| experimentalpersecute.com/443cd83d?dev=r&key=714c964219de7bfd4783a0635d06a551&kw=[%22deep%22,%22blackhead%22,%22on%22,%22skin%22,%223%22,%22%E2%80%93%22,%22camdope%22]&psid=CF-2931_layer_1&qaqkt=13&refer=https://camdope.com/deep-blackhead-on-skin-3/&res=14.31&scrHeight=1440&scrWidth=3440&ship=&sub3=invoke_layer&tz=2&v=24.4.7925 | 192.243.59.20 | | 1.6 kB |
URL experimentalpersecute.com/443cd83d?dev=r&key=714c964219de7bfd4783a0635d06a551&kw=[%22deep%22,%22blackhead%22,%22on%22,%22skin%22,%223%22,%22%E2%80%93%22,%22camdope%22]&psid=CF-2931_layer_1&qaqkt=13&refer=https://camdope.com/deep-blackhead-on-skin-3/&res=14.31&scrHeight=1440&scrWidth=3440&ship=&sub3=invoke_layer&tz=2&v=24.4.7925 IP192.243.59.20:0 ASN#39572 DataWeb Global Group B.V.
File typeHTML document, ASCII text, with very long lines (786) Hash74e5e17b5fddba7318c0fa2fc5759f36 6a37693e1f596400398166788dda0e07e1a9f4ba ca1400dbd81fe83f3c9681d0c0d9aea646a4fb62dd5978731348cd9ae58e5698
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /443cd83d?dev=r&key=714c964219de7bfd4783a0635d06a551&kw=[%22deep%22,%22blackhead%22,%22on%22,%22skin%22,%223%22,%22%E2%80%93%22,%22camdope%22]&psid=CF-2931_layer_1&qaqkt=13&refer=https://camdope.com/deep-blackhead-on-skin-3/&res=14.31&scrHeight=1440&scrWidth=3440&ship=&sub3=invoke_layer&tz=2&v=24.4.7925 HTTP/1.1
Host: experimentalpersecute.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Fri, 26 Apr 2024 19:59:41 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Set-Cookie: u_pl=17154615; expires=Sat, 27 Apr 2024 19:59:41 GMT
ain=eyJhbGciOiJIUzI1NiJ9.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.8Cl6C6DJqGFTg_7sfUAYjPS74hRNE4vYeV7secWMxvc; expires=Fri, 26 Apr 2024 20:00:41 GMT
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: a80b06af46e1b1a0d6c33c4394304599
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
|
|
| experimentalpersecute.com/api/users?token=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&uuid=&pii=&in=false | 172.240.253.132 | | 0 B |
URL experimentalpersecute.com/api/users?token=LzQ0M2NkODNkP2Rldj1yJmtleT03MTRjOTY0MjE5ZGU3YmZkNDc4M2EwNjM1ZDA2YTU1MSZrdz0lNUIlMjJkZWVwJTIyJTJDJTIyYmxhY2toZWFkJTIyJTJDJTIyb24lMjIlMkMlMjJza2luJTIyJTJDJTIyMyUyMiUyQyUyMiVFMiU4MCU5MyUyMiUyQyUyMmNhbWRvcGUlMjIlNUQmcHNpZD1DRi0yOTMxX2xheWVyXzEmcHN0PTE3MTQxNjE2NDEmcWFxa3Q9MTMmcmVmZXI9aHR0cHMlM0ElMkYlMkZjYW1kb3BlLmNvbSUyRmRlZXAtYmxhY2toZWFkLW9uLXNraW4tMyUyRiZyZXM9MTQuMzEmcm10Yz10JnNjckhlaWdodD0xNDQwJnNjcldpZHRoPTM0NDAmc2hpcD0mc2h1PWRkZTZkMDgzN2Y5MjA5ODA1MTc4YmMyMTc0MDdkYzExYjM0YTdiN2ZhYTZmOTc0MWYzYzAwOGY5NmIyMmM4OGI4MDE3YjM1N2MxZTBiOGNkMmE2NjFkZWVhNzE1MzI4ODdiN2U0Yzc5YmU4ODhlMjliZjE4NzIxNDdiODIwZmY2ZDBmNTE4NWZhNzM4NDA2Mjk2Y2Q3ODFiYzc4MGUyZTM0Nzk2OTc0MmE4YTZiNmJiYjBiYzIxN2VmY2U1ODgmc3ViMz1pbnZva2VfbGF5ZXImdHo9MiZ2PTI0LjQuNzkyNQ&uuid=&pii=&in=false IP172.240.253.132:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /api/users?token=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&uuid=&pii=&in=false HTTP/1.1
Host: experimentalpersecute.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://experimentalpersecute.com/api/users?token=LzQ0M2NkODNkP2tleT1hOTY5Y2E1YzlhZDI2MTE3NjJmMTFiNzlhNTI2ZTJkMiZzdWJtZXRyaWM9MTcxNTQ2MTU
Cookie: u_pl=17154615; ain=eyJhbGciOiJIUzI1NiJ9.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.8Cl6C6DJqGFTg_7sfUAYjPS74hRNE4vYeV7secWMxvc; cjs=t
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Server: nginx/1.21.6
Date: Fri, 26 Apr 2024 19:59:41 GMT
Content-Type: text/html
Content-Length: 0
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Location: https://nylonnickel.xyz/c9b2l0k.php?key=ssh20i85vx88tciu4a4m&SUB_ID_SHORT=3915ee5c239a984b1655dae4252aa126&COST_CPC=&PLACEMENT_ID=17154615&CAMPAIGN_ID=1028982&DEVICE_BRAND=Unknown&BROWSER_NAME=Firefox&USER_OS=Linux&USER_CARRIER=Blix%20Solutions&USERAGENT=Mozilla%2F5.0%20%28X11%3B%20Linux%20x86_64%3B%20rv%3A96.0%29%20Gecko%2F20100101%20Firefox%2F96.0&REMOTE_LANGUAGE=11&BANNER_ID=2901049
Set-Cookie: pdhtkv=true; expires=Sat, 27 Apr 2024 19:59:41 GMT
uncs=1; expires=Sat, 27 Apr 2024 19:59:41 GMT
pdhtkv28=true; expires=Sat, 27 Apr 2024 19:59:41 GMT
uncs28=1; expires=Sat, 27 Apr 2024 19:59:41 GMT
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 0caa265cd447f12bc01ec970ef6ed567
Strict-Transport-Security: max-age=0; includeSubdomains
|
|
| nylonnickel.xyz/c9b2l0k.php?key=ssh20i85vx88tciu4a4m&SUB_ID_SHORT=3915ee5c239a984b1655dae4252aa126&COST_CPC=&PLACEMENT_ID=17154615&CAMPAIGN_ID=1028982&DEVICE_BRAND=Unknown&BROWSER_NAME=Firefox&USER_OS=Linux&USER_CARRIER=Blix%20Solutions&USERAGENT=Mozilla%2F5.0%20%28X11%3B%20Linux%20x86_64%3B%20rv%3A96.0%29%20Gecko%2F20100101%20Firefox%2F96.0&REMOTE_LANGUAGE=11&BANNER_ID=2901049 | 192.64.81.118 | | 0 B |
URL nylonnickel.xyz/c9b2l0k.php?key=ssh20i85vx88tciu4a4m&SUB_ID_SHORT=3915ee5c239a984b1655dae4252aa126&COST_CPC=&PLACEMENT_ID=17154615&CAMPAIGN_ID=1028982&DEVICE_BRAND=Unknown&BROWSER_NAME=Firefox&USER_OS=Linux&USER_CARRIER=Blix%20Solutions&USERAGENT=Mozilla%2F5.0%20%28X11%3B%20Linux%20x86_64%3B%20rv%3A96.0%29%20Gecko%2F20100101%20Firefox%2F96.0&REMOTE_LANGUAGE=11&BANNER_ID=2901049 IP192.64.81.118:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /c9b2l0k.php?key=ssh20i85vx88tciu4a4m&SUB_ID_SHORT=3915ee5c239a984b1655dae4252aa126&COST_CPC=&PLACEMENT_ID=17154615&CAMPAIGN_ID=1028982&DEVICE_BRAND=Unknown&BROWSER_NAME=Firefox&USER_OS=Linux&USER_CARRIER=Blix%20Solutions&USERAGENT=Mozilla%2F5.0%20%28X11%3B%20Linux%20x86_64%3B%20rv%3A96.0%29%20Gecko%2F20100101%20Firefox%2F96.0&REMOTE_LANGUAGE=11&BANNER_ID=2901049 HTTP/1.1
Host: nylonnickel.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://experimentalpersecute.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Server: nginx/1.22.0
Date: Fri, 26 Apr 2024 19:59:42 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: uclick=pmqnh98plp; expires=Sat, 27-Apr-2024 19:59:42 GMT; Max-Age=86400; path=/; secure; SameSite=none
uclickhash=pmqnh98plp-pmqnh98plp-xr46-0-usgm6o-9rib8n-9ribwj-c95d4d; expires=Sat, 27-Apr-2024 19:59:42 GMT; Max-Age=86400; path=/; secure; SameSite=none
Location: https://rqqlj.canopusacrux.com/?pl=4l9EZwXc2kSH_LKKjogwWA&click_id=e5c53pmqnh98plp47e&sub_id=17154615
Strict-Transport-Security: max-age=31536000
|
|
| rqqlj.canopusacrux.com/?pl=4l9EZwXc2kSH_LKKjogwWA&click_id=e5c53pmqnh98plp47e&sub_id=17154615 | 188.114.96.1 | | 0 B |
URL rqqlj.canopusacrux.com/?pl=4l9EZwXc2kSH_LKKjogwWA&click_id=e5c53pmqnh98plp47e&sub_id=17154615 IP188.114.96.1:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /?pl=4l9EZwXc2kSH_LKKjogwWA&click_id=e5c53pmqnh98plp47e&sub_id=17154615 HTTP/1.1
Host: rqqlj.canopusacrux.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://experimentalpersecute.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Fri, 26 Apr 2024 19:59:42 GMT
content-length: 0
location: https://rqqlj.check-tl-ver-94-2.com/space-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=space-robot&click_id=e5c53pmqnh98plp47e&sub_id=17154615&nrid=e94bdec004ef4a49a14064b067a05785&hash=as5yObg-2mIUl07-4e6qOA&exp=1714161882
set-cookie: 4l9EZwXc2kSH_LKKjogwWA=1; max-age=345600; path=/; samesite=lax
__pl=7b0cedb7-6011-4ef6-b6e5-14fb3b89903d; expires=Sun, 26 Apr 2026 19:59:42 GMT; path=/; samesite=lax
__cap=1; max-age=3600; path=/; samesite=lax
cache-control: max-age=0, no-cache, no-store, must-revalidate
accept-ch: Sec-CH-UA, Sec-CH-UA-Platform, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=G8k%2Fu%2BsRXmqu8OOqQzKKH9H4eShkZKx10DlA7cObD7sTnsf12zHs6OORzrAJVJfT5LPaC1VGV9YXgkvH8KAco01%2FMoS1Ci6qtDdB9kzJM%2F0eeDXVxllrvs%2FqOnSifSLyucOGltCeiuZi"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87a927a1ee3eb523-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| rqqlj.check-tl-ver-94-2.com/space-robot/assets/corner.png | 104.21.33.96 | | 300 B |
