5.9.154.211200 OK 1.2 kB URL User Request GET HTTP/2 IP 5.9.154.211:443
ASN #24940 Hetzner Online GmbH
Certificate IssuerLet's Encrypt
Subjectvampysecurity.com
FingerprintC6:A1:15:38:EC:F0:FD:5C:96:CA:61:8E:30:BC:E9:21:09:E0:D7:55
ValidityTue, 19 Sep 2023 14:25:10 GMT - Mon, 18 Dec 2023 14:25:09 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (2034), with CRLF line terminators
Hash 89d7e603a193e81069f691ab8450ee76
6b1c20e2aaa16f72ec1462c2ed124cc130d5114a
289a6e0cd87c229d6e37c88d65049849313005f401b95293ecc2fbfe2f90f856
GET /p.html HTTP/1.1
Host: vampysecurity.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/html
last-modified: Tue, 19 Sep 2023 20:12:00 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 1188
date: Tue, 19 Sep 2023 20:15:26 GMT
server: LiteSpeed
alt-svc: quic=":443"; ma=2592000; v="43,46", h3-Q043=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-25=":443"; ma=2592000, h3-27=":443"; ma=2592000
X-Firefox-Spdy: h2
vampysecurity.com/favicon.ico
5.9.154.211404 Not Found 1.2 kB URL GET HTTP/2 vampysecurity.com/favicon.ico
IP 5.9.154.211:443
ASN #24940 Hetzner Online GmbH
Requested by https://vampysecurity.com/p.html
Certificate IssuerLet's Encrypt
Subjectvampysecurity.com
FingerprintC6:A1:15:38:EC:F0:FD:5C:96:CA:61:8E:30:BC:E9:21:09:E0:D7:55
ValidityTue, 19 Sep 2023 14:25:10 GMT - Mon, 18 Dec 2023 14:25:09 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF, LF line terminators
Hash 0bde7d4b3da67537eaf9188e6f8049cf
64300fc482d01d38b40ab20e15960b6509665e5a
5dc1ae0b875dc0d78dbc5532226f5f31b762b4d1229984f605d27bf895ab6807
GET /favicon.ico HTTP/1.1
Host: vampysecurity.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vampysecurity.com/p.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 404 Not Found
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
pragma: no-cache
content-type: text/html
content-length: 1238
date: Tue, 19 Sep 2023 20:15:27 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131 471 B IP 142.250.74.131:0
Hash 02501299b6471a5e4339daa5f57b4196
0cc9096d5dfe4c1c9c2933ae99d50c04a2223a3b
5019878e6cce8c17b5b3777da2f5cf911b5c9b555941a4c1d333a8b41b654118
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 19 Sep 2023 20:15:27 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.131 472 B IP 142.250.74.131:0
Hash 7c6c4ab403868ce33ede1ab6647ba1f5
574286bad8cc750c13bae961e4ca9f949b7b0bab
2808d998194c57f0f000205adc947b346de85ce853383f4126c1bb0c868e647a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 19 Sep 2023 20:15:27 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
storage.googleapis.com/loadermain.appspot.com/main.js
172.217.21.187200 OK 21 kB URL GET HTTP/2 storage.googleapis.com/loadermain.appspot.com/main.js
IP 172.217.21.187:443
Requested by https://vampysecurity.com/p.html
Certificate IssuerGoogle Trust Services LLC
Subjectstorage.googleapis.com
FingerprintBD:9A:18:59:C7:3D:4E:32:D4:05:84:70:3B:5D:C1:98:50:EC:19:1C
ValidityMon, 14 Aug 2023 08:25:09 GMT - Mon, 06 Nov 2023 08:25:08 GMT
File type ASCII text, with very long lines (65112), with no line terminators
Hash e5cc93f67e7fc44e3f9eda8b1dad8516
c70fc73a4899ca8edbd6d0cc505f859cba2b730e
55c7d9630745864fae4bd3efb642f63e594b00ed02bef4b6aa991eab8cc01f42
GET /loadermain.appspot.com/main.js HTTP/1.1
Host: storage.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vampysecurity.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
x-guploader-uploadid: ADPycdvZqHjnBVHFIFg8ZvzSrQfOmEz1k7VK3BiLbpQrGJaeS9SrIcnkpaIrCmSbHkoxPCpkch793qI6WjCT2sGG3_Ux
x-goog-generation: 1534460919268918
x-goog-metageneration: 1
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 21051
content-encoding: gzip
x-goog-hash: crc32c=8/QDWA==, md5=n7bcCmIQ4SxM7uX0yxKtHQ==
x-goog-storage-class: STANDARD
accept-ranges: bytes
content-length: 21051
server: UploadServer
date: Tue, 19 Sep 2023 20:14:09 GMT
expires: Tue, 19 Sep 2023 20:19:09 GMT
cache-control: public, max-age=300
age: 78
last-modified: Thu, 16 Aug 2018 23:08:39 GMT
etag: "9fb6dc0a6210e12c4ceee5f4cb12ad1d"
content-type: application/javascript
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131 471 B IP 142.250.74.131:0
Hash 02501299b6471a5e4339daa5f57b4196
0cc9096d5dfe4c1c9c2933ae99d50c04a2223a3b
5019878e6cce8c17b5b3777da2f5cf911b5c9b555941a4c1d333a8b41b654118
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 19 Sep 2023 20:15:27 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
hqq.tv/available
190.115.19.71205 Reset Content 0 B IP 190.115.19.71:443
ASN #262254 DDOS-GUARD CORP.
Requested by https://vampysecurity.com/p.html
Certificate IssuerSectigo Limited
Subject*.hqq.tv
FingerprintEF:9C:01:2D:AB:B0:39:29:54:F3:4D:E9:72:E1:A2:B8:3B:3C:A9:D1
ValidityThu, 23 Mar 2023 00:00:00 GMT - Sat, 23 Mar 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
HEAD /available HTTP/1.1
Host: hqq.tv
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://vampysecurity.com
DNT: 1
Connection: keep-alive
Referer: https://vampysecurity.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 205 Reset Content
date: Tue, 19 Sep 2023 20:15:27 GMT
content-type: text/html; charset=UTF-8
content-length: 0
server: Google Frontend
cache-control: public, max-age=30
access-control-allow-origin: *
access-control-allow-headers: Range, SECURITY-KEY, Date, Etag, Cache-Control, x-requested-with, content-type
access-control-allow-methods: GET, POST, OPTIONS, HEAD
x-inferno-location: available
X-Firefox-Spdy: h2
blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgeKOEzsa8NLCYxsA13rpHld6pu5m_TEDQZYo9wXtZ6MdiL0PdYSrFWsB3SqhUttEx4-r-f53HMlVv8zNaANdGtMzGEJ5gT5dqmbW30wf3op1dIefZmDUR_qL2WDzvaddkJBPD6uhReuhIW0-cC8p_bp0p_QWlD8FGHcWIAnhs76nK5yfLluNK9mRrYxH3j/s320/1laG6ntAYpTOxx2H5Gh0Ku0HZON%20%281%29.jpg
142.250.74.97200 OK 14 kB URL GET HTTP/2 blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgeKOEzsa8NLCYxsA13rpHld6pu5m_TEDQZYo9wXtZ6MdiL0PdYSrFWsB3SqhUttEx4-r-f53HMlVv8zNaANdGtMzGEJ5gT5dqmbW30wf3op1dIefZmDUR_qL2WDzvaddkJBPD6uhReuhIW0-cC8p_bp0p_QWlD8FGHcWIAnhs76nK5yfLluNK9mRrYxH3j/s320/1laG6ntAYpTOxx2H5Gh0Ku0HZON%20%281%29.jpg
IP 142.250.74.97:443
Requested by https://vampysecurity.com/p.html
Certificate IssuerGoogle Trust Services LLC
Subject*.googleusercontent.com
FingerprintB5:F6:4B:DC:96:53:57:F2:9C:41:9E:96:E6:9A:00:DF:E1:A9:C9:76
ValidityMon, 14 Aug 2023 08:21:40 GMT - Mon, 06 Nov 2023 08:21:39 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 213x320, components 3\012- data
Hash 8e0e89deee75d628d2976448d45d36a7
547f262793c0205aa484c1abcfc4c8e28e07c973
f5b9a819a82e4aaaf0f95b9299b77aa93b39996be969b9aeafca6b65046f5099
GET /img/b/R29vZ2xl/AVvXsEgeKOEzsa8NLCYxsA13rpHld6pu5m_TEDQZYo9wXtZ6MdiL0PdYSrFWsB3SqhUttEx4-r-f53HMlVv8zNaANdGtMzGEJ5gT5dqmbW30wf3op1dIefZmDUR_qL2WDzvaddkJBPD6uhReuhIW0-cC8p_bp0p_QWlD8FGHcWIAnhs76nK5yfLluNK9mRrYxH3j/s320/1laG6ntAYpTOxx2H5Gh0Ku0HZON%20%281%29.jpg HTTP/1.1
Host: blogger.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vampysecurity.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/jpeg
vary: Origin
access-control-expose-headers: Content-Length
etag: "v4b0"
expires: Wed, 20 Sep 2023 20:15:28 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="1laG6ntAYpTOxx2H5Gh0Ku0HZON (1).jpg"
x-content-type-options: nosniff
date: Tue, 19 Sep 2023 20:15:28 GMT
server: fife
content-length: 14019
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131 472 B IP 142.250.74.131:0
Hash 7c6c4ab403868ce33ede1ab6647ba1f5
574286bad8cc750c13bae961e4ca9f949b7b0bab
2808d998194c57f0f000205adc947b346de85ce853383f4126c1bb0c868e647a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 19 Sep 2023 20:15:28 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
hqq.tv/ad/top/popunder.js
190.115.19.71200 OK 21 B URL GET HTTP/2 hqq.tv/ad/top/popunder.js
IP 190.115.19.71:443
ASN #262254 DDOS-GUARD CORP.
