudeshark.mobi
FingerprintEA:9E:DB:13:53:5E:E2:47:61:1E:BB:B4:02:1E:4F:31:C9:06:5D:F3
ValidityFri, 23 Aug 2024 08:16:12 GMT - Thu, 21 Nov 2024 08:16:11 GMT

File type
PNG image data, 291 x 54, 8-bit/color RGBA, non-interlaced
Size
6.9 kB (6877 bytes)
Hash
df7c9822b7a584f85e85040ab976b200
9af4cf3b5ead6c5dacc0ea9ef0e392da85085abb
34925636cf58ce570456275663fede3fdf5722be1f34afd1866459e27e8f99ff

HTTP Headers

GET /contents2/wssdulntdfkd/theme/logo.png HTTP/1.1
Host: m.nudeshark.mobi
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://m.nudeshark.mobi/videos/9523/
Cookie: PHPSESSID=h5009unprmmj960849dd8ku2sc; kt_qparams=id%3D9523; kt_ips=91.90.42.154
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Thu, 19 Sep 2024 18:53:03 GMT
content-type: image/png
content-length: 6877
last-modified: Sat, 07 Sep 2024 20:59:13 GMT
etag: "66dcbea1-1add"
cache-control: max-age=14400
cf-cache-status: HIT
age: 485
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5AaVYM8sKUjZf3smHy8l8%2Bp3WvYcl%2BVxFdnTUvNw8kmXyiyzrYEkShYutBJYgZzkxPFI7OZZOXZDa9IcdyuNipw2e7%2B8Q9pMMU4eKsXuvKBGpOW271jzqGuxKR7S7sNppV5O"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8c5bc6c189f9ba81-BRU
X-Firefox-Spdy: h2

m.nudeshark.mobi/static/images/fonts/icomoon.ttf?nddhpi

172.67.152.38

200 OK

12 kB

URL GET HTTP/2
m.nudeshark.mobi/static/images/fonts/icomoon.ttf?nddhpi
IP
172.67.152.38:443
ASN
#13335 CLOUDFLARENET

Requested by
https://m.nudeshark.mobi/videos/9523/
Certificate
IssuerGoogle Trust Services
Subjectnudeshark.mobi
FingerprintEA:9E:DB:13:53:5E:E2:47:61:1E:BB:B4:02:1E:4F:31:C9:06:5D:F3
ValidityFri, 23 Aug 2024 08:16:12 GMT - Thu, 21 Nov 2024 08:16:11 GMT

File type
TrueType Font data, 11 tables, 1st "OS/2", 14 names, Macintosh, type 1 string, icomoon
Size
12 kB (12358 bytes)
Hash
21263355cf739547055f2da9fd6759bd
762384d3af0de2d2bd630855b3f388326038ba92
2674595ece6d29bba3197719873b35d8e2893e9eb3a0271bad0ea717e9b3d405

HTTP Headers

GET /static/images/fonts/icomoon.ttf?nddhpi HTTP/1.1
Host: m.nudeshark.mobi
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://m.nudeshark.mobi/static/styles/all-responsive-white.css?v=9.0
Cookie: PHPSESSID=h5009unprmmj960849dd8ku2sc; kt_qparams=id%3D9523; kt_ips=91.90.42.154
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Thu, 19 Sep 2024 18:53:03 GMT
content-type: font/ttf
last-modified: Fri, 23 Aug 2024 13:52:40 GMT
etag: W/"2560-6205a16b46a1d"
cache-control: max-age=14400
cf-cache-status: HIT
age: 2915
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=24kYWrDxr1AnVxUJa3e61sIrK7rlj10%2FAAA8iyYAfCDtAAeBFP7NMEB1VGOJt%2FS6MKf0d43a9XdIGq9VNanwwW%2BGH%2FIGMS3tBWUjyUCKTfed8J3tQPRphu76e%2B4ywuzNmH52"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8c5bc6c2abedba81-BRU
content-encoding: br
X-Firefox-Spdy: h2

s.pemsrv.com/venor.php

95.211.229.247

200 OK

21 B

URL GET HTTP/1.1
s.pemsrv.com/venor.php
IP
95.211.229.247:443
ASN
#60781 LeaseWeb Netherlands B.V.

Requested by
https://m.nudeshark.mobi/videos/9523/
Certificate
IssuerLet's Encrypt
Subjectpemsrv.com
Fingerprint6C:E1:88:66:9E:83:C8:22:CB:50:58:EF:7A:C6:A5:6A:2A:6F:D2:F6
ValidityThu, 12 Sep 2024 10:33:32 GMT - Wed, 11 Dec 2024 10:33:31 GMT

File type
very short file (no magic)
Size
21 B (21 bytes)
Hash
c4ca4238a0b923820dcc509a6f75849b
356a192b7913b04c54574d18c28d46e6395428ab
6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b

HTTP Headers

GET /venor.php HTTP/1.1
Host: s.pemsrv.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://m.nudeshark.mobi
DNT: 1
Connection: keep-alive
Referer: https://m.nudeshark.mobi/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Thu, 19 Sep 2024 18:53:04 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: *
X-Robots-Tag: noindex, follow
Content-Encoding: gzip

m.nudeshark.mobi/player/skin/fonts/ktplayeryt.ttf?wqseia

172.67.152.38

200 OK

1.3 kB

URL GET HTTP/2
m.nudeshark.mobi/player/skin/fonts/ktplayeryt.ttf?wqseia
IP
172.67.152.38:443
ASN
#13335 CLOUDFLARENET

Requested by
https://m.nudeshark.mobi/videos/9523/
Certificate
IssuerGoogle Trust Services
Subjectnudeshark.mobi
FingerprintEA:9E:DB:13:53:5E:E2:47:61:1E:BB:B4:02:1E:4F:31:C9:06:5D:F3
ValidityFri, 23 Aug 2024 08:16:12 GMT - Thu, 21 Nov 2024 08:16:11 GMT

File type
TrueType Font data, 11 tables, 1st "OS/2", 14 names, Macintosh, type 1 string, ktplayeryt
Size
1.3 kB (1319 bytes)
Hash
c89ca428be45c3c212c5658a05823a10
74916a018bea5b27c223f164e2355ddb78422b4f
bf86d8eb9277b69e2c6202ca711c3b19c64a2a9a8cf4ba7bc33bdecacfb8a0b2

HTTP Headers

GET /player/skin/fonts/ktplayeryt.ttf?wqseia HTTP/1.1
Host: m.nudeshark.mobi
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://m.nudeshark.mobi/player/skin/youtube.css
Cookie: PHPSESSID=h5009unprmmj960849dd8ku2sc; kt_qparams=id%3D9523; kt_ips=91.90.42.154; kt_tcookie=1; kt_is_visited=1
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Thu, 19 Sep 2024 18:53:04 GMT
content-type: font/ttf
last-modified: Fri, 23 Aug 2024 13:52:24 GMT
etag: W/"8d8-6205a15c27937"
access-control-allow-origin: *
cache-control: max-age=14400
cf-cache-status: HIT
age: 2916
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=SS1KQWrV4olUrD70E2oJGlI0EM5ojVGhXZMFRgGcJFvWaxPAhMAmzvK%2BzFplyZeSecPjqMMSHkgcepU33vD2vVfuMKmjz3ng7f6XxK33GwAA%2F%2BHty0Ym8TqyaX65cFHLNgMM"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8c5bc6c5e99aba81-BRU
content-encoding: br
X-Firefox-Spdy: h2

m.nudeshark.mobi/player/kt_player.js?v=5.3.5

172.67.152.38

200 OK

70 kB

URL GET HTTP/2
m.nudeshark.mobi/player/kt_player.js?v=5.3.5
IP
172.67.152.38:443
ASN
#13335 CLOUDFLARENET

Requested by
https://m.nudeshark.mobi/videos/9523/
Certificate
IssuerGoogle Trust Services
Subjectnudeshark.mobi
FingerprintEA:9E:DB:13:53:5E:E2:47:61:1E:BB:B4:02:1E:4F:31:C9:06:5D:F3
ValidityFri, 23 Aug 2024 08:16:12 GMT - Thu, 21 Nov 2024 08:16:11 GMT

File type
gzip compressed data, max speed, from Unix
Size
70 kB (69682 bytes)
Hash
d3f020947f0e61aa2df4cb2c06627e4b
39f11cdc335be3e3d7d585e668344cbf1359a98d
cf81604a37399dc9ca23787da1c832c5dc1905c0ba953cdedf4cce3e7e2fbb38

HTTP Headers

GET /player/kt_player.js?v=5.3.5 HTTP/1.1
Host: m.nudeshark.mobi
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://m.nudeshark.mobi/videos/9523/
Cookie: PHPSESSID=h5009unprmmj960849dd8ku2sc; kt_qparams=id%3D9523; kt_ips=91.90.42.154
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Thu, 19 Sep 2024 18:53:03 GMT
content-type: application/javascript; charset=utf-8
last-modified: Fri, 23 Aug 2024 13:52:23 GMT
etag: W/"66c89417-29310"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7DdCCW0pdLUJhsmcfIxjIERCsv%2FEW7zrXZxFmCtaGUzROeED7IAAwikYI5H86VEnPouEmYOsxaDOCMgyYq4oy433sV8AT6j0D1M8CTf9Pfv1PZ8MQCiT2ZQj%2Fg%2F%2Fz%2BPCcsNp"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8c5bc6c189fbba81-BRU
X-Firefox-Spdy: h2

r10.o.lencr.org/

23.33.119.27

504 B

URL
r10.o.lencr.org/
IP
23.33.119.27:0
ASN
#20940 Akamai International B.V.

