r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash dca68db7aea32f6683ce8d542c078f04
19c495238df74fca680e21f18627ff94de5dd2e5
35cab3987fc0e4a41b305cb208c1e33fa38ce8bdfd9f386c3dc0411dd4d5ac61
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "35CAB3987FC0E4A41B305CB208C1E33FA38CE8BDFD9F386C3DC0411DD4D5AC61"
Last-Modified: Mon, 06 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2268
Expires: Thu, 09 Feb 2023 04:30:52 GMT
Date: Thu, 09 Feb 2023 03:53:04 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 565c1bbc5c1c40be1988b3bf6fd9dc1a
cfdba5bc597130461dd67bf6cda53183be592493
60ceb36a8329c92fc49a3caf50daf511a38e01eac21a07d7a0a838166bea058d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "60CEB36A8329C92FC49A3CAF50DAF511A38E01EAC21A07D7A0A838166BEA058D"
Last-Modified: Mon, 06 Feb 2023 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10160
Expires: Thu, 09 Feb 2023 06:42:24 GMT
Date: Thu, 09 Feb 2023 03:53:04 GMT
Connection: keep-alive
likestream.fun/fr/movie/643215/astrix-lix-lempire-du-milieu
162.0.229.49301 Moved Permanently 707 B URL HTTP/1.1 likestream.fun/fr/movie/643215/astrix-lix-lempire-du-milieu
IP 162.0.229.49:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF, LF line terminators
Hash 1304294c0823ca486542ba408ed761e3
b2a70fb2d810ca13985882e6981f33998823e83e
3bbe72f3baa8ec61de17a1d767fca58704769684b7abe9161d0c4eaf4c8f0982
GET /fr/movie/643215/astrix-lix-lempire-du-milieu HTTP/1.1
Host: likestream.fun
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
keep-alive: timeout=5, max=100
content-type: text/html
content-length: 707
date: Thu, 09 Feb 2023 03:53:04 GMT
server: LiteSpeed
location: https://likestream.fun/fr/movie/643215/astrix-lix-lempire-du-milieu
x-turbo-charged-by: LiteSpeed
firefox.settings.services.mozilla.com/v1/
35.241.9.150200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP 35.241.9.150:0
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash bf0c602d32b3c14606f22a86183b5e3c
6eabd8d83475eba731968abe1a05a8bfd272f160
6c6a7c519a9e950c2445ed874a25211a94dd4d3cf3afb0103af9dcd1dbd5ff9e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Alert, Content-Type, Retry-After, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Thu, 09 Feb 2023 03:36:46 GMT
content-type: application/json
age: 978
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash cc14b0d2f7c451f6431dc87ba54d1d60
bab8bfda6fa3e2f17125353f5147211787dc25d0
b58fe18a5cc8fe5aaf49ba7eadd0ef34692892e68e9c52eb5bb56ea27e1300ad
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B58FE18A5CC8FE5AAF49BA7EADD0EF34692892E68E9C52EB5BB56EA27E1300AD"
Last-Modified: Mon, 06 Feb 2023 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11748
Expires: Thu, 09 Feb 2023 07:08:52 GMT
Date: Thu, 09 Feb 2023 03:53:04 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-03-20-18-44-46.chain
34.160.144.191200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-03-20-18-44-46.chain
IP 34.160.144.191:0
File type PEM certificate\012- , ASCII text
Hash e76071a28ee566dababb3834f46d68ed
aebb4e68c1ba2de0f90025283e8ed8470944fde0
78b6df2627172e5b35476bc31020f02898cdc412aaf4337af2c3b049a60912b6
GET /chains/remote-settings.content-signature.mozilla.org-2023-03-20-18-44-46.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: SqtsVLeW6gL9DrFpI5fV59zK8dEjh6ckFq5wAkYTEVyyODOaNP/yHrwQ+jjFJxMaxxJ/ALVPGeA=
x-amz-request-id: 3MZ2BYZ7NHZP5E5Z
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Thu, 09 Feb 2023 03:46:13 GMT
age: 411
last-modified: Sun, 29 Jan 2023 18:44:47 GMT
etag: "e76071a28ee566dababb3834f46d68ed"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 09 Feb 2023 03:53:04 GMT
content-type: application/json
content-length: 12
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-expose-headers: content-type
access-control-allow-credentials: true
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.sectigo.com/
172.64.155.188200 OK 471 B IP 172.64.155.188:0
Hash c4dfbd051d48920febecfeaca730b390
c0963afe8d235db844273d071dd4f16701128de9
5516a85641b90769327d9c2ca22cc6f5246e3676d8d2768a20d70060db8c986c
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 09 Feb 2023 03:53:05 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Tue, 07 Feb 2023 18:35:02 GMT
Expires: Tue, 14 Feb 2023 18:35:01 GMT
Etag: "c0963afe8d235db844273d071dd4f16701128de9"
Cache-Control: max-age=484315,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb1
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7969a7efac781c06-OSL
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
35.241.9.150200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP 35.241.9.150:0
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Last-Modified, Content-Type, Pragma, ETag, Retry-After, Backoff, Expires, Alert, Cache-Control, Content-Length
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Thu, 09 Feb 2023 03:14:53 GMT
age: 2292
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 248ce16379b12f11927ecc3142aec450
fa5b189f2d9182479170cb61cc1723571e437bd2
a8d259b331bdefb00625b9bf057d44d0b3290fda0734c57eda187b04e23d59d4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A8D259B331BDEFB00625B9BF057D44D0B3290FDA0734C57EDA187B04E23D59D4"
Last-Modified: Wed, 08 Feb 2023 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11501
Expires: Thu, 09 Feb 2023 07:04:46 GMT
Date: Thu, 09 Feb 2023 03:53:05 GMT
Connection: keep-alive
ocsp.digicert.com/
93.184.220.29200 OK 279 B IP 93.184.220.29:0
Hash 5c88d3bea11b5e4ab55139b12afd6481
e6f6a45f9cad1fe06edbc5371887199387f51b5f
897d20199934381ef24f0c9c9d1738f5cc504b0ccd5d16005eeb8837955d3ff6
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5772
Cache-Control: max-age=88331
Content-Type: application/ocsp-response
Date: Thu, 09 Feb 2023 03:53:05 GMT
Etag: "63e30da0-117"
Expires: Fri, 10 Feb 2023 04:25:16 GMT
Last-Modified: Wed, 08 Feb 2023 02:49:04 GMT
Server: ECS (ska/F704)
X-Cache: HIT
Content-Length: 279
ocsp.digicert.com/
93.184.220.29200 OK 279 B IP 93.184.220.29:0
Hash b8ad5b23aac490c2e9ccbac5a9dbcc6b
ef73076be963061b44563356cb33201e401f65e8
92d2469a14b9fe0eb637029f9f2782228441a65c44feb1a37b73ccc606e2b55d
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4155
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 09 Feb 2023 03:53:05 GMT
Last-Modified: Thu, 09 Feb 2023 02:43:50 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 279
ocsp.digicert.com/
93.184.220.29200 OK 279 B IP 93.184.220.29:0
Hash 8ba328ca1dafc69ce7b7537cdc89616d
7ff4ddc85601ddb20d852b3b70e152ebb63e439d
27a975bedc82774262e4da67a21436afb618fc1ba3a9a29ca78401e812266929
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 801
Cache-Control: max-age=169764
Content-Type: application/ocsp-response
Date: Thu, 09 Feb 2023 03:53:05 GMT
Etag: "63e45f24-117"
Expires: Sat, 11 Feb 2023 03:02:29 GMT
Last-Modified: Thu, 09 Feb 2023 02:49:08 GMT
Server: ECS (amb/6BC7)
X-Cache: HIT
Content-Length: 279
ocsp.pki.goog/gts1c3
142.250.74.163200 OK 471 B IP 142.250.74.163:0
Hash 0333fa3e34f17f01e9829bd8ee662c23
be4c7a8599038facc49c73d6d14451023bc919e7
8b4ad992549334395b268f43cf73150ed0dfe58801cf9595c3e245ea92dea7d9
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 09 Feb 2023 03:53:05 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
cdnjs.cloudflare.com/ajax/libs/jquery.lazyload/1.9.1/jquery.lazyload.min.js
104.17.24.14200 OK 1.1 kB URL HTTP/2 cdnjs.cloudflare.com/ajax/libs/jquery.lazyload/1.9.1/jquery.lazyload.min.js
IP 104.17.24.14:0
File type ASCII text, with very long lines (3309)
Hash db310084f6971d7dd40451b6f92b45fa
dfde84f68544ca488ce989127db9c3bed1949c07
efea7f70881a83096764db90d02d58a3cc5a79cc11f4a0635c7523a25373cfd2
GET /ajax/libs/jquery.lazyload/1.9.1/jquery.lazyload.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://likestream.fun/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 09 Feb 2023 03:53:05 GMT
content-type: application/javascript; charset=utf-8
content-length: 1120
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03ec3-d35"
last-modified: Mon, 04 May 2020 16:11:47 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 5041416
expires: Tue, 30 Jan 2024 03:53:05 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=jZ%2Fxl81yzA0Rc%2BYwRcUdN3wsVWEjXwwF9kK5Snl6fxvSDsLSf%2BRMHBzrmolFM7lxvfUDor6qYyzEIde%2FzkAGhssIeNcgMKQTi5fmJ2KpqxknmDD3wuvf2ihgwU9A5L4isBR7wHFy"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 7969a7f32e8e0b61-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.163200 OK 471 B IP 142.250.74.163:0
Hash 0333fa3e34f17f01e9829bd8ee662c23
be4c7a8599038facc49c73d6d14451023bc919e7
8b4ad992549334395b268f43cf73150ed0dfe58801cf9595c3e245ea92dea7d9
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 09 Feb 2023 03:53:05 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
i0.wp.com/image.tmdb.org/t/p/w342/yVzn3We2n1rNgYhQVKLWCqLnUNX.jpg
192.0.77.2200 OK 9.6 kB URL HTTP/2 i0.wp.com/image.tmdb.org/t/p/w342/yVzn3We2n1rNgYhQVKLWCqLnUNX.jpg
IP 192.0.77.2:0
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 342x513, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash fe9e1786b3f17a74ac2020fcdca12481
a12b69f2ebcd959dd30175598b87bbb9ff28b85b
977df2d7c9eb4b4c99779b3353fb4054e47f7cd34d4d1b8d03f25f94f1f64682
GET /image.tmdb.org/t/p/w342/yVzn3We2n1rNgYhQVKLWCqLnUNX.jpg HTTP/1.1
Host: i0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://likestream.fun/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 09 Feb 2023 03:53:05 GMT
content-type: image/webp
content-length: 9564
last-modified: Mon, 06 Feb 2023 16:39:03 GMT
expires: Thu, 06 Feb 2025 04:39:03 GMT
cache-control: public, max-age=63115200
link: <http://image.tmdb.org/t/p/w342/yVzn3We2n1rNgYhQVKLWCqLnUNX.jpg>; rel="canonical"
x-content-type-options: nosniff
etag: "3a49d9eaf14b8a91"
vary: Accept
x-nc: MISS arn 7
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
ajax.googleapis.com/ajax/libs/jquery/1.12.1/jquery.min.js
142.250.74.106200 OK 34 kB URL HTTP/2 ajax.googleapis.com/ajax/libs/jquery/1.12.1/jquery.min.js
IP 142.250.74.106:0
File type ASCII text, with very long lines (32039)
Hash da797f41eddbe002235b67c85810269a
05b58750b31dee9cf24225eaaf4bbd85d7c2cd79
83fe560568c425f7cffe295bcb64859263f1d1a629143b2a0aeea410c6e7307a
GET /ajax/libs/jquery/1.12.1/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://likestream.fun/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 34056
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 07 Feb 2023 10:14:58 GMT
expires: Wed, 07 Feb 2024 10:14:58 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
age: 149887
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
i0.wp.com/image.tmdb.org/t/p/w342/1JTXVFgWI4RrYMoZpoF7Xqmd0fP.jpg
192.0.77.2200 OK 13 kB URL HTTP/2 i0.wp.com/image.tmdb.org/t/p/w342/1JTXVFgWI4RrYMoZpoF7Xqmd0fP.jpg
IP 192.0.77.2:0
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 342x470, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 1387ead4f56f006e2b7dfaa981dc139e
7f3e5bfc83f0b0d577f4fb730d5596959fc06f33
969c0e5dbce69a9e807297041073b98f8481b4b4dc3e95944459165db196d0f7
GET /image.tmdb.org/t/p/w342/1JTXVFgWI4RrYMoZpoF7Xqmd0fP.jpg HTTP/1.1
Host: i0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://likestream.fun/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 09 Feb 2023 03:53:05 GMT
content-type: image/webp
content-length: 13070
last-modified: Mon, 06 Feb 2023 22:52:30 GMT
expires: Thu, 06 Feb 2025 10:52:30 GMT
cache-control: public, max-age=63115200
link: <http://image.tmdb.org/t/p/w342/1JTXVFgWI4RrYMoZpoF7Xqmd0fP.jpg>; rel="canonical"
x-content-type-options: nosniff
etag: "a33ae13bb37c642e"
vary: Accept
x-nc: MISS arn 5
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
i0.wp.com/image.tmdb.org/t/p/w342/iFGhNYECJJTUb0iJjwc9y9wFfM1.jpg
192.0.77.2200 OK 26 kB URL HTTP/2 i0.wp.com/image.tmdb.org/t/p/w342/iFGhNYECJJTUb0iJjwc9y9wFfM1.jpg
IP 192.0.77.2:0
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 342x513, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash d302d740572a7da3f62a9d31e9dc5866
2d2f8ce610e59d963d68e755bc4281586f3ffe06
25494a46309e67203e2cf84326e8618a66dbb4036bdf799f2f53d42a655b440f
GET /image.tmdb.org/t/p/w342/iFGhNYECJJTUb0iJjwc9y9wFfM1.jpg HTTP/1.1
Host: i0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://likestream.fun/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 09 Feb 2023 03:53:05 GMT
content-type: image/webp
content-length: 26158
last-modified: Mon, 06 Feb 2023 22:52:31 GMT
expires: Thu, 06 Feb 2025 10:52:31 GMT
cache-control: public, max-age=63115200
link: <http://image.tmdb.org/t/p/w342/iFGhNYECJJTUb0iJjwc9y9wFfM1.jpg>; rel="canonical"
x-content-type-options: nosniff
etag: "2f506e897a626134"
vary: Accept
x-nc: MISS arn 7
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
i0.wp.com/image.tmdb.org/t/p/w342/ps864hiHwGr6QQo8wsON1u1xlIP.jpg
192.0.77.2200 OK 13 kB URL HTTP/2 i0.wp.com/image.tmdb.org/t/p/w342/ps864hiHwGr6QQo8wsON1u1xlIP.jpg
IP 192.0.77.2:0
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 342x493, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 72431146304e2a9ecbe0cfaab4f70dea
de0f115c42d21da8539ddb2a40238d2b6d79a01a
d874942ecac76c4778219094d7503bc977e66d2d30065a6571e30446fedd7dda
GET /image.tmdb.org/t/p/w342/ps864hiHwGr6QQo8wsON1u1xlIP.jpg HTTP/1.1
Host: i0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://likestream.fun/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 09 Feb 2023 03:53:05 GMT
content-type: image/webp
content-length: 13248
last-modified: Sat, 04 Feb 2023 09:46:34 GMT
expires: Mon, 03 Feb 2025 21:46:34 GMT
cache-control: public, max-age=63115200
link: <http://image.tmdb.org/t/p/w342/ps864hiHwGr6QQo8wsON1u1xlIP.jpg>; rel="canonical"
x-content-type-options: nosniff
etag: "0dd6c914645a279f"
vary: Accept
x-nc: MISS arn 4
