504 B IP
ASN #20940 Akamai International B.V.
Hash 3edd7e02dd93d4fa92970165e37ea200
fdb009fd9b963ab8cc365829be152f0a424e0933
85ad693617bfd03634246d0c9e3ee02c6d21d9824d25459e5e63bc51b646cc00
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "85AD693617BFD03634246D0C9E3EE02C6D21D9824D25459E5E63BC51B646CC00"
Last-Modified: Fri, 04 Oct 2024 14:08:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11629
Expires: Sat, 05 Oct 2024 16:35:16 GMT
Date: Sat, 05 Oct 2024 13:21:27 GMT
Connection: keep-alive
GET 159.89.198.98/video/li90lc3/movies-home
7.7 kB URL User Request GET 159.89.198.98/video/li90lc3/movies-home
IP
ASN #14061 DIGITALOCEAN-ASN
File type HTML document, Unicode text, UTF-8 text, with very long lines (1276), with CRLF, LF line terminators
Hash 48794a0075f8bd550caec2b35d935e63
a77b3b5724d50ddd5f226e7a6b09b2e74b4b69e9
f73479109d41966318853d0d5dca96550bbcafcfd14c1f83df731fde4ca30841
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /video/li90lc3/movies-home HTTP/1.1
Host: 159.89.198.98
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 05 Oct 2024 13:22:05 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Content-Encoding: gzip
Vary: Accept-Encoding
X-Powered-By: EasyEngine 3.8.1
GET cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.min.css
200 OK 5.6 kB URL GET HTTP/2 cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.min.css
IP
Requested by http://159.89.198.98/video/li90lc3/movies-home
Certificate IssuerGoogle Trust Services
Subjectcdnjs.cloudflare.com
FingerprintE6:47:BB:06:9C:32:48:7E:A6:0A:4B:62:53:7B:F0:35:5D:A9:A3:8A
ValiditySat, 28 Sep 2024 05:35:05 GMT - Fri, 27 Dec 2024 05:35:04 GMT
File type ASCII text, with very long lines (30837)
Hash 269550530cc127b6aa5a35925a7de6ce
512c7d79033e3028a9be61b540cf1a6870c896f8
799aeb25cc0373fdee0e1b1db7ad6c2f6a0e058dfadaa3379689f583213190bd
GET /ajax/libs/font-awesome/4.7.0/css/font-awesome.min.css HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://159.89.198.98/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 05 Oct 2024 13:21:28 GMT
content-type: text/css; charset=utf-8
content-length: 5631
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03e5f-7918"
last-modified: Mon, 04 May 2020 16:10:07 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 674481
expires: Thu, 25 Sep 2025 13:21:28 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=M8m64rmOzSmtrZyCj0k407JBiIeTnZLJdWuhHI%2B2a4p5hG8CQvT5A%2F8HbPksekDCfyZJ6FAe7dcB6eSkjt6KIXn7fkmbeUB6evkmaMGV6o5t%2FzCCJLSOOKpvyjhukgZBVMboQtQW"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 8cddb707a8be56b9-OSL
X-Firefox-Spdy: h2
GET cdn.jsdelivr.net/npm/sidr@2.2.1/dist/jquery.sidr.min.js
200 OK 2.8 kB URL GET HTTP/2 cdn.jsdelivr.net/npm/sidr@2.2.1/dist/jquery.sidr.min.js
IP
Requested by http://159.89.198.98/video/li90lc3/movies-home
Certificate IssuerGlobalSign nv-sa
Subjectjsdelivr.net
Fingerprint6C:45:F5:9E:D3:37:60:0B:9C:A8:28:29:A4:E6:41:33:BB:2E:76:5C
ValidityTue, 30 Jul 2024 15:36:05 GMT - Sun, 31 Aug 2025 15:36:04 GMT
File type JavaScript source, ASCII text, with very long lines (6911)
Hash 37ac88aac020d48f424ec4c64119f107
57c359f422507358cd667f4119bd54086a1e842d
fd57ae7228574a83527cb8917ec5a0ff944aa787934ee5b85a7976f259b7ae31
GET /npm/sidr@2.2.1/dist/jquery.sidr.min.js HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://159.89.198.98/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: application/javascript; charset=utf-8
x-jsd-version: 2.2.1
x-jsd-version-type: version
etag: W/"1b7a-V8NZ9CJQc1jNZn9BGb1UCGoehC0"
content-encoding: br
accept-ranges: bytes
date: Sat, 05 Oct 2024 13:21:28 GMT
age: 858138
x-served-by: cache-fra-etou8220041-FRA, cache-hel1410029-HEL
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 2765
X-Firefox-Spdy: h2
GET cdn.jsdelivr.net/npm/vanilla-lazyload@10.19.0/dist/lazyload.min.js
200 OK 2.3 kB URL GET HTTP/2 cdn.jsdelivr.net/npm/vanilla-lazyload@10.19.0/dist/lazyload.min.js
IP
Requested by http://159.89.198.98/video/li90lc3/movies-home
Certificate IssuerGlobalSign nv-sa
Subjectjsdelivr.net
Fingerprint6C:45:F5:9E:D3:37:60:0B:9C:A8:28:29:A4:E6:41:33:BB:2E:76:5C
ValidityTue, 30 Jul 2024 15:36:05 GMT - Sun, 31 Aug 2025 15:36:04 GMT
File type JavaScript source, ASCII text, with very long lines (5459)
Hash aa4be4d4db22516319b99e0a25ea2408
ee84931668058ddaf04949730d69811fd88c5c46
adf03f7ab87622faa77b4d12f97ff80466377950b805021a07a8c11804ceac14
GET /npm/vanilla-lazyload@10.19.0/dist/lazyload.min.js HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://159.89.198.98/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: application/javascript; charset=utf-8
x-jsd-version: 10.19.0
x-jsd-version-type: version
etag: W/"157d-7oSTFmgFjdrwSUlzDWmBH9iMXEY"
content-encoding: br
accept-ranges: bytes
date: Sat, 05 Oct 2024 13:21:28 GMT
age: 2257357
x-served-by: cache-fra-eddf8230125-FRA, cache-hel1410029-HEL
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 2268
X-Firefox-Spdy: h2
GET vjs.zencdn.net/7.4.1/video-js.css
200 OK 10 kB URL GET HTTP/2 vjs.zencdn.net/7.4.1/video-js.css
IP
Requested by http://159.89.198.98/video/li90lc3/movies-home
Certificate IssuerGlobalSign nv-sa
Subjectvjs.zencdn.net
Fingerprint6B:3F:11:07:D7:05:FD:AF:4D:46:B4:BA:1C:8A:60:70:95:37:35:17
ValidityWed, 06 Mar 2024 21:50:11 GMT - Mon, 07 Apr 2025 21:50:10 GMT
File type ASCII text, with very long lines (5636)
Hash 3590e6d49535539fe8c4504bac50c112
e51b9be26bb83261560d351d2aeace99e627465a
dbd92c6a97303c4c9b21a28f3598b2567ecd663bfd6dfb927657c7ab8d833807
GET /7.4.1/video-js.css HTTP/1.1
Host: vjs.zencdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://159.89.198.98/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
last-modified: Fri, 28 Dec 2018 01:16:11 GMT
etag: "3590e6d49535539fe8c4504bac50c112"
cache-control: public, max-age=31536000
content-type: text/css; charset=utf-8
content-encoding: gzip
date: Sat, 05 Oct 2024 13:21:28 GMT
x-served-by: cache-hel1410030-HEL
x-cache: HIT
x-cache-hits: 860
vary: Accept-Encoding
access-control-allow-origin: *
timing-allow-origin: *
content-length: 10390
X-Firefox-Spdy: h2
GET 159.89.198.98/include/style.css?v=1.0.0
200 OK 3.4 kB URL GET HTTP/1.1 159.89.198.98/include/style.css?v=1.0.0
IP
ASN #14061 DIGITALOCEAN-ASN
Requested by http://159.89.198.98/video/li90lc3/movies-home
File type ASCII text, with very long lines (667), with CRLF line terminators
Hash 66b5d8f5a2459bd9df67fe3cc8fbe379
cec29ed346e0f895d70e6b5108dc49f373052f99
6c3566b6cfe84400e9bb82257116623eadc98a4aa7ab20fec459688fffda8fa1
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /include/style.css?v=1.0.0 HTTP/1.1
Host: 159.89.198.98
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://159.89.198.98/video/li90lc3/movies-home
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 05 Oct 2024 13:22:05 GMT
Content-Type: text/css
Last-Modified: Wed, 28 Apr 2021 06:54:52 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"608906bc-3712"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Access-Control-Allow-Origin: *
Content-Encoding: gzip
GET 159.89.198.98/looppopup.js?v=1.1.1
200 OK 1.2 kB URL GET HTTP/1.1 159.89.198.98/looppopup.js?v=1.1.1
IP
ASN #14061 DIGITALOCEAN-ASN
Requested by http://159.89.198.98/video/li90lc3/movies-home
File type ASCII text, with CRLF line terminators
Hash 5cd50f0de59f0374ac4fcedefe34c386
7adb24c9b26fd207f459ec2bfec3a3864a7afb90
50e276e3118f4bcf4249061ef7235ac981b9278977ba1d79a218ae1318dd2e11
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /looppopup.js?v=1.1.1 HTTP/1.1
Host: 159.89.198.98
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://159.89.198.98/video/li90lc3/movies-home
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 05 Oct 2024 13:22:05 GMT
Content-Type: application/javascript
Last-Modified: Mon, 14 Aug 2023 05:15:00 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"64d9b854-1039"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Access-Control-Allow-Origin: *
Content-Encoding: gzip
GET cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/fonts/fontawesome-webfont.woff2?v=4.7.0
200 OK 77 kB URL GET HTTP/2 cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/fonts/fontawesome-webfont.woff2?v=4.7.0
IP
Requested by http://159.89.198.98/video/li90lc3/movies-home
Certificate IssuerGoogle Trust Services
Subjectcdnjs.cloudflare.com
FingerprintE6:47:BB:06:9C:32:48:7E:A6:0A:4B:62:53:7B:F0:35:5D:A9:A3:8A
ValiditySat, 28 Sep 2024 05:35:05 GMT - Fri, 27 Dec 2024 05:35:04 GMT
File type Web Open Font Format (Version 2), TrueType, length 77160, version 4.459
Hash af7ae505a9eed503f8b8e6982036873e
d6f48cba7d076fb6f2fd6ba993a75b9dc1ecbf0c
2adefcbc041e7d18fcf2d417879dc5a09997aa64d675b7a3c4b6ce33da13f3fe
GET /ajax/libs/font-awesome/4.7.0/fonts/fontawesome-webfont.woff2?v=4.7.0 HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://159.89.198.98
DNT: 1
Connection: keep-alive
Referer: https://cdnjs.cloudflare.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 05 Oct 2024 13:21:28 GMT
content-type: application/octet-stream; charset=utf-8
content-length: 77160
access-control-allow-origin: *
cache-control: public, max-age=30672000