File type
data
Size
504 B (504 bytes)
Hash
ee847b1aace32bbfe5b14ce13ef78980
81ca7fc293e7870164f81cf053a1225a907dc3cc
90e1393db4fc3d92a42caf06ea4ec16b552ca053fa43e1efeec9c3071ac190db

HTTP Headers

POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "90E1393DB4FC3D92A42CAF06EA4EC16B552CA053FA43E1EFEEC9C3071AC190DB"
Last-Modified: Wed, 18 Sep 2024 01:53:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12092
Expires: Thu, 19 Sep 2024 22:14:36 GMT
Date: Thu, 19 Sep 2024 18:53:04 GMT
Connection: keep-alive

r11.o.lencr.org/

23.36.76.226

504 B

URL
r11.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
504 B (504 bytes)
Hash
675b58b1cf425a13a4bff68ce04313a8
68303db3c953af448c6ea88f1db5db8b1164d3bb
48a2520c94904fa43fa0f71b86662c1f8b88cf311306776b41032600dab078e7

HTTP Headers

POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "48A2520C94904FA43FA0F71B86662C1F8B88CF311306776B41032600DAB078E7"
Last-Modified: Tue, 17 Sep 2024 16:19:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16354
Expires: Thu, 19 Sep 2024 23:25:38 GMT
Date: Thu, 19 Sep 2024 18:53:04 GMT
Connection: keep-alive

r11.o.lencr.org/

23.36.76.226

504 B

URL
r11.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
504 B (504 bytes)
Hash
675b58b1cf425a13a4bff68ce04313a8
68303db3c953af448c6ea88f1db5db8b1164d3bb
48a2520c94904fa43fa0f71b86662c1f8b88cf311306776b41032600dab078e7

HTTP Headers

POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "48A2520C94904FA43FA0F71B86662C1F8B88CF311306776B41032600DAB078E7"
Last-Modified: Tue, 17 Sep 2024 16:19:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16342
Expires: Thu, 19 Sep 2024 23:25:26 GMT
Date: Thu, 19 Sep 2024 18:53:04 GMT
Connection: keep-alive

r11.o.lencr.org/

23.36.76.226

504 B

URL
r11.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
504 B (504 bytes)
Hash
675b58b1cf425a13a4bff68ce04313a8
68303db3c953af448c6ea88f1db5db8b1164d3bb
48a2520c94904fa43fa0f71b86662c1f8b88cf311306776b41032600dab078e7

HTTP Headers

POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "48A2520C94904FA43FA0F71B86662C1F8B88CF311306776B41032600DAB078E7"
Last-Modified: Tue, 17 Sep 2024 16:19:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16294
Expires: Thu, 19 Sep 2024 23:24:38 GMT
Date: Thu, 19 Sep 2024 18:53:04 GMT
Connection: keep-alive

r11.o.lencr.org/

23.36.76.226

504 B

URL
r11.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
504 B (504 bytes)
Hash
675b58b1cf425a13a4bff68ce04313a8
68303db3c953af448c6ea88f1db5db8b1164d3bb
48a2520c94904fa43fa0f71b86662c1f8b88cf311306776b41032600dab078e7

HTTP Headers

POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "48A2520C94904FA43FA0F71B86662C1F8B88CF311306776B41032600DAB078E7"
Last-Modified: Tue, 17 Sep 2024 16:19:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16381
Expires: Thu, 19 Sep 2024 23:26:05 GMT
Date: Thu, 19 Sep 2024 18:53:04 GMT
Connection: keep-alive

smkezc.com/admc?a=2&pid=1130933&sid=1323895&wid=535491&fp=172e5b6362817b33a26bdcbe3d1af8ae&f=8&tz=0

185.162.85.3

200 OK

0 B

URL GET HTTP/2
smkezc.com/admc?a=2&pid=1130933&sid=1323895&wid=535491&fp=172e5b6362817b33a26bdcbe3d1af8ae&f=8&tz=0
IP
185.162.85.3:443
ASN
#39572 DataWeb Global Group B.V.

Requested by
https://m.nudeshark.mobi/videos/9523/
Certificate
IssuerLet's Encrypt
Subjectsmkezc.com
Fingerprint37:3D:1E:8C:4A:DF:80:8E:7F:FC:A6:71:84:26:87:61:DA:78:BF:90
ValiditySat, 03 Aug 2024 16:35:06 GMT - Fri, 01 Nov 2024 16:35:05 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /admc?a=2&pid=1130933&sid=1323895&wid=535491&fp=172e5b6362817b33a26bdcbe3d1af8ae&f=8&tz=0 HTTP/1.1
Host: smkezc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://m.nudeshark.mobi/
Origin: https://m.nudeshark.mobi
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx/1.18.0
date: Thu, 19 Sep 2024 18:53:04 GMT
content-length: 0
access-control-allow-origin: https://m.nudeshark.mobi
access-control-allow-credentials: true
accept-ch: Sec-CH-UA-Platform-Version
X-Firefox-Spdy: h2

nudeshark.mobi/contents/videos_screenshots/12000/12461/336x189/1.jpg

172.67.152.38

301 Moved Permanently

61 kB

URL GET HTTP/2
nudeshark.mobi/contents/videos_screenshots/12000/12461/336x189/1.jpg
IP
172.67.152.38:443
ASN
#13335 CLOUDFLARENET

Requested by
https://m.nudeshark.mobi/videos/9523/
Certificate
IssuerGoogle Trust Services
Subjectnudeshark.mobi
FingerprintEA:9E:DB:13:53:5E:E2:47:61:1E:BB:B4:02:1E:4F:31:C9:06:5D:F3
ValidityFri, 23 Aug 2024 08:16:12 GMT - Thu, 21 Nov 2024 08:16:11 GMT

File type
data
Size
61 kB (60721 bytes)
Hash
3d7763e2a0beb4d5821ade17a2875748
9242efc67e96b258a1b469a791285a9dce763059
d9b82d9b9d9061ceed870415ef23639143e49da8af2ea10f0996d285d1125771

HTTP Headers

GET /contents/videos_screenshots/12000/12461/336x189/1.jpg HTTP/1.1
Host: nudeshark.mobi
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://m.nudeshark.mobi/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 301 Moved Permanently
date: Thu, 19 Sep 2024 18:53:04 GMT
content-type: text/html; charset=iso-8859-1
location: https://www.nudeshark.me/contents/videos_screenshots/12000/12461/336x189/1.jpg
cache-control: max-age=14400
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3QVw4Em4aev475p2WXs0BxqT%2FCmOxSedH3qDLxTKGS0yGH176ZfWCrFGcD65nVmNIgW2b1S7O4786i23f%2BTuObLpss0sMzyDKY4HnP3Nm%2BqZXqNAgbGOsfKVMBslneTplw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
speculation-rules: "/cdn-cgi/speculation"
server: cloudflare
cf-ray: 8c5bc6c49f58ba81-BRU
X-Firefox-Spdy: h2

nudeshark.mobi/contents/videos_screenshots/12000/12483/336x189/1.jpg

172.67.152.38

301 Moved Permanently

61 kB

URL GET HTTP/2
nudeshark.mobi/contents/videos_screenshots/12000/12483/336x189/1.jpg
IP
172.67.152.38:443
ASN
#13335 CLOUDFLARENET

Requested by
https://m.nudeshark.mobi/videos/9523/
Certificate
IssuerGoogle Trust Services
Subjectnudeshark.mobi
FingerprintEA:9E:DB:13:53:5E:E2:47:61:1E:BB:B4:02:1E:4F:31:C9:06:5D:F3
ValidityFri, 23 Aug 2024 08:16:12 GMT - Thu, 21 Nov 2024 08:16:11 GMT

File type
data
Size
61 kB (60911 bytes)
Hash
2b661219aff748cfc2d707de75578113
da616dd133c16b0c4c19ae687d8893de7ea9756e
e3d4c32aa610f6292b36fe2936fa136634d69325002f49767acd84f51e9fbb14

HTTP Headers

GET /contents/videos_screenshots/12000/12483/336x189/1.jpg HTTP/1.1
Host: nudeshark.mobi
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://m.nudeshark.mobi/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 301 Moved Permanently
date: Thu, 19 Sep 2024 18:53:04 GMT
content-type: text/html; charset=iso-8859-1
location: https://www.nudeshark.me/contents/videos_screenshots/12000/12483/336x189/1.jpg
cache-control: max-age=14400
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TqywkcL%2BKelYRGvwImu9g32LkJeqQdbIP%2B6y%2BExOBGp%2BK829eF4gQwTxujFTFh6v%2FeJCPFTieEfMflHKaI2vLQlG7qE8D%2FvIoCB36YO80%2Bcx%2BtUJTepS9ep1XUPVbQ6B5w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
speculation-rules: "/cdn-cgi/speculation"
server: cloudflare
cf-ray: 8c5bc6c49f5bba81-BRU
X-Firefox-Spdy: h2

nudeshark.mobi/contents/videos_screenshots/12000/12485/336x189/1.jpg

172.67.152.38

301 Moved Permanently

66 kB

URL GET HTTP/2
nudeshark.mobi/contents/videos_screenshots/12000/12485/336x189/1.jpg
IP
172.67.152.38:443
ASN
#13335 CLOUDFLARENET

