| ablecolony.com/wsf1nit26j?adb=n&dev=r&dqj=96&key=7ff94e9461629d2f54ff14725863196e&kw=[%22onejav%22,%22com%22,%22-%22,%22free%22,%22jav%22,%22torrents%22]&pst=&refer=https://onejav.com/&res=7.31&scrHeight=1029&scrWidth=1829&ship=&tz=-7&v=20.8.v.1 |  192.243.59.13 | | 1.6 kB |
URL ablecolony.com/wsf1nit26j?adb=n&dev=r&dqj=96&key=7ff94e9461629d2f54ff14725863196e&kw=[%22onejav%22,%22com%22,%22-%22,%22free%22,%22jav%22,%22torrents%22]&pst=&refer=https://onejav.com/&res=7.31&scrHeight=1029&scrWidth=1829&ship=&tz=-7&v=20.8.v.1 IP192.243.59.13:0 ASN#39572 DataWeb Global Group B.V.
File typeHTML document, ASCII text, with very long lines (671) Hash67272c6fd1f254d08b3b361ba6d20ffd c0a491d23ec7813c386ca7680857ff9d47f8b752 412b20ad1b0e242dd9e9fc1bc6b771e81472a4d6b505296163131179e6e8069c
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wsf1nit26j?adb=n&dev=r&dqj=96&key=7ff94e9461629d2f54ff14725863196e&kw=[%22onejav%22,%22com%22,%22-%22,%22free%22,%22jav%22,%22torrents%22]&pst=&refer=https://onejav.com/&res=7.31&scrHeight=1029&scrWidth=1829&ship=&tz=-7&v=20.8.v.1 HTTP/1.1
Host: ablecolony.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Fri, 29 Mar 2024 06:07:25 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Set-Cookie: u_pl=14217017; expires=Sat, 30 Mar 2024 06:07:25 GMT
ain=eyJhbGciOiJIUzI1NiJ9.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.7cSYM2n_CEHc7gG_ihiL1cg_P56AyeExaQaepGggjSs; expires=Fri, 29 Mar 2024 06:08:25 GMT
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 3008f4265e26d05e946d8a3d556b649b
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
|
|
| ablecolony.com/api/users?token=L3dzZjFuaXQyNmo_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&uuid=&pii=&in=false | 192.243.61.227 | 302 Found | 0 B |
URL User Request GET HTTP/1.1ablecolony.com/api/users?token=L3dzZjFuaXQyNmo_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&uuid=&pii=&in=false IP192.243.61.227:443 ASN#39572 DataWeb Global Group B.V.
CertificateIssuerLet's Encrypt Subjectablecolony.com Fingerprint72:52:48:30:ED:69:2D:E0:F6:1F:B2:28:46:E6:BF:09:21:CB:DD:D1 ValiditySun, 24 Mar 2024 10:22:04 GMT - Sat, 22 Jun 2024 10:22:03 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /api/users?token=L3dzZjFuaXQyNmo_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&uuid=&pii=&in=false HTTP/1.1
Host: ablecolony.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ablecolony.com/api/users?token=L3dzZjFuaXQyNmo_a2V5PTljYTYwMWE5ZjQ3YzczNWRmNzZkNWNhNDZmYTI2YTY2JnN1Ym1ldHJpYz0xNDIxNzAxNw
Cookie: u_pl=14217017; ain=eyJhbGciOiJIUzI1NiJ9.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.7cSYM2n_CEHc7gG_ihiL1cg_P56AyeExaQaepGggjSs; cjs=t
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Server: nginx/1.21.6
Date: Fri, 29 Mar 2024 06:07:26 GMT
Content-Type: text/html
Content-Length: 0
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Location: https://gl0a7loeki02do.com/news.php?key=ra60tm42lesurp8cpy3o&SUB_ID_SHORT(action)=375aa13d8c223e46cb77664954b324d5&COST_CPA=0.210000&PLACEMENT_ID=14217017&BANNER_ID=2856736&COUNTRY_CODE=NO&IAB_CATEGORY=IAB25-3&BROWSER_NAME=Firefox&USER_OS=Linux&PUBLISHER_ID=60218&ZONE_ID=70389&USER_CARRIER=Blix%20Solutions&CATEGORY_ALIAS=Adult
Set-Cookie: iprcbaed156acb50b7ab6a027e0a010e6e4d=5123635; expires=Sat, 30 Mar 2024 06:07:26 GMT
pdhtkv=true; expires=Sat, 30 Mar 2024 06:07:26 GMT
uncs=1; expires=Sat, 30 Mar 2024 06:07:26 GMT
pdhtkv28=true; expires=Sat, 30 Mar 2024 06:07:26 GMT
uncs28=1; expires=Sat, 30 Mar 2024 06:07:26 GMT