etag: "5eb03e5f-12d68"
last-modified: Mon, 04 May 2020 16:10:07 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 1325579
expires: Thu, 25 Sep 2025 13:21:28 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5rPmLIeYlHQWBcCEhaDWVSFberlR1LJ1mhYmfAt5UY3lwW7aYpchSUYvL0jt0SUOeZkamczrQ2l0xtu8mlugFX9z73Q16kmPOq%2BME%2BDmif9DtsLgOQWKYaLe6OsOz%2FS4u9oFObft"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 8cddb70a6e341c02-OSL
X-Firefox-Spdy: h2
GET 159.89.198.98/include/loading.gif
200 OK 43 B URL GET HTTP/1.1 159.89.198.98/include/loading.gif
IP
ASN #14061 DIGITALOCEAN-ASN
Requested by http://159.89.198.98/video/li90lc3/movies-home
File type GIF image data, version 89a, 1 x 1
Hash 58b6eab85c3d693580ce3b2d5e559c37
894476fccd60af0e4842d8657a36d8186e34a382
39f08c4011ac739fb84eb16366fb23338e4df27d54a459327a95c99c03512ffd
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /include/loading.gif HTTP/1.1
Host: 159.89.198.98
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://159.89.198.98/video/li90lc3/movies-home
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 05 Oct 2024 13:22:05 GMT
Content-Type: image/gif
Content-Length: 43
Last-Modified: Wed, 28 Apr 2021 06:54:52 GMT
Connection: keep-alive
ETag: "608906bc-2b"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
GET 159.89.198.98/include/loading-bert.gif
200 OK 2.9 kB URL GET HTTP/1.1 159.89.198.98/include/loading-bert.gif
IP
ASN #14061 DIGITALOCEAN-ASN
Requested by http://159.89.198.98/video/li90lc3/movies-home
File type GIF image data, version 89a, 128 x 15
Hash ac520708d548e10714d308cfa33d32d8
b738b0363b8621a7ac59296de767f03e41dce2f8
a80fab8be10e5238cdf8127c9c2e5c8c0a3a365e14b3350c9257851ad2299f9a
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /include/loading-bert.gif HTTP/1.1
Host: 159.89.198.98
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://159.89.198.98/include/style.css?v=1.0.0
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 05 Oct 2024 13:22:05 GMT
Content-Type: image/gif
Content-Length: 2892
Last-Modified: Wed, 28 Apr 2021 06:54:51 GMT
Connection: keep-alive
ETag: "608906bb-b4c"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
GET cdn77-pic.others-cdn.com/videos/thumbs169xnxxll/b6/d1/97/b6d197985f473e9a6673b428f5184996/b6d197985f473e9a6673b428f5184996.6.jpg
200 OK 9.1 kB URL GET HTTP/2 cdn77-pic.others-cdn.com/videos/thumbs169xnxxll/b6/d1/97/b6d197985f473e9a6673b428f5184996/b6d197985f473e9a6673b428f5184996.6.jpg
IP
ASN #60068 Datacamp Limited
Requested by http://159.89.198.98/video/li90lc3/movies-home
Certificate IssuerSectigo Limited
Subjectxvideos.com
FingerprintC8:79:F3:AC:85:D8:36:AC:8C:F2:30:0D:AF:6E:19:50:37:CC:C6:95
ValidityTue, 10 Oct 2023 00:00:00 GMT - Fri, 11 Oct 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 100", progressive, precision 8, 352x198, components 3
Hash daddc7de395905f234418b4f414c07e1
8ff9c544e7082861b0f158dddcd0639e712e5bfa
2e186465819df68799a67307dd64a38a5c656562645664268aab40b0450ecdb9
GET /videos/thumbs169xnxxll/b6/d1/97/b6d197985f473e9a6673b428f5184996/b6d197985f473e9a6673b428f5184996.6.jpg HTTP/1.1
Host: cdn77-pic.others-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://159.89.198.98/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 05 Oct 2024 13:21:28 GMT
content-type: image/jpeg
content-length: 9137
x-frame-options: sameorigin
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
last-modified: Wed, 08 Mar 2023 13:43:37 GMT
cache-control: max-age=10368000, public
access-control-allow-origin: *
x-77-nzt: A8O1pg03Nzf/PG5MAIrHJcQ3Nzf/2CMAAI/0Osghy1bB
x-77-nzt-ray: b1f3ea1b92d90a82583d016717220b34
x-accel-expires: @1733493516
x-77-cache: HIT
x-accel-date: 1723125532
x-cache-lb: HIT
x-age-lb: 9176
x-77-age: 5008956
server: CDN77-Turbo
x-accel-date-max: 1702398690
x-cache: HIT
x-age: 5008956
accept-ranges: bytes
X-Firefox-Spdy: h2
GET cdn77-pic.others-cdn.com/videos/thumbs169xnxxll/c5/cc/67/c5cc6726d3114908fdacc6a925d0ab77/c5cc6726d3114908fdacc6a925d0ab77.27.jpg
200 OK 13 kB URL GET HTTP/2 cdn77-pic.others-cdn.com/videos/thumbs169xnxxll/c5/cc/67/c5cc6726d3114908fdacc6a925d0ab77/c5cc6726d3114908fdacc6a925d0ab77.27.jpg
IP
ASN #60068 Datacamp Limited
Requested by http://159.89.198.98/video/li90lc3/movies-home
Certificate IssuerSectigo Limited
Subjectxvideos.com
FingerprintC8:79:F3:AC:85:D8:36:AC:8C:F2:30:0D:AF:6E:19:50:37:CC:C6:95
ValidityTue, 10 Oct 2023 00:00:00 GMT - Fri, 11 Oct 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 100", progressive, precision 8, 352x198, components 3
Hash 02976ca3c2752939d6090daf8a96e0b8
2bbd62b058d01afc344d8de9f0fb1978a4917eff
bc6a9edc9add9b15e7ebb37e5df796f6f1f2168836a3e3a6b0de8603e03e8117
GET /videos/thumbs169xnxxll/c5/cc/67/c5cc6726d3114908fdacc6a925d0ab77/c5cc6726d3114908fdacc6a925d0ab77.27.jpg HTTP/1.1
Host: cdn77-pic.others-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://159.89.198.98/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 05 Oct 2024 13:21:28 GMT
content-type: image/jpeg
content-length: 13129
x-frame-options: sameorigin
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
last-modified: Wed, 30 Aug 2023 16:18:13 GMT
cache-control: max-age=10368000, public
access-control-allow-origin: *
x-77-nzt: EwwBw7WmDQH3bYdOAAwB1GY4FQHXsH0BAAgBj/Q62AGB
x-77-nzt-ray: b1f3ea1b92d90a82583d01670bc02534
x-accel-expires: @1733356002
x-77-cache: HIT
x-accel-date: 1722988011
x-cache-lb: HIT
x-age-lb: 97712
x-77-age: 5146477
server: CDN77-Turbo
x-accel-date-max: 1706086827
x-cache: HIT
x-age: 5146477
accept-ranges: bytes
X-Firefox-Spdy: h2
GET gcore-pic.others-cdn.com/videos/thumbs169xnxxll/39/06/59/3906594d7c26b3ef8076939b0d58399f/3906594d7c26b3ef8076939b0d58399f.1.jpg
200 OK 9.8 kB URL GET HTTP/2 gcore-pic.others-cdn.com/videos/thumbs169xnxxll/39/06/59/3906594d7c26b3ef8076939b0d58399f/3906594d7c26b3ef8076939b0d58399f.1.jpg
IP
ASN #199524 G-Core Labs S.A.
Requested by http://159.89.198.98/video/li90lc3/movies-home
Certificate IssuerSectigo Limited
Subjectxvideos.com
FingerprintC8:79:F3:AC:85:D8:36:AC:8C:F2:30:0D:AF:6E:19:50:37:CC:C6:95
ValidityTue, 10 Oct 2023 00:00:00 GMT - Fri, 11 Oct 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 100", progressive, precision 8, 352x198, components 3
Hash 4b8e60e2ffab8f9c69989511fae7aed1
cb8433c6565817e1e355102cbe4f71d72a7ce0e5
1368a7c193b528fe749ee908df9cc4d16ec53000a595796ae26cb6c4ce005567
GET /videos/thumbs169xnxxll/39/06/59/3906594d7c26b3ef8076939b0d58399f/3906594d7c26b3ef8076939b0d58399f.1.jpg HTTP/1.1
Host: gcore-pic.others-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://159.89.198.98/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 05 Oct 2024 13:21:28 GMT
content-type: image/jpeg
content-length: 9789
x-frame-options: sameorigin
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
last-modified: Fri, 17 Feb 2023 18:00:30 GMT
expires: Tue, 20 Aug 2024 12:26:22 GMT
cache-control: max-age=10368000, public
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc66
traceparent: 00-00cdd92ec8e0e07c46d80525feadf290-f93e2cdc03431f60-01
x-id: am3-hw-edge-gc116
age: 3813273
cache: HIT
x-cached-since: 2024-08-22T10:06:55+00:00
accept-ranges: bytes
x-shard: am3-shard0-default_443
X-Firefox-Spdy: h2
GET vjs.zencdn.net/6.4.0/video.js
200 OK 159 kB URL GET HTTP/2 vjs.zencdn.net/6.4.0/video.js
IP
Requested by https://misterindo.net/x/?id=li90lc3
Certificate IssuerGlobalSign nv-sa
Subjectvjs.zencdn.net
Fingerprint6B:3F:11:07:D7:05:FD:AF:4D:46:B4:BA:1C:8A:60:70:95:37:35:17
ValidityWed, 06 Mar 2024 21:50:11 GMT - Mon, 07 Apr 2025 21:50:10 GMT
File type JavaScript source, ASCII text, with very long lines (489)
Size 159 kB (158553 bytes)
Hash 64b06190934b953687249b6f22ca4b60
c9898f4da840827cc9387178af3488c2d35ad823
7d8e07f8fc2ab114cbee3767d1e2f3abfa1cc2148c9558371f1311e3c709057c
GET /6.4.0/video.js HTTP/1.1
Host: vjs.zencdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://misterindo.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 17 Nov 2017 20:14:33 GMT
etag: "64b06190934b953687249b6f22ca4b60"
cache-control: public, max-age=31536000
content-type: application/javascript; charset=utf-8
content-encoding: gzip
date: Sat, 05 Oct 2024 13:21:29 GMT
x-served-by: cache-hel1410030-HEL
x-cache: HIT
x-cache-hits: 352
vary: Accept-Encoding
access-control-allow-origin: *
timing-allow-origin: *
content-length: 158553
X-Firefox-Spdy: h2
GET c.adsco.re/
44 kB IP
Requested by https://misterindo.net/x/?id=li90lc3
Certificate IssuerSectigo Limited
Subject*.adsco.re
Fingerprint3B:64:1C:DA:8C:64:22:01:36:0F:54:7A:99:6E:AD:26:C2:EF:59:8B
ValidityMon, 23 Sep 2024 00:00:00 GMT - Mon, 29 Sep 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (881)
Hash cbe972671280dd64b057350aefce29fd
ec89267ab82d3d84ab2088ccd64995c76b7b8e49
da5b70eed96d63b9d8e81402fac5503f8ac1bdbe0dc3aa873419144123d54b06
GET / HTTP/1.1
Host: c.adsco.re
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://159.89.198.98/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 05 Oct 2024 13:21:28 GMT
content-type: text/html
cache-control: public, max-age=2678400
