GET /iframe/frame.php HTTP/1.1
Host: userv4537.ifrem.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Mon, 07 Apr 2025 14:24:57 GMT
content-type: text/html; charset=UTF-8
server: cloudflare
vary: Accept-Encoding
access-control-allow-origin: *
cf-cache-status: DYNAMIC
content-encoding: br
cf-ray: 92ca31087d31ca54-HAM
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

GET /hls/token/a3f0c81db39d64f85b6f6a5cfaa1b2ce/stream.m3u8 HTTP/1.1
Host: user65873.hls-video.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://userv4537.ifrem.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Mon, 07 Apr 2025 14:24:58 GMT
content-type: application/vnd.apple.mpegurl
content-length: 1531
last-modified: Mon, 07 Apr 2025 14:24:56 GMT
etag: "67f3e038-5fb"
access-control-allow-origin: *
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2

GET /user/token/a3f0c81db39d64f85b6f6a5cfaa1b2ce/h0yu2mq3qjvl_368 HTTP/1.1
Host: user65473.hls-video.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://userv4537.ifrem.net
DNT: 1
Connection: keep-alive
Referer: https://userv4537.ifrem.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Mon, 07 Apr 2025 14:24:59 GMT
content-type: application/octet-stream
content-length: 1043776
cf-ray: 92ca3110e845b509-OSL
server: cloudflare
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "2921539935fdbdfafb868715f9b236d2"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RGfUefKiSpuCMsDqQKwfm0qbZqaKWlFJ6yadVP01SizI0ivWQpCDO8dGpp5YJDLNbWZtkgC3LP2DwVbEn3TuNz71nSav4I6pq5Jkh0PLb6YOkAuW96bbLGhI080Y2UL0Vdbp3peFIo1UjA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=3706&min_rtt=1282&rtt_var=3647&sent=8&recv=11&lost=0&retrans=1&sent_bytes=3571&recv_bytes=1274&delivery_rate=1129485&cwnd=253&unsent_bytes=0&cid=1006e8ea452c58ca&ts=68&x=0"
X-Firefox-Spdy: h2

GET /hls/token/a3f0c81db39d64f85b6f6a5cfaa1b2ce/stream.m3u8 HTTP/1.1
Host: user65873.hls-video.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 302 Found
server: nginx
date: Mon, 07 Apr 2025 14:24:57 GMT
content-type: text/html
content-length: 138
location: https://userv4537.ifrem.net/iframe/frame.php
access-control-allow-origin: *
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2

GET /hls/token/a3f0c81db39d64f85b6f6a5cfaa1b2ce/stream.m3u8 HTTP/1.1
Host: user65873.hls-video.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Referer: https://userv4537.ifrem.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Mon, 07 Apr 2025 14:24:58 GMT
content-type: application/vnd.apple.mpegurl
content-length: 1531
last-modified: Mon, 07 Apr 2025 14:24:56 GMT
etag: "67f3e038-5fb"
access-control-allow-origin: *
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2

GET /npm/hls.js@latest HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://userv4537.ifrem.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=604800, s-maxage=43200
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: application/javascript; charset=utf-8
x-jsd-version: 1.6.1
x-jsd-version-type: version
etag: W/"7fe2e-8GV+cnfSNOSKgChhts1QbxnF9vY"
content-encoding: br
accept-ranges: bytes
date: Mon, 07 Apr 2025 14:24:58 GMT
age: 25975
x-served-by: cache-fra-eddf8230136-FRA, cache-hel1410034-HEL
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 156767
X-Firefox-Spdy: h2

