| hcjs.nv7s.com/assets//jwplayer-8.21.2.4/jwplayer.js | 45.133.44.25 | 200 OK | 112 kB |
URL GET hcjs.nv7s.com/assets//jwplayer-8.21.2.4/jwplayer.js IP 45.133.44.25:443
ASN#39572 DataWeb Global Group B.V.
Requested byhttps://hclips.com/embed/7435271/?source=1053265611 CertificateIssuerLet's Encrypt Subjecthcjs.nv7s.com Fingerprint9F:10:C5:13:C6:C4:42:EC:E4:D6:0C:56:9A:57:2D:E9:EA:11:77:A3 ValidityWed, 07 May 2025 02:32:25 GMT - Tue, 05 Aug 2025 02:32:24 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Size112 kB (111911 bytes) Hashfa44c53a82bce33aa202293dca76f432 369aec665bff0c10f2cd9bc4dffb63ea0fefd334 3c49209cb05af93dca5189dbf11ebe083adb1e5713e0330ddcf5a22f1ee522f8
GET /assets//jwplayer-8.21.2.4/jwplayer.js HTTP/1.1
Host: hcjs.nv7s.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hclips.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 11 May 2025 02:10:18 GMT
content-type: application/javascript; charset=utf-8
server: nginx
last-modified: Mon, 14 Apr 2025 13:11:31 GMT
vary: Accept-Encoding, Accept-Encoding
etag: W/"67fd0983-1b527"
expires: Sun, 04 May 2025 14:08:18 GMT
cache-control: max-age=1800
x-cache: HIT
content-encoding: gzip
x-cdn-host-id: ds5058
x-proxy-cache: HIT
access-control-allow-origin: *
X-Firefox-Spdy: h2
|
|
| hcjs.nv7s.com/wu6c4jaq3r/g6j6fj6z2i.js | 45.133.44.25 | 200 OK | 37 kB |
URL GET hcjs.nv7s.com/wu6c4jaq3r/g6j6fj6z2i.js IP 45.133.44.25:443
ASN#39572 DataWeb Global Group B.V.
Requested byhttps://hclips.com/embed/7435271/?source=1053265611 CertificateIssuerLet's Encrypt Subjecthcjs.nv7s.com Fingerprint9F:10:C5:13:C6:C4:42:EC:E4:D6:0C:56:9A:57:2D:E9:EA:11:77:A3 ValidityWed, 07 May 2025 02:32:25 GMT - Tue, 05 Aug 2025 02:32:24 GMT
File typeJavaScript source, ASCII text, with very long lines (37197), with no line terminators Hash2b654c338282afcbf799be16c71d3777 80315c6fd2305ba7d9877f99783c8146890ed34e 264df1529adb8acbbd36f505a4c1319b6a6a8f3551dff7b15928d410501b044a
GET /wu6c4jaq3r/g6j6fj6z2i.js HTTP/1.1
Host: hcjs.nv7s.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hclips.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 11 May 2025 02:10:19 GMT
content-type: application/javascript; charset=utf-8
server: nginx
last-modified: Sat, 10 May 2025 23:59:34 GMT
vary: Accept-Encoding, Accept-Encoding
etag: W/"681fe866-914d"
expires: Sun, 11 May 2025 00:29:34 GMT
cache-control: max-age=1800
x-cache: HIT
content-encoding: gzip
x-cdn-host-id: ds5058
x-proxy-cache: HIT
access-control-allow-origin: *
X-Firefox-Spdy: h2
|
|
| hclips.com/get_file/10/7efff55a05872f3dca198cf830005a5e391124b963/7435000/7435271/7435271_hq.mp4/?d=205&br=373&ti=1746929418 | 91.227.144.58 | 302 Found | 1.3 MB |
URL GET hclips.com/get_file/10/7efff55a05872f3dca198cf830005a5e391124b963/7435000/7435271/7435271_hq.mp4/?d=205&br=373&ti=1746929418 IP 91.227.144.58:443
Requested byhttps://hclips.com/embed/7435271/?source=1053265611 CertificateIssuerLet's Encrypt Subjecthclips.com FingerprintF6:99:27:E5:A1:39:F3:AB:5A:B2:F8:67:8E:A5:F4:D6:B8:F7:6A:C3 ValiditySun, 16 Mar 2025 03:05:23 GMT - Sat, 14 Jun 2025 03:05:22 GMT
Size1.3 MB (1310720 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /get_file/10/7efff55a05872f3dca198cf830005a5e391124b963/7435000/7435271/7435271_hq.mp4/?d=205&br=373&ti=1746929418 HTTP/1.1
Host: hclips.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
DNT: 1
Connection: keep-alive
Referer: https://hclips.com/embed/7435271/?source=1053265611
Cookie: source=1053265611
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
server: nginx/1.23.3
date: Sun, 11 May 2025 02:10:20 GMT
content-type: text/html; charset=UTF-8
location: https://hclips.ahcdn.com/key=7+rgi8gLwEfgg-sb43x-Og,end=1747015820,limit=3/data=KPe7en/speed=3.0/buffer=267K/referer=none,.hclips.com,.gstatic.com/c2/videos/7435000/7435271/7435271_hq.mp4
x-powered-by: PHP/7.4.33
access-control-allow-origin: *
X-Firefox-Spdy: h2
|
|
| a.labadena.com/api/pageview/459138?host=18xxx.name&url=https%3A%2F%2F18xxx.name%2Fga%2Ftubes%2Fa26398dca6f47b49876cbaffbc9954f9%2Findex.php&sid=86917d95-d217-4f41-9358-2de8b394687a&i=true | 37.27.230.125 | 200 OK | 0 B |
URL POST a.labadena.com/api/pageview/459138?host=18xxx.name&url=https%3A%2F%2F18xxx.name%2Fga%2Ftubes%2Fa26398dca6f47b49876cbaffbc9954f9%2Findex.php&sid=86917d95-d217-4f41-9358-2de8b394687a&i=true IP 37.27.230.125:443
ASN#24940 Hetzner Online GmbH
Requested byhttps://18xxx.name/ga/tubes/a26398dca6f47b49876cbaffbc9954f9/index.php CertificateIssuerLet's Encrypt Subjecta.labadena.com FingerprintCF:36:42:C5:51:DD:C3:E4:4F:13:3E:E4:67:E5:19:35:02:80:D5:3A ValidityMon, 17 Mar 2025 23:28:38 GMT - Sun, 15 Jun 2025 23:28:37 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /api/pageview/459138?host=18xxx.name&url=https%3A%2F%2F18xxx.name%2Fga%2Ftubes%2Fa26398dca6f47b49876cbaffbc9954f9%2Findex.php&sid=86917d95-d217-4f41-9358-2de8b394687a&i=true HTTP/1.1
Host: a.labadena.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://18xxx.name
DNT: 1
Connection: keep-alive
Referer: https://18xxx.name/
Cookie: nauid=mD6KhRbF7gdg5TqT0cP0; asgfp=8d55004929240135af7d0f6cb8e03fde
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 200 OK
server: nginx
date: Sun, 11 May 2025 02:10:18 GMT
content-length: 0
x-robots-tag: noindex, nofollow
cache-control: private
X-Firefox-Spdy: h2
|
|
| bullionglidingscuttle.com/jserror?type=banner&abvar=0&build=1.0.541&zoneid=2005586&e=Error&m=BCLC&aa=0&trid=&url=https%3A%2F%2Fa.labadena.com%2Fapi%2Fspots%2F458877%3Fp%3D1 | 94.242.247.20 | 200 OK | 0 B |
URL GET bullionglidingscuttle.com/jserror?type=banner&abvar=0&build=1.0.541&zoneid=2005586&e=Error&m=BCLC&aa=0&trid=&url=https%3A%2F%2Fa.labadena.com%2Fapi%2Fspots%2F458877%3Fp%3D1 IP 94.242.247.20:443
Requested byhttps://a.labadena.com/api/spots/458877?p=1 CertificateIssuerBuypass AS-983163327 Subject FingerprintC1:41:36:2B:0F:2D:49:78:DA:E4:70:2C:6A:68:9E:0C:A4:8A:8D:5F ValidityTue, 04 Mar 2025 00:04:45 GMT - Sat, 30 Aug 2025 21:59:00 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /jserror?type=banner&abvar=0&build=1.0.541&zoneid=2005586&e=Error&m=BCLC&aa=0&trid=&url=https%3A%2F%2Fa.labadena.com%2Fapi%2Fspots%2F458877%3Fp%3D1 HTTP/1.1
Host: bullionglidingscuttle.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://a.labadena.com/
Cookie: cart=1; cart_p=2; CHCK=1; UID=2505102110d7700ac724a54d4e8acf4e5f6e
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 11 May 2025 02:10:18 GMT
content-type: application/octet-stream
content-length: 0
X-Firefox-Spdy: h2
|
|
| hctn.nv7s.com/contents/videos_screenshots/7435000/7435271/preview.jpg | 45.133.44.25 | 200 OK | 87 kB |
URL GET hctn.nv7s.com/contents/videos_screenshots/7435000/7435271/preview.jpg IP 45.133.44.25:443
ASN#39572 DataWeb Global Group B.V.
Requested byhttps://hclips.com/embed/7435271/?source=1053265611 CertificateIssuerLet's Encrypt Subjecthctn.nv7s.com FingerprintF8:6B:92:2D:9F:49:70:0E:A7:5D:CB:DC:37:01:67:1E:5B:1F:1D:D8 ValidityThu, 08 May 2025 02:33:24 GMT - Wed, 06 Aug 2025 02:33:23 GMT
File typeJPEG image data, baseline, precision 8, 1188x668, components 3 Hash35f1cf2985cf454cf268642ee265a2ce cc5005edd17bce6855b411d30e0c9ba1c2205b28 4a339f684252369a04abf96d89924897340ddbaa0db53e68371f1ec56b54ba98
GET /contents/videos_screenshots/7435000/7435271/preview.jpg HTTP/1.1
Host: hctn.nv7s.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hclips.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 11 May 2025 02:10:19 GMT
content-type: image/jpeg
content-length: 87270
server: nginx/1.23.3
last-modified: Wed, 11 Mar 2020 12:57:03 GMT
etag: "5e68e01f-154e6"
cache-control: max-age=7776000
expires: Mon, 22 Jul 2024 15:11:06 GMT
x-cdn-host-id: ds5058
x-proxy-cache: HIT
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| hclips.com/api/input.php? | 91.227.144.58 | 200 OK | 0 B |
URL POST hclips.com/api/input.php? IP 91.227.144.58:443
Requested byhttps://hclips.com/embed/7435271/?source=1053265611 CertificateIssuerLet's Encrypt Subjecthclips.com FingerprintF6:99:27:E5:A1:39:F3:AB:5A:B2:F8:67:8E:A5:F4:D6:B8:F7:6A:C3 ValiditySun, 16 Mar 2025 03:05:23 GMT - Sat, 14 Jun 2025 03:05:22 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /api/input.php? HTTP/1.1
Host: hclips.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 40
Origin: https://hclips.com
DNT: 1
Connection: keep-alive
Referer: https://hclips.com/embed/7435271/?source=1053265611
Cookie: source=1053265611
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.23.3
date: Sun, 11 May 2025 02:10:19 GMT
content-type: application/json
vary: Accept-Encoding
x-powered-by: PHP/7.4.33
access-control-allow-origin: *
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| 18xxx.name/image/8/887_in-2-.jpg | 172.67.150.176 | 200 OK | 12 kB |
URL GET 18xxx.name/image/8/887_in-2-.jpg IP 172.67.150.176:443
Requested byhttps://18xxx.name/ga/tubes/a26398dca6f47b49876cbaffbc9954f9/index.php CertificateIssuerGoogle Trust Services Subject18xxx.name FingerprintFD:8E:D2:10:74:30:5E:80:CA:22:A3:CC:B3:86:A1:B9:0F:FB:08:4B ValidityTue, 18 Mar 2025 04:39:10 GMT - Mon, 16 Jun 2025 05:37:50 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 320x240, components 3 Hashfc7bbbc82ed79a248723e1bf58744286 d52beb3c602e1e1c6692a35c80afe35377bdf069 f3592f09069debb71aab2fb4f5c835257cfea1cbf916705002f2415c977978dc
GET /image/8/887_in-2-.jpg HTTP/1.1
Host: 18xxx.name
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://18xxx.name/ga/tubes/a26398dca6f47b49876cbaffbc9954f9/index.php
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 11 May 2025 02:10:16 GMT
content-type: image/jpeg
content-length: 12045
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Ia7dovNUbihleLJW18Zf1QjJPQ8ww3zePNCKJKskRpFrzB6SqZKpz21m38iKc5fshc1DSenHhuIsg5vQIqHYx5i3WLOhVGEaGRiEzul3Wovcu2PuYAs2yzbzPWYc"}],"group":"cf-nel","max_age":604800}
last-modified: Sun, 05 Dec 2021 04:29:27 GMT
etag: "61ac4027-2f0d"
expires: Fri, 30 May 2025 21:56:28 GMT
cache-control: max-age=31536000
accept-ranges: bytes
age: 879227
cf-cache-status: HIT
cf-ray: 93de23971f3556aa-OSL
server: cloudflare
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2085&min_rtt=549&rtt_var=624&sent=403&recv=260&lost=0&retrans=0&sent_bytes=231495&recv_bytes=18927&delivery_rate=4484118&cwnd=96000&unsent_bytes=0&cid=c524eddc9b389244&ts=733&x=16"
|
|
| a.labadena.com/api/click/14349302973731107115?c=90 | 37.27.230.125 | 200 OK | 0 B |
URL GET a.labadena.com/api/click/14349302973731107115?c=90 IP 37.27.230.125:443
ASN#24940 Hetzner Online GmbH
Requested byhttps://a.labadena.com/api/spots/458877?p=1 CertificateIssuerLet's Encrypt Subjecta.labadena.com FingerprintCF:36:42:C5:51:DD:C3:E4:4F:13:3E:E4:67:E5:19:35:02:80:D5:3A ValidityMon, 17 Mar 2025 23:28:38 GMT - Sun, 15 Jun 2025 23:28:37 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /api/click/14349302973731107115?c=90 HTTP/1.1
Host: a.labadena.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://a.labadena.com/api/spots/458877?p=1
Cookie: nauid=mD6KhRbF7gdg5TqT0cP0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 11 May 2025 02:10:17 GMT
content-length: 0
access-control-allow-credentials: true
access-control-allow-origin: *
x-robots-tag: noindex, nofollow
cache-control: private
X-Firefox-Spdy: h2
|
|
| citadelpathstatue.com/bultykh/ipp24/7/bazinga/2005665 | 94.242.247.27 | 200 OK | 246 kB |
URL GET citadelpathstatue.com/bultykh/ipp24/7/bazinga/2005665 IP 94.242.247.27:443
Requested byhttps://18xxx.name/ga/tubes/a26398dca6f47b49876cbaffbc9954f9/index.php CertificateIssuerBuypass AS-983163327 Subject Fingerprint06:E6:2D:49:92:9F:EC:9D:12:04:3B:68:EB:B2:30:0A:30:7B:4A:D2 ValidityMon, 03 Mar 2025 23:48:25 GMT - Sat, 30 Aug 2025 21:59:00 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Size246 kB (246332 bytes) Hash3cfb2ce12beb0a196d3c75217ac5c67f 1e2b1853b4df55c2b8379d044235d590808c4435 28f1d7eca83fe4d07d85c9fede726d6c11047cb8e0ad454244a158ec47ed465d
GET /bultykh/ipp24/7/bazinga/2005665 HTTP/1.1
Host: citadelpathstatue.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://18xxx.name/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 11 May 2025 02:10:17 GMT
content-type: application/javascript; charset=utf-8
last-modified: Mon, 05 May 2025 08:59:21 GMT
vary: Accept-Encoding
etag: W/"68187de9-3c2ec"
x-js-ab2: current
timing-allow-origin: *
accept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| hclips.ahcdn.com/key=7+rgi8gLwEfgg-sb43x-Og,end=1747015820,limit=3/data=KPe7en/speed=3.0/buffer=267K/referer=none,.hclips.com,.gstatic.com/c2/videos/7435000/7435271/7435271_hq.mp4 | 185.185.15.4 | 302 Found | 1.3 MB |
URL GET hclips.ahcdn.com/key=7+rgi8gLwEfgg-sb43x-Og,end=1747015820,limit=3/data=KPe7en/speed=3.0/buffer=267K/referer=none,.hclips.com,.gstatic.com/c2/videos/7435000/7435271/7435271_hq.mp4 IP 185.185.15.4:443
ASN#39572 DataWeb Global Group B.V.