accept-ch: Sec-CH-UA, Sec-CH-UA-Mobile, Sec-CH-UA-Full-Version, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Arch, Sec-CH-UA-Model, Device-Memory, Downlink, ECT, RTT, Width, Viewport-Width, DPR
permissions-policy: ch-ua=(self "https://adsco.re"),ch-ua-mobile=(self "https://adsco.re"),ch-ua-full-version=(self "https://adsco.re"),ch-ua-platform=(self "https://adsco.re"),ch-ua-platform-version=(self "https://adsco.re"),ch-ua-arch=(self "https://adsco.re"),ch-ua-model=(self "https://adsco.re"),ch-device-memory=(self "https://adsco.re"),ch-downlink=(self "https://adsco.re"),ch-ect=(self "https://adsco.re"),ch-rtt=(self "https://adsco.re"),ch-width=(self "https://adsco.re"),ch-viewport-width=(self "https://adsco.re"),ch-dpr=(self "https://adsco.re")
link: <//6.adsco.re/>;rel=prefetch;crossorigin;as=fetch,<//4.adsco.re/>;rel=prefetch;crossorigin;as=fetch,<//adsco.re/>;rel=preconnect
expires: Tue, 05 Nov 2024 13:21:28 GMT
etag: W/"cOaB0SIHOpvD9wT7D5aoLQ=="
content-encoding: gzip
cf-cache-status: HIT
age: 7237810
vary: Accept-Encoding
server: cloudflare
cf-ray: 8cddb70bb8205690-OSL
X-Firefox-Spdy: h2
GET cdn77-pic.others-cdn.com/videos/thumbs169xnxxll/4c/17/3b/4c173bc3599db28438b929b77147181a-1/4c173bc3599db28438b929b77147181a.21.jpg
200 OK 14 kB URL GET HTTP/2 cdn77-pic.others-cdn.com/videos/thumbs169xnxxll/4c/17/3b/4c173bc3599db28438b929b77147181a-1/4c173bc3599db28438b929b77147181a.21.jpg
IP
ASN #60068 Datacamp Limited
Requested by https://misterindo.net/x/?id=li90lc3
Certificate IssuerSectigo Limited
Subjectxvideos.com
FingerprintC8:79:F3:AC:85:D8:36:AC:8C:F2:30:0D:AF:6E:19:50:37:CC:C6:95
ValidityTue, 10 Oct 2023 00:00:00 GMT - Fri, 11 Oct 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 100", progressive, precision 8, 352x198, components 3
Hash 48f21be5b5e9e35fa3322aae453cbbf2
02f60b22c62e46fabaac87b0363823671ffd7205
25839e3d649753f9195185ef2613c47b9871e07d4c9ff510b526573f364d438b
GET /videos/thumbs169xnxxll/4c/17/3b/4c173bc3599db28438b929b77147181a-1/4c173bc3599db28438b929b77147181a.21.jpg HTTP/1.1
Host: cdn77-pic.others-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 05 Oct 2024 13:21:29 GMT
content-type: image/jpeg
content-length: 14546
x-frame-options: sameorigin
last-modified: Fri, 17 Feb 2023 15:32:45 GMT
cache-control: max-age=10368000, public
access-control-allow-origin: *
x-accel-expires: @1731424902
x-77-nzt: A8O1pg03Nzf/pf1rAIrHJcEK40//mSsAAI/0OtjY+bPB
x-77-nzt-ray: b1f3ea1b92d90a82593d0167cdfb3108
x-77-cache: HIT
x-cache-lb: HIT
x-age-lb: 11161
server: CDN77-Turbo
x-accel-date: 1721057204
x-accel-date-max: 1676660394
x-cache: HIT
x-age: 7077285
x-77-age: 7077285
accept-ranges: bytes
X-Firefox-Spdy: h2
GET misterindo.net/x/?id=li90lc3
200 OK 6.4 kB URL GET HTTP/2 misterindo.net/x/?id=li90lc3
IP
Requested by http://159.89.198.98/video/li90lc3/movies-home
Certificate IssuerGoogle Trust Services
Subjectmisterindo.net
Fingerprint1D:6F:9D:EA:6B:71:D6:6C:23:78:72:3C:9D:2A:55:2A:76:F1:29:94
ValiditySun, 15 Sep 2024 21:46:02 GMT - Sat, 14 Dec 2024 21:46:01 GMT
File type HTML document, ASCII text, with very long lines (12986), with CRLF, LF line terminators
Hash 8983c2f2ae2c86933695a13c3e88a1cc
45a8faa6c706e1afc47d53b7a79a116ce5fcf1c4
3e021d65d583fe531301d4b8f912ffec3af72db78dcef63ef31fc4b606c1b945
GET /x/?id=li90lc3 HTTP/1.1
Host: misterindo.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://159.89.198.98/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 05 Oct 2024 13:21:28 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
x-powered-by: EasyEngine 3.8.1
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=fw7zjp8bLsC2UfLesc6o2AoNlOKVs0m3RfXd2%2BZbTsxxUg2cCnwdMXNybeCIMXQ%2B75duU7LxV3mDfYVccDBHyvEtAj1M8mAr62YmjIZcFxwxXE9cQJYqkWubVgb87KQmxQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
speculation-rules: "/cdn-cgi/speculation"
server: cloudflare
cf-ray: 8cddb70aad5b62b6-HAM
content-encoding: br
X-Firefox-Spdy: h2
GET www.googletagmanager.com/gtag/js?id=G-GY11J1LV51
200 OK 100 kB URL GET HTTP/2 www.googletagmanager.com/gtag/js?id=G-GY11J1LV51
IP
Requested by https://misterindo.net/x/?id=li90lc3
Certificate IssuerGoogle Trust Services
Subject*.google-analytics.com
FingerprintE3:7D:50:8B:BE:35:97:51:F4:08:B4:CE:AE:10:BB:FB:4B:55:A1:28
ValidityMon, 16 Sep 2024 08:55:43 GMT - Mon, 09 Dec 2024 08:55:42 GMT
File type JavaScript source, ASCII text, with very long lines (4269)
Hash 4f8d59afcb91fb11b6b0ba8bdf72b19a
75120aa0840205fbf6da453ac8e1a96d2c245763
9b1dcc96d7f7f23ba76753de55f9dd9f69189a70a285653414eb1d9b574f03b1
GET /gtag/js?id=G-GY11J1LV51 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://misterindo.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sat, 05 Oct 2024 13:21:29 GMT
expires: Sat, 05 Oct 2024 13:21:29 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgcycc:838:0
cross-origin-opener-policy-report-only: same-origin; report-to=coop_reporting
report-to: {"group":"coop_reporting","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgcycc:838:0"}],}
server: Google Tag Manager
content-length: 99710
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET c.adsco.re/
40 kB IP
Requested by https://misterindo.net/x/?id=li90lc3
Certificate IssuerSectigo Limited
Subject*.adsco.re
Fingerprint3B:64:1C:DA:8C:64:22:01:36:0F:54:7A:99:6E:AD:26:C2:EF:59:8B
ValidityMon, 23 Sep 2024 00:00:00 GMT - Mon, 29 Sep 2025 23:59:59 GMT
File type gzip compressed data, max speed, from Unix
Hash 28fdafd3d4381c0f44e0a5bcdc3b4e7b
1c4ab0a4472ce68b25d73571711d22a7f0ea3148
2dd8af61a8d15dfb4a91e3186fe528b097b1b9ea229411dd42a0efe25bae26ed
GET / HTTP/1.1
Host: c.adsco.re
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://misterindo.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 05 Oct 2024 13:21:29 GMT
content-type: text/html
cache-control: public, max-age=2678400
accept-ch: Sec-CH-UA, Sec-CH-UA-Mobile, Sec-CH-UA-Full-Version, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Arch, Sec-CH-UA-Model, Device-Memory, Downlink, ECT, RTT, Width, Viewport-Width, DPR
permissions-policy: ch-ua=(self "https://adsco.re"),ch-ua-mobile=(self "https://adsco.re"),ch-ua-full-version=(self "https://adsco.re"),ch-ua-platform=(self "https://adsco.re"),ch-ua-platform-version=(self "https://adsco.re"),ch-ua-arch=(self "https://adsco.re"),ch-ua-model=(self "https://adsco.re"),ch-device-memory=(self "https://adsco.re"),ch-downlink=(self "https://adsco.re"),ch-ect=(self "https://adsco.re"),ch-rtt=(self "https://adsco.re"),ch-width=(self "https://adsco.re"),ch-viewport-width=(self "https://adsco.re"),ch-dpr=(self "https://adsco.re")
link: <//6.adsco.re/>;rel=prefetch;crossorigin;as=fetch,<//4.adsco.re/>;rel=prefetch;crossorigin;as=fetch,<//adsco.re/>;rel=preconnect
expires: Tue, 05 Nov 2024 13:21:29 GMT
etag: W/"cOaB0SIHOpvD9wT7D5aoLQ=="
content-encoding: gzip
cf-cache-status: HIT
age: 7237811
vary: Accept-Encoding
server: cloudflare
cf-ray: 8cddb70ede485690-OSL
X-Firefox-Spdy: h2
GET s.pemsrv.com/venor.php
200 OK 21 B IP
ASN #60781 LeaseWeb Netherlands B.V.
Requested by https://misterindo.net/x/?id=li90lc3
Certificate IssuerLet's Encrypt
Subjectpemsrv.com
Fingerprint6C:E1:88:66:9E:83:C8:22:CB:50:58:EF:7A:C6:A5:6A:2A:6F:D2:F6
ValidityThu, 12 Sep 2024 10:33:32 GMT - Wed, 11 Dec 2024 10:33:31 GMT
File type very short file (no magic)
Hash c4ca4238a0b923820dcc509a6f75849b
356a192b7913b04c54574d18c28d46e6395428ab
6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b
GET /venor.php HTTP/1.1
Host: s.pemsrv.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://misterindo.net
DNT: 1
Connection: keep-alive
Referer: https://misterindo.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 05 Oct 2024 13:21:29 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: *
X-Robots-Tag: noindex, follow
Content-Encoding: gzip
GET 6.adsco.re/
200 OK 45 B IP
Requested by https://misterindo.net/x/?id=li90lc3
Certificate IssuerSectigo Limited
Subject*.adsco.re
Fingerprint3B:64:1C:DA:8C:64:22:01:36:0F:54:7A:99:6E:AD:26:C2:EF:59:8B
ValidityMon, 23 Sep 2024 00:00:00 GMT - Mon, 29 Sep 2025 23:59:59 GMT
File type ASCII text, with no line terminators
Hash 5b41cb22f84f645a103acc7bfbf084ff
bac3967b26d5ec4a0d09a580714e8219796816bd
709f0a0dfab9f9e074f4a4a348dcb09150838284d21e75cfb9e5ceaeeb2054bc
GET / HTTP/1.1
Host: 6.adsco.re
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://159.89.198.98
DNT: 1
Connection: keep-alive
Referer: http://159.89.198.98/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 05 Oct 2024 13:21:29 GMT
content-type: text/plain;charset=UTF-8
content-length: 45
access-control-allow-origin: http://159.89.198.98
cache-control: private, max-age=10
access-control-allow-headers: Content-Type
access-control-allow-methods: GET, HEAD, OPTIONS
access-control-max-age: 2592000
vary: Accept-Encoding
server: cloudflare
cf-ray: 8cddb710fc7d56a2-OSL
X-Firefox-Spdy: h2
GET 4.adsco.re:2087/
200 OK 62 B IP
Requested by http://159.89.198.98/video/li90lc3/movies-home
Certificate IssuerSectigo Limited
Subject*.adsco.re
Fingerprint3B:64:1C:DA:8C:64:22:01:36:0F:54:7A:99:6E:AD:26:C2:EF:59:8B
ValidityMon, 23 Sep 2024 00:00:00 GMT - Mon, 29 Sep 2025 23:59:59 GMT
