www.rojadirectatvhd.org/rojadirecta.jpg
200 OK 104 kB URL GET HTTP/3 www.rojadirectatvhd.org/rojadirecta.jpg
IP
Requested by https://www.rojadirectatvhd.org/roja-directv.php
Certificate IssuerGoogle Trust Services LLC
Subjectrojadirectatvhd.org
Fingerprint5B:A1:D9:9A:30:BB:77:36:B6:4B:99:47:44:CC:E7:C4:38:66:74:05
ValidityTue, 17 Oct 2023 16:45:11 GMT - Mon, 15 Jan 2024 16:45:10 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 849x574, components 3\012- data
Size 104 kB (104244 bytes)
Hash 436d82d0f0d5292829763f19776046e4
5ab4f24231b670dd609780db81a07cf0094b723e
58a072346d4d22aec1668863ccaf7b6e7d4ed114a0fbf2333e692aa687158c3a
GET /rojadirecta.jpg HTTP/1.1
Host: www.rojadirectatvhd.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.rojadirectatvhd.org/roja-directv.php
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 03 Dec 2023 21:00:19 GMT
content-type: image/jpeg
content-length: 104244
last-modified: Tue, 17 Oct 2023 17:02:18 GMT
etag: "652ebe1a-19734"
expires: Sat, 09 Dec 2023 08:56:51 GMT
cache-control: public, max-age=604800, must-revalidate
access-control-allow-origin: *
cf-cache-status: HIT
age: 129808
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=989jnPvGr0Fn83BQrv%2F4simc%2FW5kSW0d3rArpGtDzcHQvuVTkdXLFdgOXEQptQo28VtI0kimhbLSPWJdD5KpBARPgyiTVwLAXpzC4WbaT9uANiS%2FkBEwWKmw4oJVMqbyOBZpPcP7Znaljg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82febd0e2aa20b41-OSL
alt-svc: h3=":443"; ma=86400
img.webme.com/pic/l/larojadirectaenvivo/mx.gif
200 OK 358 B URL GET HTTP/1.1 img.webme.com/pic/l/larojadirectaenvivo/mx.gif
IP
ASN #28753 Leaseweb Deutschland GmbH
Requested by https://www.rojadirectatvhd.org/roja-directv.php
Certificate IssuerLet's Encrypt
Subjectimg.webme.com
Fingerprint7A:EF:57:A4:16:05:4B:A7:BE:0D:6D:40:EE:9D:14:95:3C:3A:1F:95
ValidityMon, 30 Oct 2023 13:23:18 GMT - Sun, 28 Jan 2024 13:23:17 GMT
File type GIF image data, version 87a, 16 x 11\012- data
Hash 2ea63d65755df6e9b5d0f467b8e4cf98
9109eefa1999de507e8ab791d39f5d3e99047041
5184c5a7ea44d64b3731f12381483162a4dad423a525cfb80028266d1c850335
GET /pic/l/larojadirectaenvivo/mx.gif HTTP/1.1
Host: img.webme.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.rojadirectatvhd.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 03 Dec 2023 21:00:19 GMT
Content-Type: image/gif
Content-Length: 358
Connection: keep-alive
Last-Modified: Sun, 05 Mar 2023 23:57:57 GMT
ETag: "64052c85-166"
X-wm-VIP: 193.238.27.18
X-Varnish: 965944269, 924564199 901547948
Age: 57046
Via: 1.1 varnish-v4, 1.1 varnish-v4
Accept-Ranges: bytes
img.webme.com/pic/l/larojadirectaenvivo/es.gif
200 OK 352 B URL GET HTTP/1.1 img.webme.com/pic/l/larojadirectaenvivo/es.gif
IP
ASN #28753 Leaseweb Deutschland GmbH
Requested by https://www.rojadirectatvhd.org/roja-directv.php
Certificate IssuerLet's Encrypt
Subjectimg.webme.com
Fingerprint7A:EF:57:A4:16:05:4B:A7:BE:0D:6D:40:EE:9D:14:95:3C:3A:1F:95
ValidityMon, 30 Oct 2023 13:23:18 GMT - Sun, 28 Jan 2024 13:23:17 GMT
File type GIF image data, version 87a, 16 x 11\012- data
Hash 9eaff86a7e54702dd68a5750bce0cf4c
5dbc96eee33486f8f13115da2cea244ee38df405
51724265c55a28e518e1e79683d3863310db2c533e3baa02081846a3127089f2
GET /pic/l/larojadirectaenvivo/es.gif HTTP/1.1
Host: img.webme.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.rojadirectatvhd.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 03 Dec 2023 21:00:19 GMT
Content-Type: image/gif
Content-Length: 352
Connection: keep-alive
Last-Modified: Sun, 05 Mar 2023 23:57:40 GMT
ETag: "64052c74-160"
X-wm-VIP: 193.238.27.18
X-Varnish: 991073179, 924609510 901147246
Age: 44014
Via: 1.1 varnish-v4, 1.1 varnish-v4
Accept-Ranges: bytes
img.webme.com/pic/l/larojadirectaenvivo/hl.gif
200 OK 214 B URL GET HTTP/1.1 img.webme.com/pic/l/larojadirectaenvivo/hl.gif
IP
ASN #28753 Leaseweb Deutschland GmbH
Requested by https://www.rojadirectatvhd.org/roja-directv.php
Certificate IssuerLet's Encrypt
Subjectimg.webme.com
Fingerprint7A:EF:57:A4:16:05:4B:A7:BE:0D:6D:40:EE:9D:14:95:3C:3A:1F:95
ValidityMon, 30 Oct 2023 13:23:18 GMT - Sun, 28 Jan 2024 13:23:17 GMT
File type GIF image data, version 89a, 16 x 11\012- data
Hash e2ccfc926ac28be154bd8e1b89fc26ad
1779ef671d553a93c3a4d4df6b79cf3ffef4764a
82c94eb26510053b09a6dc0ff75d9c202fd088d99ad09aa4dc566d7f21ab9550
GET /pic/l/larojadirectaenvivo/hl.gif HTTP/1.1
Host: img.webme.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.rojadirectatvhd.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 03 Dec 2023 21:00:19 GMT
Content-Type: image/gif
Content-Length: 214
Connection: keep-alive
Last-Modified: Sun, 16 Apr 2023 02:24:34 GMT
ETag: "643b5c62-d6"
X-wm-VIP: 193.238.27.18
X-Varnish: 1056725170, 924564203 909441018
Age: 12470
Via: 1.1 varnish-v4, 1.1 varnish-v4
Accept-Ranges: bytes
img.webme.com/pic/l/larojadirectaenvivo/en.gif
200 OK 233 B URL GET HTTP/1.1 img.webme.com/pic/l/larojadirectaenvivo/en.gif
IP
ASN #28753 Leaseweb Deutschland GmbH
Requested by https://www.rojadirectatvhd.org/roja-directv.php
Certificate IssuerLet's Encrypt
Subjectimg.webme.com
Fingerprint7A:EF:57:A4:16:05:4B:A7:BE:0D:6D:40:EE:9D:14:95:3C:3A:1F:95
ValidityMon, 30 Oct 2023 13:23:18 GMT - Sun, 28 Jan 2024 13:23:17 GMT
File type GIF image data, version 89a, 16 x 11\012- data
Hash 64e871eee32dc7ad5c8f0769718f792c
d31b7229f144c938df6f83943b9689a90b3206b6
601c670e3107c3ed64627e5201dbdd0fe84d3bd5b5e084cca4bdf75da583d612
GET /pic/l/larojadirectaenvivo/en.gif HTTP/1.1
Host: img.webme.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.rojadirectatvhd.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 03 Dec 2023 21:00:19 GMT
Content-Type: image/gif
Content-Length: 233
Connection: keep-alive
Last-Modified: Mon, 06 Mar 2023 01:20:53 GMT
ETag: "64053ff5-e9"
X-wm-VIP: 193.238.27.18
X-Varnish: 953295089, 924218175 899615419
Age: 71434
Via: 1.1 varnish-v4, 1.1 varnish-v4
Accept-Ranges: bytes
www.rojadirectatvhd.org/roja-directv.php
200 OK 5.0 kB URL User Request GET HTTP/2 www.rojadirectatvhd.org/roja-directv.php
IP
Certificate IssuerGoogle Trust Services LLC
Subjectrojadirectatvhd.org
Fingerprint5B:A1:D9:9A:30:BB:77:36:B6:4B:99:47:44:CC:E7:C4:38:66:74:05
ValidityTue, 17 Oct 2023 16:45:11 GMT - Mon, 15 Jan 2024 16:45:10 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (2036), with CRLF, LF line terminators
Hash 9867746fcfd690769ab0ce9790f2d0ff
d8cf2dcc905100209400a37664145be58ef981a6
a7e37275b25526b393bf9945da456b81addc2a4d83c01e7096624e36d072c46d
GET /roja-directv.php HTTP/1.1
Host: www.rojadirectatvhd.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 03 Dec 2023 21:00:19 GMT
content-type: text/html; charset=UTF-8
x-powered-by: PHP/7.4.3
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=nVLvbIjW65tlmreG93lZhEkmBsuArVwVCU2aehang8sxRkST4cEJaW3w92zLFhoogqZbumAzBl%2FGT1qOGHYl5OmG9sfq9C4aTarmwyzqksK6pZV%2BrOdcx8iTRPBgxm%2FDpTHAKVpMiYiUfQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82febd0a5d6a5688-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
img.webme.com/pic/l/larojadirectaenvivo/bkb.gif
200 OK 401 B URL GET HTTP/1.1 img.webme.com/pic/l/larojadirectaenvivo/bkb.gif
IP
ASN #28753 Leaseweb Deutschland GmbH
Requested by https://www.rojadirectatvhd.org/roja-directv.php
Certificate IssuerLet's Encrypt
Subjectimg.webme.com
Fingerprint7A:EF:57:A4:16:05:4B:A7:BE:0D:6D:40:EE:9D:14:95:3C:3A:1F:95
ValidityMon, 30 Oct 2023 13:23:18 GMT - Sun, 28 Jan 2024 13:23:17 GMT
File type GIF image data, version 89a, 16 x 15\012- data
Hash b2de02fbddf897b9529f42f7da2fcb69
ebc500339fb20889e1b7be0a459953edb7d69793
459aa1ae7da80a420376ad3097553942e5e1a2189dadbd2fc11ab084567a4548
GET /pic/l/larojadirectaenvivo/bkb.gif HTTP/1.1
Host: img.webme.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.rojadirectatvhd.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 03 Dec 2023 21:00:19 GMT
Content-Type: image/gif
Content-Length: 401
Connection: keep-alive
Last-Modified: Mon, 06 Mar 2023 23:50:50 GMT
ETag: "64067c5a-191"
X-wm-VIP: 193.238.27.18
X-Varnish: 1053644640, 924474932 908012902
Age: 16534
Via: 1.1 varnish-v4, 1.1 varnish-v4
Accept-Ranges: bytes
img.webme.com/pic/l/larojadirectaenvivo/it.gif
200 OK 358 B URL GET HTTP/1.1 img.webme.com/pic/l/larojadirectaenvivo/it.gif
IP
ASN #28753 Leaseweb Deutschland GmbH
Requested by https://www.rojadirectatvhd.org/roja-directv.php
Certificate IssuerLet's Encrypt
Subjectimg.webme.com
Fingerprint7A:EF:57:A4:16:05:4B:A7:BE:0D:6D:40:EE:9D:14:95:3C:3A:1F:95
ValidityMon, 30 Oct 2023 13:23:18 GMT - Sun, 28 Jan 2024 13:23:17 GMT
File type GIF image data, version 87a, 16 x 11\012- data
Hash 272f76eb92ac790cfc8105641fd60994
71a9856591fa46ef69f202f9b249c86304bc60d5
d19d5d134cb24ff76a5057f27c070582ef7b3e2a626811c8df200edd63ad94d7
GET /pic/l/larojadirectaenvivo/it.gif HTTP/1.1
Host: img.webme.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.rojadirectatvhd.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 03 Dec 2023 21:00:19 GMT
Content-Type: image/gif
Content-Length: 358
Connection: keep-alive
Last-Modified: Sun, 05 Mar 2023 23:57:50 GMT
ETag: "64052c7e-166"
X-wm-VIP: 193.238.27.18
X-Varnish: 919459053, 924218173 893552760
Age: 92348
Via: 1.1 varnish-v4, 1.1 varnish-v4
Accept-Ranges: bytes