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 279 B IP 93.184.220.29:0
Hash b8ad5b23aac490c2e9ccbac5a9dbcc6b
ef73076be963061b44563356cb33201e401f65e8
92d2469a14b9fe0eb637029f9f2782228441a65c44feb1a37b73ccc606e2b55d
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3089
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 09 Feb 2023 03:53:05 GMT
Last-Modified: Thu, 09 Feb 2023 03:01:36 GMT
Server: ECS (ska/F704)
X-Cache: HIT
Content-Length: 279
i0.wp.com/image.tmdb.org/t/p/w342/dhTOda5CLp9tEdDzQZiqBTdv5lR.jpg
192.0.77.2200 OK 12 kB URL HTTP/2 i0.wp.com/image.tmdb.org/t/p/w342/dhTOda5CLp9tEdDzQZiqBTdv5lR.jpg
IP 192.0.77.2:0
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 342x513, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 281ed5839c5f8ddc24b16f92d011a675
3847afef52a8abf268b1f97ef8be8005ef2f144d
67e62ba921bd503b238ee30375e423935cc9e4a242e7e73346b9284f560e8d72
GET /image.tmdb.org/t/p/w342/dhTOda5CLp9tEdDzQZiqBTdv5lR.jpg HTTP/1.1
Host: i0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://likestream.fun/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 09 Feb 2023 03:53:05 GMT
content-type: image/webp
content-length: 12510
last-modified: Wed, 08 Feb 2023 18:01:43 GMT
expires: Sat, 08 Feb 2025 06:01:43 GMT
cache-control: public, max-age=63115200
link: <http://image.tmdb.org/t/p/w342/dhTOda5CLp9tEdDzQZiqBTdv5lR.jpg>; rel="canonical"
x-content-type-options: nosniff
etag: "336b4fa1a4f51b23"
vary: Accept
x-nc: MISS arn 5
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
i0.wp.com/image.tmdb.org/t/p/w342/iajtkEJelFaDq3GBEiHnS89lH4P.jpg
192.0.77.2200 OK 18 kB URL HTTP/2 i0.wp.com/image.tmdb.org/t/p/w342/iajtkEJelFaDq3GBEiHnS89lH4P.jpg
IP 192.0.77.2:0
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 342x512, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash da6cdac46cfc8709adebb7df9c1fb0af
d4bb1666a90754870d0cfb3dfba1665b90811631
8acacc1b17b888c603f2d565ac35b405e7d2c566106b8a6898c8750a770ec8f4
GET /image.tmdb.org/t/p/w342/iajtkEJelFaDq3GBEiHnS89lH4P.jpg HTTP/1.1
Host: i0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://likestream.fun/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 09 Feb 2023 03:53:05 GMT
content-type: image/webp
content-length: 18288
last-modified: Mon, 06 Feb 2023 22:52:30 GMT
expires: Thu, 06 Feb 2025 10:52:30 GMT
cache-control: public, max-age=63115200
link: <http://image.tmdb.org/t/p/w342/iajtkEJelFaDq3GBEiHnS89lH4P.jpg>; rel="canonical"
x-content-type-options: nosniff
etag: "f4ad513a28ec62e1"
vary: Accept
x-nc: MISS arn 7
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
i0.wp.com/image.tmdb.org/t/p/w342/7aT2Mr1NqlzEPMBD0ls3emo2kLz.jpg
192.0.77.2200 OK 42 kB URL HTTP/2 i0.wp.com/image.tmdb.org/t/p/w342/7aT2Mr1NqlzEPMBD0ls3emo2kLz.jpg
IP 192.0.77.2:0
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 342x513, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 5ccfb2dd2bcf4a541947bd2e39d095ff
0c20abe515f8e85f92801f3b753d0936d706334c
b2272ca1ec5c4b9909cebd709e5934061426f959979a2ab33174faf434544b98
GET /image.tmdb.org/t/p/w342/7aT2Mr1NqlzEPMBD0ls3emo2kLz.jpg HTTP/1.1
Host: i0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://likestream.fun/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 09 Feb 2023 03:53:05 GMT
content-type: image/webp
content-length: 41706
last-modified: Sat, 04 Feb 2023 17:40:52 GMT
expires: Tue, 04 Feb 2025 05:40:52 GMT
cache-control: public, max-age=63115200
link: <http://image.tmdb.org/t/p/w342/7aT2Mr1NqlzEPMBD0ls3emo2kLz.jpg>; rel="canonical"
x-content-type-options: nosniff
etag: "a1d5fb385a71a0b0"
vary: Accept
x-nc: MISS arn 6
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
likestream.fun/oc-content/themes/movie/js/video-js.css
162.0.229.49200 OK 13 kB URL HTTP/2 likestream.fun/oc-content/themes/movie/js/video-js.css
IP 162.0.229.49:0
File type Unicode text, UTF-8 text, with very long lines (12483)
Hash c2613f6173f17c5aa8a2bbe676ebd790
d710a7df4013ff5a2f13c8af88ff0cf31c4b2b74
7e4fe9a251416e3a44707753c65e6a2f4582b2b309df309d0936a2b64a7768da
GET /oc-content/themes/movie/js/video-js.css HTTP/1.1
Host: likestream.fun
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://likestream.fun/fr/movie/643215/astrix-lix-lempire-du-milieu
Cookie: PHPSESSID=65922788acd7fd9f4a2a9481df974460
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Thu, 16 Feb 2023 03:53:05 GMT
content-type: text/css
last-modified: Fri, 14 Feb 2020 22:13:28 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 12833
date: Thu, 09 Feb 2023 03:53:05 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
i0.wp.com/image.tmdb.org/t/p/w342/sgUd42q0vTulmC9KzLdmm6lhpO3.jpg
192.0.77.2200 OK 21 kB URL HTTP/2 i0.wp.com/image.tmdb.org/t/p/w342/sgUd42q0vTulmC9KzLdmm6lhpO3.jpg
IP 192.0.77.2:0
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 342x513, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 90acfb36295e997d3248d05bef30fdba
a9e613c11d337a8ba4a2e447156da65c27fc8f16
bec31e43e9c6ddfa8660e46807804a5ca9cdbe4f2253048c4cf0ffb3e857f3fd
GET /image.tmdb.org/t/p/w342/sgUd42q0vTulmC9KzLdmm6lhpO3.jpg HTTP/1.1
Host: i0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://likestream.fun/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 09 Feb 2023 03:53:05 GMT
content-type: image/webp
content-length: 21002
last-modified: Wed, 08 Feb 2023 18:01:45 GMT
expires: Sat, 08 Feb 2025 06:01:45 GMT
cache-control: public, max-age=63115200
link: <http://image.tmdb.org/t/p/w342/sgUd42q0vTulmC9KzLdmm6lhpO3.jpg>; rel="canonical"
x-content-type-options: nosniff
etag: "81fdf4747e360a83"
vary: Accept
x-nc: MISS arn 1
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
i0.wp.com/image.tmdb.org/t/p/w342/eYVb7GN5xqeNDAcCjJ8ugMIZuz3.jpg
192.0.77.2200 OK 33 kB URL HTTP/2 i0.wp.com/image.tmdb.org/t/p/w342/eYVb7GN5xqeNDAcCjJ8ugMIZuz3.jpg
IP 192.0.77.2:0
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 342x513, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 9c4ff8a9e9ce406709e4c2b4e37c81a2
bbae54032c67209a6b68ebacaddeabac2039d454
b2431ab2e9194ce6bcc0fb7b314109bac2d19ef979efccb233aa70110d9ab07b
GET /image.tmdb.org/t/p/w342/eYVb7GN5xqeNDAcCjJ8ugMIZuz3.jpg HTTP/1.1
Host: i0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://likestream.fun/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 09 Feb 2023 03:53:05 GMT
content-type: image/webp
content-length: 33350
last-modified: Wed, 08 Feb 2023 18:01:43 GMT
expires: Sat, 08 Feb 2025 06:01:43 GMT
cache-control: public, max-age=63115200
link: <http://image.tmdb.org/t/p/w342/eYVb7GN5xqeNDAcCjJ8ugMIZuz3.jpg>; rel="canonical"
x-content-type-options: nosniff
etag: "e4c697026ae837f8"
vary: Accept
x-nc: MISS arn 2
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash f83d11e0bd95f29f9c17db64f04395e8
1175f87811d61dcd6deded9d60e727e67ddd136b
a7e7605bbd4dccc8b0c21c0e64f63e1d60901d56160083ea3602158706465ac6
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A7E7605BBD4DCCC8B0C21C0E64F63E1D60901D56160083EA3602158706465AC6"
Last-Modified: Tue, 07 Feb 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12998
Expires: Thu, 09 Feb 2023 07:29:43 GMT
Date: Thu, 09 Feb 2023 03:53:05 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash f83d11e0bd95f29f9c17db64f04395e8
1175f87811d61dcd6deded9d60e727e67ddd136b
a7e7605bbd4dccc8b0c21c0e64f63e1d60901d56160083ea3602158706465ac6
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A7E7605BBD4DCCC8B0C21C0E64F63E1D60901D56160083EA3602158706465AC6"
Last-Modified: Tue, 07 Feb 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12998
Expires: Thu, 09 Feb 2023 07:29:43 GMT
Date: Thu, 09 Feb 2023 03:53:05 GMT
Connection: keep-alive
likestream.fun/oc-content/themes/movie/js/resolution-switcher.css
162.0.229.49200 OK 192 B URL HTTP/2 likestream.fun/oc-content/themes/movie/js/resolution-switcher.css
IP 162.0.229.49:0
File type ASCII text, with very long lines (504), with no line terminators
Hash c5ca95a1bccf7209d4123d169ffb33cd
978c6d078e73a9282fdad81df2e6801513ca7103
027ca11f2a686164729cbc545a81c42c688ff3e6497ee24efaf6fed80cd0e3de
GET /oc-content/themes/movie/js/resolution-switcher.css HTTP/1.1
Host: likestream.fun
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://likestream.fun/fr/movie/643215/astrix-lix-lempire-du-milieu
Cookie: PHPSESSID=65922788acd7fd9f4a2a9481df974460
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Thu, 16 Feb 2023 03:53:05 GMT
content-type: text/css
last-modified: Fri, 14 Feb 2020 22:13:48 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 192
date: Thu, 09 Feb 2023 03:53:05 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
push.services.mozilla.com/
52.43.61.95101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP 52.43.61.95:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: GCsZLEyP6MCLvGDmWW44VQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: cXTbji/AnXxqx9vVL0+66ZUsDT0=
ocsp.pki.goog/gts1c3
142.250.74.163200 OK 471 B IP 142.250.74.163:0
Hash 0333fa3e34f17f01e9829bd8ee662c23
be4c7a8599038facc49c73d6d14451023bc919e7
8b4ad992549334395b268f43cf73150ed0dfe58801cf9595c3e245ea92dea7d9
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 09 Feb 2023 03:53:05 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
likestream.fun/oc-content/themes/movie/js/videojs-overlay.css
162.0.229.49200 OK 314 B URL HTTP/2 likestream.fun/oc-content/themes/movie/js/videojs-overlay.css
IP 162.0.229.49:0
Hash 18570557ee2d7a3666a2dfa56dc92262
15d673c8dfa5cc68949c0908cdf878ec32657ee0
232cf465926fb7eef1191cc2989cbe444ad7d721ec21e344fab375a06e3ac1ee
GET /oc-content/themes/movie/js/videojs-overlay.css HTTP/1.1
Host: likestream.fun
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://likestream.fun/fr/movie/643215/astrix-lix-lempire-du-milieu
Cookie: PHPSESSID=65922788acd7fd9f4a2a9481df974460
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Thu, 16 Feb 2023 03:53:05 GMT
content-type: text/css
last-modified: Fri, 14 Feb 2020 22:13:40 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 314
date: Thu, 09 Feb 2023 03:53:05 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 279 B IP 93.184.220.29:0
Hash 8ba328ca1dafc69ce7b7537cdc89616d
7ff4ddc85601ddb20d852b3b70e152ebb63e439d
27a975bedc82774262e4da67a21436afb618fc1ba3a9a29ca78401e812266929
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2209
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 09 Feb 2023 03:53:05 GMT
Last-Modified: Thu, 09 Feb 2023 03:16:16 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 279
image.tmdb.org/t/p/w300/hZvqv0iRg5S3Aqw3HjXw7gShG6g.jpg
169.150.247.33200 OK 35 kB URL HTTP/2 image.tmdb.org/t/p/w300/hZvqv0iRg5S3Aqw3HjXw7gShG6g.jpg
IP 169.150.247.33:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 300x450, components 3\012- data
Hash cf147e9e9e5305917509f7b4163c74a4
e7ed92f606e7dea7f6260e2486792bb01225e623
9a0abce44d6686f07d3da5327a6f5fc2951604bf29a7d87df3f46aa245358eab
GET /t/p/w300/hZvqv0iRg5S3Aqw3HjXw7gShG6g.jpg HTTP/1.1
Host: image.tmdb.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://likestream.fun/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 09 Feb 2023 03:53:05 GMT
content-type: image/jpeg
content-length: 34935
server: BunnyCDN-DE1-1076
cdn-pullzone: 775336
cdn-uid: 29af4e0e-bcbd-4fcb-8635-74ddc38a1ebf
cdn-requestcountrycode: NO
cache-control: public, max-age=31919000
etag: "62c86fdb-8877"
last-modified: Fri, 08 Jul 2022 17:56:43 GMT
cdn-storageserver: NY-267
cdn-requestpullsuccess: True
cdn-fileserver: 354
perma-cache: HIT
cdn-proxyver: 1.03
cdn-requestpullcode: 200
cdn-cachedat: 12/04/2022 00:52:40
cdn-edgestorageid: 874
cdn-status: 200
cdn-requestid: 138d8e3f25597e9ec49a81bc94a9ff9a
cdn-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
i.imgur.com/gxspAfn.png
151.101.244.193200 OK 3.4 kB IP 151.101.244.193:0
File type PNG image data, 223 x 90, 8-bit/color RGBA, non-interlaced\012- data
Hash ca85ce736ea6f00ca87ff3107da977fe
b599839d1decd893c57b9d027debf7e369f1b8a1
53f9f6dcd91b7dd86af5b2053ff080212c68db83e2673cec914eb06a7c8c853a
GET /gxspAfn.png HTTP/1.1
Host: i.imgur.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://likestream.fun/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
last-modified: Sat, 15 Feb 2020 15:56:50 GMT
etag: "ca85ce736ea6f00ca87ff3107da977fe"
content-type: image/png
cache-control: public, max-age=31536000
accept-ranges: bytes
date: Thu, 09 Feb 2023 03:53:05 GMT
age: 1248795
x-served-by: cache-iad-kjyo7100112-IAD, cache-hel1410027-HEL
x-cache: HIT, HIT
x-cache-hits: 1729, 6
x-timer: S1675914786.957800,VS0,VE0
strict-transport-security: max-age=300
access-control-allow-methods: GET, OPTIONS
access-control-allow-origin: *
server: cat factory 1.0
x-content-type-options: nosniff
content-length: 3427
X-Firefox-Spdy: h2
i.imgur.com/ASwVxQM.png
151.101.244.193200 OK 27 kB IP 151.101.244.193:0
File type PNG image data, 360 x 226, 8-bit/color RGBA, non-interlaced\012- data
Hash 976ede124d069fac50402041559ca298
7259fcaf336a6488c3803c1d2dc34e7001d262df
820c6c6a6cf32f3abdf3ce7aa1a721a879eb6eb41320e87c67d8ec8cff5a076a
GET /ASwVxQM.png HTTP/1.1
Host: i.imgur.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://likestream.fun/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
last-modified: Wed, 19 Feb 2020 18:47:30 GMT
etag: "976ede124d069fac50402041559ca298"
content-type: image/png
cache-control: public, max-age=31536000
accept-ranges: bytes
date: Thu, 09 Feb 2023 03:53:05 GMT
age: 1341473
x-served-by: cache-iad-kjyo7100032-IAD, cache-hel1410027-HEL
x-cache: HIT, HIT
x-cache-hits: 6358, 84
x-timer: S1675914786.961850,VS0,VE0
strict-transport-security: max-age=300
access-control-allow-methods: GET, OPTIONS
access-control-allow-origin: *
server: cat factory 1.0
x-content-type-options: nosniff
content-length: 27303
X-Firefox-Spdy: h2