URL rqqlj.check-tl-ver-94-2.com/space-robot/assets/corner.png IP104.21.33.96:0
File typePNG image data, 44 x 44, 8-bit colormap, non-interlaced Hashf66c38fa2cd7c50bd1989d41da28fb80 e1de333eca72647f3c1831083fe678cfa8fe9eab 3059be4046e0315ad1c0d1cb163d9daaf759bdf16e906e908842fac07e5608a2
GET /space-robot/assets/corner.png HTTP/1.1
Host: rqqlj.check-tl-ver-94-2.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rqqlj.check-tl-ver-94-2.com/space-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=space-robot&click_id=e5c53pmqnh98plp47e&sub_id=17154615&nrid=e94bdec004ef4a49a14064b067a05785&hash=as5yObg-2mIUl07-4e6qOA&exp=1714161882
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:59:42 GMT
content-type: image/png
content-length: 300
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
etag: "6627c958-12c"
cache-control: max-age=14400
cf-cache-status: HIT
age: 5038
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0nfKeDOcXlmGRluP2oIT7RhqEo1mdsl8s6ZNyrob6KvD7vNMdczcpSaa4AYRxDfCo97vY6sz7DFyJlQoiiVgm5vWkymu0H%2FR7lyjNrihe%2FZ0Mp5agvrniG11%2BiAMUuSwXAkgOGrC8evcqgKAfrY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a927a3f9c1568e-OSL
alt-svc: h3=":443"; ma=86400
|
|
| rqqlj.check-tl-ver-94-2.com/space-robot/assets/trls.js | 104.21.33.96 | | 20 kB |
URL rqqlj.check-tl-ver-94-2.com/space-robot/assets/trls.js IP104.21.33.96:0
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (357), with CRLF line terminators Hash7f5c725b2c23b9687fa08d162a17427a 94973f1227871750d2ef13a367ce691f1a062527 c9611ce748d6c7c99d3f374a0b687db2e2428fc5ec9c4e7ae71b2e4305ac60e3
GET /space-robot/assets/trls.js HTTP/1.1
Host: rqqlj.check-tl-ver-94-2.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rqqlj.check-tl-ver-94-2.com/space-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=space-robot&click_id=e5c53pmqnh98plp47e&sub_id=17154615&nrid=e94bdec004ef4a49a14064b067a05785&hash=as5yObg-2mIUl07-4e6qOA&exp=1714161882
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:59:42 GMT
content-type: application/javascript
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
etag: W/"6627c958-2f4d"
cache-control: max-age=14400
cf-cache-status: HIT
age: 5038
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=MH08dF7TIrVMQWA7%2BijyxtVRHdA%2FIQjtQpeA2qjMIybFTnf34BlG2rLDfv%2Bom8JYB01dSB5S8b%2FrjX6qp%2FD7Et8l%2BGphdNY3UF4y7HpVtNJlm%2Bou71p3rPkCEsWJHC1Y9uLoGh5teom7ul2x8Zw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a927a3f9b7568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| rqqlj.check-tl-ver-94-2.com/space-robot/assets/style.css?v=4 | 104.21.33.96 | | 39 kB |
URL rqqlj.check-tl-ver-94-2.com/space-robot/assets/style.css?v=4 IP104.21.33.96:0
File typeASCII text, with very long lines (6532), with CRLF line terminators Hash8335155a7c4004d8296b7727a24273c4 387b7723ba35057b631809e1437c64cdd89f13bb 0b758313cde9005f3f2082f616558a3db63019d03a5f1376f3a49e64d874909e
GET /space-robot/assets/style.css?v=4 HTTP/1.1
Host: rqqlj.check-tl-ver-94-2.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rqqlj.check-tl-ver-94-2.com/space-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=space-robot&click_id=e5c53pmqnh98plp47e&sub_id=17154615&nrid=e94bdec004ef4a49a14064b067a05785&hash=as5yObg-2mIUl07-4e6qOA&exp=1714161882
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:59:42 GMT
content-type: text/css
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
etag: W/"6627c958-1986"
cache-control: max-age=14400
cf-cache-status: HIT
age: 5038
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Ks2ee1WJf4GSyIrpWwIHaCPHoLYqYY0F3pif8BYqe9lNIC5vX8M2lZx8m88tNhLtU4g8BOpHWiLOhb3%2Br%2Bk8A7%2Bm7V6L5SsrYJWKKe4R1aIjtwnzOpVCsYiNClQFq%2BHrFDR36U49u3EgpZtgbCA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a927a3f9bc568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| rqqlj.check-tl-ver-94-2.com/space-robot/assets/favicon-16x16.png | 104.21.33.96 | | 1.2 kB |
URL rqqlj.check-tl-ver-94-2.com/space-robot/assets/favicon-16x16.png IP104.21.33.96:0
File typePNG image data, 16 x 16, 8-bit colormap, non-interlaced Hash9d35b617fd258f648c37812252297dd3 7e32fd007f1c6fe1466d15439173082c0fbe82da e8a768f8122da75777dc64b6d35e756a1848c4f330f293920c18480df085000a
GET /space-robot/assets/favicon-16x16.png HTTP/1.1
Host: rqqlj.check-tl-ver-94-2.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rqqlj.check-tl-ver-94-2.com/space-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=space-robot&click_id=e5c53pmqnh98plp47e&sub_id=17154615&nrid=e94bdec004ef4a49a14064b067a05785&hash=as5yObg-2mIUl07-4e6qOA&exp=1714161882
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:59:42 GMT
content-type: image/png
content-length: 1163
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
etag: "6627c958-48b"
cache-control: max-age=14400
cf-cache-status: HIT
age: 4418
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2Pl%2BtqPHhO519fFh4f0BwqGxemVbUM5FtPyRcwuXSiODpCtNahWs2zxhf4keQwvs491mSQgokBPqTlnPl58kBnyCK3%2BgeMzaQJFXXb4XKKgWPzL95ZpG%2FKk%2BNSdObJK%2B%2FxbYgHoct%2BRWqNUm%2Bpg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a927a4dad7568e-OSL
alt-svc: h3=":443"; ma=86400
|
|
| www.gstatic.com/firebasejs/10.3.1/firebase-app-compat.js | 142.250.74.35 | | 9.3 kB |
URL www.gstatic.com/firebasejs/10.3.1/firebase-app-compat.js IP142.250.74.35:0
File typeJavaScript source, ASCII text, with very long lines (28368) Hash9900403b65514fad7df39a4e788a6e45 75f9ba061ef4e72bb23528c700f2a11c56d637e9 a202b2051ea9810cd9ba592b3f9418a89e2062f5c185e29e288080b28eb64fe5
GET /firebasejs/10.3.1/firebase-app-compat.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rqqlj.check-tl-ver-94-2.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/firebase-js
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="firebase-js"
report-to: {"group":"firebase-js","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/firebase-js"}]}
content-length: 9308
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 26 Apr 2024 06:13:11 GMT
expires: Sat, 26 Apr 2025 06:13:11 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 31 Aug 2023 15:20:38 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 49591
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.gstatic.com/firebasejs/10.3.1/firebase-messaging-compat.js | 142.250.74.35 | | 9.9 kB |
URL www.gstatic.com/firebasejs/10.3.1/firebase-messaging-compat.js IP142.250.74.35:0
File typeJavaScript source, ASCII text, with very long lines (38231) Hash0541b823dfaf39162ef84cf075c9951b e0934726455558cc1a59823efada9651e33aafaa 21f1d62f222007068c793f0947d98f4ccb7c1595adb68efeb783390fdd8b5522
GET /firebasejs/10.3.1/firebase-messaging-compat.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rqqlj.check-tl-ver-94-2.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/firebase-js
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="firebase-js"
report-to: {"group":"firebase-js","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/firebase-js"}]}
content-length: 9934
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 25 Apr 2024 02:47:22 GMT
expires: Fri, 25 Apr 2025 02:47:22 GMT
cache-control: public, max-age=31536000
age: 148341
last-modified: Thu, 31 Aug 2023 15:20:50 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| wa.check-tl-ver-94-2.com/space-robot/assets/corner.png | 104.21.33.96 | | 300 B |
URL wa.check-tl-ver-94-2.com/space-robot/assets/corner.png IP104.21.33.96:0