Requested byhttps://hclips.com/embed/7435271/?source=1053265611 CertificateIssuerLet's Encrypt Subjecthclips.ahcdn.com FingerprintFD:2A:6D:FE:ED:3C:0C:90:A1:33:BE:CF:CF:C3:96:45:A1:92:02:42 ValidityWed, 02 Apr 2025 02:32:10 GMT - Tue, 01 Jul 2025 02:32:09 GMT
Size1.3 MB (1310720 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /key=7+rgi8gLwEfgg-sb43x-Og,end=1747015820,limit=3/data=KPe7en/speed=3.0/buffer=267K/referer=none,.hclips.com,.gstatic.com/c2/videos/7435000/7435271/7435271_hq.mp4 HTTP/1.1
Host: hclips.ahcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br, identity
Range: bytes=0-
Referer: https://hclips.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
server: nginx/1.20.1
date: Sun, 11 May 2025 02:10:20 GMT
content-length: 0
location: https://ip409015555.ahcdn.com/key=H3ttwrwY4e0KPgB9ooDP5w,s=,end=1747015820,limit=3/data=KPe7en/state=aCAHW1oq/buffer=267000:764487,204.5/speed=747592/referer=none,.hclips.com,.gstatic.com/reftag=059555948/ssd4/121/9/201972749/hclips/c2/videos/7435000/7435271/7435271_hq.mp4
access-control-allow-headers: *
access-control-allow-methods: GET,POST,OPTIONS
access-control-allow-origin: *
access-control-expose-headers: Server,Range,Content-Length,Content-Range
cache-control: private, max-age=300
expires: Sun, 11 May 2025 02:15:20 GMT
X-Firefox-Spdy: h2
|
|
| cdn.tapioni.com/asg-iframe.js | 104.22.38.71 | 200 OK | 124 kB |
URL GET cdn.tapioni.com/asg-iframe.js IP 104.22.38.71:443
Requested byhttps://18xxx.name/ga/tubes/a26398dca6f47b49876cbaffbc9954f9/index.php CertificateIssuerGoogle Trust Services Subjectcdn.tapioni.com Fingerprint2F:19:09:F1:95:75:EB:3B:D1:F5:B5:EE:E7:26:67:59:AE:9D:D6:4D ValiditySun, 23 Mar 2025 20:01:06 GMT - Sat, 21 Jun 2025 21:01:04 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (65498), with no line terminators Size124 kB (124137 bytes) Hash03cce69df9bf57d67cc167a9a5bee218 d36fea3dffa0044329ef8f1099d2be91ab9dbaa0 dd2436398958166f5868f09eb8986bfc745b2d222a2889a319283fc55bf47564
GET /asg-iframe.js HTTP/1.1
Host: cdn.tapioni.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://18xxx.name/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 11 May 2025 02:10:16 GMT
content-type: application/javascript
content-length: 43178
last-modified: Thu, 10 Apr 2025 14:35:30 GMT
vary: Accept-Encoding
etag: "67f7d732-a8aa"
content-encoding: gzip
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
cf-cache-status: HIT
age: 159425
accept-ranges: bytes
server: cloudflare
cf-ray: 93de23947ac392b6-CPH
X-Firefox-Spdy: h2
|
|
| hclips.com/api/json/timelines/2592000/_hq.mp4/7000000/7435000/7435271.11.20.vtt | 91.227.144.58 | 200 OK | 1.6 kB |
URL GET hclips.com/api/json/timelines/2592000/_hq.mp4/7000000/7435000/7435271.11.20.vtt IP 91.227.144.58:443
Requested byhttps://hclips.com/embed/7435271/?source=1053265611 CertificateIssuerLet's Encrypt Subjecthclips.com FingerprintF6:99:27:E5:A1:39:F3:AB:5A:B2:F8:67:8E:A5:F4:D6:B8:F7:6A:C3 ValiditySun, 16 Mar 2025 03:05:23 GMT - Sat, 14 Jun 2025 03:05:22 GMT
File typeWebVTT subtitles, ASCII text Hashfc918cf01372effbc45df0a0ac8c9a61 b2df466fed8633f72ef1b048e13930c9b3a662d8 66779173f134b43a23ff69211fa7da0f48acc4d33a1b6d0b757bf7fdc5ce7a9d
GET /api/json/timelines/2592000/_hq.mp4/7000000/7435000/7435271.11.20.vtt HTTP/1.1
Host: hclips.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hclips.com/embed/7435271/?source=1053265611
Cookie: source=1053265611
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.23.3
date: Sun, 11 May 2025 02:10:19 GMT
content-type: text/plain
content-length: 1637
last-modified: Fri, 25 Apr 2025 06:31:07 GMT
etag: "680b2c2b-665"
expires: Sun, 11 May 2025 02:15:19 GMT
cache-control: max-age=300
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| hclips.ahcdn.com/key=twuaVjD966jMBeQ49WC3vw,end=1747015819,limit=3/data=Rq4XPY/speed=3.0/buffer=267K/referer=none,.hclips.com,.gstatic.com/c2/videos/7435000/7435271/7435271_hq.mp4 | 185.185.15.4 | 302 Found | 1.6 MB |
URL GET hclips.ahcdn.com/key=twuaVjD966jMBeQ49WC3vw,end=1747015819,limit=3/data=Rq4XPY/speed=3.0/buffer=267K/referer=none,.hclips.com,.gstatic.com/c2/videos/7435000/7435271/7435271_hq.mp4 IP 185.185.15.4:443
ASN#39572 DataWeb Global Group B.V.
Requested byhttps://hclips.com/embed/7435271/?source=1053265611 CertificateIssuerLet's Encrypt Subjecthclips.ahcdn.com FingerprintFD:2A:6D:FE:ED:3C:0C:90:A1:33:BE:CF:CF:C3:96:45:A1:92:02:42 ValidityWed, 02 Apr 2025 02:32:10 GMT - Tue, 01 Jul 2025 02:32:09 GMT
Size1.6 MB (1572864 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /key=twuaVjD966jMBeQ49WC3vw,end=1747015819,limit=3/data=Rq4XPY/speed=3.0/buffer=267K/referer=none,.hclips.com,.gstatic.com/c2/videos/7435000/7435271/7435271_hq.mp4 HTTP/1.1
Host: hclips.ahcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br, identity
Range: bytes=0-
Referer: https://hclips.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
server: nginx/1.20.1
date: Sun, 11 May 2025 02:10:19 GMT
content-length: 0
location: https://ip409015557.ahcdn.com/key=qzx-WeYUTYam-sRuDpJQkA,s=,end=1747015819,limit=3/data=Rq4XPY/state=aCAHW1oq/buffer=267000:764487,204.5/speed=747592/referer=none,.hclips.com,.gstatic.com/reftag=059555948/ssd4/121/9/201972749/hclips/c2/videos/7435000/7435271/7435271_hq.mp4
access-control-allow-headers: *
access-control-allow-methods: GET,POST,OPTIONS
access-control-allow-origin: *
access-control-expose-headers: Server,Range,Content-Length,Content-Range
cache-control: private, max-age=300
expires: Sun, 11 May 2025 02:15:19 GMT
X-Firefox-Spdy: h2
|
|
| vast.yomeno.xyz/s/tubecorp/embed?source=1053265611 | 62.122.173.28 | 200 OK | 17 B |
URL GET vast.yomeno.xyz/s/tubecorp/embed?source=1053265611 IP 62.122.173.28:443
Requested byhttps://hclips.com/embed/7435271/?source=1053265611 CertificateIssuerLet's Encrypt Subjectvast.yomeno.xyz Fingerprint79:E3:D3:8E:1A:DB:0F:2E:A0:D5:0E:32:44:CE:2B:DC:01:AA:24:95 ValiditySat, 05 Apr 2025 03:24:21 GMT - Fri, 04 Jul 2025 03:24:20 GMT
Hash32fde8aac4ef964567ca367a253e8ef6 f411099fb4ffbb8730e242935aea722856b171dd 9c8968018d78912f578210884f3285fdc963934d02785e4e0bd141f66bc92d09
GET /s/tubecorp/embed?source=1053265611 HTTP/1.1
Host: vast.yomeno.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://hclips.com/
Origin: https://hclips.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.20.1
date: Sun, 11 May 2025 02:10:17 GMT
content-type: application/json
content-length: 17
access-control-allow-credentials: true
access-control-allow-origin: https://hclips.com
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,
access-control-expose-headers: Content-Length,Content-Range
X-Firefox-Spdy: h2
|
|
| hclips.com/embed/7435271/?source=1053265611 | 91.227.144.58 | 200 OK | 50 kB |
URL GET hclips.com/embed/7435271/?source=1053265611 IP 91.227.144.58:443
Requested byhttps://18xxx.name/ga/tubes/a26398dca6f47b49876cbaffbc9954f9/index.php CertificateIssuerLet's Encrypt Subjecthclips.com FingerprintF6:99:27:E5:A1:39:F3:AB:5A:B2:F8:67:8E:A5:F4:D6:B8:F7:6A:C3 ValiditySun, 16 Mar 2025 03:05:23 GMT - Sat, 14 Jun 2025 03:05:22 GMT
File typeHTML document, ASCII text, with very long lines (32460) Hash76b97d789bd8f79aa47ae7d0b86c7c20 0ade56d4929f555e1caf38e0bb8836fec8df14cd c1d1a5d182ef673dc78ba4167b55a0323289c1f91ad8427830ab77f0821a5b17
GET /embed/7435271/?source=1053265611 HTTP/1.1
Host: hclips.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://18xxx.name/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.23.3
date: Sun, 11 May 2025 02:10:16 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
x-powered-by: PHP/7.4.33
access-control-allow-origin: *
set-cookie: source=1053265611; expires=Mon, 11 May 2026 07:59:02 GMT; path=/; domain=hclips.com; samesite=None; Secure
tccloak=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=hclips.com
kt_lang=en; expires=Wed, 06-May-2026 02:10:16 GMT; Max-Age=31104000; path=/; domain=.hclips.com
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| 18xxx.name/favicon-196x196.png | 172.67.150.176 | 200 OK | 21 kB |
URL GET 18xxx.name/favicon-196x196.png IP 172.67.150.176:443
Requested byhttps://18xxx.name/ga/tubes/a26398dca6f47b49876cbaffbc9954f9/index.php CertificateIssuerGoogle Trust Services Subject18xxx.name FingerprintFD:8E:D2:10:74:30:5E:80:CA:22:A3:CC:B3:86:A1:B9:0F:FB:08:4B ValidityTue, 18 Mar 2025 04:39:10 GMT - Mon, 16 Jun 2025 05:37:50 GMT
File typePNG image data, 196 x 196, 8-bit/color RGBA, non-interlaced Hash4d4bf8205dad5085973d0b6ce10ba876 008ae5d3ce72a00481c1abb2e562e75103c783f2 93dab20e9668ed1823bca8269fb8902209a7b74077bd61ac662ffd0952004ea3
GET /favicon-196x196.png HTTP/1.1
Host: 18xxx.name
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://18xxx.name/ga/tubes/a26398dca6f47b49876cbaffbc9954f9/index.php
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 11 May 2025 02:10:16 GMT
content-type: image/png
content-length: 21275
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=WazYVCjmgjrZQdNBw6Vlz2Ga7wAFDlQrA7nZf9JHulqlUcRED5j31BPVWDyM%2FgpGZEQ4UD9%2BuTP%2FmdqRBoS%2Fvn3awq5%2BCkWv6Rq5QKcuqHQ7HSl6r3uxxao69me8"}],"group":"cf-nel","max_age":604800}
last-modified: Wed, 09 Nov 2022 13:51:25 GMT
etag: "636bb05d-531b"
expires: Fri, 06 Jun 2025 13:47:57 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 303739
accept-ranges: bytes
cf-ray: 93de2397ff3d56aa-OSL
server: cloudflare
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1799&min_rtt=549&rtt_var=611&sent=450&recv=266&lost=0&retrans=0&sent_bytes=282394&recv_bytes=19739&delivery_rate=6642350&cwnd=96000&unsent_bytes=0&cid=c524eddc9b389244&ts=869&x=16"
|
|
| cdnjs.cloudflare.com/ajax/libs/postscribe/2.0.8/postscribe.min.js | 104.17.25.14 | 200 OK | 18 kB |
URL GET cdnjs.cloudflare.com/ajax/libs/postscribe/2.0.8/postscribe.min.js IP 104.17.25.14:443
Requested byhttps://18xxx.name/ga/tubes/a26398dca6f47b49876cbaffbc9954f9/index.php CertificateIssuerGoogle Trust Services Subjectcdnjs.cloudflare.com Fingerprint5D:9B:5B:BE:24:B7:4B:CA:F3:05:47:2F:AB:3F:3C:F7:4E:C3:4D:BC ValidityMon, 24 Mar 2025 12:00:12 GMT - Sun, 22 Jun 2025 13:00:01 GMT
File typeJavaScript source, ASCII text, with very long lines (17660) Hash12dd498bf90c536803c2aad708b66c2b 5f9363d39a405d1c94328cf2303ff4a05c0ad163 c4e20f53f5ef0ed44b783437aa3f4638a9a56cc4aa29ae83ed9212eb2807052a
GET /ajax/libs/postscribe/2.0.8/postscribe.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://18xxx.name/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 11 May 2025 02:10:17 GMT
content-type: application/javascript; charset=utf-8
content-length: 5117
server: cloudflare
strict-transport-security: max-age=15780000
cf-ray: 93de23990cc8569b-OSL
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03faa-45f4"
last-modified: Mon, 04 May 2020 16:15:38 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 360795
expires: Fri, 01 May 2026 02:10:17 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=A9Pu2soCCy6GYlXb4HGVzwinhGnqi6vypFwCn%2BlHsd3Vr3f1ZhF2ZyOF4aQ9qgTXBbyJ%2FR8u33Fa7gs8SBYRiTB%2F2E4CAD5FSVxf9gDM%2FnSeeXszDWgAn6o%2FTCu2WVBHChSQQ5D8"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| hcjs.nv7s.com/xxxmas/siksik7.10.13.af8c53fcd600ae328cb0b0412e98b5af.js | 45.133.44.25 | 200 OK | 78 kB |
URL GET hcjs.nv7s.com/xxxmas/siksik7.10.13.af8c53fcd600ae328cb0b0412e98b5af.js IP 45.133.44.25:443
ASN#39572 DataWeb Global Group B.V.
Requested byhttps://hclips.com/embed/7435271/?source=1053265611 CertificateIssuerLet's Encrypt Subjecthcjs.nv7s.com Fingerprint9F:10:C5:13:C6:C4:42:EC:E4:D6:0C:56:9A:57:2D:E9:EA:11:77:A3 ValidityWed, 07 May 2025 02:32:25 GMT - Tue, 05 Aug 2025 02:32:24 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (65530), with no line terminators Hash8d98533e1f65d7d3d01d7de7460acff2 7fcfb3ea68a92a13228549e62999c873f3ec86de ecd71ccd9ab1038205e17aaa49e00de0edc88dd3c8c7de232178f6825a15be87
GET /xxxmas/siksik7.10.13.af8c53fcd600ae328cb0b0412e98b5af.js HTTP/1.1
Host: hcjs.nv7s.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hclips.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 11 May 2025 02:10:17 GMT
content-type: application/javascript; charset=utf-8
server: nginx
last-modified: Mon, 14 Apr 2025 13:54:03 GMT
vary: Accept-Encoding, Accept-Encoding
etag: W/"67fd137b-13193"
expires: Sat, 26 Apr 2025 23:59:03 GMT
cache-control: max-age=1800
x-cache: HIT
content-encoding: gzip
x-cdn-host-id: ds5058
x-proxy-cache: HIT
access-control-allow-origin: *
X-Firefox-Spdy: h2
|
|
| hclips.com/assets/jwplayer-8.21.2.4/vast.js | 91.227.144.58 | 200 OK | 111 kB |
URL GET hclips.com/assets/jwplayer-8.21.2.4/vast.js IP 91.227.144.58:443
Requested byhttps://hclips.com/embed/7435271/?source=1053265611 CertificateIssuerLet's Encrypt Subjecthclips.com FingerprintF6:99:27:E5:A1:39:F3:AB:5A:B2:F8:67:8E:A5:F4:D6:B8:F7:6A:C3 ValiditySun, 16 Mar 2025 03:05:23 GMT - Sat, 14 Jun 2025 03:05:22 GMT
File typeJavaScript source, ASCII text, with very long lines (3270) Size111 kB (111155 bytes) Hashb1612c37306c7cb0afeb930c4494c52d 0f9c1b458f7f5600f74989a8d89acec658acf93d f7fdf75ee46d77919fcbd912db8ce32355702b534b02e9a622623f0d360f0fa0
GET /assets/jwplayer-8.21.2.4/vast.js HTTP/1.1
Host: hclips.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hclips.com/embed/7435271/?source=1053265611
Cookie: source=1053265611
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.23.3
date: Sun, 11 May 2025 02:10:18 GMT
content-type: application/javascript
last-modified: Mon, 14 Apr 2025 13:11:31 GMT
vary: Accept-Encoding
etag: W/"67fd0983-1b233"
expires: Tue, 10 Jun 2025 02:10:18 GMT
cache-control: max-age=2592000, public
pragma: public
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| hctn.nv7s.com/contents/other/player/embed/hclips-logo-embed.svg | 45.133.44.25 | 200 OK | 4.7 kB |
URL GET hctn.nv7s.com/contents/other/player/embed/hclips-logo-embed.svg IP 45.133.44.25:443
ASN#39572 DataWeb Global Group B.V.