img.webme.com/pic/l/larojadirectaenvivo/de.gif
200 OK 221 B URL GET HTTP/1.1 img.webme.com/pic/l/larojadirectaenvivo/de.gif
IP
ASN #28753 Leaseweb Deutschland GmbH
Requested by https://www.rojadirectatvhd.org/roja-directv.php
Certificate IssuerLet's Encrypt
Subjectimg.webme.com
Fingerprint7A:EF:57:A4:16:05:4B:A7:BE:0D:6D:40:EE:9D:14:95:3C:3A:1F:95
ValidityMon, 30 Oct 2023 13:23:18 GMT - Sun, 28 Jan 2024 13:23:17 GMT
File type GIF image data, version 89a, 16 x 11\012- data
Hash 14b531f28402e2a552f5c8df43d35d96
8eb1dba424f94a20f76e7db198c6e553cece7454
a1a8f96d6cb889524158b8bc9c87516709510188041a8c283fd43b0940af0ca2
GET /pic/l/larojadirectaenvivo/de.gif HTTP/1.1
Host: img.webme.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.rojadirectatvhd.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 03 Dec 2023 21:00:19 GMT
Content-Type: image/gif
Content-Length: 221
Connection: keep-alive
Last-Modified: Thu, 09 Mar 2023 22:28:15 GMT
ETag: "640a5d7f-dd"
X-wm-VIP: 193.238.27.18
X-Varnish: 929607277, 924218187 895499692
Age: 86921
Via: 1.1 varnish-v4, 1.1 varnish-v4
Accept-Ranges: bytes
img.webme.com/pic/l/larojadirectaenvivo/fr.gif
200 OK 358 B URL GET HTTP/1.1 img.webme.com/pic/l/larojadirectaenvivo/fr.gif
IP
ASN #28753 Leaseweb Deutschland GmbH
Requested by https://www.rojadirectatvhd.org/roja-directv.php
Certificate IssuerLet's Encrypt
Subjectimg.webme.com
Fingerprint7A:EF:57:A4:16:05:4B:A7:BE:0D:6D:40:EE:9D:14:95:3C:3A:1F:95
ValidityMon, 30 Oct 2023 13:23:18 GMT - Sun, 28 Jan 2024 13:23:17 GMT
File type GIF image data, version 87a, 16 x 11\012- data
Hash cc38d01b0b77e76fa5a7789d658795cd
c33d066894363c270fc3954675426e6765811b87
c32adbb559bb7fde8f86208190add63a7464b61bda701545ec037205a038c376
GET /pic/l/larojadirectaenvivo/fr.gif HTTP/1.1
Host: img.webme.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.rojadirectatvhd.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 03 Dec 2023 21:00:19 GMT
Content-Type: image/gif
Content-Length: 358
Connection: keep-alive
Last-Modified: Sun, 05 Mar 2023 23:57:45 GMT
ETag: "64052c79-166"
X-wm-VIP: 193.238.27.18
X-Varnish: 953906748, 924686101 900606592
Age: 63960
Via: 1.1 varnish-v4, 1.1 varnish-v4
Accept-Ranges: bytes
img.webme.com/pic/l/larojadirectaenvivo/pt.gif
200 OK 340 B URL GET HTTP/1.1 img.webme.com/pic/l/larojadirectaenvivo/pt.gif
IP
ASN #28753 Leaseweb Deutschland GmbH
Requested by https://www.rojadirectatvhd.org/roja-directv.php
Certificate IssuerLet's Encrypt
Subjectimg.webme.com
Fingerprint7A:EF:57:A4:16:05:4B:A7:BE:0D:6D:40:EE:9D:14:95:3C:3A:1F:95
ValidityMon, 30 Oct 2023 13:23:18 GMT - Sun, 28 Jan 2024 13:23:17 GMT
File type GIF image data, version 89a, 16 x 11\012- data
Hash 67573e4f2b4a04e57ba1e7efe660768a
28d472634e5fbe0b595188b1d304527a59e43b45
04ae26c62a2729c0dbc0f392f3d0494bfbe1ba8d68b0d073f87ddb2444323dfa
GET /pic/l/larojadirectaenvivo/pt.gif HTTP/1.1
Host: img.webme.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.rojadirectatvhd.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 03 Dec 2023 21:00:19 GMT
Content-Type: image/gif
Content-Length: 340
Connection: keep-alive
Last-Modified: Mon, 06 Mar 2023 00:31:10 GMT
ETag: "6405344e-154"
X-wm-VIP: 193.238.27.18
X-Varnish: 925246400, 924686119 895535488
Age: 86920
Via: 1.1 varnish-v4, 1.1 varnish-v4
Accept-Ranges: bytes
img.webme.com/pic/l/larojadirectaenvivo/nfl.gif
200 OK 396 B URL GET HTTP/1.1 img.webme.com/pic/l/larojadirectaenvivo/nfl.gif
IP
ASN #28753 Leaseweb Deutschland GmbH
Requested by https://www.rojadirectatvhd.org/roja-directv.php
Certificate IssuerLet's Encrypt
Subjectimg.webme.com
Fingerprint7A:EF:57:A4:16:05:4B:A7:BE:0D:6D:40:EE:9D:14:95:3C:3A:1F:95
ValidityMon, 30 Oct 2023 13:23:18 GMT - Sun, 28 Jan 2024 13:23:17 GMT
File type GIF image data, version 89a, 16 x 15\012- data
Hash eecfebdea84dca5780f49e53650b546f
a1b3164fb619c5eebba311476a76d67992b967b6
782405584c001b9372c5165d226a7c2a3e093e044f57dec4ebe86759bb2edcdd
GET /pic/l/larojadirectaenvivo/nfl.gif HTTP/1.1
Host: img.webme.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.rojadirectatvhd.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 03 Dec 2023 21:00:19 GMT
Content-Type: image/gif
Content-Length: 396
Connection: keep-alive
Last-Modified: Sat, 26 Aug 2023 04:28:52 GMT
ETag: "64e97f84-18c"
X-wm-VIP: 193.238.27.18
X-Varnish: 1029389518, 924686121 903780955
Age: 28663
Via: 1.1 varnish-v4, 1.1 varnish-v4
Accept-Ranges: bytes
img.webme.com/pic/l/larojadirectaenvivo/cl.gif
200 OK 450 B URL GET HTTP/1.1 img.webme.com/pic/l/larojadirectaenvivo/cl.gif
IP
ASN #28753 Leaseweb Deutschland GmbH
Requested by https://www.rojadirectatvhd.org/roja-directv.php
Certificate IssuerLet's Encrypt
Subjectimg.webme.com
Fingerprint7A:EF:57:A4:16:05:4B:A7:BE:0D:6D:40:EE:9D:14:95:3C:3A:1F:95
ValidityMon, 30 Oct 2023 13:23:18 GMT - Sun, 28 Jan 2024 13:23:17 GMT
File type PNG image data, 16 x 11, 8-bit/color RGB, non-interlaced\012- data
Hash dc7b3be27813faeb454d02b55b79b9e3
66c334b3cbf15b4c317db4d01075c85ce195fc51
516cde928be7cf45bedd28cb9bed291035aa9106a21335a922ca1e0987a8fdb6
GET /pic/l/larojadirectaenvivo/cl.gif HTTP/1.1
Host: img.webme.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.rojadirectatvhd.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 03 Dec 2023 21:00:19 GMT
Content-Type: image/gif
Content-Length: 450
Connection: keep-alive
Last-Modified: Sun, 05 Mar 2023 23:57:24 GMT
ETag: "64052c64-1c2"
X-wm-VIP: 193.238.27.18
X-Varnish: 964571953, 924686123 900693572
Age: 55391
Via: 1.1 varnish-v4, 1.1 varnish-v4
Accept-Ranges: bytes
img.webme.com/pic/l/larojadirectaenvivo/co.gif
200 OK 345 B URL GET HTTP/1.1 img.webme.com/pic/l/larojadirectaenvivo/co.gif
IP
ASN #28753 Leaseweb Deutschland GmbH
Requested by https://www.rojadirectatvhd.org/roja-directv.php
Certificate IssuerLet's Encrypt
Subjectimg.webme.com
Fingerprint7A:EF:57:A4:16:05:4B:A7:BE:0D:6D:40:EE:9D:14:95:3C:3A:1F:95
ValidityMon, 30 Oct 2023 13:23:18 GMT - Sun, 28 Jan 2024 13:23:17 GMT
File type GIF image data, version 87a, 16 x 11\012- data
Hash b3883a047522052a4e507f36ec8c9c92
46cca97ef8b14419a44b605706e865d81302f63e
d42aa2becbf200d99a616935fe8dfeff735d08e31c01eb4215898e5d97525c84
GET /pic/l/larojadirectaenvivo/co.gif HTTP/1.1
Host: img.webme.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.rojadirectatvhd.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 03 Dec 2023 21:00:19 GMT
Content-Type: image/gif
Content-Length: 345
Connection: keep-alive
Last-Modified: Sun, 05 Mar 2023 23:57:29 GMT
ETag: "64052c69-159"
X-wm-VIP: 193.238.27.18
X-Varnish: 968287978, 924609534 901156488
Age: 57926
Via: 1.1 varnish-v4, 1.1 varnish-v4
Accept-Ranges: bytes
img.webme.com/pic/l/larojadirectaenvivo/ar.gif
200 OK 358 B URL GET HTTP/1.1 img.webme.com/pic/l/larojadirectaenvivo/ar.gif
IP
ASN #28753 Leaseweb Deutschland GmbH
Requested by https://www.rojadirectatvhd.org/roja-directv.php
Certificate IssuerLet's Encrypt
Subjectimg.webme.com
Fingerprint7A:EF:57:A4:16:05:4B:A7:BE:0D:6D:40:EE:9D:14:95:3C:3A:1F:95
ValidityMon, 30 Oct 2023 13:23:18 GMT - Sun, 28 Jan 2024 13:23:17 GMT
File type GIF image data, version 87a, 16 x 11\012- data
Hash 0155716dc2c6c391f5f252aa6a5c5f02
b7a99955f186713c6b533c652d7643f8c91be093
b0141091db4f591aa95713a2baeb53e33856c88b219ac5b5875cc97921f0678a
GET /pic/l/larojadirectaenvivo/ar.gif HTTP/1.1
Host: img.webme.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.rojadirectatvhd.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 03 Dec 2023 21:00:19 GMT
Content-Type: image/gif
Content-Length: 358
Connection: keep-alive
Last-Modified: Sun, 05 Mar 2023 23:49:21 GMT
ETag: "64052a81-166"
X-wm-VIP: 193.238.27.18
X-Varnish: 1056705936, 924609538 909554661
Age: 13768
Via: 1.1 varnish-v4, 1.1 varnish-v4
Accept-Ranges: bytes
img.webme.com/pic/l/larojadirectaenvivo/ec.gif
200 OK 354 B URL GET HTTP/1.1 img.webme.com/pic/l/larojadirectaenvivo/ec.gif
IP
ASN #28753 Leaseweb Deutschland GmbH
Requested by https://www.rojadirectatvhd.org/roja-directv.php
Certificate IssuerLet's Encrypt
Subjectimg.webme.com
Fingerprint7A:EF:57:A4:16:05:4B:A7:BE:0D:6D:40:EE:9D:14:95:3C:3A:1F:95
ValidityMon, 30 Oct 2023 13:23:18 GMT - Sun, 28 Jan 2024 13:23:17 GMT
File type GIF image data, version 87a, 16 x 11\012- data
Hash 1b8d3f640f91c3d32b9b4ba163e30399
aff1e81cf1b61e900b7e2197f69f7fac5b3ab69a
5679f854cf9b498ab9e19f1f4fbe62865728273487faf6a7668dec7752abd2f4
GET /pic/l/larojadirectaenvivo/ec.gif HTTP/1.1
Host: img.webme.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.rojadirectatvhd.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 03 Dec 2023 21:00:19 GMT
Content-Type: image/gif
Content-Length: 354
Connection: keep-alive
Last-Modified: Sun, 05 Mar 2023 23:57:34 GMT
ETag: "64052c6e-162"
X-wm-VIP: 193.238.27.18
X-Varnish: 922267107, 924686129 894732784
Age: 89617
Via: 1.1 varnish-v4, 1.1 varnish-v4
Accept-Ranges: bytes
www.comohd.xyz/2017/01/holadirectv.html
200 OK 5.1 kB URL GET HTTP/2 www.comohd.xyz/2017/01/holadirectv.html
IP
Requested by https://www.rojadirectatvhd.org/roja-directv.php
Certificate IssuerGoogle Trust Services LLC
Subjectwww.comohd.xyz
Fingerprint7F:07:60:30:FA:04:5C:42:A1:2A:02:3B:D5:D7:C3:E7:44:9E:1F:31