Requested by
https://m.nudeshark.mobi/videos/9523/
Certificate
IssuerGoogle Trust Services
Subjectnudeshark.mobi
FingerprintEA:9E:DB:13:53:5E:E2:47:61:1E:BB:B4:02:1E:4F:31:C9:06:5D:F3
ValidityFri, 23 Aug 2024 08:16:12 GMT - Thu, 21 Nov 2024 08:16:11 GMT

File type
data
Size
66 kB (65743 bytes)
Hash
2aae219ea0c8694622a1812985290d20
4a636829bbb46ed6e9bc6ca6775f2c68eb4c769e
f0c14dc7d06904feccdd045d6783779d75e4e540cd29a983e682cd1df1d12984

HTTP Headers

GET /contents/videos_screenshots/12000/12485/336x189/1.jpg HTTP/1.1
Host: nudeshark.mobi
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://m.nudeshark.mobi/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 301 Moved Permanently
date: Thu, 19 Sep 2024 18:53:04 GMT
content-type: text/html; charset=iso-8859-1
location: https://www.nudeshark.me/contents/videos_screenshots/12000/12485/336x189/1.jpg
cache-control: max-age=14400
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=GyCbB8rWtlgArDRhFEqTkAVby3%2FLUPdlHRvKL%2BxwpW7UbBsSdfL7twvY7H85CkT132CQ8z5vasLMZFXdGvRMRdfGR6EY0MRjsVlpMLGV%2FtEN1VIyHp4zC2F03GQjayFfSg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
speculation-rules: "/cdn-cgi/speculation"
server: cloudflare
cf-ray: 8c5bc6c49f53ba81-BRU
X-Firefox-Spdy: h2

nudeshark.mobi/contents/videos_screenshots/12000/12480/336x189/1.jpg

172.67.152.38

301 Moved Permanently

55 kB

URL GET HTTP/2
nudeshark.mobi/contents/videos_screenshots/12000/12480/336x189/1.jpg
IP
172.67.152.38:443
ASN
#13335 CLOUDFLARENET

Requested by
https://m.nudeshark.mobi/videos/9523/
Certificate
IssuerGoogle Trust Services
Subjectnudeshark.mobi
FingerprintEA:9E:DB:13:53:5E:E2:47:61:1E:BB:B4:02:1E:4F:31:C9:06:5D:F3
ValidityFri, 23 Aug 2024 08:16:12 GMT - Thu, 21 Nov 2024 08:16:11 GMT

File type
data
Size
55 kB (55021 bytes)
Hash
de19e56736c27ecb23ca831811d4575d
caca2f880f5619ea0f09a04146b2172b0e080d90
d9ec132c23b8521037fda8247c45fba80ce2a547ba6fe7a68d6b28d72094a201

HTTP Headers

GET /contents/videos_screenshots/12000/12480/336x189/1.jpg HTTP/1.1
Host: nudeshark.mobi
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://m.nudeshark.mobi/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 301 Moved Permanently
date: Thu, 19 Sep 2024 18:53:04 GMT
content-type: text/html; charset=iso-8859-1
location: https://www.nudeshark.me/contents/videos_screenshots/12000/12480/336x189/1.jpg
cache-control: max-age=14400
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TdtodQpdEEdsA%2FaKbPfm6Gr1j4XbKJ%2Bff1RBk2odYsPpuAdOku8ZkOG1eSWQE9%2FHE58k34KTOUcQ64w9d0oYTYcRka0nh%2B9tMlR75MpCaUFFbou7ndyRpYZUjLaWIxJCRg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
speculation-rules: "/cdn-cgi/speculation"
server: cloudflare
cf-ray: 8c5bc6c49f55ba81-BRU
X-Firefox-Spdy: h2

www.nudeshark.me/contents/videos_screenshots/9000/9523/preview_720p.mp4.jpg

162.19.233.148

200 OK

34 kB

URL GET HTTP/1.1
www.nudeshark.me/contents/videos_screenshots/9000/9523/preview_720p.mp4.jpg
IP
162.19.233.148:443
ASN
#16276 OVH SAS

Requested by
https://m.nudeshark.mobi/videos/9523/
Certificate
IssuerLet's Encrypt
Subjectnudeshark.me
FingerprintA9:C4:80:F9:EE:42:1C:38:E4:2F:D7:B1:E5:9C:39:84:35:71:F4:24
ValidityWed, 21 Aug 2024 13:26:38 GMT - Tue, 19 Nov 2024 13:26:37 GMT

File type
RIFF (little-endian) data, Web/P image, VP8 encoding, 1366x581, Scaling: [none]x[none], YUV color, decoders should clamp
Size
34 kB (34512 bytes)
Hash
691870a47070019e545ecdbd1300a4b8
a50915a02b4ed6b2bbc1c31fc07fe24f72a5e99e
a2acfc4ce74ca3be334a32694c05700501b0a0e04d312d853eec2d8b69be52af

HTTP Headers

GET /contents/videos_screenshots/9000/9523/preview_720p.mp4.jpg HTTP/1.1
Host: www.nudeshark.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://m.nudeshark.mobi/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.24.0
Date: Thu, 19 Sep 2024 18:53:04 GMT
Content-Type: image/jpeg
Content-Length: 34512
Last-Modified: Wed, 28 Feb 2024 03:24:03 GMT
Connection: keep-alive
ETag: "65dea753-86d0"
Accept-Ranges: bytes

isopik.com/wnrw?aid=4911333692759884132&a=1

185.162.85.20

200 OK

0 B

URL GET HTTP/2
isopik.com/wnrw?aid=4911333692759884132&a=1
IP
185.162.85.20:443
ASN
#39572 DataWeb Global Group B.V.

Requested by
https://m.nudeshark.mobi/videos/9523/
Certificate
IssuerLet's Encrypt
Subjectisopik.com
Fingerprint8C:20:68:8C:14:3B:AD:EC:05:3E:74:D6:82:1A:CF:52:76:9F:72:A8
ValidityMon, 05 Aug 2024 13:53:39 GMT - Sun, 03 Nov 2024 13:53:38 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /wnrw?aid=4911333692759884132&a=1 HTTP/1.1
Host: isopik.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://m.nudeshark.mobi/
Origin: https://m.nudeshark.mobi
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx/1.18.0
date: Thu, 19 Sep 2024 18:53:04 GMT
content-length: 0
access-control-allow-origin: https://m.nudeshark.mobi
X-Firefox-Spdy: h2

m.nudeshark.mobi/get_file/1/f573391c4bda36e71d8dca12105a3369cd65ae2995/9000/9523/9523.mp4/?rnd=1726771984280

172.67.152.38

206 Partial Content

7.0 MB

URL GET HTTP/2
m.nudeshark.mobi/get_file/1/f573391c4bda36e71d8dca12105a3369cd65ae2995/9000/9523/9523.mp4/?rnd=1726771984280
IP
172.67.152.38:443
ASN
#13335 CLOUDFLARENET

Requested by
https://m.nudeshark.mobi/videos/9523/
Certificate
IssuerGoogle Trust Services
Subjectnudeshark.mobi
FingerprintEA:9E:DB:13:53:5E:E2:47:61:1E:BB:B4:02:1E:4F:31:C9:06:5D:F3
ValidityFri, 23 Aug 2024 08:16:12 GMT - Thu, 21 Nov 2024 08:16:11 GMT

File type
ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]
Size
7.0 MB (6993900 bytes)
Hash
b97cf80c1a15a9bf6be364b4f7b8206a
eb53fc1b140e80829f3eb4b788fbdeddaa0c614b
924cb3cd65458fb9797f39c450141caa202a983377e5a01dd98e942c4d6d14bf

HTTP Headers

GET /get_file/1/f573391c4bda36e71d8dca12105a3369cd65ae2995/9000/9523/9523.mp4/?rnd=1726771984280 HTTP/1.1
Host: m.nudeshark.mobi
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
DNT: 1
Connection: keep-alive
Referer: https://m.nudeshark.mobi/videos/9523/
Cookie: PHPSESSID=h5009unprmmj960849dd8ku2sc; kt_qparams=id%3D9523; kt_ips=91.90.42.154; kt_tcookie=1; kt_is_visited=1
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 206 Partial Content
date: Thu, 19 Sep 2024 18:53:04 GMT
content-type: video/mp4
content-length: 6993900
last-modified: Wed, 28 Feb 2024 03:23:18 GMT
content-disposition: inline; filename="9523.mp4"
etag: "65dea726-6ab7ec"
content-range: bytes 0-6993899/6993900
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=u14HM38pyiWaVymUTa2bmOMqOTW3QsGi9JPwiT2GGo3zXAQe6%2FJqXCXkUu7Zr41p80CX9o8bR7nH0sIJk%2B2Lmjmqulhf8FDdgPXMsQFU%2F%2FQCc5GUoxcySv%2FHPEjUmkEOW1yu"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8c5bc6c67a89ba81-BRU
X-Firefox-Spdy: h2

m.nudeshark.mobi/player/stats.php?embed=0&device_type=1&event=VideoError,&rnd=1726771984590