Requested by https://hqq.tv/player/embed_player.php?vid=cerq2noZQEzo&autoplay=none
Certificate IssuerSectigo Limited
Subject*.hqq.tv
FingerprintEF:9C:01:2D:AB:B0:39:29:54:F3:4D:E9:72:E1:A2:B8:3B:3C:A9:D1
ValidityThu, 23 Mar 2023 00:00:00 GMT - Sat, 23 Mar 2024 23:59:59 GMT
File type ASCII text, with no line terminators
Hash 533a813ddb8f84d7e018bf8e6296c44d
8c95af23d5dc502f1bc3395a6d2e339e696c0d3e
a499068cf858aa2cd9b077e2e354b6bf8435eaa8e44c2047f403c7283031977f
GET /ad/top/popunder.js HTTP/1.1
Host: hqq.tv
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hqq.tv/player/embed_player.php?vid=cerq2noZQEzo&autoplay=none
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Tue, 19 Sep 2023 20:15:28 GMT
content-type: application/javascript; charset=UTF-8
content-length: 21
last-modified: Wed, 15 Sep 2021 14:06:22 GMT
etag: "6141fdde-15"
access-control-allow-origin: *
access-control-allow-credentials: true
accessing-static: 1
cache-control: public, max-age=31536000, stale-while-revalidate=30, stale-if-error=30
pragma: cache
server: Google Frontend
x-cache-status-inferno-s: HIT
x-inferno-location: static
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131 472 B IP 142.250.74.131:0
Hash d96cb786152bb72d6f09e98ca29809ac
ffb619a4d1e6a68fd44ad11d4ed2ca52d7a88c37
16c972ddd6ec3ecd9c906cb4a6ece797e6b95416637da172a1d905fd38866995
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 19 Sep 2023 20:15:29 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.googletagmanager.com/ns.html?id=GTM-WBDQQ5
142.250.74.168 519 B URL GET www.googletagmanager.com/ns.html?id=GTM-WBDQQ5
IP 142.250.74.168:0
Requested by https://hqq.tv/player/embed_player.php?vid=cerq2noZQEzo&autoplay=none
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
FingerprintE6:F7:82:C1:10:AC:08:76:A1:97:70:B7:56:B7:EF:92:30:BA:1E:12
ValidityMon, 14 Aug 2023 08:16:28 GMT - Mon, 06 Nov 2023 08:16:27 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash afcacbcb7b30ef2b17a08deedd281624
019503c1da2b00caa9132e1162c8d48a1c09fea0
db0d8412c26ac5db8e9ff18758a7835abcbd1bfbe9e4989b57af3e5e7ccd2853
GET /ns.html?id=GTM-WBDQQ5 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hqq.tv/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
content-encoding: br
vary: *
date: Tue, 19 Sep 2023 20:15:29 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-embedder-policy: require-corp
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 519
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
unpkg.com/progressbar.js@1.1.0/dist/progressbar.min.js
104.16.122.175200 OK 8.8 kB URL GET HTTP/2 unpkg.com/progressbar.js@1.1.0/dist/progressbar.min.js
IP 104.16.122.175:443
Requested by https://hqq.tv/player/embed_player.php?vid=cerq2noZQEzo&autoplay=none
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintF7:B6:41:CA:15:FD:D1:0C:27:39:55:5D:C5:CE:3F:1C:A6:BB:9D:6F
ValidityTue, 02 May 2023 00:00:00 GMT - Wed, 01 May 2024 23:59:59 GMT
File type ASCII text, with very long lines (29325)
Hash 013916ab61482481d8de9742a0f95bee
546bb742502faa36f8c2bb954c2f028187660404
73cdea3ea0691f9ac4150be0c937dc2ee7eaa10205168a84e41ef5c9e05784b7
GET /progressbar.js@1.1.0/dist/progressbar.min.js HTTP/1.1
Host: unpkg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hqq.tv/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 19 Sep 2023 20:15:28 GMT
content-type: application/javascript; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=31536000
last-modified: Sat, 26 Oct 1985 08:15:00 GMT
etag: W/"7315-VGu3QlAvqjb4wruVTC8CgYdmBAQ"
via: 1.1 fly.io
fly-request-id: 01H95VE7RCY9662RS94HA2Y1WF-fra
cf-cache-status: HIT
age: 1667119
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 8094803db87d0b4d-OSL
content-encoding: br
X-Firefox-Spdy: h2
hqq.tv/js/d_check.js?34
190.115.19.71200 OK 1.6 kB IP 190.115.19.71:443
ASN #262254 DDOS-GUARD CORP.
Requested by https://hqq.tv/player/embed_player.php?vid=cerq2noZQEzo&autoplay=none
Certificate IssuerSectigo Limited
Subject*.hqq.tv
FingerprintEF:9C:01:2D:AB:B0:39:29:54:F3:4D:E9:72:E1:A2:B8:3B:3C:A9:D1
ValidityThu, 23 Mar 2023 00:00:00 GMT - Sat, 23 Mar 2024 23:59:59 GMT
File type gzip compressed data, from Unix\012- data
Hash e9919647c988a77a48e2f14c5e6bfde3
7b5ce524fa35f5ebe236f815376519b8e3a7d277
75c540e2f229523905bfdc6be8eef99261c6a87be8be6e75897f6ea7bb9d98eb
GET /js/d_check.js?34 HTTP/1.1
Host: hqq.tv
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hqq.tv/player/embed_player.php?vid=cerq2noZQEzo&autoplay=none
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Tue, 19 Sep 2023 20:15:28 GMT
content-type: application/javascript; charset=UTF-8
vary: Accept-Encoding
last-modified: Thu, 27 Feb 2020 14:57:53 GMT
etag: W/"5e57d8f1-d8a"
access-control-allow-origin: *
access-control-allow-credentials: true
accessing-static: 1
cache-control: public, max-age=31536000, stale-while-revalidate=30, stale-if-error=30
pragma: cache
content-encoding: gzip
server: Google Frontend
x-cache-status-inferno-s: HIT
x-inferno-location: static
X-Firefox-Spdy: h2
hqq.tv/cdn-cgi/trace
190.115.19.71404 Not Found 146 B IP 190.115.19.71:443
ASN #262254 DDOS-GUARD CORP.