image.tmdb.org/t/p/original/aO2JgwLmhifWwJlTWX1KAa1LvUr.jpg
169.150.247.33200 OK 203 kB URL HTTP/2 image.tmdb.org/t/p/original/aO2JgwLmhifWwJlTWX1KAa1LvUr.jpg
IP 169.150.247.33:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1925x1081, components 3\012- data
Size 203 kB (203179 bytes)
Hash 4dd40345eae91cbcde6620bd878b5e6a
ecf5df39a0b6c13ff6fde84dc5b4a9d185f64ffa
018daea418e86fdf8712b7daa9054ab9c57a3ade9b776c4bfc5b4707e4b6dbef
GET /t/p/original/aO2JgwLmhifWwJlTWX1KAa1LvUr.jpg HTTP/1.1
Host: image.tmdb.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://likestream.fun/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 09 Feb 2023 03:53:05 GMT
content-type: image/jpeg
content-length: 203179
server: BunnyCDN-DE1-1076
cdn-pullzone: 775336
cdn-uid: 29af4e0e-bcbd-4fcb-8635-74ddc38a1ebf
cdn-requestcountrycode: NO
cache-control: public, max-age=31919000
etag: "63ae6e41-319ab"
last-modified: Fri, 30 Dec 2022 04:51:13 GMT
cdn-storageserver: NY-266
cdn-requestpullsuccess: True
cdn-fileserver: 426
perma-cache: HIT
cdn-proxyver: 1.03
cdn-requestpullcode: 200
cdn-cachedat: 01/07/2023 21:54:07
cdn-edgestorageid: 1082
cdn-status: 200
cdn-requestid: c305e5fb009f26d4356f5f18b17a40fc
cdn-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
likestream.fun/oc-content/themes/movie/js/dashicons.css
162.0.229.49200 OK 21 kB URL HTTP/2 likestream.fun/oc-content/themes/movie/js/dashicons.css
IP 162.0.229.49:0
File type ASCII text, with very long lines (33361), with no line terminators
Hash a5f101d20d20d1406e2b94dcefe238e0
161bc33f48fa1d5a96065d1692187fc1ccf9b26a
154f702147963503d20563453d30b9308bac6ef3c882e529aa6ee0bd26f23838
GET /oc-content/themes/movie/js/dashicons.css HTTP/1.1
Host: likestream.fun
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://likestream.fun/fr/movie/643215/astrix-lix-lempire-du-milieu
Cookie: PHPSESSID=65922788acd7fd9f4a2a9481df974460
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Thu, 16 Feb 2023 03:53:05 GMT
content-type: text/css
last-modified: Sun, 09 Feb 2020 06:05:38 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 20550
date: Thu, 09 Feb 2023 03:53:05 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
likestream.fun/oc-content/themes/movie/style.css
162.0.229.49200 OK 5.1 kB URL HTTP/2 likestream.fun/oc-content/themes/movie/style.css
IP 162.0.229.49:0
File type ASCII text, with CRLF line terminators
Hash 40db64ee4b2a59ffa71fbd8ae7341048
b2110e4aaf74a0ef7b0af9dc00b3990b51650fcd
19337bf919a7f5b53217704f533fe57909dacbb70ea7fe3c04db3492c86483ff
GET /oc-content/themes/movie/style.css HTTP/1.1
Host: likestream.fun
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://likestream.fun/fr/movie/643215/astrix-lix-lempire-du-milieu
Cookie: PHPSESSID=65922788acd7fd9f4a2a9481df974460
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Thu, 16 Feb 2023 03:53:05 GMT
content-type: text/css
last-modified: Fri, 21 Feb 2020 11:46:44 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 5087
date: Thu, 09 Feb 2023 03:53:05 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
likestream.fun/oc-content/themes/movie/js/script.js
162.0.229.49200 OK 1.4 kB URL HTTP/2 likestream.fun/oc-content/themes/movie/js/script.js
IP 162.0.229.49:0
Hash 376afe90170339f8876edd7988c9ae71
23041f7dc943ae91ddcda0792087bce9c55495d9
1627151597b11a9439809f4501c4737a33e8cbc770fdf4586aa36554263ab65c
GET /oc-content/themes/movie/js/script.js HTTP/1.1
Host: likestream.fun
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://likestream.fun/fr/movie/643215/astrix-lix-lempire-du-milieu
Cookie: PHPSESSID=65922788acd7fd9f4a2a9481df974460
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Thu, 16 Feb 2023 03:53:05 GMT
content-type: application/javascript
last-modified: Thu, 20 Feb 2020 11:39:54 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 1357
date: Thu, 09 Feb 2023 03:53:05 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
maxcdn.bootstrapcdn.com/bootstrap/3.3.7/js/bootstrap.min.js
188.114.99.234200 OK 11 kB URL HTTP/2 maxcdn.bootstrapcdn.com/bootstrap/3.3.7/js/bootstrap.min.js
IP 188.114.99.234:0
File type ASCII text, with very long lines (32033)
Hash 6b7828d82e9ca9c709f014a54a231871
91669cda4f81028ed29db9bdbb997d6c16dc7aa2
74ae9cb8f3522dddde69fb218d637f5f84828ecabaaec84b96848a96a259c706
GET /bootstrap/3.3.7/js/bootstrap.min.js HTTP/1.1
Host: maxcdn.bootstrapcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://likestream.fun
Connection: keep-alive
Referer: https://likestream.fun/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 09 Feb 2023 03:53:05 GMT
content-type: application/javascript; charset=utf-8
vary: Accept-Encoding
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
access-control-allow-origin: *
cache-control: public, max-age=31919000
etag: W/"5869c96cc8f19086aee625d670d741f9"
last-modified: Mon, 25 Jan 2021 22:04:00 GMT
cdn-cachedat: 11/15/2022 10:30:01
cdn-proxyver: 1.03
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 1053
cdn-status: 200
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-requestid: 678f216c40123c5c86058fe45e614daa
cdn-cache: HIT
cf-cache-status: HIT
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 7969a7f349d00b06-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
fonts.gstatic.com/s/muli/v28/7Auwp_0qiz-afTLGLQ.woff2
216.58.207.227200 OK 31 kB URL HTTP/2 fonts.gstatic.com/s/muli/v28/7Auwp_0qiz-afTLGLQ.woff2
IP 216.58.207.227:0
File type Web Open Font Format (Version 2), TrueType, length 31196, version 1.0\012- data
Hash ea2343c7dccad57360fb611d67204445
b603d9e68bb1ed5e4b33d5e31121160cb4d23452
2a04078f9550381b5148170ceaf5b378a1b31ed8274c6d0094aeba6f599462cc
GET /s/muli/v28/7Auwp_0qiz-afTLGLQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://likestream.fun
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 31196
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 02 Feb 2023 10:06:04 GMT
expires: Fri, 02 Feb 2024 10:06:04 GMT
cache-control: public, max-age=31536000
age: 582422
last-modified: Mon, 11 Jul 2022 20:43:05 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/robotocondensed/v25/ieVl2ZhZI2eCN5jzbjEETS9weq8-19K7DQ.woff2
216.58.207.227200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/robotocondensed/v25/ieVl2ZhZI2eCN5jzbjEETS9weq8-19K7DQ.woff2
IP 216.58.207.227:0
File type Web Open Font Format (Version 2), TrueType, length 15700, version 1.0\012- data
Hash 3d7f7413fca69bff4d231ebdc50aaab0
cb18e7943b6a8a0e3672d7242197c19a226b92e8
6b4fac99c39b9ee2693d87a2508d0c7d4b4859072966616bd1f6e18c5b2f9d36
GET /s/robotocondensed/v25/ieVl2ZhZI2eCN5jzbjEETS9weq8-19K7DQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://likestream.fun
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15700
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 07 Feb 2023 15:42:36 GMT
expires: Wed, 07 Feb 2024 15:42:36 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 19 Apr 2022 18:51:55 GMT
content-type: font/woff2
age: 130230
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
likestream.fun/oc-content/themes/movie/img/logo.png
162.0.229.49200 OK 22 kB URL HTTP/2 likestream.fun/oc-content/themes/movie/img/logo.png
IP 162.0.229.49:0
File type PNG image data, 400 x 282, 8-bit colormap, non-interlaced\012- data
Hash edf7849cb9f1a292f33cdbae77706512
d461c7a106cec2a9ee659b54482b393f9408d103
2eeed5f3843e0ba0864ff496afe6aa66d8d8d053d6a49de6273288dc3d98c9c9
GET /oc-content/themes/movie/img/logo.png HTTP/1.1
Host: likestream.fun
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://likestream.fun/fr/movie/643215/astrix-lix-lempire-du-milieu
Cookie: PHPSESSID=65922788acd7fd9f4a2a9481df974460
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Thu, 16 Feb 2023 03:53:05 GMT
content-type: image/png
last-modified: Thu, 20 Feb 2020 09:14:52 GMT
accept-ranges: bytes
content-length: 21533
date: Thu, 09 Feb 2023 03:53:05 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
likestream.fun/oc-content/themes/movie/js/videojs-ie8.min.js
162.0.229.49200 OK 8.7 kB URL HTTP/2 likestream.fun/oc-content/themes/movie/js/videojs-ie8.min.js
IP 162.0.229.49:0
File type Unicode text, UTF-8 text, with very long lines (27236), with no line terminators
Hash 449be3fce00018184c6b417585e03209
5e234056354b2d8b8dcc5f4bb0c8d05ef798c2ba
e138ad7fd18a742b711c57c3eb2f60280c4d16ca89c9ea22e900f70ce84aa4e1
GET /oc-content/themes/movie/js/videojs-ie8.min.js HTTP/1.1
Host: likestream.fun
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://likestream.fun/fr/movie/643215/astrix-lix-lempire-du-milieu
Cookie: PHPSESSID=65922788acd7fd9f4a2a9481df974460
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Thu, 16 Feb 2023 03:53:05 GMT
content-type: application/javascript
last-modified: Fri, 14 Feb 2020 22:13:36 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 8738
date: Thu, 09 Feb 2023 03:53:05 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
likestream.fun/fr/movie/643215/astrix-lix-lempire-du-milieu
162.0.229.49200 OK 9.1 kB URL HTTP/2 likestream.fun/fr/movie/643215/astrix-lix-lempire-du-milieu
IP 162.0.229.49:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (6568)
Hash 4013b664cbf8aeba3e6538fada12b957
4d8fa77eb6a002efeb64fc309abd5b980f14adc1
69ea8439418ac77ce5250b03882b39f649d0030def81fac72368461154ceb00d
GET /fr/movie/643215/astrix-lix-lempire-du-milieu HTTP/1.1
Host: likestream.fun
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
x-powered-by: PHP/7.4.33
set-cookie: PHPSESSID=65922788acd7fd9f4a2a9481df974460; path=/; secure
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: text/html; charset=UTF-8
content-encoding: br
vary: Accept-Encoding
date: Thu, 09 Feb 2023 03:53:05 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
likestream.fun/oc-content/themes/movie/js/resolution-switcher.js
162.0.229.49200 OK 1.7 kB URL HTTP/2 likestream.fun/oc-content/themes/movie/js/resolution-switcher.js
IP 162.0.229.49:0
File type ASCII text, with very long lines (1153)
Hash 975d00e057b8f9201014e6f64bee1218
fb1c02a2748d324e307e834776f79f48b41f37e7
e0b6d9d67df47440b805017ff52a20e4d8b802d1b66853faf194db950489de72
GET /oc-content/themes/movie/js/resolution-switcher.js HTTP/1.1
Host: likestream.fun
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://likestream.fun/fr/movie/643215/astrix-lix-lempire-du-milieu
Cookie: PHPSESSID=65922788acd7fd9f4a2a9481df974460
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Thu, 16 Feb 2023 03:53:05 GMT
content-type: application/javascript
last-modified: Fri, 14 Feb 2020 22:13:50 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 1673
date: Thu, 09 Feb 2023 03:53:05 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
likestream.fun/oc-content/themes/movie/js/videojs-overlay.min.js
162.0.229.49200 OK 2.3 kB URL HTTP/2 likestream.fun/oc-content/themes/movie/js/videojs-overlay.min.js
IP 162.0.229.49:0
File type ASCII text, with very long lines (6543), with CRLF line terminators
Hash 5fb20880522149fa87146f109f12ea4f
1c76c62fc9cfe141983c208eca38fd00c484ed79
ac3308a000e62cb59ab4f473a72f6d59f12d2526363d26d63e5af4accd6a4f96
GET /oc-content/themes/movie/js/videojs-overlay.min.js HTTP/1.1
Host: likestream.fun
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://likestream.fun/fr/movie/643215/astrix-lix-lempire-du-milieu
Cookie: PHPSESSID=65922788acd7fd9f4a2a9481df974460
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Thu, 16 Feb 2023 03:53:05 GMT
content-type: application/javascript
last-modified: Fri, 14 Feb 2020 22:13:44 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 2277
date: Thu, 09 Feb 2023 03:53:05 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
likestream.fun/oc-content/themes/movie/js/videojs.disableProgress.js
162.0.229.49200 OK 303 B URL HTTP/2 likestream.fun/oc-content/themes/movie/js/videojs.disableProgress.js
IP 162.0.229.49:0
File type ASCII text, with very long lines (874), with no line terminators
Hash 01968f4d5d192c626485a373b3d1df87
acccb3ab7235def110ea04b11d3be08bf61e07c3
c04a455fee28747ec346e975b7288957befa1e0fe86fc0208753ec230eb1b8af
GET /oc-content/themes/movie/js/videojs.disableProgress.js HTTP/1.1
Host: likestream.fun
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://likestream.fun/fr/movie/643215/astrix-lix-lempire-du-milieu
Cookie: PHPSESSID=65922788acd7fd9f4a2a9481df974460
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Thu, 16 Feb 2023 03:53:05 GMT
content-type: application/javascript
last-modified: Fri, 14 Feb 2020 22:13:34 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 303
date: Thu, 09 Feb 2023 03:53:05 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
likestream.fun/oc-content/themes/movie/img/no-poster.png
162.0.229.49301 Moved Permanently 0 B URL HTTP/2 likestream.fun/oc-content/themes/movie/img/no-poster.png
IP 162.0.229.49:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /oc-content/themes/movie/img/no-poster.png HTTP/1.1
Host: likestream.fun
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://likestream.fun/fr/movie/643215/astrix-lix-lempire-du-milieu
Cookie: PHPSESSID=65922788acd7fd9f4a2a9481df974460
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 301 Moved Permanently
x-powered-by: PHP/7.4.33
location: /
content-type: text/html; charset=UTF-8
content-length: 0
date: Thu, 09 Feb 2023 03:53:05 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
likestream.fun/oc-content/themes/movie/js/video.js
162.0.229.49200 OK 66 kB URL HTTP/2 likestream.fun/oc-content/themes/movie/js/video.js
IP 162.0.229.49:0
File type ASCII text, with very long lines (1770)
Hash 81fcd4cdb4ca782c469e3252270c29fd
b88983a91939eda62d99fe72149aebb20ea18667
fb3c0486ab09c16a00e240e9a80f600f9a4518272159bb64ba1d505f24ffed68
GET /oc-content/themes/movie/js/video.js HTTP/1.1
Host: likestream.fun