172.67.152.38

200 OK

43 B

URL GET HTTP/2
m.nudeshark.mobi/player/stats.php?embed=0&device_type=1&event=VideoError,&rnd=1726771984590
IP
172.67.152.38:443
ASN
#13335 CLOUDFLARENET

Requested by
https://m.nudeshark.mobi/videos/9523/
Certificate
IssuerGoogle Trust Services
Subjectnudeshark.mobi
FingerprintEA:9E:DB:13:53:5E:E2:47:61:1E:BB:B4:02:1E:4F:31:C9:06:5D:F3
ValidityFri, 23 Aug 2024 08:16:12 GMT - Thu, 21 Nov 2024 08:16:11 GMT

File type
GIF image data, version 89a, 1 x 1
Size
43 B (43 bytes)
Hash
57f187c7a868faeac558007a8eb6cb2e
11ab10ab109fdb53d91d444ac781101f5a6360c6
aa03dc59bdca72631d2301e4297cfa030bd31b907dc138e7b973d12311c90a22

HTTP Headers

GET /player/stats.php?embed=0&device_type=1&event=VideoError,&rnd=1726771984590 HTTP/1.1
Host: m.nudeshark.mobi
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://m.nudeshark.mobi/videos/9523/
Cookie: PHPSESSID=h5009unprmmj960849dd8ku2sc; kt_qparams=id%3D9523; kt_ips=91.90.42.154; kt_tcookie=1; kt_is_visited=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Thu, 19 Sep 2024 18:53:04 GMT
content-type: image/gif
content-length: 43
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=SojcsYb3bb4O2T0WhdHPZHMle796JOqZ3HnDxZp22Qjk8VrZ7mnpBRay3cGl98%2BZ7ChhkErxW9xcucAm7W%2FEmW8XVfJ5c05iEzh%2FX0tfNaMCFP3EYLK4yceT3Eo1zYwKjDN2"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8c5bc6c8ce99ba81-BRU
X-Firefox-Spdy: h2

r10.o.lencr.org/

23.33.119.57

504 B

URL
r10.o.lencr.org/
IP
23.33.119.57:0
ASN
#20940 Akamai International B.V.

File type
data
Size
504 B (504 bytes)
Hash
910ff883e353997b529e9529c4ba517e
0f716befd1d32b329017943606a72191cf2fd867
ae1d87ba6ffca52635b869ca3d071fc3cb97e37b16a4f56c5a07c0c0bd9ceee7

HTTP Headers

POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "AE1D87BA6FFCA52635B869CA3D071FC3CB97E37B16A4F56C5A07C0C0BD9CEEE7"
Last-Modified: Tue, 17 Sep 2024 15:21:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2066
Expires: Thu, 19 Sep 2024 19:27:31 GMT
Date: Thu, 19 Sep 2024 18:53:05 GMT
Connection: keep-alive

r10.o.lencr.org/

23.33.119.27

504 B

URL
r10.o.lencr.org/
IP
23.33.119.27:0
ASN
#20940 Akamai International B.V.

File type
data
Size
504 B (504 bytes)
Hash
910ff883e353997b529e9529c4ba517e
0f716befd1d32b329017943606a72191cf2fd867
ae1d87ba6ffca52635b869ca3d071fc3cb97e37b16a4f56c5a07c0c0bd9ceee7

HTTP Headers

POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "AE1D87BA6FFCA52635B869CA3D071FC3CB97E37B16A4F56C5A07C0C0BD9CEEE7"
Last-Modified: Tue, 17 Sep 2024 15:21:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2072
Expires: Thu, 19 Sep 2024 19:27:37 GMT
Date: Thu, 19 Sep 2024 18:53:05 GMT
Connection: keep-alive

r11.o.lencr.org/

23.36.76.226

504 B

URL
r11.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
504 B (504 bytes)
Hash
45c440d4cead985bd4f1f69f84162f7b
1251ec50f9cfdb548fe2e0fef4cbb146fd92a56b
91127a16631d0d606cac9cac289cf04f0ccb542d3f8954ef4bc5caaef374c238

HTTP Headers

POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "91127A16631D0D606CAC9CAC289CF04F0CCB542D3F8954EF4BC5CAAEF374C238"
Last-Modified: Tue, 17 Sep 2024 14:39:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4891
Expires: Thu, 19 Sep 2024 20:14:37 GMT
Date: Thu, 19 Sep 2024 18:53:06 GMT
Connection: keep-alive

r11.o.lencr.org/

23.36.76.226

504 B

URL
r11.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
504 B (504 bytes)
Hash
45c440d4cead985bd4f1f69f84162f7b
1251ec50f9cfdb548fe2e0fef4cbb146fd92a56b
91127a16631d0d606cac9cac289cf04f0ccb542d3f8954ef4bc5caaef374c238

HTTP Headers

POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "91127A16631D0D606CAC9CAC289CF04F0CCB542D3F8954EF4BC5CAAEF374C238"
Last-Modified: Tue, 17 Sep 2024 14:39:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4891
Expires: Thu, 19 Sep 2024 20:14:37 GMT
Date: Thu, 19 Sep 2024 18:53:06 GMT
Connection: keep-alive

r11.o.lencr.org/

23.36.76.226

504 B

URL
r11.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
504 B (504 bytes)
Hash
45c440d4cead985bd4f1f69f84162f7b
1251ec50f9cfdb548fe2e0fef4cbb146fd92a56b
91127a16631d0d606cac9cac289cf04f0ccb542d3f8954ef4bc5caaef374c238

HTTP Headers

POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "91127A16631D0D606CAC9CAC289CF04F0CCB542D3F8954EF4BC5CAAEF374C238"
Last-Modified: Tue, 17 Sep 2024 14:39:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4891
Expires: Thu, 19 Sep 2024 20:14:37 GMT
Date: Thu, 19 Sep 2024 18:53:06 GMT
Connection: keep-alive

m.nudeshark.mobi/favicon.ico

172.67.152.38

200 OK

8.4 kB

URL GET HTTP/2
m.nudeshark.mobi/favicon.ico
IP
172.67.152.38:443
ASN
#13335 CLOUDFLARENET

Requested by
https://m.nudeshark.mobi/videos/9523/
Certificate
IssuerGoogle Trust Services
Subjectnudeshark.mobi
FingerprintEA:9E:DB:13:53:5E:E2:47:61:1E:BB:B4:02:1E:4F:31:C9:06:5D:F3
ValidityFri, 23 Aug 2024 08:16:12 GMT - Thu, 21 Nov 2024 08:16:11 GMT

File type
gzip compressed data, max speed, from Unix
Size
8.4 kB (8369 bytes)
Hash
22204054c0e7594140dbd0d4a17e1206
f8671a610d6949be4b0a6caca3cd39c5f7847ac3
8445831be9b64b0c31a9ca840c4fec2b36ad4cbea5f7ee71a495182840896a08

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: m.nudeshark.mobi
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://m.nudeshark.mobi/videos/9523/
Cookie: PHPSESSID=h5009unprmmj960849dd8ku2sc; kt_qparams=id%3D9523; kt_ips=91.90.42.154; kt_tcookie=1; kt_is_visited=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Thu, 19 Sep 2024 18:53:05 GMT
content-type: image/x-icon
last-modified: Fri, 23 Aug 2024 13:52:22 GMT
etag: W/"66c89416-c6"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: HIT
age: 486
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Gy8XHF1FK0K0tF1bkaH2A07BPbjtnWL%2FyCnFKwdZxguZq9mfzTvoi2MnYSeNHATdGHbqiz5fTxQgx0BMoYblGXDe06FQ%2Br0JhfB%2BRtKEw4cmCs%2BcIWAzdHWtGshYGTDGyWey"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8c5bc6cbbbe3ba81-BRU
X-Firefox-Spdy: h2

m.nudeshark.mobi/player/skin/youtube.css

172.67.152.38

200 OK

32 kB

URL GET HTTP/2
m.nudeshark.mobi/player/skin/youtube.css
IP
172.67.152.38:443
ASN
#13335 CLOUDFLARENET

Requested by
https://m.nudeshark.mobi/videos/9523/
Certificate
IssuerGoogle Trust Services
Subjectnudeshark.mobi
FingerprintEA:9E:DB:13:53:5E:E2:47:61:1E:BB:B4:02:1E:4F:31:C9:06:5D:F3
ValidityFri, 23 Aug 2024 08:16:12 GMT - Thu, 21 Nov 2024 08:16:11 GMT

File type
ASCII text, with CRLF line terminators
Size
32 kB (32396 bytes)
Hash
81ff912f4df3311e9e227d978a8185ac
2f5ed1a844010ddc069c296ad8ef001249989dbe
f3f8c482f7fdf32003c75bbc7be7003d66da5fa995489f0e35fef247389bb236