File typePNG image data, 44 x 44, 8-bit colormap, non-interlaced Hashf66c38fa2cd7c50bd1989d41da28fb80 e1de333eca72647f3c1831083fe678cfa8fe9eab 3059be4046e0315ad1c0d1cb163d9daaf759bdf16e906e908842fac07e5608a2
GET /space-robot/assets/corner.png HTTP/1.1
Host: wa.check-tl-ver-94-2.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://wa.check-tl-ver-94-2.com/space-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=space-robot&click_id=e5c53pmqnh98plp47e&sub_id=17154615&nrid=e94bdec004ef4a49a14064b067a05785&hash=as5yObg-2mIUl07-4e6qOA&exp=1714161882
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:59:43 GMT
content-type: image/png
content-length: 300
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
etag: "6627c958-12c"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Z7gcZjgORP9PtvZDkwrqzNzmzPHgD3%2F7qvkrygqKVQ8eP%2BtSSP53qsb7FkojveVHa65yJ%2FkxZ0%2FobUov2TV4F0ICP282O5gR7w7qsVdn80oCtOgLCfuSyAR0DWyqfq%2B%2BTbDIbcNESM37pWQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a927a6bd1a568e-OSL
alt-svc: h3=":443"; ma=86400
|
|
| wa.check-tl-ver-94-2.com/space-robot/assets/main.js?v=3 | 104.21.33.96 | | 17 kB |
URL wa.check-tl-ver-94-2.com/space-robot/assets/main.js?v=3 IP104.21.33.96:0
File typeJavaScript source, ASCII text, with very long lines (2745) Hash01c51ed0a287b5ddf6793778cfa3a72c ebd2613cd806b8e080f556b0d254c0f7a6c738a9 4c0224d810d4f0ac617ddd4ab215e0084aeec230d8944780a129c0046de2dad5
GET /space-robot/assets/main.js?v=3 HTTP/1.1
Host: wa.check-tl-ver-94-2.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://wa.check-tl-ver-94-2.com/space-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=space-robot&click_id=e5c53pmqnh98plp47e&sub_id=17154615&nrid=e94bdec004ef4a49a14064b067a05785&hash=as5yObg-2mIUl07-4e6qOA&exp=1714161882
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:59:43 GMT
content-type: application/javascript
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
etag: W/"6627c958-1255"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=NdSaErmHioXr1YvrOqFmbdGs%2F9C%2F%2B9p8SwI7qgW%2B4nviuFxjh0EWXySpvW0sa%2BIYIJd3XI6Xhvjj9i1tKSD7yCCj%2BZ%2B7agwGqb%2Fc9PnCkd8Mk9cBu8GuVuEfd9eFn5CRQYHrVng%2FfkgCB84%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a927a6cd22568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| cdnstatic.check-tl-ver-94-2.com/ps/ps.js?&edg=true&sw=&fullscreen=true&pl=true&pp=false&id=4l9EZwXc2kSH_LKKjogwWA&sm=space-robot&click_id=e5c53pmqnh98plp47e&sub_id=17154615&appspot=&d=https%3A%2F%2Fcdnstatic.check-tl-ver-94-2.com&timeout=30&tb=true&nrid=e94bdec004ef4a49a14064b067a05785 | 104.21.33.96 | | 15 kB |
URL cdnstatic.check-tl-ver-94-2.com/ps/ps.js?&edg=true&sw=&fullscreen=true&pl=true&pp=false&id=4l9EZwXc2kSH_LKKjogwWA&sm=space-robot&click_id=e5c53pmqnh98plp47e&sub_id=17154615&appspot=&d=https%3A%2F%2Fcdnstatic.check-tl-ver-94-2.com&timeout=30&tb=true&nrid=e94bdec004ef4a49a14064b067a05785 IP104.21.33.96:0
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (33136), with no line terminators Hash505334375790aecc513ab621f1e2b0dd 4d20453405ad124920ddd70bc0330ea2af70938c e37976cb7feaa36e8b4b3f39f01b9fbf9f2c47ea60d42c215a5d820e30c1c7db
GET /ps/ps.js?&edg=true&sw=&fullscreen=true&pl=true&pp=false&id=4l9EZwXc2kSH_LKKjogwWA&sm=space-robot&click_id=e5c53pmqnh98plp47e&sub_id=17154615&appspot=&d=https%3A%2F%2Fcdnstatic.check-tl-ver-94-2.com&timeout=30&tb=true&nrid=e94bdec004ef4a49a14064b067a05785 HTTP/1.1
Host: cdnstatic.check-tl-ver-94-2.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://wa.check-tl-ver-94-2.com/
Cookie: __psu=ef4a31c6-5c33-4a47-bed9-d8e4d791767c
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:59:43 GMT
content-type: application/javascript
cache-control: max-age=0, no-cache, no-store, must-revalidate
accept-ch: Sec-CH-UA, Sec-CH-UA-Platform, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
cf-cache-status: BYPASS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2lBrrOlwuVIdG2qk1LItExPsI8eKqFVVEnZa4GjwXHLzVaAVFThonkI%2FVqMN%2Ffe%2Fp%2Fx33oYqJjaZpUmitPVg0EHAdxuuzZ4vAtyUO2e%2Bbgi5I155eDL0MzB3KquPe87XH14zvDMOKn2ywL%2FgRrH%2FmMlP"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a927a73d93568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| wa.check-tl-ver-94-2.com/space-robot/assets/apple-touch-icon.png | 104.21.33.96 | | 23 kB |
URL wa.check-tl-ver-94-2.com/space-robot/assets/apple-touch-icon.png IP104.21.33.96:0
File typePNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced Hashf500ba7eee0ae7d1ceb44236ac253165 0614de220ecadb48038ed894d91120ba102c8367 ba5a3083c38d71a2191ee7e614a96812d1f9d88bbfb360d3b61dbb1ffcd51de5
GET /space-robot/assets/apple-touch-icon.png HTTP/1.1
Host: wa.check-tl-ver-94-2.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://wa.check-tl-ver-94-2.com/space-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=space-robot&click_id=e5c53pmqnh98plp47e&sub_id=17154615&nrid=e94bdec004ef4a49a14064b067a05785&hash=as5yObg-2mIUl07-4e6qOA&exp=1714161882
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:59:43 GMT
content-type: image/png
content-length: 23177
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
etag: "6627c958-5a89"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=BFZk1Kb4dJUEoWfP95oiKu1hnlBI8xw0gO82%2Buc17Ah086Z2Pi8htomjIIbgWuvdtdr2qXTgESeJQLxFdlSrXv%2F1qQhR6QQ0IZ%2Fnz22TcXd8DMjNUy3RW15AclWd0Dxa9SFgxxkDoDxDyK0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a927a79e05568e-OSL
alt-svc: h3=":443"; ma=86400
|
|
| wa.check-tl-ver-94-2.com/space-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=space-robot&click_id=e5c53pmqnh98plp47e&sub_id=17154615&nrid=e94bdec004ef4a49a14064b067a05785&hash=as5yObg-2mIUl07-4e6qOA&exp=1714161882 | 104.21.33.96 | | 14 kB |
URL wa.check-tl-ver-94-2.com/space-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=space-robot&click_id=e5c53pmqnh98plp47e&sub_id=17154615&nrid=e94bdec004ef4a49a14064b067a05785&hash=as5yObg-2mIUl07-4e6qOA&exp=1714161882 IP104.21.33.96:0
File typeHTML document, Unicode text, UTF-8 text, with very long lines (474) Hash01041709ecf6a3f0b549820730593c03 55775e4279d24a34f601bf8180d9f280b8131e0d 51907b3319c05ec1c1a7466f4017f4dcc7b6dc59a29ed962bfd36572f223bb51
GET /space-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=space-robot&click_id=e5c53pmqnh98plp47e&sub_id=17154615&nrid=e94bdec004ef4a49a14064b067a05785&hash=as5yObg-2mIUl07-4e6qOA&exp=1714161882 HTTP/1.1
Host: wa.check-tl-ver-94-2.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rqqlj.check-tl-ver-94-2.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:59:43 GMT
content-type: text/html
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=IqVxAdQHijfCKkK%2FqsR7IHcg6E7rYTig2h3dNoFZIRO4xUZl1MTq79UTZ8p8tmqrDOWq7UrpN6j0%2BuduqyzjM%2BXkiMR0uBj7GTvkt6OdyCHycOQNLVl59NhTuO3QV0cpe0rHO6ZSdpquIFo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87a927a62c50568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| www.gstatic.com/firebasejs/10.3.1/firebase-messaging-compat.js | 142.250.74.35 | | 9.9 kB |
URL www.gstatic.com/firebasejs/10.3.1/firebase-messaging-compat.js IP142.250.74.35:0
File typeJavaScript source, ASCII text, with very long lines (38231) Hash0541b823dfaf39162ef84cf075c9951b e0934726455558cc1a59823efada9651e33aafaa 21f1d62f222007068c793f0947d98f4ccb7c1595adb68efeb783390fdd8b5522
GET /firebasejs/10.3.1/firebase-messaging-compat.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://wa.check-tl-ver-94-2.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/firebase-js
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="firebase-js"
report-to: {"group":"firebase-js","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/firebase-js"}]}
content-length: 9934
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 25 Apr 2024 02:47:22 GMT