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 0a815d1b1bd9d45347f73b02e57482e1
Strict-Transport-Security: max-age=0; includeSubdomains
|
|
| gl0a7loeki02do.com/news.php?key=ra60tm42lesurp8cpy3o&SUB_ID_SHORT(action)=375aa13d8c223e46cb77664954b324d5&COST_CPA=0.210000&PLACEMENT_ID=14217017&BANNER_ID=2856736&COUNTRY_CODE=NO&IAB_CATEGORY=IAB25-3&BROWSER_NAME=Firefox&USER_OS=Linux&PUBLISHER_ID=60218&ZONE_ID=70389&USER_CARRIER=Blix%20Solutions&CATEGORY_ALIAS=Adult |  78.46.92.254 | 302 Found | 0 B |
URL User Request GET HTTP/1.1gl0a7loeki02do.com/news.php?key=ra60tm42lesurp8cpy3o&SUB_ID_SHORT(action)=375aa13d8c223e46cb77664954b324d5&COST_CPA=0.210000&PLACEMENT_ID=14217017&BANNER_ID=2856736&COUNTRY_CODE=NO&IAB_CATEGORY=IAB25-3&BROWSER_NAME=Firefox&USER_OS=Linux&PUBLISHER_ID=60218&ZONE_ID=70389&USER_CARRIER=Blix%20Solutions&CATEGORY_ALIAS=Adult IP78.46.92.254:443 ASN#24940 Hetzner Online GmbH
CertificateIssuerLet's Encrypt Subjectgl0a7loeki02do.com FingerprintC1:F3:C7:35:64:E3:41:7F:25:74:FE:4F:BE:FB:FB:DC:51:D4:7C:2A ValidityTue, 30 Jan 2024 18:44:34 GMT - Mon, 29 Apr 2024 18:44:33 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /news.php?key=ra60tm42lesurp8cpy3o&SUB_ID_SHORT(action)=375aa13d8c223e46cb77664954b324d5&COST_CPA=0.210000&PLACEMENT_ID=14217017&BANNER_ID=2856736&COUNTRY_CODE=NO&IAB_CATEGORY=IAB25-3&BROWSER_NAME=Firefox&USER_OS=Linux&PUBLISHER_ID=60218&ZONE_ID=70389&USER_CARRIER=Blix%20Solutions&CATEGORY_ALIAS=Adult HTTP/1.1
Host: gl0a7loeki02do.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://ablecolony.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Server: nginx/1.22.0
Date: Fri, 29 Mar 2024 06:07:27 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: uclick=ghhq1ntlfe; expires=Sat, 30-Mar-2024 06:07:27 GMT; Max-Age=86400; path=/; secure; SameSite=none
uclickhash=ghhq1ntlfe-ghhq1ntlfe-17dz-166o-ir8n-bza7-oc1n-581f83; expires=Sat, 30-Mar-2024 06:07:27 GMT; Max-Age=86400; path=/; secure; SameSite=none
Location: https://3tght76h.com/1/?lpkey=17bc115869dd27d547&uclick=ghhq1ntlfe&uclickhash=ghhq1ntlfe-ghhq1ntlfe-17dz-166o-ir8n-bza7-oc1n-581f83
Strict-Transport-Security: max-age=31536000
|
|
| 3tght76h.com/1/?lpkey=17bc115869dd27d547&uclick=ghhq1ntlfe&uclickhash=ghhq1ntlfe-ghhq1ntlfe-17dz-166o-ir8n-bza7-oc1n-581f83 | 78.46.92.254 | 200 OK | 1.4 kB |
URL User Request GET HTTP/1.13tght76h.com/1/?lpkey=17bc115869dd27d547&uclick=ghhq1ntlfe&uclickhash=ghhq1ntlfe-ghhq1ntlfe-17dz-166o-ir8n-bza7-oc1n-581f83 IP78.46.92.254:443 ASN#24940 Hetzner Online GmbH
CertificateIssuerLet's Encrypt Subject3tght76h.com Fingerprint19:9C:45:A1:88:BD:5D:AB:BA:D6:E7:92:72:B9:3F:E4:47:A4:0A:C6 ValidityThu, 14 Mar 2024 22:15:03 GMT - Wed, 12 Jun 2024 22:15:02 GMT
File typeJavaScript source, ASCII text, with CRLF line terminators Hash99748512cd7437ea3ac5c68451496923 63b5febdbd82c8117f74da8b254aecbda0b0b302 d0a17fd2701bb4c0baa8a37c32bbf9623e724b7892b3e0cf85711af30149d861
GET /1/?lpkey=17bc115869dd27d547&uclick=ghhq1ntlfe&uclickhash=ghhq1ntlfe-ghhq1ntlfe-17dz-166o-ir8n-bza7-oc1n-581f83 HTTP/1.1
Host: 3tght76h.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://ablecolony.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.22.0
Date: Fri, 29 Mar 2024 06:07:27 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Strict-Transport-Security: max-age=31536000
Content-Encoding: gzip
|
|
| www.googletagmanager.com/gtm.js?id=GTM-547JG5H | 142.250.74.168 | 200 OK | 51 kB |
URL GET HTTP/2www.googletagmanager.com/gtm.js?id=GTM-547JG5H IP142.250.74.168:443