Requested by https://hqq.tv/player/embed_player.php?vid=cerq2noZQEzo&autoplay=none
Certificate IssuerSectigo Limited
Subject*.hqq.tv
FingerprintEF:9C:01:2D:AB:B0:39:29:54:F3:4D:E9:72:E1:A2:B8:3B:3C:A9:D1
ValidityThu, 23 Mar 2023 00:00:00 GMT - Sat, 23 Mar 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 8eec510e57f5f732fd2cce73df7b73ef
3c0af39ecb3753c5fee3b53d063c7286019eac3b
55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0
GET /cdn-cgi/trace HTTP/1.1
Host: hqq.tv
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: https://hqq.tv/player/embed_player.php?vid=cerq2noZQEzo&autoplay=none
Cookie: uid=bJdDWXOnb-WSWNcANnIQLLTUwN7zLkLk
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 404 Not Found
date: Tue, 19 Sep 2023 20:15:29 GMT
content-type: text/html; charset=UTF-8
content-length: 146
x-origin-location: /
server: Google Frontend
x-cache-status-inferno: MISS
x-inferno-location: /
X-Firefox-Spdy: h2
hqq.tv/js/adv/fuckadblock.js?2
190.115.19.71200 OK 4.5 kB URL GET HTTP/2 hqq.tv/js/adv/fuckadblock.js?2
IP 190.115.19.71:443
ASN #262254 DDOS-GUARD CORP.
Requested by https://hqq.tv/player/embed_player.php?vid=cerq2noZQEzo&autoplay=none
Certificate IssuerSectigo Limited
Subject*.hqq.tv
FingerprintEF:9C:01:2D:AB:B0:39:29:54:F3:4D:E9:72:E1:A2:B8:3B:3C:A9:D1
ValidityThu, 23 Mar 2023 00:00:00 GMT - Sat, 23 Mar 2024 23:59:59 GMT
File type gzip compressed data, from Unix\012- data
Hash b18cd0622554ccbb7482c45fac68a66b
b4c5a413c06afa5e0c183b94414a22e0767a8716
55f444c0833f7738cd8a74d08e86345de4a76883241880ac34d26255a37762e7
GET /js/adv/fuckadblock.js?2 HTTP/1.1
Host: hqq.tv
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hqq.tv/player/embed_player.php?vid=cerq2noZQEzo&autoplay=none
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Tue, 19 Sep 2023 20:15:28 GMT
content-type: application/javascript; charset=UTF-8
vary: Accept-Encoding
last-modified: Tue, 27 Aug 2019 17:39:04 GMT
etag: W/"5d656ab8-369e"
access-control-allow-origin: *
access-control-allow-credentials: true
accessing-static: 1
cache-control: public, max-age=31536000, stale-while-revalidate=30, stale-if-error=30
pragma: cache
content-encoding: gzip
server: Google Frontend
x-cache-status-inferno-s: HIT
x-inferno-location: static
X-Firefox-Spdy: h2
alleviatepracticableaddicted.com/ab/0b/e2/ab0be2a44b7ecf91bdbd5cd360d84937.js
173.233.139.164200 OK 11 kB URL GET HTTP/1.1 alleviatepracticableaddicted.com/ab/0b/e2/ab0be2a44b7ecf91bdbd5cd360d84937.js
IP 173.233.139.164:443
Requested by https://hqq.tv/player/embed_player.php?vid=cerq2noZQEzo&autoplay=none
Certificate IssuerLet's Encrypt
Subjectalleviatepracticableaddicted.com
Fingerprint4C:AD:6C:A0:6B:4A:61:05:B8:D5:E6:3F:D0:E7:84:DA:F6:D2:4B:1B
ValidityWed, 30 Aug 2023 06:06:43 GMT - Tue, 28 Nov 2023 06:06:42 GMT
File type ASCII text, with very long lines (32149), with no line terminators
Hash c17a2d634f963f35f0ba12a300c54c65
11ac698e1f6e9e76de239a1d559ccab1b7731383
bb0eab68f62be3e345673936ac16e6bce4d0d1713808a3ec3d3762eb6e6bfecd
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /ab/0b/e2/ab0be2a44b7ecf91bdbd5cd360d84937.js HTTP/1.1
Host: alleviatepracticableaddicted.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hqq.tv/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Tue, 19 Sep 2023 20:15:29 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 38e05a0be6e565faf30eb64a6f301f36
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
unpkg.com/jquery@2.2.4/dist/jquery.min.js
104.16.122.175200 OK 31 kB URL GET HTTP/2 unpkg.com/jquery@2.2.4/dist/jquery.min.js
IP 104.16.122.175:443
Requested by https://hqq.tv/player/embed_player.php?vid=cerq2noZQEzo&autoplay=none
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintF7:B6:41:CA:15:FD:D1:0C:27:39:55:5D:C5:CE:3F:1C:A6:BB:9D:6F
ValidityTue, 02 May 2023 00:00:00 GMT - Wed, 01 May 2024 23:59:59 GMT
File type ASCII text, with very long lines (32065)
Hash 2f6b11a7e914718e0290410e85366fe9
69bb69e25ca7d5ef0935317584e6153f3fd9a88c
05b85d96f41fff14d8f608dad03ab71e2c1017c2da0914d7c59291bad7a54f8e
GET /jquery@2.2.4/dist/jquery.min.js HTTP/1.1
Host: unpkg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hqq.tv/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 19 Sep 2023 20:15:28 GMT
content-type: application/javascript; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=31536000
last-modified: Fri, 20 May 2016 17:24:42 GMT
etag: W/"14e4a-abtp4lyn1e8JNTF1hOYVPz/ZqIw"
via: 1.1 fly.io
fly-request-id: 01H95VE7Q2BRB80FHP0FAHGCCE-fra
cf-cache-status: HIT
age: 1667121
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 8094803dc8950b4d-OSL
content-encoding: br
X-Firefox-Spdy: h2
hqq.tv/js/embed.220.js?736
190.115.19.71200 OK 47 kB URL GET HTTP/2 hqq.tv/js/embed.220.js?736
IP 190.115.19.71:443
ASN #262254 DDOS-GUARD CORP.