expires: Fri, 25 Apr 2025 02:47:22 GMT
cache-control: public, max-age=31536000
age: 148341
last-modified: Thu, 31 Aug 2023 15:20:50 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| wb.check-tl-ver-94-2.com/space-robot/assets/corner.png | 104.21.33.96 | | 300 B |
URL wb.check-tl-ver-94-2.com/space-robot/assets/corner.png IP104.21.33.96:0
File typePNG image data, 44 x 44, 8-bit colormap, non-interlaced Hashf66c38fa2cd7c50bd1989d41da28fb80 e1de333eca72647f3c1831083fe678cfa8fe9eab 3059be4046e0315ad1c0d1cb163d9daaf759bdf16e906e908842fac07e5608a2
GET /space-robot/assets/corner.png HTTP/1.1
Host: wb.check-tl-ver-94-2.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://wb.check-tl-ver-94-2.com/space-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=space-robot&click_id=e5c53pmqnh98plp47e&sub_id=17154615&nrid=e94bdec004ef4a49a14064b067a05785&hash=as5yObg-2mIUl07-4e6qOA&exp=1714161882
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:59:43 GMT
content-type: image/png
content-length: 300
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
etag: "6627c958-12c"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=P%2BDc1rb%2BrVa2UoixlJfZpUiCwp7QmX81K749IOhwyLYpq3WjCh44ZZIi82J1fWRjIX1n3mnKS1WePzCBw0IzOOMj6J%2F6TkP2wvaALZDixgEW258yh6WV%2Fjgr0S7%2FPMJv9tBvTn000yxTqhI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a927a8ffc9568e-OSL
alt-svc: h3=":443"; ma=86400
|
|
| wb.check-tl-ver-94-2.com/space-robot/assets/main.js?v=3 | 104.21.33.96 | | 17 kB |
URL wb.check-tl-ver-94-2.com/space-robot/assets/main.js?v=3 IP104.21.33.96:0
File typeJavaScript source, ASCII text, with very long lines (2745) Hash01c51ed0a287b5ddf6793778cfa3a72c ebd2613cd806b8e080f556b0d254c0f7a6c738a9 4c0224d810d4f0ac617ddd4ab215e0084aeec230d8944780a129c0046de2dad5
GET /space-robot/assets/main.js?v=3 HTTP/1.1
Host: wb.check-tl-ver-94-2.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://wb.check-tl-ver-94-2.com/space-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=space-robot&click_id=e5c53pmqnh98plp47e&sub_id=17154615&nrid=e94bdec004ef4a49a14064b067a05785&hash=as5yObg-2mIUl07-4e6qOA&exp=1714161882
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:59:43 GMT
content-type: application/javascript
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
etag: W/"6627c958-1255"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wmNinQvq6iqPXunov8t9jxqNfQsb17tGMJYPfAzvAzp8GD%2FpoT9nSrqY8ZZlZOVgtIPtNNA15%2F%2FJ5uiCCRIZkwQwIFiikYfhqpw7CwoVPSZXqfZw6UIZwuzxUCbCuSPurNgfvX9S1ox7Ra0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a927a8ffce568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| wb.check-tl-ver-94-2.com/space-robot/assets/favicon-16x16.png | 104.21.33.96 | | 1.2 kB |
URL wb.check-tl-ver-94-2.com/space-robot/assets/favicon-16x16.png IP104.21.33.96:0
File typePNG image data, 16 x 16, 8-bit colormap, non-interlaced Hash9d35b617fd258f648c37812252297dd3 7e32fd007f1c6fe1466d15439173082c0fbe82da e8a768f8122da75777dc64b6d35e756a1848c4f330f293920c18480df085000a
GET /space-robot/assets/favicon-16x16.png HTTP/1.1
Host: wb.check-tl-ver-94-2.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://wb.check-tl-ver-94-2.com/space-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=space-robot&click_id=e5c53pmqnh98plp47e&sub_id=17154615&nrid=e94bdec004ef4a49a14064b067a05785&hash=as5yObg-2mIUl07-4e6qOA&exp=1714161882
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:59:43 GMT
content-type: image/png
content-length: 1163
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
etag: "6627c958-48b"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=BNo7v%2BZnpZ0QSOoJVsnPy4ROAAJzed6%2BNPuYrIrhjsHoVnTCDnYlewHmraHuwQOsGkbqFDeorM4dVhoRvnp4dzTTvHQZdaXjbHdqxfBUSn6o3izu1cmb4L28hz75ALGNZd9mEE1%2B72sm%2BYA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a927a9e8ff568e-OSL
alt-svc: h3=":443"; ma=86400
|
|
| wb.check-tl-ver-94-2.com/space-robot/assets/apple-touch-icon.png | 104.21.33.96 | | 23 kB |
URL wb.check-tl-ver-94-2.com/space-robot/assets/apple-touch-icon.png IP104.21.33.96:0
File typePNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced Hashf500ba7eee0ae7d1ceb44236ac253165 0614de220ecadb48038ed894d91120ba102c8367 ba5a3083c38d71a2191ee7e614a96812d1f9d88bbfb360d3b61dbb1ffcd51de5
GET /space-robot/assets/apple-touch-icon.png HTTP/1.1
Host: wb.check-tl-ver-94-2.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://wb.check-tl-ver-94-2.com/space-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=space-robot&click_id=e5c53pmqnh98plp47e&sub_id=17154615&nrid=e94bdec004ef4a49a14064b067a05785&hash=as5yObg-2mIUl07-4e6qOA&exp=1714161882
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:59:43 GMT
content-type: image/png
content-length: 23177
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
etag: "6627c958-5a89"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=nhgU1FiisCQK%2F1b2eZEYv8H1VmdXGNXYS4p6Eh0whgU5iNIYr9GN3WjD1CrzsAZfoiTAZ86JTK%2BhJMkZkEq9tHf9HfM%2BGqzHDUkXxugbNR3oz9A30Iv5a1CLItziBjxiU836zc2TIkfsAnE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a927a9e8fa568e-OSL
alt-svc: h3=":443"; ma=86400
|
|
| cdnstatic.check-tl-ver-94-2.com/ps/config.js?id=4l9EZwXc2kSH_LKKjogwWA | 104.21.33.96 | | 9.5 kB |
URL cdnstatic.check-tl-ver-94-2.com/ps/config.js?id=4l9EZwXc2kSH_LKKjogwWA IP104.21.33.96:0
File typeASCII text, with CRLF line terminators Hashdc65a2fbfc4c76147b8b778b759c8d91 b8374137f0fe797e6a7e58c0c6ef14aa7a6b9855 7e85c285fd983223d07a014d1a96804ba1c8f65fb43238a4fad204350e896958
GET /ps/config.js?id=4l9EZwXc2kSH_LKKjogwWA HTTP/1.1
Host: cdnstatic.check-tl-ver-94-2.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://wb.check-tl-ver-94-2.com/
Cookie: __psu=ef4a31c6-5c33-4a47-bed9-d8e4d791767c
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:59:43 GMT
content-type: application/javascript
cache-control: max-age=0, no-cache, no-store, must-revalidate
accept-ch: Sec-CH-UA, Sec-CH-UA-Platform, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
cf-cache-status: BYPASS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9qGMEyfBP86vmacHSq4d7y749ZkOSvObXRhL7UA5vhwsqY4O1Arb6jqDMn8LhiCzTY6pa0lTGtUdJJtzk0JNloyebLzkzYJnKMYhms0jxwhuFZ7CLXQz57QnnNFNGmAnCTKo0dFZG%2F4RGUNRPN3sAh9H"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a927a9e907568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| www.gstatic.com/firebasejs/10.3.1/firebase-messaging-compat.js | 142.250.74.35 | | 9.9 kB |
URL www.gstatic.com/firebasejs/10.3.1/firebase-messaging-compat.js IP142.250.74.35:0
File typeJavaScript source, ASCII text, with very long lines (38231) Hash0541b823dfaf39162ef84cf075c9951b e0934726455558cc1a59823efada9651e33aafaa 21f1d62f222007068c793f0947d98f4ccb7c1595adb68efeb783390fdd8b5522
GET /firebasejs/10.3.1/firebase-messaging-compat.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://wb.check-tl-ver-94-2.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/firebase-js
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="firebase-js"
report-to: {"group":"firebase-js","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/firebase-js"}]}
content-length: 9934
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 25 Apr 2024 02:47:22 GMT
expires: Fri, 25 Apr 2025 02:47:22 GMT
cache-control: public, max-age=31536000
age: 148341
last-modified: Thu, 31 Aug 2023 15:20:50 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.profitablegatecpm.com/kdh8vzj5?key=8b11074707021e921e03466cc441e4a1 | 192.243.59.13 | | 1.3 kB |
URL www.profitablegatecpm.com/kdh8vzj5?key=8b11074707021e921e03466cc441e4a1 IP192.243.59.13:0 ASN#39572 DataWeb Global Group B.V.