ValiditySat, 25 Nov 2023 04:07:10 GMT - Fri, 23 Feb 2024 04:53:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (4247)
Hash 9c2e3586dedc92afa68e0ae964e74dcf
0b321870b5faac5f3026620e69f67545c0037d5f
ff051b80c79b9b3a429905c2e326538c6d92684a97c04e4b0dd8e30d86b9e37d
GET /2017/01/holadirectv.html HTTP/1.1
Host: www.comohd.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.rojadirectatvhd.org/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
x-robots-tag: noindex, nofollow
content-type: text/html; charset=UTF-8
expires: Sun, 03 Dec 2023 21:00:20 GMT
date: Sun, 03 Dec 2023 21:00:20 GMT
cache-control: private, max-age=0
last-modified: Sun, 03 Dec 2023 20:41:10 GMT
etag: W/"b89374331857870874d8ecc15ce34390830dca1320500ab463a2bfe75c3abd83"
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 5098
server: GSE
X-Firefox-Spdy: h2
www.comohd.xyz/js/cookienotice.js
200 OK 2.0 kB URL GET HTTP/2 www.comohd.xyz/js/cookienotice.js
IP
Requested by https://www.comohd.xyz/2017/01/holadirectv.html
Certificate IssuerGoogle Trust Services LLC
Subjectwww.comohd.xyz
Fingerprint7F:07:60:30:FA:04:5C:42:A1:2A:02:3B:D5:D7:C3:E7:44:9E:1F:31
ValiditySat, 25 Nov 2023 04:07:10 GMT - Fri, 23 Feb 2024 04:53:59 GMT
Hash a705132a2174f88e196ec3610d68faa8
3bad57a48d973a678fec600d45933010f6edc659
068ffe90977f2b5b2dc2ef18572166e85281bd0ecb31c4902464b23db54d2568
GET /js/cookienotice.js HTTP/1.1
Host: www.comohd.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.comohd.xyz/2017/01/holadirectv.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 2026
date: Sun, 03 Dec 2023 21:00:20 GMT
expires: Sun, 10 Dec 2023 21:00:20 GMT
cache-control: public, max-age=604800
last-modified: Sun, 03 Dec 2023 19:54:19 GMT
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
X-Firefox-Spdy: h2
www.blogger.com/static/v1/widgets/55013136-widget_css_bundle.css
200 OK 6.6 kB URL GET HTTP/2 www.blogger.com/static/v1/widgets/55013136-widget_css_bundle.css
IP
Requested by https://www.comohd.xyz/2017/01/holadirectv.html
Certificate IssuerGoogle Trust Services LLC
Subject*.blogger.com
Fingerprint4A:89:9B:E5:F1:54:0E:2D:0A:8E:40:A8:27:DF:2E:6B:7F:74:51:90
ValidityMon, 23 Oct 2023 11:17:52 GMT - Mon, 15 Jan 2024 11:17:51 GMT
File type ASCII text, with very long lines (30596)
Hash e3f09df1bc175f411d1ec3dfb5afb17b
3994ec3efe3c2447e7bbfdd97bb7e190dd1658f9
1a2eca9e492e3a21e02dd77ad44d7af45c4091d35ede79e948b7a3f23e5b3617
GET /static/v1/widgets/55013136-widget_css_bundle.css HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.comohd.xyz/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 6620
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 11:35:32 GMT
expires: Fri, 29 Nov 2024 11:35:32 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 29 Nov 2023 17:00:16 GMT
content-type: text/css
vary: Accept-Encoding
age: 293088
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.blogger.com/static/v1/widgets/325989852-widgets.js
200 OK 59 kB URL GET HTTP/2 www.blogger.com/static/v1/widgets/325989852-widgets.js
IP
Requested by https://www.comohd.xyz/2017/01/holadirectv.html
Certificate IssuerGoogle Trust Services LLC
Subject*.blogger.com
Fingerprint4A:89:9B:E5:F1:54:0E:2D:0A:8E:40:A8:27:DF:2E:6B:7F:74:51:90
ValidityMon, 23 Oct 2023 11:17:52 GMT - Mon, 15 Jan 2024 11:17:51 GMT
File type ASCII text, with very long lines (2258)
Hash 2aaaea7286ee481cbc12cfd76e10c0cf
6e8576cb84ac125faa0bc0a5fe5508166cc4eed8
4bfa00cdbc7a40f5dad3dfc3a21dada224e61e358e78d7b262bab098bccbc580
GET /static/v1/widgets/325989852-widgets.js HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.comohd.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 59316
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 14:08:07 GMT
expires: Fri, 29 Nov 2024 14:08:07 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 29 Nov 2023 05:57:17 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 283933
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
apis.google.com/js/platform.js
200 OK 22 kB URL GET HTTP/2 apis.google.com/js/platform.js
IP
Requested by https://www.comohd.xyz/2017/01/holadirectv.html
Certificate IssuerGoogle Trust Services LLC
Subject*.apis.google.com
Fingerprint06:87:C0:63:02:21:98:02:BD:FC:A0:11:93:E9:3A:9F:51:21:06:D8
ValidityMon, 23 Oct 2023 11:25:10 GMT - Mon, 15 Jan 2024 11:25:09 GMT
File type ASCII text, with very long lines (2664)
Hash fd67324a3d81895bdf76b073089663b1
5abb1b0a36c645085e31830e6647faa790ad4e91
8eaa06f95fa0ac44c2c186f200874f2f3ebc3aaa92412f0d0c096f517d3581d1
GET /js/platform.js HTTP/1.1
Host: apis.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.comohd.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
access-control-allow-origin: *
content-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gapi-team
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="gapi-team"
report-to: {"group":"gapi-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gapi-team"}]}
timing-allow-origin: *
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
content-length: 21930
date: Sun, 03 Dec 2023 21:00:20 GMT
expires: Sun, 03 Dec 2023 21:00:20 GMT
cache-control: private, max-age=1800, stale-while-revalidate=1800
etag: "bccfddc1dce4fb76"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
set-cookie: NID=511=WmfyHO-2zvvR80DWi9wb4QPWlFBER4qg0-ww4LLlCC1Ihq4o4aftihXlPp8rBKS7YdUm6McY7iuhuoVLTfKtmqfSdCk75vV2zrwy0QxH-aDNQ6Um2R_ugrVPDdnxWeWfwQy69V9cF74vqkhO6FVZbeoLttcRaSy5myiJi7MK0d4; expires=Mon, 03-Jun-2024 21:00:20 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.blogger.com/img/icon18_edit_allbkg.gif
200 OK 162 B URL GET HTTP/3 www.blogger.com/img/icon18_edit_allbkg.gif
IP
Requested by https://www.comohd.xyz/2017/01/holadirectv.html
Certificate IssuerGoogle Trust Services LLC
Subject*.blogger.com
Fingerprint4A:89:9B:E5:F1:54:0E:2D:0A:8E:40:A8:27:DF:2E:6B:7F:74:51:90
ValidityMon, 23 Oct 2023 11:17:52 GMT - Mon, 15 Jan 2024 11:17:51 GMT
File type GIF image data, version 89a, 18 x 18\012- data
Hash c991641178ff05adf0d004298b5eafa9
d8f6ce8ecd92b86d49849360f6b81ceb10b4c941
ca9848e6006cfec8f9ffa29433ade8152204bdb95579200831c6dc0f53dff70b
GET /img/icon18_edit_allbkg.gif HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.comohd.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 162
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 04:01:50 GMT
expires: Thu, 07 Dec 2023 04:01:50 GMT
cache-control: public, max-age=604800
last-modified: Wed, 29 Nov 2023 17:00:16 GMT
content-type: image/gif
age: 320310
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
acscdn.com/script/suv5.js
200 OK 93 kB URL GET HTTP/3 acscdn.com/script/suv5.js
IP
Requested by https://www.comohd.xyz/2017/01/holadirectv.html
Certificate IssuerGoogle Trust Services LLC
Subjectacscdn.com
FingerprintAA:F8:50:9E:3E:B3:E7:D9:8E:7B:8D:2D:35:4D:33:15:6A:34:04:62
ValidityThu, 02 Nov 2023 07:42:44 GMT - Wed, 31 Jan 2024 07:42:43 GMT
File type Unicode text, UTF-8 text, with very long lines (65442)
Hash b0ef17dd4d9e449598f5e6f724b17761
96199d18c28e2122dbae2164d7eb612bb1d9a240
219c3739b8028f93404314f6f990bd95f2b58ff3650b1058e38581cb75fbccb2
GET /script/suv5.js HTTP/1.1
Host: acscdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.comohd.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 03 Dec 2023 21:00:20 GMT
content-type: text/javascript
x-guploader-uploadid: ABPtcPqNcEKs3weRZ-FfgesyamiaRYTAvlN-KM7i0Xv4upNT78Vr9rlogC2eGGJsjJPaba3cNwzI_0a5ZJWDXc6_jOKtGw
x-goog-generation: 1701078144239592
x-goog-metageneration: 2
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 97361
x-goog-hash: crc32c=RNemrA==, md5=sO8X3U2eRJWY9eb3JLF3YQ==
x-goog-storage-class: MULTI_REGIONAL
access-control-allow-origin: *
expires: Sun, 03 Dec 2023 21:06:35 GMT
cache-control: public, max-age=3600
age: 3058
last-modified: Mon, 27 Nov 2023 09:42:24 GMT
etag: W/"b0ef17dd4d9e449598f5e6f724b17761"
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=FEZ%2FCs%2Fel%2BIt5HW3MZq14MtuX6UVB1936LNtiFLiU8AAwWhg2zpyNxBLPIxGygIpyuo3QHjGLsgu9iRoS%2Ba1EBJMrW41SuggmfdoqQ%2BPcf7bNp9aUmNfHOG%2FuzwS"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82febd15fa3456c4-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
www.blogger.com/dyn-css/authorization.css?targetBlogID=1843886239975821420&zx=f1625be1-c971-4528-8f33-0e34b7d1ff4a
200 OK 21 B URL GET HTTP/3 www.blogger.com/dyn-css/authorization.css?targetBlogID=1843886239975821420&zx=f1625be1-c971-4528-8f33-0e34b7d1ff4a
IP
Requested by https://www.comohd.xyz/2017/01/holadirectv.html
Certificate IssuerGoogle Trust Services LLC
Subject*.blogger.com
Fingerprint4A:89:9B:E5:F1:54:0E:2D:0A:8E:40:A8:27:DF:2E:6B:7F:74:51:90
ValidityMon, 23 Oct 2023 11:17:52 GMT - Mon, 15 Jan 2024 11:17:51 GMT
File type very short file (no magic)
Hash 68b329da9893e34099c7d8ad5cb9c940
adc83b19e793491b1c6ea0fd8b46cd9f32e592fc
01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b
GET /dyn-css/authorization.css?targetBlogID=1843886239975821420&zx=f1625be1-c971-4528-8f33-0e34b7d1ff4a HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.comohd.xyz/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
p3p: CP="This is not a P3P policy! See https://www.google.com/support/accounts/bin/answer.py?hl=en&answer=151657 for more info."