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://likestream.fun/fr/movie/643215/astrix-lix-lempire-du-milieu
Cookie: PHPSESSID=65922788acd7fd9f4a2a9481df974460
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Thu, 16 Feb 2023 03:53:05 GMT
content-type: application/javascript
last-modified: Fri, 14 Feb 2020 22:13:26 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 66416
date: Thu, 09 Feb 2023 03:53:05 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
likestream.fun/
162.0.229.49200 OK 12 kB IP 162.0.229.49:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (13404)
Hash ecc6f442a7e3649fc3eaa19eeaf452a0
2b0a97d046e2f77ec50f899a89cdeb711c85b3be
ef9ed26a1583a4ebbca847e9fdc20964fc54f4b9f279498e5cc4454906b72fc6
GET / HTTP/1.1
Host: likestream.fun
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://likestream.fun/fr/movie/643215/astrix-lix-lempire-du-milieu
Connection: keep-alive
Cookie: PHPSESSID=65922788acd7fd9f4a2a9481df974460
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
x-powered-by: PHP/7.4.33
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: text/html; charset=UTF-8
content-length: 12271
content-encoding: br
vary: Accept-Encoding
date: Thu, 09 Feb 2023 03:53:06 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 68273225f74fbf7493f395610d7a73fc
5a8779ef5656aeeba23b365aad60b7901c5dd7fc
c83f285a1f3df0f7ac758a68ee95cc3d2671f80264c2e143cc0561cc574e3f19
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C83F285A1F3DF0F7AC758A68EE95CC3D2671F80264C2E143CC0561CC574E3F19"
Last-Modified: Mon, 06 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=19958
Expires: Thu, 09 Feb 2023 09:25:45 GMT
Date: Thu, 09 Feb 2023 03:53:07 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 68273225f74fbf7493f395610d7a73fc
5a8779ef5656aeeba23b365aad60b7901c5dd7fc
c83f285a1f3df0f7ac758a68ee95cc3d2671f80264c2e143cc0561cc574e3f19
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C83F285A1F3DF0F7AC758A68EE95CC3D2671F80264C2E143CC0561CC574E3F19"
Last-Modified: Mon, 06 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=19958
Expires: Thu, 09 Feb 2023 09:25:45 GMT
Date: Thu, 09 Feb 2023 03:53:07 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 68273225f74fbf7493f395610d7a73fc
5a8779ef5656aeeba23b365aad60b7901c5dd7fc
c83f285a1f3df0f7ac758a68ee95cc3d2671f80264c2e143cc0561cc574e3f19
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C83F285A1F3DF0F7AC758A68EE95CC3D2671F80264C2E143CC0561CC574E3F19"
Last-Modified: Mon, 06 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=19958
Expires: Thu, 09 Feb 2023 09:25:45 GMT
Date: Thu, 09 Feb 2023 03:53:07 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 68273225f74fbf7493f395610d7a73fc
5a8779ef5656aeeba23b365aad60b7901c5dd7fc
c83f285a1f3df0f7ac758a68ee95cc3d2671f80264c2e143cc0561cc574e3f19
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C83F285A1F3DF0F7AC758A68EE95CC3D2671F80264C2E143CC0561CC574E3F19"
Last-Modified: Mon, 06 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=19958
Expires: Thu, 09 Feb 2023 09:25:45 GMT
Date: Thu, 09 Feb 2023 03:53:07 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 68273225f74fbf7493f395610d7a73fc
5a8779ef5656aeeba23b365aad60b7901c5dd7fc
c83f285a1f3df0f7ac758a68ee95cc3d2671f80264c2e143cc0561cc574e3f19
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C83F285A1F3DF0F7AC758A68EE95CC3D2671F80264C2E143CC0561CC574E3F19"
Last-Modified: Mon, 06 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=19958
Expires: Thu, 09 Feb 2023 09:25:45 GMT
Date: Thu, 09 Feb 2023 03:53:07 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc03326d1-bbfd-4654-a9db-ac431757b9f6.jpeg
34.120.237.76200 OK 8.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc03326d1-bbfd-4654-a9db-ac431757b9f6.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 764b732e88dd1e9c1824529b24b3dffc
2ba954a51c2972b267ae0536e343e608aa9aa7f4
a1efdf03b14bb05cf8e407b92476592c35fa2d27c5e66705322abdb4c6412a06
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc03326d1-bbfd-4654-a9db-ac431757b9f6.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8150
x-amzn-requestid: 3834493a-4162-4cc9-b67c-541cc9be895b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fwD8IH0TIAMFWqQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63dcb380-3746ff7b0a6894366efa848e;Sampled=0
x-amzn-remapped-date: Fri, 03 Feb 2023 07:10:56 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: I3qmC4D6qdsheK8VO3oKbPDU7XV1r9_XEPMcExKnvATDkVUsJHjHbg==
via: 1.1 0c96ded7ff282d2dbcf47c918b6bb500.cloudfront.net (CloudFront), 1.1 82ea95080f526df99896343fb7269b06.cloudfront.net (CloudFront), 1.1 google
date: Wed, 08 Feb 2023 04:19:43 GMT
age: 84804
etag: "2ba954a51c2972b267ae0536e343e608aa9aa7f4"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F049f3f10-52dc-41ec-990c-719ee36485c7.jpeg
34.120.237.76200 OK 3.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F049f3f10-52dc-41ec-990c-719ee36485c7.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 10fd2f55fa0cfb8616ded6ddc2bb511a
996ed68f1b9770a19a97f6c8d359e338b8c8b3ca
e552d31a5e531386b9830bb58486f09bfcb3400676f726f93fdbea08336a09da
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F049f3f10-52dc-41ec-990c-719ee36485c7.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 3599
x-amzn-requestid: 658f8678-b67d-4f98-b728-cf9cbad3aa86
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ABI38GUpIAMFY0Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63e38832-2ab19d0f2345fc7515775298;Sampled=0
x-amzn-remapped-date: Wed, 08 Feb 2023 11:32:02 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: d8ZayLRkBd16PmZsswU0N4ZLVFphVFlgPRloMdqF_U6WMcyvZptmpA==
via: 1.1 0005a84c2971ff4f5bbb79e7ebc622a8.cloudfront.net (CloudFront), 1.1 2bedbeaa49b4a77447d30097858cb81a.cloudfront.net (CloudFront), 1.1 google
date: Wed, 08 Feb 2023 21:45:46 GMT
etag: "996ed68f1b9770a19a97f6c8d359e338b8c8b3ca"
content-type: image/jpeg
age: 22041
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5f087272-940e-484d-ad9d-2c67bcd6dccd.jpeg
34.120.237.76200 OK 13 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5f087272-940e-484d-ad9d-2c67bcd6dccd.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash bb7c8b758fe17f6c06ce2bebb5008495
032d747cf20951f6ca6fd51489fefd7c09c4948d
835d89e028ec4c85a845f2835cb5eddb9653937f6736e2713b671419474608ed
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5f087272-940e-484d-ad9d-2c67bcd6dccd.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 12811
x-amzn-requestid: be33f9ef-31cb-4572-9f22-0a433423e195
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: AChzZFiWIAMFgmA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63e4167b-70ed2a756b8da4372ccc1f83;Sampled=0
x-amzn-remapped-date: Wed, 08 Feb 2023 21:39:07 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: JpeDqbyAp9qLkVVqTKxmVy96vqBfyK4-GDiWdgkAjQlUN4Fu160VLA==
via: 1.1 9c60d6224ac0b44e908b5c9dcf70e9a4.cloudfront.net (CloudFront), 1.1 556b99c6be8d7078b9f067347c62df6a.cloudfront.net (CloudFront), 1.1 google
date: Wed, 08 Feb 2023 21:45:55 GMT
etag: "032d747cf20951f6ca6fd51489fefd7c09c4948d"
content-type: image/jpeg
age: 22032
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7e9ebfbd-8f55-4e32-8ea1-303aa280ea51.jpeg
34.120.237.76200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7e9ebfbd-8f55-4e32-8ea1-303aa280ea51.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b11f9f70f5e8af4de6d9fc5b9f50ccbe
753cb08c3f8c7c0750d113253790a08db01986bc
d4b77ba995ea274fd169fc9bc66919b23e72a8edb88d6184bf3d7f3ab398c645
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7e9ebfbd-8f55-4e32-8ea1-303aa280ea51.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11036
x-amzn-requestid: 4bd4976c-9500-4d6d-a447-dd2873987d13
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fswexHCYIAMFzag=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63db612b-61d430202cbbf52823f38c49;Sampled=0
x-amzn-remapped-date: Thu, 02 Feb 2023 07:07:23 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: 1mDt4mKlkZG2_zBPhwB_lbzJ0Im0FlnjmJMa7gcopuv14gwqtwlA2w==
via: 1.1 86b676273517904f44af31586adb06ae.cloudfront.net (CloudFront), 1.1 d6b180eb367f7de26d67a9f3901b96a6.cloudfront.net (CloudFront), 1.1 google
date: Wed, 08 Feb 2023 21:34:37 GMT
age: 22710
etag: "753cb08c3f8c7c0750d113253790a08db01986bc"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3ab2faf0-d9a7-41a6-b5cf-bf6189f66342.jpeg
34.120.237.76200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3ab2faf0-d9a7-41a6-b5cf-bf6189f66342.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 9203cfb9f0c1c958dd008eac55a9d3c4
6bdd1047590dd3fb54c15d5d6d38e7c86274b203
09770229be5ff3037708543e3204c66de84253b3a858a83a0e1672a04c0e9cb1
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3ab2faf0-d9a7-41a6-b5cf-bf6189f66342.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11760
x-amzn-requestid: b2863a01-4714-4554-a478-5402467b3448
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: AChJKHc_oAMFwlw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63e4156d-1c5a3edf37bc7cc937c800d2;Sampled=0
x-amzn-remapped-date: Wed, 08 Feb 2023 21:34:37 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: y-1zzLzVegi0T-SAyTpUuFD6iVVYbuL5u71dc74BY2l7PrxVu-am5w==
via: 1.1 0c96ded7ff282d2dbcf47c918b6bb500.cloudfront.net (CloudFront), 1.1 112d82578d402a38d8d02e8b857617e0.cloudfront.net (CloudFront), 1.1 google
date: Wed, 08 Feb 2023 21:34:37 GMT
etag: "6bdd1047590dd3fb54c15d5d6d38e7c86274b203"
content-type: image/jpeg
age: 22710
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7d76b3c3-ea90-47d3-83f3-8f1550aa26fa.jpeg
34.120.237.76200 OK 9.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7d76b3c3-ea90-47d3-83f3-8f1550aa26fa.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 1d7814305f961caded310b6f2089219b
efcb6a067bb023865823625e67d9de60d44685e0
3c01637a052e2394774fc8f6dd37a284afaf76b423219ecd26a89c2d8b69c121
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7d76b3c3-ea90-47d3-83f3-8f1550aa26fa.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9846
x-amzn-requestid: 4e6cc2be-bc18-4d66-b338-833a05d0d998
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fsaDlGV4oAMFoZA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63db3d49-14fc32183d3c6afb3a64c27d;Sampled=0
x-amzn-remapped-date: Thu, 02 Feb 2023 04:34:17 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: BNBH60bI_wBqaKAFD_FeZHbzfIeJh9-x-JiMsF0Uh9pxKHFPdAH6Vw==
via: 1.1 2afae0d44e2540f472c0635ab62c232a.cloudfront.net (CloudFront), 1.1 324a68a6c25ee50d774953f3e15a611c.cloudfront.net (CloudFront), 1.1 google
date: Wed, 08 Feb 2023 22:02:08 GMT
age: 21059
etag: "efcb6a067bb023865823625e67d9de60d44685e0"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 58e5eb982e7857c42e323d744996e545
259f7fb3bbc52bf03a09adbd9cb4abdc4bcd15d6
3591984bd2217d4b637cec6876292f777e4b71d1fd72c681e355abbb526b2ec7
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "3591984BD2217D4B637CEC6876292F777E4B71D1FD72C681E355ABBB526B2EC7"
Last-Modified: Tue, 07 Feb 2023 07:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10909
Expires: Thu, 09 Feb 2023 06:54:56 GMT
Date: Thu, 09 Feb 2023 03:53:07 GMT
Connection: keep-alive
indirectbronzecompany.com/8a4830da840fbc763c399225a23d4efb/invoke.js
192.243.59.12200 OK 9.8 kB URL HTTP/1.1 indirectbronzecompany.com/8a4830da840fbc763c399225a23d4efb/invoke.js
IP 192.243.59.12:0
ASN #39572 DataWeb Global Group B.V.
File type exported SGML document, ASCII text, with very long lines (26998), with no line terminators
Hash 585dd578ab89f9e9442959a8502cd0fb
6456182621e199d8248a907473a63dd4af786c82
ecf7c54b51cc095b42298019f32727e2fe021888b02fcc15a03b6d87e9b5c82f
GET /8a4830da840fbc763c399225a23d4efb/invoke.js HTTP/1.1
Host: indirectbronzecompany.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://likestream.fun/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.17.6
Date: Thu, 09 Feb 2023 03:53:08 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 34a56f0bfdb86e0354f46e6639320397
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
likestream.fun/favicon.png
162.0.229.49200 OK 2.5 kB URL HTTP/2 likestream.fun/favicon.png
IP 162.0.229.49:0
File type PNG image data, 34 x 34, 8-bit/color RGBA, non-interlaced\012- data
Hash b8a7686f6e87454ede5d2a1718e3a46c
771e0f947bd2069788c5fb889a50c777f08e7b06
f6cfce2802d26193514fdf745fb01a3ea5b182d135732fec918c51683831b5de
GET /favicon.png HTTP/1.1
Host: likestream.fun
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://likestream.fun/fr/movie/643215/astrix-lix-lempire-du-milieu
Cookie: PHPSESSID=65922788acd7fd9f4a2a9481df974460
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Thu, 16 Feb 2023 03:53:08 GMT
content-type: image/png
last-modified: Tue, 05 Dec 2017 01:42:32 GMT
accept-ranges: bytes
content-length: 2470
date: Thu, 09 Feb 2023 03:53:08 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
54.230.245.100200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP 54.230.245.100:0
Hash a28222744ed7330bea9a621b935adcc1
d6c82547cae9ebf20c9e2534b2b072977d721399
14be94c7e087e140464c8d3cb8b77642c6ed07cde45992faa54d577cf26df94a
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=127201
Date: Thu, 09 Feb 2023 03:53:08 GMT
Etag: "63e3a415-1d7"
Expires: Fri, 10 Feb 2023 15:13:09 GMT
Last-Modified: Wed, 08 Feb 2023 13:31:01 GMT
Server: ECS (bsa/EB1B)
X-Cache: Miss from cloudfront
Via: 1.1 193a8c13b6e0a6b90db7172f6358335e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: aV2Cafb_QZhkqfJiN8T7U6EQhyc5TLQDqhedGrfjjPDH4cKYoqneJA==
Age: 6128
indirectbronzecompany.com/8a802881e1eab3503607ad8db30950ca/invoke.js
192.243.59.12200 OK 9.8 kB URL HTTP/1.1 indirectbronzecompany.com/8a802881e1eab3503607ad8db30950ca/invoke.js
IP 192.243.59.12:0
ASN #39572 DataWeb Global Group B.V.