GET /3.6.2/plyr.polyfilled.js HTTP/1.1
Host: cdn.plyr.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://userv4537.ifrem.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Mon, 07 Apr 2025 14:24:58 GMT
content-type: application/javascript; charset=utf-8
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cf-bgj: minify
cf-polished: origSize=192169
etag: W/"f6c87d6145f0c018fb06f1c3ce8f27e6"
last-modified: Thu, 20 Apr 2023 10:33:43 GMT
vary: Accept-Encoding
cf-cache-status: HIT
age: 29348778
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=UpiaD7MBxEtYHWk1ETRHg20mOXoy76NVQW3f%2F1AbyHdk2qtiZN9Xuit3TgXbYiNklsXC8vmnMS25uW0dYvQYyKa5ykIgq39uBjHVUCMl6WAbEwZWDB3moj0DXEQ%2F"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 92ca310b9fde5c23-TLL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=14390&min_rtt=13004&rtt_var=3539&sent=14&recv=11&lost=0&retrans=0&sent_bytes=9833&recv_bytes=1300&delivery_rate=331805&cwnd=179&unsent_bytes=0&cid=e3f1276cdb49f6d2&ts=68&x=0"
X-Firefox-Spdy: h2

GET /3b/8d/6b/3b8d6b0ea373f75d4fa2eaf9ae44654c.js HTTP/1.1
Host: communicateddecentinspect.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://userv4537.ifrem.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 403 Forbidden
Server: nginx/1.21.6
Date: Mon, 07 Apr 2025 14:24:58 GMT
Content-Type: application/javascript
Content-Length: 0
Connection: keep-alive
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
access-control-allow-origin: *
accept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
x-envoy-upstream-service-time: 1
Host: communicateddecentinspect.com

GET /2index.m3u8 HTTP/1.1
Host: redxt.ifrem.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://userv4537.ifrem.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 302 Found
date: Mon, 07 Apr 2025 14:24:58 GMT
content-type: text/html
location: https://user65873.hls-video.net/hls/token/a3f0c81db39d64f85b6f6a5cfaa1b2ce/stream.m3u8
server: cloudflare
access-control-allow-origin: *
cf-cache-status: DYNAMIC
cf-ray: 92ca310f09fff5b8-AMS
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

GET /3.6.2/plyr.svg HTTP/1.1
Host: cdn.plyr.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://userv4537.ifrem.net
DNT: 1
Connection: keep-alive
Referer: https://userv4537.ifrem.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Mon, 07 Apr 2025 14:24:58 GMT
content-type: image/svg+xml
access-control-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
etag: W/"3a727a9b7eef825081d78cc6e48aaadf"
last-modified: Thu, 20 Apr 2023 10:33:43 GMT
vary: Origin, Accept-Encoding
cf-cache-status: HIT
age: 87716
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=uvNYbTmGpBsIA8ymBAzoFIQ6V2W2%2BY8X8nBL0v8eoYlvDWwnTqZWIoPTi4xe%2F3Ik3tA1yFZcBxMGhMdU2nOflAaR9prpu%2FQzTL2iMDBGFgGKGNkNOq6%2FaGUmM1Qp"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 92ca31101dea5c23-TLL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=14703&min_rtt=13004&rtt_var=1447&sent=60&recv=24&lost=0&retrans=0&sent_bytes=71900&recv_bytes=1417&delivery_rate=4323510&cwnd=196&unsent_bytes=0&cid=e3f1276cdb49f6d2&ts=781&x=0"
X-Firefox-Spdy: h2

GET /favicon.ico HTTP/1.1
Host: userv4537.ifrem.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://userv4537.ifrem.net/iframe/frame.php
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 404 Not Found
date: Mon, 07 Apr 2025 14:24:59 GMT
content-type: text/html
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=l89JWeuunfzmXHpOjShArOYWt2S8IaZ6UQWp7ll3TJMdGdvEv1AuNWoHmkbY0UfJU%2F0UjN2cl%2FUaNhyH2gwC7UsQW3UgR%2FLNHxAd6sQVwvwAi6%2BVkcxH0Wz%2BpUh4VlxrB6efKrTI"}],"group":"cf-nel","max_age":604800}
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: EXPIRED
content-encoding: br
cf-ray: 92ca3111ca6c6a62-HAM
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=20275&min_rtt=15190&rtt_var=9548&sent=19&recv=16&lost=0&retrans=0&sent_bytes=4116&recv_bytes=1616&delivery_rate=1489&cwnd=12000&unsent_bytes=0&cid=d382952a7ea1ffcc&ts=1480&x=16"

GET /user/token/a3f0c81db39d64f85b6f6a5cfaa1b2ce/h0yu2mq3qjvl_369 HTTP/1.1
Host: user65473.hls-video.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://userv4537.ifrem.net
DNT: 1
Connection: keep-alive
Referer: https://userv4537.ifrem.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Mon, 07 Apr 2025 14:24:59 GMT
content-type: application/octet-stream
content-length: 1636164
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "e016e5f0e6e1598de00dacacbb408535"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=XBeXyzwtgMeEKO6ixUAlciu42tRh8tXNJT%2FCvaH0wtJXUpCE%2F%2Bo0g6daMxjJzVi0yKsL48aFZmeZ8XbwYIRGv6keI0rFY5fGAJOEdUiEYPfJ6dSPFcD4OXp8Yh%2FqqT54ACofNGp2eWVUOQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 92ca31132c9bb509-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=1187&min_rtt=543&rtt_var=680&sent=760&recv=150&lost=0&retrans=1&sent_bytes=1052629&recv_bytes=1386&delivery_rate=24531711&cwnd=258&unsent_bytes=0&cid=1006e8ea452c58ca&ts=430&x=0"
X-Firefox-Spdy: h2

GET /3.6.2/plyr.css HTTP/1.1
Host: cdn.plyr.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://userv4537.ifrem.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Mon, 07 Apr 2025 14:24:58 GMT
content-type: text/css; charset=utf-8
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cf-bgj: minify
cf-polished: origSize=37639
etag: W/"53263754d3ae064edd2ab221ab30a2b4"
last-modified: Thu, 20 Apr 2023 10:33:43 GMT
vary: Accept-Encoding
cf-cache-status: HIT
age: 29367848
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=elqLAqS6vDDgdYAxXcJVrM4ImG8J8rHUodv7l0ySpPtMFkS2Hd1qIxS3Bi3yY1GOApNUbXcigHUPUiia8j6h14cvW3LhAFs85wYQnbblGGNgjLUYvW3dIuasDEXi"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 92ca310b9fd75c23-TLL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=14390&min_rtt=13004&rtt_var=3539&sent=7&recv=11&lost=0&retrans=0&sent_bytes=3259&recv_bytes=1300&delivery_rate=331805&cwnd=179&unsent_bytes=0&cid=e3f1276cdb49f6d2&ts=65&x=0"
X-Firefox-Spdy: h2

GET /gh/halfmoonui/halfmoon@1.0.4/css/halfmoon.min.css HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://userv4537.ifrem.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: text/css; charset=utf-8
x-jsd-version: 1.0.4
x-jsd-version-type: version
etag: W/"326d6-9m6AsT4FnndZGyyUS60zmQRDkGI"
content-encoding: br
accept-ranges: bytes
date: Mon, 07 Apr 2025 14:24:58 GMT
age: 2785099
x-served-by: cache-fra-eddf8230083-FRA, cache-hel1410034-HEL
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 25410
X-Firefox-Spdy: h2

GET /2index.m3u8 HTTP/1.1
Host: redxt.ifrem.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://userv4537.ifrem.net
DNT: 1
Connection: keep-alive
Referer: https://userv4537.ifrem.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 302 Found
date: Mon, 07 Apr 2025 14:24:58 GMT
content-type: text/html
location: https://user65873.hls-video.net/hls/token/a3f0c81db39d64f85b6f6a5cfaa1b2ce/stream.m3u8
server: cloudflare
access-control-allow-origin: *
cf-cache-status: DYNAMIC
cf-ray: 92ca310ef9f0f5b8-AMS
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2