File type ASCII text, with no line terminators
Hash 5b41cb22f84f645a103acc7bfbf084ff
bac3967b26d5ec4a0d09a580714e8219796816bd
709f0a0dfab9f9e074f4a4a348dcb09150838284d21e75cfb9e5ceaeeb2054bc
GET / HTTP/1.1
Host: 4.adsco.re:2087
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://159.89.198.98
DNT: 1
Connection: keep-alive
Referer: http://159.89.198.98/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 05 Oct 2024 13:21:29 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Methods: GET, HEAD, OPTIONS
Access-Control-Allow-Headers: Content-Type
Access-Control-Allow-Origin: http://159.89.198.98
Access-Control-Max-Age: 2592000
Cache-Control: private, max-age=5
Content-Encoding: gzip
GET 4.adsco.re/
200 OK 62 B IP
Requested by https://misterindo.net/x/?id=li90lc3
Certificate IssuerSectigo Limited
Subject*.adsco.re
Fingerprint3B:64:1C:DA:8C:64:22:01:36:0F:54:7A:99:6E:AD:26:C2:EF:59:8B
ValidityMon, 23 Sep 2024 00:00:00 GMT - Mon, 29 Sep 2025 23:59:59 GMT
File type ASCII text, with no line terminators
Hash 5b41cb22f84f645a103acc7bfbf084ff
bac3967b26d5ec4a0d09a580714e8219796816bd
709f0a0dfab9f9e074f4a4a348dcb09150838284d21e75cfb9e5ceaeeb2054bc
GET / HTTP/1.1
Host: 4.adsco.re
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://159.89.198.98
DNT: 1
Connection: keep-alive
Referer: http://159.89.198.98/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 05 Oct 2024 13:21:29 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Methods: GET, HEAD, OPTIONS
Access-Control-Allow-Headers: Content-Type
Access-Control-Allow-Origin: http://159.89.198.98
Access-Control-Max-Age: 2592000
Cache-Control: private, max-age=5
Content-Encoding: gzip
GET 6.adsco.re:2087/
200 OK 45 B IP
Requested by https://misterindo.net/x/?id=li90lc3
Certificate IssuerSectigo Limited
Subject*.adsco.re
Fingerprint3B:64:1C:DA:8C:64:22:01:36:0F:54:7A:99:6E:AD:26:C2:EF:59:8B
ValidityMon, 23 Sep 2024 00:00:00 GMT - Mon, 29 Sep 2025 23:59:59 GMT
File type ASCII text, with no line terminators
Hash 5b41cb22f84f645a103acc7bfbf084ff
bac3967b26d5ec4a0d09a580714e8219796816bd
709f0a0dfab9f9e074f4a4a348dcb09150838284d21e75cfb9e5ceaeeb2054bc
GET / HTTP/1.1
Host: 6.adsco.re:2087
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://159.89.198.98
DNT: 1
Connection: keep-alive
Referer: http://159.89.198.98/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 05 Oct 2024 13:21:29 GMT
content-type: text/plain;charset=UTF-8
content-length: 45
access-control-allow-origin: http://159.89.198.98
cache-control: private, max-age=10
access-control-allow-headers: Content-Type
access-control-allow-methods: GET, HEAD, OPTIONS
access-control-max-age: 2592000
vary: Accept-Encoding
server: cloudflare
cf-ray: 8cddb71108401bfa-OSL
X-Firefox-Spdy: h2
GET c.adsco.re/
30 kB IP
Requested by https://misterindo.net/x/?id=li90lc3
Certificate IssuerSectigo Limited
Subject*.adsco.re
Fingerprint3B:64:1C:DA:8C:64:22:01:36:0F:54:7A:99:6E:AD:26:C2:EF:59:8B
ValidityMon, 23 Sep 2024 00:00:00 GMT - Mon, 29 Sep 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (881)
Hash 70e681d122073a9bc3f704fb0f96a82d
5916b6dea0ea58b5807287ca1cd4faf9c9f3aae5
73bfce45d382df02d75ef2ef688325cc973139931db445ee753c2af8a85f3965
GET / HTTP/1.1
Host: c.adsco.re
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://159.89.198.98/
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 05 Oct 2024 13:21:29 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: public, max-age=2678400
Accept-CH: Sec-CH-UA, Sec-CH-UA-Mobile, Sec-CH-UA-Full-Version, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Arch, Sec-CH-UA-Model, Device-Memory, Downlink, ECT, RTT, Width, Viewport-Width, DPR
Permissions-Policy: ch-ua=(self "https://adsco.re"),ch-ua-mobile=(self "https://adsco.re"),ch-ua-full-version=(self "https://adsco.re"),ch-ua-platform=(self "https://adsco.re"),ch-ua-platform-version=(self "https://adsco.re"),ch-ua-arch=(self "https://adsco.re"),ch-ua-model=(self "https://adsco.re"),ch-device-memory=(self "https://adsco.re"),ch-downlink=(self "https://adsco.re"),ch-ect=(self "https://adsco.re"),ch-rtt=(self "https://adsco.re"),ch-width=(self "https://adsco.re"),ch-viewport-width=(self "https://adsco.re"),ch-dpr=(self "https://adsco.re")
Link: <//6.adsco.re/>;rel=prefetch;crossorigin;as=fetch,<//4.adsco.re/>;rel=prefetch;crossorigin;as=fetch,<//adsco.re/>;rel=preconnect
Expires: Tue, 05 Nov 2024 13:21:29 GMT
ETag: W/"cOaB0SIHOpvD9wT7D5aoLQ=="
Content-Encoding: gzip
CF-Cache-Status: HIT
Age: 7237775
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 8cddb7119e915696-OSL
alt-svc: h2=":443"; ma=60
GET 4.adsco.re/
200 OK 62 B IP
Requested by https://misterindo.net/x/?id=li90lc3
Certificate IssuerSectigo Limited
Subject*.adsco.re
Fingerprint3B:64:1C:DA:8C:64:22:01:36:0F:54:7A:99:6E:AD:26:C2:EF:59:8B
ValidityMon, 23 Sep 2024 00:00:00 GMT - Mon, 29 Sep 2025 23:59:59 GMT
File type ASCII text, with no line terminators
Hash 5b41cb22f84f645a103acc7bfbf084ff
bac3967b26d5ec4a0d09a580714e8219796816bd
709f0a0dfab9f9e074f4a4a348dcb09150838284d21e75cfb9e5ceaeeb2054bc
GET / HTTP/1.1
Host: 4.adsco.re
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://misterindo.net
DNT: 1
Connection: keep-alive
Referer: https://misterindo.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 05 Oct 2024 13:21:30 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Methods: GET, HEAD, OPTIONS
Access-Control-Allow-Headers: Content-Type
Access-Control-Allow-Origin: https://misterindo.net
Access-Control-Max-Age: 2592000
Cache-Control: private, max-age=5
Content-Encoding: gzip
POST eq5tdkeewmek.l4.adsco.re/
200 OK 0 B URL POST HTTP/2 eq5tdkeewmek.l4.adsco.re/
IP
Requested by http://159.89.198.98/video/li90lc3/movies-home
Certificate IssuerLet's Encrypt
Subject*.l4.adsco.re
Fingerprint97:EE:6D:B0:A5:FE:25:8A:E5:5E:CD:C4:79:F4:83:80:7F:75:2F:ED
ValidityThu, 19 Sep 2024 09:14:21 GMT - Wed, 18 Dec 2024 09:14:20 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST / HTTP/1.1
Host: eq5tdkeewmek.l4.adsco.re
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 0
Origin: http://159.89.198.98
DNT: 1
Connection: keep-alive
Referer: http://159.89.198.98/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 05 Oct 2024 13:21:30 GMT
content-type: text/html
content-length: 0
last-modified: Fri, 02 Jun 2023 14:03:32 GMT
etag: "6479f6b4-0"
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
access-control-expose-headers: Content-Length,Content-Range
accept-ranges: bytes
X-Firefox-Spdy: h2
GET 6.adsco.re/
200 OK 45 B IP
Requested by https://misterindo.net/x/?id=li90lc3
Certificate IssuerSectigo Limited
Subject*.adsco.re
Fingerprint3B:64:1C:DA:8C:64:22:01:36:0F:54:7A:99:6E:AD:26:C2:EF:59:8B
ValidityMon, 23 Sep 2024 00:00:00 GMT - Mon, 29 Sep 2025 23:59:59 GMT
File type ASCII text, with no line terminators
Hash 5b41cb22f84f645a103acc7bfbf084ff
bac3967b26d5ec4a0d09a580714e8219796816bd
709f0a0dfab9f9e074f4a4a348dcb09150838284d21e75cfb9e5ceaeeb2054bc
GET / HTTP/1.1
Host: 6.adsco.re
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://misterindo.net
DNT: 1
Connection: keep-alive
Referer: https://misterindo.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 05 Oct 2024 13:21:30 GMT
content-type: text/plain;charset=UTF-8
content-length: 45
access-control-allow-origin: https://misterindo.net
cache-control: private, max-age=10
access-control-allow-headers: Content-Type
access-control-allow-methods: GET, HEAD, OPTIONS
access-control-max-age: 2592000
vary: Accept-Encoding
server: cloudflare
cf-ray: 8cddb712d89056a2-OSL
X-Firefox-Spdy: h2
GET 4.adsco.re:2087/
200 OK 62 B IP
Requested by http://159.89.198.98/video/li90lc3/movies-home
Certificate IssuerSectigo Limited
Subject*.adsco.re
Fingerprint3B:64:1C:DA:8C:64:22:01:36:0F:54:7A:99:6E:AD:26:C2:EF:59:8B
ValidityMon, 23 Sep 2024 00:00:00 GMT - Mon, 29 Sep 2025 23:59:59 GMT
File type ASCII text, with no line terminators
Hash 5b41cb22f84f645a103acc7bfbf084ff
bac3967b26d5ec4a0d09a580714e8219796816bd
709f0a0dfab9f9e074f4a4a348dcb09150838284d21e75cfb9e5ceaeeb2054bc
GET / HTTP/1.1
Host: 4.adsco.re:2087
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://misterindo.net
DNT: 1
Connection: keep-alive
Referer: https://misterindo.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 05 Oct 2024 13:21:30 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Methods: GET, HEAD, OPTIONS
Access-Control-Allow-Headers: Content-Type
Access-Control-Allow-Origin: https://misterindo.net
Access-Control-Max-Age: 2592000
Cache-Control: private, max-age=5
Content-Encoding: gzip
GET 6.adsco.re:2087/
200 OK 45 B IP
Requested by https://misterindo.net/x/?id=li90lc3
Certificate IssuerSectigo Limited
Subject*.adsco.re
Fingerprint3B:64:1C:DA:8C:64:22:01:36:0F:54:7A:99:6E:AD:26:C2:EF:59:8B
ValidityMon, 23 Sep 2024 00:00:00 GMT - Mon, 29 Sep 2025 23:59:59 GMT
File type ASCII text, with no line terminators
Hash 5b41cb22f84f645a103acc7bfbf084ff
bac3967b26d5ec4a0d09a580714e8219796816bd
709f0a0dfab9f9e074f4a4a348dcb09150838284d21e75cfb9e5ceaeeb2054bc
GET / HTTP/1.1
Host: 6.adsco.re:2087
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://misterindo.net