content-security-policy: script-src 'self' *.google.com *.google-analytics.com 'unsafe-inline' 'unsafe-eval' *.gstatic.com *.googlesyndication.com *.blogger.com *.googleapis.com uds.googleusercontent.com https://s.ytimg.com https://i18n-cloud.appspot.com https://www.youtube.com www-onepick-opensocial.googleusercontent.com www-bloggervideo-opensocial.googleusercontent.com www-blogger-opensocial.googleusercontent.com https://www.blogblog.com; report-uri /cspreport
content-type: text/css; charset=UTF-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Sun, 03 Dec 2023 21:00:20 GMT
last-modified: Sun, 03 Dec 2023 21:00:20 GMT
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
content-length: 21
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
1stream.buzz/fr/4/60
200 OK 0 B IP
Requested by https://www.comohd.xyz/2017/01/holadirectv.html
Certificate IssuerGoogle Trust Services LLC
Subject1stream.buzz
FingerprintB9:7B:55:F7:B7:1D:71:BC:5F:DB:7E:DE:9B:D3:F6:A2:BD:DC:F4:9A
ValidityWed, 29 Nov 2023 20:49:42 GMT - Tue, 27 Feb 2024 20:49:41 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
HEAD /fr/4/60 HTTP/1.1
Host: 1stream.buzz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1stream.buzz/fr/4/60
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 03 Dec 2023 21:00:21 GMT
content-type: text/html; charset=UTF-8
x-proxy-cache: HIT
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Lac2yuLpdmAQMU03l%2BBtew8%2BGwWsmG1kBtXrgqDJfFcmvZVm%2BpUhgmkygN8aGs3RTp4LX2vxBWPo0s5Dx3mxfuqvkijWaTAmYkHHLJNepEJipHcOtM9bnPvJHndczv8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82febd17fa58b4fa-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
dukingdraon.com/tag.min.js
200 OK 26 kB URL GET HTTP/2 dukingdraon.com/tag.min.js
IP
Requested by https://1stream.buzz/fr/4/60
Certificate IssuerLet's Encrypt
Subjectdukingdraon.com
Fingerprint66:59:CC:41:9F:23:3B:DA:52:C5:8E:E8:61:12:5E:8D:25:D6:C3:7F
ValidityThu, 16 Nov 2023 05:11:03 GMT - Wed, 14 Feb 2024 05:11:02 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Hash fb7eb4b07c3e717cad649d3afa99ca57
ba3a9cdd70a5f99c0ed8a032d79a08a6edb673d2
e6aa84f006f03b6a1cf7f3a082a3d7470943d3f29253cc4b0d1ee0f3e2cc76ee
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /tag.min.js HTTP/1.1
Host: dukingdraon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1stream.buzz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 03 Dec 2023 21:00:21 GMT
content-type: text/javascript; charset=utf-8
content-length: 25611
content-encoding: br
x-trace-id: 573b955b9201e00aa2aeac084deb137b
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
accept-ranges: bytes
last-modified: Sat, 02 Dec 2023 17:40:02 GMT
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Wow64
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace
access-control-max-age: 86400
pragma: no-cache
expires: Tue, 11 Jan 1994 10:00:00 GMT
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
code.jquery.com/jquery-3.6.0.min.js
200 OK 31 kB URL GET HTTP/2 code.jquery.com/jquery-3.6.0.min.js
IP
Requested by https://livehdplay.ru/embedlc.php?id=60
Certificate IssuerSectigo Limited
Subject*.jquery.com
FingerprintD2:19:0A:AD:CE:BB:9C:61:17:5D:29:4B:A2:54:E8:C6:91:B8:F9:8D
ValidityTue, 11 Jul 2023 00:00:00 GMT - Sun, 14 Jul 2024 23:59:59 GMT
File type ASCII text, with very long lines (65447)
Hash 8fb8fee4fcc3cc86ff6c724154c49c42
b82d238d4e31fdf618bae8ac11a6c812c03dd0d4
ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e
GET /jquery-3.6.0.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://livehdplay.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Fri, 18 Oct 1991 12:00:00 GMT
etag: W/"28feccc0-15d9d"
cache-control: public, max-age=31536000, stale-while-revalidate=604800
access-control-allow-origin: *
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Sun, 03 Dec 2023 21:00:21 GMT
age: 1034604
x-served-by: cache-lga21931-LGA, cache-bma1633-BMA
x-cache: HIT, HIT
x-cache-hits: 14, 293656
x-timer: S1701637221.343169,VS0,VE0
vary: Accept-Encoding
content-length: 30875
X-Firefox-Spdy: h2
1stream.buzz/fr/4/60
200 OK 23 kB IP
Requested by https://www.comohd.xyz/2017/01/holadirectv.html
Certificate IssuerGoogle Trust Services LLC
Subject1stream.buzz
FingerprintB9:7B:55:F7:B7:1D:71:BC:5F:DB:7E:DE:9B:D3:F6:A2:BD:DC:F4:9A
ValidityWed, 29 Nov 2023 20:49:42 GMT - Tue, 27 Feb 2024 20:49:41 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (59451), with CRLF, LF line terminators
Hash 8bfbd97c50ea06d4a7b2a70e897a69e3
4532512ed9c7c4ada7eee818f3c45d4ba47f0066
518520cd5ad7238b05f2fe83014406d7f19f7d1bd792e97d6d37b077eea3b7bd
GET /fr/4/60 HTTP/1.1
Host: 1stream.buzz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.comohd.xyz/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 03 Dec 2023 21:00:20 GMT
content-type: text/html; charset=UTF-8
x-proxy-cache: HIT
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=c9RqX4igSYSTYjCiFb4vm62Ibdi%2FXaLVWCG17O%2Bs3FoOiLf9Lv6nyWhkWgLHnnT16b2HvHCo129q%2BG43zqVA4hzreKrgVPq0RkB124LLcv71t16uj%2FEJikIcUUBWTDo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82febd15f86a7128-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
dukingdraon.com/5/6555840/?oo=1&aab=1
200 OK 2.3 kB URL GET HTTP/2 dukingdraon.com/5/6555840/?oo=1&aab=1
IP
Requested by https://1stream.buzz/fr/4/60
Certificate IssuerLet's Encrypt
Subjectdukingdraon.com
Fingerprint66:59:CC:41:9F:23:3B:DA:52:C5:8E:E8:61:12:5E:8D:25:D6:C3:7F
ValidityThu, 16 Nov 2023 05:11:03 GMT - Wed, 14 Feb 2024 05:11:02 GMT
File type gzip compressed data, max speed, from Unix\012- data
Hash 2de7ba380da9752db74527698de111e0
2baf989ca1feab0c945f525df0420b1af417bfdb
dfa4244993dd46107113c7d5fe2731f20b68a25bb58f6532ed32af08fc6ccaef
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /5/6555840/?oo=1&aab=1 HTTP/1.1
Host: dukingdraon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://1stream.buzz
DNT: 1
Connection: keep-alive
Referer: https://1stream.buzz/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 03 Dec 2023 21:00:21 GMT
content-type: application/json
x-trace-id: 9a877cd50bccdeed9977ec95899f4bf0
link: <https://my.rtmark.net>; rel="preconnect dns-prefetch",<https://propeller-tracking.com>; rel="preconnect dns-prefetch",<https://sr7pv7n5x.com>; rel="preconnect dns-prefetch"
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Wow64
access-control-allow-origin: https://1stream.buzz
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace
access-control-max-age: 86400
timing-allow-origin: *
set-cookie: OAID=a0da120a40b6403abda46dc458cfbab8; expires=Mon, 02 Dec 2024 21:00:21 GMT; path=/; secure; SameSite=None
oaidts=1701637221; expires=Mon, 02 Dec 2024 21:00:21 GMT; path=/; secure; SameSite=None
syncedCookie=; expires=Tue, 10 Nov 2009 23:00:00 GMT
pragma: no-cache, no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT, Mon, 26 Jul 1997 05:00:00 GMT
content-encoding: gzip
X-Firefox-Spdy: h2
resources.blogblog.com/img/navbar/arrows-blue.png
200 OK 104 B URL GET HTTP/3 resources.blogblog.com/img/navbar/arrows-blue.png
IP
Requested by https://www.blogger.com/navbar.g?targetBlogID=1843886239975821420&blogName=%7C&publishMode=PUBLISH_MODE_HOSTED&navbarType=BLUE&layoutType=LAYOUTS&searchRoot=https://www.comohd.xyz/search&blogLocale=es&v=2&homepageUrl=https://www.comohd.xyz/&targetPostID=6466873969710847620&blogPostOrPageUrl=https://www.comohd.xyz/2017/01/holadirectv.html&vt=2870530090135750647&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.coKrc9A11Ng.O%2Fd%3D1%2Frs%3DAHpOoo_J8xjByIzBlcB6zLaAkxsUwdPdIw%2Fm%3D__features__#id=navbar-iframe&_gfid=navbar-iframe&parent=https%3A%2F%2Fwww.comohd.xyz&pfname=&rpctoken=29263534
Certificate IssuerGoogle Trust Services LLC
Subject*.blogger.com
Fingerprint4A:89:9B:E5:F1:54:0E:2D:0A:8E:40:A8:27:DF:2E:6B:7F:74:51:90
ValidityMon, 23 Oct 2023 11:17:52 GMT - Mon, 15 Jan 2024 11:17:51 GMT