Requested by https://hqq.tv/player/embed_player.php?vid=cerq2noZQEzo&autoplay=none
Certificate IssuerSectigo Limited
Subject*.hqq.tv
FingerprintEF:9C:01:2D:AB:B0:39:29:54:F3:4D:E9:72:E1:A2:B8:3B:3C:A9:D1
ValidityThu, 23 Mar 2023 00:00:00 GMT - Sat, 23 Mar 2024 23:59:59 GMT
File type gzip compressed data, from Unix\012- data
Hash 8a4115e4abbbfd7cb8b7f4d09f2b81b2
f0069a05f825011905d2ebae3563ca6f7b89086d
1e84a45b1520f3c7d09d1bd238e90beb29babf394f2671c65bb18945276cffb5
GET /js/embed.220.js?736 HTTP/1.1
Host: hqq.tv
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hqq.tv/player/embed_player.php?vid=cerq2noZQEzo&autoplay=none
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Tue, 19 Sep 2023 20:15:28 GMT
content-type: application/javascript; charset=UTF-8
vary: Accept-Encoding
last-modified: Tue, 12 Sep 2023 07:07:10 GMT
etag: W/"65000e1e-2a0d9"
access-control-allow-origin: *
access-control-allow-credentials: true
accessing-static: 1
cache-control: public, max-age=31536000, stale-while-revalidate=30, stale-if-error=30
pragma: cache
content-encoding: gzip
server: Google Frontend
x-cache-status-inferno-s: HIT
x-inferno-location: static
X-Firefox-Spdy: h2
sadjklq.com/f.php?sid=212040
104.21.36.185200 OK 504 B URL GET HTTP/3 sadjklq.com/f.php?sid=212040
IP 104.21.36.185:443
Requested by https://hqq.tv/player/embed_player.php?vid=cerq2noZQEzo&autoplay=none
Certificate IssuerGoogle Trust Services LLC
Subjectsadjklq.com
Fingerprint03:55:B4:66:14:CE:71:B6:7F:3C:7A:E9:42:BC:9D:AB:38:B4:EF:08
ValidityThu, 27 Jul 2023 21:28:08 GMT - Wed, 25 Oct 2023 21:28:07 GMT
Hash ae7a29dec15c30789d724255fe68438c
9f7ce5b152aaa22cece0c2758e09555ae423c7e0
cd08a30c737b7cfb5ad84abaab3f6e8db542d8e7d7e9c471dbd8cc1026eb5a28
GET /f.php?sid=212040 HTTP/1.1
Host: sadjklq.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hqq.tv/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 19 Sep 2023 20:15:29 GMT
content-type: text/html; charset=UTF-8
x-powered-by: PHP/7.1.33
cache-control: no-store, no-cache, must-revalidate, max-age=0
x-robots-tag: noindex
pragma: no-cache
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=mshNV9Xob7%2FjeXV0%2B92foDXFtw%2BIv%2FAwJ51meWktOl3CkN1HHUyjwJB3BKmn34YI%2BqWKe99RtJIGk6TFpij%2BUmahN5UXhcT04%2Bs5xGezYXiYNy4yrgBpf7HprlSd8w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 809480413c5b56b4-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
newcomerbenchlilac.com/f9/f0/4e/f9f04e429487bb9ba54c1aa49ea7bed4.js
173.233.137.52200 OK 29 kB URL GET HTTP/1.1 newcomerbenchlilac.com/f9/f0/4e/f9f04e429487bb9ba54c1aa49ea7bed4.js
IP 173.233.137.52:443
Requested by https://hqq.tv/player/embed_player.php?vid=cerq2noZQEzo&autoplay=none
Certificate IssuerLet's Encrypt
Subjectnewcomerbenchlilac.com
Fingerprint6A:A8:90:B7:2E:D1:51:00:7F:F9:06:31:77:47:50:4F:52:ED:75:DA
ValidityThu, 14 Sep 2023 07:13:38 GMT - Wed, 13 Dec 2023 07:13:37 GMT
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (65536), with no line terminators
Hash b39ba754b322d7a1523505228d0178c1
a18cb727142759c5e27d5c8b0c9e4bf4d348e4ec
2354ca2e3f3087b28f28c36c07f4b415d1a5372e51b86904e5b5583fd48fd59a
GET /f9/f0/4e/f9f04e429487bb9ba54c1aa49ea7bed4.js HTTP/1.1
Host: newcomerbenchlilac.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hqq.tv/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Tue, 19 Sep 2023 20:15:30 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: ef0c8a756a2fe1f86b2643a7a04281d9
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
newcomerbenchlilac.com/sbar.json?key=ab0be2a44b7ecf91bdbd5cd360d84937&uuid=1136654d-27af-4075-98d5-3548bd5e6f96%3A2%3A1
173.233.137.52200 OK 0 B URL GET HTTP/1.1 newcomerbenchlilac.com/sbar.json?key=ab0be2a44b7ecf91bdbd5cd360d84937&uuid=1136654d-27af-4075-98d5-3548bd5e6f96%3A2%3A1
IP 173.233.137.52:443
Requested by https://hqq.tv/player/embed_player.php?vid=cerq2noZQEzo&autoplay=none
Certificate IssuerLet's Encrypt
Subjectnewcomerbenchlilac.com
Fingerprint6A:A8:90:B7:2E:D1:51:00:7F:F9:06:31:77:47:50:4F:52:ED:75:DA
ValidityThu, 14 Sep 2023 07:13:38 GMT - Wed, 13 Dec 2023 07:13:37 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sbar.json?key=ab0be2a44b7ecf91bdbd5cd360d84937&uuid=1136654d-27af-4075-98d5-3548bd5e6f96%3A2%3A1 HTTP/1.1
Host: newcomerbenchlilac.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://hqq.tv
DNT: 1
Connection: keep-alive
Referer: https://hqq.tv/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Tue, 19 Sep 2023 20:15:30 GMT
Content-Length: 0
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://hqq.tv
Access-Control-Allow-Origin: https://hqq.tv
Access-Control-Allow-Credentials: true
Set-Cookie: u_pl=17334947; expires=Wed, 20 Sep 2023 20:15:30 GMT; secure; SameSite=None
uid_id2=1136654d-27af-4075-98d5-3548bd5e6f96:2:1; expires=Tue, 26 Sep 2023 20:15:30 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 814deaf3caac37692f5c415b0f18fe51
Strict-Transport-Security: max-age=0; includeSubdomains
friendshipmale.com/sfp.js
172.64.100.24200 OK 55 kB URL GET HTTP/3 friendshipmale.com/sfp.js
IP 172.64.100.24:443
Requested by https://hqq.tv/player/embed_player.php?vid=cerq2noZQEzo&autoplay=none
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint08:6F:D8:CB:9E:0C:0A:98:2E:C5:CD:21:8E:0B:76:2B:50:6F:B6:37
ValiditySat, 18 Feb 2023 00:00:00 GMT - Sat, 17 Feb 2024 23:59:59 GMT
File type Unicode text, UTF-8 text, with very long lines (65529), with no line terminators
Hash 2d0450888479d4ddda305bd96206b240
5b4595aab1cd3f854718e05db9be0c65a12ab2f6
44de073e74ff24c6b1c0fe1f3ac5b33d793560e85ef24fb6ce89e76c2cf90af6
GET /sfp.js HTTP/1.1
Host: friendshipmale.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hqq.tv/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 19 Sep 2023 20:15:30 GMT
content-type: application/javascript; charset=utf-8
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
access-control-allow-origin: *
expires: Thu, 01 Jan 1970 00:00:01 GMT
cache-control: max-age=14400
x-request-id: f475e9dbf6a5ab7d22e25f2bb05cdca8
strict-transport-security: max-age=0; includeSubdomains
cf-cache-status: EXPIRED
last-modified: Tue, 19 Sep 2023 20:15:30 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=XSNqnRy5jn9xR0nCoLhL912fM1o%2FBgsgZKx76vcCkffQsQYBOUN3OSXXCCggrqWDTLyDYya8Xb8z%2FSILjOmQIi%2BjuXYfThJrLaIrsHO3dBMk%2F6QHJ%2B%2BoqVA0Ns%2Fk5jUocFroPRM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 809480452a0a99d5-CDG
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
sighstab.com/pixel/purst?dl=0&th=0&sc=0&rs=2041&rd=2041&fd=550&bv=22.10.v.10&tmpl=136
173.233.137.44200 OK 0 B URL GET HTTP/1.1 sighstab.com/pixel/purst?dl=0&th=0&sc=0&rs=2041&rd=2041&fd=550&bv=22.10.v.10&tmpl=136
IP 173.233.137.44:443
Requested by https://hqq.tv/player/embed_player.php?vid=cerq2noZQEzo&autoplay=none
Certificate IssuerLet's Encrypt
Subjectsighstab.com
Fingerprint3C:95:67:43:EC:E4:6C:E8:87:26:A1:5B:CF:E0:BC:DC:BB:CC:C2:64
ValidityThu, 14 Sep 2023 07:35:52 GMT - Wed, 13 Dec 2023 07:35:51 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pixel/purst?dl=0&th=0&sc=0&rs=2041&rd=2041&fd=550&bv=22.10.v.10&tmpl=136 HTTP/1.1
Host: sighstab.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hqq.tv/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Tue, 19 Sep 2023 20:15:30 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
hqq.tv/ad/banner/_adsense_/_adserver/_adview_.ad.json?adzone=top&adsize=300x250&advid=72597647
190.115.19.71200 OK 2 B URL GET HTTP/2 hqq.tv/ad/banner/_adsense_/_adserver/_adview_.ad.json?adzone=top&adsize=300x250&advid=72597647
IP 190.115.19.71:443
ASN #262254 DDOS-GUARD CORP.