File typeHTML document, ASCII text, with very long lines (402) Hashe4a765fc104bdc00f1ab37ed0deadf81 1ceb27ca31e8793fc0efe087a3357ad0841e9eb4 58f8ad856a35d9ded35228a7f2964632ae36210d5c0d7da6737c4c3b4334a24e
GET /kdh8vzj5?key=8b11074707021e921e03466cc441e4a1 HTTP/1.1
Host: www.profitablegatecpm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Fri, 26 Apr 2024 19:59:44 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Set-Cookie: u_pl=17136824; expires=Sat, 27 Apr 2024 19:59:44 GMT
ain=eyJhbGciOiJIUzI1NiJ9.eyJwIjp7ImlkIjoxNzEzNjgyNCwiayI6IjhiMTEwNzQ3MDcwMjFlOTIxZTAzNDY2Y2M0NDFlNGExIiwic2lkIjoiIiwiaXNpZCI6MiwiYXNpZCI6MSwiemlkIjoxODAyNTQyLCJwaWQiOjQyNzY1NywiYW4iOnRydWUsImxhbiI6dHJ1ZSwiY2lkIjozMSwiYWlkIjoyOCwicHQiOjQsInBrIjoia2RoOHZ6ajUiLCJ0IjoxfSwidSI6eyJ1IjoxLCJhdSI6MSwiZCI6eyJpZCI6Nzk5NTQxOTYsImlkcyI6IiIsImljIjpmYWxzZSwibiI6IkRlc2t0b3AsRW11bGF0b3IiLCJ2IjoiVW5rbm93biIsIm0iOiJVbmtub3duIiwiZiI6MSwiZm4iOiJEZXNrdG9wIiwib2lkIjoxODExMCwib24iOiJMaW51eCIsIm92IjoiVW5rbm93biIsImJpZCI6MTE2NjcwLCJibiI6IkZpcmVmb3giLCJidiI6Ijk2LjAiLCJ3diI6ZmFsc2UsImUiOmZhbHNlLCJhYiI6ZmFsc2V9LCJjIjp7ImlkIjoxNjIsImMiOiJOTyIsIm4iOiJOb3J3YXkifSwiYSI6ZmFsc2UsImNyIjp7Im4iOiJCbGl4IFNvbHV0aW9ucyJ9LCJ4ZiI6IiIsIml4ZiI6ZmFsc2UsImlneGYiOmZhbHNlLCJ1cCI6dHJ1ZSwiciI6IiIsImFyIjpbXX19.eG1IN5vsOH09ksBAWPEvn2sHr2TQ2BQdN-5yEnMIwXo; expires=Fri, 26 Apr 2024 20:00:44 GMT
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: eaed5c68fe533654460947b758d9b742
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
|
|
| www.profitablegatecpm.com/api/users?token=L2tkaDh2emo1P2tleT04YjExMDc0NzA3MDIxZTkyMWUwMzQ2NmNjNDQxZTRhMSZwc3Q9MTcxNDE2MTY0NCZybXRjPXQmc2h1PWJkOWU5NzQyNjIzNTc1NGU4MzEyMzM2MDllYzljNTE0NmIwYjQ0NWRjM2Q5YzJhZDQwZWYwYWE2ZWY1NDY1NDNiMjI3NmM4ZDFhZWVkYzliYTYzNzliODIwOTZmOTFmNzI5NjNiYmI3M2U1ZmE4ODY3NDA0YTgzNmU2MjFlZTY3NTZmYjZmNzUxMDdkMWFiZDE2NGUzNDEwMGU4YmI2MWE0NDMxYjYxOWVmZjY3OTBiMzg3ZjE5NzU0OQ&uuid=&pii=&in=false | 172.240.127.234 | | 0 B |
URL www.profitablegatecpm.com/api/users?token=L2tkaDh2emo1P2tleT04YjExMDc0NzA3MDIxZTkyMWUwMzQ2NmNjNDQxZTRhMSZwc3Q9MTcxNDE2MTY0NCZybXRjPXQmc2h1PWJkOWU5NzQyNjIzNTc1NGU4MzEyMzM2MDllYzljNTE0NmIwYjQ0NWRjM2Q5YzJhZDQwZWYwYWE2ZWY1NDY1NDNiMjI3NmM4ZDFhZWVkYzliYTYzNzliODIwOTZmOTFmNzI5NjNiYmI3M2U1ZmE4ODY3NDA0YTgzNmU2MjFlZTY3NTZmYjZmNzUxMDdkMWFiZDE2NGUzNDEwMGU4YmI2MWE0NDMxYjYxOWVmZjY3OTBiMzg3ZjE5NzU0OQ&uuid=&pii=&in=false IP172.240.127.234:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /api/users?token=L2tkaDh2emo1P2tleT04YjExMDc0NzA3MDIxZTkyMWUwMzQ2NmNjNDQxZTRhMSZwc3Q9MTcxNDE2MTY0NCZybXRjPXQmc2h1PWJkOWU5NzQyNjIzNTc1NGU4MzEyMzM2MDllYzljNTE0NmIwYjQ0NWRjM2Q5YzJhZDQwZWYwYWE2ZWY1NDY1NDNiMjI3NmM4ZDFhZWVkYzliYTYzNzliODIwOTZmOTFmNzI5NjNiYmI3M2U1ZmE4ODY3NDA0YTgzNmU2MjFlZTY3NTZmYjZmNzUxMDdkMWFiZDE2NGUzNDEwMGU4YmI2MWE0NDMxYjYxOWVmZjY3OTBiMzg3ZjE5NzU0OQ&uuid=&pii=&in=false HTTP/1.1
Host: www.profitablegatecpm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.profitablegatecpm.com/api/users?token=L2tkaDh2emo1P2tleT1hOTY5Y2E1YzlhZDI2MTE3NjJmMTFiNzlhNTI2ZTJkMiZzdWJtZXRyaWM9MTcxMzY4MjQ
Cookie: u_pl=17136824; ain=eyJhbGciOiJIUzI1NiJ9.eyJwIjp7ImlkIjoxNzEzNjgyNCwiayI6IjhiMTEwNzQ3MDcwMjFlOTIxZTAzNDY2Y2M0NDFlNGExIiwic2lkIjoiIiwiaXNpZCI6MiwiYXNpZCI6MSwiemlkIjoxODAyNTQyLCJwaWQiOjQyNzY1NywiYW4iOnRydWUsImxhbiI6dHJ1ZSwiY2lkIjozMSwiYWlkIjoyOCwicHQiOjQsInBrIjoia2RoOHZ6ajUiLCJ0IjoxfSwidSI6eyJ1IjoxLCJhdSI6MSwiZCI6eyJpZCI6Nzk5NTQxOTYsImlkcyI6IiIsImljIjpmYWxzZSwibiI6IkRlc2t0b3AsRW11bGF0b3IiLCJ2IjoiVW5rbm93biIsIm0iOiJVbmtub3duIiwiZiI6MSwiZm4iOiJEZXNrdG9wIiwib2lkIjoxODExMCwib24iOiJMaW51eCIsIm92IjoiVW5rbm93biIsImJpZCI6MTE2NjcwLCJibiI6IkZpcmVmb3giLCJidiI6Ijk2LjAiLCJ3diI6ZmFsc2UsImUiOmZhbHNlLCJhYiI6ZmFsc2V9LCJjIjp7ImlkIjoxNjIsImMiOiJOTyIsIm4iOiJOb3J3YXkifSwiYSI6ZmFsc2UsImNyIjp7Im4iOiJCbGl4IFNvbHV0aW9ucyJ9LCJ4ZiI6IiIsIml4ZiI6ZmFsc2UsImlneGYiOmZhbHNlLCJ1cCI6dHJ1ZSwiciI6IiIsImFyIjpbXX19.eG1IN5vsOH09ksBAWPEvn2sHr2TQ2BQdN-5yEnMIwXo; cjs=t
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Server: nginx/1.21.6
Date: Fri, 26 Apr 2024 19:59:45 GMT
Content-Type: text/html
Content-Length: 0
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Location: https://nylonnickel.xyz/c9b2l0k.php?key=ssh20i85vx88tciu4a4m&SUB_ID_SHORT=391a23e45bca9a3654d6a02b614a4797&COST_CPC=&PLACEMENT_ID=17136824&CAMPAIGN_ID=1028982&DEVICE_BRAND=Unknown&BROWSER_NAME=Firefox&USER_OS=Linux&USER_CARRIER=Blix%20Solutions&USERAGENT=Mozilla%2F5.0%20%28X11%3B%20Linux%20x86_64%3B%20rv%3A96.0%29%20Gecko%2F20100101%20Firefox%2F96.0&REMOTE_LANGUAGE=11&BANNER_ID=2901049
Set-Cookie: pdhtkv=true; expires=Sat, 27 Apr 2024 19:59:45 GMT
uncs=1; expires=Sat, 27 Apr 2024 19:59:45 GMT
pdhtkv28=true; expires=Sat, 27 Apr 2024 19:59:45 GMT
uncs28=1; expires=Sat, 27 Apr 2024 19:59:45 GMT
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 04f9699d124b3f4fad68b17cbeb2c43f
Strict-Transport-Security: max-age=0; includeSubdomains
|
|
| nylonnickel.xyz/c9b2l0k.php?key=ssh20i85vx88tciu4a4m&SUB_ID_SHORT=391a23e45bca9a3654d6a02b614a4797&COST_CPC=&PLACEMENT_ID=17136824&CAMPAIGN_ID=1028982&DEVICE_BRAND=Unknown&BROWSER_NAME=Firefox&USER_OS=Linux&USER_CARRIER=Blix%20Solutions&USERAGENT=Mozilla%2F5.0%20%28X11%3B%20Linux%20x86_64%3B%20rv%3A96.0%29%20Gecko%2F20100101%20Firefox%2F96.0&REMOTE_LANGUAGE=11&BANNER_ID=2901049 | 192.64.81.118 | | 0 B |
URL nylonnickel.xyz/c9b2l0k.php?key=ssh20i85vx88tciu4a4m&SUB_ID_SHORT=391a23e45bca9a3654d6a02b614a4797&COST_CPC=&PLACEMENT_ID=17136824&CAMPAIGN_ID=1028982&DEVICE_BRAND=Unknown&BROWSER_NAME=Firefox&USER_OS=Linux&USER_CARRIER=Blix%20Solutions&USERAGENT=Mozilla%2F5.0%20%28X11%3B%20Linux%20x86_64%3B%20rv%3A96.0%29%20Gecko%2F20100101%20Firefox%2F96.0&REMOTE_LANGUAGE=11&BANNER_ID=2901049 IP192.64.81.118:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /c9b2l0k.php?key=ssh20i85vx88tciu4a4m&SUB_ID_SHORT=391a23e45bca9a3654d6a02b614a4797&COST_CPC=&PLACEMENT_ID=17136824&CAMPAIGN_ID=1028982&DEVICE_BRAND=Unknown&BROWSER_NAME=Firefox&USER_OS=Linux&USER_CARRIER=Blix%20Solutions&USERAGENT=Mozilla%2F5.0%20%28X11%3B%20Linux%20x86_64%3B%20rv%3A96.0%29%20Gecko%2F20100101%20Firefox%2F96.0&REMOTE_LANGUAGE=11&BANNER_ID=2901049 HTTP/1.1
Host: nylonnickel.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.profitablegatecpm.com/
DNT: 1
Connection: keep-alive
Cookie: uclick=pmqnh98plp; uclickhash=pmqnh98plp-pmqnh98plp-xr46-0-usgm6o-9rib8n-9ribwj-c95d4d
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Server: nginx/1.22.0
Date: Fri, 26 Apr 2024 19:59:45 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: uclick=pmqnh98plp; expires=Sat, 27-Apr-2024 19:59:45 GMT; Max-Age=86400; path=/; secure; SameSite=none
uclickhash=pmqnh98plp-pmqnh9xo8r-xr46-0-usgm6o-9rib8n-9ribwj-3c88f3; expires=Sat, 27-Apr-2024 19:59:45 GMT; Max-Age=86400; path=/; secure; SameSite=none
Location: https://rqqlj.canopusacrux.com/?pl=4l9EZwXc2kSH_LKKjogwWA&click_id=39d70pmqnh9xo8r0a3&sub_id=17136824
Strict-Transport-Security: max-age=31536000
|
|
| rqqlj.canopusacrux.com/?pl=4l9EZwXc2kSH_LKKjogwWA&click_id=39d70pmqnh9xo8r0a3&sub_id=17136824 | 188.114.96.1 | | 0 B |
URL rqqlj.canopusacrux.com/?pl=4l9EZwXc2kSH_LKKjogwWA&click_id=39d70pmqnh9xo8r0a3&sub_id=17136824 IP188.114.96.1:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /?pl=4l9EZwXc2kSH_LKKjogwWA&click_id=39d70pmqnh9xo8r0a3&sub_id=17136824 HTTP/1.1
Host: rqqlj.canopusacrux.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.profitablegatecpm.com/
DNT: 1
Connection: keep-alive
Cookie: 4l9EZwXc2kSH_LKKjogwWA=1; __pl=7b0cedb7-6011-4ef6-b6e5-14fb3b89903d; __cap=1
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 302 Found
date: Fri, 26 Apr 2024 19:59:45 GMT
content-length: 0
location: https://rqqlj.check-tl-ver-154-1.com/blue-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=blue-robot&click_id=39d70pmqnh9xo8r0a3&sub_id=17136824&nrid=6a4cfbf0673e40d796b025bf27880852&hash=TJxFABSBu6uwW6htJKZ2Jw&exp=1714161885
set-cookie: 4l9EZwXc2kSH_LKKjogwWA=1%2C3; max-age=345600; path=/; samesite=lax
__pl=7b0cedb7-6011-4ef6-b6e5-14fb3b89903d; expires=Sun, 26 Apr 2026 19:59:45 GMT; path=/; samesite=lax
__cap=2; max-age=3600; path=/; samesite=lax
cache-control: max-age=0, no-cache, no-store, must-revalidate
accept-ch: Sec-CH-UA, Sec-CH-UA-Platform, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=GUq0x1BKFUOzF2k0oB%2FFHc4eKNNciIt6H5ee9W%2FTcC6u9K75xi%2BhTjkwsk%2BPqMC1kmQzyiVuJ2b6m7ouC8oQbs0sADYAtqDiypGtJWEP8ONrY6ueBsAUHhqgUe5vIijY%2F0fkWT5m3Ss2"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87a927b478ac56b7-OSL
alt-svc: h3=":443"; ma=86400
|
|
| rqqlj.check-tl-ver-154-1.com/blue-robot/assets/style.css | 188.114.97.1 | | 16 kB |
URL rqqlj.check-tl-ver-154-1.com/blue-robot/assets/style.css IP188.114.97.1:0
File typeASCII text, with CRLF line terminators Hashff38fe2c7e467d3883201690baacfa93 edb4a93e0faa1c7b8968aab788b3e33e181c6c00 3a4bd4aed7f8c1fe11b9a39c4e70da33ccf8df29109e23f1ec10f6d07220bcd9
GET /blue-robot/assets/style.css HTTP/1.1
Host: rqqlj.check-tl-ver-154-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rqqlj.check-tl-ver-154-1.com/blue-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=blue-robot&click_id=39d70pmqnh9xo8r0a3&sub_id=17136824&nrid=6a4cfbf0673e40d796b025bf27880852&hash=TJxFABSBu6uwW6htJKZ2Jw&exp=1714161885
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:59:45 GMT
content-type: text/css
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
etag: W/"6627c958-f8e"
cache-control: max-age=14400
cf-cache-status: HIT
age: 3295
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hf5UmUVHndr0PFoIi0swh1pxXnuKA7XRVEYEnFX4UZmAPQAUzdmHxtORUGGDy5pY1%2F18oVL8pzpT0upry2FX8WZy0hEHGsJeg6k%2Fg4I0HxSTAHSWaAiGrfYbP%2FCp8qoRMWNa9tn5LXlt3r%2Bpmjw6"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a927b68c3eb52d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 | 216.58.207.227 | | 16 kB |
URL fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 IP216.58.207.227:0
File typeWeb Open Font Format (Version 2), TrueType, length 15552, version 1.0 Hash285467176f7fe6bb6a9c6873b3dad2cc ea04e4ff5142ddd69307c183def721a160e0a64e 5a8c1e7681318caa29e9f44e8a6e271f6a4067a2703e9916dfd4fe9099241db7
GET /s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://rqqlj.check-tl-ver-154-1.com
DNT: 1
Connection: keep-alive
Referer: https://rqqlj.check-tl-ver-154-1.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15552
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 25 Apr 2024 17:25:07 GMT
expires: Fri, 25 Apr 2025 17:25:07 GMT
cache-control: public, max-age=31536000
age: 95678
last-modified: Mon, 16 Oct 2017 17:33:02 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| rqqlj.check-tl-ver-154-1.com/favicon.ico | 188.114.97.1 | | 0 B |
URL rqqlj.check-tl-ver-154-1.com/favicon.ico IP188.114.97.1:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1
Host: rqqlj.check-tl-ver-154-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rqqlj.check-tl-ver-154-1.com/blue-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=blue-robot&click_id=39d70pmqnh9xo8r0a3&sub_id=17136824&nrid=6a4cfbf0673e40d796b025bf27880852&hash=TJxFABSBu6uwW6htJKZ2Jw&exp=1714161885
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 204 No Content
date: Fri, 26 Apr 2024 19:59:45 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 1751
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=MQ2f6D%2BWjIJqX8Iv5SE7biLuEyHuwZRHHKbNozZ3B0V0X2e%2FHe%2BzlOJA6cnJ%2Bz4E7yKdjnSUjknrD2wVFpRHqEE3wQNOjV2PbSJ3yEDvDvXhTodto9i8jP9j0km8%2F2mept4moQZKtIAaqZ%2BbGiW0"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a927b79d66b52d-OSL
alt-svc: h3=":443"; ma=86400
|
|
| cdnstatic.check-tl-ver-154-1.com/ps/config.js?id=4l9EZwXc2kSH_LKKjogwWA | 188.114.97.1 | | 9.5 kB |
URL cdnstatic.check-tl-ver-154-1.com/ps/config.js?id=4l9EZwXc2kSH_LKKjogwWA IP188.114.97.1:0
File typeASCII text, with CRLF line terminators Hashdc65a2fbfc4c76147b8b778b759c8d91 b8374137f0fe797e6a7e58c0c6ef14aa7a6b9855 7e85c285fd983223d07a014d1a96804ba1c8f65fb43238a4fad204350e896958
GET /ps/config.js?id=4l9EZwXc2kSH_LKKjogwWA HTTP/1.1
Host: cdnstatic.check-tl-ver-154-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rqqlj.check-tl-ver-154-1.com/
Cookie: __psu=fb863536-3c01-41b4-b5f3-4d4cc7b5b99f
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:59:45 GMT
content-type: application/javascript
cache-control: max-age=0, no-cache, no-store, must-revalidate
accept-ch: Sec-CH-UA, Sec-CH-UA-Platform, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
cf-cache-status: BYPASS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ALzV0g00imDIMAuqdqsWRQNneo1RuwjecRMNNblQUlO98zgATkAPR6Q0b8r5Kw3tv9pack012aW5DCUeuZGnlEo137sfIdJ66tlzhXyR4a1b4oACfpQ1E4%2FAtkxkcxwHxb067N0ji%2BZUl223hyfC50T1CQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a927b79d6cb52d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| www.gstatic.com/firebasejs/10.3.1/firebase-messaging-compat.js | 142.250.74.35 | | 9.9 kB |
URL www.gstatic.com/firebasejs/10.3.1/firebase-messaging-compat.js IP142.250.74.35:0
File typeJavaScript source, ASCII text, with very long lines (38231) Hash0541b823dfaf39162ef84cf075c9951b e0934726455558cc1a59823efada9651e33aafaa 21f1d62f222007068c793f0947d98f4ccb7c1595adb68efeb783390fdd8b5522
GET /firebasejs/10.3.1/firebase-messaging-compat.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rqqlj.check-tl-ver-154-1.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/firebase-js
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="firebase-js"
report-to: {"group":"firebase-js","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/firebase-js"}]}
content-length: 9934
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 25 Apr 2024 02:47:22 GMT
expires: Fri, 25 Apr 2025 02:47:22 GMT
cache-control: public, max-age=31536000
age: 148343
last-modified: Thu, 31 Aug 2023 15:20:50 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Early-Data: accepted
|
|
| fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 | 216.58.207.227 | | 16 kB |
URL fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 IP216.58.207.227:0
File typeWeb Open Font Format (Version 2), TrueType, length 15552, version 1.0 Hash285467176f7fe6bb6a9c6873b3dad2cc ea04e4ff5142ddd69307c183def721a160e0a64e 5a8c1e7681318caa29e9f44e8a6e271f6a4067a2703e9916dfd4fe9099241db7
GET /s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://ta.check-tl-ver-154-1.com
DNT: 1
Connection: keep-alive
Referer: https://ta.check-tl-ver-154-1.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15552
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 25 Apr 2024 17:25:07 GMT
expires: Fri, 25 Apr 2025 17:25:07 GMT
cache-control: public, max-age=31536000
age: 95679
last-modified: Mon, 16 Oct 2017 17:33:02 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Early-Data: accepted
|
|
| ta.check-tl-ver-154-1.com/blue-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=blue-robot&click_id=39d70pmqnh9xo8r0a3&sub_id=17136824&nrid=6a4cfbf0673e40d796b025bf27880852&hash=TJxFABSBu6uwW6htJKZ2Jw&exp=1714161885 | 188.114.97.1 | | 22 kB |
URL ta.check-tl-ver-154-1.com/blue-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=blue-robot&click_id=39d70pmqnh9xo8r0a3&sub_id=17136824&nrid=6a4cfbf0673e40d796b025bf27880852&hash=TJxFABSBu6uwW6htJKZ2Jw&exp=1714161885 IP188.114.97.1:0
File typeHTML document, ASCII text, with very long lines (1380), with CRLF line terminators Hash9a97caf42661ea48c9a8d347229b398a 5ee1404818c517813439e1a056b4016531fa11c7 8ac0a629dba5a9c8e52055295882680ede84c8d0a9f9e1c1af3636d1f47fa3bd
GET /blue-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=blue-robot&click_id=39d70pmqnh9xo8r0a3&sub_id=17136824&nrid=6a4cfbf0673e40d796b025bf27880852&hash=TJxFABSBu6uwW6htJKZ2Jw&exp=1714161885 HTTP/1.1
Host: ta.check-tl-ver-154-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rqqlj.check-tl-ver-154-1.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:59:46 GMT
content-type: text/html
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0SvuQiuX5I%2F3D3hwXLhLSHxt9QwE53MfpDm0OgHiy0Pz9%2B9vwMKKco%2FuHK9K4YK3mo9nOr5KKAIcV%2BeVB6jYwnVaUsOaO%2FsVupJe41AGdvf%2BhJX0JFvoFY%2BJrDJ5T9JQLizGr7xZWupYMMP%2B"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87a927b90f2eb52d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| ta.check-tl-ver-154-1.com/blue-robot/assets/trls.js | 188.114.97.1 | | 15 kB |
URL ta.check-tl-ver-154-1.com/blue-robot/assets/trls.js IP188.114.97.1:0
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (362), with CRLF line terminators Hasha1172576cb7f22b41247c5571d2f6d9e 8ede5adfb13a76a2d04dfa26ccdf5a15d2abd18c 2c0b0f46a0c12f49cc290e1b3d62a890e8da3434dc80720e3c5a20bec0ab43e1
GET /blue-robot/assets/trls.js HTTP/1.1
Host: ta.check-tl-ver-154-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ta.check-tl-ver-154-1.com/blue-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=blue-robot&click_id=39d70pmqnh9xo8r0a3&sub_id=17136824&nrid=6a4cfbf0673e40d796b025bf27880852&hash=TJxFABSBu6uwW6htJKZ2Jw&exp=1714161885
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:59:46 GMT
content-type: application/javascript
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
etag: W/"6627c958-1fa7"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=qC9f%2Fhw%2Botnp2zC2H2P8OjM58DpVkpTa%2BLXco4WUnIohk4OUC8bOurB5CW8EQxe%2Bp8aDCR0IwUH4%2FtpJGeP9XqJYWnH2sBRdoXzm7UGEt8K0j1V%2FUk2lCY32YvixgDaMGse2jUsTGF6wSB9i"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a927b98800b52d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| cdnstatic.check-tl-ver-154-1.com/ps/config.js?id=4l9EZwXc2kSH_LKKjogwWA | 188.114.97.1 | | 9.5 kB |
URL cdnstatic.check-tl-ver-154-1.com/ps/config.js?id=4l9EZwXc2kSH_LKKjogwWA IP188.114.97.1:0
File typeASCII text, with CRLF line terminators Hashdc65a2fbfc4c76147b8b778b759c8d91 b8374137f0fe797e6a7e58c0c6ef14aa7a6b9855 7e85c285fd983223d07a014d1a96804ba1c8f65fb43238a4fad204350e896958
GET /ps/config.js?id=4l9EZwXc2kSH_LKKjogwWA HTTP/1.1
Host: cdnstatic.check-tl-ver-154-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ta.check-tl-ver-154-1.com/
Cookie: __psu=fb863536-3c01-41b4-b5f3-4d4cc7b5b99f
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:59:46 GMT
content-type: application/javascript
cache-control: max-age=0, no-cache, no-store, must-revalidate
accept-ch: Sec-CH-UA, Sec-CH-UA-Platform, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
cf-cache-status: BYPASS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0AQNkK%2BR36M3Yx%2F38GPfcbpMWvCv7rZ6x%2BaripCUX5qWR9Y7hZgko4hWD3wJAf2J7bjOAwGwMwdZxdrhcM2eUbZqRKQ8XLtNpPRPRKb2EZdKbnd3tJ3V%2BXK2%2Fi%2BAN0unW2sx0p1D%2B70jJfmCzDJGk2BEQA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a927ba6923b52d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| www.gstatic.com/firebasejs/10.3.1/firebase-messaging-compat.js | 142.250.74.35 | | 9.9 kB |
URL www.gstatic.com/firebasejs/10.3.1/firebase-messaging-compat.js IP142.250.74.35:0
File typeJavaScript source, ASCII text, with very long lines (38231) Hash0541b823dfaf39162ef84cf075c9951b e0934726455558cc1a59823efada9651e33aafaa 21f1d62f222007068c793f0947d98f4ccb7c1595adb68efeb783390fdd8b5522
GET /firebasejs/10.3.1/firebase-messaging-compat.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ta.check-tl-ver-154-1.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/firebase-js
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="firebase-js"
report-to: {"group":"firebase-js","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/firebase-js"}]}
content-length: 9934
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 25 Apr 2024 02:47:22 GMT
expires: Fri, 25 Apr 2025 02:47:22 GMT
cache-control: public, max-age=31536000
age: 148344
last-modified: Thu, 31 Aug 2023 15:20:50 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| tb.check-tl-ver-154-1.com/blue-robot/assets/style.css | 188.114.97.1 | | 16 kB |
URL tb.check-tl-ver-154-1.com/blue-robot/assets/style.css IP188.114.97.1:0
File typeASCII text, with CRLF line terminators Hashff38fe2c7e467d3883201690baacfa93 edb4a93e0faa1c7b8968aab788b3e33e181c6c00 3a4bd4aed7f8c1fe11b9a39c4e70da33ccf8df29109e23f1ec10f6d07220bcd9
GET /blue-robot/assets/style.css HTTP/1.1
Host: tb.check-tl-ver-154-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tb.check-tl-ver-154-1.com/blue-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=blue-robot&click_id=39d70pmqnh9xo8r0a3&sub_id=17136824&nrid=6a4cfbf0673e40d796b025bf27880852&hash=TJxFABSBu6uwW6htJKZ2Jw&exp=1714161885
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:59:46 GMT
content-type: text/css
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