HTTP Headers

GET /player/skin/youtube.css HTTP/1.1
Host: m.nudeshark.mobi
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://m.nudeshark.mobi/videos/9523/
Cookie: PHPSESSID=h5009unprmmj960849dd8ku2sc; kt_qparams=id%3D9523; kt_ips=91.90.42.154
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Thu, 19 Sep 2024 18:53:03 GMT
content-type: text/css
last-modified: Fri, 23 Aug 2024 13:52:25 GMT
etag: W/"66c89419-7e8c"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=h735Q2pdV0UiGvP0Wm39xKgK%2BBbzx9%2FJMuyeALKab0ccjaf9C3EXNhn2zEyXSLkvK7EvD%2BAHRRsLTB0ePToxYwZbFJCsD%2BqWnKuAudpuouapRMoNiKlw3rjdfej6qlj2ND72"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8c5bc6c31c8fba81-BRU
X-Firefox-Spdy: h2

isopik.com/wnload?a=1&e=aeyJwaWQiOjExMzA5MzMsInNpZCI6MTMyMzg5NSwid2lkIjo1MzU0OTEsImQiOiJtLm51ZGVzaGFyay5tb2JpIiwibGkiOjF9&tz=0&if=0&u=aHR0cHM6Ly9tLm51ZGVzaGFyay5tb2JpL3ZpZGVvcy85NTIzLw==&inc=1

185.162.85.20

200 OK

407 B

URL GET HTTP/2
isopik.com/wnload?a=1&e=aeyJwaWQiOjExMzA5MzMsInNpZCI6MTMyMzg5NSwid2lkIjo1MzU0OTEsImQiOiJtLm51ZGVzaGFyay5tb2JpIiwibGkiOjF9&tz=0&if=0&u=aHR0cHM6Ly9tLm51ZGVzaGFyay5tb2JpL3ZpZGVvcy85NTIzLw==&inc=1
IP
185.162.85.20:443
ASN
#39572 DataWeb Global Group B.V.

Requested by
https://m.nudeshark.mobi/videos/9523/
Certificate
IssuerLet's Encrypt
Subjectisopik.com
Fingerprint8C:20:68:8C:14:3B:AD:EC:05:3E:74:D6:82:1A:CF:52:76:9F:72:A8
ValidityMon, 05 Aug 2024 13:53:39 GMT - Sun, 03 Nov 2024 13:53:38 GMT

File type
Unicode text, UTF-8 text, with very long lines (448), with no line terminators
Size
407 B (407 bytes)
Hash
e2b44bc5ed4f2022502262e5e9020da5
18758ff28cfe5e97dd6e055669907402a16c9f4a
f0bff40cd5b2fd03f7c205aa678e481ee237a34347271f62e9e4be059faf2230

HTTP Headers

GET /wnload?a=1&e=aeyJwaWQiOjExMzA5MzMsInNpZCI6MTMyMzg5NSwid2lkIjo1MzU0OTEsImQiOiJtLm51ZGVzaGFyay5tb2JpIiwibGkiOjF9&tz=0&if=0&u=aHR0cHM6Ly9tLm51ZGVzaGFyay5tb2JpL3ZpZGVvcy85NTIzLw==&inc=1 HTTP/1.1
Host: isopik.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://m.nudeshark.mobi/
Origin: https://m.nudeshark.mobi
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx/1.18.0
date: Thu, 19 Sep 2024 18:53:04 GMT
content-type: application/javascript; charset=utf-8
vary: Accept-Encoding
accept-ch: Sec-CH-UA-Platform-Version
access-control-allow-origin: *
access-control-allow-credentials: true
content-encoding: gzip
X-Firefox-Spdy: h2

www.nudeshark.me/contents/videos_screenshots/12000/12480/336x189/1.jpg

162.19.233.148

200 OK

60 kB

URL GET HTTP/1.1
www.nudeshark.me/contents/videos_screenshots/12000/12480/336x189/1.jpg
IP
162.19.233.148:443
ASN
#16276 OVH SAS

Requested by
https://m.nudeshark.mobi/videos/9523/
Certificate
IssuerLet's Encrypt
Subjectnudeshark.me
FingerprintA9:C4:80:F9:EE:42:1C:38:E4:2F:D7:B1:E5:9C:39:84:35:71:F4:24
ValidityWed, 21 Aug 2024 13:26:38 GMT - Tue, 19 Nov 2024 13:26:37 GMT

File type
RIFF (little-endian) data, Web/P image
Size
60 kB (60544 bytes)
Hash
3d7bf04c298b2ee2ee5718d565b777a9
97bf227cb012e652a2ce2b50bb63b54a2a27ff91
4be7ef2c0c83534e2bda2ebe6673acbb48d35b99def79294728424ffbccbdcb6

HTTP Headers

GET /contents/videos_screenshots/12000/12480/336x189/1.jpg HTTP/1.1
Host: www.nudeshark.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://m.nudeshark.mobi/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.24.0
Date: Thu, 19 Sep 2024 18:53:04 GMT
Content-Type: image/jpeg
Content-Length: 60544
Last-Modified: Wed, 18 Sep 2024 12:58:23 GMT
Connection: keep-alive
ETag: "66eace6f-ec80"
Accept-Ranges: bytes

i.wmgtr.com/cic/uwe0gwF2RXoswvsh6KyW-iimZos3_6ts.png

45.133.44.33

200 OK

13 kB

URL GET HTTP/2
i.wmgtr.com/cic/uwe0gwF2RXoswvsh6KyW-iimZos3_6ts.png
IP
45.133.44.33:443
ASN
#39572 DataWeb Global Group B.V.

Requested by
https://m.nudeshark.mobi/videos/9523/
Certificate
IssuerLet's Encrypt
Subjecti.wmgtr.com
FingerprintEC:F1:56:A4:89:B4:73:92:64:FD:97:42:95:1F:0A:B1:F3:64:57:E1
ValiditySun, 18 Aug 2024 03:03:08 GMT - Sat, 16 Nov 2024 03:03:07 GMT

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=2, datetime=2022:08:30 20:15:26], baseline, precision 8, 192x192, components 3
Size
13 kB (13188 bytes)
Hash
47a01952086fc563140600937f1cfe58
6ce721ef10c9299d95613a32b1d1f201e20d6b3c
4db017b689878a5b038bf012414b30d924ed1c78475ade9f44d9737195df62ba

HTTP Headers

GET /cic/uwe0gwF2RXoswvsh6KyW-iimZos3_6ts.png HTTP/1.1
Host: i.wmgtr.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Thu, 19 Sep 2024 18:53:05 GMT
content-type: image/jpeg
server: nginx/1.19.0
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-option: nosniff
cache-control: max-age=82800
expires: Fri, 20 Sep 2024 17:53:05 GMT
x-proxy-cache: HIT
x-cdn-host-id: ah1742,ds5859
access-control-allow-origin: *
X-Firefox-Spdy: h2

m.nudeshark.mobi/static/styles/jquery.fancybox-white.css?v=9.0

172.67.152.38

200 OK

5.4 kB

URL GET HTTP/2
m.nudeshark.mobi/static/styles/jquery.fancybox-white.css?v=9.0
IP
172.67.152.38:443
ASN
#13335 CLOUDFLARENET

Requested by
https://m.nudeshark.mobi/videos/9523/
Certificate
IssuerGoogle Trust Services
Subjectnudeshark.mobi
FingerprintEA:9E:DB:13:53:5E:E2:47:61:1E:BB:B4:02:1E:4F:31:C9:06:5D:F3
ValidityFri, 23 Aug 2024 08:16:12 GMT - Thu, 21 Nov 2024 08:16:11 GMT

File type
ASCII text, with very long lines (6067), with no line terminators
Size
5.4 kB (5350 bytes)
Hash
5969f492a8ff2f900448f038fce172d6
2fc805464179d748bf831117779e3a4f468fbd68
879c9712a6c082c442b3442eb893c995b083fff9f16d9c97a45c0bd056f3a143

HTTP Headers

GET /static/styles/jquery.fancybox-white.css?v=9.0 HTTP/1.1
Host: m.nudeshark.mobi
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://m.nudeshark.mobi/videos/9523/
Cookie: PHPSESSID=h5009unprmmj960849dd8ku2sc; kt_qparams=id%3D9523; kt_ips=91.90.42.154
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Thu, 19 Sep 2024 18:53:03 GMT
content-type: text/css
last-modified: Fri, 23 Aug 2024 13:52:41 GMT
etag: W/"66c89429-14e6"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: HIT
age: 485
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=G6pSvHwvQ6Ad1lozZN9w%2F0IwMxuWrECGuTXlG%2BbEIUFQYgtrey16g1ScZQiddgI1gETp2A3%2B5N%2BoiDjF0ekRnfU5xonA1JT6Euq0m3b9exNi1X1kBNZpfgFvMR0tmCVUF6KW"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8c5bc6c189f6ba81-BRU
X-Firefox-Spdy: h2

m.nudeshark.mobi/videos/9523/

172.67.152.38

200 OK

54 kB

URL User Request GET HTTP/2
m.nudeshark.mobi/videos/9523/
IP
172.67.152.38:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerGoogle Trust Services
Subjectnudeshark.mobi
FingerprintEA:9E:DB:13:53:5E:E2:47:61:1E:BB:B4:02:1E:4F:31:C9:06:5D:F3
ValidityFri, 23 Aug 2024 08:16:12 GMT - Thu, 21 Nov 2024 08:16:11 GMT