Requested by https://hqq.tv/player/embed_player.php?vid=cerq2noZQEzo&autoplay=none
Certificate IssuerSectigo Limited
Subject*.hqq.tv
FingerprintEF:9C:01:2D:AB:B0:39:29:54:F3:4D:E9:72:E1:A2:B8:3B:3C:A9:D1
ValidityThu, 23 Mar 2023 00:00:00 GMT - Sat, 23 Mar 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash d751713988987e9331980363e24189ce
97d170e1550eee4afc0af065b78cda302a97674c
4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
GET /ad/banner/_adsense_/_adserver/_adview_.ad.json?adzone=top&adsize=300x250&advid=72597647 HTTP/1.1
Host: hqq.tv
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hqq.tv/player/embed_player.php?vid=cerq2noZQEzo&autoplay=none
Cookie: uid=bJdDWXOnb-WSWNcANnIQLLTUwN7zLkLk; dom3ic8zudi28v8lr6fgphwffqoz0j6c=1136654d-27af-4075-98d5-3548bd5e6f96%3A2%3A1; sb_main_ab0be2a44b7ecf91bdbd5cd360d84937=1; sb_count_ab0be2a44b7ecf91bdbd5cd360d84937=1; pbpr0tpuw4isk85t8yg3jb2lj5vqf=newcomerbenchlilac.com
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Tue, 19 Sep 2023 20:15:30 GMT
content-type: application/json
content-length: 2
server: Google Frontend
access-control-allow-origin: *
x-inferno-location: banner
X-Firefox-Spdy: h2
hqq.tv/ad/banner/_adsense_/_adserver/_adview_.ad.json?adzone=top&adsize=300x250&advid=55483814
190.115.19.71200 OK 2 B URL GET HTTP/2 hqq.tv/ad/banner/_adsense_/_adserver/_adview_.ad.json?adzone=top&adsize=300x250&advid=55483814
IP 190.115.19.71:443
ASN #262254 DDOS-GUARD CORP.
Requested by https://hqq.tv/player/embed_player.php?vid=cerq2noZQEzo&autoplay=none
Certificate IssuerSectigo Limited
Subject*.hqq.tv
FingerprintEF:9C:01:2D:AB:B0:39:29:54:F3:4D:E9:72:E1:A2:B8:3B:3C:A9:D1
ValidityThu, 23 Mar 2023 00:00:00 GMT - Sat, 23 Mar 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash d751713988987e9331980363e24189ce
97d170e1550eee4afc0af065b78cda302a97674c
4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
GET /ad/banner/_adsense_/_adserver/_adview_.ad.json?adzone=top&adsize=300x250&advid=55483814 HTTP/1.1
Host: hqq.tv
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hqq.tv/player/embed_player.php?vid=cerq2noZQEzo&autoplay=none
Cookie: uid=bJdDWXOnb-WSWNcANnIQLLTUwN7zLkLk; dom3ic8zudi28v8lr6fgphwffqoz0j6c=1136654d-27af-4075-98d5-3548bd5e6f96%3A2%3A1; sb_main_ab0be2a44b7ecf91bdbd5cd360d84937=1; sb_count_ab0be2a44b7ecf91bdbd5cd360d84937=1; pbpr0tpuw4isk85t8yg3jb2lj5vqf=newcomerbenchlilac.com
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Tue, 19 Sep 2023 20:15:30 GMT
content-type: application/json
content-length: 2
server: Google Frontend
access-control-allow-origin: *
x-inferno-location: banner
X-Firefox-Spdy: h2
wsrv.nl/?url=cdn-s11.cfglobalcdn.com%2Fflv%2Fapi%2Ffiles%2Fthumbs_new%2F2023%2F07%2F24%2F1690156031aa1d6%2F1690156031aa1d6-640x480-1.jpg
172.67.215.140200 OK 46 kB URL GET HTTP/2 wsrv.nl/?url=cdn-s11.cfglobalcdn.com%2Fflv%2Fapi%2Ffiles%2Fthumbs_new%2F2023%2F07%2F24%2F1690156031aa1d6%2F1690156031aa1d6-640x480-1.jpg
IP 172.67.215.140:443
Requested by https://hqq.tv/player/embed_player.php?vid=cerq2noZQEzo&autoplay=none
Certificate IssuerLet's Encrypt
Subjectwsrv.nl
Fingerprint66:51:FA:F8:20:D7:7E:77:1C:DB:82:09:EA:EF:53:0E:E2:9D:83:D5
ValidityMon, 28 Aug 2023 15:48:59 GMT - Sun, 26 Nov 2023 15:48:58 GMT
File type JPEG image data, baseline, precision 8, 1720x720, components 3\012- data
Hash 5de6e902d26ec6392929c649cda1f126
f35ef849c4249b29252bd2f4455a722d0059b024
93bc434a1015c24f1cf12b16f4f5ef2e33cab452f92929f8df1078c37cfe4241
GET /?url=cdn-s11.cfglobalcdn.com%2Fflv%2Fapi%2Ffiles%2Fthumbs_new%2F2023%2F07%2F24%2F1690156031aa1d6%2F1690156031aa1d6-640x480-1.jpg HTTP/1.1
Host: wsrv.nl
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hqq.tv/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 19 Sep 2023 20:15:31 GMT
content-type: image/jpeg
content-length: 45995
content-disposition: inline; filename=image.jpg
link: <http://cdn-s11.cfglobalcdn.com/flv/api/files/thumbs_new/2023/07/24/1690156031aa1d6/1690156031aa1d6-640x480-1.jpg>; rel="canonical"
expires: Wed, 24 Jul 2024 00:04:56 GMT
cache-control: public, max-age=31536000
x-upstream-response-length: 44725
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
timing-allow-origin: *
x-images-api: 5
x-cache-status: MISS
last-modified: Tue, 25 Jul 2023 00:04:56 GMT
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=bFFqkB4AtzD4L6yLX7g1S3JT4yYtp%2BJ1UiKM5qEvtbvtU2ZMuYUyfnXglvkqG5zAI1SxjYbJ1b%2B94X916R6sIVFTcRDoWkBwaUbbyZEfaF60opMWSp2dZx8%2B"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 8094804b6c4856a9-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
unseenreport.com/pxf.gif?uuid=1136654d-27af-4075-98d5-3548bd5e6f96&eb=6adde438baa0fa92530e8a3115bdffc1&te=37396b568500723acebf9a99ac43aeca&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A109.0)%20Gecko%2F20100101%20Firefox%2F111.0&dev=e&res=14.2079&b_frame=1&pk=ab0be2a44b7ecf91bdbd5cd360d84937&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=20
192.243.59.20200 OK 1 B URL GET HTTP/1.1 unseenreport.com/pxf.gif?uuid=1136654d-27af-4075-98d5-3548bd5e6f96&eb=6adde438baa0fa92530e8a3115bdffc1&te=37396b568500723acebf9a99ac43aeca&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A109.0)%20Gecko%2F20100101%20Firefox%2F111.0&dev=e&res=14.2079&b_frame=1&pk=ab0be2a44b7ecf91bdbd5cd360d84937&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=20
IP 192.243.59.20:443
ASN #39572 DataWeb Global Group B.V.