Requested byhttps://hclips.com/embed/7435271/?source=1053265611 CertificateIssuerLet's Encrypt Subjecthctn.nv7s.com FingerprintF8:6B:92:2D:9F:49:70:0E:A7:5D:CB:DC:37:01:67:1E:5B:1F:1D:D8 ValidityThu, 08 May 2025 02:33:24 GMT - Wed, 06 Aug 2025 02:33:23 GMT
File typeSVG Scalable Vector Graphics image Hashb38a3424b006d91cb589f05e56920e64 bb306ae08be7f90837309a1288f9cafe0a14d3ba bd368be620590ba36e53aab1bfe2db1eca9ea9a81f58860b33ba530e3d840dcd
GET /contents/other/player/embed/hclips-logo-embed.svg HTTP/1.1
Host: hctn.nv7s.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hclips.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 11 May 2025 02:10:19 GMT
content-type: image/svg+xml
content-length: 4694
server: nginx/1.18.0
last-modified: Tue, 18 Feb 2020 11:58:49 GMT
etag: "5e4bd179-1256"
cache-control: max-age=7776000
expires: Tue, 20 Feb 2024 17:19:51 GMT
x-cdn-host-id: ds5058
x-proxy-cache: HIT
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| ip409015555.ahcdn.com/key=H3ttwrwY4e0KPgB9ooDP5w,s=,end=1747015820,limit=3/data=KPe7en/state=aCAHW1oq/buffer=267000:764487,204.5/speed=747592/referer=none,.hclips.com,.gstatic.com/reftag=059555948/ssd4/121/9/201972749/hclips/c2/videos/7435000/7435271/7435271_hq.mp4 | 45.143.251.159 | 206 Partial Content | 1.3 MB |
URL GET ip409015555.ahcdn.com/key=H3ttwrwY4e0KPgB9ooDP5w,s=,end=1747015820,limit=3/data=KPe7en/state=aCAHW1oq/buffer=267000:764487,204.5/speed=747592/referer=none,.hclips.com,.gstatic.com/reftag=059555948/ssd4/121/9/201972749/hclips/c2/videos/7435000/7435271/7435271_hq.mp4 IP 45.143.251.159:443
Requested byhttps://hclips.com/embed/7435271/?source=1053265611 CertificateIssuerGoGetSSL Subject*.ahcdn.com FingerprintFD:4D:78:14:4B:62:CB:76:11:BA:B1:5E:4C:75:8F:01:5B:BB:96:2F ValidityTue, 28 May 2024 00:00:00 GMT - Fri, 27 Jun 2025 23:59:59 GMT
File typeISO Media, MP4 Base Media v1 [ISO 14496-12:2003] Size1.3 MB (1310720 bytes) Hash4136d579a897f803931b8c5dc1e18d46 8e64abfea531b4dee9e90d78b8e04dac59a6b24a 454848f8e9318acd677f9599a1d7fa426d0a13fecddd452d4de8f630b10eb1d4
GET /key=H3ttwrwY4e0KPgB9ooDP5w,s=,end=1747015820,limit=3/data=KPe7en/state=aCAHW1oq/buffer=267000:764487,204.5/speed=747592/referer=none,.hclips.com,.gstatic.com/reftag=059555948/ssd4/121/9/201972749/hclips/c2/videos/7435000/7435271/7435271_hq.mp4 HTTP/1.1
Host: ip409015555.ahcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br, identity
Range: bytes=0-
Referer: https://hclips.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 206 Partial Content
server: nginx/1.22.0
date: Sun, 11 May 2025 02:10:20 GMT
content-type: video/mp4
content-length: 50965844
last-modified: Sun, 05 Jul 2020 07:06:33 GMT
access-control-allow-headers: *
access-control-allow-methods: GET,POST,OPTIONS
access-control-allow-origin: *
access-control-expose-headers: Server,Range,Content-Length,Content-Range
etag: "5f017bf9-309ad54"
expires: Sun, 11 May 2025 04:10:20 GMT
cache-control: max-age=7200, private
content-range: bytes 0-50965843/50965844
X-Firefox-Spdy: h2
|
|
| 18xxx.name/ga/tubes/a26398dca6f47b49876cbaffbc9954f9/index.php | 172.67.150.176 | 200 OK | 48 kB |
URL User Request GET 18xxx.name/ga/tubes/a26398dca6f47b49876cbaffbc9954f9/index.php IP 172.67.150.176:443
CertificateIssuerGoogle Trust Services Subject18xxx.name FingerprintFD:8E:D2:10:74:30:5E:80:CA:22:A3:CC:B3:86:A1:B9:0F:FB:08:4B ValidityTue, 18 Mar 2025 04:39:10 GMT - Mon, 16 Jun 2025 05:37:50 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (16684), with CRLF, LF line terminators Hashfe697afd4576b3066908de8851495913 362c06a1f4d85ea0fad74238aa2f38048fc8ced1 f6d04c06595a47c0f98e9b298a584b507ac200d3fe5f22ff4e9880404a7d1164
GET /ga/tubes/a26398dca6f47b49876cbaffbc9954f9/index.php HTTP/1.1
Host: 18xxx.name
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 11 May 2025 02:10:15 GMT
content-type: text/html; charset=UTF-8
server: cloudflare
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
x-powered-by: PHP/7.4.25
cf-cache-status: DYNAMIC
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=U1%2BYXXXHmiu6xWpyxi1gBVVGdHziFexyhhwbZYuFvf10KcCpnJuSGplWlq2m1dkGsq7zMpBN0H6QUgcWm%2BeYI7R7zivJsbkvZjHT%2Fzrmyq6l1wDAaU%2FNj10KMa2G"}]}
content-encoding: br
set-cookie: force_lng=ga; Max-Age=86400; Expires=Mon, 12 May 2025 02:10:15 GMT
cf-ray: 93de238ebddeb4f1-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| hclips.com/api/json/videos_related2/432000/60/7000000/7435000/7435271.all.1.json | 91.227.144.58 | 200 OK | 32 kB |
URL GET hclips.com/api/json/videos_related2/432000/60/7000000/7435000/7435271.all.1.json IP 91.227.144.58:443
Requested byhttps://hclips.com/embed/7435271/?source=1053265611 CertificateIssuerLet's Encrypt Subjecthclips.com FingerprintF6:99:27:E5:A1:39:F3:AB:5A:B2:F8:67:8E:A5:F4:D6:B8:F7:6A:C3 ValiditySun, 16 Mar 2025 03:05:23 GMT - Sat, 14 Jun 2025 03:05:22 GMT
Hash2537bf2e9bf5dd9d39e9a5e986813eb5 dc76cb7abedbfa7b92f7ec039a278b4d4fa5576e c4435faaeb0f16bdb4ca4e392c3f79f94c109967cfd82b8ffd562c7a839f2f14
GET /api/json/videos_related2/432000/60/7000000/7435000/7435271.all.1.json HTTP/1.1
Host: hclips.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hclips.com/embed/7435271/?source=1053265611
Cookie: source=1053265611
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.23.3
date: Sun, 11 May 2025 02:10:18 GMT
content-type: application/json
last-modified: Sun, 04 May 2025 16:54:00 GMT
vary: Accept-Encoding
etag: W/"68179ba8-7bb0"
expires: Sun, 11 May 2025 02:15:18 GMT
cache-control: max-age=300
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| hclips.com/api/videofile.php?video_id=7435271&lifetime=8640000 | 91.227.144.58 | 200 OK | 369 B |
URL GET hclips.com/api/videofile.php?video_id=7435271&lifetime=8640000 IP 91.227.144.58:443
Requested byhttps://hclips.com/embed/7435271/?source=1053265611 CertificateIssuerLet's Encrypt Subjecthclips.com FingerprintF6:99:27:E5:A1:39:F3:AB:5A:B2:F8:67:8E:A5:F4:D6:B8:F7:6A:C3 ValiditySun, 16 Mar 2025 03:05:23 GMT - Sat, 14 Jun 2025 03:05:22 GMT
Hashaaf32c87156721c491061a30708b147e d2b39b7fa9dff7a919bad84d3dfb056663409540 e1f2d9e0435c97c462b153fd7c388cde754de02de42080cdef9b5a83e4606aa4
GET /api/videofile.php?video_id=7435271&lifetime=8640000 HTTP/1.1
Host: hclips.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hclips.com/embed/7435271/?source=1053265611
Cookie: source=1053265611
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.23.3
date: Sun, 11 May 2025 02:10:18 GMT
content-type: application/json
vary: Accept-Encoding
x-powered-by: PHP/7.4.33
access-control-allow-origin: *
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| maucn.yomeno.xyz/in/dip?event_id=5f335bfe-4c57-4682-8805-0b4af57de571 | 23.88.86.82 | 200 OK | 0 B |
URL GET maucn.yomeno.xyz/in/dip?event_id=5f335bfe-4c57-4682-8805-0b4af57de571 IP 23.88.86.82:443
ASN#24940 Hetzner Online GmbH
Requested byhttps://hclips.com/embed/7435271/?source=1053265611 CertificateIssuerLet's Encrypt Subjectvideo.infrapu.sh Fingerprint01:28:A3:82:27:D8:66:E3:7C:11:10:0C:D6:D1:5F:8E:2F:FE:B2:51 ValidityThu, 20 Mar 2025 06:04:57 GMT - Wed, 18 Jun 2025 06:04:56 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /in/dip?event_id=5f335bfe-4c57-4682-8805-0b4af57de571 HTTP/1.1
Host: maucn.yomeno.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://hclips.com
DNT: 1
Connection: keep-alive
Referer: https://hclips.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.24.0
date: Sun, 11 May 2025 02:10:19 GMT
content-length: 0
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
X-Firefox-Spdy: h2
|
|
| vast.vstserv.com/vast | 62.122.173.35 | 200 OK | 4.4 kB |
IP 62.122.173.35:443
Requested byhttps://hclips.com/embed/7435271/?source=1053265611 CertificateIssuerLet's Encrypt Subjectvast.vstserv.com FingerprintFD:8B:7A:74:F1:3F:3B:13:45:84:58:8B:7C:22:94:1F:33:20:21:78 ValidityThu, 17 Apr 2025 03:15:51 GMT - Wed, 16 Jul 2025 03:15:50 GMT
Hash6e77d41d722730041f93c146079667cc 1b8a96d7501fcad9a1f360540ac3caf0c0598df7 6ab18c56ff9e468e9c07f56de2f30d0e54a1e9c4aae41ad662d607cec992a326
POST /vast HTTP/1.1
Host: vast.vstserv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json;charset=utf-8
Content-Length: 1544
Origin: https://hclips.com
DNT: 1
Connection: keep-alive
Referer: https://hclips.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.20.1
date: Sun, 11 May 2025 02:10:19 GMT
content-type: application/json; charset=utf-8
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
vary: Accept-Encoding, *
access-control-allow-credentials: true
access-control-allow-origin: https://hclips.com
access-control-expose-headers: Content-Length,Content-Range
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| hclips.ahcdn.com/key=KqSmVrmyjSXTZfIwrcub0g,end=1747015820,limit=3/data=fCtDqK/speed=3.0/buffer=267K/referer=none,.hclips.com,.gstatic.com/c2/videos/7435000/7435271/7435271_hq.mp4 | 185.185.15.4 | 302 Found | 1.0 MB |
URL GET hclips.ahcdn.com/key=KqSmVrmyjSXTZfIwrcub0g,end=1747015820,limit=3/data=fCtDqK/speed=3.0/buffer=267K/referer=none,.hclips.com,.gstatic.com/c2/videos/7435000/7435271/7435271_hq.mp4 IP 185.185.15.4:443
ASN#39572 DataWeb Global Group B.V.
Requested byhttps://hclips.com/embed/7435271/?source=1053265611 CertificateIssuerLet's Encrypt Subjecthclips.ahcdn.com FingerprintFD:2A:6D:FE:ED:3C:0C:90:A1:33:BE:CF:CF:C3:96:45:A1:92:02:42 ValidityWed, 02 Apr 2025 02:32:10 GMT - Tue, 01 Jul 2025 02:32:09 GMT
Size1.0 MB (1048576 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /key=KqSmVrmyjSXTZfIwrcub0g,end=1747015820,limit=3/data=fCtDqK/speed=3.0/buffer=267K/referer=none,.hclips.com,.gstatic.com/c2/videos/7435000/7435271/7435271_hq.mp4 HTTP/1.1
Host: hclips.ahcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br, identity
Range: bytes=0-
Referer: https://hclips.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
server: nginx/1.20.1
date: Sun, 11 May 2025 02:10:20 GMT
content-length: 0
location: https://ip409015555.ahcdn.com/key=V4S4h2Rl-kiQBE+guyxnPw,s=,end=1747015820,limit=3/data=fCtDqK/state=aCAHW1oq/buffer=267000:764487,204.5/speed=747592/referer=none,.hclips.com,.gstatic.com/reftag=059555948/ssd4/121/9/201972749/hclips/c2/videos/7435000/7435271/7435271_hq.mp4
access-control-allow-headers: *
access-control-allow-methods: GET,POST,OPTIONS
access-control-allow-origin: *
access-control-expose-headers: Server,Range,Content-Length,Content-Range
cache-control: private, max-age=300
expires: Sun, 11 May 2025 02:15:20 GMT
X-Firefox-Spdy: h2
|
|
| 18xxx.name/favicon-16x16.png | 172.67.150.176 | 200 OK | 530 B |
URL GET 18xxx.name/favicon-16x16.png IP 172.67.150.176:443
Requested byhttps://18xxx.name/ga/tubes/a26398dca6f47b49876cbaffbc9954f9/index.php CertificateIssuerGoogle Trust Services Subject18xxx.name FingerprintFD:8E:D2:10:74:30:5E:80:CA:22:A3:CC:B3:86:A1:B9:0F:FB:08:4B ValidityTue, 18 Mar 2025 04:39:10 GMT - Mon, 16 Jun 2025 05:37:50 GMT
File typePNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced Hash635a63f45bb1c4b36ab4701d296d58ad a84dcf18f219d25ed159b6de138c3c8758ebc784 8cde6a33327cdde41c3a0870d07fa2fbc22861a833c796b91e6ef49a69c72234
GET /favicon-16x16.png HTTP/1.1
Host: 18xxx.name
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://18xxx.name/ga/tubes/a26398dca6f47b49876cbaffbc9954f9/index.php
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 11 May 2025 02:10:16 GMT
content-type: image/png
content-length: 530
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rx286vaE9ejzMTgjjg6eg3hUbic%2BIN075A2jSIS8Je2VfY2JBUKjnfsEC5a1B3DFaOCy%2BhpLqn8Hk5JelMEBYX1rb0S80DgKvp%2BArgjYzOapkbbywevjhizyib1y"}],"group":"cf-nel","max_age":604800}
last-modified: Wed, 09 Nov 2022 13:51:24 GMT
etag: "636bb05c-212"
expires: Fri, 06 Jun 2025 23:25:36 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 269080
accept-ranges: bytes
cf-ray: 93de2397ff3e56aa-OSL
server: cloudflare
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1799&min_rtt=549&rtt_var=611&sent=469&recv=266&lost=0&retrans=0&sent_bytes=304861&recv_bytes=19739&delivery_rate=6642350&cwnd=96000&unsent_bytes=0&cid=c524eddc9b389244&ts=871&x=16"
|
|
| 18xxx.name/image/8/881_leman.jpg | 172.67.150.176 | 200 OK | 12 kB |
URL GET 18xxx.name/image/8/881_leman.jpg IP 172.67.150.176:443
Requested byhttps://18xxx.name/ga/tubes/a26398dca6f47b49876cbaffbc9954f9/index.php CertificateIssuerGoogle Trust Services Subject18xxx.name FingerprintFD:8E:D2:10:74:30:5E:80:CA:22:A3:CC:B3:86:A1:B9:0F:FB:08:4B ValidityTue, 18 Mar 2025 04:39:10 GMT - Mon, 16 Jun 2025 05:37:50 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 320x240, components 3 Hash12ccfbae61410b30ee0715d892ec9482 fea113d88208e18fd5a31d228ae9d24e080c1910 2c1ba14265f578b51bcd6ba581fb3e4e5c4fbfb4f387b10647f03d99a45e783a
GET /image/8/881_leman.jpg HTTP/1.1
Host: 18xxx.name
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://18xxx.name/ga/tubes/a26398dca6f47b49876cbaffbc9954f9/index.php
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 11 May 2025 02:10:16 GMT
content-type: image/jpeg
content-length: 12382
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1jKklgPmYwIEjorRvE%2BlP4y5Y98zIGLcmhp3giRsvLqPZtkM4v9195ukbL5gIdJUIV24J2mfOM1uqtk9T8ODxZUUgreJRfvjxdfx4%2FLVB4HBlcGKHQP5Vu%2FyBQ57"}],"group":"cf-nel","max_age":604800}
last-modified: Sun, 05 Dec 2021 04:29:20 GMT
etag: "61ac4020-305e"
expires: Sun, 08 Jun 2025 01:31:21 GMT
cache-control: max-age=31536000
accept-ranges: bytes
age: 175134
cf-cache-status: HIT
cf-ray: 93de23970f2f56aa-OSL
server: cloudflare
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2154&min_rtt=549&rtt_var=1262&sent=295&recv=253&lost=0&retrans=0&sent_bytes=111831&recv_bytes=16934&delivery_rate=12245297&cwnd=48000&unsent_bytes=0&cid=c524eddc9b389244&ts=716&x=16"
|
|
| 18xxx.name/image/10/027_creampies.jpg | 172.67.150.176 | 200 OK | 8.2 kB |
URL GET 18xxx.name/image/10/027_creampies.jpg IP 172.67.150.176:443
Requested byhttps://18xxx.name/ga/tubes/a26398dca6f47b49876cbaffbc9954f9/index.php CertificateIssuerGoogle Trust Services Subject18xxx.name FingerprintFD:8E:D2:10:74:30:5E:80:CA:22:A3:CC:B3:86:A1:B9:0F:FB:08:4B ValidityTue, 18 Mar 2025 04:39:10 GMT - Mon, 16 Jun 2025 05:37:50 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 320x240, components 3 Hashdb1e10f185c48075c82aaee14d1f437b d12f779855d427db2e3ddfb3ff8e39e9e4670d8a d06af3c363ec3253a73ab16bc69368b8fda4eccd10c3ec30abb2d458f865431f
GET /image/10/027_creampies.jpg HTTP/1.1
Host: 18xxx.name
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://18xxx.name/ga/tubes/a26398dca6f47b49876cbaffbc9954f9/index.php
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 11 May 2025 02:10:16 GMT
content-type: image/jpeg
content-length: 8172
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=p%2B%2BQO9AGq3OrjeOCMx53o1%2F5azOXLbxcJb7XL3mdcfiqoiGHQibqtUiMUH5EEnmIgmvwFhcvMZYFQDwQQhwf3AedsVhl6GCKBqdhmSNp8JQxZHIBkH%2BTj9%2F2hOIR"}],"group":"cf-nel","max_age":604800}
last-modified: Sun, 05 Dec 2021 05:04:35 GMT
etag: "61ac4863-1fec"
expires: Mon, 02 Jun 2025 09:48:22 GMT
cache-control: max-age=31536000
accept-ranges: bytes
age: 663713
cf-cache-status: HIT
cf-ray: 93de23970f3056aa-OSL
server: cloudflare
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2154&min_rtt=549&rtt_var=1262&sent=295&recv=253&lost=0&retrans=0&sent_bytes=111831&recv_bytes=16934&delivery_rate=12245297&cwnd=48000&unsent_bytes=0&cid=c524eddc9b389244&ts=717&x=16"
|
|
| 18xxx.name/image/12/979_scuttlebutt.jpg | 172.67.150.176 | 200 OK | 24 kB |
URL GET 18xxx.name/image/12/979_scuttlebutt.jpg IP 172.67.150.176:443
Requested byhttps://18xxx.name/ga/tubes/a26398dca6f47b49876cbaffbc9954f9/index.php CertificateIssuerGoogle Trust Services Subject18xxx.name FingerprintFD:8E:D2:10:74:30:5E:80:CA:22:A3:CC:B3:86:A1:B9:0F:FB:08:4B ValidityTue, 18 Mar 2025 04:39:10 GMT - Mon, 16 Jun 2025 05:37:50 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 320x240, components 3 Hash504c702c81bf180d213577935c684a0c 4bd4ce57e4ec91c08db6c3c65eca28f6f731fc8f adaaa2bc554820696817d3f4522424f54ae6d17b818513b0069b464d6ef81365
GET /image/12/979_scuttlebutt.jpg HTTP/1.1
Host: 18xxx.name
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://18xxx.name/ga/tubes/a26398dca6f47b49876cbaffbc9954f9/index.php
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 11 May 2025 02:10:16 GMT
content-type: image/jpeg
content-length: 24463
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=r6FSCHvO7Z1hMTiVf46eHIq9jA8m0wkt7j0NjUtZCwXGOWlBA55qPaMnGNzmu6HmgXpFUUPwTyZM80PAjUtKTZ2MtxYT7JkV353ZE9TIcr2QSByDwv81n%2BAm1aBU"}],"group":"cf-nel","max_age":604800}
last-modified: Sun, 05 Dec 2021 06:10:37 GMT
etag: "61ac57dd-5f8f"
expires: Mon, 02 Jun 2025 09:48:22 GMT
cache-control: max-age=31536000
accept-ranges: bytes
age: 663713
cf-cache-status: HIT
cf-ray: 93de23971f3656aa-OSL
server: cloudflare
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2074&min_rtt=549&rtt_var=831&sent=379&recv=256&lost=0&retrans=0&sent_bytes=205720&recv_bytes=17912&delivery_rate=6661972&cwnd=96000&unsent_bytes=0&cid=c524eddc9b389244&ts=728&x=16"
|
|
| 18xxx.name/image/0/753_chinese.jpg | 172.67.150.176 | 200 OK | 39 kB |
URL GET 18xxx.name/image/0/753_chinese.jpg IP 172.67.150.176:443
Requested byhttps://18xxx.name/ga/tubes/a26398dca6f47b49876cbaffbc9954f9/index.php CertificateIssuerGoogle Trust Services Subject18xxx.name FingerprintFD:8E:D2:10:74:30:5E:80:CA:22:A3:CC:B3:86:A1:B9:0F:FB:08:4B ValidityTue, 18 Mar 2025 04:39:10 GMT - Mon, 16 Jun 2025 05:37:50 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 27395x27382, segment length 16, baseline, precision 8, 320x240, components 3 Hash0cb2dc0aaf4dbcd3dba1c205723b18aa b36e7856912a9e0c9ace7ce8e214bd635c28b8d5 be1614f582633343db573d063a574856f117dba9cfcddd25f19daa549d96b313
GET /image/0/753_chinese.jpg HTTP/1.1
Host: 18xxx.name
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://18xxx.name/ga/tubes/a26398dca6f47b49876cbaffbc9954f9/index.php
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 11 May 2025 02:10:16 GMT
content-type: image/jpeg
content-length: 38950