Requested byhttps://3tght76h.com/1/?lpkey=17bc115869dd27d547&uclick=ghhq1ntlfe&uclickhash=ghhq1ntlfe-ghhq1ntlfe-17dz-166o-ir8n-bza7-oc1n-581f83 CertificateIssuerGoogle Trust Services LLC Subject*.google-analytics.com FingerprintDE:42:E4:CC:E5:66:70:09:F3:E6:6E:57:B7:5E:22:0A:A3:03:C2:7C ValidityMon, 26 Feb 2024 08:03:40 GMT - Mon, 20 May 2024 08:03:39 GMT
File typeJavaScript source, ASCII text, with very long lines (1906) Hash4140afd3cca3aad1b62062932bd63305 584d0cc393b0388d674a0ce91f9455f8de518488 00f8712ea577be8103d7a13ec496ed06176098b3dcbcc6f64208378c57c78eb0
GET /gtm.js?id=GTM-547JG5H HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://3tght76h.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Fri, 29 Mar 2024 06:07:27 GMT
expires: Fri, 29 Mar 2024 06:07:27 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 51206
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.google.com/recaptcha/api.js | 142.250.74.164 | 200 OK | 62 kB |
URL GET HTTP/2www.google.com/recaptcha/api.js IP142.250.74.164:443
Requested byhttps://3tght76h.com/1/?lpkey=17bc115869dd27d547&uclick=ghhq1ntlfe&uclickhash=ghhq1ntlfe-ghhq1ntlfe-17dz-166o-ir8n-bza7-oc1n-581f83 CertificateIssuerGoogle Trust Services LLC Subjectwww.google.com Fingerprint32:A3:19:7A:6B:D5:C7:5E:CA:7C:C8:08:79:14:56:FD:FC:3E:06:F0 ValidityMon, 26 Feb 2024 08:18:59 GMT - Mon, 20 May 2024 08:18:58 GMT
Hash88773ecb586ad1875a9560abf32bc071 84fea11ae7547b0fefff834decbeafcdfca5c455 25ba5159d7b8924618ed9b19cd5d2c5a220fc5e8416bbb9225487fd840045c8c
GET /recaptcha/api.js HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://3tght76h.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
expires: Fri, 29 Mar 2024 06:07:27 GMT
date: Fri, 29 Mar 2024 06:07:27 GMT
cache-control: private, max-age=300
cross-origin-resource-policy: cross-origin
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| 3tght76h.com/favicon.png | 78.46.92.254 | 404 Not Found | 114 B |
IP78.46.92.254:443 ASN#24940 Hetzner Online GmbH
Requested byhttps://3tght76h.com/1/?lpkey=17bc115869dd27d547&uclick=ghhq1ntlfe&uclickhash=ghhq1ntlfe-ghhq1ntlfe-17dz-166o-ir8n-bza7-oc1n-581f83 CertificateIssuerLet's Encrypt Subject3tght76h.com Fingerprint19:9C:45:A1:88:BD:5D:AB:BA:D6:E7:92:72:B9:3F:E4:47:A4:0A:C6 ValidityThu, 14 Mar 2024 22:15:03 GMT - Wed, 12 Jun 2024 22:15:02 GMT
File typeHTML document, ASCII text, with CRLF line terminators Hashac5ea41aae137cead073d37a7bb732bc 85bde4b57e1f38bd7ff0e6cf4b6ac5f626a5fbae fcdc802dabd14bed15efb9235ee0decac4adb6908dca03eeba74e2bf8f4eb5a7
GET /favicon.png HTTP/1.1
Host: 3tght76h.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://3tght76h.com/1/?lpkey=17bc115869dd27d547&uclick=ghhq1ntlfe&uclickhash=ghhq1ntlfe-ghhq1ntlfe-17dz-166o-ir8n-bza7-oc1n-581f83
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Server: nginx/1.22.0
Date: Fri, 29 Mar 2024 06:07:27 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Content-Encoding: gzip
|
|
| www.gstatic.com/recaptcha/releases/moV1mTgQ6S91nuTnmll4Y9yf/recaptcha__en.js | 142.250.74.163 | 200 OK | 203 kB |
URL GET HTTP/2www.gstatic.com/recaptcha/releases/moV1mTgQ6S91nuTnmll4Y9yf/recaptcha__en.js IP142.250.74.163:443
Requested byhttps://3tght76h.com/1/?lpkey=17bc115869dd27d547&uclick=ghhq1ntlfe&uclickhash=ghhq1ntlfe-ghhq1ntlfe-17dz-166o-ir8n-bza7-oc1n-581f83 CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com FingerprintF3:56:10:42:A8:3C:BF:F5:89:9C:4C:C0:F8:E3:DC:C4:1C:E9:34:9E ValidityMon, 26 Feb 2024 08:18:21 GMT - Mon, 20 May 2024 08:18:20 GMT