DNT: 1
Connection: keep-alive
Referer: https://misterindo.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 05 Oct 2024 13:21:30 GMT
content-type: text/plain;charset=UTF-8
content-length: 45
access-control-allow-origin: https://misterindo.net
cache-control: private, max-age=10
access-control-allow-headers: Content-Type
access-control-allow-methods: GET, HEAD, OPTIONS
access-control-max-age: 2592000
vary: Accept-Encoding
server: cloudflare
cf-ray: 8cddb713cce81bfa-OSL
X-Firefox-Spdy: h2
GET c.adsco.re/
30 kB IP
Requested by https://misterindo.net/x/?id=li90lc3
Certificate IssuerSectigo Limited
Subject*.adsco.re
Fingerprint3B:64:1C:DA:8C:64:22:01:36:0F:54:7A:99:6E:AD:26:C2:EF:59:8B
ValidityMon, 23 Sep 2024 00:00:00 GMT - Mon, 29 Sep 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (881)
Hash 70e681d122073a9bc3f704fb0f96a82d
5916b6dea0ea58b5807287ca1cd4faf9c9f3aae5
73bfce45d382df02d75ef2ef688325cc973139931db445ee753c2af8a85f3965
GET / HTTP/1.1
Host: c.adsco.re
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://c.adsco.re/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 05 Oct 2024 13:21:30 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: public, max-age=2678400
Accept-CH: Sec-CH-UA, Sec-CH-UA-Mobile, Sec-CH-UA-Full-Version, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Arch, Sec-CH-UA-Model, Device-Memory, Downlink, ECT, RTT, Width, Viewport-Width, DPR
Permissions-Policy: ch-ua=(self "https://adsco.re"),ch-ua-mobile=(self "https://adsco.re"),ch-ua-full-version=(self "https://adsco.re"),ch-ua-platform=(self "https://adsco.re"),ch-ua-platform-version=(self "https://adsco.re"),ch-ua-arch=(self "https://adsco.re"),ch-ua-model=(self "https://adsco.re"),ch-device-memory=(self "https://adsco.re"),ch-downlink=(self "https://adsco.re"),ch-ect=(self "https://adsco.re"),ch-rtt=(self "https://adsco.re"),ch-width=(self "https://adsco.re"),ch-viewport-width=(self "https://adsco.re"),ch-dpr=(self "https://adsco.re")
Link: <//6.adsco.re/>;rel=prefetch;crossorigin;as=fetch,<//4.adsco.re/>;rel=prefetch;crossorigin;as=fetch,<//adsco.re/>;rel=preconnect
Expires: Tue, 05 Nov 2024 13:21:30 GMT
ETag: W/"cOaB0SIHOpvD9wT7D5aoLQ=="
Content-Encoding: gzip
CF-Cache-Status: HIT
Age: 7237776
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 8cddb713cb355696-OSL
alt-svc: h2=":443"; ma=60
GET 6.adsco.re/
200 OK 45 B IP
Requested by https://misterindo.net/x/?id=li90lc3
Certificate IssuerSectigo Limited
Subject*.adsco.re
Fingerprint3B:64:1C:DA:8C:64:22:01:36:0F:54:7A:99:6E:AD:26:C2:EF:59:8B
ValidityMon, 23 Sep 2024 00:00:00 GMT - Mon, 29 Sep 2025 23:59:59 GMT
File type ASCII text, with no line terminators
Hash 5b41cb22f84f645a103acc7bfbf084ff
bac3967b26d5ec4a0d09a580714e8219796816bd
709f0a0dfab9f9e074f4a4a348dcb09150838284d21e75cfb9e5ceaeeb2054bc
GET / HTTP/1.1
Host: 6.adsco.re
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: http://c.adsco.re/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 05 Oct 2024 13:21:30 GMT
Content-Type: text/plain;charset=UTF-8
Content-Length: 45
Connection: keep-alive
Access-Control-Allow-Origin: *
Cache-Control: private, max-age=10
Access-Control-Allow-Headers: Content-Type
Access-Control-Allow-Methods: GET, HEAD, OPTIONS
Access-Control-Max-Age: 2592000
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 8cddb713db810b31-OSL
alt-svc: h2=":443"; ma=60
GET 4.adsco.re/
200 OK 62 B IP
Requested by https://misterindo.net/x/?id=li90lc3
Certificate IssuerSectigo Limited
Subject*.adsco.re
Fingerprint3B:64:1C:DA:8C:64:22:01:36:0F:54:7A:99:6E:AD:26:C2:EF:59:8B
ValidityMon, 23 Sep 2024 00:00:00 GMT - Mon, 29 Sep 2025 23:59:59 GMT
File type ASCII text, with no line terminators
Hash 5b41cb22f84f645a103acc7bfbf084ff
bac3967b26d5ec4a0d09a580714e8219796816bd
709f0a0dfab9f9e074f4a4a348dcb09150838284d21e75cfb9e5ceaeeb2054bc
GET / HTTP/1.1
Host: 4.adsco.re
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: http://c.adsco.re/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 05 Oct 2024 13:21:30 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Methods: GET, HEAD, OPTIONS
Access-Control-Allow-Headers: Content-Type
Access-Control-Allow-Origin: *
Access-Control-Max-Age: 2592000
Cache-Control: private, max-age=5
Content-Encoding: gzip
POST hz2desp2qua3.l4.adsco.re/
200 OK 0 B URL POST HTTP/2 hz2desp2qua3.l4.adsco.re/
IP
Requested by https://misterindo.net/x/?id=li90lc3
Certificate IssuerLet's Encrypt
Subject*.l4.adsco.re
Fingerprint97:EE:6D:B0:A5:FE:25:8A:E5:5E:CD:C4:79:F4:83:80:7F:75:2F:ED
ValidityThu, 19 Sep 2024 09:14:21 GMT - Wed, 18 Dec 2024 09:14:20 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST / HTTP/1.1
Host: hz2desp2qua3.l4.adsco.re
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 0
Origin: https://misterindo.net
DNT: 1
Connection: keep-alive
Referer: https://misterindo.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 05 Oct 2024 13:21:30 GMT
content-type: text/html
content-length: 0
last-modified: Fri, 02 Jun 2023 14:03:32 GMT
etag: "6479f6b4-0"
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
access-control-expose-headers: Content-Length,Content-Range
accept-ranges: bytes
X-Firefox-Spdy: h2
GET 6.adsco.re/
200 OK 45 B IP
Requested by https://misterindo.net/x/?id=li90lc3
Certificate IssuerSectigo Limited
Subject*.adsco.re
Fingerprint3B:64:1C:DA:8C:64:22:01:36:0F:54:7A:99:6E:AD:26:C2:EF:59:8B
ValidityMon, 23 Sep 2024 00:00:00 GMT - Mon, 29 Sep 2025 23:59:59 GMT
File type ASCII text, with no line terminators
Hash 5b41cb22f84f645a103acc7bfbf084ff
bac3967b26d5ec4a0d09a580714e8219796816bd
709f0a0dfab9f9e074f4a4a348dcb09150838284d21e75cfb9e5ceaeeb2054bc
GET / HTTP/1.1
Host: 6.adsco.re
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://c.adsco.re/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 05 Oct 2024 13:21:30 GMT
content-type: text/plain;charset=UTF-8
content-length: 45
access-control-allow-origin: *
cache-control: private, max-age=10
access-control-allow-headers: Content-Type
access-control-allow-methods: GET, HEAD, OPTIONS
access-control-max-age: 2592000
vary: Accept-Encoding
server: cloudflare
cf-ray: 8cddb715efcb56a2-OSL
X-Firefox-Spdy: h2
GET c.adsco.re/
31 kB IP
Requested by https://misterindo.net/x/?id=li90lc3
Certificate IssuerSectigo Limited
Subject*.adsco.re
Fingerprint3B:64:1C:DA:8C:64:22:01:36:0F:54:7A:99:6E:AD:26:C2:EF:59:8B
ValidityMon, 23 Sep 2024 00:00:00 GMT - Mon, 29 Sep 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (881)
Hash 728e7dda4c9fed5f3665324d267c4723
53b7c8a7bdb82ec588755327d615445fbf3a3e8c
277e88425a10ee70b1628d093e7a9ce5540877121af49434bd9028f79a50e4bc
GET / HTTP/1.1
Host: c.adsco.re
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://misterindo.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 05 Oct 2024 13:21:30 GMT
content-type: text/html
cache-control: public, max-age=2678400
accept-ch: Sec-CH-UA, Sec-CH-UA-Mobile, Sec-CH-UA-Full-Version, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Arch, Sec-CH-UA-Model, Device-Memory, Downlink, ECT, RTT, Width, Viewport-Width, DPR
permissions-policy: ch-ua=(self "https://adsco.re"),ch-ua-mobile=(self "https://adsco.re"),ch-ua-full-version=(self "https://adsco.re"),ch-ua-platform=(self "https://adsco.re"),ch-ua-platform-version=(self "https://adsco.re"),ch-ua-arch=(self "https://adsco.re"),ch-ua-model=(self "https://adsco.re"),ch-device-memory=(self "https://adsco.re"),ch-downlink=(self "https://adsco.re"),ch-ect=(self "https://adsco.re"),ch-rtt=(self "https://adsco.re"),ch-width=(self "https://adsco.re"),ch-viewport-width=(self "https://adsco.re"),ch-dpr=(self "https://adsco.re")
link: <//6.adsco.re/>;rel=prefetch;crossorigin;as=fetch,<//4.adsco.re/>;rel=prefetch;crossorigin;as=fetch,<//adsco.re/>;rel=preconnect
expires: Tue, 05 Nov 2024 13:21:30 GMT
etag: W/"cOaB0SIHOpvD9wT7D5aoLQ=="
content-encoding: gzip
cf-cache-status: HIT
age: 7237812
vary: Accept-Encoding
server: cloudflare
cf-ray: 8cddb713cffc5690-OSL
X-Firefox-Spdy: h2
GET 4.adsco.re/
200 OK 62 B IP
Requested by https://misterindo.net/x/?id=li90lc3
Certificate IssuerSectigo Limited
Subject*.adsco.re
Fingerprint3B:64:1C:DA:8C:64:22:01:36:0F:54:7A:99:6E:AD:26:C2:EF:59:8B
ValidityMon, 23 Sep 2024 00:00:00 GMT - Mon, 29 Sep 2025 23:59:59 GMT
File type ASCII text, with no line terminators
Hash 5b41cb22f84f645a103acc7bfbf084ff
bac3967b26d5ec4a0d09a580714e8219796816bd
709f0a0dfab9f9e074f4a4a348dcb09150838284d21e75cfb9e5ceaeeb2054bc
GET / HTTP/1.1
Host: 4.adsco.re
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://c.adsco.re/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 05 Oct 2024 13:21:30 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Methods: GET, HEAD, OPTIONS
Access-Control-Allow-Headers: Content-Type
Access-Control-Allow-Origin: *
Access-Control-Max-Age: 2592000
Cache-Control: private, max-age=5
Content-Encoding: gzip
POST adsco.re/p
200 OK 875 B IP
Requested by https://misterindo.net/x/?id=li90lc3
Certificate IssuerSectigo Limited
Subject*.adsco.re
Fingerprint3B:64:1C:DA:8C:64:22:01:36:0F:54:7A:99:6E:AD:26:C2:EF:59:8B
ValidityMon, 23 Sep 2024 00:00:00 GMT - Mon, 29 Sep 2025 23:59:59 GMT