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4pnhS%2BSPfEY3coF8YjxlP0V2aV3K7ZYsSZ08XJ2ETXQJTmPO1Xk4I3kijtd1FXUMsX5OVb1T5M2MSXFjq4c6ewdTBrZ7yA1UGlE0QAGPO0HGgZGFfuxjpO%2FO%2FCvS"}],"group":"cf-nel","max_age":604800}
last-modified: Sun, 05 Dec 2021 03:15:42 GMT
etag: "61ac2ede-9826"
expires: Mon, 02 Jun 2025 09:48:22 GMT
cache-control: max-age=31536000
accept-ranges: bytes
age: 663713
cf-cache-status: HIT
cf-ray: 93de23970f2e56aa-OSL
server: cloudflare
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2414&min_rtt=549&rtt_var=1452&sent=253&recv=250&lost=0&retrans=0&sent_bytes=63831&recv_bytes=16528&delivery_rate=7247125&cwnd=24000&unsent_bytes=0&cid=c524eddc9b389244&ts=715&x=16"
|
|
| 18xxx.name/stylesmain/flags/ga.svg | 172.67.150.176 | 200 OK | 292 B |
URL GET 18xxx.name/stylesmain/flags/ga.svg IP 172.67.150.176:443
Requested byhttps://18xxx.name/ga/tubes/a26398dca6f47b49876cbaffbc9954f9/index.php CertificateIssuerGoogle Trust Services Subject18xxx.name FingerprintFD:8E:D2:10:74:30:5E:80:CA:22:A3:CC:B3:86:A1:B9:0F:FB:08:4B ValidityTue, 18 Mar 2025 04:39:10 GMT - Mon, 16 Jun 2025 05:37:50 GMT
File typeSVG Scalable Vector Graphics image Hashc68ff961baf04c04f9beac2c32cd2458 cf0c61bf509a7da136bef510e9dbb15215fa06b9 4d73eedf98a4c487c352db58751ff766f05f6aa3bfac1ecc0f9384e50d019191
GET /stylesmain/flags/ga.svg HTTP/1.1
Host: 18xxx.name
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://18xxx.name/ga/tubes/a26398dca6f47b49876cbaffbc9954f9/index.php
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 11 May 2025 02:10:16 GMT
content-type: image/svg+xml
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=MyPx7qNakKPe0LhZ1pMK0%2FhUtnGghKTXo8CcN7Qh0c8uc3F8MxqNQmhEPZpnT6iijrTqo95CP6nYMUqAMOr1ylMyI3pxlXEpD9pS7XUEvVC2QN%2BJTZyF2Jn5bWj8"}],"group":"cf-nel","max_age":604800}
last-modified: Wed, 09 Nov 2022 13:50:58 GMT
etag: W/"636bb042-124"
expires: Sun, 08 Jun 2025 09:23:16 GMT
cache-control: max-age=31536000
age: 146819
cf-cache-status: HIT
content-encoding: br
cf-ray: 93de23959f2156aa-OSL
server: cloudflare
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2578&min_rtt=549&rtt_var=2264&sent=199&recv=238&lost=0&retrans=0&sent_bytes=13916&recv_bytes=13511&delivery_rate=2239&cwnd=12000&unsent_bytes=0&cid=c524eddc9b389244&ts=489&x=16"
|
|
| 18xxx.name/stylesmain/icons/icons.ttf?a4saub | 172.67.150.176 | 200 OK | 1.5 kB |
URL GET 18xxx.name/stylesmain/icons/icons.ttf?a4saub IP 172.67.150.176:443
Requested byhttps://18xxx.name/ga/tubes/a26398dca6f47b49876cbaffbc9954f9/index.php CertificateIssuerGoogle Trust Services Subject18xxx.name FingerprintFD:8E:D2:10:74:30:5E:80:CA:22:A3:CC:B3:86:A1:B9:0F:FB:08:4B ValidityTue, 18 Mar 2025 04:39:10 GMT - Mon, 16 Jun 2025 05:37:50 GMT
File typeTrueType Font data, 11 tables, 1st "OS/2", 14 names, Macintosh, type 1 string, icons Hashe1c2f1063187cbe99bc2ed118e0de439 81ef2846eb4aa54ada569adbb32daf91e96a8f0e 60ee4b5c61cd28db352be271f093dab983dfb01317cdacc31cf997a42c3efdc3
GET /stylesmain/icons/icons.ttf?a4saub HTTP/1.1
Host: 18xxx.name
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://18xxx.name/ga/tubes/a26398dca6f47b49876cbaffbc9954f9/index.php
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 11 May 2025 02:10:16 GMT
content-type: application/octet-stream
content-length: 1476
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gOEK0uIoHRHBsVVS4%2FyGaC8D2uZ63RHG7wjTatUwQmT98DCUsZ9%2FgT5WH6lVw3ikF2Ta9uQVdog32Dg4viqJGc41%2F45Nq9z%2FBbhu%2FfYjROgLD46Vo0l6O0myKf%2FG"}],"group":"cf-nel","max_age":604800}
last-modified: Wed, 09 Nov 2022 13:51:15 GMT
etag: "636bb053-5c4"
expires: Mon, 02 Jun 2025 00:58:47 GMT
cache-control: max-age=31536000
accept-ranges: bytes
age: 695489
cf-cache-status: HIT
cf-ray: 93de2395af2256aa-OSL
server: cloudflare
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2578&min_rtt=549&rtt_var=2264&sent=202&recv=238&lost=0&retrans=0&sent_bytes=14888&recv_bytes=13511&delivery_rate=2239&cwnd=12000&unsent_bytes=0&cid=c524eddc9b389244&ts=493&x=16"
|
|
| 18xxx.name/image/1/221_up.jpg | 172.67.150.176 | 200 OK | 9.7 kB |
URL GET 18xxx.name/image/1/221_up.jpg IP 172.67.150.176:443
Requested byhttps://18xxx.name/ga/tubes/a26398dca6f47b49876cbaffbc9954f9/index.php CertificateIssuerGoogle Trust Services Subject18xxx.name FingerprintFD:8E:D2:10:74:30:5E:80:CA:22:A3:CC:B3:86:A1:B9:0F:FB:08:4B ValidityTue, 18 Mar 2025 04:39:10 GMT - Mon, 16 Jun 2025 05:37:50 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 320x240, components 3 Hashe602d52529d890b34ccce8280efa1feb 81473deaa4cd8d08d6c4d366fb03dd97b73ddb62 af843d898a54d53329f5cfccd973129c9a1c57cd3cdd4d7582faf7d510ad9570
GET /image/1/221_up.jpg HTTP/1.1
Host: 18xxx.name
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://18xxx.name/ga/tubes/a26398dca6f47b49876cbaffbc9954f9/index.php
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 11 May 2025 02:10:16 GMT
content-type: image/jpeg
content-length: 9680
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=sP%2B5FCAbzkcqpu9GqE5hCx0b3k9P%2BEHgbDsAd%2Bk%2FMGdi8bZ7pNFaRzNK4odxzHPSrbulqa2bgTVHFysYFq9ZQdPPQUzMiUpetvGeJfv4zpi3Qq6AOHwSofydJCqn"}],"group":"cf-nel","max_age":604800}
last-modified: Sun, 05 Dec 2021 03:16:24 GMT
etag: "61ac2f08-25d0"
expires: Fri, 06 Jun 2025 05:40:55 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 332961
accept-ranges: bytes
cf-ray: 93de23972f3a56aa-OSL
server: cloudflare
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1907&min_rtt=549&rtt_var=526&sent=439&recv=263&lost=0&retrans=0&sent_bytes=271763&recv_bytes=19062&delivery_rate=6232659&cwnd=96000&unsent_bytes=0&cid=c524eddc9b389244&ts=743&x=16"
|
|
| hcjs.nv7s.com/upd/20250414.131205.103600/static/assets/vendor.12634f6f.js | 45.133.44.25 | 200 OK | 183 kB |
URL GET hcjs.nv7s.com/upd/20250414.131205.103600/static/assets/vendor.12634f6f.js IP 45.133.44.25:443
ASN#39572 DataWeb Global Group B.V.
Requested byhttps://hclips.com/embed/7435271/?source=1053265611 CertificateIssuerLet's Encrypt Subjecthcjs.nv7s.com Fingerprint9F:10:C5:13:C6:C4:42:EC:E4:D6:0C:56:9A:57:2D:E9:EA:11:77:A3 ValidityWed, 07 May 2025 02:32:25 GMT - Tue, 05 Aug 2025 02:32:24 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Size183 kB (183351 bytes) Hash6e16e3e96af4c156ce4c75b19aee1146 c380bf95a9871e80e4d5ea0435dffebe7abbcdac a477e2a8516d9c496b7e888676d02549ab4981e769422f37133483995d7ab8dc
GET /upd/20250414.131205.103600/static/assets/vendor.12634f6f.js HTTP/1.1
Host: hcjs.nv7s.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://hclips.com
DNT: 1
Connection: keep-alive
Referer: https://hcjs.nv7s.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 11 May 2025 02:10:17 GMT
content-type: application/javascript; charset=utf-8
server: nginx
last-modified: Mon, 14 Apr 2025 13:12:05 GMT
vary: Accept-Encoding, Accept-Encoding
etag: W/"67fd09a5-2cc37"
expires: Sun, 20 Apr 2025 20:06:29 GMT
cache-control: max-age=1800
x-cache: HIT
content-encoding: gzip
x-cdn-host-id: ds5058
x-proxy-cache: HIT
access-control-allow-origin: *
X-Firefox-Spdy: h2
|
|
| hclips.com/get_file/10/7efff55a05872f3dca198cf830005a5e391124b963/7435000/7435271/7435271_hq.mp4/?d=205&br=373&ti=1746929418 | 91.227.144.58 | 302 Found | 442 kB |
URL GET hclips.com/get_file/10/7efff55a05872f3dca198cf830005a5e391124b963/7435000/7435271/7435271_hq.mp4/?d=205&br=373&ti=1746929418 IP 91.227.144.58:443
Requested byhttps://hclips.com/embed/7435271/?source=1053265611 CertificateIssuerLet's Encrypt Subjecthclips.com FingerprintF6:99:27:E5:A1:39:F3:AB:5A:B2:F8:67:8E:A5:F4:D6:B8:F7:6A:C3 ValiditySun, 16 Mar 2025 03:05:23 GMT - Sat, 14 Jun 2025 03:05:22 GMT
Size442 kB (442170 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /get_file/10/7efff55a05872f3dca198cf830005a5e391124b963/7435000/7435271/7435271_hq.mp4/?d=205&br=373&ti=1746929418 HTTP/1.1
Host: hclips.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
DNT: 1
Connection: keep-alive
Referer: https://hclips.com/embed/7435271/?source=1053265611
Cookie: source=1053265611
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
server: nginx/1.23.3
date: Sun, 11 May 2025 02:10:19 GMT
content-type: text/html; charset=UTF-8
location: https://hclips.ahcdn.com/key=OcaxqHzXtZXw2iLdSM6pWA,end=1747015819,limit=3/data=71W8bB/speed=3.0/buffer=267K/referer=none,.hclips.com,.gstatic.com/c2/videos/7435000/7435271/7435271_hq.mp4
x-powered-by: PHP/7.4.33
access-control-allow-origin: *
X-Firefox-Spdy: h2
|
|
| cdn.tapioni.com/adgpt.js | 104.22.38.71 | 200 OK | 1.3 kB |
IP 104.22.38.71:443
Requested byhttps://18xxx.name/ga/tubes/a26398dca6f47b49876cbaffbc9954f9/index.php CertificateIssuerGoogle Trust Services Subjectcdn.tapioni.com Fingerprint2F:19:09:F1:95:75:EB:3B:D1:F5:B5:EE:E7:26:67:59:AE:9D:D6:4D ValiditySun, 23 Mar 2025 20:01:06 GMT - Sat, 21 Jun 2025 21:01:04 GMT
File typeASCII text, with very long lines (1306), with no line terminators Hash6eead5ad059cc0cb4ebd99585822dc05 d5e7d6fadf5a21e84a279449357056cfe0986240 632355ca06bc020fc46cecbdcc35cd0e242cd05ab3790a0813d170d17cf8f70c
GET /adgpt.js HTTP/1.1
Host: cdn.tapioni.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://18xxx.name/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 11 May 2025 02:10:16 GMT
content-type: application/javascript
content-length: 642
last-modified: Thu, 10 Apr 2025 14:35:30 GMT
vary: Accept-Encoding
etag: "67f7d732-282"
content-encoding: gzip
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
cf-cache-status: HIT
age: 3375
accept-ranges: bytes
server: cloudflare
cf-ray: 93de23958b0792b6-CPH
X-Firefox-Spdy: h2
|
|
| 18xxx.name/image/14/075_prop.jpg | 172.67.150.176 | 200 OK | 15 kB |
URL GET 18xxx.name/image/14/075_prop.jpg IP 172.67.150.176:443
Requested byhttps://18xxx.name/ga/tubes/a26398dca6f47b49876cbaffbc9954f9/index.php CertificateIssuerGoogle Trust Services Subject18xxx.name FingerprintFD:8E:D2:10:74:30:5E:80:CA:22:A3:CC:B3:86:A1:B9:0F:FB:08:4B ValidityTue, 18 Mar 2025 04:39:10 GMT - Mon, 16 Jun 2025 05:37:50 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 320x240, components 3 Hashcebb35d10496aa5165e2c120a659a58d a7d9a7127c052aae19291accf591d24080e6a25a 2c546f70b417573a66d51672c0dd28a96a5d40673838c7739e3380cd7941d584
GET /image/14/075_prop.jpg HTTP/1.1
Host: 18xxx.name
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://18xxx.name/ga/tubes/a26398dca6f47b49876cbaffbc9954f9/index.php
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 11 May 2025 02:10:16 GMT
content-type: image/jpeg
content-length: 14927
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2BvFH85VX2Xu9iNZ6%2F%2FbsRwpx1ktFSVMURpwYMLrUjUWQK5luwRqsnRE2psbBmTuFw47L0GCqauGqiLy3zrFBjY%2BakPc6DFg6etxeMKZCKEgbkY01zFNzH3gmICXR"}],"group":"cf-nel","max_age":604800}
last-modified: Thu, 16 Dec 2021 06:20:40 GMT
etag: "61badab8-3a4f"
expires: Fri, 06 Jun 2025 00:45:06 GMT
cache-control: max-age=31536000
accept-ranges: bytes
age: 350710
cf-cache-status: HIT
cf-ray: 93de23971f3356aa-OSL
server: cloudflare
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2076&min_rtt=549&rtt_var=1103&sent=351&recv=255&lost=0&retrans=0&sent_bytes=173205&recv_bytes=17866&delivery_rate=15297746&cwnd=96000&unsent_bytes=0&cid=c524eddc9b389244&ts=725&x=16"
|
|
| hcjs.nv7s.com/wu6c4jaq3r/lfdrmekt7f.js | 45.133.44.25 | 200 OK | 19 kB |
URL GET hcjs.nv7s.com/wu6c4jaq3r/lfdrmekt7f.js IP 45.133.44.25:443
ASN#39572 DataWeb Global Group B.V.
Requested byhttps://hclips.com/embed/7435271/?source=1053265611 CertificateIssuerLet's Encrypt Subjecthcjs.nv7s.com Fingerprint9F:10:C5:13:C6:C4:42:EC:E4:D6:0C:56:9A:57:2D:E9:EA:11:77:A3 ValidityWed, 07 May 2025 02:32:25 GMT - Tue, 05 Aug 2025 02:32:24 GMT
File typeJavaScript source, ASCII text, with very long lines (18556), with no line terminators Hashcd716d531acc26a4690800cb623be3c1 1aaaca5f8a352792911ae1ec5999f569e3b0b3e3 88379ef385c3e9afb940f71f2a2cfe801ccf17ecc19235edc251b6e49742e811
GET /wu6c4jaq3r/lfdrmekt7f.js HTTP/1.1
Host: hcjs.nv7s.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hclips.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 11 May 2025 02:10:18 GMT
content-type: application/javascript; charset=utf-8
server: nginx
last-modified: Sat, 10 May 2025 23:59:34 GMT
vary: Accept-Encoding, Accept-Encoding
etag: W/"681fe866-487c"
expires: Sun, 11 May 2025 00:29:34 GMT
cache-control: max-age=1800
x-cache: MISS
content-encoding: gzip
x-cdn-host-id: ds5058
x-proxy-cache: HIT
access-control-allow-origin: *
X-Firefox-Spdy: h2
|
|
| hclips.com/get_file/10/7efff55a05872f3dca198cf830005a5e391124b963/7435000/7435271/7435271_hq.mp4/?d=205&br=373&ti=1746929418 | 91.227.144.58 | 302 Found | 1.6 MB |
URL GET hclips.com/get_file/10/7efff55a05872f3dca198cf830005a5e391124b963/7435000/7435271/7435271_hq.mp4/?d=205&br=373&ti=1746929418 IP 91.227.144.58:443
Requested byhttps://hclips.com/embed/7435271/?source=1053265611 CertificateIssuerLet's Encrypt Subjecthclips.com FingerprintF6:99:27:E5:A1:39:F3:AB:5A:B2:F8:67:8E:A5:F4:D6:B8:F7:6A:C3 ValiditySun, 16 Mar 2025 03:05:23 GMT - Sat, 14 Jun 2025 03:05:22 GMT
Size1.6 MB (1572864 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /get_file/10/7efff55a05872f3dca198cf830005a5e391124b963/7435000/7435271/7435271_hq.mp4/?d=205&br=373&ti=1746929418 HTTP/1.1
Host: hclips.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
DNT: 1
Connection: keep-alive
Referer: https://hclips.com/embed/7435271/?source=1053265611
Cookie: source=1053265611
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
server: nginx/1.23.3
date: Sun, 11 May 2025 02:10:19 GMT
content-type: text/html; charset=UTF-8
location: https://hclips.ahcdn.com/key=twuaVjD966jMBeQ49WC3vw,end=1747015819,limit=3/data=Rq4XPY/speed=3.0/buffer=267K/referer=none,.hclips.com,.gstatic.com/c2/videos/7435000/7435271/7435271_hq.mp4
x-powered-by: PHP/7.4.33
access-control-allow-origin: *
X-Firefox-Spdy: h2
|
|
| getscriptjs.com/p.js | 104.21.88.238 | 200 OK | 95 kB |
IP 104.21.88.238:443
Requested byhttps://18xxx.name/ga/tubes/a26398dca6f47b49876cbaffbc9954f9/index.php CertificateIssuerGoogle Trust Services Subjectgetscriptjs.com Fingerprint67:EC:B5:65:F7:5D:A6:7D:52:D1:FE:33:8C:A4:0E:A2:11:E4:61:4B ValidityTue, 08 Apr 2025 17:11:39 GMT - Mon, 07 Jul 2025 18:11:35 GMT
File typeJavaScript source, ASCII text, with very long lines (61722) Hash70594c024b1bea4a58cbade2bde8d413 ca3ab84f7cd9b14170a046fcacf3ab5fb39a1ef5 b42ad58ccfb93d5553717e9fb7a8c08a825a91986218279a1b304a07ecb3b738
GET /p.js HTTP/1.1
Host: getscriptjs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://18xxx.name/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 11 May 2025 02:10:16 GMT
content-type: application/javascript
server: cloudflare
age: 7071
access-control-allow-origin: *
cache-control: public, max-age=14400, must-revalidate
etag: W/"58075d3b999fca6df05927b849ab00ad"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=GYX1UebZpEjTDJpPFFgFqSeADsj2WwigSLuo1jJs5s6N96dOYI2Slma%2B0hJxBVx2JNRs0M9VXQMZbU8oRmgR8NsNxF9wkISVHVPNrQUEwUNZbywbvQkHXz1%2BCWZurHMQXMQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
content-encoding: gzip
cf-cache-status: HIT
cf-ray: 93de23941b3f568d-OSL
X-Firefox-Spdy: h2
|
|
| a.labadena.com/api/settings/459138 | 37.27.230.125 | 200 OK | 33 B |
URL GET a.labadena.com/api/settings/459138 IP 37.27.230.125:443
ASN#24940 Hetzner Online GmbH
Requested byhttps://18xxx.name/ga/tubes/a26398dca6f47b49876cbaffbc9954f9/index.php CertificateIssuerLet's Encrypt Subjecta.labadena.com FingerprintCF:36:42:C5:51:DD:C3:E4:4F:13:3E:E4:67:E5:19:35:02:80:D5:3A ValidityMon, 17 Mar 2025 23:28:38 GMT - Sun, 15 Jun 2025 23:28:37 GMT
Hash1be64b6d6652effba7dcf744e90def6a d9fbc7d1fa49fa4733f90a3739882d63972c2352 72d79d0ad9a70ef53c1bab65c588d44bffb1a1b5aba0eb2f9f6a886c4c3aec4f
GET /api/settings/459138 HTTP/1.1
Host: a.labadena.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://18xxx.name
DNT: 1
Connection: keep-alive
Referer: https://18xxx.name/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 11 May 2025 02:10:16 GMT
content-type: application/json
vary: Accept-Encoding
access-control-allow-origin: *
x-robots-tag: noindex, nofollow
cache-control: private
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| 18xxx.name/image/10/133_knuckle.jpg | 172.67.150.176 | 200 OK | 6.4 kB |
URL GET 18xxx.name/image/10/133_knuckle.jpg IP 172.67.150.176:443
Requested byhttps://18xxx.name/ga/tubes/a26398dca6f47b49876cbaffbc9954f9/index.php CertificateIssuerGoogle Trust Services Subject18xxx.name FingerprintFD:8E:D2:10:74:30:5E:80:CA:22:A3:CC:B3:86:A1:B9:0F:FB:08:4B ValidityTue, 18 Mar 2025 04:39:10 GMT - Mon, 16 Jun 2025 05:37:50 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 320x240, components 3 Hash25c46ea4d90fe260ae130b1d9e1d5f7f dd4ba70c9d6d4ab0d940cfcde2db2c5c2c9463d8 121506fe87bc6ee3c121890cfb60bb0a2c353e0621fd418854d197cca174119e
GET /image/10/133_knuckle.jpg HTTP/1.1
Host: 18xxx.name
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://18xxx.name/ga/tubes/a26398dca6f47b49876cbaffbc9954f9/index.php
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 11 May 2025 02:10:16 GMT
content-type: image/jpeg
content-length: 6408
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=F5OiynsG3ef2tw6EDJ3rF8hrBWfutYSbkPi35KjIk%2B11OBnHTjEe6scUQLO380bYEpQbFAeq4iXQbn1iaAZeQ7pLAuecsE7KaymRCt6eLcufcspNpEfyjsS26vmB"}],"group":"cf-nel","max_age":604800}
last-modified: Sun, 05 Dec 2021 05:05:59 GMT
etag: "61ac48b7-1908"
expires: Sat, 31 May 2025 21:30:03 GMT
cache-control: max-age=31536000
accept-ranges: bytes
age: 794413
cf-cache-status: HIT
cf-ray: 93de23970f2d56aa-OSL
server: cloudflare
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2414&min_rtt=549&rtt_var=1452&sent=250&recv=250&lost=0&retrans=0&sent_bytes=61002&recv_bytes=16528&delivery_rate=7247125&cwnd=24000&unsent_bytes=0&cid=c524eddc9b389244&ts=713&x=16"
|
|
| hcjs.nv7s.com/upd/20250414.131205.103600/static/assets/embed.js | 45.133.44.25 | 200 OK | 104 kB |
URL GET hcjs.nv7s.com/upd/20250414.131205.103600/static/assets/embed.js IP 45.133.44.25:443
ASN#39572 DataWeb Global Group B.V.