File type PNG image data, 19 x 4, 8-bit/color RGBA, non-interlaced\012- data
Hash 38c95719e05f4184a301768d8de91e09
d0ed1147d46f2cf592584239a5a101d6f2abb588
259ece79a45ad7ecbcf6fb0669de61aa6a01ebedaba47a7e88283435e0e6b1be
GET /img/navbar/arrows-blue.png HTTP/1.1
Host: resources.blogblog.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.blogger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 104
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 29 Nov 2023 11:08:39 GMT
expires: Wed, 06 Dec 2023 11:08:39 GMT
cache-control: public, max-age=604800
last-modified: Wed, 29 Nov 2023 07:57:28 GMT
content-type: image/png
age: 381102
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
acscdn.com/script/suv4.js
200 OK 114 kB URL GET HTTP/2 acscdn.com/script/suv4.js
IP
Requested by https://www.comohd.xyz/2017/01/holadirectv.html
Certificate IssuerGoogle Trust Services LLC
Subjectacscdn.com
FingerprintAA:F8:50:9E:3E:B3:E7:D9:8E:7B:8D:2D:35:4D:33:15:6A:34:04:62
ValidityThu, 02 Nov 2023 07:42:44 GMT - Wed, 31 Jan 2024 07:42:43 GMT
File type Unicode text, UTF-8 text, with very long lines (47039), with LF, NEL line terminators
Size 114 kB (114351 bytes)
Hash de54690edaff862d7d45599326c5849e
727480951690e21f66c1fbf27817b1917c99e201
6e83b1d1c02e76fd98d4dfb457ae14cf1670271fe0107a692ee367eb73c9809e
GET /script/suv4.js HTTP/1.1
Host: acscdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.comohd.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 03 Dec 2023 21:00:20 GMT
content-type: text/javascript
x-guploader-uploadid: ABPtcPphWgq2Qh0dwee-Ge3MSU1EvQF5SDg-9eFHWBQJsoJPeDzQCuktQc_aIfEA9oOomdTrNoBaxWTW6-nsWMKfoE0goObAUXco
x-goog-generation: 1701078116653425
x-goog-metageneration: 2
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 202851
x-goog-hash: crc32c=U3QS7A==, md5=3lRpDtr/hi19RVmTJsWEng==
x-goog-storage-class: MULTI_REGIONAL
access-control-allow-origin: *
expires: Sun, 03 Dec 2023 20:10:29 GMT
cache-control: public, max-age=3600
age: 3042
last-modified: Mon, 27 Nov 2023 09:41:56 GMT
etag: W/"de54690edaff862d7d45599326c5849e"
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=yQkwpN2TBlxs36uoH8WFJ3078lhlEfov03hAE83hmx4UWccNxqdmuBP%2F9CaKABdAGLfUDFc1syK3cZK1yw0TI2RsSjVOmxRueKqkcfAHgqLau34Sk6t%2BU4KJ%2FebL"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82febd146d3b56aa-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
apis.google.com/js/platform:gapi.iframes.style.common.js
200 OK 22 kB URL GET HTTP/3 apis.google.com/js/platform:gapi.iframes.style.common.js
IP
Requested by https://www.blogger.com/navbar.g?targetBlogID=1843886239975821420&blogName=%7C&publishMode=PUBLISH_MODE_HOSTED&navbarType=BLUE&layoutType=LAYOUTS&searchRoot=https://www.comohd.xyz/search&blogLocale=es&v=2&homepageUrl=https://www.comohd.xyz/&targetPostID=6466873969710847620&blogPostOrPageUrl=https://www.comohd.xyz/2017/01/holadirectv.html&vt=2870530090135750647&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.coKrc9A11Ng.O%2Fd%3D1%2Frs%3DAHpOoo_J8xjByIzBlcB6zLaAkxsUwdPdIw%2Fm%3D__features__#id=navbar-iframe&_gfid=navbar-iframe&parent=https%3A%2F%2Fwww.comohd.xyz&pfname=&rpctoken=29263534
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint4C:0D:17:8C:F1:30:7C:3A:6F:9B:8E:B4:83:0E:5C:BD:ED:17:3E:95
ValidityMon, 23 Oct 2023 11:18:24 GMT - Mon, 15 Jan 2024 11:18:23 GMT
File type ASCII text, with very long lines (2664)
Hash b970f4ece0f21dae7d57dcbbbe1eb48b
52ab98370d3fc4bfd4c1b23cb3ed5dc1e37d779a
53dbcf2ac8d4a8d0a0fc4d5a15778fd36664923c87a60891a87bf8ec45535a91
GET /js/platform:gapi.iframes.style.common.js HTTP/1.1
Host: apis.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.blogger.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
access-control-allow-origin: *
content-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gapi-team
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="gapi-team"
report-to: {"group":"gapi-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gapi-team"}]}
timing-allow-origin: *
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
content-length: 21940
date: Sun, 03 Dec 2023 21:00:21 GMT
expires: Sun, 03 Dec 2023 21:00:21 GMT
cache-control: private, max-age=1800, stale-while-revalidate=1800
etag: "f3d0fc258127dfc5"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
set-cookie: NID=511=E6XOUZHutsz-p5L0zLp0hRPZXYev0ChXh-ZMzomLsw4hfjNRLo-PkRSwlVPkbTV_3JWBYY3xKGD__fHiCAFRUcCNIJYEwiezNNFq1L1YDei9YFKg993o47w3gvzdKE-p34113UBlhtaNFpMKJ3ddjzagtQNMlx4PoiW65z-2r0g; expires=Mon, 03-Jun-2024 21:00:21 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
1stream.buzz/pro.php
528 B IP
Requested by https://livehdplay.ru/embedlc.php?id=60
Certificate IssuerGoogle Trust Services LLC
Subject1stream.buzz
FingerprintB9:7B:55:F7:B7:1D:71:BC:5F:DB:7E:DE:9B:D3:F6:A2:BD:DC:F4:9A
ValidityWed, 29 Nov 2023 20:49:42 GMT - Tue, 27 Feb 2024 20:49:41 GMT
File type ASCII text, with CRLF line terminators
Hash 0c75cf0096cb87143d69ccba9176ccb7
a7117e07d7df19931faf12210e1d60ef4aee9ccd
05ac2ef5e269645e0b6f09b2f381fe3ab3b3168f0d11279829d36d6e9b0dc248
GET /pro.php HTTP/1.1
Host: 1stream.buzz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://livehdplay.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 03 Dec 2023 21:00:21 GMT
content-type: text/html; charset=UTF-8
x-proxy-cache: HIT
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=qppxWC%2FPv0adYpArGj0qTPUlIkumwxFodas%2BfAJKcY8MLK8KOPrXmqSQ%2BOZHUcQWLCHQW8NzvnCuBL6%2BlSAu6A9NaXwnr83fiKwGLI2Ax8HASmr2Cs2l9jJjUxRIMzk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82febd191bccb4fa-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.coKrc9A11Ng.O/m=gapi_iframes_style_common/rt=j/sv=1/d=1/ed=1/rs=AHpOoo_J8xjByIzBlcB6zLaAkxsUwdPdIw/cb=gapi.loaded_0?le=scs
200 OK 46 kB URL GET HTTP/3 apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.coKrc9A11Ng.O/m=gapi_iframes_style_common/rt=j/sv=1/d=1/ed=1/rs=AHpOoo_J8xjByIzBlcB6zLaAkxsUwdPdIw/cb=gapi.loaded_0?le=scs
IP
Requested by https://www.blogger.com/navbar.g?targetBlogID=1843886239975821420&blogName=%7C&publishMode=PUBLISH_MODE_HOSTED&navbarType=BLUE&layoutType=LAYOUTS&searchRoot=https://www.comohd.xyz/search&blogLocale=es&v=2&homepageUrl=https://www.comohd.xyz/&targetPostID=6466873969710847620&blogPostOrPageUrl=https://www.comohd.xyz/2017/01/holadirectv.html&vt=2870530090135750647&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.coKrc9A11Ng.O%2Fd%3D1%2Frs%3DAHpOoo_J8xjByIzBlcB6zLaAkxsUwdPdIw%2Fm%3D__features__#id=navbar-iframe&_gfid=navbar-iframe&parent=https%3A%2F%2Fwww.comohd.xyz&pfname=&rpctoken=29263534
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint4C:0D:17:8C:F1:30:7C:3A:6F:9B:8E:B4:83:0E:5C:BD:ED:17:3E:95
ValidityMon, 23 Oct 2023 11:18:24 GMT - Mon, 15 Jan 2024 11:18:23 GMT
File type ASCII text, with very long lines (1505)
Hash a5139ae5276fac825f580dd8b48d0f72
2820e165c330673129cebdc8e7cf806e1620c0a0
2170ad362c9ba9f7ff9b642d2a9d72a263fff1cd47de3664c55d6a7462c4cbc3
GET /_/scs/abc-static/_/js/k=gapi.lb.en.coKrc9A11Ng.O/m=gapi_iframes_style_common/rt=j/sv=1/d=1/ed=1/rs=AHpOoo_J8xjByIzBlcB6zLaAkxsUwdPdIw/cb=gapi.loaded_0?le=scs HTTP/1.1
Host: apis.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.blogger.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/social-frontend-mpm-access
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="social-frontend-mpm-access"
report-to: {"group":"social-frontend-mpm-access","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/social-frontend-mpm-access"}]}
content-length: 45499
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 29 Nov 2023 23:12:04 GMT
expires: Thu, 28 Nov 2024 23:12:04 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 08 Nov 2023 22:37:21 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 337697
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