File typeJavaScript source, ASCII text, with very long lines (596) Size203 kB (203410 bytes) Hash48c590d47c8b1868cecab334e9a34cbe 5f1a9f94294ec337f657ac2ebec1c74e097ce5b3 f3756825df5194a174b7a55ebd3b484c276766eef21343d34b053b98ed386801
GET /recaptcha/releases/moV1mTgQ6S91nuTnmll4Y9yf/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://3tght76h.com
DNT: 1
Connection: keep-alive
Referer: https://3tght76h.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 203410
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 28 Mar 2024 17:27:49 GMT
expires: Fri, 28 Mar 2025 17:27:49 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 25 Mar 2024 04:00:24 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 45578
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.gstatic.com/recaptcha/releases/moV1mTgQ6S91nuTnmll4Y9yf/styles__ltr.css | 142.250.74.163 | 200 OK | 25 kB |
URL GET HTTP/3www.gstatic.com/recaptcha/releases/moV1mTgQ6S91nuTnmll4Y9yf/styles__ltr.css IP142.250.74.163:443
Requested byhttps://www.google.com/recaptcha/api2/bframe?hl=en&v=moV1mTgQ6S91nuTnmll4Y9yf&k=6LcCY5cUAAAAAA_SZQSTJfioaxkS1vVcGuv9gNui CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com FingerprintF3:56:10:42:A8:3C:BF:F5:89:9C:4C:C0:F8:E3:DC:C4:1C:E9:34:9E ValidityMon, 26 Feb 2024 08:18:21 GMT - Mon, 20 May 2024 08:18:20 GMT
File typeASCII text, with very long lines (56398), with no line terminators Hasheb4bc511f79f7a1573b45f5775b3a99b d910fb51ad7316aa54f055079374574698e74b35 7859a62e04b0acb06516eb12454de6673883ecfaeaed6c254659bca7cd59c050
GET /recaptcha/releases/moV1mTgQ6S91nuTnmll4Y9yf/styles__ltr.css HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 24606
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 28 Mar 2024 17:39:33 GMT
expires: Fri, 28 Mar 2025 17:39:33 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 25 Mar 2024 04:00:24 GMT
content-type: text/css
vary: Accept-Encoding
age: 44875
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.gstatic.com/recaptcha/releases/moV1mTgQ6S91nuTnmll4Y9yf/recaptcha__en.js | 142.250.74.163 | 200 OK | 203 kB |
URL GET HTTP/2www.gstatic.com/recaptcha/releases/moV1mTgQ6S91nuTnmll4Y9yf/recaptcha__en.js IP142.250.74.163:443
Requested byhttps://3tght76h.com/1/?lpkey=17bc115869dd27d547&uclick=ghhq1ntlfe&uclickhash=ghhq1ntlfe-ghhq1ntlfe-17dz-166o-ir8n-bza7-oc1n-581f83 CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com FingerprintF3:56:10:42:A8:3C:BF:F5:89:9C:4C:C0:F8:E3:DC:C4:1C:E9:34:9E ValidityMon, 26 Feb 2024 08:18:21 GMT - Mon, 20 May 2024 08:18:20 GMT
File typeJavaScript source, ASCII text, with very long lines (596) Size203 kB (203410 bytes) Hash48c590d47c8b1868cecab334e9a34cbe 5f1a9f94294ec337f657ac2ebec1c74e097ce5b3 f3756825df5194a174b7a55ebd3b484c276766eef21343d34b053b98ed386801
GET /recaptcha/releases/moV1mTgQ6S91nuTnmll4Y9yf/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 203410
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 28 Mar 2024 17:27:49 GMT
expires: Fri, 28 Mar 2025 17:27:49 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 25 Mar 2024 04:00:24 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 45579
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 | 142.250.74.67 | 200 OK | 15 kB |
URL GET HTTP/2fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 IP142.250.74.67:443
Requested byhttps://www.google.com/recaptcha/api2/anchor?ar=1&k=6LcCY5cUAAAAAA_SZQSTJfioaxkS1vVcGuv9gNui&co=aHR0cHM6Ly8zdGdodDc2aC5jb206NDQz&hl=en&v=moV1mTgQ6S91nuTnmll4Y9yf&size=normal&cb=3mebiv1ty079 CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com FingerprintF3:56:10:42:A8:3C:BF:F5:89:9C:4C:C0:F8:E3:DC:C4:1C:E9:34:9E ValidityMon, 26 Feb 2024 08:18:21 GMT - Mon, 20 May 2024 08:18:20 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 15344, version 1.0 Hash5d4aeb4e5f5ef754e307d7ffaef688bd 06db651cdf354c64a7383ea9c77024ef4fb4cef8 3e253b66056519aa065b00a453bac37ac5ed8f3e6fe7b542e93a9dcdcc11d0bc
GET /s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.google.com
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15344
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 28 Mar 2024 02:43:03 GMT
expires: Fri, 28 Mar 2025 02:43:03 GMT
cache-control: public, max-age=31536000
age: 98665
last-modified: Mon, 16 Oct 2017 17:32:55 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.google.com/recaptcha/api2/webworker.js?hl=en&v=moV1mTgQ6S91nuTnmll4Y9yf | 142.250.74.164 | 200 OK | 204 kB |
URL GET HTTP/3www.google.com/recaptcha/api2/webworker.js?hl=en&v=moV1mTgQ6S91nuTnmll4Y9yf IP142.250.74.164:443
Requested byhttps://www.google.com/recaptcha/api2/anchor?ar=1&k=6LcCY5cUAAAAAA_SZQSTJfioaxkS1vVcGuv9gNui&co=aHR0cHM6Ly8zdGdodDc2aC5jb206NDQz&hl=en&v=moV1mTgQ6S91nuTnmll4Y9yf&size=normal&cb=3mebiv1ty079 CertificateIssuerGoogle Trust Services LLC Subject*.google.com Fingerprint23:75:5E:3D:EA:9F:A0:42:86:8D:14:AE:43:04:F0:B2:91:0B:DA:CF ValidityMon, 26 Feb 2024 08:03:58 GMT - Mon, 20 May 2024 08:03:57 GMT
File typeJavaScript source, ASCII text, with very long lines (596) Size204 kB (203521 bytes) Hash7dfa93a2ccae4fb3ad58397465f73401 b8b21d2416d76ec71ec228392c6dd8214095faf4 316887d3c4b0f5b589e506427667eb1c4b20b9c6ffbcb31829f073a7d647ac64
GET /recaptcha/api2/webworker.js?hl=en&v=moV1mTgQ6S91nuTnmll4Y9yf HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LcCY5cUAAAAAA_SZQSTJfioaxkS1vVcGuv9gNui&co=aHR0cHM6Ly8zdGdodDc2aC5jb206NDQz&hl=en&v=moV1mTgQ6S91nuTnmll4Y9yf&size=normal&cb=3mebiv1ty079
Sec-Fetch-Dest: worker
Sec-Fetch-Mode: same-origin
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: text/javascript; charset=utf-8
cross-origin-embedder-policy: require-corp
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
expires: Fri, 29 Mar 2024 06:07:28 GMT
date: Fri, 29 Mar 2024 06:07:28 GMT
cache-control: private, max-age=300
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.gstatic.com/recaptcha/api2/logo_48.png | 142.250.74.163 | 200 OK | 2.2 kB |
URL GET HTTP/3www.gstatic.com/recaptcha/api2/logo_48.png IP142.250.74.163:443
Requested byhttps://www.google.com/recaptcha/api2/anchor?ar=1&k=6LcCY5cUAAAAAA_SZQSTJfioaxkS1vVcGuv9gNui&co=aHR0cHM6Ly8zdGdodDc2aC5jb206NDQz&hl=en&v=moV1mTgQ6S91nuTnmll4Y9yf&size=normal&cb=3mebiv1ty079 CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com FingerprintF3:56:10:42:A8:3C:BF:F5:89:9C:4C:C0:F8:E3:DC:C4:1C:E9:34:9E ValidityMon, 26 Feb 2024 08:18:21 GMT - Mon, 20 May 2024 08:18:20 GMT
File typePNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced Hashef9941290c50cd3866e2ba6b793f010d 4736508c795667dcea21f8d864233031223b7832 1b9efb22c938500971aac2b2130a475fa23684dd69e43103894968df83145b8a
GET /recaptcha/api2/logo_48.png HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.gstatic.com/recaptcha/releases/moV1mTgQ6S91nuTnmll4Y9yf/styles__ltr.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 2228
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 28 Mar 2024 17:35:26 GMT
expires: Thu, 04 Apr 2024 17:35:26 GMT
cache-control: public, max-age=604800
last-modified: Tue, 03 Mar 2020 20:15:00 GMT
content-type: image/png
age: 45122
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.google.com/js/bg/nEhDHjjHjcdBG08FyLy0i5xrGkwI3cHNOIEdz9e3VkI.js | 142.250.74.164 | 200 OK | 7.5 kB |