Requested byhttps://hclips.com/embed/7435271/?source=1053265611 CertificateIssuerLet's Encrypt Subjecthcjs.nv7s.com Fingerprint9F:10:C5:13:C6:C4:42:EC:E4:D6:0C:56:9A:57:2D:E9:EA:11:77:A3 ValidityWed, 07 May 2025 02:32:25 GMT - Tue, 05 Aug 2025 02:32:24 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (65524), with no line terminators Size104 kB (103600 bytes) Hash6c192ff2718544bd477334900a7f6ef4 4eac28d6af10a92fc4c565f8524ff9bb0a2ecab7 c9c054d7760abaacb28387309b3c5b1f8fb414cca68474a351de0d92fa524e3a
GET /upd/20250414.131205.103600/static/assets/embed.js HTTP/1.1
Host: hcjs.nv7s.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://hclips.com
DNT: 1
Connection: keep-alive
Referer: https://hclips.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 11 May 2025 02:10:17 GMT
content-type: application/javascript; charset=utf-8
server: nginx
last-modified: Mon, 14 Apr 2025 13:12:05 GMT
vary: Accept-Encoding, Accept-Encoding
etag: W/"67fd09a5-194b0"
expires: Tue, 22 Apr 2025 20:10:08 GMT
cache-control: max-age=1800
x-cache: HIT
content-encoding: gzip
x-cdn-host-id: ds5058
x-proxy-cache: HIT
access-control-allow-origin: *
X-Firefox-Spdy: h2
|
|
| www.googletagmanager.com/gtm.js?id=GTM-MVMB4DG | 142.250.178.104 | 200 OK | 251 kB |
URL GET www.googletagmanager.com/gtm.js?id=GTM-MVMB4DG IP 142.250.178.104:443
Requested byhttps://hclips.com/embed/7435271/?source=1053265611 CertificateIssuerGoogle Trust Services Subject*.google-analytics.com Fingerprint02:7D:56:C0:B9:20:0C:27:A4:AC:B9:8F:9D:45:1D:85:2A:30:50:AD ValidityMon, 21 Apr 2025 08:40:41 GMT - Mon, 14 Jul 2025 08:40:40 GMT
File typeJavaScript source, ASCII text, with very long lines (2587) Size251 kB (251174 bytes) Hashe50b75d34d14551e3d8ac6a6f31fc92a 232118b2199b23163c028c5aeb44aaa126502665 33be99f0b511e7cbe7d0e0ff823a5cb41dd70856ec355e24d020f510cf67c13a
GET /gtm.js?id=GTM-MVMB4DG HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hclips.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sun, 11 May 2025 02:10:18 GMT
expires: Sun, 11 May 2025 02:10:18 GMT
cache-control: private, max-age=900
last-modified: Sun, 11 May 2025 00:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgcycc:1317:0
cross-origin-opener-policy-report-only: same-origin; report-to=ascgcycc:1317:0
report-to: {"group":"ascgcycc:1317:0","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgcycc:1317:0"}],}
server: Google Tag Manager
content-length: 87811
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| vast.yomeno.xyz/prepare | 62.122.173.28 | 204 No Content | 0 B |
IP 62.122.173.28:443
Requested byhttps://hclips.com/embed/7435271/?source=1053265611 CertificateIssuerLet's Encrypt Subjectvast.yomeno.xyz Fingerprint79:E3:D3:8E:1A:DB:0F:2E:A0:D5:0E:32:44:CE:2B:DC:01:AA:24:95 ValiditySat, 05 Apr 2025 03:24:21 GMT - Fri, 04 Jul 2025 03:24:20 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /prepare HTTP/1.1
Host: vast.yomeno.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://hclips.com/
Origin: https://hclips.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
server: nginx/1.20.1
date: Sun, 11 May 2025 02:10:18 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://hclips.com
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
content-type: text/plain; charset=utf-8
content-length: 0
X-Firefox-Spdy: h2
|
|
| hcjs.nv7s.com/assets//jwplayer-8.21.2.4/jwplayer.core.controls.html5.js | 45.133.44.25 | 200 OK | 352 kB |
URL GET hcjs.nv7s.com/assets//jwplayer-8.21.2.4/jwplayer.core.controls.html5.js IP 45.133.44.25:443
ASN#39572 DataWeb Global Group B.V.
Requested byhttps://hclips.com/embed/7435271/?source=1053265611 CertificateIssuerLet's Encrypt Subjecthcjs.nv7s.com Fingerprint9F:10:C5:13:C6:C4:42:EC:E4:D6:0C:56:9A:57:2D:E9:EA:11:77:A3 ValidityWed, 07 May 2025 02:32:25 GMT - Tue, 05 Aug 2025 02:32:24 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (65124) Size352 kB (352205 bytes) Hash34b2f4814649a7c9b78a3093bf75fe1c d2ab09ce65e2283089924c0df321cdc79f781a63 9f7031621ef6430d83040b3a20de0fb57cdc905e85cf67131ab5af5d66f61579
GET /assets//jwplayer-8.21.2.4/jwplayer.core.controls.html5.js HTTP/1.1
Host: hcjs.nv7s.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hclips.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 11 May 2025 02:10:18 GMT
content-type: application/javascript; charset=utf-8
server: nginx
last-modified: Mon, 14 Apr 2025 13:11:31 GMT
vary: Accept-Encoding, Accept-Encoding
etag: W/"67fd0983-55fcd"
expires: Tue, 06 May 2025 22:42:00 GMT
cache-control: max-age=1800
x-cache: HIT
content-encoding: gzip
x-cdn-host-id: ds5058
x-proxy-cache: HIT
access-control-allow-origin: *
X-Firefox-Spdy: h2
|
|
| vast.vstserv.com/vast | 62.122.173.35 | 204 No Content | 0 B |
IP 62.122.173.35:443
Requested byhttps://hclips.com/embed/7435271/?source=1053265611 CertificateIssuerLet's Encrypt Subjectvast.vstserv.com FingerprintFD:8B:7A:74:F1:3F:3B:13:45:84:58:8B:7C:22:94:1F:33:20:21:78 ValidityThu, 17 Apr 2025 03:15:51 GMT - Wed, 16 Jul 2025 03:15:50 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /vast HTTP/1.1
Host: vast.vstserv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://hclips.com/
Origin: https://hclips.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
server: nginx/1.20.1
date: Sun, 11 May 2025 02:10:19 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://hclips.com
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
content-type: text/plain; charset=utf-8
content-length: 0
X-Firefox-Spdy: h2
|
|
| 18xxx.name/js/scripts.js | 172.67.150.176 | 200 OK | 2.6 kB |
IP 172.67.150.176:443
Requested byhttps://18xxx.name/ga/tubes/a26398dca6f47b49876cbaffbc9954f9/index.php CertificateIssuerGoogle Trust Services Subject18xxx.name FingerprintFD:8E:D2:10:74:30:5E:80:CA:22:A3:CC:B3:86:A1:B9:0F:FB:08:4B ValidityTue, 18 Mar 2025 04:39:10 GMT - Mon, 16 Jun 2025 05:37:50 GMT
File typeJavaScript source, ASCII text, with CRLF line terminators Hasha7e729247d8bacbc8a3a4b196e53a7b2 dbccfe97550cec819592408f75480b88efafaed5 254f09ea176987beb80b8452e9de5c82135b0891c4ddcf4ec0ca48488c79bfc2
GET /js/scripts.js HTTP/1.1
Host: 18xxx.name
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://18xxx.name/ga/tubes/a26398dca6f47b49876cbaffbc9954f9/index.php
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 11 May 2025 02:10:16 GMT
content-type: application/javascript
server: cloudflare
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
last-modified: Wed, 09 Nov 2022 13:50:47 GMT
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=9ZgFudvooBfy8H7NAQILXCcaSc76g7eAsaaALeEhyb1nWqdGj16A0An3KGTP%2BNoSiaCTXuQUAY4I%2BcsvSA33sRq06MhwszH%2FFyO9uhaSLYOyl%2B9aX1UcuqQERPoB"}]}
expires: Thu, 29 May 2025 15:44:01 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 987975
etag: W/"636bb037-a2a"
content-encoding: br
cf-ray: 93de2393efb6b4f1-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| ip409015555.ahcdn.com/key=V4S4h2Rl-kiQBE+guyxnPw,s=,end=1747015820,limit=3/data=fCtDqK/state=aCAHW1oq/buffer=267000:764487,204.5/speed=747592/referer=none,.hclips.com,.gstatic.com/reftag=059555948/ssd4/121/9/201972749/hclips/c2/videos/7435000/7435271/7435271_hq.mp4 | 45.143.251.159 | 206 Partial Content | 1.0 MB |
URL GET ip409015555.ahcdn.com/key=V4S4h2Rl-kiQBE+guyxnPw,s=,end=1747015820,limit=3/data=fCtDqK/state=aCAHW1oq/buffer=267000:764487,204.5/speed=747592/referer=none,.hclips.com,.gstatic.com/reftag=059555948/ssd4/121/9/201972749/hclips/c2/videos/7435000/7435271/7435271_hq.mp4 IP 45.143.251.159:443
Requested byhttps://hclips.com/embed/7435271/?source=1053265611 CertificateIssuerGoGetSSL Subject*.ahcdn.com FingerprintFD:4D:78:14:4B:62:CB:76:11:BA:B1:5E:4C:75:8F:01:5B:BB:96:2F ValidityTue, 28 May 2024 00:00:00 GMT - Fri, 27 Jun 2025 23:59:59 GMT
File typeISO Media, MP4 Base Media v1 [ISO 14496-12:2003] Size1.0 MB (1048576 bytes) Hashb42e48863f16b4a49760298eebaf51ea 82095f13f7107710d47529d72d87840ef1d20b6e 5203e1546d2a2c58a31355a83d60e2ef9b0107521181b762df8ac61f8252b2b4
GET /key=V4S4h2Rl-kiQBE+guyxnPw,s=,end=1747015820,limit=3/data=fCtDqK/state=aCAHW1oq/buffer=267000:764487,204.5/speed=747592/referer=none,.hclips.com,.gstatic.com/reftag=059555948/ssd4/121/9/201972749/hclips/c2/videos/7435000/7435271/7435271_hq.mp4 HTTP/1.1
Host: ip409015555.ahcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br, identity
Range: bytes=0-
Referer: https://hclips.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 206 Partial Content
server: nginx/1.22.0
date: Sun, 11 May 2025 02:10:20 GMT
content-type: video/mp4
content-length: 50965844
last-modified: Sun, 05 Jul 2020 07:06:33 GMT
access-control-allow-headers: *
access-control-allow-methods: GET,POST,OPTIONS
access-control-allow-origin: *
access-control-expose-headers: Server,Range,Content-Length,Content-Range
etag: "5f017bf9-309ad54"
expires: Sun, 11 May 2025 04:10:20 GMT
cache-control: max-age=7200, private
content-range: bytes 0-50965843/50965844
X-Firefox-Spdy: h2
|
|
| a.labadena.com/api/spots/458877?p=1 | 37.27.230.125 | 200 OK | 11 kB |
URL GET a.labadena.com/api/spots/458877?p=1 IP 37.27.230.125:443
ASN#24940 Hetzner Online GmbH
Requested byhttps://18xxx.name/ga/tubes/a26398dca6f47b49876cbaffbc9954f9/index.php CertificateIssuerLet's Encrypt Subjecta.labadena.com FingerprintCF:36:42:C5:51:DD:C3:E4:4F:13:3E:E4:67:E5:19:35:02:80:D5:3A ValidityMon, 17 Mar 2025 23:28:38 GMT - Sun, 15 Jun 2025 23:28:37 GMT
File typeHTML document, ASCII text, with very long lines (4733) Hash707f0d2bf19946c4077f5c4bd7a85bb2 4d1a0b604169756019ad0ce4916e973195930c71 1d84ffa06eca61755137b0a11c09afc1b38f2e6e09b03ea380f9a3a79def96dd
GET /api/spots/458877?p=1 HTTP/1.1
Host: a.labadena.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://18xxx.name/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 11 May 2025 02:10:16 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
set-cookie: nauid=0dCTV2KE7gX0VTZa1XoX; Path=/; Expires=Wed, 11 Nov 2037 11:11:11 GMT; Secure; SameSite=None
x-robots-tag: noindex, nofollow
cache-control: private
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| fp.metricswpsh.com/fp?tag_id=821 | 157.90.84.242 | 204 No Content | 0 B |
URL OPTIONS fp.metricswpsh.com/fp?tag_id=821 IP 157.90.84.242:443
ASN#24940 Hetzner Online GmbH
Requested byhttps://hclips.com/embed/7435271/?source=1053265611 CertificateIssuerLet's Encrypt Subjectnotification.tubecup.net Fingerprint6A:AF:05:21:7E:87:22:9C:BB:20:DB:34:F6:0A:88:06:79:E3:A0:78 ValidityThu, 17 Apr 2025 02:58:33 GMT - Wed, 16 Jul 2025 02:58:32 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /fp?tag_id=821 HTTP/1.1
Host: fp.metricswpsh.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://hclips.com/
Origin: https://hclips.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 204 No Content
Server: nginx/1.20.1
Date: Sun, 11 May 2025 02:10:18 GMT
Connection: keep-alive
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: content-type
Access-Control-Allow-Methods: GET,HEAD,PUT,PATCH,POST,DELETE
Access-Control-Allow-Origin: https://hclips.com
Vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
|
|
| vast.yomeno.xyz/prepare | 62.122.173.28 | 204 No Content | 0 B |
IP 62.122.173.28:443
Requested byhttps://hclips.com/embed/7435271/?source=1053265611 CertificateIssuerLet's Encrypt Subjectvast.yomeno.xyz Fingerprint79:E3:D3:8E:1A:DB:0F:2E:A0:D5:0E:32:44:CE:2B:DC:01:AA:24:95 ValiditySat, 05 Apr 2025 03:24:21 GMT - Fri, 04 Jul 2025 03:24:20 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /prepare HTTP/1.1
Host: vast.yomeno.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json;charset=utf-8
Content-Length: 1471
Origin: https://hclips.com
DNT: 1
Connection: keep-alive
Referer: https://hclips.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
server: nginx/1.20.1
date: Sun, 11 May 2025 02:10:18 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://hclips.com
access-control-expose-headers: Content-Length,Content-Range
X-Firefox-Spdy: h2
|
|
| ip409015557.ahcdn.com/key=qzx-WeYUTYam-sRuDpJQkA,s=,end=1747015819,limit=3/data=Rq4XPY/state=aCAHW1oq/buffer=267000:764487,204.5/speed=747592/referer=none,.hclips.com,.gstatic.com/reftag=059555948/ssd4/121/9/201972749/hclips/c2/videos/7435000/7435271/7435271_hq.mp4 | 45.143.251.95 | 206 Partial Content | 1.6 MB |