youradexchange.com/script/suurl5.php?r=6701726&cbur=0.96752000577087&cbiframe=1&cbWidth=620&cbHeight=400&cbtitle=&cbpage=https%3A%2F%2Fwww.rojadirectatvhd.org%2F&cbref=&cbdescription=&cbkeywords=&cbcdn=acscdn.com&ts=1701637226280&srs=809f9a09a690b6425d292fd229600608&atv=38.3-sw-suv5
200 OK 885 B URL GET HTTP/2 youradexchange.com/script/suurl5.php?r=6701726&cbur=0.96752000577087&cbiframe=1&cbWidth=620&cbHeight=400&cbtitle=&cbpage=https%3A%2F%2Fwww.rojadirectatvhd.org%2F&cbref=&cbdescription=&cbkeywords=&cbcdn=acscdn.com&ts=1701637226280&srs=809f9a09a690b6425d292fd229600608&atv=38.3-sw-suv5
IP
Requested by https://www.comohd.xyz/2017/01/holadirectv.html
Certificate IssuerGoogle Trust Services LLC
Subjectyouradexchange.com
FingerprintFD:52:FD:E8:62:0A:DE:66:86:28:19:39:64:21:57:5C:CB:8A:59:D9
ValidityTue, 17 Oct 2023 07:21:58 GMT - Mon, 15 Jan 2024 07:21:57 GMT
File type troff or preprocessor input, ASCII text, with very long lines (911), with no line terminators
Hash 8b29cd2d7252fba2a09939e22d2fcd00
28fd106498d65c43f5762726aaa9ee5cf741baa8
0857f177ba4fbbe9fa492555af547ecbd1bd356a0e26cd3d66a8457151e740e1
GET /script/suurl5.php?r=6701726&cbur=0.96752000577087&cbiframe=1&cbWidth=620&cbHeight=400&cbtitle=&cbpage=https%3A%2F%2Fwww.rojadirectatvhd.org%2F&cbref=&cbdescription=&cbkeywords=&cbcdn=acscdn.com&ts=1701637226280&srs=809f9a09a690b6425d292fd229600608&atv=38.3-sw-suv5 HTTP/1.1
Host: youradexchange.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.comohd.xyz/
Origin: https://www.comohd.xyz
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 03 Dec 2023 21:00:21 GMT
content-type: application/json; charset=utf-8
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: GET, POST, OPTIONS
via: 1.1 google
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=JYQLoQ8cI5V02IstDEguUoAqopN0zfwucKw57Of%2FRN07cSpa3QmUvzZVpNafC%2Bsh2QZDbd69Ul%2B1hcZwTha9Sqmj%2BRAJeDv1UAwbISJuCfXL3MPqiFGxMrO0GKAm8P3mwZUVlXA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82febd17ddb64145-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
uvtuiks.com/script/utils.js
200 OK 173 kB URL GET HTTP/2 uvtuiks.com/script/utils.js
IP
Requested by https://1stream.buzz/fr/4/60
Certificate IssuerLet's Encrypt
Subjectuvtuiks.com
Fingerprint99:B2:29:FC:E5:01:AD:96:C8:9E:17:F0:4C:34:E5:C3:D7:59:C2:0B
ValidityMon, 27 Nov 2023 11:40:04 GMT - Sun, 25 Feb 2024 11:40:03 GMT
Size 173 kB (172787 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /script/utils.js HTTP/1.1
Host: uvtuiks.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1stream.buzz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 03 Dec 2023 21:00:21 GMT
content-type: text/javascript
x-guploader-uploadid: ABPtcPqaD6B0p-VR-mpgM2ui5EyExm7Se75-mheZY1yGwwsZm3mkpB2r_p_LwTmOAAc-WK3bBIdCtFoxZf7MEuxcu5q1uj2_Fxpv
x-goog-generation: 1701078215031777
x-goog-metageneration: 2
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 172787
x-goog-hash: crc32c=qHOSqg==, md5=XwlLijAy+bWxVu4PyGm2nA==
x-goog-storage-class: MULTI_REGIONAL
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace
expires: Sun, 03 Dec 2023 21:10:40 GMT
cache-control: public, max-age=14400
age: 985
last-modified: Mon, 27 Nov 2023 09:43:35 GMT
etag: W/"5f094b8a3032f9b5b156ee0fc869b69c"
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=o871jVAZIPVKtvr%2Bsea4sQJBn1WXK5oAV1T1MrqLRTH984Km0GK81VyzCsLPm3zYI3gMD0K0lvYIiC98a7mRzxrdz1%2Bp77VYScU4Ml5V89hhJaUb5CjLYxrAnxWIvQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82febd18e92f6585-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
1stream.buzz/wcs.js?v=2
404 Not Found 67 kB IP
Requested by https://1stream.buzz/fr/4/60
Certificate IssuerGoogle Trust Services LLC
Subject1stream.buzz
FingerprintB9:7B:55:F7:B7:1D:71:BC:5F:DB:7E:DE:9B:D3:F6:A2:BD:DC:F4:9A
ValidityWed, 29 Nov 2023 20:49:42 GMT - Tue, 27 Feb 2024 20:49:41 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /wcs.js?v=2 HTTP/1.1
Host: 1stream.buzz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1stream.buzz/fr/4/60
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
date: Sun, 03 Dec 2023 21:00:21 GMT
content-type: text/html; charset=UTF-8
cache-control: max-age=14400
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Lttw2IwzoYS0llciAIeZNFAp%2FZDXBsPo1Nnno1vyJIAwogD2GOchMRTlFyQ9QQgd5sbCJWGKjXdCCB9DZ2ZiIH4s1oCPr7Yeqw8wQwBuWpBl0gSYjqGpMoLhc5zQdpA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82febd176961b4fa-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
livehdplay.ru/embedlc.php?id=60
200 OK 9.2 kB URL GET HTTP/2 livehdplay.ru/embedlc.php?id=60
IP
Requested by https://1stream.buzz/fr/4/60
Certificate IssuerGoogle Trust Services LLC
Subjectlivehdplay.ru
FingerprintE4:0C:73:1A:C4:7D:13:05:52:AA:75:F2:A7:68:70:44:96:C6:26:78
ValidityThu, 09 Nov 2023 11:51:29 GMT - Wed, 07 Feb 2024 11:51:28 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (9822), with no line terminators
Hash 1d38a99ecb2a1affb3b41d60aa9af51e
4c66ebdb165286080a940cfbae354702aee70e1b
b67afeea44e8b6a52223881162e38119ce32ad614a2bae4570165aadb3c88975
GET /embedlc.php?id=60 HTTP/1.1
Host: livehdplay.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1stream.buzz/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 03 Dec 2023 21:00:21 GMT
content-type: text/html; charset=UTF-8
cache-control: public, max-age=14400, immutable, no-transform
node: PHP
content-encoding: gzip
cf-cache-status: HIT
age: 5470
last-modified: Sun, 03 Dec 2023 19:29:11 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=nJiyV9C3HnxGhTCqZykaWHJphKqvC86rrHkETuGc%2Fmg%2BZBOezZGB9uMVzgKfgEvocbCz3zwYYisF3%2FXL0G00hemzSNYp2rWGGHJgpjO3H4EPkivA3PVhjXtzS%2FqYkEnS"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82febd187cdfb509-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
www.blogger.com/navbar.g?targetBlogID=1843886239975821420&blogName=%7C&publishMode=PUBLISH_MODE_HOSTED&navbarType=BLUE&layoutType=LAYOUTS&searchRoot=https://www.comohd.xyz/search&blogLocale=es&v=2&homepageUrl=https://www.comohd.xyz/&targetPostID=6466873969710847620&blogPostOrPageUrl=https://www.comohd.xyz/2017/01/holadirectv.html&vt=2870530090135750647&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.coKrc9A11Ng.O%2Fd%3D1%2Frs%3DAHpOoo_J8xjByIzBlcB6zLaAkxsUwdPdIw%2Fm%3D__features__
200 OK 6.7 kB URL GET HTTP/3 www.blogger.com/navbar.g?targetBlogID=1843886239975821420&blogName=%7C&publishMode=PUBLISH_MODE_HOSTED&navbarType=BLUE&layoutType=LAYOUTS&searchRoot=https://www.comohd.xyz/search&blogLocale=es&v=2&homepageUrl=https://www.comohd.xyz/&targetPostID=6466873969710847620&blogPostOrPageUrl=https://www.comohd.xyz/2017/01/holadirectv.html&vt=2870530090135750647&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.coKrc9A11Ng.O%2Fd%3D1%2Frs%3DAHpOoo_J8xjByIzBlcB6zLaAkxsUwdPdIw%2Fm%3D__features__
IP
Requested by https://www.comohd.xyz/2017/01/holadirectv.html
Certificate IssuerGoogle Trust Services LLC
Subject*.blogger.com
Fingerprint4A:89:9B:E5:F1:54:0E:2D:0A:8E:40:A8:27:DF:2E:6B:7F:74:51:90
ValidityMon, 23 Oct 2023 11:17:52 GMT - Mon, 15 Jan 2024 11:17:51 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (6878), with no line terminators
Hash 216882e3772bf80b06c214ccd765cdc0
c164b57fecf751829b8e74f6a1c14d3ff02a06bd
2f64804a32c44caa0ed61346d5ede247f2e1632d09d92507f41d627754472ea5
GET /navbar.g?targetBlogID=1843886239975821420&blogName=%7C&publishMode=PUBLISH_MODE_HOSTED&navbarType=BLUE&layoutType=LAYOUTS&searchRoot=https://www.comohd.xyz/search&blogLocale=es&v=2&homepageUrl=https://www.comohd.xyz/&targetPostID=6466873969710847620&blogPostOrPageUrl=https://www.comohd.xyz/2017/01/holadirectv.html&vt=2870530090135750647&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.coKrc9A11Ng.O%2Fd%3D1%2Frs%3DAHpOoo_J8xjByIzBlcB6zLaAkxsUwdPdIw%2Fm%3D__features__ HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.comohd.xyz/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
p3p: CP="This is not a P3P policy! See https://www.google.com/support/accounts/bin/answer.py?hl=en&answer=151657 for more info."