URL GET HTTP/3www.google.com/js/bg/nEhDHjjHjcdBG08FyLy0i5xrGkwI3cHNOIEdz9e3VkI.js IP142.250.74.164:443
Requested byhttps://www.google.com/recaptcha/api2/anchor?ar=1&k=6LcCY5cUAAAAAA_SZQSTJfioaxkS1vVcGuv9gNui&co=aHR0cHM6Ly8zdGdodDc2aC5jb206NDQz&hl=en&v=moV1mTgQ6S91nuTnmll4Y9yf&size=normal&cb=3mebiv1ty079 CertificateIssuerGoogle Trust Services LLC Subject*.google.com Fingerprint23:75:5E:3D:EA:9F:A0:42:86:8D:14:AE:43:04:F0:B2:91:0B:DA:CF ValidityMon, 26 Feb 2024 08:03:58 GMT - Mon, 20 May 2024 08:03:57 GMT
File typeJavaScript source, ASCII text, with very long lines (17560) Hash6b2d436ebcf8235b50c4b8d512b85f79 23b71327a14502cf34bdf8780b4b08f6a2723738 9c48431e38c78dc7411b4f05c8bcb48b9c6b1a4c08ddc1cd38811dcfd7b75642
GET /js/bg/nEhDHjjHjcdBG08FyLy0i5xrGkwI3cHNOIEdz9e3VkI.js HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LcCY5cUAAAAAA_SZQSTJfioaxkS1vVcGuv9gNui&co=aHR0cHM6Ly8zdGdodDc2aC5jb206NDQz&hl=en&v=moV1mTgQ6S91nuTnmll4Y9yf&size=normal&cb=3mebiv1ty079
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: br
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/botguard-scs
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="botguard-scs"
report-to: {"group":"botguard-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/botguard-scs"}]}
content-length: 7467
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 28 Mar 2024 17:53:40 GMT
expires: Fri, 28 Mar 2025 17:53:40 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 19 Mar 2024 16:00:00 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 44028
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.gstatic.com/recaptcha/releases/moV1mTgQ6S91nuTnmll4Y9yf/styles__ltr.css | 142.250.74.163 | 200 OK | 25 kB |
URL GET HTTP/3www.gstatic.com/recaptcha/releases/moV1mTgQ6S91nuTnmll4Y9yf/styles__ltr.css IP142.250.74.163:443
Requested byhttps://www.google.com/recaptcha/api2/bframe?hl=en&v=moV1mTgQ6S91nuTnmll4Y9yf&k=6LcCY5cUAAAAAA_SZQSTJfioaxkS1vVcGuv9gNui CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com FingerprintF3:56:10:42:A8:3C:BF:F5:89:9C:4C:C0:F8:E3:DC:C4:1C:E9:34:9E ValidityMon, 26 Feb 2024 08:18:21 GMT - Mon, 20 May 2024 08:18:20 GMT
File typeASCII text, with very long lines (56398), with no line terminators Hasheb4bc511f79f7a1573b45f5775b3a99b d910fb51ad7316aa54f055079374574698e74b35 7859a62e04b0acb06516eb12454de6673883ecfaeaed6c254659bca7cd59c050
GET /recaptcha/releases/moV1mTgQ6S91nuTnmll4Y9yf/styles__ltr.css HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 24606
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 28 Mar 2024 17:39:33 GMT
expires: Fri, 28 Mar 2025 17:39:33 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 25 Mar 2024 04:00:24 GMT
content-type: text/css
vary: Accept-Encoding
age: 44875
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.gstatic.com/recaptcha/releases/moV1mTgQ6S91nuTnmll4Y9yf/recaptcha__en.js | 142.250.74.163 | 200 OK | 203 kB |
URL GET HTTP/2www.gstatic.com/recaptcha/releases/moV1mTgQ6S91nuTnmll4Y9yf/recaptcha__en.js IP142.250.74.163:443
Requested byhttps://3tght76h.com/1/?lpkey=17bc115869dd27d547&uclick=ghhq1ntlfe&uclickhash=ghhq1ntlfe-ghhq1ntlfe-17dz-166o-ir8n-bza7-oc1n-581f83 CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com FingerprintF3:56:10:42:A8:3C:BF:F5:89:9C:4C:C0:F8:E3:DC:C4:1C:E9:34:9E ValidityMon, 26 Feb 2024 08:18:21 GMT - Mon, 20 May 2024 08:18:20 GMT
File typeJavaScript source, ASCII text, with very long lines (596) Size203 kB (203410 bytes) Hash48c590d47c8b1868cecab334e9a34cbe 5f1a9f94294ec337f657ac2ebec1c74e097ce5b3 f3756825df5194a174b7a55ebd3b484c276766eef21343d34b053b98ed386801