URL GET ip409015557.ahcdn.com/key=qzx-WeYUTYam-sRuDpJQkA,s=,end=1747015819,limit=3/data=Rq4XPY/state=aCAHW1oq/buffer=267000:764487,204.5/speed=747592/referer=none,.hclips.com,.gstatic.com/reftag=059555948/ssd4/121/9/201972749/hclips/c2/videos/7435000/7435271/7435271_hq.mp4 IP 45.143.251.95:443
Requested byhttps://hclips.com/embed/7435271/?source=1053265611 CertificateIssuerGoGetSSL Subject*.ahcdn.com FingerprintFD:4D:78:14:4B:62:CB:76:11:BA:B1:5E:4C:75:8F:01:5B:BB:96:2F ValidityTue, 28 May 2024 00:00:00 GMT - Fri, 27 Jun 2025 23:59:59 GMT
File typeISO Media, MP4 Base Media v1 [ISO 14496-12:2003] Size1.6 MB (1572864 bytes) Hash0c684caad4d6dc3eda8505c460720dbd f641ea05804a8f27f8116a2dbce336fc51d0b1d6 eae0a06c1e79f15402d75ef18f73f77298e9f78708aab02ccd122952443fa111
GET /key=qzx-WeYUTYam-sRuDpJQkA,s=,end=1747015819,limit=3/data=Rq4XPY/state=aCAHW1oq/buffer=267000:764487,204.5/speed=747592/referer=none,.hclips.com,.gstatic.com/reftag=059555948/ssd4/121/9/201972749/hclips/c2/videos/7435000/7435271/7435271_hq.mp4 HTTP/1.1
Host: ip409015557.ahcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br, identity
Range: bytes=0-
Referer: https://hclips.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 206 Partial Content
server: nginx/1.22.0
date: Sun, 11 May 2025 02:10:19 GMT
content-type: video/mp4
content-length: 50965844
last-modified: Sun, 05 Jul 2020 07:06:33 GMT
access-control-allow-headers: *
access-control-allow-methods: GET,POST,OPTIONS
access-control-allow-origin: *
access-control-expose-headers: Server,Range,Content-Length,Content-Range
etag: "5f017bf9-309ad54"
expires: Sun, 11 May 2025 04:10:19 GMT
cache-control: max-age=7200, private
content-range: bytes 0-50965843/50965844
X-Firefox-Spdy: h2
|
|
| a.labadena.com/api/spots/459138?kw=amateur%2Cbdsm%2Cbeach%2Cbrunette%2Cgonzo%2Chomemade%2Ckinky%2Cnaughty%2Cnudist%2Chd%2Cpussy%2Cfetish&i=1&url=https%3A%2F%2F18xxx.name%2Fga%2Ftubes%2Fa26398dca6f47b49876cbaffbc9954f9%2Findex.php&sid=86917d95-d217-4f41-9358-2de8b394687a | 37.27.230.125 | 200 OK | 2.6 kB |
URL GET a.labadena.com/api/spots/459138?kw=amateur%2Cbdsm%2Cbeach%2Cbrunette%2Cgonzo%2Chomemade%2Ckinky%2Cnaughty%2Cnudist%2Chd%2Cpussy%2Cfetish&i=1&url=https%3A%2F%2F18xxx.name%2Fga%2Ftubes%2Fa26398dca6f47b49876cbaffbc9954f9%2Findex.php&sid=86917d95-d217-4f41-9358-2de8b394687a IP 37.27.230.125:443
ASN#24940 Hetzner Online GmbH
Requested byhttps://18xxx.name/ga/tubes/a26398dca6f47b49876cbaffbc9954f9/index.php CertificateIssuerLet's Encrypt Subjecta.labadena.com FingerprintCF:36:42:C5:51:DD:C3:E4:4F:13:3E:E4:67:E5:19:35:02:80:D5:3A ValidityMon, 17 Mar 2025 23:28:38 GMT - Sun, 15 Jun 2025 23:28:37 GMT
File typeASCII text, with very long lines (2050) Hash12da940cfd28bddee5936a1e5bc80028 6724aec6cc401f12d69282553765d45b1df7f001 f961b7440d0958550cee437ca5ae4c0f2aa5bbf8bc512ed64b8b9e3688a7ec68
GET /api/spots/459138?kw=amateur%2Cbdsm%2Cbeach%2Cbrunette%2Cgonzo%2Chomemade%2Ckinky%2Cnaughty%2Cnudist%2Chd%2Cpussy%2Cfetish&i=1&url=https%3A%2F%2F18xxx.name%2Fga%2Ftubes%2Fa26398dca6f47b49876cbaffbc9954f9%2Findex.php&sid=86917d95-d217-4f41-9358-2de8b394687a HTTP/1.1
Host: a.labadena.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://18xxx.name/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 11 May 2025 02:10:16 GMT
content-type: text/javascript; charset=utf-8
vary: Accept-Encoding
set-cookie: nauid=mD6KhRbF7gdg5TqT0cP0; Path=/; Expires=Wed, 11 Nov 2037 11:11:11 GMT; Secure; SameSite=None
x-robots-tag: noindex, nofollow
cache-control: private
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| 18xxx.name/image/16/739_prime-group.jpg | 172.67.150.176 | 200 OK | 14 kB |
URL GET 18xxx.name/image/16/739_prime-group.jpg IP 172.67.150.176:443
Requested byhttps://18xxx.name/ga/tubes/a26398dca6f47b49876cbaffbc9954f9/index.php CertificateIssuerGoogle Trust Services Subject18xxx.name FingerprintFD:8E:D2:10:74:30:5E:80:CA:22:A3:CC:B3:86:A1:B9:0F:FB:08:4B ValidityTue, 18 Mar 2025 04:39:10 GMT - Mon, 16 Jun 2025 05:37:50 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 320x240, components 3 Hash3ceeb3e3bcffa0d3ed7cb34aa044ecd6 e71f2e50bf6ecf4f57bc8ccdaca8e75c1451ba6e 40af227bdb73548c7f4ec849da961a93b5b12b4dedffafafc213d946dfc87f28
GET /image/16/739_prime-group.jpg HTTP/1.1
Host: 18xxx.name
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://18xxx.name/ga/tubes/a26398dca6f47b49876cbaffbc9954f9/index.php
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 11 May 2025 02:10:16 GMT
content-type: image/jpeg
content-length: 13587
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hsbOuZFYIFIxDC2RwPlwPVeyIX1aPWGVhw8VcpDTYVu0SkU4m9YIeWd9ffM5qwgpfRKA7BVq1A9buVYo7lhpvWj0lO19V03AArEadrsaM1g7oL6rcyuhHKfCx16P"}],"group":"cf-nel","max_age":604800}
last-modified: Thu, 16 Dec 2021 06:40:45 GMT
etag: "61badf6d-3513"
expires: Fri, 30 May 2025 07:45:02 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 930314
accept-ranges: bytes
cf-ray: 93de23972f3856aa-OSL
server: cloudflare
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1958&min_rtt=549&rtt_var=565&sent=425&recv=262&lost=0&retrans=0&sent_bytes=257157&recv_bytes=19017&delivery_rate=4886335&cwnd=96000&unsent_bytes=0&cid=c524eddc9b389244&ts=740&x=16"
|
|
| js.wpushsdk.com/npc/embed.json | 45.133.44.53 | 200 OK | 51 B |
URL GET js.wpushsdk.com/npc/embed.json IP 45.133.44.53:443
ASN#39572 DataWeb Global Group B.V.
Requested byhttps://hclips.com/embed/7435271/?source=1053265611 CertificateIssuerLet's Encrypt Subjectjs.wpushsdk.com Fingerprint0A:DC:0B:A8:1A:A8:C8:90:9C:96:FF:5B:B2:8B:1F:6D:1A:05:B2:B7 ValidityTue, 06 May 2025 02:34:10 GMT - Mon, 04 Aug 2025 02:34:09 GMT
Hash54ac94deff344cdf8181d0d5ecef4f54 8509dc0f6710ac2228efc6c26460833f1444462e fb431326d9475e0118b5bc83467a59a97bed0bc55b3d72de450b66ff3c55971e
GET /npc/embed.json HTTP/1.1
Host: js.wpushsdk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://hclips.com/
Origin: https://hclips.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 11 May 2025 02:10:18 GMT
content-type: application/json
content-length: 51
server: nginx/1.18.0
last-modified: Fri, 27 Jan 2023 14:43:22 GMT
etag: "63d3e30a-33"
expires: Sun, 11 May 2025 02:15:18 GMT
cache-control: max-age=300
x-cdn-host-id: ah1747
x-proxy-cache: HIT
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| citadelpathstatue.com/check.html | 94.242.247.27 | 200 OK | 926 B |
URL GET citadelpathstatue.com/check.html IP 94.242.247.27:443
Requested byhttps://18xxx.name/ga/tubes/a26398dca6f47b49876cbaffbc9954f9/index.php CertificateIssuerBuypass AS-983163327 Subject Fingerprint06:E6:2D:49:92:9F:EC:9D:12:04:3B:68:EB:B2:30:0A:30:7B:4A:D2 ValidityMon, 03 Mar 2025 23:48:25 GMT - Sat, 30 Aug 2025 21:59:00 GMT
File typeHTML document, ASCII text Hash088dba8e97eede53134c93219f7ebbae adb707654d1fe0af7d0d7a9f55660d22bd3625e4 6da0120b4c7bc45b63fcbb87595c3c1ea2cdca482b0c48d4d2ab434f9e897aff
GET /check.html HTTP/1.1
Host: citadelpathstatue.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://18xxx.name/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 11 May 2025 02:10:17 GMT
content-type: text/html; charset=utf-8
last-modified: Wed, 16 Apr 2025 07:53:28 GMT
vary: Accept-Encoding
etag: W/"67ff61f8-39e"
x-js-ab: current
timing-allow-origin: *
accept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| storage.multstorage.com/log/count.html | 172.67.174.51 | 200 OK | 882 B |
URL GET storage.multstorage.com/log/count.html IP 172.67.174.51:443
Requested byhttps://hclips.com/embed/7435271/?source=1053265611 CertificateIssuerGoogle Trust Services Subjectmultstorage.com FingerprintAB:89:C2:3D:3B:E4:DD:0A:32:44:EC:41:65:9E:53:44:11:61:AB:F3 ValiditySun, 04 May 2025 05:28:22 GMT - Sat, 02 Aug 2025 06:26:59 GMT
File typeHTML document, ASCII text, with very long lines (700) Hashb728ca9cd183d1b7c3f72116b19b22a3 c1fd73f6b02cf00b8bc60b09cc99495e8494b739 8a7b1ca4bbf273b32ea865d4785a1944d1b2b133678d9b5fe7ee0406f6fd64b2
GET /log/count.html HTTP/1.1
Host: storage.multstorage.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hclips.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 11 May 2025 02:10:18 GMT
content-type: text/html
server: cloudflare
last-modified: Mon, 18 Sep 2023 14:39:06 GMT
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=Yar64Q3z7y4EFaT9o3ZvTX%2B005bXMmXaR14oAzfQ%2BQsi8m7w8Z39r5nxiuymWpM7sLy8Zx0ElfkZahI3edSf9EFN%2FMZQjV2S1pUzvLh0TgPsz%2BoMisnvxb1dbMgTtWhBRcDvHU49ebLohQ%3D%3D"}]}
vary: Accept-Encoding
x-request-id: 8a26aec9e82f17b2c8baba1f9d9742db
cf-cache-status: DYNAMIC
content-encoding: br
cf-ray: 93de23a1fea4b517-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| 18xxx.name/image/0/525_cam-reach-shrink.jpg | 172.67.150.176 | 200 OK | 12 kB |
URL GET 18xxx.name/image/0/525_cam-reach-shrink.jpg IP 172.67.150.176:443
Requested byhttps://18xxx.name/ga/tubes/a26398dca6f47b49876cbaffbc9954f9/index.php CertificateIssuerGoogle Trust Services Subject18xxx.name FingerprintFD:8E:D2:10:74:30:5E:80:CA:22:A3:CC:B3:86:A1:B9:0F:FB:08:4B ValidityTue, 18 Mar 2025 04:39:10 GMT - Mon, 16 Jun 2025 05:37:50 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 320x240, components 3 Hashedae766f90a72404b87a0d1205d7a436 25a900f3d9675d5913f318990b5a6974ee19eb82 ad38a7680f57d035442df76f7d66b578bc9666f301c4ae5a42121d1469f86457
GET /image/0/525_cam-reach-shrink.jpg HTTP/1.1
Host: 18xxx.name
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://18xxx.name/ga/tubes/a26398dca6f47b49876cbaffbc9954f9/index.php
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 11 May 2025 02:10:16 GMT
content-type: image/jpeg
content-length: 11754
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6ifMH9R0HkGmpTJEFnRtpOqihB%2BQdhB9Wtp73IPUYq9Yz0rqosEdsj02e9B49FTIAzaBl3aaIyZ0CX0mdOReycASkmexrh9vetWBo5igwmazF1ydYmJHmhgZvF4K"}],"group":"cf-nel","max_age":604800}
last-modified: Sun, 05 Dec 2021 03:15:21 GMT
etag: "61ac2ec9-2dea"
expires: Fri, 06 Jun 2025 00:45:06 GMT
cache-control: max-age=31536000
accept-ranges: bytes
age: 350710
cf-cache-status: HIT
cf-ray: 93de23970f2c56aa-OSL
server: cloudflare
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2268&min_rtt=549&rtt_var=1380&sent=290&recv=251&lost=0&retrans=0&sent_bytes=106602&recv_bytes=16573&delivery_rate=10801883&cwnd=45600&unsent_bytes=0&cid=c524eddc9b389244&ts=716&x=16"
|
|
| hclips.com/get_file/10/7efff55a05872f3dca198cf830005a5e391124b963/7435000/7435271/7435271_hq.mp4/?d=205&br=373&ti=1746929418 | 91.227.144.58 | 302 Found | 1.0 MB |
URL GET hclips.com/get_file/10/7efff55a05872f3dca198cf830005a5e391124b963/7435000/7435271/7435271_hq.mp4/?d=205&br=373&ti=1746929418 IP 91.227.144.58:443
Requested byhttps://hclips.com/embed/7435271/?source=1053265611 CertificateIssuerLet's Encrypt Subjecthclips.com FingerprintF6:99:27:E5:A1:39:F3:AB:5A:B2:F8:67:8E:A5:F4:D6:B8:F7:6A:C3 ValiditySun, 16 Mar 2025 03:05:23 GMT - Sat, 14 Jun 2025 03:05:22 GMT
Size1.0 MB (1048576 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /get_file/10/7efff55a05872f3dca198cf830005a5e391124b963/7435000/7435271/7435271_hq.mp4/?d=205&br=373&ti=1746929418 HTTP/1.1
Host: hclips.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
DNT: 1
Connection: keep-alive
Referer: https://hclips.com/embed/7435271/?source=1053265611
Cookie: source=1053265611
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
server: nginx/1.23.3
date: Sun, 11 May 2025 02:10:20 GMT
content-type: text/html; charset=UTF-8
location: https://hclips.ahcdn.com/key=KqSmVrmyjSXTZfIwrcub0g,end=1747015820,limit=3/data=fCtDqK/speed=3.0/buffer=267K/referer=none,.hclips.com,.gstatic.com/c2/videos/7435000/7435271/7435271_hq.mp4
x-powered-by: PHP/7.4.33
access-control-allow-origin: *
X-Firefox-Spdy: h2
|
|
| bullionglidingscuttle.com/check.html | 94.242.247.20 | 200 OK | 926 B |
URL GET bullionglidingscuttle.com/check.html IP 94.242.247.20:443
Requested byhttps://a.labadena.com/api/spots/458877?p=1 CertificateIssuerBuypass AS-983163327 Subject FingerprintC1:41:36:2B:0F:2D:49:78:DA:E4:70:2C:6A:68:9E:0C:A4:8A:8D:5F ValidityTue, 04 Mar 2025 00:04:45 GMT - Sat, 30 Aug 2025 21:59:00 GMT
File typeHTML document, ASCII text Hash088dba8e97eede53134c93219f7ebbae adb707654d1fe0af7d0d7a9f55660d22bd3625e4 6da0120b4c7bc45b63fcbb87595c3c1ea2cdca482b0c48d4d2ab434f9e897aff
GET /check.html HTTP/1.1
Host: bullionglidingscuttle.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://a.labadena.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 11 May 2025 02:10:17 GMT