File type

Size
54 kB (53855 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /videos/9523/ HTTP/1.1
Host: m.nudeshark.mobi
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Thu, 19 Sep 2024 18:53:03 GMT
content-type: text/html; charset=utf-8
x-frame-options: SAMEORIGIN
set-cookie: PHPSESSID=h5009unprmmj960849dd8ku2sc; path=/; domain=.m.nudeshark.mobi; secure; SameSite=None
kt_qparams=id%3D9523; expires=Fri, 20-Sep-2024 18:53:03 GMT; Max-Age=86400; path=/; domain=.m.nudeshark.mobi; secure; SameSite=None
kt_ips=91.90.42.154; expires=Fri, 20-Sep-2024 18:53:03 GMT; Max-Age=86400; path=/; domain=.m.nudeshark.mobi; secure; SameSite=None
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
vary: Accept-Encoding
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bnaDDb1OHSlgNAktXXmQIX0V%2BFQ5EL51dDqleT1pYf9nKf82ob0g4U7Gum1If2dWgoK3d9XA5MJH6UU%2BrKiUn2IfV%2BmJ%2Bhxbw82k8vGiGMpqSM3Q0Usvc7ggHaKG6QZU53xw"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
speculation-rules: "/cdn-cgi/speculation"
server: cloudflare
cf-ray: 8c5bc6bf2d8aba81-BRU
content-encoding: br
X-Firefox-Spdy: h2

m.nudeshark.mobi/static/js/main.min.js?v=9.0

172.67.152.38

200 OK

208 kB

URL GET HTTP/2
m.nudeshark.mobi/static/js/main.min.js?v=9.0
IP
172.67.152.38:443
ASN
#13335 CLOUDFLARENET

Requested by
https://m.nudeshark.mobi/videos/9523/
Certificate
IssuerGoogle Trust Services
Subjectnudeshark.mobi
FingerprintEA:9E:DB:13:53:5E:E2:47:61:1E:BB:B4:02:1E:4F:31:C9:06:5D:F3
ValidityFri, 23 Aug 2024 08:16:12 GMT - Thu, 21 Nov 2024 08:16:11 GMT

File type

Size
208 kB (207724 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /static/js/main.min.js?v=9.0 HTTP/1.1
Host: m.nudeshark.mobi
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://m.nudeshark.mobi/videos/9523/
Cookie: PHPSESSID=h5009unprmmj960849dd8ku2sc; kt_qparams=id%3D9523; kt_ips=91.90.42.154
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Thu, 19 Sep 2024 18:53:03 GMT
content-type: application/javascript; charset=utf-8
last-modified: Fri, 23 Aug 2024 13:52:41 GMT
etag: W/"66c89429-32b6c"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: HIT
age: 485
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=XH9g7wxVJEaqdiqKl45UXPQk2eBO30Fl6FCfDNUfOS2%2FPML%2F2kqYy84rfG%2FhA4FDoRVJsnV2KuM8Hvk15%2FvbacW0QSX53fx5Tjta8d8hITZnX%2B%2FjYY3k4mcNBxBBFS%2FWpmMj"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8c5bc6c18a04ba81-BRU
X-Firefox-Spdy: h2

m.nudeshark.mobi/get_file/1/92324c96e60fc52582955ceebbb1a9a01f089b6fd1/9000/9523/9523.mp4/?rnd=1726771984344

172.67.152.38

200 OK

43 B

URL GET HTTP/2
m.nudeshark.mobi/get_file/1/92324c96e60fc52582955ceebbb1a9a01f089b6fd1/9000/9523/9523.mp4/?rnd=1726771984344
IP
172.67.152.38:443
ASN
#13335 CLOUDFLARENET

Requested by
https://m.nudeshark.mobi/videos/9523/
Certificate
IssuerGoogle Trust Services
Subjectnudeshark.mobi
FingerprintEA:9E:DB:13:53:5E:E2:47:61:1E:BB:B4:02:1E:4F:31:C9:06:5D:F3
ValidityFri, 23 Aug 2024 08:16:12 GMT - Thu, 21 Nov 2024 08:16:11 GMT

File type
GIF image data, version 89a, 1 x 1
Size
43 B (43 bytes)
Hash
57f187c7a868faeac558007a8eb6cb2e
11ab10ab109fdb53d91d444ac781101f5a6360c6
aa03dc59bdca72631d2301e4297cfa030bd31b907dc138e7b973d12311c90a22

HTTP Headers

GET /get_file/1/92324c96e60fc52582955ceebbb1a9a01f089b6fd1/9000/9523/9523.mp4/?rnd=1726771984344 HTTP/1.1
Host: m.nudeshark.mobi
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://m.nudeshark.mobi/videos/9523/
Cookie: PHPSESSID=h5009unprmmj960849dd8ku2sc; kt_qparams=id%3D9523; kt_ips=91.90.42.154; kt_tcookie=1; kt_is_visited=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Thu, 19 Sep 2024 18:53:04 GMT
content-type: image/gif
content-length: 43
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zjPyzNBCI6UECIeGGV9BefDW8Ia587l%2BCbVCYmOI34YlSjQk6GQWLyZf1FXH7MhTrRVLej2xAkWxmjjwYFeM344Wje2sCqUsVK0%2FHI1lcShqlbrPrUXmjApYvUIkhZcYJKM8"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8c5bc6c63a2eba81-BRU
X-Firefox-Spdy: h2

udzpel.com/template/livechat1.html

104.21.43.91

200 OK

6.0 kB

URL GET HTTP/2
udzpel.com/template/livechat1.html
IP
104.21.43.91:443
ASN
#13335 CLOUDFLARENET

Requested by
https://m.nudeshark.mobi/videos/9523/
Certificate
IssuerGoogle Trust Services
Subjectudzpel.com
Fingerprint02:0E:A2:2B:38:AD:BB:F1:A6:92:0B:F3:46:74:AF:39:9A:04:31:54
ValidityMon, 19 Aug 2024 11:49:23 GMT - Sun, 17 Nov 2024 11:49:22 GMT

File type
HTML document, ASCII text, with very long lines (6115), with no line terminators
Size
6.0 kB (6035 bytes)
Hash
5aa6524904359ebe9bcea3b4053a8f54
1b95a0a1dfd0d8bce945ad2a88da4f5d8e5d0c68
b792e7b6c4b4438c9c9b2f9dfad293dde528da2fc617e3bd527221c74a8596b2

HTTP Headers

GET /template/livechat1.html HTTP/1.1
Host: udzpel.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://m.nudeshark.mobi/
Origin: https://m.nudeshark.mobi
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Thu, 19 Sep 2024 18:53:04 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
access-control-allow-origin: https://m.nudeshark.mobi
cache-control: max-age=14400
cf-cache-status: EXPIRED
last-modified: Thu, 19 Sep 2024 18:53:04 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=XMpLw2PxhVNTZ5bU7XnP4Y2T3ZgXanPT9Wlmrrh7aSSDS18MiZsr%2BM0eT%2FoaVLO6KDSn9HAtVXPJtrT35tyOipynj5mgWDHOm3P2WnFXj%2BHRLFo049CvWTQR10KX"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
speculation-rules: "/cdn-cgi/speculation"
server: cloudflare
cf-ray: 8c5bc6c6fddb5b3e-FRA
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

mcizas.com/pw/waWQiOjExMzA5MzMsInNpZCI6MTMyMzg5NSwid2lkIjo1MzU0OTEsInNyYyI6Mn0=eyJ.js

172.67.207.240

200 OK

68 kB

URL GET HTTP/2
mcizas.com/pw/waWQiOjExMzA5MzMsInNpZCI6MTMyMzg5NSwid2lkIjo1MzU0OTEsInNyYyI6Mn0=eyJ.js
IP
172.67.207.240:443
ASN
#13335 CLOUDFLARENET

Requested by
https://m.nudeshark.mobi/videos/9523/
Certificate
IssuerGoogle Trust Services
Subjectmcizas.com
FingerprintDD:11:FD:F2:67:10:80:2B:0E:76:29:7E:C9:59:8F:0F:83:22:8B:CE
ValiditySat, 27 Jul 2024 18:18:01 GMT - Fri, 25 Oct 2024 18:18:00 GMT