Requested by https://hqq.tv/player/embed_player.php?vid=cerq2noZQEzo&autoplay=none
Certificate IssuerLet's Encrypt
Subject*.unseenreport.com
FingerprintFA:C0:C8:59:8F:DC:3E:30:9F:0B:7A:DF:A6:77:BD:B0:3B:A2:44:AC
ValidityTue, 25 Jul 2023 07:34:40 GMT - Mon, 23 Oct 2023 07:34:39 GMT
File type very short file (no magic)
Hash 93b885adfe0da089cdf634904fd59f71
5ba93c9db0cff93f52b521d7420e43f6eda2784f
6e340b9cffb37a989ca544e6bb780a2c78901d3fb33738768511a30617afa01d
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /pxf.gif?uuid=1136654d-27af-4075-98d5-3548bd5e6f96&eb=6adde438baa0fa92530e8a3115bdffc1&te=37396b568500723acebf9a99ac43aeca&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A109.0)%20Gecko%2F20100101%20Firefox%2F111.0&dev=e&res=14.2079&b_frame=1&pk=ab0be2a44b7ecf91bdbd5cd360d84937&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=20 HTTP/1.1
Host: unseenreport.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hqq.tv/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Tue, 19 Sep 2023 20:15:31 GMT
Content-Type: image/gif
Content-Length: 1
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 7aacbe2e3c6821cf26f17afbbeb4511f
Strict-Transport-Security: max-age=0; includeSubdomains
unseenreport.com/pxf.gif?uuid=1136654d-27af-4075-98d5-3548bd5e6f96&eb=6adde438baa0fa92530e8a3115bdffc1&te=37396b568500723acebf9a99ac43aeca&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A109.0)%20Gecko%2F20100101%20Firefox%2F111.0&dev=e&res=14.2079&b_frame=1&pk=f9f04e429487bb9ba54c1aa49ea7bed4&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=20
192.243.59.20200 OK 1 B URL GET HTTP/1.1 unseenreport.com/pxf.gif?uuid=1136654d-27af-4075-98d5-3548bd5e6f96&eb=6adde438baa0fa92530e8a3115bdffc1&te=37396b568500723acebf9a99ac43aeca&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A109.0)%20Gecko%2F20100101%20Firefox%2F111.0&dev=e&res=14.2079&b_frame=1&pk=f9f04e429487bb9ba54c1aa49ea7bed4&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=20
IP 192.243.59.20:443
ASN #39572 DataWeb Global Group B.V.
Requested by https://hqq.tv/player/embed_player.php?vid=cerq2noZQEzo&autoplay=none
Certificate IssuerLet's Encrypt
Subject*.unseenreport.com
FingerprintFA:C0:C8:59:8F:DC:3E:30:9F:0B:7A:DF:A6:77:BD:B0:3B:A2:44:AC
ValidityTue, 25 Jul 2023 07:34:40 GMT - Mon, 23 Oct 2023 07:34:39 GMT
File type very short file (no magic)
Hash 93b885adfe0da089cdf634904fd59f71
5ba93c9db0cff93f52b521d7420e43f6eda2784f
6e340b9cffb37a989ca544e6bb780a2c78901d3fb33738768511a30617afa01d
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /pxf.gif?uuid=1136654d-27af-4075-98d5-3548bd5e6f96&eb=6adde438baa0fa92530e8a3115bdffc1&te=37396b568500723acebf9a99ac43aeca&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A109.0)%20Gecko%2F20100101%20Firefox%2F111.0&dev=e&res=14.2079&b_frame=1&pk=f9f04e429487bb9ba54c1aa49ea7bed4&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=20 HTTP/1.1
Host: unseenreport.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hqq.tv/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Tue, 19 Sep 2023 20:15:31 GMT
Content-Type: image/gif
Content-Length: 1
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 53c43e264092f90b8bf41715bc82e2fb
Strict-Transport-Security: max-age=0; includeSubdomains
professionalswebcheck.com/stats
35.157.129.203200 OK 40 B URL GET HTTP/2 professionalswebcheck.com/stats
IP 35.157.129.203:443
Requested by https://hqq.tv/player/embed_player.php?vid=cerq2noZQEzo&autoplay=none
Certificate IssuerAmazon
Subjectprofessionalswebcheck.com
Fingerprint75:E9:08:FD:96:58:C7:98:43:E8:21:27:A8:E9:B9:A4:55:28:F2:0C
ValidityWed, 30 Aug 2023 00:00:00 GMT - Fri, 27 Sep 2024 23:59:59 GMT
File type ASCII text, with no line terminators
Hash 37a4df25e35ecc69a1f2eb1cc9b599d0
7716cadfb6242269065778293ef994f1eb140991
8a54e5ee93bb0eff1c07fc262352953f00d87ee0b27bf7ba190539f8884c4c4b
GET /stats HTTP/1.1
Host: professionalswebcheck.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://hqq.tv
DNT: 1
Connection: keep-alive
Referer: https://hqq.tv/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 19 Sep 2023 20:15:30 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: https://hqq.tv
vary: Origin
access-control-allow-credentials: true
set-cookie: uid_id2=1136654d-27af-4075-98d5-3548bd5e6f96:2:1; expires=Fri, 16 Sep 2033 20:15:30 GMT; secure; SameSite=None
X-Firefox-Spdy: h2
sadjklq.com/netu.php
104.21.36.185200 OK 1.2 kB IP 104.21.36.185:443
Requested by https://hqq.tv/player/embed_player.php?vid=cerq2noZQEzo&autoplay=none
Certificate IssuerGoogle Trust Services LLC
Subjectsadjklq.com
Fingerprint03:55:B4:66:14:CE:71:B6:7F:3C:7A:E9:42:BC:9D:AB:38:B4:EF:08
ValidityThu, 27 Jul 2023 21:28:08 GMT - Wed, 25 Oct 2023 21:28:07 GMT
File type ASCII text, with very long lines (1181), with no line terminators
Hash bc057539d0e7fde058d5d8ace4a42d51
8a7128746614b59624dd8c50f65952062ccbfe1f
1769943b99c7fbf13ad6139e3d21538088aeb74540f732f0bed8e0caef9bab6e
GET /netu.php HTTP/1.1
Host: sadjklq.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hqq.tv/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 19 Sep 2023 20:15:28 GMT
content-type: application/javascript
x-powered-by: PHP/7.1.33
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=5PReK4s72K%2Fjvi2fV8sjmLndrQ5UkByX5993ZgYvjrwkPr%2F7l%2B6UGTswAH2DxHnpZ9RDNZ2h1TVvE9SLDmBgmkkBKJ3ayzl4qZJwXy2pAhluu57NuXyNK6%2BsO71vcQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8094803de8f65693-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
hqq.tv/js/script-2.12.5.js
190.115.19.71200 OK 20 kB URL GET HTTP/2 hqq.tv/js/script-2.12.5.js
IP 190.115.19.71:443
ASN #262254 DDOS-GUARD CORP.
Requested by https://hqq.tv/player/embed_player.php?vid=cerq2noZQEzo&autoplay=none
Certificate IssuerSectigo Limited
Subject*.hqq.tv
FingerprintEF:9C:01:2D:AB:B0:39:29:54:F3:4D:E9:72:E1:A2:B8:3B:3C:A9:D1
ValidityThu, 23 Mar 2023 00:00:00 GMT - Sat, 23 Mar 2024 23:59:59 GMT
File type ASCII text, with very long lines (1242)
Hash 1e2e0c743ab729233c42052a5380e74b
42a1b8940e7ecf8145cd4abac4fe64ebf479d6ca
5776d146edfa1de32f5c74f409ced004eac80e4f8e2b981ab44dfd46ebba1712
GET /js/script-2.12.5.js HTTP/1.1
Host: hqq.tv
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hqq.tv/player/embed_player.php?vid=cerq2noZQEzo&autoplay=none
Cookie: uid=bJdDWXOnb-WSWNcANnIQLLTUwN7zLkLk
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 19 Sep 2023 20:15:29 GMT
content-type: application/javascript; charset=UTF-8
vary: Accept-Encoding
last-modified: Tue, 01 Dec 2020 19:28:37 GMT
etag: W/"5fc69965-4cb8"
access-control-allow-origin: *
access-control-allow-credentials: true
accessing-static: 1
cache-control: public, max-age=31536000, stale-while-revalidate=30, stale-if-error=30
pragma: cache
content-encoding: gzip
server: Google Frontend
x-cache-status-inferno-s: HIT
x-inferno-location: static
X-Firefox-Spdy: h2
hqq.tv/player/embed_player.php?vid=cerq2noZQEzo&autoplay=none
190.115.19.71200 OK 146 kB URL GET HTTP/2 hqq.tv/player/embed_player.php?vid=cerq2noZQEzo&autoplay=none
IP 190.115.19.71:443
ASN #262254 DDOS-GUARD CORP.