File type ASCII text, with very long lines (1106), with no line terminators
Hash 0e427eff7a888a4ef7ef7ee21686f36e
c8c4a03a7e8f46b4fc5628580505535bd8e5fafe
4fd36a90284d6d90b78be7db4bb8f476d8b6b7a12c9c173a2c2e173e8124f882
POST /p HTTP/1.1
Host: adsco.re
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Length: 1393
Origin: https://misterindo.net
DNT: 1
Connection: keep-alive
Referer: https://misterindo.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 05 Oct 2024 13:21:30 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
AS-P-1: OK lon123
AS-P-2: OK
AS-P-3: OK
Access-Control-Max-Age: 2592000
Cache-Control: no-transform
Accept-CH: Sec-CH-UA, Sec-CH-UA-Mobile, Sec-CH-UA-Full-Version, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Arch, Sec-CH-UA-Model, Device-Memory, Downlink, ECT, RTT, Width, Viewport-Width, DPR
Access-Control-Allow-Origin: https://misterindo.net
Access-Control-Allow-Credentials: true
Content-Encoding: gzip
POST eq5tdkeewmek.n4.adsco.re/
200 OK 0 B URL POST HTTP/2 eq5tdkeewmek.n4.adsco.re/
IP
Requested by http://159.89.198.98/video/li90lc3/movies-home
Certificate IssuerLet's Encrypt
Subject*.n4.adsco.re
FingerprintE3:73:B1:79:A1:04:DE:01:28:DD:46:7F:C0:B3:89:2B:FF:12:B0:32
ValidityThu, 19 Sep 2024 09:14:12 GMT - Wed, 18 Dec 2024 09:14:11 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST / HTTP/1.1
Host: eq5tdkeewmek.n4.adsco.re
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 0
Origin: http://159.89.198.98
DNT: 1
Connection: keep-alive
Referer: http://159.89.198.98/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 05 Oct 2024 13:21:30 GMT
content-type: text/html
content-length: 0
last-modified: Fri, 16 Jun 2023 08:37:42 GMT
etag: "648c1f56-0"
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
access-control-expose-headers: Content-Length,Content-Range
accept-ranges: bytes
X-Firefox-Spdy: h2
GET premiumvertising.com/srncrrwazoszghhffsq?OnuJBIkY=BQMyAAAAAAAACZUAAjZ-Gwm6NPth9uv53b1QSWEDzQUbAFe2M5QK2ohyKScc9J27G_3w5uXgq8WC-kzqe2YoJV5jE_8_Pz6yQnkCkRCRNtNsZ_PCBVXc9Kbg2BRV42NxOR0qBRCQ48cpSpSocZumEBSHqaoGF2PDdzr0DlXox1rjRMJjEpkCITkGAy9dKMwH6VbKUGO8NF1DjGz4OMzylzU7Yg4yR5DzVEKhax6vXQZ7QNWp6qEJ3SMhapNYOmTn-wbCZu9sGBfAm_lO45knqUQbDGRY5yn8iUAIfjmRKowfqf3vsQYUFIytbQ0f_W9JzAzk_Tmygts3l3wwPFrRGmVpv0SS8se9YZ6SP05C6jLlvyMVQCwFI7PWozcrFpnZl1EejWgOzbJZa1spqYgRL7xDlWo23igYI_M_8HvBfwmEFZ7-w4XBy0Gv1wAC1LYYIOgMBBLk1AUSqrMRNz2eg1sbPMwoeixx8ogyWf1H1ool9YGKNlgFq038cM6_4Yhzrd2Iaww2paS1ZSMans4NwHI7TPtVrGZtpzIQ5voUhYv-QZ-JulJE4-yjjdmwA2dvru2OJm3F8wwpRrHe78wVymkZDc0Z06sNcI1Y-PZtZQxoqnxS009RSTUZEMJyj6_lHMfD-Lv_R6k4_q2BoPq61HIDMSSmhbpRq3IDHLcyo9uQYMwjZrYLstAJpwMZUz2hC8Ou2BbfJzk-d90ygQ5wNVMMNpFn49TPb0c2hTTi_xipQxvQS2udInYNy-5OJ2Zi20ozI7Cc-uOgd-Rxt3imO-QcAVYVCN47LeUW4VfWk5D0pP0wtFqmDn_maun7KBJKHTsaWXA-kVvzfvS8BtDJqgcZltApNbKxFh3hIYIvPqcqRt-IG5o7KY07CVZO0rlYiOPitYkitfDyGG6ypM6JUgcfljhqMBiJrcx6EmEZEXQD5zjmt3XNVuSRjgn-4iWmZHtWur-FQZLhO7xyKVzsUkd_lGcbvBcneFlp4vCctp-gpk6AQwQXxEtGOb5fmTRDtxpQgNJVTuoE8xgyAOqU3n7Eb_cnBvr9ZYzAZfReUVwpMkWJpGEPz41aKQVpC4JAJVmqYFE1qzF1HwfpRQ&oAnOzaml=4&AjBieSDd=3212677&XhPDeENj=&zbeHSLXv=0,0&JwjhndKH=&NRkguwOj=&s=1280,1024,1,1280,1024,0
200 OK 44 B URL GET HTTP/1.1 premiumvertising.com/srncrrwazoszghhffsq?OnuJBIkY=BQMyAAAAAAAACZUAAjZ-Gwm6NPth9uv53b1QSWEDzQUbAFe2M5QK2ohyKScc9J27G_3w5uXgq8WC-kzqe2YoJV5jE_8_Pz6yQnkCkRCRNtNsZ_PCBVXc9Kbg2BRV42NxOR0qBRCQ48cpSpSocZumEBSHqaoGF2PDdzr0DlXox1rjRMJjEpkCITkGAy9dKMwH6VbKUGO8NF1DjGz4OMzylzU7Yg4yR5DzVEKhax6vXQZ7QNWp6qEJ3SMhapNYOmTn-wbCZu9sGBfAm_lO45knqUQbDGRY5yn8iUAIfjmRKowfqf3vsQYUFIytbQ0f_W9JzAzk_Tmygts3l3wwPFrRGmVpv0SS8se9YZ6SP05C6jLlvyMVQCwFI7PWozcrFpnZl1EejWgOzbJZa1spqYgRL7xDlWo23igYI_M_8HvBfwmEFZ7-w4XBy0Gv1wAC1LYYIOgMBBLk1AUSqrMRNz2eg1sbPMwoeixx8ogyWf1H1ool9YGKNlgFq038cM6_4Yhzrd2Iaww2paS1ZSMans4NwHI7TPtVrGZtpzIQ5voUhYv-QZ-JulJE4-yjjdmwA2dvru2OJm3F8wwpRrHe78wVymkZDc0Z06sNcI1Y-PZtZQxoqnxS009RSTUZEMJyj6_lHMfD-Lv_R6k4_q2BoPq61HIDMSSmhbpRq3IDHLcyo9uQYMwjZrYLstAJpwMZUz2hC8Ou2BbfJzk-d90ygQ5wNVMMNpFn49TPb0c2hTTi_xipQxvQS2udInYNy-5OJ2Zi20ozI7Cc-uOgd-Rxt3imO-QcAVYVCN47LeUW4VfWk5D0pP0wtFqmDn_maun7KBJKHTsaWXA-kVvzfvS8BtDJqgcZltApNbKxFh3hIYIvPqcqRt-IG5o7KY07CVZO0rlYiOPitYkitfDyGG6ypM6JUgcfljhqMBiJrcx6EmEZEXQD5zjmt3XNVuSRjgn-4iWmZHtWur-FQZLhO7xyKVzsUkd_lGcbvBcneFlp4vCctp-gpk6AQwQXxEtGOb5fmTRDtxpQgNJVTuoE8xgyAOqU3n7Eb_cnBvr9ZYzAZfReUVwpMkWJpGEPz41aKQVpC4JAJVmqYFE1qzF1HwfpRQ&oAnOzaml=4&AjBieSDd=3212677&XhPDeENj=&zbeHSLXv=0,0&JwjhndKH=&NRkguwOj=&s=1280,1024,1,1280,1024,0
IP
Requested by http://159.89.198.98/video/li90lc3/movies-home
File type ASCII text, with no line terminators
Hash d5f0a25e4d3522d56d48ce7bc3e518fb
86794caff58f7fee6e684c2ba7195f970a8d6f4c
9d781128a8ece413b003d5612b8398bf9340ef7f5b751d12bd125ba523d3ceb5
GET /srncrrwazoszghhffsq?OnuJBIkY=BQMyAAAAAAAACZUAAjZ-Gwm6NPth9uv53b1QSWEDzQUbAFe2M5QK2ohyKScc9J27G_3w5uXgq8WC-kzqe2YoJV5jE_8_Pz6yQnkCkRCRNtNsZ_PCBVXc9Kbg2BRV42NxOR0qBRCQ48cpSpSocZumEBSHqaoGF2PDdzr0DlXox1rjRMJjEpkCITkGAy9dKMwH6VbKUGO8NF1DjGz4OMzylzU7Yg4yR5DzVEKhax6vXQZ7QNWp6qEJ3SMhapNYOmTn-wbCZu9sGBfAm_lO45knqUQbDGRY5yn8iUAIfjmRKowfqf3vsQYUFIytbQ0f_W9JzAzk_Tmygts3l3wwPFrRGmVpv0SS8se9YZ6SP05C6jLlvyMVQCwFI7PWozcrFpnZl1EejWgOzbJZa1spqYgRL7xDlWo23igYI_M_8HvBfwmEFZ7-w4XBy0Gv1wAC1LYYIOgMBBLk1AUSqrMRNz2eg1sbPMwoeixx8ogyWf1H1ool9YGKNlgFq038cM6_4Yhzrd2Iaww2paS1ZSMans4NwHI7TPtVrGZtpzIQ5voUhYv-QZ-JulJE4-yjjdmwA2dvru2OJm3F8wwpRrHe78wVymkZDc0Z06sNcI1Y-PZtZQxoqnxS009RSTUZEMJyj6_lHMfD-Lv_R6k4_q2BoPq61HIDMSSmhbpRq3IDHLcyo9uQYMwjZrYLstAJpwMZUz2hC8Ou2BbfJzk-d90ygQ5wNVMMNpFn49TPb0c2hTTi_xipQxvQS2udInYNy-5OJ2Zi20ozI7Cc-uOgd-Rxt3imO-QcAVYVCN47LeUW4VfWk5D0pP0wtFqmDn_maun7KBJKHTsaWXA-kVvzfvS8BtDJqgcZltApNbKxFh3hIYIvPqcqRt-IG5o7KY07CVZO0rlYiOPitYkitfDyGG6ypM6JUgcfljhqMBiJrcx6EmEZEXQD5zjmt3XNVuSRjgn-4iWmZHtWur-FQZLhO7xyKVzsUkd_lGcbvBcneFlp4vCctp-gpk6AQwQXxEtGOb5fmTRDtxpQgNJVTuoE8xgyAOqU3n7Eb_cnBvr9ZYzAZfReUVwpMkWJpGEPz41aKQVpC4JAJVmqYFE1qzF1HwfpRQ&oAnOzaml=4&AjBieSDd=3212677&XhPDeENj=&zbeHSLXv=0,0&JwjhndKH=&NRkguwOj=&s=1280,1024,1,1280,1024,0 HTTP/1.1
Host: premiumvertising.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://159.89.198.98/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
popads-node: wb11
access-control-allow-origin: *
asf: 9
popads-ec: ASB
content-type: text/javascript;charset=UTF-8
content-length: 44
date: Sat, 05 Oct 2024 13:21:31 GMT
GET premiumvertising.com/apnotvmiak?qLYREBdO=BQMyAAAAAAAACZUAAolvqvqDXcP5BN_8AajMjn7M60RF6G1RVMH7K5VKqrFOr_0zHAQBHcNRp4qPIjLB_cBCSkt2hG5MAFdqnJvjsQ7LWP8iYNUu9shfT8BmLXSRXHT9qQJKi79Bky4EojqL9bb_CWtm0rzUh8JIqJp0k02ksFpEQq4P7AO8RPLhG8F1q2sqXBGSpf9SBIaAp8sjdaXNb_EsiVxbY-FqFG6o-jClIeJAr3L51fcjhWUByYOtVZqm75RspXv8ZI5OHEt8BYw-3-bx_CVd4-JjcDkeCX56QGRl6IlvhSfDAqyWgTbOwXY19t1H2dWlENjNudynnRCC79fuIwllBUXGCHT9BDJRKRLjbbmhw7sbMKndBY0rzAdaGIa59NkTPxZq6hMw9a0fY_KHo2TkRrwb4eN0eRf8vOgdeRUJoIgemB3Op5exsIbuxBQ56GAob2bxbeuWJZgH7_Ziq2LTkDp_OTGBDPxrZDYbNX_b_JH0z7cGphYjL6YGnXbaJHA7NgFlGi5u1Afn9hv-cdGBxNhLhOHB3E2ujm_4EigducdRCRPUB3jS0Pr3frUwBeNUJd2dC7VkU2l_R97zz9HQCzKZack2385pFEk86Ut1niZI9gYkjacH6t1do_VQhm3sqMGkPEv91OWj8XEy4zaKBiWHZBtNVaJZ8RspbHD6A2Ib-f74e4l8B7YgL4FdRBvfss4lpHEZVbttiGLj8PVGs_cqUEVUdPfilCpYLR9dz7btKHrGdcCq-Cs4J5PaPcY_KtH8AIzZe9bpPvc7qBsYb72HgbLEf_MsXU1nKQ0p3xRB_iSKn1qkc--GXqLjI1sjKFcE3WFoxiznVR6UcCF_IYurDtSVmvK_T-O4WyTmviHAWGjF_xYBAgEO4vXDsyoCck8BSjRcCguBeLcE2KuubfqqzMy9f7ZBEVsqWhfEQC7hfhbhM9zMlLw1y6ZtxQInfeZSav6D9dJL0I89MG3_fKKya5GliiP70RpUy1qYRsT8HYhnoa_gBTzqaeOJigQFSmEvB6ScArSUiAjiC2MlzakpZFsqdNO-4R3qffyYbL6ppVg345jCANWe5_1yvgdZsAP5rNJvBg&ISqixkOV=4&RDBebizc=2583764&PfswUzRC=&ImUxAjQT=0,0&JMocaOPF=&FyGvkzOL=http%3A%2F%2F159.89.198.98%2F&s=1280,1024,1,1280,1024,1
200 OK 44 B URL GET HTTP/2 premiumvertising.com/apnotvmiak?qLYREBdO=BQMyAAAAAAAACZUAAolvqvqDXcP5BN_8AajMjn7M60RF6G1RVMH7K5VKqrFOr_0zHAQBHcNRp4qPIjLB_cBCSkt2hG5MAFdqnJvjsQ7LWP8iYNUu9shfT8BmLXSRXHT9qQJKi79Bky4EojqL9bb_CWtm0rzUh8JIqJp0k02ksFpEQq4P7AO8RPLhG8F1q2sqXBGSpf9SBIaAp8sjdaXNb_EsiVxbY-FqFG6o-jClIeJAr3L51fcjhWUByYOtVZqm75RspXv8ZI5OHEt8BYw-3-bx_CVd4-JjcDkeCX56QGRl6IlvhSfDAqyWgTbOwXY19t1H2dWlENjNudynnRCC79fuIwllBUXGCHT9BDJRKRLjbbmhw7sbMKndBY0rzAdaGIa59NkTPxZq6hMw9a0fY_KHo2TkRrwb4eN0eRf8vOgdeRUJoIgemB3Op5exsIbuxBQ56GAob2bxbeuWJZgH7_Ziq2LTkDp_OTGBDPxrZDYbNX_b_JH0z7cGphYjL6YGnXbaJHA7NgFlGi5u1Afn9hv-cdGBxNhLhOHB3E2ujm_4EigducdRCRPUB3jS0Pr3frUwBeNUJd2dC7VkU2l_R97zz9HQCzKZack2385pFEk86Ut1niZI9gYkjacH6t1do_VQhm3sqMGkPEv91OWj8XEy4zaKBiWHZBtNVaJZ8RspbHD6A2Ib-f74e4l8B7YgL4FdRBvfss4lpHEZVbttiGLj8PVGs_cqUEVUdPfilCpYLR9dz7btKHrGdcCq-Cs4J5PaPcY_KtH8AIzZe9bpPvc7qBsYb72HgbLEf_MsXU1nKQ0p3xRB_iSKn1qkc--GXqLjI1sjKFcE3WFoxiznVR6UcCF_IYurDtSVmvK_T-O4WyTmviHAWGjF_xYBAgEO4vXDsyoCck8BSjRcCguBeLcE2KuubfqqzMy9f7ZBEVsqWhfEQC7hfhbhM9zMlLw1y6ZtxQInfeZSav6D9dJL0I89MG3_fKKya5GliiP70RpUy1qYRsT8HYhnoa_gBTzqaeOJigQFSmEvB6ScArSUiAjiC2MlzakpZFsqdNO-4R3qffyYbL6ppVg345jCANWe5_1yvgdZsAP5rNJvBg&ISqixkOV=4&RDBebizc=2583764&PfswUzRC=&ImUxAjQT=0,0&JMocaOPF=&FyGvkzOL=http%3A%2F%2F159.89.198.98%2F&s=1280,1024,1,1280,1024,1
IP
Requested by https://misterindo.net/x/?id=li90lc3
Certificate IssuerSectigo Limited
Subjectpremiumvertising.com
Fingerprint53:60:DC:90:A6:0C:25:B3:98:9D:2B:01:33:CE:07:64:72:00:A7:CC
ValidityWed, 11 Sep 2024 00:00:00 GMT - Sat, 19 Apr 2025 23:59:59 GMT