File type exported SGML document, ASCII text, with very long lines (27016), with no line terminators
Hash 1ceface925096d0d734e068f0e0b3486
5c808b91a472132677a2b007583992f631633f6e
60318c0bfdc2fcd1140f9be94b1b2d7cf8883d4a5d9b4c7588ce51c8b9d8e1ab
GET /8a802881e1eab3503607ad8db30950ca/invoke.js HTTP/1.1
Host: indirectbronzecompany.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://likestream.fun/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.17.6
Date: Thu, 09 Feb 2023 03:53:08 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 3a39fddca14aedbdc3b790977e3202d0
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
simplewebanalysis.com/stats
35.156.167.37200 OK 40 B URL HTTP/2 simplewebanalysis.com/stats
IP 35.156.167.37:0
File type ASCII text, with no line terminators
Hash 3894f72a1d8589f5eca2d93bfc1da2ac
0f306b3b61ad2a6847581d92a7e3185411ad94ca
675fdc39e16544c3aad847a18b42cc4f809cd566266b6ec2e0f630bd75a99a41
GET /stats HTTP/1.1
Host: simplewebanalysis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://likestream.fun
Connection: keep-alive
Referer: https://likestream.fun/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 09 Feb 2023 03:53:08 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: https://likestream.fun
access-control-allow-credentials: true
set-cookie: uid_id2=48a96e6a-af5f-4cb5-b0c7-1c6c1ae6e715:3:1; expires=Sun, 06 Feb 2033 03:53:08 GMT; secure; SameSite=None
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash f6d705e8002f95d392a53d1df55c549a
7351c586a15413121ec29aa736533182d85818ce
b9e6075e5f8bf8d14a45546023f43f80df7ee7fee6a13c49eee758d3b6659e14
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B9E6075E5F8BF8D14A45546023F43F80DF7EE7FEE6A13C49EEE758D3B6659E14"
Last-Modified: Wed, 08 Feb 2023 14:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14600
Expires: Thu, 09 Feb 2023 07:56:28 GMT
Date: Thu, 09 Feb 2023 03:53:08 GMT
Connection: keep-alive
simplewebanalysis.com/stats
35.156.167.37200 OK 40 B URL HTTP/2 simplewebanalysis.com/stats
IP 35.156.167.37:0
File type ASCII text, with no line terminators
Hash 3894f72a1d8589f5eca2d93bfc1da2ac
0f306b3b61ad2a6847581d92a7e3185411ad94ca
675fdc39e16544c3aad847a18b42cc4f809cd566266b6ec2e0f630bd75a99a41
GET /stats HTTP/1.1
Host: simplewebanalysis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://likestream.fun
Connection: keep-alive
Referer: https://likestream.fun/
Cookie: uid_id2=48a96e6a-af5f-4cb5-b0c7-1c6c1ae6e715:3:1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 09 Feb 2023 03:53:08 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: https://likestream.fun
access-control-allow-credentials: true
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.163200 OK 472 B IP 142.250.74.163:0
Hash 44fc0cb48c26edb9ce36736707b9182a
62de7faa3e8171c0d38a2e03a604d2545a3ede7f
9e511ad6ed9e7c5f28f573422e3891d2f4e5c2ba5107f7eda808c529a95931a2
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 09 Feb 2023 03:53:08 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
i.imgur.com/AQsS8rU.png
151.101.244.193200 OK 136 kB IP 151.101.244.193:0
File type PNG image data, 2570 x 360, 8-bit/color RGB, non-interlaced\012- data
Size 136 kB (136129 bytes)
Hash c549625a58f58899880e8ade80f37954
8e2b29801027c6e2ccc2e1631dbd0bcf2814b779
e8c376ddc6a3e001576ca52cb18f35c9ed8d22ae18d241de250e82de81af1cdf
GET /AQsS8rU.png HTTP/1.1
Host: i.imgur.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://likestream.fun/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 19 Feb 2020 18:25:16 GMT
etag: "c549625a58f58899880e8ade80f37954"
x-amz-storage-class: STANDARD_IA
content-type: image/png
cache-control: public, max-age=31536000
accept-ranges: bytes
date: Thu, 09 Feb 2023 03:53:08 GMT
age: 1965439
x-served-by: cache-iad-kcgs7200130-IAD, cache-hel1410027-HEL
x-cache: HIT, HIT
x-cache-hits: 7087, 1
x-timer: S1675914788.435701,VS0,VE1
strict-transport-security: max-age=300
access-control-allow-methods: GET, OPTIONS
access-control-allow-origin: *
server: cat factory 1.0
x-content-type-options: nosniff
content-length: 136129
X-Firefox-Spdy: h2
fonts.gstatic.com/s/muli/v28/7Auwp_0qiz-afTzGLRrX.woff2
216.58.207.227200 OK 28 kB URL HTTP/2 fonts.gstatic.com/s/muli/v28/7Auwp_0qiz-afTzGLRrX.woff2
IP 216.58.207.227:0
File type Web Open Font Format (Version 2), TrueType, length 28504, version 1.0\012- data
Hash 91232fd5774a3b83c5781ffb24b9450d
3f492b6cafa99e16d334edc16a6e633d7eda3569
ee6428dc15beb065bef14ce4cbab92a469d0fccfa20ec5b05455775e77a05b39
GET /s/muli/v28/7Auwp_0qiz-afTzGLRrX.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://likestream.fun
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 28504
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 03 Feb 2023 02:16:35 GMT
expires: Sat, 03 Feb 2024 02:16:35 GMT
cache-control: public, max-age=31536000
age: 524193
last-modified: Mon, 11 Jul 2022 20:36:34 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.youtube.com/s/player/97ea7458/www-player.css
142.250.74.110200 OK 50 kB URL HTTP/2 www.youtube.com/s/player/97ea7458/www-player.css
IP 142.250.74.110:0
File type ASCII text, with very long lines (65536), with no line terminators
Hash 06da032848dee0d02f299eb5d9d0b47b
9328ede00a7daa3c3af4e9a745b2f288a89985e1
1b4032e39d4869ac4d51be6750760b10108ce5d47c357fec81c66dbc90578601
GET /s/player/97ea7458/www-player.css HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/embed/lUvAx_iBuVA?rel=0&modestbranding=1&autoplay=0&autohide=1&showinfo=1&controls=0
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding, Origin
content-encoding: br
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 49954
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 08 Feb 2023 05:33:49 GMT
expires: Thu, 08 Feb 2024 05:33:49 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 01 Feb 2023 01:21:00 GMT
content-type: text/css
age: 80359
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.youtube.com/s/player/97ea7458/www-embed-player.vflset/www-embed-player.js
142.250.74.110200 OK 110 kB URL HTTP/2 www.youtube.com/s/player/97ea7458/www-embed-player.vflset/www-embed-player.js
IP 142.250.74.110:0
File type ASCII text, with very long lines (679)
Size 110 kB (110070 bytes)
Hash ebe79d652346a39f78ba70ecfb911269
b996db460e2862473018d11947ac7711bc8ca537
445ae1b45376bf82466aa698c16011ea0781d16f3e25653713d935a9bc39fda9
GET /s/player/97ea7458/www-embed-player.vflset/www-embed-player.js HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/embed/lUvAx_iBuVA?rel=0&modestbranding=1&autoplay=0&autohide=1&showinfo=1&controls=0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding, Origin
content-encoding: br
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 110070
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 08 Feb 2023 17:03:24 GMT
expires: Thu, 08 Feb 2024 17:03:24 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 01 Feb 2023 01:21:00 GMT
content-type: text/javascript
age: 38984
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.youtube.com/s/player/97ea7458/player_ias.vflset/en_US/base.js
142.250.74.110200 OK 613 kB URL HTTP/2 www.youtube.com/s/player/97ea7458/player_ias.vflset/en_US/base.js
IP 142.250.74.110:0
File type ASCII text, with very long lines (517)
Size 613 kB (612749 bytes)
Hash 83c1c7c77b3e875a13d9caa902b9faa3
3da245b3aa77682c47e0fc016a536bbd827189ad
254753ab92f0e04763ce89d741819cf20ce5281f10ee7ace7444ac8b4d07e98c
GET /s/player/97ea7458/player_ias.vflset/en_US/base.js HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/embed/lUvAx_iBuVA?rel=0&modestbranding=1&autoplay=0&autohide=1&showinfo=1&controls=0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
vary: Accept-Encoding, Origin
content-encoding: br
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 612749
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 08 Feb 2023 01:53:04 GMT
expires: Thu, 08 Feb 2024 01:53:04 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 01 Feb 2023 01:21:00 GMT
content-type: text/javascript
age: 93604
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.163200 OK 472 B IP 142.250.74.163:0
Hash 44fc0cb48c26edb9ce36736707b9182a
62de7faa3e8171c0d38a2e03a604d2545a3ede7f
9e511ad6ed9e7c5f28f573422e3891d2f4e5c2ba5107f7eda808c529a95931a2
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 09 Feb 2023 03:53:08 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.youtube.com/s/player/97ea7458/fetch-polyfill.vflset/fetch-polyfill.js
142.250.74.110200 OK 2.8 kB URL HTTP/2 www.youtube.com/s/player/97ea7458/fetch-polyfill.vflset/fetch-polyfill.js
IP 142.250.74.110:0
File type Algol 68 source text\012- Pascal source, ASCII text, with very long lines (555)
Hash 80fe2d229007996c8397073b00755dc7
121f82c77bcf2a297a1085e3b092415c463fcafe
033dfa8941482c82d4f1aaa4a9172fb379b9e46a02d5b36297c5476bbbfdea2c
GET /s/player/97ea7458/fetch-polyfill.vflset/fetch-polyfill.js HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/embed/lUvAx_iBuVA?rel=0&modestbranding=1&autoplay=0&autohide=1&showinfo=1&controls=0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding, Origin
content-encoding: br
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 2786
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 06 Feb 2023 19:18:12 GMT
expires: Tue, 06 Feb 2024 19:18:12 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 01 Feb 2023 01:21:00 GMT
content-type: text/javascript
age: 203696
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 05aaf34382711084b053605fd6395a34
e9bc548545e280b3bd5d080fa06849ee2f1beea2
18075b23830edfdd9e4277fd6af75e88a3423ba116a60e75d3fc2b88c40c4f16
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "18075B23830EDFDD9E4277FD6AF75E88A3423BA116A60E75D3FC2B88C40C4F16"
Last-Modified: Wed, 08 Feb 2023 13:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11515
Expires: Thu, 09 Feb 2023 07:05:03 GMT
Date: Thu, 09 Feb 2023 03:53:08 GMT
Connection: keep-alive
competitivepopcheerleader.com/06/fc/ce/06fcce71a0c63a83a3dfc6f6c3c5c444.js
192.243.59.13200 OK 29 kB URL HTTP/1.1 competitivepopcheerleader.com/06/fc/ce/06fcce71a0c63a83a3dfc6f6c3c5c444.js
IP 192.243.59.13:0
ASN #39572 DataWeb Global Group B.V.
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (65536), with no line terminators
Hash 69546870aadcb2eb571cbfc76e08b0bc
1622f997f7f12349f8afb61f191d3af4d52902b7
5d49e58a3249cad1e6d2f2cf5518ad2bd1c1a9c1d5559d8e66ea641b36ad1ce6
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET /06/fc/ce/06fcce71a0c63a83a3dfc6f6c3c5c444.js HTTP/1.1
Host: competitivepopcheerleader.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://likestream.fun/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.17.6
Date: Thu, 09 Feb 2023 03:53:08 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 4d8d3dc374c9fb5c5e07c84bdf9baf71
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
competitivepopcheerleader.com/watch.438192286364.js?key=8a4830da840fbc763c399225a23d4efb&kw=%5B%22watch%22%2C%22ast%C3%A9rix%22%2C%22ob%C3%A9lix%22%2C%22l%22%2C%22empire%22%2C%22du%22%2C%22milieu%22%2C%222023%22%2C%22movies%22%2C%22online%22%2C%22-%22%2C%22stream%22%2C%22movies%22%2C%22tv%22%2C%22shows%22%2C%22for%22%2C%22free%22%5D&refer=https%3A%2F%2Flikestream.fun%2Ffr%2Fmovie%2F643215%2Fastrix-lix-lempire-du-milieu&tz=0&dev=e&res=12.1055&uuid=48a96e6a-af5f-4cb5-b0c7-1c6c1ae6e715%3A3%3A1
192.243.59.13307 Temporary Redirect 0 B URL HTTP/1.1 competitivepopcheerleader.com/watch.438192286364.js?key=8a4830da840fbc763c399225a23d4efb&kw=%5B%22watch%22%2C%22ast%C3%A9rix%22%2C%22ob%C3%A9lix%22%2C%22l%22%2C%22empire%22%2C%22du%22%2C%22milieu%22%2C%222023%22%2C%22movies%22%2C%22online%22%2C%22-%22%2C%22stream%22%2C%22movies%22%2C%22tv%22%2C%22shows%22%2C%22for%22%2C%22free%22%5D&refer=https%3A%2F%2Flikestream.fun%2Ffr%2Fmovie%2F643215%2Fastrix-lix-lempire-du-milieu&tz=0&dev=e&res=12.1055&uuid=48a96e6a-af5f-4cb5-b0c7-1c6c1ae6e715%3A3%3A1
IP 192.243.59.13:0
ASN #39572 DataWeb Global Group B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /watch.438192286364.js?key=8a4830da840fbc763c399225a23d4efb&kw=%5B%22watch%22%2C%22ast%C3%A9rix%22%2C%22ob%C3%A9lix%22%2C%22l%22%2C%22empire%22%2C%22du%22%2C%22milieu%22%2C%222023%22%2C%22movies%22%2C%22online%22%2C%22-%22%2C%22stream%22%2C%22movies%22%2C%22tv%22%2C%22shows%22%2C%22for%22%2C%22free%22%5D&refer=https%3A%2F%2Flikestream.fun%2Ffr%2Fmovie%2F643215%2Fastrix-lix-lempire-du-milieu&tz=0&dev=e&res=12.1055&uuid=48a96e6a-af5f-4cb5-b0c7-1c6c1ae6e715%3A3%3A1 HTTP/1.1
Host: competitivepopcheerleader.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://likestream.fun
Connection: keep-alive
Referer: https://likestream.fun/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 307 Temporary Redirect
Server: nginx/1.17.6
Date: Thu, 09 Feb 2023 03:53:08 GMT
Content-Type: text/html
Content-Length: 0
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://likestream.fun
Access-Control-Allow-Origin: https://likestream.fun
Access-Control-Allow-Credentials: true
Location: https://competitivepopcheerleader.com/watch.438192286364.js?key=8a4830da840fbc763c399225a23d4efb&kw=%5B%22watch%22%2C%22ast%C3%A9rix%22%2C%22ob%C3%A9lix%22%2C%22l%22%2C%22empire%22%2C%22du%22%2C%22milieu%22%2C%222023%22%2C%22movies%22%2C%22online%22%2C%22-%22%2C%22stream%22%2C%22movies%22%2C%22tv%22%2C%22shows%22%2C%22for%22%2C%22free%22%5D&refer=https%3A%2F%2Flikestream.fun%2Ffr%2Fmovie%2F643215%2Fastrix-lix-lempire-du-milieu&tz=0&dev=e&res=12.1055&uuid=48a96e6a-af5f-4cb5-b0c7-1c6c1ae6e715%3A3%3A1&shu=1d38d6b494581f87aa5b5e46bc0f19addce502fa84ed8d6ea95c26b1436324de8701c2a0fa23456ed0a49b7303f9f991b564d4a112c85f29eca096be90e5dd943061819d63f2045c62259241a415c566aac14ec36bb660d2149cc62b0ed762&pst=1675914848&rmtc=t
Set-Cookie: u_pl=16264886; expires=Fri, 10 Feb 2023 03:53:08 GMT; secure; SameSite=None
ain=eyJhbGciOiJIUzI1NiJ9.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.P70cyIezvb9koZl6-joj0ZeM4p-fGfcSm5Nwe1R0RIE; expires=Thu, 09 Feb 2023 03:54:08 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: f6f4d30b29c86be4e9170f5d885d084f
Strict-Transport-Security: max-age=0; includeSubdomains
outdilateinterrupt.com/6f/c5/8b/6fc58b0587420a8da04639a5066d1a79.js
192.243.59.20200 OK 13 kB URL HTTP/1.1 outdilateinterrupt.com/6f/c5/8b/6fc58b0587420a8da04639a5066d1a79.js
IP 192.243.59.20:0
ASN #39572 DataWeb Global Group B.V.