File type

Size
68 kB (67503 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /pw/waWQiOjExMzA5MzMsInNpZCI6MTMyMzg5NSwid2lkIjo1MzU0OTEsInNyYyI6Mn0=eyJ.js HTTP/1.1
Host: mcizas.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://m.nudeshark.mobi/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Thu, 19 Sep 2024 18:53:03 GMT
content-type: application/javascript; charset=UTF-8
vary: Accept-Encoding
access-control-allow-origin: https://m.nudeshark.mobi
e-tag: 9889d0ce6d894c9d156c44d8cd429cda
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: HIT
age: 4935
last-modified: Thu, 19 Sep 2024 17:30:48 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5jtKN1IXaJM87Nj6FnYdTWrevxtOIxV4B%2F6GPbqsgy15oGHq9%2BbIqMJRJIKDTn2JzsRKl3cW055ZtIOWc2CxoKzPV%2Bs39V1oH%2BfYmoikdFdCAZJ08pXl9QwNEQeU"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8c5bc6c22d986904-FRA
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

a.pemsrv.com/popunder1000.js

185.76.9.27

200 OK

101 kB

URL GET HTTP/2
a.pemsrv.com/popunder1000.js
IP
185.76.9.27:443
ASN
#60068 Datacamp Limited

Requested by
https://m.nudeshark.mobi/videos/9523/
Certificate
IssuerLet's Encrypt
Subjectpemsrv.com
Fingerprint6C:E1:88:66:9E:83:C8:22:CB:50:58:EF:7A:C6:A5:6A:2A:6F:D2:F6
ValidityThu, 12 Sep 2024 10:33:32 GMT - Wed, 11 Dec 2024 10:33:31 GMT

File type

Size
101 kB (100880 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /popunder1000.js HTTP/1.1
Host: a.pemsrv.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://m.nudeshark.mobi/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Thu, 19 Sep 2024 18:53:03 GMT
content-type: application/javascript
etag: W/"75a53e6fcc145a4793247faa696"
expires: Wed, 18 Sep 2024 20:02:40 GMT
cache-control: max-age=10800
x-robots-tag: noindex, follow
access-control-allow-origin: *
x-77-nzt: EwwBuUwJGwH31xkAAAwBuUwKEwH3JwAAAAwBJRPCNAG3VAAAAA
x-77-nzt-ray: fdb54123609f48a90f73ec663b642536
x-accel-expires: @1726776168
x-accel-date: 1726765368
x-accel-date-max: 1726678960
x-77-cache: HIT
x-77-age: 6615
vary: Accept-Encoding
content-encoding: gzip
server: CDN77-Turbo
x-cache: HIT
x-age: 6615
x-77-pop: stockholmSE
X-Firefox-Spdy: h2

www.nudeshark.me/contents/videos_screenshots/12000/12485/336x189/1.jpg

162.19.233.148

200 OK

55 kB

URL GET HTTP/1.1
www.nudeshark.me/contents/videos_screenshots/12000/12485/336x189/1.jpg
IP
162.19.233.148:443
ASN
#16276 OVH SAS

Requested by
https://m.nudeshark.mobi/videos/9523/
Certificate
IssuerLet's Encrypt
Subjectnudeshark.me
FingerprintA9:C4:80:F9:EE:42:1C:38:E4:2F:D7:B1:E5:9C:39:84:35:71:F4:24
ValidityWed, 21 Aug 2024 13:26:38 GMT - Tue, 19 Nov 2024 13:26:37 GMT

File type
RIFF (little-endian) data, Web/P image
Size
55 kB (54654 bytes)
Hash
af767f4b90b63e32f7b572515e3bcb73
a48c226cc0fb81fd0a69cc5920e29cf36437b7b0
63d28075a6fa8c78d40ade7881a147cffb697b5f78b2edaf7470ca17288f7d41

HTTP Headers

GET /contents/videos_screenshots/12000/12485/336x189/1.jpg HTTP/1.1
Host: www.nudeshark.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://m.nudeshark.mobi/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.24.0
Date: Thu, 19 Sep 2024 18:53:04 GMT
Content-Type: image/jpeg
Content-Length: 54654
Last-Modified: Wed, 18 Sep 2024 13:17:08 GMT
Connection: keep-alive
ETag: "66ead2d4-d57e"
Accept-Ranges: bytes

m.nudeshark.mobi/static/images/search.svg

172.67.152.38

200 OK

3.1 kB

URL GET HTTP/2
m.nudeshark.mobi/static/images/search.svg
IP
172.67.152.38:443
ASN
#13335 CLOUDFLARENET

Requested by
https://m.nudeshark.mobi/videos/9523/
Certificate
IssuerGoogle Trust Services
Subjectnudeshark.mobi
FingerprintEA:9E:DB:13:53:5E:E2:47:61:1E:BB:B4:02:1E:4F:31:C9:06:5D:F3
ValidityFri, 23 Aug 2024 08:16:12 GMT - Thu, 21 Nov 2024 08:16:11 GMT

File type
SVG Scalable Vector Graphics image
Size
3.1 kB (3139 bytes)
Hash
245883cf09247af2859230e7dd7436f9
1578665972ddbee56559c1667b1690fa657c2ef6
a0a22ad7a635bb8d69f2a00ff909164bdb68ffa25c4b7a2c17aae8981159341d

HTTP Headers

GET /static/images/search.svg HTTP/1.1
Host: m.nudeshark.mobi
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://m.nudeshark.mobi/static/styles/all-responsive-white.css?v=9.0
Cookie: PHPSESSID=h5009unprmmj960849dd8ku2sc; kt_qparams=id%3D9523; kt_ips=91.90.42.154
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Thu, 19 Sep 2024 18:53:03 GMT
content-type: image/svg+xml
last-modified: Fri, 23 Aug 2024 13:52:40 GMT
etag: W/"66c89428-c43"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: HIT
age: 485
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2ZuSzBSluxp3HMPiGUljRLaxfd%2F5CD8VU1N%2FlcVvTKqFD0L3hSLNeR3n80tjAevHj0hsIymlhfW3M1YODP4pedKNhXkl%2BB0mW%2BVeD0gHm3%2B4TltuM3DDnFkIwI%2F2crbsaPT7"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8c5bc6c2abe7ba81-BRU
X-Firefox-Spdy: h2

m.nudeshark.mobi/player/stats.php?embed=0&device_type=1&event=PlayerLoad,&rnd=1726771984375

172.67.152.38

200 OK

43 B

URL GET HTTP/2
m.nudeshark.mobi/player/stats.php?embed=0&device_type=1&event=PlayerLoad,&rnd=1726771984375
IP
172.67.152.38:443
ASN
#13335 CLOUDFLARENET

Requested by
https://m.nudeshark.mobi/videos/9523/
Certificate
IssuerGoogle Trust Services
Subjectnudeshark.mobi
FingerprintEA:9E:DB:13:53:5E:E2:47:61:1E:BB:B4:02:1E:4F:31:C9:06:5D:F3
ValidityFri, 23 Aug 2024 08:16:12 GMT - Thu, 21 Nov 2024 08:16:11 GMT

File type
GIF image data, version 89a, 1 x 1
Size
43 B (43 bytes)
Hash
57f187c7a868faeac558007a8eb6cb2e
11ab10ab109fdb53d91d444ac781101f5a6360c6
aa03dc59bdca72631d2301e4297cfa030bd31b907dc138e7b973d12311c90a22

HTTP Headers

GET /player/stats.php?embed=0&device_type=1&event=PlayerLoad,&rnd=1726771984375 HTTP/1.1
Host: m.nudeshark.mobi
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://m.nudeshark.mobi/videos/9523/
Cookie: PHPSESSID=h5009unprmmj960849dd8ku2sc; kt_qparams=id%3D9523; kt_ips=91.90.42.154; kt_tcookie=1; kt_is_visited=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Thu, 19 Sep 2024 18:53:04 GMT
content-type: image/gif
content-length: 43
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ms3j94mtGmcxRCN6qnlk%2BqnpcewLU4EyHXBvTIN7Fiv9C6Z9ACl72fSCpqE6ZQ9n28q4Knrr06358f3wxa2pGIczOR7OPoqDECSsWkTpdY%2FOr5GQxQsYnLBw7ey5dA19O6Xy"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8c5bc6c67a79ba81-BRU
X-Firefox-Spdy: h2

i.wmgtr.com/cim/KJpVFEpVyZI-GXQzzfsoQce6d-yHkdN8.png

0.0.0.0

0 B

URL GET
i.wmgtr.com/cim/KJpVFEpVyZI-GXQzzfsoQce6d-yHkdN8.png
IP
0.0.0.0:0
ASN
#0

Requested by
https://m.nudeshark.mobi/videos/9523/
Certificate
IssuerLet's Encrypt
Subjecti.wmgtr.com
FingerprintEC:F1:56:A4:89:B4:73:92:64:FD:97:42:95:1F:0A:B1:F3:64:57:E1
ValiditySun, 18 Aug 2024 03:03:08 GMT - Sat, 16 Nov 2024 03:03:07 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /cim/KJpVFEpVyZI-GXQzzfsoQce6d-yHkdN8.png HTTP/1.1
Host: i.wmgtr.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Thu, 19 Sep 2024 18:53:05 GMT
content-type: image/png
server: nginx/1.19.0
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-option: nosniff
content-encoding: gzip
cache-control: max-age=82800
expires: Fri, 20 Sep 2024 17:53:05 GMT
x-proxy-cache: HIT
x-cdn-host-id: ah1742,ds5859
access-control-allow-origin: *
X-Firefox-Spdy: h2

m.nudeshark.mobi/static/styles/all-responsive-white.css?v=9.0

172.67.152.38

200 OK

141 kB

URL GET HTTP/2
m.nudeshark.mobi/static/styles/all-responsive-white.css?v=9.0
IP
172.67.152.38:443
ASN
#13335 CLOUDFLARENET