content-security-policy: script-src 'self' *.google.com *.google-analytics.com 'unsafe-inline' 'unsafe-eval' *.gstatic.com *.googlesyndication.com *.blogger.com *.googleapis.com uds.googleusercontent.com https://s.ytimg.com https://i18n-cloud.appspot.com https://www.youtube.com www-onepick-opensocial.googleusercontent.com www-bloggervideo-opensocial.googleusercontent.com www-blogger-opensocial.googleusercontent.com https://www.blogblog.com; report-uri /cspreport
content-type: text/html; charset=UTF-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Sun, 03 Dec 2023 21:00:21 GMT
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 2597
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
img.webme.com/pic/l/larojadirectaenvivo/uy.gif
200 OK 365 B URL GET HTTP/1.1 img.webme.com/pic/l/larojadirectaenvivo/uy.gif
IP
ASN #28753 Leaseweb Deutschland GmbH
Requested by https://www.rojadirectatvhd.org/roja-directv.php
Certificate IssuerLet's Encrypt
Subjectimg.webme.com
Fingerprint7A:EF:57:A4:16:05:4B:A7:BE:0D:6D:40:EE:9D:14:95:3C:3A:1F:95
ValidityMon, 30 Oct 2023 13:23:18 GMT - Sun, 28 Jan 2024 13:23:17 GMT
File type GIF image data, version 87a, 16 x 11\012- data
Hash df3b862d3828f60ed3f86ed9ebdb0cb3
de5210de69cbac61578a644b84442f01b46bfd26
8c45edbec6bdd9ff5e6f2b1e1a8a6179b6e530b27e3a333b40b292b23ca9568f
GET /pic/l/larojadirectaenvivo/uy.gif HTTP/1.1
Host: img.webme.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.rojadirectatvhd.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 03 Dec 2023 21:00:19 GMT
Content-Type: image/gif
Content-Length: 365
Connection: keep-alive
Last-Modified: Sun, 05 Mar 2023 23:58:12 GMT
ETag: "64052c94-16d"
X-wm-VIP: 193.238.27.18
X-Varnish: 941957172, 924686087 897972773
Age: 76314
Via: 1.1 varnish-v4, 1.1 varnish-v4
Accept-Ranges: bytes
livehdplay.ru/blast.js
200 OK 78 kB IP
Requested by https://livehdplay.ru/embedlc.php?id=60
Certificate IssuerGoogle Trust Services LLC
Subjectlivehdplay.ru
FingerprintE4:0C:73:1A:C4:7D:13:05:52:AA:75:F2:A7:68:70:44:96:C6:26:78
ValidityThu, 09 Nov 2023 11:51:29 GMT - Wed, 07 Feb 2024 11:51:28 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Hash 091faec928970e76d37a3601c19fcf8a
6441e8eebe90eb8d4a40e7c25440ff99caba3520
eb06375118b1eb73f43b8f1851472008f84999a1b27359c075bf5da6feef9a12
GET /blast.js HTTP/1.1
Host: livehdplay.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://livehdplay.ru/embedlc.php?id=60
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 03 Dec 2023 21:00:21 GMT
content-type: application/javascript
last-modified: Mon, 27 Nov 2023 16:16:01 GMT
etag: W/"6564c0c1-13040"
cache-control: max-age=14400
cf-cache-status: HIT
age: 2970
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=FcnYDj6mkeB%2FMvbn6XPsj3jNSHM7j54tdLXyt5Uf3Dp3yPAjR6wXk%2Ftj9lmY2WfVWnUaanTvRfZ8E9VRaTClgFeQoa8XKkVirskCwUpHDv1rVg1sVxIgmcrsfiHyosq5"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82febd191fa25699-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
dukingdraon.com/?rb=spo-7CzxLGZnpdidsxb-W2cVxJlSLfsTJ6uX0i8FFzJddc3w6O0EohEQYHWJie476DwX8RPvsK8j07k0jVny6lWm9mLSSISqXxP-hmbkpIl9eXJGgdrJY91awmHkWD52-_vWuCkQPqXme6WtxXU6SjTJW-HuXOgosC3d5C8AMTNfdvtcd0EYQv6SY3cQm-kP7wsN_zJaYkO42WtADKpw_fJAf8Rtv0kQoYMYsg%3D%3D&request_ab2=0&zoneid=6555840&js_build=iclick-v1.635.5-auto&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=600&wih=400&wiw=600&wfc=1&pl=https%3A%2F%2F1stream.buzz%2Ffr%2F4%2F60&drf=https%3A%2F%2Fwww.comohd.xyz%2F&np=1&pt=0&nb=1&ng=1&ix=1&nw=1&tb=false&wgl=&js_build=iclick-v1.635.5-auto&bs=de4bd013-aaa0-4811-99a2-e840fd8c07ae&userId=a0da120a40b6403abda46dc458cfbab8&m=link
200 OK 1.7 kB URL GET HTTP/2 dukingdraon.com/?rb=spo-7CzxLGZnpdidsxb-W2cVxJlSLfsTJ6uX0i8FFzJddc3w6O0EohEQYHWJie476DwX8RPvsK8j07k0jVny6lWm9mLSSISqXxP-hmbkpIl9eXJGgdrJY91awmHkWD52-_vWuCkQPqXme6WtxXU6SjTJW-HuXOgosC3d5C8AMTNfdvtcd0EYQv6SY3cQm-kP7wsN_zJaYkO42WtADKpw_fJAf8Rtv0kQoYMYsg%3D%3D&request_ab2=0&zoneid=6555840&js_build=iclick-v1.635.5-auto&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=600&wih=400&wiw=600&wfc=1&pl=https%3A%2F%2F1stream.buzz%2Ffr%2F4%2F60&drf=https%3A%2F%2Fwww.comohd.xyz%2F&np=1&pt=0&nb=1&ng=1&ix=1&nw=1&tb=false&wgl=&js_build=iclick-v1.635.5-auto&bs=de4bd013-aaa0-4811-99a2-e840fd8c07ae&userId=a0da120a40b6403abda46dc458cfbab8&m=link
IP
Requested by https://1stream.buzz/fr/4/60
Certificate IssuerLet's Encrypt
Subjectdukingdraon.com
Fingerprint66:59:CC:41:9F:23:3B:DA:52:C5:8E:E8:61:12:5E:8D:25:D6:C3:7F
ValidityThu, 16 Nov 2023 05:11:03 GMT - Wed, 14 Feb 2024 05:11:02 GMT
File type troff or preprocessor input, ASCII text, with very long lines (1745), with no line terminators
Hash 88f294c9133ae297000e6e89c912bcd5
939230304d6f18eea237aac52530d644ae7c0df0
d2de3ce73fb5e8e74ff8f6fce6cac5dc89f2f5a25fcbfae24ac61b9d7cbe18b4
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /?rb=spo-7CzxLGZnpdidsxb-W2cVxJlSLfsTJ6uX0i8FFzJddc3w6O0EohEQYHWJie476DwX8RPvsK8j07k0jVny6lWm9mLSSISqXxP-hmbkpIl9eXJGgdrJY91awmHkWD52-_vWuCkQPqXme6WtxXU6SjTJW-HuXOgosC3d5C8AMTNfdvtcd0EYQv6SY3cQm-kP7wsN_zJaYkO42WtADKpw_fJAf8Rtv0kQoYMYsg%3D%3D&request_ab2=0&zoneid=6555840&js_build=iclick-v1.635.5-auto&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=600&wih=400&wiw=600&wfc=1&pl=https%3A%2F%2F1stream.buzz%2Ffr%2F4%2F60&drf=https%3A%2F%2Fwww.comohd.xyz%2F&np=1&pt=0&nb=1&ng=1&ix=1&nw=1&tb=false&wgl=&js_build=iclick-v1.635.5-auto&bs=de4bd013-aaa0-4811-99a2-e840fd8c07ae&userId=a0da120a40b6403abda46dc458cfbab8&m=link HTTP/1.1
Host: dukingdraon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1stream.buzz/
Origin: https://1stream.buzz
DNT: 1
Connection: keep-alive
Cookie: OAID=a0da120a40b6403abda46dc458cfbab8; oaidts=1701637221
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 03 Dec 2023 21:00:21 GMT
content-type: application/json
x-trace-id: 8a82cabe7989858ee07793e9597c100c
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Wow64
access-control-allow-origin: https://1stream.buzz
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace
access-control-max-age: 86400
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
set-cookie: OAID=a0da120a40b6403abda46dc458cfbab8; expires=Mon, 02 Dec 2024 21:00:21 GMT; path=/; secure; SameSite=None
oaidts=1701637221; expires=Mon, 02 Dec 2024 21:00:21 GMT; path=/; secure; SameSite=None
syncedCookie=true; expires=Sun, 10 Dec 2023 21:00:21 GMT; path=/; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
content-encoding: gzip
X-Firefox-Spdy: h2
livehdplay.ru/clappr.min.js
200 OK 525 kB URL GET HTTP/3 livehdplay.ru/clappr.min.js
IP
Requested by https://livehdplay.ru/embedlc.php?id=60
Certificate IssuerGoogle Trust Services LLC
Subjectlivehdplay.ru
FingerprintE4:0C:73:1A:C4:7D:13:05:52:AA:75:F2:A7:68:70:44:96:C6:26:78
ValidityThu, 09 Nov 2023 11:51:29 GMT - Wed, 07 Feb 2024 11:51:28 GMT
Size 525 kB (525081 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /clappr.min.js HTTP/1.1
Host: livehdplay.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://livehdplay.ru/embedlc.php?id=60
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 03 Dec 2023 21:00:21 GMT
content-type: application/javascript
last-modified: Mon, 27 Nov 2023 16:16:06 GMT
etag: W/"6564c0c6-80319"
cache-control: max-age=14400
cf-cache-status: HIT
age: 2970
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ZoARThyf4LIcPB%2B6G74dMKCp3CEez8KNtajgRflbQZUUC3m5FutR%2Fjn1wqlPBt9SsTBW9ioejTahP5DT8KV%2BfDX%2FGrrGomGGSI1RKMBKRl87kbvDMZHxjSWeAG%2Fe7tFw"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82febd191f985699-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
acscdn.com/script/ut.js?cb=1701637226185
200 OK 82 kB URL GET HTTP/3 acscdn.com/script/ut.js?cb=1701637226185
IP
Requested by https://www.comohd.xyz/2017/01/holadirectv.html
Certificate IssuerGoogle Trust Services LLC
Subjectacscdn.com
FingerprintAA:F8:50:9E:3E:B3:E7:D9:8E:7B:8D:2D:35:4D:33:15:6A:34:04:62
ValidityThu, 02 Nov 2023 07:42:44 GMT - Wed, 31 Jan 2024 07:42:43 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /script/ut.js?cb=1701637226185 HTTP/1.1
Host: acscdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.comohd.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 03 Dec 2023 21:00:20 GMT
content-type: text/javascript
x-guploader-uploadid: ABPtcPoMxnjoTECm23fSTshPvm-N8Uf2eh1psYScOlZgSQ-5WbSKIR2CPpTXXBPzLMrJAw5ibGUZIX9tLRcoawTw1pfvllmHqQhJ
x-goog-generation: 1701078201797678
x-goog-metageneration: 2
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 82099
x-goog-hash: crc32c=GKpGKQ==, md5=hSTtUFVQcINAGNFMKOKS5Q==
x-goog-storage-class: MULTI_REGIONAL
access-control-allow-origin: *
expires: Sun, 03 Dec 2023 21:06:11 GMT
cache-control: public, max-age=3600
age: 3059
last-modified: Mon, 27 Nov 2023 09:43:21 GMT
etag: W/"8524ed50555070834018d14c28e292e5"
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=5BokqdXjZjA2G%2BvxwhSc3NoyBz1T4R9bUzEkXLybhf%2FacaqZqAQfIjUtPpaDgp%2BPa7EPX%2FPf3Csriyy%2FF7Pp8pM0iXchRwDy0EROYAtEPxll9hPQd%2BeCxZe2orYp"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82febd15fa2156c4-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
youradexchange.com/script/suurl5.php?r=7138734&cbur=0.5396448978253953&cbiframe=1&cbWidth=600&cbHeight=400&cbtitle=&cbpage=https%3A%2F%2Fwww.comohd.xyz%2F&cbref=&cbdescription=&cbkeywords=&cbcdn=uvtuiks.com&ts=1701637227237&srs=9a8bc271ff7818471c8a5f6880b88149&atv=38.3-sw-adbl-suv5&abtg=1
200 OK 918 B URL GET HTTP/2 youradexchange.com/script/suurl5.php?r=7138734&cbur=0.5396448978253953&cbiframe=1&cbWidth=600&cbHeight=400&cbtitle=&cbpage=https%3A%2F%2Fwww.comohd.xyz%2F&cbref=&cbdescription=&cbkeywords=&cbcdn=uvtuiks.com&ts=1701637227237&srs=9a8bc271ff7818471c8a5f6880b88149&atv=38.3-sw-adbl-suv5&abtg=1
IP
Requested by https://1stream.buzz/fr/4/60
Certificate IssuerGoogle Trust Services LLC
Subjectyouradexchange.com
FingerprintFD:52:FD:E8:62:0A:DE:66:86:28:19:39:64:21:57:5C:CB:8A:59:D9
ValidityTue, 17 Oct 2023 07:21:58 GMT - Mon, 15 Jan 2024 07:21:57 GMT
File type troff or preprocessor input, ASCII text, with very long lines (944), with no line terminators