File type ASCII text, with very long lines (37158), with no line terminators
Hash 6bb22dbb3481973b91e5d24d12794867
6fece22e6e1af51d1c900f031d1bbdc30ea45b7a
aa76151caa917edfbd6d63fa3faeb0c8543ff13ff1aecb6515e0462a77bc60e3
Analyzer Verdict Alert quad9 Sinkholed
GET /6f/c5/8b/6fc58b0587420a8da04639a5066d1a79.js HTTP/1.1
Host: outdilateinterrupt.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://likestream.fun/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.17.9
Date: Thu, 09 Feb 2023 03:53:08 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: ab8f9360467416ae2e6e24ff346bbddb
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
outdilateinterrupt.com/watch.1333438927470.js?key=8a802881e1eab3503607ad8db30950ca&kw=%5B%22watch%22%2C%22ast%C3%A9rix%22%2C%22ob%C3%A9lix%22%2C%22l%22%2C%22empire%22%2C%22du%22%2C%22milieu%22%2C%222023%22%2C%22movies%22%2C%22online%22%2C%22-%22%2C%22stream%22%2C%22movies%22%2C%22tv%22%2C%22shows%22%2C%22for%22%2C%22free%22%5D&refer=https%3A%2F%2Flikestream.fun%2Ffr%2Fmovie%2F643215%2Fastrix-lix-lempire-du-milieu&tz=0&dev=e&res=12.1055&uuid=48a96e6a-af5f-4cb5-b0c7-1c6c1ae6e715%3A3%3A1
192.243.59.20307 Temporary Redirect 0 B URL HTTP/1.1 outdilateinterrupt.com/watch.1333438927470.js?key=8a802881e1eab3503607ad8db30950ca&kw=%5B%22watch%22%2C%22ast%C3%A9rix%22%2C%22ob%C3%A9lix%22%2C%22l%22%2C%22empire%22%2C%22du%22%2C%22milieu%22%2C%222023%22%2C%22movies%22%2C%22online%22%2C%22-%22%2C%22stream%22%2C%22movies%22%2C%22tv%22%2C%22shows%22%2C%22for%22%2C%22free%22%5D&refer=https%3A%2F%2Flikestream.fun%2Ffr%2Fmovie%2F643215%2Fastrix-lix-lempire-du-milieu&tz=0&dev=e&res=12.1055&uuid=48a96e6a-af5f-4cb5-b0c7-1c6c1ae6e715%3A3%3A1
IP 192.243.59.20:0
ASN #39572 DataWeb Global Group B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /watch.1333438927470.js?key=8a802881e1eab3503607ad8db30950ca&kw=%5B%22watch%22%2C%22ast%C3%A9rix%22%2C%22ob%C3%A9lix%22%2C%22l%22%2C%22empire%22%2C%22du%22%2C%22milieu%22%2C%222023%22%2C%22movies%22%2C%22online%22%2C%22-%22%2C%22stream%22%2C%22movies%22%2C%22tv%22%2C%22shows%22%2C%22for%22%2C%22free%22%5D&refer=https%3A%2F%2Flikestream.fun%2Ffr%2Fmovie%2F643215%2Fastrix-lix-lempire-du-milieu&tz=0&dev=e&res=12.1055&uuid=48a96e6a-af5f-4cb5-b0c7-1c6c1ae6e715%3A3%3A1 HTTP/1.1
Host: outdilateinterrupt.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://likestream.fun
Connection: keep-alive
Referer: https://likestream.fun/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 307 Temporary Redirect
Server: nginx/1.17.9
Date: Thu, 09 Feb 2023 03:53:08 GMT
Content-Type: text/html
Content-Length: 0
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://likestream.fun
Access-Control-Allow-Origin: https://likestream.fun
Access-Control-Allow-Credentials: true
Location: https://outdilateinterrupt.com/watch.1333438927470.js?key=8a802881e1eab3503607ad8db30950ca&kw=%5B%22watch%22%2C%22ast%C3%A9rix%22%2C%22ob%C3%A9lix%22%2C%22l%22%2C%22empire%22%2C%22du%22%2C%22milieu%22%2C%222023%22%2C%22movies%22%2C%22online%22%2C%22-%22%2C%22stream%22%2C%22movies%22%2C%22tv%22%2C%22shows%22%2C%22for%22%2C%22free%22%5D&refer=https%3A%2F%2Flikestream.fun%2Ffr%2Fmovie%2F643215%2Fastrix-lix-lempire-du-milieu&tz=0&dev=e&res=12.1055&uuid=48a96e6a-af5f-4cb5-b0c7-1c6c1ae6e715%3A3%3A1&shu=3aa88a65400777b372ef85dddb1a4f4f211b5e1a5605e44d53c4e502bd9572e2aa7a5513edbd74496bacf939b2c3785930b43e6fd57ea644519bbcf59e4f9e02a76705dd66194cfa682eae3ae917cf544a8f5cb7&pst=1675914848&rmtc=t
Set-Cookie: u_pl=16134289; expires=Fri, 10 Feb 2023 03:53:08 GMT; secure; SameSite=None
ain=eyJhbGciOiJIUzI1NiJ9.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.0pKgbtdtkmXB5Bjg69Bz8W_he2rTgIuthz06bx3UI3k; expires=Thu, 09 Feb 2023 03:54:08 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: a9e99183d23346adea571d784f1d807f
Strict-Transport-Security: max-age=0; includeSubdomains
competitivepopcheerleader.com/pixel/purst?dl=0&th=0&sc=0&rs=4276&rd=4276&fd=647&bv=22.10.v.10&tmpl=136
192.243.59.13200 OK 0 B URL HTTP/1.1 competitivepopcheerleader.com/pixel/purst?dl=0&th=0&sc=0&rs=4276&rd=4276&fd=647&bv=22.10.v.10&tmpl=136
IP 192.243.59.13:0
ASN #39572 DataWeb Global Group B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /pixel/purst?dl=0&th=0&sc=0&rs=4276&rd=4276&fd=647&bv=22.10.v.10&tmpl=136 HTTP/1.1
Host: competitivepopcheerleader.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://likestream.fun/
Cookie: u_pl=16264886; ain=eyJhbGciOiJIUzI1NiJ9.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.P70cyIezvb9koZl6-joj0ZeM4p-fGfcSm5Nwe1R0RIE
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.17.6
Date: Thu, 09 Feb 2023 03:53:08 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
competitivepopcheerleader.com/watch.438192286364.js?key=8a4830da840fbc763c399225a23d4efb&kw=%5B%22watch%22%2C%22ast%C3%A9rix%22%2C%22ob%C3%A9lix%22%2C%22l%22%2C%22empire%22%2C%22du%22%2C%22milieu%22%2C%222023%22%2C%22movies%22%2C%22online%22%2C%22-%22%2C%22stream%22%2C%22movies%22%2C%22tv%22%2C%22shows%22%2C%22for%22%2C%22free%22%5D&refer=https%3A%2F%2Flikestream.fun%2Ffr%2Fmovie%2F643215%2Fastrix-lix-lempire-du-milieu&tz=0&dev=e&res=12.1055&uuid=48a96e6a-af5f-4cb5-b0c7-1c6c1ae6e715%3A3%3A1&shu=1d38d6b494581f87aa5b5e46bc0f19addce502fa84ed8d6ea95c26b1436324de8701c2a0fa23456ed0a49b7303f9f991b564d4a112c85f29eca096be90e5dd943061819d63f2045c62259241a415c566aac14ec36bb660d2149cc62b0ed762&pst=1675914848&rmtc=t
192.243.59.13200 OK 2.1 kB URL HTTP/1.1 competitivepopcheerleader.com/watch.438192286364.js?key=8a4830da840fbc763c399225a23d4efb&kw=%5B%22watch%22%2C%22ast%C3%A9rix%22%2C%22ob%C3%A9lix%22%2C%22l%22%2C%22empire%22%2C%22du%22%2C%22milieu%22%2C%222023%22%2C%22movies%22%2C%22online%22%2C%22-%22%2C%22stream%22%2C%22movies%22%2C%22tv%22%2C%22shows%22%2C%22for%22%2C%22free%22%5D&refer=https%3A%2F%2Flikestream.fun%2Ffr%2Fmovie%2F643215%2Fastrix-lix-lempire-du-milieu&tz=0&dev=e&res=12.1055&uuid=48a96e6a-af5f-4cb5-b0c7-1c6c1ae6e715%3A3%3A1&shu=1d38d6b494581f87aa5b5e46bc0f19addce502fa84ed8d6ea95c26b1436324de8701c2a0fa23456ed0a49b7303f9f991b564d4a112c85f29eca096be90e5dd943061819d63f2045c62259241a415c566aac14ec36bb660d2149cc62b0ed762&pst=1675914848&rmtc=t
IP 192.243.59.13:0
ASN #39572 DataWeb Global Group B.V.
File type HTML document text\012- HTML document, ASCII text, with very long lines (2647)
Hash e579c601443eba9968de7dfd945003d8
cc14f244468c32bd58b8714db220122baa7660f0
37ec563771e361cad786d944d3181f6dd1acd8eb841e9f86a2cac4b70bac714d
Analyzer Verdict Alert quad9 Sinkholed
GET /watch.438192286364.js?key=8a4830da840fbc763c399225a23d4efb&kw=%5B%22watch%22%2C%22ast%C3%A9rix%22%2C%22ob%C3%A9lix%22%2C%22l%22%2C%22empire%22%2C%22du%22%2C%22milieu%22%2C%222023%22%2C%22movies%22%2C%22online%22%2C%22-%22%2C%22stream%22%2C%22movies%22%2C%22tv%22%2C%22shows%22%2C%22for%22%2C%22free%22%5D&refer=https%3A%2F%2Flikestream.fun%2Ffr%2Fmovie%2F643215%2Fastrix-lix-lempire-du-milieu&tz=0&dev=e&res=12.1055&uuid=48a96e6a-af5f-4cb5-b0c7-1c6c1ae6e715%3A3%3A1&shu=1d38d6b494581f87aa5b5e46bc0f19addce502fa84ed8d6ea95c26b1436324de8701c2a0fa23456ed0a49b7303f9f991b564d4a112c85f29eca096be90e5dd943061819d63f2045c62259241a415c566aac14ec36bb660d2149cc62b0ed762&pst=1675914848&rmtc=t HTTP/1.1
Host: competitivepopcheerleader.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://likestream.fun
Referer: https://likestream.fun/
Connection: keep-alive
Cookie: u_pl=16264886; ain=eyJhbGciOiJIUzI1NiJ9.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.P70cyIezvb9koZl6-joj0ZeM4p-fGfcSm5Nwe1R0RIE
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.17.6
Date: Thu, 09 Feb 2023 03:53:08 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://likestream.fun
Access-Control-Allow-Origin: https://likestream.fun
Access-Control-Allow-Credentials: true
Set-Cookie: uid_id2=48a96e6a-af5f-4cb5-b0c7-1c6c1ae6e715:3:1; expires=Thu, 16 Feb 2023 03:53:08 GMT; secure; SameSite=None
iprc2aa49852441f8f897274997f241d818a=3569807; expires=Thu, 09 Feb 2023 07:53:08 GMT; secure; SameSite=None
pdhtkv=true; expires=Fri, 10 Feb 2023 03:53:08 GMT; secure; SameSite=None
uncs=1; expires=Fri, 10 Feb 2023 03:53:08 GMT; secure; SameSite=None
pdhtkv27=true; expires=Fri, 10 Feb 2023 03:53:08 GMT; secure; SameSite=None
uncs27=1; expires=Fri, 10 Feb 2023 03:53:08 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 25ef04f573228b2b161e4a4496dee1cf
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
likestream.fun/
162.0.229.49200 OK 12 kB IP 162.0.229.49:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (13404)
Hash ecc6f442a7e3649fc3eaa19eeaf452a0
2b0a97d046e2f77ec50f899a89cdeb711c85b3be
ef9ed26a1583a4ebbca847e9fdc20964fc54f4b9f279498e5cc4454906b72fc6
GET / HTTP/1.1
Host: likestream.fun
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://likestream.fun/fr/movie/643215/astrix-lix-lempire-du-milieu
Connection: keep-alive
Cookie: PHPSESSID=65922788acd7fd9f4a2a9481df974460
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
x-powered-by: PHP/7.4.33
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: text/html; charset=UTF-8
content-length: 12271
content-encoding: br
vary: Accept-Encoding
date: Thu, 09 Feb 2023 03:53:08 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
e1.o.lencr.org/
23.36.77.32200 OK 344 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash c41c722798f0e3638024f21a5a7a8d83
db3ccc45ee1b163a36affe20ac87fa33c5fd6146
2c47b9c17f99c9852ece1fdf54f4c6dc7b97fc61c663126a5136162560cfb399
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 344
ETag: "2C47B9C17F99C9852ECE1FDF54F4C6DC7B97FC61C663126A5136162560CFB399"
Last-Modified: Mon, 06 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=970
Expires: Thu, 09 Feb 2023 04:09:19 GMT
Date: Thu, 09 Feb 2023 03:53:09 GMT
Connection: keep-alive
outdilateinterrupt.com/watch.1333438927470.js?key=8a802881e1eab3503607ad8db30950ca&kw=%5B%22watch%22%2C%22ast%C3%A9rix%22%2C%22ob%C3%A9lix%22%2C%22l%22%2C%22empire%22%2C%22du%22%2C%22milieu%22%2C%222023%22%2C%22movies%22%2C%22online%22%2C%22-%22%2C%22stream%22%2C%22movies%22%2C%22tv%22%2C%22shows%22%2C%22for%22%2C%22free%22%5D&refer=https%3A%2F%2Flikestream.fun%2Ffr%2Fmovie%2F643215%2Fastrix-lix-lempire-du-milieu&tz=0&dev=e&res=12.1055&uuid=48a96e6a-af5f-4cb5-b0c7-1c6c1ae6e715%3A3%3A1&shu=3aa88a65400777b372ef85dddb1a4f4f211b5e1a5605e44d53c4e502bd9572e2aa7a5513edbd74496bacf939b2c3785930b43e6fd57ea644519bbcf59e4f9e02a76705dd66194cfa682eae3ae917cf544a8f5cb7&pst=1675914848&rmtc=t
192.243.59.20200 OK 2.0 kB URL HTTP/1.1 outdilateinterrupt.com/watch.1333438927470.js?key=8a802881e1eab3503607ad8db30950ca&kw=%5B%22watch%22%2C%22ast%C3%A9rix%22%2C%22ob%C3%A9lix%22%2C%22l%22%2C%22empire%22%2C%22du%22%2C%22milieu%22%2C%222023%22%2C%22movies%22%2C%22online%22%2C%22-%22%2C%22stream%22%2C%22movies%22%2C%22tv%22%2C%22shows%22%2C%22for%22%2C%22free%22%5D&refer=https%3A%2F%2Flikestream.fun%2Ffr%2Fmovie%2F643215%2Fastrix-lix-lempire-du-milieu&tz=0&dev=e&res=12.1055&uuid=48a96e6a-af5f-4cb5-b0c7-1c6c1ae6e715%3A3%3A1&shu=3aa88a65400777b372ef85dddb1a4f4f211b5e1a5605e44d53c4e502bd9572e2aa7a5513edbd74496bacf939b2c3785930b43e6fd57ea644519bbcf59e4f9e02a76705dd66194cfa682eae3ae917cf544a8f5cb7&pst=1675914848&rmtc=t
IP 192.243.59.20:0
ASN #39572 DataWeb Global Group B.V.