Requested by
https://m.nudeshark.mobi/videos/9523/
Certificate
IssuerGoogle Trust Services
Subjectnudeshark.mobi
FingerprintEA:9E:DB:13:53:5E:E2:47:61:1E:BB:B4:02:1E:4F:31:C9:06:5D:F3
ValidityFri, 23 Aug 2024 08:16:12 GMT - Thu, 21 Nov 2024 08:16:11 GMT

File type
ASCII text, with very long lines (726)
Size
141 kB (140833 bytes)
Hash
bf3d2ace015ca16f1f34d5230340c534
06f6e1023eac7e434de887959b9db0e3d4b3d95e
99002bbd7564a1e1e86c136ef65b805320a0af7bb8767b46ebfa437133b4c8ad

HTTP Headers

GET /static/styles/all-responsive-white.css?v=9.0 HTTP/1.1
Host: m.nudeshark.mobi
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://m.nudeshark.mobi/videos/9523/
Cookie: PHPSESSID=h5009unprmmj960849dd8ku2sc; kt_qparams=id%3D9523; kt_ips=91.90.42.154
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Thu, 19 Sep 2024 18:53:03 GMT
content-type: text/css
last-modified: Fri, 23 Aug 2024 13:52:41 GMT
etag: W/"66c89429-22621"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: HIT
age: 485
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ghTPNOaVvjX9P8zfRyoVp59YgFYvsE%2F4bHLwjaTQAXvbKkidqTIiBRB1eJKAPVw9Mef5%2FUEfwTe5UHGELFfqWw6oTbPpLG7cY%2FPIWaw413BDKd7Luvep9JwbeLjIGbmv%2B3BC"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8c5bc6c189f1ba81-BRU
X-Firefox-Spdy: h2

m.nudeshark.mobi/videos/9523/?video_id=9523&mode=async&action=js_stats&rand=1726771983976

172.67.152.38

200 OK

43 B

URL GET HTTP/2
m.nudeshark.mobi/videos/9523/?video_id=9523&mode=async&action=js_stats&rand=1726771983976
IP
172.67.152.38:443
ASN
#13335 CLOUDFLARENET

Requested by
https://m.nudeshark.mobi/videos/9523/
Certificate
IssuerGoogle Trust Services
Subjectnudeshark.mobi
FingerprintEA:9E:DB:13:53:5E:E2:47:61:1E:BB:B4:02:1E:4F:31:C9:06:5D:F3
ValidityFri, 23 Aug 2024 08:16:12 GMT - Thu, 21 Nov 2024 08:16:11 GMT

File type
GIF image data, version 89a, 1 x 1
Size
43 B (43 bytes)
Hash
57f187c7a868faeac558007a8eb6cb2e
11ab10ab109fdb53d91d444ac781101f5a6360c6
aa03dc59bdca72631d2301e4297cfa030bd31b907dc138e7b973d12311c90a22

HTTP Headers

GET /videos/9523/?video_id=9523&mode=async&action=js_stats&rand=1726771983976 HTTP/1.1
Host: m.nudeshark.mobi
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://m.nudeshark.mobi/videos/9523/
Cookie: PHPSESSID=h5009unprmmj960849dd8ku2sc; kt_qparams=id%3D9523; kt_ips=91.90.42.154; kt_tcookie=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Thu, 19 Sep 2024 18:53:04 GMT
content-type: image/gif
content-length: 43
x-frame-options: SAMEORIGIN
set-cookie: kt_is_visited=1; expires=Fri, 20-Sep-2024 18:53:04 GMT; Max-Age=86400; path=/; domain=.m.nudeshark.mobi; SameSite=Lax
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=GU6zetfSSLIzX4aUVvkEWIx9rmlIUXxfP%2BuhYk47SrxIjTELB0oqInhnuWZI71eeMarR%2BgoY%2BfxSvA9BIKJ0MDR5zcZcW5COaFXFKkwASQ297RiVcWVyfVMahe%2FVDw1TR0Fc"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8c5bc6c40e5eba81-BRU
X-Firefox-Spdy: h2

nudeshark.mobi/contents/videos_screenshots/9000/9523/preview_720p.mp4.jpg

172.67.152.38

301 Moved Permanently

34 kB

URL GET HTTP/2
nudeshark.mobi/contents/videos_screenshots/9000/9523/preview_720p.mp4.jpg
IP
172.67.152.38:443
ASN
#13335 CLOUDFLARENET

Requested by
https://m.nudeshark.mobi/videos/9523/
Certificate
IssuerGoogle Trust Services
Subjectnudeshark.mobi
FingerprintEA:9E:DB:13:53:5E:E2:47:61:1E:BB:B4:02:1E:4F:31:C9:06:5D:F3
ValidityFri, 23 Aug 2024 08:16:12 GMT - Thu, 21 Nov 2024 08:16:11 GMT

File type

Size
34 kB (34512 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /contents/videos_screenshots/9000/9523/preview_720p.mp4.jpg HTTP/1.1
Host: nudeshark.mobi
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://m.nudeshark.mobi/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 301 Moved Permanently
date: Thu, 19 Sep 2024 18:53:04 GMT
content-type: text/html; charset=iso-8859-1
location: https://www.nudeshark.me/contents/videos_screenshots/9000/9523/preview_720p.mp4.jpg
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=lxOAQGKpvrNJ86pIki9JCW8KkxsRXTj57nYSDnrbgsnkUWiOnPSLXwbydITIcZh2YZzyYKIHqPXF0LeEkOjIci5IPEP4qoDv6eOJ0iC4sEEKGkDsor%2BKzO3Muoit%2F96cbA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
speculation-rules: "/cdn-cgi/speculation"
server: cloudflare
cf-ray: 8c5bc6c67a8eba81-BRU
X-Firefox-Spdy: h2

www.nudeshark.me/contents/videos_screenshots/12000/12483/336x189/1.jpg

162.19.233.148

200 OK

60 kB

URL GET HTTP/1.1
www.nudeshark.me/contents/videos_screenshots/12000/12483/336x189/1.jpg
IP
162.19.233.148:443
ASN
#16276 OVH SAS

Requested by
https://m.nudeshark.mobi/videos/9523/
Certificate
IssuerLet's Encrypt
Subjectnudeshark.me
FingerprintA9:C4:80:F9:EE:42:1C:38:E4:2F:D7:B1:E5:9C:39:84:35:71:F4:24
ValidityWed, 21 Aug 2024 13:26:38 GMT - Tue, 19 Nov 2024 13:26:37 GMT

File type
RIFF (little-endian) data, Web/P image
Size
60 kB (60354 bytes)
Hash
99091691cf69c402626c8197fecfb851
15197556d640b569544e60fc9a08c4d8af1cb78a
fca213957916f2c28b1f924224bbb0017e93ab2a416659836c036b9389fdcb9f

HTTP Headers

GET /contents/videos_screenshots/12000/12483/336x189/1.jpg HTTP/1.1
Host: www.nudeshark.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://m.nudeshark.mobi/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.24.0
Date: Thu, 19 Sep 2024 18:53:04 GMT
Content-Type: image/jpeg
Content-Length: 60354
Last-Modified: Wed, 18 Sep 2024 13:09:42 GMT
Connection: keep-alive
ETag: "66ead116-ebc2"
Accept-Ranges: bytes

www.nudeshark.me/contents/videos_screenshots/12000/12461/336x189/1.jpg

162.19.233.148

200 OK

65 kB

URL GET HTTP/1.1
www.nudeshark.me/contents/videos_screenshots/12000/12461/336x189/1.jpg
IP
162.19.233.148:443
ASN
#16276 OVH SAS

Requested by
https://m.nudeshark.mobi/videos/9523/
Certificate
IssuerLet's Encrypt
Subjectnudeshark.me
FingerprintA9:C4:80:F9:EE:42:1C:38:E4:2F:D7:B1:E5:9C:39:84:35:71:F4:24
ValidityWed, 21 Aug 2024 13:26:38 GMT - Tue, 19 Nov 2024 13:26:37 GMT

File type
RIFF (little-endian) data, Web/P image
Size
65 kB (65376 bytes)
Hash
a3fb7a79e59a3c70318e77278edfc6f8
fe62986ae362bf48bb9f05f884daa9391a38c299
6e5b9a2ab287551d40b0c4090f868ccf53c4adc067d018946e98fc0889ab5f14

HTTP Headers

GET /contents/videos_screenshots/12000/12461/336x189/1.jpg HTTP/1.1
Host: www.nudeshark.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://m.nudeshark.mobi/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.24.0
Date: Thu, 19 Sep 2024 18:53:04 GMT
Content-Type: image/jpeg
Content-Length: 65376
Last-Modified: Wed, 18 Sep 2024 11:50:36 GMT
Connection: keep-alive
ETag: "66eabe8c-ff60"
Accept-Ranges: bytes

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (8)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (49)

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN