GET cdnjs.cloudflare.com/ajax/libs/jquery/1.9.0/jquery.min.js
104.17.25.14200 OK 30 kB URL GET HTTP/2 cdnjs.cloudflare.com/ajax/libs/jquery/1.9.0/jquery.min.js
IP 104.17.25.14:443
Requested by https://vid41c.site/e/E6JR9RLQ4P3X?autostart=true&t=4xjRDvAkBlIOyQ==
Certificate IssuerLet's Encrypt
Subjectcdnjs.cloudflare.com
Fingerprint3B:5B:7C:DD:19:E8:16:5A:09:22:D6:1E:03:84:8D:B9:A1:32:BF:8E
ValiditySun, 02 Jun 2024 00:47:32 GMT - Sat, 31 Aug 2024 00:47:31 GMT
File type JavaScript source, ASCII text, with very long lines (32132)
Hash 0652da382b6fceb033dfe2b6c06d4d11
002da8cbe90fcf32fbdebb72386125079e3805ee
7fa0d5c3f538c76f878e012ac390597faecaabfe6fb9d459b919258e76c5df8e
GET /ajax/libs/jquery/1.9.0/jquery.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vid41c.site/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 04 Jun 2024 19:01:37 GMT
content-type: application/javascript; charset=utf-8
content-length: 29505
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03ec4-16b8c"
last-modified: Mon, 04 May 2020 16:11:48 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 1025443
expires: Sun, 25 May 2025 19:01:37 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7jrd99foNjhZA3DdeHbtUq3Ql%2BwjAnnnCGy4vq%2FjS1lVeUqhWkB1thT%2BWMZvkS%2ByUwCCajkw%2FcT5rAP%2BflhHniC8igt8ywD72tf8c3xbwceG4FW8huUFkYpoil1HAZQBeaK86287"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 88ea2c2fdecdb500-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET tinkleswearfranz.com/4c/d3/8a/4cd38af8ed350d889011791b1ea993c1.js
172.240.108.84200 OK 17 kB URL GET HTTP/1.1 tinkleswearfranz.com/4c/d3/8a/4cd38af8ed350d889011791b1ea993c1.js
IP 172.240.108.84:443
Requested by https://vid41c.site/e/E6JR9RLQ4P3X?autostart=true&t=4xjRDvAkBlIOyQ==
Certificate IssuerLet's Encrypt
Subjecttinkleswearfranz.com
Fingerprint4E:11:EE:60:F5:6B:40:6F:7E:96:18:6D:50:8D:3B:4E:9C:E2:B6:AE
ValidityTue, 21 May 2024 16:52:00 GMT - Mon, 19 Aug 2024 16:51:59 GMT
File type JavaScript source, ASCII text, with very long lines (40637), with no line terminators
Hash 716793bbe34ecb35ab37fca87f6bace1
6780bde992912de56eac28b9952acb503ddfa2cb
139aee8a1c04079e7ab13a0a49899deb2bc02361116b7bae87aeea9a00e5f349
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /4c/d3/8a/4cd38af8ed350d889011791b1ea993c1.js HTTP/1.1
Host: tinkleswearfranz.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vid41c.site/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Tue, 04 Jun 2024 19:01:38 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 9de95bdbf9aa8266e975c1ef20d51d83
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
ocsp.r2m03.amazontrust.com/
143.204.53.97 471 B URL ocsp.r2m03.amazontrust.com/
IP 143.204.53.97:0
Hash 854f50c417669d9b3dad04e6e669ccf4
fe90b91a1c330fb5806f12bad2ad0665ffbc7558
80cc64a4532c522db036377f2380ab9d56f3fa7701081b2b1691f90ee1ba7ea3
POST / HTTP/1.1
Host: ocsp.r2m03.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=7200
Date: Tue, 04 Jun 2024 19:01:38 GMT
Last-Modified: Tue, 04 Jun 2024 18:38:09 GMT
Server: ECAcc (ska/F6CC)
X-Cache: Miss from cloudfront
Via: 1.1 f66e3db0f0449307dba3fbf72bbf3bac.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: k3DQI3etnUPdE7qH1xJoAQ1WZyqnJpdXb4dFGRK5np3clqULGoLL1g==
Age: 1409
GET proftrafficcounter.com/stats
18.194.210.12200 OK 40 B URL GET HTTP/2 proftrafficcounter.com/stats
IP 18.194.210.12:443
Requested by https://vid41c.site/e/E6JR9RLQ4P3X?autostart=true&t=4xjRDvAkBlIOyQ==
Certificate IssuerAmazon
Subjectproftrafficcounter.com
FingerprintE3:9F:79:6F:80:C0:BF:F8:C4:EB:45:F3:E9:0F:A7:41:F6:0C:05:E6
ValidityTue, 21 Nov 2023 00:00:00 GMT - Thu, 19 Dec 2024 23:59:59 GMT
File type ASCII text, with no line terminators
Hash 1cf08da2884a95eb6a6889392ea0f1b3
393828b645f8b218f3398ad51083c4365c0fd1a2
9c1fac2ab2caf6b66b0c9d15789fa23a8a244367c5cfb19514cc5b2aa439cf95
GET /stats HTTP/1.1
Host: proftrafficcounter.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://vid41c.site
DNT: 1
Connection: keep-alive
Referer: https://vid41c.site/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 04 Jun 2024 19:01:38 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: https://vid41c.site
vary: Origin
access-control-allow-credentials: true
set-cookie: uid_id2=2f4c1207-bdd1-4703-8dec-be5f970143c5:1:1; expires=Fri, 02 Jun 2034 19:01:38 GMT; secure; SameSite=None
X-Firefox-Spdy: h2
GET proftrafficcounter.com/stats
18.194.210.12200 OK 40 B URL GET HTTP/2 proftrafficcounter.com/stats
IP 18.194.210.12:443
Requested by https://vid41c.site/e/E6JR9RLQ4P3X?autostart=true&t=4xjRDvAkBlIOyQ==
Certificate IssuerAmazon
Subjectproftrafficcounter.com
FingerprintE3:9F:79:6F:80:C0:BF:F8:C4:EB:45:F3:E9:0F:A7:41:F6:0C:05:E6
ValidityTue, 21 Nov 2023 00:00:00 GMT - Thu, 19 Dec 2024 23:59:59 GMT
File type ASCII text, with no line terminators
Hash 1cf08da2884a95eb6a6889392ea0f1b3
393828b645f8b218f3398ad51083c4365c0fd1a2
9c1fac2ab2caf6b66b0c9d15789fa23a8a244367c5cfb19514cc5b2aa439cf95
GET /stats HTTP/1.1
Host: proftrafficcounter.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://vid41c.site
DNT: 1
Connection: keep-alive
Referer: https://vid41c.site/
Cookie: uid_id2=2f4c1207-bdd1-4703-8dec-be5f970143c5:1:1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Jun 2024 19:01:38 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: https://vid41c.site
vary: Origin
access-control-allow-credentials: true
X-Firefox-Spdy: h2
GET vid41c.site/favicon.ico
188.114.97.1200 OK 0 B IP 188.114.97.1:443
Requested by https://vid41c.site/e/E6JR9RLQ4P3X?autostart=true&t=4xjRDvAkBlIOyQ==
Certificate IssuerLet's Encrypt
Subjectvid41c.site
Fingerprint27:AD:70:31:01:B9:4B:4C:9D:2A:E6:B5:5D:33:B4:01:B2:07:27:75
ValidityWed, 10 Apr 2024 03:07:06 GMT - Tue, 09 Jul 2024 03:07:05 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1
Host: vid41c.site
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vid41c.site/e/E6JR9RLQ4P3X?autostart=true&t=4xjRDvAkBlIOyQ==
Cookie: dom3ic8zudi28v8lr6fgphwffqoz0j6c=2f4c1207-bdd1-4703-8dec-be5f970143c5%3A1%3A1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 04 Jun 2024 19:01:38 GMT
content-type: image/x-icon
content-length: 0
cache-control: max-age=14400
cf-cache-status: HIT
age: 6975
last-modified: Tue, 04 Jun 2024 17:05:23 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=AuvpkmpHtc8ALE9Csdjql1L0m4PgknLcZoOeKCh4pqtVVzjKT2bhsAT6%2F%2BPHYbSyjkEw8i6Yt8%2FcYYrZjH2wjNoe7O5ulOsmH7G0hUpNF1%2BP4RJFdKc8hlLksSsHQw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 88ea2c35cf26b4f4-OSL
alt-svc: h3=":443"; ma=86400
GET vid41c.site/mediainfo/XXFPuqkC5oLQroElKbttTTfDJf8Zmgw=,159,154,146,137,228,196,197,110,135,219,127,189,222,179,153,183?autostart=true&t=4xjRDvAkBlIOyQ==
188.114.97.1200 OK 47 B URL GET HTTP/3 vid41c.site/mediainfo/XXFPuqkC5oLQroElKbttTTfDJf8Zmgw=,159,154,146,137,228,196,197,110,135,219,127,189,222,179,153,183?autostart=true&t=4xjRDvAkBlIOyQ==
IP 188.114.97.1:443