File type HTML document, ASCII text, with very long lines (2540)
Hash 64c012f778f23942cdb63eaa173564ad
e8b2d47db83c13a922748190ad823f4e74815f1b
e8f9004258313127d580505def7f7c96b3070af20156e3f85f61293c6ffd1208
Analyzer Verdict Alert quad9 Sinkholed
GET /watch.1333438927470.js?key=8a802881e1eab3503607ad8db30950ca&kw=%5B%22watch%22%2C%22ast%C3%A9rix%22%2C%22ob%C3%A9lix%22%2C%22l%22%2C%22empire%22%2C%22du%22%2C%22milieu%22%2C%222023%22%2C%22movies%22%2C%22online%22%2C%22-%22%2C%22stream%22%2C%22movies%22%2C%22tv%22%2C%22shows%22%2C%22for%22%2C%22free%22%5D&refer=https%3A%2F%2Flikestream.fun%2Ffr%2Fmovie%2F643215%2Fastrix-lix-lempire-du-milieu&tz=0&dev=e&res=12.1055&uuid=48a96e6a-af5f-4cb5-b0c7-1c6c1ae6e715%3A3%3A1&shu=3aa88a65400777b372ef85dddb1a4f4f211b5e1a5605e44d53c4e502bd9572e2aa7a5513edbd74496bacf939b2c3785930b43e6fd57ea644519bbcf59e4f9e02a76705dd66194cfa682eae3ae917cf544a8f5cb7&pst=1675914848&rmtc=t HTTP/1.1
Host: outdilateinterrupt.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://likestream.fun
Referer: https://likestream.fun/
Connection: keep-alive
Cookie: u_pl=16134289; ain=eyJhbGciOiJIUzI1NiJ9.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.0pKgbtdtkmXB5Bjg69Bz8W_he2rTgIuthz06bx3UI3k
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.17.9
Date: Thu, 09 Feb 2023 03:53:09 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://likestream.fun
Access-Control-Allow-Origin: https://likestream.fun
Access-Control-Allow-Credentials: true
Set-Cookie: uid_id2=48a96e6a-af5f-4cb5-b0c7-1c6c1ae6e715:3:1; expires=Thu, 16 Feb 2023 03:53:09 GMT; secure; SameSite=None
iprc4e787c47f893961d6627bf1cfb7d528d=3800413; expires=Fri, 10 Feb 2023 03:53:09 GMT; secure; SameSite=None
pdhtkv=true; expires=Fri, 10 Feb 2023 03:53:09 GMT; secure; SameSite=None
uncs=1; expires=Fri, 10 Feb 2023 03:53:09 GMT; secure; SameSite=None
pdhtkv32=true; expires=Fri, 10 Feb 2023 03:53:09 GMT; secure; SameSite=None
uncs32=1; expires=Fri, 10 Feb 2023 03:53:09 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: bce001b41f48bf4c7400413decaec964
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 7f9292bde1a4df6db24400a6f978d56f
2509e0cacb6b47fcab688d71ace227b40299a22b
27b13e02b853efc04dedb63f3a3a52425db910fb0b5d20b6bad05d491967a6f3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "27B13E02B853EFC04DEDB63F3A3A52425DB910FB0B5D20B6BAD05D491967A6F3"
Last-Modified: Wed, 08 Feb 2023 01:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17124
Expires: Thu, 09 Feb 2023 08:38:33 GMT
Date: Thu, 09 Feb 2023 03:53:09 GMT
Connection: keep-alive
likestream.fun/oc-content/themes/movie/img/mask-title.png
162.0.229.49200 OK 972 B URL HTTP/2 likestream.fun/oc-content/themes/movie/img/mask-title.png
IP 162.0.229.49:0
File type PNG image data, 1 x 151, 8-bit/color RGBA, non-interlaced\012- data
Hash b96969041dd54e00a956cb540b536d22
e8a7c7914cfa11237a8b9b3ec2a33199841e7134
8760363f47c1b5e34f6ad0df1eb905162d0076e4a8d9f834aa951070cd963efc
GET /oc-content/themes/movie/img/mask-title.png HTTP/1.1
Host: likestream.fun
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://likestream.fun/oc-content/themes/movie/style.css
Cookie: PHPSESSID=65922788acd7fd9f4a2a9481df974460
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Thu, 16 Feb 2023 03:53:08 GMT
content-type: image/png
last-modified: Tue, 05 Dec 2017 01:42:34 GMT
accept-ranges: bytes
content-length: 972
date: Thu, 09 Feb 2023 03:53:08 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
likestream.fun/oc-content/themes/movie/img/btn-play.png
162.0.229.49200 OK 5.3 kB URL HTTP/2 likestream.fun/oc-content/themes/movie/img/btn-play.png
IP 162.0.229.49:0
File type PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced\012- data
Hash bf1c8264835782ff6555adf6fdf11154
c01c1c7139931370d3819f9883b570ff2a5ee5b5
4a0e358e8470a3e3e2ace24aa297385e818b5fea08644aac852994c12d5d9d2f
GET /oc-content/themes/movie/img/btn-play.png HTTP/1.1
Host: likestream.fun
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://likestream.fun/oc-content/themes/movie/style.css
Cookie: PHPSESSID=65922788acd7fd9f4a2a9481df974460
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Thu, 16 Feb 2023 03:53:08 GMT
content-type: image/png
last-modified: Tue, 05 Dec 2017 01:42:34 GMT
accept-ranges: bytes
content-length: 5293
date: Thu, 09 Feb 2023 03:53:08 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
cdn.cloudimagesb.com/cti/56/ef/55/56ef55f6ef3bc03e69b8d66da27f0cd1/1658920055.png
45.133.44.10200 OK 67 kB URL HTTP/2 cdn.cloudimagesb.com/cti/56/ef/55/56ef55f6ef3bc03e69b8d66da27f0cd1/1658920055.png
IP 45.133.44.10:0
ASN #39572 DataWeb Global Group B.V.
File type PNG image data, 468 x 60, 8-bit/color RGBA, non-interlaced\012- data
Hash a98b4585db1c6db06d6857c73bb75fcb
02a896b08a79e873b2dd26200ee1f0665dc1c80a
fc08e863ffafe25aa63fe8b60c2d5135fc5f52caf0abae4da3f1a90e0f8ed96c
GET /cti/56/ef/55/56ef55f6ef3bc03e69b8d66da27f0cd1/1658920055.png HTTP/1.1
Host: cdn.cloudimagesb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 09 Feb 2023 03:53:09 GMT
content-type: image/png
content-length: 67174
server: nginx/1.17.6
last-modified: Wed, 27 Jul 2022 11:07:43 GMT
etag: "62e11c7f-10666"
expires: Sat, 11 Feb 2023 03:53:09 GMT
cache-control: max-age=172800
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.163200 OK 472 B IP 142.250.74.163:0
Hash 50ca5deab68ba881743e691a693819f1
fd6b74d17a961f751a8edf09fcfaab273f0a7408
139c5ed1fd10f67669a5de174c5ffb02411f96463217781882c9d22b050a02d8
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 09 Feb 2023 03:53:09 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.163200 OK 471 B IP 142.250.74.163:0
Hash f30ebb7855430e77d7f7e78185824905
f833d3fbb268c2d0b289b8af527a13ea6ab3535d
ecf61ddf953eab9c7889a0b5e697364bed9f8fee9f7be3c3d13258542c858354
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 09 Feb 2023 03:53:09 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
googleads.g.doubleclick.net/pagead/id
142.250.74.66302 Found 0 B URL HTTP/2 googleads.g.doubleclick.net/pagead/id
IP 142.250.74.66:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pagead/id HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
location: https://googleads.g.doubleclick.net/pagead/id?slf_rd=1
access-control-allow-credentials: true
access-control-allow-origin: https://www.youtube.com
date: Thu, 09 Feb 2023 03:53:09 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
server: cafe
content-length: 0
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
static.doubleclick.net/instream/ad_status.js
142.250.74.166200 OK 29 B URL HTTP/2 static.doubleclick.net/instream/ad_status.js
IP 142.250.74.166:0
Hash 1fa71744db23d0f8df9cce6719defcb7
e4be9b7136697942a036f97cf26ebaf703ad2067
eed0dc1fdb5d97ed188ae16fd5e1024a5bb744af47340346be2146300a6c54b9
GET /instream/ad_status.js HTTP/1.1
Host: static.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="ads-doubleclick-media"
report-to: {"group":"ads-doubleclick-media","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-media"}]}
timing-allow-origin: *
content-length: 29
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 09 Feb 2023 03:50:50 GMT
expires: Thu, 09 Feb 2023 04:05:50 GMT
cache-control: public, max-age=900
age: 139
last-modified: Thu, 12 Dec 2013 23:40:16 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash a1d86c0ad2e32468f61d915e8ea3474c
3a6b7b7f26c1d57217677a52050b8241bc45ded4
f613f134e0bc497dfbb902d42f37402e09dfc9e3ed188f7a22f25803210caccf
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F613F134E0BC497DFBB902D42F37402E09DFC9E3ED188F7A22F25803210CACCF"
Last-Modified: Mon, 06 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14872
Expires: Thu, 09 Feb 2023 08:01:01 GMT
Date: Thu, 09 Feb 2023 03:53:09 GMT
Connection: keep-alive
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
216.58.211.10200 OK 0 B URL HTTP/2 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
IP 216.58.211.10:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /$rpc/google.internal.waa.v1.Waa/Create HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type,x-goog-api-key,x-user-agent
Referer: https://www.youtube.com/
Origin: https://www.youtube.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://www.youtube.com
vary: origin, referer, x-origin
access-control-allow-credentials: true
access-control-allow-methods: DELETE,GET,HEAD,OPTIONS,PATCH,POST,PUT
access-control-allow-headers: content-type,x-goog-api-key,x-user-agent
access-control-max-age: 3600
date: Thu, 09 Feb 2023 03:53:09 GMT
content-type: text/html
server: ESF
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
googleads.g.doubleclick.net/pagead/id?slf_rd=1
142.250.74.66200 OK 120 B URL HTTP/2 googleads.g.doubleclick.net/pagead/id?slf_rd=1
IP 142.250.74.66:0
Hash 5b51cf2ffefd98b10d8f98dd75a9b18f
2354ad43bf51a98f7396f8f8ef7aeb6ea0100ead
e0e2c490ee124cfb22d34d4c5f91041f1dc0a8d6d00a647c454dfbf60713ad71
GET /pagead/id?slf_rd=1 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.youtube.com
Referer: https://www.youtube.com/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
access-control-allow-origin: https://www.youtube.com
content-type: application/json; charset=UTF-8
date: Thu, 09 Feb 2023 03:53:09 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 120
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
redirector.googlevideo.com/initplayback?source=youtube&oeis=1&ip=91.90.42.154&c=WEB_EMBEDDED_PLAYER&oad=3200&ovd=3200&oaad=3200&oavd=3200&ocs=700&oewis=1&oputc=1&ofpcc=1&msp=1&odepv=1&alr=yes&id=29092
172.217.21.174200 OK 235 B URL HTTP/2 redirector.googlevideo.com/initplayback?source=youtube&oeis=1&ip=91.90.42.154&c=WEB_EMBEDDED_PLAYER&oad=3200&ovd=3200&oaad=3200&oavd=3200&ocs=700&oewis=1&oputc=1&ofpcc=1&msp=1&odepv=1&alr=yes&id=29092
IP 172.217.21.174:0
File type ASCII text, with no line terminators
Hash 69fe125cb2a6697ba71f7ee996b285bc
e83918a1658cd9d0ceff37480f6f63c6fe841d7f
59b45d1d527fd63df166d1b25be9f286014babfaabd858ef679a148353b9c20a
GET /initplayback?source=youtube&oeis=1&ip=91.90.42.154&c=WEB_EMBEDDED_PLAYER&oad=3200&ovd=3200&oaad=3200&oavd=3200&ocs=700&oewis=1&oputc=1&ofpcc=1&msp=1&odepv=1&alr=yes&id=29092 HTTP/1.1
Host: redirector.googlevideo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 09 Feb 2023 03:53:09 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
x-content-type-options: nosniff
access-control-allow-origin: https://www.youtube.com
access-control-allow-credentials: true
timing-allow-origin: https://www.youtube.com
access-control-expose-headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-Ms
content-type: text/plain; charset=UTF-8
content-encoding: gzip
server: ClientMapServer
content-length: 235
x-xss-protection: 0
x-frame-options: SAMEORIGIN
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.163200 OK 472 B IP 142.250.74.163:0
Hash 50ca5deab68ba881743e691a693819f1
fd6b74d17a961f751a8edf09fcfaab273f0a7408
139c5ed1fd10f67669a5de174c5ffb02411f96463217781882c9d22b050a02d8
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 09 Feb 2023 03:53:09 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
friendshipmale.com/sfp.js
172.64.202.23200 OK 32 kB URL HTTP/2 friendshipmale.com/sfp.js
IP 172.64.202.23:0
File type Unicode text, UTF-8 text, with very long lines (65529), with no line terminators
Hash 7c24af9e17ead7b434963dc3e2614de0
fea2f347b20d7661443ea185a98097eeed4fff9b
9a113739de15f140ac5145ae4402b5b0f1e2e983610589abc733a862e8705c31
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET /sfp.js HTTP/1.1
Host: friendshipmale.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://likestream.fun/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 09 Feb 2023 03:53:09 GMT
content-type: application/javascript; charset=utf-8
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
access-control-allow-origin: *
expires: Thu, 01 Jan 1970 00:00:01 GMT
cache-control: max-age=14400
x-request-id: fc9648ede96aaa7d6f34d05dd6d0b866
strict-transport-security: max-age=0; includeSubdomains
cf-cache-status: EXPIRED
last-modified: Thu, 09 Feb 2023 03:53:09 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=y3Bh%2BCKB1gZ3SaNtTqlbEhaKWdb62Xzl%2F%2Bk14a7gZrOxFDYYk%2BY3UtOrmGLBTYgCjTFWFnc4Cql9R04OYNpLkvIYj9hRmT8wdlMne1%2BxA2RvXa6PLGRCkWDc7Xk5q0e7APTqQxg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7969a80849617783-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
216.58.211.10200 OK 31 kB URL HTTP/2 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
IP 216.58.211.10:0
File type JSON data\012- , ASCII text, with very long lines (65536), with no line terminators
Hash 50a0c58d04551ec6c24e81432fe3de60
533746eeaf6079ca18b8fe3592530193717fc942
9e968feac4e9f3311d2234ec940efd5f05a0fb3c2f3c191d926f385e22485a2d
POST /$rpc/google.internal.waa.v1.Waa/Create HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Api-Key: AIzaSyDyT5W0Jh49F30Pqqtyfdf7pDLFKLJoAnw
Content-Type: application/json+protobuf
X-User-Agent: grpc-web-javascript/0.1
Content-Length: 24
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json+protobuf; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: gzip
date: Thu, 09 Feb 2023 03:53:09 GMT
server: ESF
cache-control: private
content-length: 30992
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: https://www.youtube.com
access-control-allow-credentials: true
access-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.163200 OK 471 B IP 142.250.74.163:0
Hash f30ebb7855430e77d7f7e78185824905
f833d3fbb268c2d0b289b8af527a13ea6ab3535d
ecf61ddf953eab9c7889a0b5e697364bed9f8fee9f7be3c3d13258542c858354
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 09 Feb 2023 03:53:09 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
cdn.cloudimagesb.com/bi/a4/5b/cb/a45bcb99ca1b0b03013899ff878df613/1668780224.jpg
45.133.44.10200 OK 9.0 kB URL HTTP/2 cdn.cloudimagesb.com/bi/a4/5b/cb/a45bcb99ca1b0b03013899ff878df613/1668780224.jpg
IP 45.133.44.10:0
ASN #39572 DataWeb Global Group B.V.