content-type: text/html; charset=utf-8
last-modified: Wed, 16 Apr 2025 07:53:28 GMT
vary: Accept-Encoding
etag: W/"67ff61f8-39e"
x-js-ab: current
timing-allow-origin: *
accept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| 18xxx.name/image/9/092_a-s-boned.jpg | 172.67.150.176 | 200 OK | 12 kB |
URL GET 18xxx.name/image/9/092_a-s-boned.jpg IP 172.67.150.176:443
Requested byhttps://18xxx.name/ga/tubes/a26398dca6f47b49876cbaffbc9954f9/index.php CertificateIssuerGoogle Trust Services Subject18xxx.name FingerprintFD:8E:D2:10:74:30:5E:80:CA:22:A3:CC:B3:86:A1:B9:0F:FB:08:4B ValidityTue, 18 Mar 2025 04:39:10 GMT - Mon, 16 Jun 2025 05:37:50 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 320x240, components 3 Hashce0eb11f988038197c51200e06b41940 3b18895e61b6c5ab019a6ed42ea5fce7f4a37c80 e0250f1b1d8de21cfcdc2c7b61f8f56fdef98c5dff1442b4bfa9f7175eff8f60
GET /image/9/092_a-s-boned.jpg HTTP/1.1
Host: 18xxx.name
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://18xxx.name/ga/tubes/a26398dca6f47b49876cbaffbc9954f9/index.php
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 11 May 2025 02:10:16 GMT
content-type: image/jpeg
content-length: 11727
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=nfzoSgg7i2%2BlOEgo8Vvmopf9jIopRreXTbfeDUOq%2BSbGqAbdUIY89Q93d0JmyAYBdXoU523Jjx2gwcmDsMNFLrhutcTwE2Bm996MGeXprhFjC9AH66Y8hXrETJLP"}],"group":"cf-nel","max_age":604800}
last-modified: Sun, 05 Dec 2021 04:35:14 GMT
etag: "61ac4182-2dcf"
expires: Fri, 30 May 2025 01:20:16 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 953400
accept-ranges: bytes
cf-ray: 93de23972f3756aa-OSL
server: cloudflare
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2008&min_rtt=549&rtt_var=622&sent=414&recv=261&lost=0&retrans=0&sent_bytes=244478&recv_bytes=18972&delivery_rate=3743222&cwnd=96000&unsent_bytes=0&cid=c524eddc9b389244&ts=737&x=16"
|
|
| hclips.com/api/json/video/86400/7000000/7435000/7435271.json | 91.227.144.58 | 200 OK | 1.9 kB |
URL GET hclips.com/api/json/video/86400/7000000/7435000/7435271.json IP 91.227.144.58:443
Requested byhttps://hclips.com/embed/7435271/?source=1053265611 CertificateIssuerLet's Encrypt Subjecthclips.com FingerprintF6:99:27:E5:A1:39:F3:AB:5A:B2:F8:67:8E:A5:F4:D6:B8:F7:6A:C3 ValiditySun, 16 Mar 2025 03:05:23 GMT - Sat, 14 Jun 2025 03:05:22 GMT
Hasha6bf5ecd948db7a5bf27220933a2ee74 fe4cf95cb83ab95da5550db180f307af681bc6ce 82eb35de45705c0fbb135fa37c771771e39cea9a277419f1e8b9f74fee7b6c2c
GET /api/json/video/86400/7000000/7435000/7435271.json HTTP/1.1
Host: hclips.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hclips.com/embed/7435271/?source=1053265611
Cookie: source=1053265611
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.23.3
date: Sun, 11 May 2025 02:10:17 GMT
content-type: application/json
last-modified: Sat, 10 May 2025 23:13:38 GMT
vary: Accept-Encoding
etag: W/"681fdda2-793"
expires: Sun, 11 May 2025 02:15:17 GMT
cache-control: max-age=300
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| citadelpathstatue.com/get/2005665?zoneid=2005665&jp=_clcocgwozfttdymudffguz&dr=102&nojs=0&abvar=0&febuild=1.0.541&t=0&wcks=1&wgl=1&cnvs=1&os=0&tz=UTC&ss=1&ls=1&bb=0&cti=0&fn=3&es=13&ge=2&th=B3j1vcmB-QXXkvVxXT9myjsm4OQNCc&plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF&lang=en-US&pf=Linux%20x86_64&cd=24&vcv=Mesa&vcn=llvmpipe&ix=0&x=1280&y=1024&md=0&psu=3gcmj0haHR0cHM6Ly8xOHh4eC5uYW1lL2dhL3R1YmVzL2EyNjM5OGRjYTZmNDdiNDk4NzZjYmFmZmJjOTk1NGY5L2luZGV4LnBocA&afid=3492186486854144&eclog=0&snc=0&ssc=0&vp=0&dto=2&im=1&noch=1&de=0&cs=5&uf=0&freq=0 | 94.242.247.27 | 200 OK | 0 B |
URL GET citadelpathstatue.com/get/2005665?zoneid=2005665&jp=_clcocgwozfttdymudffguz&dr=102&nojs=0&abvar=0&febuild=1.0.541&t=0&wcks=1&wgl=1&cnvs=1&os=0&tz=UTC&ss=1&ls=1&bb=0&cti=0&fn=3&es=13&ge=2&th=B3j1vcmB-QXXkvVxXT9myjsm4OQNCc&plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF&lang=en-US&pf=Linux%20x86_64&cd=24&vcv=Mesa&vcn=llvmpipe&ix=0&x=1280&y=1024&md=0&psu=3gcmj0haHR0cHM6Ly8xOHh4eC5uYW1lL2dhL3R1YmVzL2EyNjM5OGRjYTZmNDdiNDk4NzZjYmFmZmJjOTk1NGY5L2luZGV4LnBocA&afid=3492186486854144&eclog=0&snc=0&ssc=0&vp=0&dto=2&im=1&noch=1&de=0&cs=5&uf=0&freq=0 IP 94.242.247.27:443
Requested byhttps://18xxx.name/ga/tubes/a26398dca6f47b49876cbaffbc9954f9/index.php CertificateIssuerBuypass AS-983163327 Subject Fingerprint06:E6:2D:49:92:9F:EC:9D:12:04:3B:68:EB:B2:30:0A:30:7B:4A:D2 ValidityMon, 03 Mar 2025 23:48:25 GMT - Sat, 30 Aug 2025 21:59:00 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /get/2005665?zoneid=2005665&jp=_clcocgwozfttdymudffguz&dr=102&nojs=0&abvar=0&febuild=1.0.541&t=0&wcks=1&wgl=1&cnvs=1&os=0&tz=UTC&ss=1&ls=1&bb=0&cti=0&fn=3&es=13&ge=2&th=B3j1vcmB-QXXkvVxXT9myjsm4OQNCc&plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF&lang=en-US&pf=Linux%20x86_64&cd=24&vcv=Mesa&vcn=llvmpipe&ix=0&x=1280&y=1024&md=0&psu=3gcmj0haHR0cHM6Ly8xOHh4eC5uYW1lL2dhL3R1YmVzL2EyNjM5OGRjYTZmNDdiNDk4NzZjYmFmZmJjOTk1NGY5L2luZGV4LnBocA&afid=3492186486854144&eclog=0&snc=0&ssc=0&vp=0&dto=2&im=1&noch=1&de=0&cs=5&uf=0&freq=0 HTTP/1.1
Host: citadelpathstatue.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://18xxx.name/
Cookie: cart=1; cart_p=2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 11 May 2025 02:10:18 GMT
content-type: text/plain; charset=utf-8
content-length: 0
x-route-id: config
timing-allow-origin: *
accept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
X-Firefox-Spdy: h2
|
|
| metricswpsh.com/in/track?data=eyJ3bCI6MSwic3ViaWQiOjEwNTMyNjU2MTEsInVzZXJfaWQiOiI4OTQ0ODg3ODYwNzU5NTAxMDAwIiwidGltZXpvbmUiOjAsInZlciI6IjMuMTM4LjMiLCJ0YWdfaWQiOjgyMSwic2NyZWVuX3Jlc29sdXRpb24iOiIxMjgweDEwMjQiLCJhZGJsb2NrIjowLCJ0aW1lem9uZV9vbHNvbiI6IlVUQyIsInV0bV9zb3VyY2UiOiIiLCJ1dG1fbWVkaXVtIjoiIiwidXRtX2NhbXBhaWduIjoiIiwidXRtX2NvbnRlbnQiOiIiLCJtbSI6MCwiaW5pdF9zdGFydF9sYXRlbmN5IjowLjQsImlzX3YyIjowLCJpc192Ml9lbXB0eSI6MH0= | 88.198.204.168 | 200 OK | 0 B |
URL GET metricswpsh.com/in/track?data=eyJ3bCI6MSwic3ViaWQiOjEwNTMyNjU2MTEsInVzZXJfaWQiOiI4OTQ0ODg3ODYwNzU5NTAxMDAwIiwidGltZXpvbmUiOjAsInZlciI6IjMuMTM4LjMiLCJ0YWdfaWQiOjgyMSwic2NyZWVuX3Jlc29sdXRpb24iOiIxMjgweDEwMjQiLCJhZGJsb2NrIjowLCJ0aW1lem9uZV9vbHNvbiI6IlVUQyIsInV0bV9zb3VyY2UiOiIiLCJ1dG1fbWVkaXVtIjoiIiwidXRtX2NhbXBhaWduIjoiIiwidXRtX2NvbnRlbnQiOiIiLCJtbSI6MCwiaW5pdF9zdGFydF9sYXRlbmN5IjowLjQsImlzX3YyIjowLCJpc192Ml9lbXB0eSI6MH0= IP 88.198.204.168:443
ASN#24940 Hetzner Online GmbH
Requested byhttps://hclips.com/embed/7435271/?source=1053265611 CertificateIssuerLet's Encrypt Subjectnotification.tubecup.net Fingerprint6A:AF:05:21:7E:87:22:9C:BB:20:DB:34:F6:0A:88:06:79:E3:A0:78 ValidityThu, 17 Apr 2025 02:58:33 GMT - Wed, 16 Jul 2025 02:58:32 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /in/track?data=eyJ3bCI6MSwic3ViaWQiOjEwNTMyNjU2MTEsInVzZXJfaWQiOiI4OTQ0ODg3ODYwNzU5NTAxMDAwIiwidGltZXpvbmUiOjAsInZlciI6IjMuMTM4LjMiLCJ0YWdfaWQiOjgyMSwic2NyZWVuX3Jlc29sdXRpb24iOiIxMjgweDEwMjQiLCJhZGJsb2NrIjowLCJ0aW1lem9uZV9vbHNvbiI6IlVUQyIsInV0bV9zb3VyY2UiOiIiLCJ1dG1fbWVkaXVtIjoiIiwidXRtX2NhbXBhaWduIjoiIiwidXRtX2NvbnRlbnQiOiIiLCJtbSI6MCwiaW5pdF9zdGFydF9sYXRlbmN5IjowLjQsImlzX3YyIjowLCJpc192Ml9lbXB0eSI6MH0= HTTP/1.1
Host: metricswpsh.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://hclips.com
DNT: 1
Connection: keep-alive
Referer: https://hclips.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.18.0
date: Sun, 11 May 2025 02:10:18 GMT
content-length: 0
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
X-Firefox-Spdy: h2
|
|
| hclips.ahcdn.com/key=OcaxqHzXtZXw2iLdSM6pWA,end=1747015819,limit=3/data=71W8bB/speed=3.0/buffer=267K/referer=none,.hclips.com,.gstatic.com/c2/videos/7435000/7435271/7435271_hq.mp4 | 185.185.15.4 | 302 Found | 442 kB |
URL GET hclips.ahcdn.com/key=OcaxqHzXtZXw2iLdSM6pWA,end=1747015819,limit=3/data=71W8bB/speed=3.0/buffer=267K/referer=none,.hclips.com,.gstatic.com/c2/videos/7435000/7435271/7435271_hq.mp4 IP 185.185.15.4:443
ASN#39572 DataWeb Global Group B.V.
Requested byhttps://hclips.com/embed/7435271/?source=1053265611 CertificateIssuerLet's Encrypt Subjecthclips.ahcdn.com FingerprintFD:2A:6D:FE:ED:3C:0C:90:A1:33:BE:CF:CF:C3:96:45:A1:92:02:42 ValidityWed, 02 Apr 2025 02:32:10 GMT - Tue, 01 Jul 2025 02:32:09 GMT
Size442 kB (442170 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /key=OcaxqHzXtZXw2iLdSM6pWA,end=1747015819,limit=3/data=71W8bB/speed=3.0/buffer=267K/referer=none,.hclips.com,.gstatic.com/c2/videos/7435000/7435271/7435271_hq.mp4 HTTP/1.1
Host: hclips.ahcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br, identity
Range: bytes=0-
Referer: https://hclips.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
server: nginx/1.20.1
date: Sun, 11 May 2025 02:10:19 GMT
content-length: 0
location: https://ip409015555.ahcdn.com/key=3xlnFWW5jUlHJYtBQeaXIA,s=,end=1747015819,limit=3/data=71W8bB/state=aCAHW1oq/buffer=267000:764487,204.5/speed=747592/referer=none,.hclips.com,.gstatic.com/reftag=059555948/ssd4/121/9/201972749/hclips/c2/videos/7435000/7435271/7435271_hq.mp4
access-control-allow-headers: *
access-control-allow-methods: GET,POST,OPTIONS
access-control-allow-origin: *
access-control-expose-headers: Server,Range,Content-Length,Content-Range
cache-control: private, max-age=300
expires: Sun, 11 May 2025 02:15:19 GMT
X-Firefox-Spdy: h2
|
|
| 18xxx.name/image/2/280_bhabhi-hindi.jpg | 172.67.150.176 | 200 OK | 16 kB |
URL GET 18xxx.name/image/2/280_bhabhi-hindi.jpg IP 172.67.150.176:443
Requested byhttps://18xxx.name/ga/tubes/a26398dca6f47b49876cbaffbc9954f9/index.php CertificateIssuerGoogle Trust Services Subject18xxx.name FingerprintFD:8E:D2:10:74:30:5E:80:CA:22:A3:CC:B3:86:A1:B9:0F:FB:08:4B ValidityTue, 18 Mar 2025 04:39:10 GMT - Mon, 16 Jun 2025 05:37:50 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 320x240, components 3 Hashd19b8ba51ca16e1337d7ac59e0c86d24 4d4ecb7cb83d5e1cd0d0fd3369181812bc2826a0 b7570c4b0f46f995a561948a32309bf659b79d14e82cec5bd385675c094f8bc0
GET /image/2/280_bhabhi-hindi.jpg HTTP/1.1
Host: 18xxx.name
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://18xxx.name/ga/tubes/a26398dca6f47b49876cbaffbc9954f9/index.php
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 11 May 2025 02:10:16 GMT
content-type: image/jpeg
content-length: 15538
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8Ijnpgxczt%2BZcYWi2wY8MPCorOSMoNm8CN1w18CMi0oq%2Bh1syywJ7ijlpMqxR4iXTkSgaBQgERVfpJQXi4oMqWrYdiXEB51MVJ521uf02VHFeWzmHGv8CDtgbY8X"}],"group":"cf-nel","max_age":604800}
last-modified: Sun, 05 Dec 2021 03:18:03 GMT
etag: "61ac2f6b-3cb2"
expires: Sat, 07 Jun 2025 00:34:18 GMT
cache-control: max-age=31536000
accept-ranges: bytes
age: 264958
cf-cache-status: HIT
cf-ray: 93de23971f3456aa-OSL
server: cloudflare
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2074&min_rtt=549&rtt_var=831&sent=365&recv=256&lost=0&retrans=0&sent_bytes=189160&recv_bytes=17912&delivery_rate=6661972&cwnd=96000&unsent_bytes=0&cid=c524eddc9b389244&ts=728&x=16"
|
|
| hcjs.nv7s.com/upd/20250414.131205.30324/static/assets/embed.css | 45.133.44.25 | 200 OK | 30 kB |
URL GET hcjs.nv7s.com/upd/20250414.131205.30324/static/assets/embed.css IP 45.133.44.25:443
ASN#39572 DataWeb Global Group B.V.
Requested byhttps://hclips.com/embed/7435271/?source=1053265611 CertificateIssuerLet's Encrypt Subjecthcjs.nv7s.com Fingerprint9F:10:C5:13:C6:C4:42:EC:E4:D6:0C:56:9A:57:2D:E9:EA:11:77:A3 ValidityWed, 07 May 2025 02:32:25 GMT - Tue, 05 Aug 2025 02:32:24 GMT
File typeASCII text, with very long lines (30323) Hashbddf63e6942d5c53eb6e8977e612bf47 a3aa5fdac80a996704f41f3d07ac94e3161dff0c 6c02973f36040dc6d869b94c3015e4fe1bc62d40d4f7d03cd41383e3c427df83
GET /upd/20250414.131205.30324/static/assets/embed.css HTTP/1.1
Host: hcjs.nv7s.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hclips.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 11 May 2025 02:10:17 GMT
content-type: text/css
server: nginx
last-modified: Mon, 14 Apr 2025 13:12:05 GMT
vary: Accept-Encoding, Accept-Encoding
etag: W/"67fd09a5-7674"
expires: Fri, 25 Apr 2025 18:41:41 GMT
cache-control: max-age=1800
x-cache: HIT
content-encoding: gzip
x-cdn-host-id: ds5058
x-proxy-cache: HIT
access-control-allow-origin: *
X-Firefox-Spdy: h2
|
|
| hcjs.nv7s.com/wu6c4jaq3r/oiewh9pl0v.js | 45.133.44.25 | 200 OK | 124 kB |
URL GET hcjs.nv7s.com/wu6c4jaq3r/oiewh9pl0v.js IP 45.133.44.25:443
ASN#39572 DataWeb Global Group B.V.