File type ASCII text, with no line terminators
Hash d5f0a25e4d3522d56d48ce7bc3e518fb
86794caff58f7fee6e684c2ba7195f970a8d6f4c
9d781128a8ece413b003d5612b8398bf9340ef7f5b751d12bd125ba523d3ceb5
GET /apnotvmiak?qLYREBdO=BQMyAAAAAAAACZUAAolvqvqDXcP5BN_8AajMjn7M60RF6G1RVMH7K5VKqrFOr_0zHAQBHcNRp4qPIjLB_cBCSkt2hG5MAFdqnJvjsQ7LWP8iYNUu9shfT8BmLXSRXHT9qQJKi79Bky4EojqL9bb_CWtm0rzUh8JIqJp0k02ksFpEQq4P7AO8RPLhG8F1q2sqXBGSpf9SBIaAp8sjdaXNb_EsiVxbY-FqFG6o-jClIeJAr3L51fcjhWUByYOtVZqm75RspXv8ZI5OHEt8BYw-3-bx_CVd4-JjcDkeCX56QGRl6IlvhSfDAqyWgTbOwXY19t1H2dWlENjNudynnRCC79fuIwllBUXGCHT9BDJRKRLjbbmhw7sbMKndBY0rzAdaGIa59NkTPxZq6hMw9a0fY_KHo2TkRrwb4eN0eRf8vOgdeRUJoIgemB3Op5exsIbuxBQ56GAob2bxbeuWJZgH7_Ziq2LTkDp_OTGBDPxrZDYbNX_b_JH0z7cGphYjL6YGnXbaJHA7NgFlGi5u1Afn9hv-cdGBxNhLhOHB3E2ujm_4EigducdRCRPUB3jS0Pr3frUwBeNUJd2dC7VkU2l_R97zz9HQCzKZack2385pFEk86Ut1niZI9gYkjacH6t1do_VQhm3sqMGkPEv91OWj8XEy4zaKBiWHZBtNVaJZ8RspbHD6A2Ib-f74e4l8B7YgL4FdRBvfss4lpHEZVbttiGLj8PVGs_cqUEVUdPfilCpYLR9dz7btKHrGdcCq-Cs4J5PaPcY_KtH8AIzZe9bpPvc7qBsYb72HgbLEf_MsXU1nKQ0p3xRB_iSKn1qkc--GXqLjI1sjKFcE3WFoxiznVR6UcCF_IYurDtSVmvK_T-O4WyTmviHAWGjF_xYBAgEO4vXDsyoCck8BSjRcCguBeLcE2KuubfqqzMy9f7ZBEVsqWhfEQC7hfhbhM9zMlLw1y6ZtxQInfeZSav6D9dJL0I89MG3_fKKya5GliiP70RpUy1qYRsT8HYhnoa_gBTzqaeOJigQFSmEvB6ScArSUiAjiC2MlzakpZFsqdNO-4R3qffyYbL6ppVg345jCANWe5_1yvgdZsAP5rNJvBg&ISqixkOV=4&RDBebizc=2583764&PfswUzRC=&ImUxAjQT=0,0&JMocaOPF=&FyGvkzOL=http%3A%2F%2F159.89.198.98%2F&s=1280,1024,1,1280,1024,1 HTTP/1.1
Host: premiumvertising.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://misterindo.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
popads-node: wb11
access-control-allow-origin: *
asf: 9
popads-ec: ASB
content-type: text/javascript;charset=UTF-8
content-length: 44
date: Sat, 05 Oct 2024 13:21:31 GMT
X-Firefox-Spdy: h2
POST hz2desp2qua3.s4.adsco.re/
200 OK 0 B URL POST HTTP/2 hz2desp2qua3.s4.adsco.re/
IP
Requested by https://misterindo.net/x/?id=li90lc3
Certificate IssuerLet's Encrypt
Subject*.s4.adsco.re
Fingerprint22:5D:98:D0:BB:80:5F:1E:49:6B:29:EF:5A:9B:92:84:CA:ED:5E:CE
ValidityThu, 19 Sep 2024 09:14:11 GMT - Wed, 18 Dec 2024 09:14:10 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST / HTTP/1.1
Host: hz2desp2qua3.s4.adsco.re
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 0
Origin: https://misterindo.net
DNT: 1
Connection: keep-alive
Referer: https://misterindo.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 05 Oct 2024 13:21:31 GMT
content-type: text/html
content-length: 0
last-modified: Tue, 03 Oct 2023 13:29:59 GMT
etag: "651c1757-0"
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
access-control-expose-headers: Content-Length,Content-Range
accept-ranges: bytes
X-Firefox-Spdy: h2
POST hz2desp2qua3.n4.adsco.re/
200 OK 0 B URL POST HTTP/2 hz2desp2qua3.n4.adsco.re/
IP
Requested by https://misterindo.net/x/?id=li90lc3
Certificate IssuerLet's Encrypt
Subject*.n4.adsco.re
FingerprintE3:73:B1:79:A1:04:DE:01:28:DD:46:7F:C0:B3:89:2B:FF:12:B0:32
ValidityThu, 19 Sep 2024 09:14:12 GMT - Wed, 18 Dec 2024 09:14:11 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST / HTTP/1.1
Host: hz2desp2qua3.n4.adsco.re
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 0
Origin: https://misterindo.net
DNT: 1
Connection: keep-alive
Referer: https://misterindo.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 05 Oct 2024 13:21:32 GMT
content-type: text/html
content-length: 0
last-modified: Fri, 16 Jun 2023 08:37:42 GMT
etag: "648c1f56-0"
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
access-control-expose-headers: Content-Length,Content-Range
accept-ranges: bytes
X-Firefox-Spdy: h2
POST eq5tdkeewmek.s4.adsco.re/
200 OK 0 B URL POST HTTP/2 eq5tdkeewmek.s4.adsco.re/
IP
Requested by http://159.89.198.98/video/li90lc3/movies-home
Certificate IssuerLet's Encrypt
Subject*.s4.adsco.re
Fingerprint22:5D:98:D0:BB:80:5F:1E:49:6B:29:EF:5A:9B:92:84:CA:ED:5E:CE
ValidityThu, 19 Sep 2024 09:14:11 GMT - Wed, 18 Dec 2024 09:14:10 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST / HTTP/1.1
Host: eq5tdkeewmek.s4.adsco.re
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 0
Origin: http://159.89.198.98
DNT: 1
Connection: keep-alive
Referer: http://159.89.198.98/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 05 Oct 2024 13:21:32 GMT
content-type: text/html
content-length: 0
last-modified: Tue, 03 Oct 2023 13:29:59 GMT
etag: "651c1757-0"
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
access-control-expose-headers: Content-Length,Content-Range
accept-ranges: bytes
X-Firefox-Spdy: h2
GET www.premiumvertising.com/dRSoQc/d/gjsfx.min.js
200 OK 37 kB URL GET HTTP/2 www.premiumvertising.com/dRSoQc/d/gjsfx.min.js
IP
ASN #60068 Datacamp Limited
Requested by http://159.89.198.98/video/li90lc3/movies-home
Certificate IssuerLet's Encrypt
Subject1258267123.rsc.cdn77.org
FingerprintF1:61:64:56:BF:8A:A7:19:7C:50:55:CF:7D:01:07:CA:44:67:B3:2F
ValidityTue, 17 Sep 2024 16:53:56 GMT - Mon, 16 Dec 2024 16:53:55 GMT
File type JavaScript source, ASCII text, with very long lines (1568)
Hash 0ddd18d50b0c1210f92d1949c8a4bab6
a104ca94a099fc722c8536306a4f1791d3ff3769
3b239e432abf6486e0851f5198035647519414902e71861c0fc462c166d7c004
GET /dRSoQc/d/gjsfx.min.js HTTP/1.1
Host: www.premiumvertising.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://159.89.198.98
DNT: 1
Connection: keep-alive
Referer: http://159.89.198.98/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 05 Oct 2024 13:21:28 GMT
content-type: application/x-javascript
popads-node: wb8
expires: Mon, 07 Oct 2024 13:07:51 GMT
access-control-allow-origin: http://159.89.198.98
link: <https://premiumvertising.com/>;rel=preconnect
cache-control: public, max-age=604800
x-77-nzt: EwwBuUwJGwH38owGAAwBuUwKAQH3AwwAAAwBnJIhHwG3uwEAAA
x-77-nzt-ray: fdb54123a474dc22583d0167eff1e62c
x-accel-expires: @1728306472
x-accel-date: 1727705190
x-accel-date-max: 1727701671
x-77-cache: HIT
x-77-age: 429298
vary: Accept-Encoding, Origin
content-encoding: gzip
server: CDN77-Turbo
x-cache: HIT
x-age: 429298
x-77-pop: stockholmSE
X-Firefox-Spdy: h2
GET 159.89.198.98/include/favicon.ico
200 OK 1.2 kB URL GET HTTP/1.1 159.89.198.98/include/favicon.ico
IP
ASN #14061 DIGITALOCEAN-ASN
Requested by http://159.89.198.98/video/li90lc3/movies-home
File type MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel
Hash 74bcc9c72ca2e59f467b46d0d2b9f409
0f926f925453097124dbb534296c1958937de453
f8b1b30a7e4579a025ad3b20152f4f2dd96cbc4a028bb2fc226eb95af0868211
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /include/favicon.ico HTTP/1.1
Host: 159.89.198.98
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://159.89.198.98/video/li90lc3/movies-home
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 05 Oct 2024 13:22:06 GMT
Content-Type: image/x-icon
Last-Modified: Wed, 28 Apr 2021 06:54:50 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"608906ba-47e"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Access-Control-Allow-Origin: *
Content-Encoding: gzip
GET misterindo.net/x/30384483225d547e3769cc6752e0175c.php?id=li90lc3
0 B URL GET misterindo.net/x/30384483225d547e3769cc6752e0175c.php?id=li90lc3
IP
Requested by https://misterindo.net/x/?id=li90lc3
Certificate IssuerGoogle Trust Services
Subjectmisterindo.net
Fingerprint1D:6F:9D:EA:6B:71:D6:6C:23:78:72:3C:9D:2A:55:2A:76:F1:29:94
ValiditySun, 15 Sep 2024 21:46:02 GMT - Sat, 14 Dec 2024 21:46:01 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /x/30384483225d547e3769cc6752e0175c.php?id=li90lc3 HTTP/1.1
Host: misterindo.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
DNT: 1
Connection: keep-alive
Referer: https://misterindo.net/x/?id=li90lc3
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache
GET cdn77-vid-mp4.others-cdn.com/7yLGcIfHfgALLTxh4U3v7A==,1728145289/videos/mp4/4/c/1/xvideos.com_4c173bc3599db28438b929b77147181a-1.mp4?ui=NjQuMjI3LjExNS4xNjItLS92aWRlby1saTkwbGMzL21vdmllc19ob21l
0 B URL GET cdn77-vid-mp4.others-cdn.com/7yLGcIfHfgALLTxh4U3v7A==,1728145289/videos/mp4/4/c/1/xvideos.com_4c173bc3599db28438b929b77147181a-1.mp4?ui=NjQuMjI3LjExNS4xNjItLS92aWRlby1saTkwbGMzL21vdmllc19ob21l
IP
Requested by https://misterindo.net/x/?id=li90lc3
Certificate IssuerSectigo Limited
Subjectxvideos.com
FingerprintC8:79:F3:AC:85:D8:36:AC:8C:F2:30:0D:AF:6E:19:50:37:CC:C6:95
ValidityTue, 10 Oct 2023 00:00:00 GMT - Fri, 11 Oct 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /7yLGcIfHfgALLTxh4U3v7A==,1728145289/videos/mp4/4/c/1/xvideos.com_4c173bc3599db28438b929b77147181a-1.mp4?ui=NjQuMjI3LjExNS4xNjItLS92aWRlby1saTkwbGMzL21vdmllc19ob21l HTTP/1.1
Host: cdn77-vid-mp4.others-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br, identity
Range: bytes=0-
Referer: https://misterindo.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 206 Partial Content
date: Sat, 05 Oct 2024 13:21:30 GMT
content-type: video/mp4
content-length: 39489122
x-frame-options: sameorigin
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
last-modified: Fri, 17 Feb 2023 15:32:39 GMT
cache-control: max-age=10368000, public
access-control-allow-origin: *