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 320x50, components 3\012- data
Hash 371e31ec203ae128eecf45dc15893c9c
1e8ec79e13a06ac3718d7dd65254a2b95d16554a
0a0bb33bbd2577b5de1e4c35c66d44e3f9765fdf905d0173ae4bd99f253f05dc
GET /bi/a4/5b/cb/a45bcb99ca1b0b03013899ff878df613/1668780224.jpg HTTP/1.1
Host: cdn.cloudimagesb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 09 Feb 2023 03:53:09 GMT
content-type: image/jpeg
content-length: 9046
server: nginx/1.17.6
last-modified: Fri, 18 Nov 2022 14:03:52 GMT
etag: "637790c8-2356"
expires: Sat, 11 Feb 2023 03:53:09 GMT
cache-control: max-age=172800
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
s4.histats.com/stats/0.php?4556876&@f16&@g1&@h1&@i1&@j1675914846761&@k0&@l1&@mWatch%20Ast%C3%A9rix%20%26%20Ob%C3%A9lix%20%3A%20L%27Empire%20du%20Milieu%20(2023)%20Movies%20Online%20-%20Stream%20Movies%20%26%20TV%20Shows%20for%20Free&@n0&@o1000&@q0&@r0&@s0&@ten-US&@u1280&@b1:-156294461&@b3:1675914847&@b4:js15_as.js&@b5:0&@a-_0.2.1&@vhttps%3A%2F%2Flikestream.fun%2Ffr%2Fmovie%2F643215%2Fastrix-lix-lempire-du-milieu&@w
54.39.128.117200 OK 50 B URL HTTP/1.1 s4.histats.com/stats/0.php?4556876&@f16&@g1&@h1&@i1&@j1675914846761&@k0&@l1&@mWatch%20Ast%C3%A9rix%20%26%20Ob%C3%A9lix%20%3A%20L%27Empire%20du%20Milieu%20(2023)%20Movies%20Online%20-%20Stream%20Movies%20%26%20TV%20Shows%20for%20Free&@n0&@o1000&@q0&@r0&@s0&@ten-US&@u1280&@b1:-156294461&@b3:1675914847&@b4:js15_as.js&@b5:0&@a-_0.2.1&@vhttps%3A%2F%2Flikestream.fun%2Ffr%2Fmovie%2F643215%2Fastrix-lix-lempire-du-milieu&@w
IP 54.39.128.117:0
File type ASCII text, with no line terminators
Hash 8b21a8676d1f598b047bc5079bf43063
8bfb22dfa9a3c7717077537a3e3dbc13cb318132
47a5e6d2e41cd35af4ed44302f4821031c9ebd8219c0beb1ae12cedc859302b7
GET /stats/0.php?4556876&@f16&@g1&@h1&@i1&@j1675914846761&@k0&@l1&@mWatch%20Ast%C3%A9rix%20%26%20Ob%C3%A9lix%20%3A%20L%27Empire%20du%20Milieu%20(2023)%20Movies%20Online%20-%20Stream%20Movies%20%26%20TV%20Shows%20for%20Free&@n0&@o1000&@q0&@r0&@s0&@ten-US&@u1280&@b1:-156294461&@b3:1675914847&@b4:js15_as.js&@b5:0&@a-_0.2.1&@vhttps%3A%2F%2Flikestream.fun%2Ffr%2Fmovie%2F643215%2Fastrix-lix-lempire-du-milieu&@w HTTP/1.1
Host: s4.histats.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://likestream.fun/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Thu, 09 Feb 2023 03:53:09 GMT
Content-Type: text/html;charset=UTF-8
Content-Length: 50
Connection: close
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 2cb4dfc1a8e92ad7a3ca4a6769d5b240
fefcb57977b1834840b8fd19d7d46c71552d5f5f
1ee74d006ab2ec8d1b4faf1e5a28bcf393518153d937ba67bc874fa7b7dd44e5
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "1EE74D006AB2EC8D1B4FAF1E5A28BCF393518153D937BA67BC874FA7B7DD44E5"
Last-Modified: Tue, 07 Feb 2023 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11762
Expires: Thu, 09 Feb 2023 07:09:12 GMT
Date: Thu, 09 Feb 2023 03:53:10 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 2cb4dfc1a8e92ad7a3ca4a6769d5b240
fefcb57977b1834840b8fd19d7d46c71552d5f5f
1ee74d006ab2ec8d1b4faf1e5a28bcf393518153d937ba67bc874fa7b7dd44e5
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "1EE74D006AB2EC8D1B4FAF1E5A28BCF393518153D937BA67BC874FA7B7DD44E5"
Last-Modified: Tue, 07 Feb 2023 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11762
Expires: Thu, 09 Feb 2023 07:09:12 GMT
Date: Thu, 09 Feb 2023 03:53:10 GMT
Connection: keep-alive
ocsp.pki.goog/gts1c3
142.250.74.163200 OK 471 B IP 142.250.74.163:0
Hash 84889b914548f7820766f27a40699cfa
bc674cdb5819759b5ecd5aabfde47f56127f5d89
e2a69fe4edd028d00a8a744b62ef51dada2aff144da0cd9813efc887a11f70a8
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 09 Feb 2023 03:53:10 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.com/js/th/e-T0LC6veq6xndVnxNZYDs0k2YzO3ng5pgwYiLLC-NE.js
142.250.74.164200 OK 14 kB URL HTTP/2 www.google.com/js/th/e-T0LC6veq6xndVnxNZYDs0k2YzO3ng5pgwYiLLC-NE.js
IP 142.250.74.164:0
File type ASCII text, with very long lines (36180)
Hash 6caf3ddf47bad942732577bf1cd634ed
5930e4cdb4173c5ffa3f9e2eaf7ecc147623dd0c
cc13b4b51d92ba1992ec59da7b670f2a66cf5ffd4907061f911349e925a218b7
GET /js/th/e-T0LC6veq6xndVnxNZYDs0k2YzO3ng5pgwYiLLC-NE.js HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/botguard-scs
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="botguard-scs"
report-to: {"group":"botguard-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/botguard-scs"}]}
content-length: 14345
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 07 Feb 2023 08:52:36 GMT
expires: Wed, 07 Feb 2024 08:52:36 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 30 Jan 2023 12:00:00 GMT
content-type: text/javascript
age: 154834
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
unseenreport.com/pxf.gif?uuid=48a96e6a-af5f-4cb5-b0c7-1c6c1ae6e715&eb=afa55bd8bbaeee6cbf2f0b21fb513961&te=9e4947f35751465411fd1a4f5c358c78&ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&dev=e&res=14.1055&b_frame=0&pk=06fcce71a0c63a83a3dfc6f6c3c5c444&bl=en-US&sr=1002x1280&sz=1024x1280&hjs=3
192.243.59.12200 OK 1 B URL HTTP/1.1 unseenreport.com/pxf.gif?uuid=48a96e6a-af5f-4cb5-b0c7-1c6c1ae6e715&eb=afa55bd8bbaeee6cbf2f0b21fb513961&te=9e4947f35751465411fd1a4f5c358c78&ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&dev=e&res=14.1055&b_frame=0&pk=06fcce71a0c63a83a3dfc6f6c3c5c444&bl=en-US&sr=1002x1280&sz=1024x1280&hjs=3
IP 192.243.59.12:0
ASN #39572 DataWeb Global Group B.V.
File type very short file (no magic)
Hash 93b885adfe0da089cdf634904fd59f71
5ba93c9db0cff93f52b521d7420e43f6eda2784f
6e340b9cffb37a989ca544e6bb780a2c78901d3fb33738768511a30617afa01d
Analyzer Verdict Alert quad9 Sinkholed
GET /pxf.gif?uuid=48a96e6a-af5f-4cb5-b0c7-1c6c1ae6e715&eb=afa55bd8bbaeee6cbf2f0b21fb513961&te=9e4947f35751465411fd1a4f5c358c78&ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&dev=e&res=14.1055&b_frame=0&pk=06fcce71a0c63a83a3dfc6f6c3c5c444&bl=en-US&sr=1002x1280&sz=1024x1280&hjs=3 HTTP/1.1
Host: unseenreport.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://likestream.fun/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.17.6
Date: Thu, 09 Feb 2023 03:53:10 GMT
Content-Type: image/gif
Content-Length: 1
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 9560568391878745e477167beea144c9
Strict-Transport-Security: max-age=0; includeSubdomains
unseenreport.com/pxf.gif?uuid=48a96e6a-af5f-4cb5-b0c7-1c6c1ae6e715&eb=afa55bd8bbaeee6cbf2f0b21fb513961&te=9e4947f35751465411fd1a4f5c358c78&ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&dev=e&res=14.1055&b_frame=0&pk=6fc58b0587420a8da04639a5066d1a79&bl=en-US&sr=1002x1280&sz=1024x1280&hjs=3
192.243.59.12200 OK 1 B URL HTTP/1.1 unseenreport.com/pxf.gif?uuid=48a96e6a-af5f-4cb5-b0c7-1c6c1ae6e715&eb=afa55bd8bbaeee6cbf2f0b21fb513961&te=9e4947f35751465411fd1a4f5c358c78&ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&dev=e&res=14.1055&b_frame=0&pk=6fc58b0587420a8da04639a5066d1a79&bl=en-US&sr=1002x1280&sz=1024x1280&hjs=3
IP 192.243.59.12:0
ASN #39572 DataWeb Global Group B.V.
File type very short file (no magic)
Hash 93b885adfe0da089cdf634904fd59f71
5ba93c9db0cff93f52b521d7420e43f6eda2784f
6e340b9cffb37a989ca544e6bb780a2c78901d3fb33738768511a30617afa01d
Analyzer Verdict Alert quad9 Sinkholed
GET /pxf.gif?uuid=48a96e6a-af5f-4cb5-b0c7-1c6c1ae6e715&eb=afa55bd8bbaeee6cbf2f0b21fb513961&te=9e4947f35751465411fd1a4f5c358c78&ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&dev=e&res=14.1055&b_frame=0&pk=6fc58b0587420a8da04639a5066d1a79&bl=en-US&sr=1002x1280&sz=1024x1280&hjs=3 HTTP/1.1
Host: unseenreport.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://likestream.fun/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.17.6
Date: Thu, 09 Feb 2023 03:53:10 GMT
Content-Type: image/gif
Content-Length: 1
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: a2491e3ec03461ec0b761bf38604e255
Strict-Transport-Security: max-age=0; includeSubdomains
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F718f24db-3c28-422f-953f-730a3ae78cb5.jpeg
34.120.237.76200 OK 3.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F718f24db-3c28-422f-953f-730a3ae78cb5.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 28ae39b238f62d6c0aee7bb16ff863d5
3c2247e40747c3ca72dd7877facee9a9fecf0f59
c530ba92455ea45e14410f497d2df04cc1321e2937cc7e81aa75f4fc14206a7c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F718f24db-3c28-422f-953f-730a3ae78cb5.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 3014
x-amzn-requestid: bec40915-584b-48fc-94c2-293e96567474
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: AChJKGrGoAMFelg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63e4156d-2250ff00772341353151dd34;Sampled=0
x-amzn-remapped-date: Wed, 08 Feb 2023 21:34:37 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: lmJxNCnPKUD5O4HCWIjqeVaanXL50KZ60Xu1iOC6bisRBDJNkVXvww==
via: 1.1 26ca01ec7377e425b59b6a08cb1ec342.cloudfront.net (CloudFront), 1.1 a847181d425b7fc57e81eb3c800bfdf2.cloudfront.net (CloudFront), 1.1 google
date: Wed, 08 Feb 2023 21:34:37 GMT
etag: "3c2247e40747c3ca72dd7877facee9a9fecf0f59"
content-type: image/jpeg
age: 22716
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
maxcdn.bootstrapcdn.com/bootstrap/3.3.7/css/bootstrap.min.css
188.114.99.234200 OK 0 B URL HTTP/2 maxcdn.bootstrapcdn.com/bootstrap/3.3.7/css/bootstrap.min.css
IP 188.114.99.234:0
GET /bootstrap/3.3.7/css/bootstrap.min.css HTTP/1.1
Host: maxcdn.bootstrapcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://likestream.fun
Connection: keep-alive
Referer: https://likestream.fun/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 09 Feb 2023 03:53:05 GMT
content-type: text/css; charset=utf-8
vary: Accept-Encoding
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
access-control-allow-origin: *
cache-control: public, max-age=31919000
last-modified: Mon, 25 Jan 2021 22:03:59 GMT
cdn-cachedat: 05/29/2022 21:59:33
cdn-edgestorageid: 860
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-proxyver: 1.02
cdn-requestid: 22299cb8638533467d50796c8a18c87d
cdn-cache: HIT
cf-cache-status: HIT
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 7969a7f329c70b06-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.youtube.com/embed/lUvAx_iBuVA?rel=0&modestbranding=1&autoplay=0&autohide=1&showinfo=1&controls=0
142.250.74.110200 OK 0 B URL HTTP/2 www.youtube.com/embed/lUvAx_iBuVA?rel=0&modestbranding=1&autoplay=0&autohide=1&showinfo=1&controls=0
IP 142.250.74.110:0
GET /embed/lUvAx_iBuVA?rel=0&modestbranding=1&autoplay=0&autohide=1&showinfo=1&controls=0 HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://likestream.fun/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/html; charset=utf-8
x-content-type-options: nosniff
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Thu, 09 Feb 2023 03:53:08 GMT
strict-transport-security: max-age=31536000
report-to: {"group":"youtube_main","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube_main"}]}
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube_main"
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-platform=*, ch-ua-platform-version=*
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657?hl=en for more info."
content-encoding: br
server: ESF
x-xss-protection: 0
set-cookie: YSC=5rd44A1dC18; Domain=.youtube.com; Path=/; Secure; HttpOnly; SameSite=none
DEVICE_INFO=ChxOekU1TnprNU9USXdOalEwT1RRM09UazVNZz09EKTckZ8GGKTckZ8G; Domain=.youtube.com; Expires=Tue, 08-Aug-2023 03:53:08 GMT; Path=/; Secure; HttpOnly; SameSite=none
VISITOR_INFO1_LIVE=hQC6CAzxy-g; Domain=.youtube.com; Expires=Tue, 08-Aug-2023 03:53:08 GMT; Path=/; Secure; HttpOnly; SameSite=none
CONSENT=PENDING+232; expires=Sat, 08-Feb-2025 03:53:08 GMT; path=/; domain=.youtube.com; Secure
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
likestream.fun/Movie.mp4
162.0.229.49206 Partial Content 0 B IP 162.0.229.49:0
GET /Movie.mp4 HTTP/1.1
Host: likestream.fun
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: https://likestream.fun/fr/movie/643215/astrix-lix-lempire-du-milieu
Cookie: PHPSESSID=65922788acd7fd9f4a2a9481df974460
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 206 Partial Content
content-type: video/mp4
last-modified: Fri, 14 Feb 2020 22:10:42 GMT
content-range: bytes 0-12900919/12900920
content-length: 12900920
date: Thu, 09 Feb 2023 03:53:08 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Oswald|Montserrat|Roboto+Condensed:400,700,300&lang=en
142.250.74.106200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Oswald|Montserrat|Roboto+Condensed:400,700,300&lang=en
IP 142.250.74.106:0
GET /css?family=Oswald|Montserrat|Roboto+Condensed:400,700,300&lang=en HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://likestream.fun/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Thu, 09 Feb 2023 03:53:05 GMT
date: Thu, 09 Feb 2023 03:53:05 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2