GET /recaptcha/releases/moV1mTgQ6S91nuTnmll4Y9yf/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 203410
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 28 Mar 2024 17:27:49 GMT
expires: Fri, 28 Mar 2025 17:27:49 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 25 Mar 2024 04:00:24 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 45579
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| unpkg.com/axios/dist/axios.min.js |  104.16.123.175 | 302 Found | 42 kB |
URL GET HTTP/2unpkg.com/axios/dist/axios.min.js IP104.16.123.175:443
Requested byhttps://3tght76h.com/1/?lpkey=17bc115869dd27d547&uclick=ghhq1ntlfe&uclickhash=ghhq1ntlfe-ghhq1ntlfe-17dz-166o-ir8n-bza7-oc1n-581f83 CertificateIssuerCloudflare, Inc. Subjectsni.cloudflaressl.com FingerprintF7:B6:41:CA:15:FD:D1:0C:27:39:55:5D:C5:CE:3F:1C:A6:BB:9D:6F ValidityTue, 02 May 2023 00:00:00 GMT - Wed, 01 May 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /axios/dist/axios.min.js HTTP/1.1
Host: unpkg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://3tght76h.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Fri, 29 Mar 2024 06:07:27 GMT
content-type: text/plain; charset=utf-8
access-control-allow-origin: *
cache-control: public, s-maxage=600, max-age=60
location: /axios@1.6.8/dist/axios.min.js
vary: Accept, Accept-Encoding
content-encoding: br
via: 1.1 fly.io
fly-request-id: 01HT4CZQMCRZ7PVWVEFJ5F9X5C-fra
cf-cache-status: HIT
age: 139
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 86bdae046b3956a8-OSL
X-Firefox-Spdy: h2
|
|
| unpkg.com/axios@1.6.8/dist/axios.min.js | 104.16.123.175 | 200 OK | 42 kB |
URL GET HTTP/2unpkg.com/axios@1.6.8/dist/axios.min.js IP104.16.123.175:443
Requested byhttps://3tght76h.com/1/?lpkey=17bc115869dd27d547&uclick=ghhq1ntlfe&uclickhash=ghhq1ntlfe-ghhq1ntlfe-17dz-166o-ir8n-bza7-oc1n-581f83 CertificateIssuerCloudflare, Inc. Subjectsni.cloudflaressl.com FingerprintF7:B6:41:CA:15:FD:D1:0C:27:39:55:5D:C5:CE:3F:1C:A6:BB:9D:6F ValidityTue, 02 May 2023 00:00:00 GMT - Wed, 01 May 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (41442) Hash3b5b3d36fde8ffe8ed76b1efbfc65410 d63107d0912fdb387530d5ce2d512c928d73d122 29d600462a30694efd15b9848b4ca42d178cd067009275c35a30580121114304
GET /axios@1.6.8/dist/axios.min.js HTTP/1.1
Host: unpkg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://3tght76h.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 29 Mar 2024 06:07:27 GMT
content-type: application/javascript; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=31536000
last-modified: Sat, 26 Oct 1985 08:15:00 GMT
etag: W/"a209-1jEH0JEv2zh1MNXOLVEsko1z0SI"
via: 1.1 fly.io
fly-request-id: 01HS1FGRYZKY14C0JK748EAY1W-arn
cf-cache-status: HIT
age: 1171889
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 86bdae048b5256a8-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| www.google.com/recaptcha/api2/bframe?hl=en&v=moV1mTgQ6S91nuTnmll4Y9yf&k=6LcCY5cUAAAAAA_SZQSTJfioaxkS1vVcGuv9gNui | 142.250.74.164 | 200 OK | 7.4 kB |
URL GET HTTP/3www.google.com/recaptcha/api2/bframe?hl=en&v=moV1mTgQ6S91nuTnmll4Y9yf&k=6LcCY5cUAAAAAA_SZQSTJfioaxkS1vVcGuv9gNui IP142.250.74.164:443
Requested byhttps://3tght76h.com/1/?lpkey=17bc115869dd27d547&uclick=ghhq1ntlfe&uclickhash=ghhq1ntlfe-ghhq1ntlfe-17dz-166o-ir8n-bza7-oc1n-581f83 CertificateIssuerGoogle Trust Services LLC Subject*.google.com Fingerprint23:75:5E:3D:EA:9F:A0:42:86:8D:14:AE:43:04:F0:B2:91:0B:DA:CF ValidityMon, 26 Feb 2024 08:03:58 GMT - Mon, 20 May 2024 08:03:57 GMT