Requested by https://vampysecurity.com/p.html
Certificate IssuerSectigo Limited
Subject*.hqq.tv
FingerprintEF:9C:01:2D:AB:B0:39:29:54:F3:4D:E9:72:E1:A2:B8:3B:3C:A9:D1
ValidityThu, 23 Mar 2023 00:00:00 GMT - Sat, 23 Mar 2024 23:59:59 GMT
Size 146 kB (145871 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /player/embed_player.php?vid=cerq2noZQEzo&autoplay=none HTTP/1.1
Host: hqq.tv
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vampysecurity.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 19 Sep 2023 20:15:28 GMT
content-type: text/html; charset=utf-8
vary: Accept-Encoding
x-robots-tag: 'none, noindex, nofollow, noarchive, nosnippet, noodp, notranslate, noimageindex'
x-content-type-options: nosniff
x-xss-protection: 1; mode=block;
p3p: policyref="http://www.example.com/w3c/p3p.xml", CP="CURa ADMa DEVa CONo HISa OUR IND DSP ALL COR"
link: <//hqq.tv>; rel=preconnect; crossorigin, <//global.stun.twilio.com>; rel=dns-prefetch; crossorigin, <//counter.yadro.ru>; rel=preconnect; crossorigin, <//imasdk.googleapis.com>; rel=preconnect; crossorigin, <//stun2.l.google.com>; rel=dns-prefetch; crossorigin, <//unpkg.com>; rel=preconnect; crossorigin, <//mc.yandex.ru>; rel=preconnect; crossorigin, <//cdn.jsdelivr.net>; rel=preconnect; crossorigin, <//signal.netu.tv>; rel=dns-prefetch; crossorigin,<//wss.commentsmodule.com>; rel=dns-prefetch; crossorigin, <//www.gstatic.com>; rel=preconnect; crossorigin, <//imasdk.googleapis.com>; rel=preconnect; crossorigin, <//storage.googleapis.com>; rel=preconnect; crossorigin, <//www.google.com>; rel=preconnect; crossorigin,<//a.labadena.com>; rel=preconnect; crossorigin, <//deliver.vkcdnservice.com>; rel=preconnect; crossorigin,<//vkcdnservice.appspot.com.storage.googleapis.com>; rel=preconnect; crossorigin, <//www.google.com>; rel=preconnect; crossorigin, <//www.recaptcha.net>; rel=preconnect; crossorigin, <//cdnjs.cloudflare.com>; rel=preconnect; crossorigin
pragma: no-cache
x-origin-location: player
cache-control: no-store, no-cache, must-revalidate, max-age=0, post-check=0, pre-check=0
content-encoding: gzip
server: Google Frontend
x-cache-status-inferno: MISS
x-inferno-location: player
x-inferno-limit-req: PASSED
X-Firefox-Spdy: h2
hqq.tv/js/websocket_ip.min.js
190.115.19.71200 OK 4.6 kB URL GET HTTP/2 hqq.tv/js/websocket_ip.min.js
IP 190.115.19.71:443
ASN #262254 DDOS-GUARD CORP.
Requested by https://hqq.tv/player/embed_player.php?vid=cerq2noZQEzo&autoplay=none
Certificate IssuerSectigo Limited
Subject*.hqq.tv
FingerprintEF:9C:01:2D:AB:B0:39:29:54:F3:4D:E9:72:E1:A2:B8:3B:3C:A9:D1
ValidityThu, 23 Mar 2023 00:00:00 GMT - Sat, 23 Mar 2024 23:59:59 GMT
File type ASCII text, with very long lines (4798), with no line terminators
Hash 7c354bd309d3152f26fd4c61b1f7eb2b
2dc50304cfaecb57148a5001827f8e0b19acb9ca
f88d924353140c3c8cbfd2ce7f128539408029907fadeaa0f5cb81c4fde1e1e8
GET /js/websocket_ip.min.js HTTP/1.1
Host: hqq.tv
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hqq.tv/player/embed_player.php?vid=cerq2noZQEzo&autoplay=none
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 19 Sep 2023 20:15:28 GMT
content-type: application/javascript; charset=UTF-8
vary: Accept-Encoding
last-modified: Fri, 20 Jan 2023 13:44:36 GMT
etag: W/"63ca9ac4-121c"
access-control-allow-origin: *
access-control-allow-credentials: true
accessing-static: 1
cache-control: public, max-age=31536000, stale-while-revalidate=30, stale-if-error=30
pragma: cache
content-encoding: gzip
server: Google Frontend
x-cache-status-inferno-s: HIT
x-inferno-location: static
X-Firefox-Spdy: h2
hqq.tv/styles/global/embed_player.3.css?130
190.115.19.71200 OK 5.9 kB URL GET HTTP/2 hqq.tv/styles/global/embed_player.3.css?130
IP 190.115.19.71:443
ASN #262254 DDOS-GUARD CORP.
Requested by https://hqq.tv/player/embed_player.php?vid=cerq2noZQEzo&autoplay=none
Certificate IssuerSectigo Limited
Subject*.hqq.tv
FingerprintEF:9C:01:2D:AB:B0:39:29:54:F3:4D:E9:72:E1:A2:B8:3B:3C:A9:D1
ValidityThu, 23 Mar 2023 00:00:00 GMT - Sat, 23 Mar 2024 23:59:59 GMT
File type ASCII text, with very long lines (6369), with no line terminators
Hash bc995c4e34d124e4f1330abec4dc9176
3fdcc0a0237651e355f041a96172a6197dcb4e20
9f4a684b3812d61066c54737adb2be3a628d76ac32978f224fce028ad0c6eb92
GET /styles/global/embed_player.3.css?130 HTTP/1.1
Host: hqq.tv
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hqq.tv/player/embed_player.php?vid=cerq2noZQEzo&autoplay=none
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 19 Sep 2023 20:15:28 GMT
content-type: text/css; charset=UTF-8
vary: Accept-Encoding
last-modified: Wed, 09 Dec 2020 22:16:37 GMT
etag: W/"5fd14cc5-1701"
access-control-allow-origin: *
access-control-allow-credentials: true
accessing-static: 1
cache-control: public, max-age=31536000, stale-while-revalidate=30, stale-if-error=30
pragma: cache
content-encoding: gzip
server: Google Frontend
x-cache-status-inferno-s: HIT
x-inferno-location: static
X-Firefox-Spdy: h2
hqq.tv/js/video.counters.2.js?117
190.115.19.71200 OK 696 B URL GET HTTP/2 hqq.tv/js/video.counters.2.js?117
IP 190.115.19.71:443
ASN #262254 DDOS-GUARD CORP.
Requested by https://hqq.tv/player/embed_player.php?vid=cerq2noZQEzo&autoplay=none
Certificate IssuerSectigo Limited
Subject*.hqq.tv
FingerprintEF:9C:01:2D:AB:B0:39:29:54:F3:4D:E9:72:E1:A2:B8:3B:3C:A9:D1
ValidityThu, 23 Mar 2023 00:00:00 GMT - Sat, 23 Mar 2024 23:59:59 GMT
File type ASCII text, with very long lines (739), with no line terminators
Hash a2a4921aacb2a8988a0c0af96088c0ae
876de6826a45c1520fc16d1d7a0fd68c9dfb7040
a322d95809eef61e82cc313c84a7d76d1ec4c7c90e24a47d2197d229a4d45395
GET /js/video.counters.2.js?117 HTTP/1.1
Host: hqq.tv
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hqq.tv/player/embed_player.php?vid=cerq2noZQEzo&autoplay=none
Cookie: uid=bJdDWXOnb-WSWNcANnIQLLTUwN7zLkLk; dom3ic8zudi28v8lr6fgphwffqoz0j6c=1136654d-27af-4075-98d5-3548bd5e6f96%3A2%3A1; sb_main_ab0be2a44b7ecf91bdbd5cd360d84937=1; sb_count_ab0be2a44b7ecf91bdbd5cd360d84937=1; pbpr0tpuw4isk85t8yg3jb2lj5vqf=newcomerbenchlilac.com
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 19 Sep 2023 20:15:34 GMT
content-type: application/javascript; charset=UTF-8
vary: Accept-Encoding
last-modified: Sun, 06 Feb 2022 19:35:56 GMT
etag: W/"6200231c-2b8"
access-control-allow-origin: *
access-control-allow-credentials: true
accessing-static: 1
cache-control: public, max-age=31536000, stale-while-revalidate=30, stale-if-error=30
pragma: cache
content-encoding: gzip
server: Google Frontend
x-cache-status-inferno-s: HIT
x-inferno-location: static
X-Firefox-Spdy: h2
hqq.tv/player/get_player_image.php
190.115.19.71200 OK 20 kB URL POST HTTP/2 hqq.tv/player/get_player_image.php
IP 190.115.19.71:443
ASN #262254 DDOS-GUARD CORP.