Requested by https://vid41c.site/e/E6JR9RLQ4P3X?autostart=true&t=4xjRDvAkBlIOyQ==
Certificate IssuerLet's Encrypt
Subjectvid41c.site
Fingerprint27:AD:70:31:01:B9:4B:4C:9D:2A:E6:B5:5D:33:B4:01:B2:07:27:75
ValidityWed, 10 Apr 2024 03:07:06 GMT - Tue, 09 Jul 2024 03:07:05 GMT
Hash dda637063babed9e547b6c184601870e
59fea41b192a803d60d99bdd8feed46e789764ff
fbf9f1885d6ae7bedd2c616dd2522ababc010c1e69977c8be6ebd32ce7af8762
GET /mediainfo/XXFPuqkC5oLQroElKbttTTfDJf8Zmgw=,159,154,146,137,228,196,197,110,135,219,127,189,222,179,153,183?autostart=true&t=4xjRDvAkBlIOyQ== HTTP/1.1
Host: vid41c.site
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: https://vid41c.site/e/E6JR9RLQ4P3X?autostart=true&t=4xjRDvAkBlIOyQ==
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 04 Jun 2024 19:01:38 GMT
content-type: application/json
content-encoding: gzip
x-cache: BYPASS
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=pqTfvp5GMBOlcP%2BQv8z8PNbzycg1Sk8R3uDlpPiZVn22lK7%2FM8lWe6jrxYE%2BpwHkM7QGsno4gArGHVmYr5fCgPbow1ohLA%2FxcqoTerIds5Ib44JwX7FS2Zq58WzK7A%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 88ea2c351dbab4f4-OSL
alt-svc: h3=":443"; ma=86400
GET unseenreport.com/pxf.gif?uuid=2f4c1207-bdd1-4703-8dec-be5f970143c5&eb=978028c5053b26833423c7a069ce3bd5&te=5db3a4e34790624df926db520a13f79f&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&dev=e&res=14.2071&b_frame=0&pk=4cd38af8ed350d889011791b1ea993c1&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=19
192.243.59.20200 OK 1 B URL GET HTTP/1.1 unseenreport.com/pxf.gif?uuid=2f4c1207-bdd1-4703-8dec-be5f970143c5&eb=978028c5053b26833423c7a069ce3bd5&te=5db3a4e34790624df926db520a13f79f&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&dev=e&res=14.2071&b_frame=0&pk=4cd38af8ed350d889011791b1ea993c1&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=19
IP 192.243.59.20:443
ASN #39572 DataWeb Global Group B.V.
Requested by https://vid41c.site/e/E6JR9RLQ4P3X?autostart=true&t=4xjRDvAkBlIOyQ==
Certificate IssuerLet's Encrypt
Subject*.unseenreport.com
FingerprintF5:95:0F:2B:01:D6:36:49:AB:2E:61:76:F7:EC:A5:45:3D:F1:0E:59
ValidityTue, 21 May 2024 07:36:27 GMT - Mon, 19 Aug 2024 07:36:26 GMT
File type very short file (no magic)
Hash 93b885adfe0da089cdf634904fd59f71
5ba93c9db0cff93f52b521d7420e43f6eda2784f
6e340b9cffb37a989ca544e6bb780a2c78901d3fb33738768511a30617afa01d
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /pxf.gif?uuid=2f4c1207-bdd1-4703-8dec-be5f970143c5&eb=978028c5053b26833423c7a069ce3bd5&te=5db3a4e34790624df926db520a13f79f&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&dev=e&res=14.2071&b_frame=0&pk=4cd38af8ed350d889011791b1ea993c1&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=19 HTTP/1.1
Host: unseenreport.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vid41c.site/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Tue, 04 Jun 2024 19:01:39 GMT
Content-Type: image/gif
Content-Length: 1
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: c5e1038cce8a061f15a5bb15b68c75f0
Strict-Transport-Security: max-age=0; includeSubdomains
GET vid41c.site/assets/players/jwplayer-8.26.9/jwplayer.js?v1
188.114.97.1200 OK 110 kB URL GET HTTP/3 vid41c.site/assets/players/jwplayer-8.26.9/jwplayer.js?v1
IP 188.114.97.1:443
Requested by https://vid41c.site/e/E6JR9RLQ4P3X?autostart=true&t=4xjRDvAkBlIOyQ==
Certificate IssuerLet's Encrypt
Subjectvid41c.site
Fingerprint27:AD:70:31:01:B9:4B:4C:9D:2A:E6:B5:5D:33:B4:01:B2:07:27:75