File typeHTML document, ASCII text, with very long lines (7672), with no line terminators Hashd51a58eee03e6f79757f8119256cacb9 4b30d9d7780a61e2739f01353548385338d6d217 14024a9308f421e02d44f2bad3ba2a10f1e04190f3b03f450ee02a1c190ceb2d
GET /recaptcha/api2/bframe?hl=en&v=moV1mTgQ6S91nuTnmll4Y9yf&k=6LcCY5cUAAAAAA_SZQSTJfioaxkS1vVcGuv9gNui HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://3tght76h.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: text/html; charset=utf-8
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy: require-corp
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Fri, 29 Mar 2024 06:07:28 GMT
content-security-policy: script-src 'nonce-c3_H4ozzsZUhi-BPMh_Giw' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| 3tght76h.com/1/bg.png | 78.46.92.254 | 200 OK | 61 kB |
IP78.46.92.254:443 ASN#24940 Hetzner Online GmbH
Requested byhttps://3tght76h.com/1/?lpkey=17bc115869dd27d547&uclick=ghhq1ntlfe&uclickhash=ghhq1ntlfe-ghhq1ntlfe-17dz-166o-ir8n-bza7-oc1n-581f83 CertificateIssuerLet's Encrypt Subject3tght76h.com Fingerprint19:9C:45:A1:88:BD:5D:AB:BA:D6:E7:92:72:B9:3F:E4:47:A4:0A:C6 ValidityThu, 14 Mar 2024 22:15:03 GMT - Wed, 12 Jun 2024 22:15:02 GMT
File typePNG image data, 400 x 299, 8-bit grayscale, non-interlaced Hashd7096ad35844972e015e865729d13235 42c79d98b50275dcc447bd61d845ee2ed52ae45e 8bccdb408e67a3b44e0f5d417486c8d251f2e4acbae8542465aad3c7052341dd
GET /1/bg.png HTTP/1.1
Host: 3tght76h.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://3tght76h.com/1/?lpkey=17bc115869dd27d547&uclick=ghhq1ntlfe&uclickhash=ghhq1ntlfe-ghhq1ntlfe-17dz-166o-ir8n-bza7-oc1n-581f83
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.22.0
Date: Fri, 29 Mar 2024 06:07:27 GMT
Content-Type: image/png
Content-Length: 61362
Last-Modified: Wed, 15 Nov 2023 13:23:49 GMT
Connection: keep-alive
ETag: "6554c665-efb2"
Strict-Transport-Security: max-age=31536000
Accept-Ranges: bytes
|
|
| www.google.com/recaptcha/api2/anchor?ar=1&k=6LcCY5cUAAAAAA_SZQSTJfioaxkS1vVcGuv9gNui&co=aHR0cHM6Ly8zdGdodDc2aC5jb206NDQz&hl=en&v=moV1mTgQ6S91nuTnmll4Y9yf&size=normal&cb=3mebiv1ty079 | 142.250.74.164 | 200 OK | 46 kB |
URL GET HTTP/3www.google.com/recaptcha/api2/anchor?ar=1&k=6LcCY5cUAAAAAA_SZQSTJfioaxkS1vVcGuv9gNui&co=aHR0cHM6Ly8zdGdodDc2aC5jb206NDQz&hl=en&v=moV1mTgQ6S91nuTnmll4Y9yf&size=normal&cb=3mebiv1ty079 IP142.250.74.164:443
Requested byhttps://3tght76h.com/1/?lpkey=17bc115869dd27d547&uclick=ghhq1ntlfe&uclickhash=ghhq1ntlfe-ghhq1ntlfe-17dz-166o-ir8n-bza7-oc1n-581f83 CertificateIssuerGoogle Trust Services LLC Subject*.google.com Fingerprint23:75:5E:3D:EA:9F:A0:42:86:8D:14:AE:43:04:F0:B2:91:0B:DA:CF ValidityMon, 26 Feb 2024 08:03:58 GMT - Mon, 20 May 2024 08:03:57 GMT
File typeHTML document, ASCII text, with very long lines (37242) Hash2aefc48cf5a84904cd43f8dc44d5da83 e34922d57e9e02648237c7373aa37a1535b8472e 4a1b48ec7b53fe3d18a0227e202753279e604f42a40e5d4ef38236dfc1ea83c2
GET /recaptcha/api2/anchor?ar=1&k=6LcCY5cUAAAAAA_SZQSTJfioaxkS1vVcGuv9gNui&co=aHR0cHM6Ly8zdGdodDc2aC5jb206NDQz&hl=en&v=moV1mTgQ6S91nuTnmll4Y9yf&size=normal&cb=3mebiv1ty079 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://3tght76h.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: text/html; charset=utf-8
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy: require-corp
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Fri, 29 Mar 2024 06:07:27 GMT
content-security-policy: script-src 'nonce-XHq7ItPt1YtIBQr3W-cFqw' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|