Requested by https://hqq.tv/player/embed_player.php?vid=cerq2noZQEzo&autoplay=none
Certificate IssuerSectigo Limited
Subject*.hqq.tv
FingerprintEF:9C:01:2D:AB:B0:39:29:54:F3:4D:E9:72:E1:A2:B8:3B:3C:A9:D1
ValidityThu, 23 Mar 2023 00:00:00 GMT - Sat, 23 Mar 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with very long lines (19894), with no line terminators
Hash f377730874d14a41f1f80ba8c2f88237
a1bce77d873f79fc4e0799323048fce67f079584
22e416ad5fb8d7338274f543ec5845e8d86abc5d21d4820f19e7d07d77b4c145
POST /player/get_player_image.php HTTP/1.1
Host: hqq.tv
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
X-Requested-With: XMLHttpRequest
Content-Length: 73
Origin: https://hqq.tv
DNT: 1
Connection: keep-alive
Referer: https://hqq.tv/player/embed_player.php?vid=cerq2noZQEzo&autoplay=none
Cookie: uid=bJdDWXOnb-WSWNcANnIQLLTUwN7zLkLk
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 19 Sep 2023 20:15:29 GMT
content-type: application/json
vary: Accept-Encoding
x-robots-tag: 'none, noindex, nofollow, noarchive, nosnippet, noodp, notranslate, noimageindex'
pragma: no-cache
x-image-colors-src: 0
x-file-located: temp, filename:../files/temp/video_images/6/d/1690156031aa1d6-1.jpg
x-clickarr-add-e: 1
x-image-size: 44725
x-image-colors: 0
x-img-cr: j
x-origin-location: get_image
cache-control: no-store, no-cache, must-revalidate, max-age=0
content-encoding: gzip
server: Google Frontend
x-inferno-location: player
x-inferno-limit-req: PASSED
X-Firefox-Spdy: h2
unpkg.com/jquery.cookie@1.4.1/jquery.cookie.js
104.16.122.175200 OK 3.1 kB URL GET HTTP/2 unpkg.com/jquery.cookie@1.4.1/jquery.cookie.js
IP 104.16.122.175:443
Requested by https://hqq.tv/player/embed_player.php?vid=cerq2noZQEzo&autoplay=none
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintF7:B6:41:CA:15:FD:D1:0C:27:39:55:5D:C5:CE:3F:1C:A6:BB:9D:6F
ValidityTue, 02 May 2023 00:00:00 GMT - Wed, 01 May 2024 23:59:59 GMT
File type ASCII text, with very long lines (3441), with no line terminators
Hash c70a657c6ff1764a238929b6e46fb8e4
e2a8eb96b388abf14690ea14fe4af3f600296235
466840a5176a0d6bd70e2d5ade5928ad656ca6b9cd3040a241e33478c63f5813
GET /jquery.cookie@1.4.1/jquery.cookie.js HTTP/1.1
Host: unpkg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hqq.tv/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 19 Sep 2023 20:15:28 GMT
content-type: application/javascript; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=31536000
last-modified: Sun, 27 Apr 2014 20:04:54 GMT
etag: W/"c31-MeG8xM+AWiwv7iH0je0eWY9koqg"
via: 1.1 fly.io
fly-request-id: 01G75513388K1MR4R8RW1AYXTV-fra
cf-cache-status: HIT
age: 6662024
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 8094803dc8a80b4d-OSL
content-encoding: br
X-Firefox-Spdy: h2
commentsmodule.com/js/js.load.1.js?7316281666329817
188.114.97.1200 OK 0 B URL GET HTTP/2 commentsmodule.com/js/js.load.1.js?7316281666329817
IP 188.114.97.1:443
Requested by https://hqq.tv/player/embed_player.php?vid=cerq2noZQEzo&autoplay=none
Certificate IssuerGoogle Trust Services LLC
Subjectcommentsmodule.com
Fingerprint8D:AF:47:4C:44:F2:31:C7:95:3D:95:A5:64:99:5E:63:E4:6D:00:71
ValidityMon, 14 Aug 2023 20:54:29 GMT - Sun, 12 Nov 2023 20:54:28 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /js/js.load.1.js?7316281666329817 HTTP/1.1
Host: commentsmodule.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://hqq.tv/
Origin: https://hqq.tv
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 19 Sep 2023 20:15:29 GMT
content-type: application/javascript; charset=UTF-8
content-length: 0
last-modified: Thu, 14 Apr 2022 12:20:52 GMT
etag: "625811a4-0"
access-control-allow-credentials: true
accessing-static: 1
cache-control: public, max-age=31536000, stale-while-revalidate=30, stale-if-error=30
pragma: cache
x-cache-status-inferno-s: HIT
x-inferno-location: static
cf-cache-status: HIT
age: 1667172
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=meK4jX%2B884Xj6dLCR4V47V7b3drJO0mFDQuHWlciB3tMszEx298Jy568gEZP5cZEgfnbaquKfm88n076IUGJdGUoHMsaSvQA%2Bw5sWQnurvkHHsbgJdISpZo7FOiZjN%2FTZaTcJI0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
access-control-allow-origin: *
server: cloudflare
cf-ray: 8094803f892b568b-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
hqq.tv/js/video.jquery_plugs/modernizr.js?12
190.115.19.71200 OK 1.2 kB URL GET HTTP/2 hqq.tv/js/video.jquery_plugs/modernizr.js?12
IP 190.115.19.71:443
ASN #262254 DDOS-GUARD CORP.
Requested by https://hqq.tv/player/embed_player.php?vid=cerq2noZQEzo&autoplay=none
Certificate IssuerSectigo Limited
Subject*.hqq.tv
FingerprintEF:9C:01:2D:AB:B0:39:29:54:F3:4D:E9:72:E1:A2:B8:3B:3C:A9:D1
ValidityThu, 23 Mar 2023 00:00:00 GMT - Sat, 23 Mar 2024 23:59:59 GMT
File type ASCII text, with very long lines (1245), with no line terminators
Hash 8daca638b6ea732f6375341d2dfe9811
73369521d8d8b5a3bbc30c158b2e9ca6ba37b9d1
23ae5f08dc1f05ecdb72298c9cf2eaf5670f088356903bec72f39520389dc0ba
GET /js/video.jquery_plugs/modernizr.js?12 HTTP/1.1
Host: hqq.tv
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hqq.tv/player/embed_player.php?vid=cerq2noZQEzo&autoplay=none
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 19 Sep 2023 20:15:28 GMT
content-type: application/javascript; charset=UTF-8
vary: Accept-Encoding
last-modified: Sun, 03 Jun 2018 17:19:35 GMT
etag: W/"5b142327-4cb"
access-control-allow-origin: *
access-control-allow-credentials: true
accessing-static: 1
cache-control: public, max-age=31536000, stale-while-revalidate=30, stale-if-error=30
pragma: cache
content-encoding: gzip
server: Google Frontend
x-cache-status-inferno-s: HIT
x-inferno-location: static
X-Firefox-Spdy: h2