ValidityWed, 10 Apr 2024 03:07:06 GMT - Tue, 09 Jul 2024 03:07:05 GMT
Size 110 kB (109779 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /assets/players/jwplayer-8.26.9/jwplayer.js?v1 HTTP/1.1
Host: vid41c.site
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vid41c.site/e/E6JR9RLQ4P3X?autostart=true&t=4xjRDvAkBlIOyQ==
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 04 Jun 2024 19:01:37 GMT
content-type: application/javascript
last-modified: Mon, 18 Sep 2023 22:03:52 GMT
etag: W/"6508c948-1acd3"
content-encoding: gzip
m-cache: MISS
expires: Sun, 30 Jun 2024 18:38:12 GMT
cache-control: max-age=2678400
access-control-allow-origin: *
cf-cache-status: HIT
age: 347005
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jZhCRmEymcoq5Ec845p4qkpfNYEKjQ3qr2JbpDX6zUWszvQepCCCEQqgXP1HVqkk027Y%2Fps0miKSryGIpOr4%2FZE%2BWItkgeW9ExAV%2FXR0DFXmdMAEwelgdT3GZaUkQQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 88ea2c2fbb4db4f4-OSL
alt-svc: h3=":443"; ma=86400
GET vid41c.site/futoken
188.114.97.1200 OK 257 B IP 188.114.97.1:443
Requested by https://vid41c.site/e/E6JR9RLQ4P3X?autostart=true&t=4xjRDvAkBlIOyQ==
Certificate IssuerLet's Encrypt
Subjectvid41c.site
Fingerprint27:AD:70:31:01:B9:4B:4C:9D:2A:E6:B5:5D:33:B4:01:B2:07:27:75
ValidityWed, 10 Apr 2024 03:07:06 GMT - Tue, 09 Jul 2024 03:07:05 GMT
File type JavaScript source, ASCII text, with no line terminators
Hash 2ed861b50375cc0610ee3c3d6c70c8da
e36723cca4761b1ce00b089bd1c7a556d84180af
99d3a7f4b1b6643c204d500ee1b5aee0a132bacd1678bd85dfe2d5e394f16a61
GET /futoken HTTP/1.1
Host: vid41c.site
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vid41c.site/e/E6JR9RLQ4P3X?autostart=true&t=4xjRDvAkBlIOyQ==
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 04 Jun 2024 19:01:37 GMT
m-cache: MISS
x-cache: BYPASS
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=YLR496fEewf9Qy54XXYMWIf%2BroZ%2Ff1PtPwEhnAJZw4Wed93dO6KySNnEsIehC71ir1F71XIlL11vMBoTTvzrk8ao0ixJ7trE%2FREonVYFqPtl4pf8F%2FyZM7FRiPfLOQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 88ea2c2fbb4cb4f4-OSL
alt-svc: h3=":443"; ma=86400
GET vid41c.site/views/4656938
188.114.97.1200 OK 2 B URL GET HTTP/3 vid41c.site/views/4656938
IP 188.114.97.1:443
Requested by https://vid41c.site/e/E6JR9RLQ4P3X?autostart=true&t=4xjRDvAkBlIOyQ==
Certificate IssuerLet's Encrypt
Subjectvid41c.site
Fingerprint27:AD:70:31:01:B9:4B:4C:9D:2A:E6:B5:5D:33:B4:01:B2:07:27:75
ValidityWed, 10 Apr 2024 03:07:06 GMT - Tue, 09 Jul 2024 03:07:05 GMT
File type ASCII text, with no line terminators
Hash c126a9c9047a3f3d6c762cb0e8db928f
f766eb618a5a0613ea0d28ce4dff26c87af7c35f
ef550a8572e9b4f2dd925d7cbcd37f6aad536aada4cc4329b2ffbc915888bc0c
GET /views/4656938 HTTP/1.1
Host: vid41c.site
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: https://vid41c.site/e/E6JR9RLQ4P3X?autostart=true&t=4xjRDvAkBlIOyQ==
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 04 Jun 2024 19:01:38 GMT
content-type: text/html
m-cache: BYPASS
x-cache: BYPASS
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=c8%2FkHwa0mDZjRmkOleKVzBLCUWLsz4Akt8EfWSTeDSCxCkmdx2pJROljYAraQwxyXu2JFn%2BZeu9eWKfF8gWVkl08Av1XHU6QpEeDBurL%2BnF0dP7wDDHgAjoESim2bA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 88ea2c350d9ab4f4-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
GET capaciousdrewreligion.com/advertisers.js
192.243.59.20200 OK 0 B URL GET HTTP/1.1 capaciousdrewreligion.com/advertisers.js
IP 192.243.59.20:443
ASN #39572 DataWeb Global Group B.V.
Requested by https://vid41c.site/e/E6JR9RLQ4P3X?autostart=true&t=4xjRDvAkBlIOyQ==
Certificate IssuerLet's Encrypt
Subjectcapaciousdrewreligion.com
FingerprintBB:9C:12:88:24:43:D4:47:71:3F:F0:A4:BB:E1:85:65:CE:E7:92:E4
ValidityMon, 06 May 2024 02:35:23 GMT - Sun, 04 Aug 2024 02:35:22 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /advertisers.js HTTP/1.1
Host: capaciousdrewreligion.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vid41c.site/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Tue, 04 Jun 2024 19:01:39 GMT
Content-Type: application/javascript
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: b8e079378b75ed470b6656b2dc41c0c7
Strict-Transport-Security: max-age=0; includeSubdomains
GET vid41c.site/assets/mcloud/min/embed.css?v=665840b9
188.114.97.1200 OK 8.5 kB URL GET HTTP/3 vid41c.site/assets/mcloud/min/embed.css?v=665840b9
IP 188.114.97.1:443
Requested by https://vid41c.site/e/E6JR9RLQ4P3X?autostart=true&t=4xjRDvAkBlIOyQ==
Certificate IssuerLet's Encrypt
Subjectvid41c.site
Fingerprint27:AD:70:31:01:B9:4B:4C:9D:2A:E6:B5:5D:33:B4:01:B2:07:27:75
ValidityWed, 10 Apr 2024 03:07:06 GMT - Tue, 09 Jul 2024 03:07:05 GMT
File type ASCII text, with very long lines (8532), with no line terminators
Hash 18049c2b04cd6ed86be6844b36b28b5e
422fb6b1b0335cbbd45c0f8495d70ef39ccfc696
83dd4a0a093dfe32c6ea13157c9479c3b76faded4a7ae38a38e3dff9d6541d7b
GET /assets/mcloud/min/embed.css?v=665840b9 HTTP/1.1
Host: vid41c.site
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vid41c.site/e/E6JR9RLQ4P3X?autostart=true&t=4xjRDvAkBlIOyQ==
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 04 Jun 2024 19:01:37 GMT
content-type: text/css
last-modified: Mon, 08 Apr 2024 02:37:41 GMT
etag: W/"66135875-2152"
content-encoding: gzip
m-cache: HIT
expires: Sat, 29 Jun 2024 09:02:52 GMT
cache-control: max-age=2678400
access-control-allow-origin: *
cf-cache-status: HIT
age: 467925
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5mVKUVQlHXnW%2BUmCW2BQgOtuRCC1VjZjIBnrxZjpX5Dma%2BiplsrxjSuJVOdIXjlaFD1D4E8%2BBuYGldjStdWMtF35naK1SNmQqDDacn3fG0Ha4SiUuEuCHA5rL1%2FdXw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 88ea2c2fab33b4f4-OSL
alt-svc: h3=":443"; ma=86400
GET vid41c.site/assets/mcloud/min/embed.js?v=665840b9
188.114.97.1200 OK 192 kB URL GET HTTP/3 vid41c.site/assets/mcloud/min/embed.js?v=665840b9
IP 188.114.97.1:443
Requested by https://vid41c.site/e/E6JR9RLQ4P3X?autostart=true&t=4xjRDvAkBlIOyQ==
Certificate IssuerLet's Encrypt
Subjectvid41c.site
Fingerprint27:AD:70:31:01:B9:4B:4C:9D:2A:E6:B5:5D:33:B4:01:B2:07:27:75
ValidityWed, 10 Apr 2024 03:07:06 GMT - Tue, 09 Jul 2024 03:07:05 GMT
Size 192 kB (192352 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /assets/mcloud/min/embed.js?v=665840b9 HTTP/1.1
Host: vid41c.site
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vid41c.site/e/E6JR9RLQ4P3X?autostart=true&t=4xjRDvAkBlIOyQ==
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 04 Jun 2024 19:01:37 GMT
content-type: application/javascript
last-modified: Thu, 30 May 2024 09:02:48 GMT
etag: W/"665840b8-2ef60"
content-encoding: gzip
m-cache: HIT
expires: Sat, 29 Jun 2024 09:02:52 GMT
cache-control: max-age=2678400
access-control-allow-origin: *
cf-cache-status: HIT
age: 467925
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=qX%2Bto72wSXIaJedt404nlXlcqcv9Dqb%2BwHEMFkR%2F7w3Sxkc7n6Ng5MlQnwoc8E4tZNWyAlDCfrzW3ue7qAQP03VD9C001339vO%2BNyyQCIkifzBy3jU0ppPhbfZ4JUQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 88ea2c2fbb53b4f4-OSL
alt-svc: h3=":443"; ma=86400
GET recordedthereby.com/sfp.js
188.114.96.1200 OK 85 kB URL GET HTTP/2 recordedthereby.com/sfp.js
IP 188.114.96.1:443
Requested by https://vid41c.site/e/E6JR9RLQ4P3X?autostart=true&t=4xjRDvAkBlIOyQ==
Certificate IssuerGoogle Trust Services LLC
Subjectrecordedthereby.com
FingerprintA3:3F:9B:AE:CF:C6:1B:C3:8B:FC:65:01:2F:06:6A:22:60:3C:8E:AF
ValidityWed, 08 May 2024 14:16:18 GMT - Tue, 06 Aug 2024 14:16:17 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /sfp.js HTTP/1.1
Host: recordedthereby.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vid41c.site/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 04 Jun 2024 19:01:38 GMT
content-type: application/javascript; charset=utf-8
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
access-control-allow-origin: *
expires: Thu, 01 Jan 1970 00:00:01 GMT
cache-control: max-age=14400
x-request-id: de8099ff5289e4f7df2ef0de0eadda09
strict-transport-security: max-age=0; includeSubdomains
cf-cache-status: EXPIRED
last-modified: Tue, 04 Jun 2024 19:01:38 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=L%2BkmJ8af0TOfdAcNNHcOHS0sPxu5ItJwKaDyamDZTu5zevlpL0uxdDjFtAvN1hhymNMYmRdObTEAbxFGvGIOxbEc2H8NKrTUEwWLvN%2BuXG0AgY9DO0Y3ooDb0MVqsoedUfD4833W"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 88ea2c3348520b59-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET vid41c.site/e/E6JR9RLQ4P3X?autostart=true&t=4xjRDvAkBlIOyQ==
188.114.97.1200 OK 1.0 kB URL User Request GET HTTP/2 vid41c.site/e/E6JR9RLQ4P3X?autostart=true&t=4xjRDvAkBlIOyQ==
IP 188.114.97.1:443
Certificate IssuerLet's Encrypt
Subjectvid41c.site
Fingerprint27:AD:70:31:01:B9:4B:4C:9D:2A:E6:B5:5D:33:B4:01:B2:07:27:75
ValidityWed, 10 Apr 2024 03:07:06 GMT - Tue, 09 Jul 2024 03:07:05 GMT
File type HTML document, ASCII text, with very long lines (1091), with no line terminators
Hash 23c972a8b89cc3df79f5f94caf44537f
b8a09085995d3ff258e87422b8ff220fba4e63d1
c085c285c47b5de7d8b6f089bba77b3db7bb4231383c643b180e27d9721a25ad
GET /e/E6JR9RLQ4P3X?autostart=true&t=4xjRDvAkBlIOyQ== HTTP/1.1
Host: vid41c.site
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 04 Jun 2024 19:01:37 GMT
content-type: text/html; charset=UTF-8
m-cache: MISS
x-cache: BYPASS
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mvs86ahfh09tZFtr4HAJkhEy9vjZPQbwOsRhoxVQ27Sr%2FmXiPF37gtDImVK02YddIOw8MGLVf4VNq8ddQ3h94%2FoAP7GAVJ12CcVOQ3l4sD5iDfko2Y4iMUlN%2FBt46A%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 88ea2c2c3e3cb523-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2