Hash ddd1332f96952183150d9af71bb69109
4d5e9fba4f48e47e5f119ab666df230501093a4c
d0d5411d4200decab1a9623fbf8f5b39cc21b63069ecf1f52269d077e22f449f
GET /script/suurl5.php?r=7138734&cbur=0.5396448978253953&cbiframe=1&cbWidth=600&cbHeight=400&cbtitle=&cbpage=https%3A%2F%2Fwww.comohd.xyz%2F&cbref=&cbdescription=&cbkeywords=&cbcdn=uvtuiks.com&ts=1701637227237&srs=9a8bc271ff7818471c8a5f6880b88149&atv=38.3-sw-adbl-suv5&abtg=1 HTTP/1.1
Host: youradexchange.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1stream.buzz/
Origin: https://1stream.buzz
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 03 Dec 2023 21:00:22 GMT
content-type: application/json; charset=utf-8
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Content-Type
via: 1.1 google
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Ba%2FqWuAs2LmiyweMRPH2dnH0xS8LsouZWhJ3d2Hdwf%2BBK2FAAq1mVCpQ5q8jX%2F1s%2BSr2yCmB7Py1qk6F%2B2oQDWZO%2Fw%2BNhspC%2FV6hxjUn2W4RcvUyvVcm7lx59zCZm3jv1wArEZA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82febd1cbec54145-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
uvtuiks.com/script/ut.js?cb=1701637226911
200 OK 82 kB URL GET HTTP/3 uvtuiks.com/script/ut.js?cb=1701637226911
IP
Requested by https://1stream.buzz/fr/4/60
Certificate IssuerLet's Encrypt
Subjectuvtuiks.com
Fingerprint99:B2:29:FC:E5:01:AD:96:C8:9E:17:F0:4C:34:E5:C3:D7:59:C2:0B
ValidityMon, 27 Nov 2023 11:40:04 GMT - Sun, 25 Feb 2024 11:40:03 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /script/ut.js?cb=1701637226911 HTTP/1.1
Host: uvtuiks.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1stream.buzz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 03 Dec 2023 21:00:21 GMT
content-type: text/javascript
x-guploader-uploadid: ABPtcPp59TV8cvmItVBBM2tVIB0Lxl5UM-zkU5Iq8de5QJk_uZf5a99oF_csVmexzmLC6WfMcWRM3WB0m7RUYBr3DA7Pf9eBZUTG
x-goog-generation: 1701078201797678
x-goog-metageneration: 2
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 82099
x-goog-hash: crc32c=GKpGKQ==, md5=hSTtUFVQcINAGNFMKOKS5Q==
x-goog-storage-class: MULTI_REGIONAL
access-control-allow-origin: *
expires: Sun, 03 Dec 2023 20:44:06 GMT
cache-control: public, max-age=14400
age: 1642
last-modified: Mon, 27 Nov 2023 09:43:21 GMT
etag: W/"8524ed50555070834018d14c28e292e5"
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=bxaMvzAt7%2BuLAZoT7PKExixGemawRCdx3QhRivygI%2FHV9o0%2FreeWY9QzFpbcs0clMo3MVTKI%2F%2FWbZ4%2FFyV58nO28F3rIWelOR5cj4w27POtjsQ462%2BNRfOorRZsk0g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82febd1b0d6848b7-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
my.rtmark.net/gid.js?userId=a0da120a40b6403abda46dc458cfbab8
200 OK 65 B URL GET HTTP/2 my.rtmark.net/gid.js?userId=a0da120a40b6403abda46dc458cfbab8
IP
Requested by https://1stream.buzz/fr/4/60
Certificate IssuerLet's Encrypt
Subjectrtmark.net
FingerprintE8:81:4E:79:89:89:BE:CE:75:1F:E0:2A:60:54:8A:A4:11:2E:F7:42
ValiditySat, 07 Oct 2023 15:22:00 GMT - Fri, 05 Jan 2024 15:21:59 GMT
File type troff or preprocessor input, ASCII text, with no line terminators
Hash 62c2b07ee14bee64b24f6df0d0e47fb0
13cbf638f70adcc5125edd5dd9fd1c7d5d10c717
a5c0362100e89986b6d1149b69cc0ad1a44915c325e0941b33a73ff96cc9db5d
GET /gid.js?userId=a0da120a40b6403abda46dc458cfbab8 HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://1stream.buzz
DNT: 1
Connection: keep-alive
Referer: https://1stream.buzz/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 03 Dec 2023 21:00:21 GMT
content-type: application/json; charset=utf-8
content-length: 65
access-control-allow-origin: https://1stream.buzz
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
set-cookie: ID=a0da120a40b6403abda46dc458cfbab8; expires=Mon, 02 Dec 2024 21:00:21 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.coKrc9A11Ng.O/m=gapi_iframes,gapi_iframes_style_bubble/rt=j/sv=1/d=1/ed=1/rs=AHpOoo_J8xjByIzBlcB6zLaAkxsUwdPdIw/cb=gapi.loaded_0?le=scs
200 OK 184 kB URL GET HTTP/3 apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.coKrc9A11Ng.O/m=gapi_iframes,gapi_iframes_style_bubble/rt=j/sv=1/d=1/ed=1/rs=AHpOoo_J8xjByIzBlcB6zLaAkxsUwdPdIw/cb=gapi.loaded_0?le=scs
IP
Requested by https://www.comohd.xyz/2017/01/holadirectv.html
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint4C:0D:17:8C:F1:30:7C:3A:6F:9B:8E:B4:83:0E:5C:BD:ED:17:3E:95
ValidityMon, 23 Oct 2023 11:18:24 GMT - Mon, 15 Jan 2024 11:18:23 GMT
File type ASCII text, with very long lines (1505)
Size 184 kB (184159 bytes)
Hash 71aaa92f748ba3c48d6edfb40204d614
ad1ca8c338494256d564ee7857707f758e03948b
215f3b01f5decd286eb88ac2dc56b997e6cd2ce8f47998dfa9e2917f8b890982
GET /_/scs/abc-static/_/js/k=gapi.lb.en.coKrc9A11Ng.O/m=gapi_iframes,gapi_iframes_style_bubble/rt=j/sv=1/d=1/ed=1/rs=AHpOoo_J8xjByIzBlcB6zLaAkxsUwdPdIw/cb=gapi.loaded_0?le=scs HTTP/1.1
Host: apis.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.comohd.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/social-frontend-mpm-access
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="social-frontend-mpm-access"
report-to: {"group":"social-frontend-mpm-access","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/social-frontend-mpm-access"}]}
content-length: 60962
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 02:45:42 GMT
expires: Fri, 29 Nov 2024 02:45:42 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 08 Nov 2023 22:37:21 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 324878
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.rojadirectatvhd.org/favicon.ico
200 OK 1.2 kB URL GET HTTP/3 www.rojadirectatvhd.org/favicon.ico
IP
Requested by https://www.rojadirectatvhd.org/roja-directv.php
Certificate IssuerGoogle Trust Services LLC
Subjectrojadirectatvhd.org
Fingerprint5B:A1:D9:9A:30:BB:77:36:B6:4B:99:47:44:CC:E7:C4:38:66:74:05
ValidityTue, 17 Oct 2023 16:45:11 GMT - Mon, 15 Jan 2024 16:45:10 GMT
File type MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel\012- data
Hash 402640a1fc16698c826ebf9dce0396ca
dd7a8cc40abf6332a0e1eb60f65b67cd2447dfc9
fcc4e1cb5d2a637c80a808b66d22acbeb736797595fa1af89bfee1371541ed0a
GET /favicon.ico HTTP/1.1
Host: www.rojadirectatvhd.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.rojadirectatvhd.org/roja-directv.php
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 03 Dec 2023 21:00:20 GMT
content-type: image/x-icon
last-modified: Tue, 17 Oct 2023 17:02:41 GMT
etag: W/"652ebe31-47e"
expires: Thu, 07 Dec 2023 11:59:38 GMT
cache-control: public, max-age=604800, must-revalidate
access-control-allow-origin: *
cf-cache-status: HIT
age: 291642
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=YQhg%2Feq92qhW6uA0%2FdOERx5ZDlEL%2BhxzZy5PDlFfDRaHtW%2BtNe%2FBt81PyUKm4jxML%2BnDdy2PgF%2BhwEmf%2F2b4lXCST2UaURY6pQUzmKYaOJhOM6NNXcWWtnx24Icr90HpQDjpuFJRPEVRlg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82febd120e900b41-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
uvtuiks.com/script/suv5.js
200 OK 97 kB URL GET HTTP/3 uvtuiks.com/script/suv5.js
IP
Requested by https://1stream.buzz/fr/4/60
Certificate IssuerLet's Encrypt
Subjectuvtuiks.com
Fingerprint99:B2:29:FC:E5:01:AD:96:C8:9E:17:F0:4C:34:E5:C3:D7:59:C2:0B
ValidityMon, 27 Nov 2023 11:40:04 GMT - Sun, 25 Feb 2024 11:40:03 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /script/suv5.js HTTP/1.1
Host: uvtuiks.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1stream.buzz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 03 Dec 2023 21:00:21 GMT
content-type: text/javascript
x-guploader-uploadid: ABPtcPrkayiH_XcWLtfqSYpYFhtwHt3Jkz04O3WP3SiaHIdIikiXjWltQstgbs6_d_k7rCZ2CNr3aXkt_LObbBUCC4hBHg-_sWmB
x-goog-generation: 1701078144239592
x-goog-metageneration: 2
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 97361
x-goog-hash: crc32c=RNemrA==, md5=sO8X3U2eRJWY9eb3JLF3YQ==
x-goog-storage-class: MULTI_REGIONAL
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace
expires: Sun, 03 Dec 2023 20:44:42 GMT
cache-control: public, max-age=14400
age: 2688
last-modified: Mon, 27 Nov 2023 09:42:24 GMT
etag: W/"b0ef17dd4d9e449598f5e6f724b17761"
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=9Kz5rUjH9O4W9Ut%2FJshLlzLrYd703IsxHaBCwVSDtB%2BLDD1FKnqNOc1Yf9reVpDomSaiuoEXyXMyocdRNDESN3qOlQ1u6FAjy19JKRcP72o0fIdHzDjpabdEDN5pIg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82febd1b0d7048b7-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
resources.blogblog.com/img/navbar/icons_orange.png
200 OK 915 B URL GET HTTP/3 resources.blogblog.com/img/navbar/icons_orange.png
IP
Requested by https://www.blogger.com/navbar.g?targetBlogID=1843886239975821420&blogName=%7C&publishMode=PUBLISH_MODE_HOSTED&navbarType=BLUE&layoutType=LAYOUTS&searchRoot=https://www.comohd.xyz/search&blogLocale=es&v=2&homepageUrl=https://www.comohd.xyz/&targetPostID=6466873969710847620&blogPostOrPageUrl=https://www.comohd.xyz/2017/01/holadirectv.html&vt=2870530090135750647&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.coKrc9A11Ng.O%2Fd%3D1%2Frs%3DAHpOoo_J8xjByIzBlcB6zLaAkxsUwdPdIw%2Fm%3D__features__#id=navbar-iframe&_gfid=navbar-iframe&parent=https%3A%2F%2Fwww.comohd.xyz&pfname=&rpctoken=29263534
Certificate IssuerGoogle Trust Services LLC
Subject*.blogger.com
Fingerprint4A:89:9B:E5:F1:54:0E:2D:0A:8E:40:A8:27:DF:2E:6B:7F:74:51:90
ValidityMon, 23 Oct 2023 11:17:52 GMT - Mon, 15 Jan 2024 11:17:51 GMT
File type PNG image data, 46 x 20, 8-bit colormap, non-interlaced\012- data
Hash 87f25844d23ac1ee03604e668f5c1797
85d440947d70a78672740ff7e8062f68ce9d99a3
d70c36f2f61b735573caa3dd5a1602e19916701bb88d99ff4527cd2c89fa8b72
GET /img/navbar/icons_orange.png HTTP/1.1
Host: resources.blogblog.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.blogger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 915
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 04:00:55 GMT
expires: Thu, 07 Dec 2023 04:00:55 GMT
cache-control: public, max-age=604800
last-modified: Wed, 29 Nov 2023 10:56:25 GMT
content-type: image/png
age: 320366
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
188.114.97.1
216.58.207.233
178.162.223.114
139.45.195.8
0.0.0.0