x-77-nzt: A8O1pg03Nzf/uYoXANRmOA03Nzf/fJMCAI/0Ot2uTj//xwMAAA
x-77-nzt-ray: b1f3ea1b92d90a825a3d01674a5cd201
x-accel-expires: @1736790821
x-accel-date: 1726591649
x-77-cache: HIT
x-77-age: 1542841
server: CDN77-Turbo
x-accel-date-max: 1726591649
x-cache: HIT
x-age: 1542841
content-range: bytes 0-39489121/39489122
X-Firefox-Spdy: h2
GET c.adsco.re/
200 OK 78 kB IP
Requested by https://misterindo.net/x/?id=li90lc3
Certificate IssuerSectigo Limited
Subject*.adsco.re
Fingerprint3B:64:1C:DA:8C:64:22:01:36:0F:54:7A:99:6E:AD:26:C2:EF:59:8B
ValidityMon, 23 Sep 2024 00:00:00 GMT - Mon, 29 Sep 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (881)
Hash 70e681d122073a9bc3f704fb0f96a82d
5916b6dea0ea58b5807287ca1cd4faf9c9f3aae5
73bfce45d382df02d75ef2ef688325cc973139931db445ee753c2af8a85f3965
GET / HTTP/1.1
Host: c.adsco.re
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://misterindo.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 05 Oct 2024 13:21:30 GMT
content-type: text/html
cache-control: public, max-age=2678400
accept-ch: Sec-CH-UA, Sec-CH-UA-Mobile, Sec-CH-UA-Full-Version, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Arch, Sec-CH-UA-Model, Device-Memory, Downlink, ECT, RTT, Width, Viewport-Width, DPR
permissions-policy: ch-ua=(self "https://adsco.re"),ch-ua-mobile=(self "https://adsco.re"),ch-ua-full-version=(self "https://adsco.re"),ch-ua-platform=(self "https://adsco.re"),ch-ua-platform-version=(self "https://adsco.re"),ch-ua-arch=(self "https://adsco.re"),ch-ua-model=(self "https://adsco.re"),ch-device-memory=(self "https://adsco.re"),ch-downlink=(self "https://adsco.re"),ch-ect=(self "https://adsco.re"),ch-rtt=(self "https://adsco.re"),ch-width=(self "https://adsco.re"),ch-viewport-width=(self "https://adsco.re"),ch-dpr=(self "https://adsco.re")
link: <//6.adsco.re/>;rel=prefetch;crossorigin;as=fetch,<//4.adsco.re/>;rel=prefetch;crossorigin;as=fetch,<//adsco.re/>;rel=preconnect
expires: Tue, 05 Nov 2024 13:21:30 GMT
etag: W/"cOaB0SIHOpvD9wT7D5aoLQ=="
content-encoding: gzip
cf-cache-status: HIT
age: 7237812
vary: Accept-Encoding
server: cloudflare
cf-ray: 8cddb713cffc5690-OSL
X-Firefox-Spdy: h2
GET www.premiumvertising.com/dMI/O/cjsonform.js
200 OK 37 kB URL GET HTTP/2 www.premiumvertising.com/dMI/O/cjsonform.js
IP
ASN #60068 Datacamp Limited
Requested by https://misterindo.net/x/?id=li90lc3
Certificate IssuerLet's Encrypt
Subject1258267123.rsc.cdn77.org
FingerprintF1:61:64:56:BF:8A:A7:19:7C:50:55:CF:7D:01:07:CA:44:67:B3:2F
ValidityTue, 17 Sep 2024 16:53:56 GMT - Mon, 16 Dec 2024 16:53:55 GMT
File type JavaScript source, ASCII text, with very long lines (1568)
Hash 314f7ed957710da6a4d70c45dce2ee04
2b62f3b8cd4ed28cf6dcf001be70084ad2c2ff0b
fdaf94f412588ec80fa59571ce7abb140531766ceac6b9c87f146ef4dc85f8ca
GET /dMI/O/cjsonform.js HTTP/1.1
Host: www.premiumvertising.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://misterindo.net
DNT: 1
Connection: keep-alive
Referer: https://misterindo.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 05 Oct 2024 13:21:29 GMT
content-type: application/x-javascript
popads-node: wb3
expires: Fri, 11 Oct 2024 15:03:15 GMT
access-control-allow-origin: https://misterindo.net
link: <https://premiumvertising.com/>;rel=preconnect
cache-control: public, max-age=604800
x-77-nzt: EwwBuUwJGwH3pDQBAAwBuUwKEwH36AQAAAwBisclxAG3GgAAAA
x-77-nzt-ray: fdb54123a474dc22593d0167100d9312
x-accel-expires: @1728658995
x-accel-date: 1728055477
x-accel-date-max: 1728054195
x-77-cache: HIT
x-77-age: 79012
vary: Accept-Encoding, Origin
content-encoding: gzip
server: CDN77-Turbo
x-cache: HIT
x-age: 79012
x-77-pop: stockholmSE
X-Firefox-Spdy: h2
GET c.adsco.re/
200 OK 78 kB IP
Requested by http://159.89.198.98/video/li90lc3/movies-home
File type JavaScript source, ASCII text, with very long lines (881)
Hash 70e681d122073a9bc3f704fb0f96a82d
5916b6dea0ea58b5807287ca1cd4faf9c9f3aae5
73bfce45d382df02d75ef2ef688325cc973139931db445ee753c2af8a85f3965
GET / HTTP/1.1
Host: c.adsco.re
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://159.89.198.98/
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 05 Oct 2024 13:21:29 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: public, max-age=2678400
Accept-CH: Sec-CH-UA, Sec-CH-UA-Mobile, Sec-CH-UA-Full-Version, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Arch, Sec-CH-UA-Model, Device-Memory, Downlink, ECT, RTT, Width, Viewport-Width, DPR
Permissions-Policy: ch-ua=(self "https://adsco.re"),ch-ua-mobile=(self "https://adsco.re"),ch-ua-full-version=(self "https://adsco.re"),ch-ua-platform=(self "https://adsco.re"),ch-ua-platform-version=(self "https://adsco.re"),ch-ua-arch=(self "https://adsco.re"),ch-ua-model=(self "https://adsco.re"),ch-device-memory=(self "https://adsco.re"),ch-downlink=(self "https://adsco.re"),ch-ect=(self "https://adsco.re"),ch-rtt=(self "https://adsco.re"),ch-width=(self "https://adsco.re"),ch-viewport-width=(self "https://adsco.re"),ch-dpr=(self "https://adsco.re")
Link: <//6.adsco.re/>;rel=prefetch;crossorigin;as=fetch,<//4.adsco.re/>;rel=prefetch;crossorigin;as=fetch,<//adsco.re/>;rel=preconnect
Expires: Tue, 05 Nov 2024 13:21:29 GMT
ETag: W/"cOaB0SIHOpvD9wT7D5aoLQ=="
Content-Encoding: gzip
CF-Cache-Status: HIT
Age: 7237775
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 8cddb7119e915696-OSL
alt-svc: h2=":443"; ma=60
GET a.pemsrv.com/popunder1000.js
200 OK 101 kB URL GET HTTP/2 a.pemsrv.com/popunder1000.js
IP
ASN #60068 Datacamp Limited
Requested by https://misterindo.net/x/?id=li90lc3
Certificate IssuerLet's Encrypt
Subjectpemsrv.com
Fingerprint6C:E1:88:66:9E:83:C8:22:CB:50:58:EF:7A:C6:A5:6A:2A:6F:D2:F6
ValidityThu, 12 Sep 2024 10:33:32 GMT - Wed, 11 Dec 2024 10:33:31 GMT
Size 101 kB (100880 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /popunder1000.js HTTP/1.1
Host: a.pemsrv.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://misterindo.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 05 Oct 2024 13:21:29 GMT
content-type: application/javascript
etag: W/"75a53e6fcc145a4793247faa696"
expires: Fri, 04 Oct 2024 12:05:09 GMT
cache-control: max-age=10800
x-robots-tag: noindex, follow
access-control-allow-origin: *
x-77-nzt: EwwBuUwJGwH32xEAAAwBuUwKEwH3BgAAAAwBnJIhJwG3AQAAAA
x-77-nzt-ray: fdb54123d67bdc3c593d01677a428c18
x-accel-expires: @1728140718
x-accel-date: 1728129918
x-accel-date-max: 1728032709
x-77-cache: HIT
x-77-age: 4571
vary: Accept-Encoding
content-encoding: gzip
server: CDN77-Turbo
x-cache: HIT
x-age: 4571
x-77-pop: stockholmSE
X-Firefox-Spdy: h2
GET vjs.zencdn.net/6.4.0/video-js.css
200 OK 55 kB URL GET HTTP/2 vjs.zencdn.net/6.4.0/video-js.css
IP
Requested by https://misterindo.net/x/?id=li90lc3
Certificate IssuerGlobalSign nv-sa
Subjectvjs.zencdn.net
Fingerprint6B:3F:11:07:D7:05:FD:AF:4D:46:B4:BA:1C:8A:60:70:95:37:35:17
ValidityWed, 06 Mar 2024 21:50:11 GMT - Mon, 07 Apr 2025 21:50:10 GMT
File type ASCII text, with very long lines (12739)
Hash ee0256375d0c505e3d3c9639623ea66f
af696ed4d9e4646377b00aeb0deaf9ceb832c81a
bf8799c4f63c3d20ab207d3656ce428721e63ac65095c4412afa539cfe82f4e0
GET /6.4.0/video-js.css HTTP/1.1
Host: vjs.zencdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://misterindo.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
last-modified: Fri, 17 Nov 2017 20:14:33 GMT
etag: "ee0256375d0c505e3d3c9639623ea66f"
cache-control: public, max-age=31536000
content-type: text/css; charset=utf-8
content-encoding: gzip
date: Sat, 05 Oct 2024 13:21:29 GMT
x-served-by: cache-hel1410030-HEL
x-cache: HIT
x-cache-hits: 389
vary: Accept-Encoding
access-control-allow-origin: *
timing-allow-origin: *
content-length: 14519
X-Firefox-Spdy: h2
GET misterindo.net/x/30384483225d547e3769cc6752e0175c.php?id=li90lc3
0 B URL GET misterindo.net/x/30384483225d547e3769cc6752e0175c.php?id=li90lc3
IP
Requested by https://misterindo.net/x/?id=li90lc3
Certificate IssuerGoogle Trust Services
Subjectmisterindo.net
Fingerprint1D:6F:9D:EA:6B:71:D6:6C:23:78:72:3C:9D:2A:55:2A:76:F1:29:94
ValiditySun, 15 Sep 2024 21:46:02 GMT - Sat, 14 Dec 2024 21:46:01 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /x/30384483225d547e3769cc6752e0175c.php?id=li90lc3 HTTP/1.1
Host: misterindo.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
DNT: 1
Connection: keep-alive
Referer: https://misterindo.net/x/?id=li90lc3
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Sat, 05 Oct 2024 13:21:29 GMT
content-type: text/html; charset=UTF-8
location: https://cdn77-vid-mp4.others-cdn.com/7yLGcIfHfgALLTxh4U3v7A==,1728145289/videos/mp4/4/c/1/xvideos.com_4c173bc3599db28438b929b77147181a-1.mp4?ui=NjQuMjI3LjExNS4xNjItLS92aWRlby1saTkwbGMzL21vdmllc19ob21l
x-powered-by: EasyEngine 3.8.1
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=cx7mra5r9jXWNeoZGXiI2N4RoDHg6lxDUgNWBQPDZbVXMzzeHi4gECgC2kXGvO9uzivzR93jn0djCtFpCooCkobX0JUoE5e9vpWTetEKxeszJ2BOiE0m7uzi4mkHORd5kw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
speculation-rules: "/cdn-cgi/speculation"
server: cloudflare
cf-ray: 8cddb70eda7f62b6-HAM
X-Firefox-Spdy: h2
159.89.198.98
104.17.25.14
151.101.66.217
185.76.9.27
95.211.229.246
185.200.118.62
23.36.76.226