Requested byhttps://hclips.com/embed/7435271/?source=1053265611 CertificateIssuerLet's Encrypt Subjecthcjs.nv7s.com Fingerprint9F:10:C5:13:C6:C4:42:EC:E4:D6:0C:56:9A:57:2D:E9:EA:11:77:A3 ValidityWed, 07 May 2025 02:32:25 GMT - Tue, 05 Aug 2025 02:32:24 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (65534), with no line terminators Size124 kB (124276 bytes) Hash4d7f37c594044418d898d7f997e989a4 29f849f05c4fb8f85078bf55a31a1900e2439455 afb6e2eb9366a74ac583766c35d7b46e68df4f5b81cb4eec7a65aaba70f15163
GET /wu6c4jaq3r/oiewh9pl0v.js HTTP/1.1
Host: hcjs.nv7s.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hclips.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 11 May 2025 02:10:17 GMT
content-type: application/javascript; charset=utf-8
server: nginx
last-modified: Sat, 10 May 2025 23:59:34 GMT
vary: Accept-Encoding, Accept-Encoding
etag: W/"681fe866-1e574"
expires: Sun, 11 May 2025 00:29:34 GMT
cache-control: max-age=1800
x-cache: HIT
content-encoding: gzip
x-cdn-host-id: ds5058
x-proxy-cache: HIT
access-control-allow-origin: *
X-Firefox-Spdy: h2
|
|
| fp.metricswpsh.com/fp?tag_id=821 | 157.90.84.242 | 200 OK | 60 B |
URL POST fp.metricswpsh.com/fp?tag_id=821 IP 157.90.84.242:443
ASN#24940 Hetzner Online GmbH
Requested byhttps://hclips.com/embed/7435271/?source=1053265611 CertificateIssuerLet's Encrypt Subjectnotification.tubecup.net Fingerprint6A:AF:05:21:7E:87:22:9C:BB:20:DB:34:F6:0A:88:06:79:E3:A0:78 ValidityThu, 17 Apr 2025 02:58:33 GMT - Wed, 16 Jul 2025 02:58:32 GMT
Hashf70144a999de9a4466217c06015bc215 80c4e448a3fc5f2e1ecd89faa2ecd64e3d60cc68 be6b7108af31688e442b429e552bd19fff8fbe851731358342e4d79d55678218
POST /fp?tag_id=821 HTTP/1.1
Host: fp.metricswpsh.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json;charset=utf-8
Content-Length: 1980
Origin: https://hclips.com
DNT: 1
Connection: keep-alive
Referer: https://hclips.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.20.1
Date: Sun, 11 May 2025 02:10:18 GMT
Content-Type: application/json; charset=UTF-8
Content-Length: 60
Connection: keep-alive
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://hclips.com
Set-Cookie: id=15780782020630366501; Expires=Mon, 11 May 2026 02:10:18 GMT; Secure; SameSite=None
Vary: Origin
|
|
| ip409015555.ahcdn.com/key=3xlnFWW5jUlHJYtBQeaXIA,s=,end=1747015819,limit=3/data=71W8bB/state=aCAHW1oq/buffer=267000:764487,204.5/speed=747592/referer=none,.hclips.com,.gstatic.com/reftag=059555948/ssd4/121/9/201972749/hclips/c2/videos/7435000/7435271/7435271_hq.mp4 | 45.143.251.159 | 206 Partial Content | 442 kB |
URL GET ip409015555.ahcdn.com/key=3xlnFWW5jUlHJYtBQeaXIA,s=,end=1747015819,limit=3/data=71W8bB/state=aCAHW1oq/buffer=267000:764487,204.5/speed=747592/referer=none,.hclips.com,.gstatic.com/reftag=059555948/ssd4/121/9/201972749/hclips/c2/videos/7435000/7435271/7435271_hq.mp4 IP 45.143.251.159:443
Requested byhttps://hclips.com/embed/7435271/?source=1053265611 CertificateIssuerGoGetSSL Subject*.ahcdn.com FingerprintFD:4D:78:14:4B:62:CB:76:11:BA:B1:5E:4C:75:8F:01:5B:BB:96:2F ValidityTue, 28 May 2024 00:00:00 GMT - Fri, 27 Jun 2025 23:59:59 GMT
File typeISO Media, MP4 Base Media v1 [ISO 14496-12:2003] Size442 kB (442170 bytes) Hasha65aee804311442341eb120dc4d367e0 39b6efc2898f8c59bcdffbc42311e99b290e035e 52197d4d358ff94dd2c4e7963a42f08963e30769052e52afaef6fc0c51098885
GET /key=3xlnFWW5jUlHJYtBQeaXIA,s=,end=1747015819,limit=3/data=71W8bB/state=aCAHW1oq/buffer=267000:764487,204.5/speed=747592/referer=none,.hclips.com,.gstatic.com/reftag=059555948/ssd4/121/9/201972749/hclips/c2/videos/7435000/7435271/7435271_hq.mp4 HTTP/1.1
Host: ip409015555.ahcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br, identity
Range: bytes=0-
Referer: https://hclips.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 206 Partial Content
server: nginx/1.22.0
date: Sun, 11 May 2025 02:10:19 GMT
content-type: video/mp4
content-length: 50965844
last-modified: Sun, 05 Jul 2020 07:06:33 GMT
access-control-allow-headers: *
access-control-allow-methods: GET,POST,OPTIONS
access-control-allow-origin: *
access-control-expose-headers: Server,Range,Content-Length,Content-Range
etag: "5f017bf9-309ad54"
expires: Sun, 11 May 2025 04:10:19 GMT
cache-control: max-age=7200, private
content-range: bytes 0-50965843/50965844
X-Firefox-Spdy: h2
|
|
| cdn.tapioni.com/ip-push.js | 104.22.38.71 | 200 OK | 153 kB |
URL GET cdn.tapioni.com/ip-push.js IP 104.22.38.71:443
Requested byhttps://18xxx.name/ga/tubes/a26398dca6f47b49876cbaffbc9954f9/index.php CertificateIssuerGoogle Trust Services Subjectcdn.tapioni.com Fingerprint2F:19:09:F1:95:75:EB:3B:D1:F5:B5:EE:E7:26:67:59:AE:9D:D6:4D ValiditySun, 23 Mar 2025 20:01:06 GMT - Sat, 21 Jun 2025 21:01:04 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (65503), with no line terminators Size153 kB (153442 bytes) Hasha36ae9c7a288c33f8152523c71b1383b 69db81da3b0555d43ca9a25da9bc8c112801aedf 748b5dac93cb26cb96b6c56ddf1ff3e3c209f04016dd682c1dcaae68af049cef
GET /ip-push.js HTTP/1.1
Host: cdn.tapioni.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://18xxx.name/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 11 May 2025 02:10:16 GMT
content-type: application/javascript
content-length: 47151
last-modified: Thu, 10 Apr 2025 14:35:30 GMT
vary: Accept-Encoding
etag: "67f7d732-b82f"
content-encoding: gzip
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
cf-cache-status: HIT
age: 1097752
accept-ranges: bytes
server: cloudflare
cf-ray: 93de23948ac692b6-CPH
X-Firefox-Spdy: h2
|
|
| 18xxx.name/image/0/738_barely.jpg | 172.67.150.176 | 200 OK | 20 kB |
URL GET 18xxx.name/image/0/738_barely.jpg IP 172.67.150.176:443
Requested byhttps://18xxx.name/ga/tubes/a26398dca6f47b49876cbaffbc9954f9/index.php CertificateIssuerGoogle Trust Services Subject18xxx.name FingerprintFD:8E:D2:10:74:30:5E:80:CA:22:A3:CC:B3:86:A1:B9:0F:FB:08:4B ValidityTue, 18 Mar 2025 04:39:10 GMT - Mon, 16 Jun 2025 05:37:50 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 320x240, components 3 Hash03626b172bd5ec990e17aeaca5189dea 9bf9e26fd79700d3fcc85c5769cc3f637cbf744c 73ac6e2b4c081aaf56eb02b5ce7da3d1ec8580de42bc91b5d6a5c9ed777302f1
GET /image/0/738_barely.jpg HTTP/1.1
Host: 18xxx.name
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://18xxx.name/ga/tubes/a26398dca6f47b49876cbaffbc9954f9/index.php
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 11 May 2025 02:10:16 GMT
content-type: image/jpeg
content-length: 20031
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=t2pVSr1Px8ioEKsVp9zYG3KydsoMtckKGzT%2BTtWNnKJFqWNM7nNB5W7wQjG54wPbkyLX4MKf7W55ORJxbCNdXKcKXG%2BrMOEWwOWB3xKsU602oBJhCD8tP0MHz7gj"}],"group":"cf-nel","max_age":604800}
last-modified: Sun, 05 Dec 2021 03:15:36 GMT
etag: "61ac2ed8-4e3f"
expires: Thu, 29 May 2025 15:44:01 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 987975
accept-ranges: bytes
cf-ray: 93de23970f2a56aa-OSL
server: cloudflare
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2414&min_rtt=549&rtt_var=1452&sent=231&recv=249&lost=0&retrans=0&sent_bytes=39805&recv_bytes=16206&delivery_rate=7247125&cwnd=24000&unsent_bytes=0&cid=c524eddc9b389244&ts=713&x=16"
|
|
| 18xxx.name/image/1/122_spoken.jpg | 172.67.150.176 | 200 OK | 16 kB |
URL GET 18xxx.name/image/1/122_spoken.jpg IP 172.67.150.176:443
Requested byhttps://18xxx.name/ga/tubes/a26398dca6f47b49876cbaffbc9954f9/index.php CertificateIssuerGoogle Trust Services Subject18xxx.name FingerprintFD:8E:D2:10:74:30:5E:80:CA:22:A3:CC:B3:86:A1:B9:0F:FB:08:4B ValidityTue, 18 Mar 2025 04:39:10 GMT - Mon, 16 Jun 2025 05:37:50 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 320x240, components 3 Hashdebf579744d9a824e51d2d744ac0daa8 fab1e05912ea9fead33eb8198cc9d20c10561f90 73caedd421ec349fa61a5609e3ec3fdff21634e56483c44a3619804e7f9bd182
GET /image/1/122_spoken.jpg HTTP/1.1
Host: 18xxx.name
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://18xxx.name/ga/tubes/a26398dca6f47b49876cbaffbc9954f9/index.php
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 11 May 2025 02:10:16 GMT
content-type: image/jpeg
content-length: 15675
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=yrfeCY5aphxkEDyDf0DguSSDCme%2BuqHkYidjEuMhC%2BeD4C909A2HoVc4crlBj%2FS1FsBxXxnvSqbgfxSAcMzAshxsrUMmXdoalo2%2F%2B8bgZvKuf9FydYlbkh%2BBDpFr"}],"group":"cf-nel","max_age":604800}
last-modified: Sun, 05 Dec 2021 03:16:14 GMT
etag: "61ac2efe-3d3b"
expires: Sat, 31 May 2025 21:30:03 GMT
cache-control: max-age=31536000
accept-ranges: bytes
age: 794413
cf-cache-status: HIT
cf-ray: 93de23970f3156aa-OSL
server: cloudflare
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2076&min_rtt=549&rtt_var=1103&sent=325&recv=254&lost=0&retrans=0&sent_bytes=143977&recv_bytes=16981&delivery_rate=15297746&cwnd=96000&unsent_bytes=0&cid=c524eddc9b389244&ts=719&x=16"
|
|
| 18xxx.name/image/8/951_ultra-korean.jpg | 172.67.150.176 | 200 OK | 12 kB |
URL GET 18xxx.name/image/8/951_ultra-korean.jpg IP 172.67.150.176:443
Requested byhttps://18xxx.name/ga/tubes/a26398dca6f47b49876cbaffbc9954f9/index.php CertificateIssuerGoogle Trust Services Subject18xxx.name FingerprintFD:8E:D2:10:74:30:5E:80:CA:22:A3:CC:B3:86:A1:B9:0F:FB:08:4B ValidityTue, 18 Mar 2025 04:39:10 GMT - Mon, 16 Jun 2025 05:37:50 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 320x240, components 3 Hashaf0819912945861427ddb75918d6b930 75b892b7189c13b0c03f240186dde6dcb80e3aec d1591dfc9e530df55bed0d6e7e8a8a960d0c68d545e60d38f1f2e65df80af9b4
GET /image/8/951_ultra-korean.jpg HTTP/1.1
Host: 18xxx.name
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://18xxx.name/ga/tubes/a26398dca6f47b49876cbaffbc9954f9/index.php
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 11 May 2025 02:10:16 GMT
content-type: image/jpeg
content-length: 11553
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=muHd8NyeZyjH4q8mmRXlI1szSYwL3QDHS3n2p3prTUVacKDACsR7sSqndg3hllOw%2BNKrfDUmOQPWYcBnOXtr1xC44UHT%2BTITHHksQNH7joF8dSLwAr67uqLiJ9WG"}],"group":"cf-nel","max_age":604800}
last-modified: Sun, 05 Dec 2021 04:30:56 GMT
etag: "61ac4080-2d21"
expires: Sat, 07 Jun 2025 22:47:30 GMT
cache-control: max-age=31536000
accept-ranges: bytes
age: 184966
cf-cache-status: HIT
cf-ray: 93de23970f3256aa-OSL
server: cloudflare
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2076&min_rtt=549&rtt_var=1103&sent=340&recv=255&lost=0&retrans=0&sent_bytes=160708&recv_bytes=17866&delivery_rate=15297746&cwnd=96000&unsent_bytes=0&cid=c524eddc9b389244&ts=723&x=16"
|
|
| bullionglidingscuttle.com/lv/esnk/2005586/code.js | 94.242.247.20 | 200 OK | 170 kB |
URL GET bullionglidingscuttle.com/lv/esnk/2005586/code.js IP 94.242.247.20:443
Requested byhttps://a.labadena.com/api/spots/458877?p=1 CertificateIssuerBuypass AS-983163327 Subject FingerprintC1:41:36:2B:0F:2D:49:78:DA:E4:70:2C:6A:68:9E:0C:A4:8A:8D:5F ValidityTue, 04 Mar 2025 00:04:45 GMT - Sat, 30 Aug 2025 21:59:00 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Size170 kB (169482 bytes) Hash73a579da8bdda1d9b8c3b4b93407f827 b087baf40c6f9ea42e3e9c91ebb791c4353dd536 365345bbc7b088fc1d1d82195b691f162dc9dcd56da0ab3abbf092edbe33d8dd
GET /lv/esnk/2005586/code.js HTTP/1.1
Host: bullionglidingscuttle.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://a.labadena.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 11 May 2025 02:10:17 GMT
content-type: application/javascript; charset=utf-8
last-modified: Mon, 05 May 2025 08:59:21 GMT
vary: Accept-Encoding
etag: W/"68187de9-296b2"
x-js-ab2: current
timing-allow-origin: *
accept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| bullionglidingscuttle.com/get/2005586?zoneid=2005586&pid=__clb-2005586_1&jp=_clbfzrjuuyiulsuwesyham&dr=52&nojs=0&abvar=0&febuild=1.0.541&t=0&wcks=1&wgl=1&cnvs=1&os=0&tz=UTC&ss=1&ls=1&bb=0&cti=0&fn=3&es=13&ge=2&th=&plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF&lang=en-US&pf=Linux%20x86_64&cd=24&vcv=Mesa&vcn=llvmpipe&psr=MVZmHPlaHR0cHM6Ly8xOHh4eC5uYW1lLw&ix=0&x=801&y=801&md=0&psu=rXCmTX9aHR0cHM6Ly9hLmxhYmFkZW5hLmNvbS9hcGkvc3BvdHMvNDU4ODc3P3A9MQ&afid=5181036347102720&eclog=0&seu=0jBMkA5aHR0cHM6Ly8xOHh4eC5uYW1lLw&snc=0&ssc=0&vp=0&dto=2&im=1&noch=1&de=0&cs=5&bp=0&uf=0&freq=0 | 94.242.247.20 | 200 OK | 6.9 kB |
URL GET bullionglidingscuttle.com/get/2005586?zoneid=2005586&pid=__clb-2005586_1&jp=_clbfzrjuuyiulsuwesyham&dr=52&nojs=0&abvar=0&febuild=1.0.541&t=0&wcks=1&wgl=1&cnvs=1&os=0&tz=UTC&ss=1&ls=1&bb=0&cti=0&fn=3&es=13&ge=2&th=&plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF&lang=en-US&pf=Linux%20x86_64&cd=24&vcv=Mesa&vcn=llvmpipe&psr=MVZmHPlaHR0cHM6Ly8xOHh4eC5uYW1lLw&ix=0&x=801&y=801&md=0&psu=rXCmTX9aHR0cHM6Ly9hLmxhYmFkZW5hLmNvbS9hcGkvc3BvdHMvNDU4ODc3P3A9MQ&afid=5181036347102720&eclog=0&seu=0jBMkA5aHR0cHM6Ly8xOHh4eC5uYW1lLw&snc=0&ssc=0&vp=0&dto=2&im=1&noch=1&de=0&cs=5&bp=0&uf=0&freq=0 IP 94.242.247.20:443
Requested byhttps://a.labadena.com/api/spots/458877?p=1 CertificateIssuerBuypass AS-983163327 Subject FingerprintC1:41:36:2B:0F:2D:49:78:DA:E4:70:2C:6A:68:9E:0C:A4:8A:8D:5F ValidityTue, 04 Mar 2025 00:04:45 GMT - Sat, 30 Aug 2025 21:59:00 GMT
File typeASCII text, with very long lines (6893), with no line terminators Hash6fd52e2270ba109d5b80b6f629252fe5 cf245cf04967ce68b8385875a2ba32a486e0bb4e fe43befc8a4b41c4613839e086947ddae4dae08e2ec6194d75c1b6135ae1c0ba
GET /get/2005586?zoneid=2005586&pid=__clb-2005586_1&jp=_clbfzrjuuyiulsuwesyham&dr=52&nojs=0&abvar=0&febuild=1.0.541&t=0&wcks=1&wgl=1&cnvs=1&os=0&tz=UTC&ss=1&ls=1&bb=0&cti=0&fn=3&es=13&ge=2&th=&plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF&lang=en-US&pf=Linux%20x86_64&cd=24&vcv=Mesa&vcn=llvmpipe&psr=MVZmHPlaHR0cHM6Ly8xOHh4eC5uYW1lLw&ix=0&x=801&y=801&md=0&psu=rXCmTX9aHR0cHM6Ly9hLmxhYmFkZW5hLmNvbS9hcGkvc3BvdHMvNDU4ODc3P3A9MQ&afid=5181036347102720&eclog=0&seu=0jBMkA5aHR0cHM6Ly8xOHh4eC5uYW1lLw&snc=0&ssc=0&vp=0&dto=2&im=1&noch=1&de=0&cs=5&bp=0&uf=0&freq=0 HTTP/1.1
Host: bullionglidingscuttle.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://a.labadena.com/
Cookie: cart=1; cart_p=2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 11 May 2025 02:10:18 GMT
content-type: text/javascript; charset=utf-8
vary: Accept-Encoding
x-route-id: config
set-cookie: CHCK=1; Path=/; Expires=Sun, 14 Jun 2026 02:10:18 GMT; Secure; SameSite=None
UID=2505102110d7700ac724a54d4e8acf4e5f6e; Path=/; Expires=Sun, 14 Jun 2026 02:10:18 GMT; Secure; SameSite=None
content-encoding: gzip
timing-allow-origin: *
accept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
X-Firefox-Spdy: h2
|
|
| playhubconnect.com/bn/bf3/7d0/56d/bf37d056d84d92ce50d337c48e4cb6ab143cda69.mp4 | 104.18.14.39 | 206 Partial Content | 953 kB |
URL GET playhubconnect.com/bn/bf3/7d0/56d/bf37d056d84d92ce50d337c48e4cb6ab143cda69.mp4 IP 104.18.14.39:443
Requested byhttps://a.labadena.com/api/spots/458877?p=1 CertificateIssuerGoogle Trust Services Subjectplayhubconnect.com Fingerprint41:34:43:06:D9:8E:33:32:9D:CF:FA:1D:6C:7F:F5:A2:43:0F:50:CC ValidityFri, 21 Mar 2025 15:11:05 GMT - Thu, 19 Jun 2025 16:11:01 GMT
File typeISO Media, MP4 v2 [ISO 14496-14] Size953 kB (952885 bytes) Hash87ef915cc39e1ca0204ebda8289b4f52 bf37d056d84d92ce50d337c48e4cb6ab143cda69 a5c2f77a616c7caf3801bb24f99ee6ac1c6cc2bc85c0d79f4224779e39a16249
GET /bn/bf3/7d0/56d/bf37d056d84d92ce50d337c48e4cb6ab143cda69.mp4 HTTP/1.1
Host: playhubconnect.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 206 Partial Content
date: Sun, 11 May 2025 02:10:18 GMT
content-type: video/mp4
content-length: 952885
x-amz-id-2: HD0L/UjDOsrgKzgLcNnxtcUoUtk/2Bg3WeJ4EerewbaHdRR76LfYt6HOb5OH9O/4njtj19Rgl+A=
x-amz-request-id: 01Z1A3SEZWF3GS1G
last-modified: Thu, 20 Mar 2025 14:21:13 GMT
etag: "87ef915cc39e1ca0204ebda8289b4f52"
x-amz-server-side-encryption: AES256
cf-cache-status: HIT
age: 337094
expires: Wed, 11 Jun 2025 02:10:18 GMT
cache-control: public, max-age=2678400
content-range: bytes 0-952884/952885
vary: Accept-Encoding
access-control-allow-origin: *
server: cloudflare
cf-ray: 93de23a04d90b4f1-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| 18xxx.name/image/1/065_fuckbox-s-xl.jpg | 172.67.150.176 | 200 OK | 21 kB |
URL GET 18xxx.name/image/1/065_fuckbox-s-xl.jpg IP 172.67.150.176:443
Requested byhttps://18xxx.name/ga/tubes/a26398dca6f47b49876cbaffbc9954f9/index.php CertificateIssuerGoogle Trust Services Subject18xxx.name FingerprintFD:8E:D2:10:74:30:5E:80:CA:22:A3:CC:B3:86:A1:B9:0F:FB:08:4B ValidityTue, 18 Mar 2025 04:39:10 GMT - Mon, 16 Jun 2025 05:37:50 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 320x240, components 3 Hash6510467e516192f46963b7e1f7e200b5 ac2b5e3b5279843630d1f0dd8f81d28291437e20 0ffda9ad8a85aa199c566ec5b4c3e01189abf9f0f76c71318f99baed5ccf4088
GET /image/1/065_fuckbox-s-xl.jpg HTTP/1.1
Host: 18xxx.name
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://18xxx.name/ga/tubes/a26398dca6f47b49876cbaffbc9954f9/index.php
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 11 May 2025 02:10:16 GMT
content-type: image/jpeg
content-length: 21346
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=IeE%2Fys3t%2FChIdDHkycf5emS1Dn7LmilLoacC28V7QcuutP%2Bsc6b5WWOgIxIMXmTlMbx7oEDOkYytsdWyiW0ovcfcIVV0Jp91MWDbPw4gZMboVDEoDnrLk8ECnv%2Fq"}],"group":"cf-nel","max_age":604800}
last-modified: Sun, 05 Dec 2021 03:16:09 GMT
etag: "61ac2ef9-5362"
expires: Thu, 29 May 2025 15:44:01 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 987975
accept-ranges: bytes
cf-ray: 93de2396ff2956aa-OSL
server: cloudflare
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2592&min_rtt=549&rtt_var=1726&sent=211&recv=246&lost=0&retrans=0&sent_bytes=17262&recv_bytes=15797&delivery_rate=137209&cwnd=12000&unsent_bytes=0&cid=c524eddc9b389244&ts=709&x=16"
|
|