etag: W/"6627c958-f8e"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8piOqQV8nbodcEv%2F9p%2BPIalsobqdqchg4bvRRUGLsRNYIu94ar8y5pa7geQCuMLUv%2By0Vd%2BK4nUiFuqAUZG8OJ3xRO%2FZ3OrCNWvdgsfmXyHGTxcxQlECegugEtJiz8t7tjocbRBaIRB%2B8T4o"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a927bc0b0cb52d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 | 216.58.207.227 | | 16 kB |
URL fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 IP216.58.207.227:0
File typeWeb Open Font Format (Version 2), TrueType, length 15552, version 1.0 Hash285467176f7fe6bb6a9c6873b3dad2cc ea04e4ff5142ddd69307c183def721a160e0a64e 5a8c1e7681318caa29e9f44e8a6e271f6a4067a2703e9916dfd4fe9099241db7
GET /s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://tb.check-tl-ver-154-1.com
DNT: 1
Connection: keep-alive
Referer: https://tb.check-tl-ver-154-1.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15552
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 25 Apr 2024 17:25:07 GMT
expires: Fri, 25 Apr 2025 17:25:07 GMT
cache-control: public, max-age=31536000
age: 95679
last-modified: Mon, 16 Oct 2017 17:33:02 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| tb.check-tl-ver-154-1.com/blue-robot/assets/trls.js | 188.114.97.1 | | 15 kB |
URL tb.check-tl-ver-154-1.com/blue-robot/assets/trls.js IP188.114.97.1:0
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (362), with CRLF line terminators Hasha1172576cb7f22b41247c5571d2f6d9e 8ede5adfb13a76a2d04dfa26ccdf5a15d2abd18c 2c0b0f46a0c12f49cc290e1b3d62a890e8da3434dc80720e3c5a20bec0ab43e1
GET /blue-robot/assets/trls.js HTTP/1.1
Host: tb.check-tl-ver-154-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tb.check-tl-ver-154-1.com/blue-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=blue-robot&click_id=39d70pmqnh9xo8r0a3&sub_id=17136824&nrid=6a4cfbf0673e40d796b025bf27880852&hash=TJxFABSBu6uwW6htJKZ2Jw&exp=1714161885
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:59:46 GMT
content-type: application/javascript
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
etag: W/"6627c958-1fa7"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ANSYQBnCCHPrBV6VBEntDRn1m2wNmcA385dsQglirUZhA75GlBF75Eg8hiQx9HTmrBszCW0hAQoiNazAuUVd4LNFajtUd4OkrYtknpmlasYA7iTMxz8atEJt7SmrKWU3EDl9Fek0r2ycm%2BWJ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a927bc0b07b52d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| www.gstatic.com/firebasejs/10.3.1/firebase-app-compat.js | 142.250.74.35 | | 9.3 kB |
URL www.gstatic.com/firebasejs/10.3.1/firebase-app-compat.js IP142.250.74.35:0
File typeJavaScript source, ASCII text, with very long lines (28368) Hash9900403b65514fad7df39a4e788a6e45 75f9ba061ef4e72bb23528c700f2a11c56d637e9 a202b2051ea9810cd9ba592b3f9418a89e2062f5c185e29e288080b28eb64fe5
GET /firebasejs/10.3.1/firebase-app-compat.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tb.check-tl-ver-154-1.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/firebase-js
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="firebase-js"
report-to: {"group":"firebase-js","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/firebase-js"}]}
content-length: 9308
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 26 Apr 2024 06:13:11 GMT
expires: Sat, 26 Apr 2025 06:13:11 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 31 Aug 2023 15:20:38 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 49595
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.gstatic.com/firebasejs/10.3.1/firebase-messaging-compat.js | 142.250.74.35 | | 9.9 kB |
URL www.gstatic.com/firebasejs/10.3.1/firebase-messaging-compat.js IP142.250.74.35:0
File typeJavaScript source, ASCII text, with very long lines (38231) Hash0541b823dfaf39162ef84cf075c9951b e0934726455558cc1a59823efada9651e33aafaa 21f1d62f222007068c793f0947d98f4ccb7c1595adb68efeb783390fdd8b5522
GET /firebasejs/10.3.1/firebase-messaging-compat.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tb.check-tl-ver-154-1.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/firebase-js
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="firebase-js"
report-to: {"group":"firebase-js","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/firebase-js"}]}
content-length: 9934
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 25 Apr 2024 02:47:22 GMT
expires: Fri, 25 Apr 2025 02:47:22 GMT
cache-control: public, max-age=31536000
age: 148344
last-modified: Thu, 31 Aug 2023 15:20:50 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.profitablegatecpm.com/kdh8vzj5?key=8b11074707021e921e03466cc441e4a1 | 172.240.127.234 | | 1.3 kB |
URL www.profitablegatecpm.com/kdh8vzj5?key=8b11074707021e921e03466cc441e4a1 IP172.240.127.234:0
File typeHTML document, ASCII text, with very long lines (412) Hashdff46674992c118f5d562b22065d1422 faead609425c106b549eb1e281303dd270a45b83 d3096dd286534f2fd7405be579badda430047dc589102dcc9546d1abd7199020
GET /kdh8vzj5?key=8b11074707021e921e03466cc441e4a1 HTTP/1.1
Host: www.profitablegatecpm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: u_pl=17136824; ain=eyJhbGciOiJIUzI1NiJ9.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.eG1IN5vsOH09ksBAWPEvn2sHr2TQ2BQdN-5yEnMIwXo; cjs=t
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Fri, 26 Apr 2024 19:59:46 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Set-Cookie: ain=eyJhbGciOiJIUzI1NiJ9.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.A-hs6t-ALqez_ye67ir0JBECLHlUOBU2KXOfKE4BRtQ; expires=Fri, 26 Apr 2024 20:00:46 GMT
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 6a8be09399c31d975662fec4b78b9d19
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
|
|
| rqqlj.check-tl-ver-94-2.com/space-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=space-robot&click_id=e5c53pmqnh98plp47e&sub_id=17154615&nrid=e94bdec004ef4a49a14064b067a05785&hash=as5yObg-2mIUl07-4e6qOA&exp=1714161882 | 104.21.33.96 | | 3.5 kB |
URL rqqlj.check-tl-ver-94-2.com/space-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=space-robot&click_id=e5c53pmqnh98plp47e&sub_id=17154615&nrid=e94bdec004ef4a49a14064b067a05785&hash=as5yObg-2mIUl07-4e6qOA&exp=1714161882 IP104.21.33.96:0
File typeHTML document, Unicode text, UTF-8 text, with very long lines (474) Hash01041709ecf6a3f0b549820730593c03 55775e4279d24a34f601bf8180d9f280b8131e0d 51907b3319c05ec1c1a7466f4017f4dcc7b6dc59a29ed962bfd36572f223bb51
GET /space-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=space-robot&click_id=e5c53pmqnh98plp47e&sub_id=17154615&nrid=e94bdec004ef4a49a14064b067a05785&hash=as5yObg-2mIUl07-4e6qOA&exp=1714161882 HTTP/1.1
Host: rqqlj.check-tl-ver-94-2.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://experimentalpersecute.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 26 Apr 2024 19:59:42 GMT
content-type: text/html
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=AiMNRcbQphnl4LDc9qF8qkBr0Z3jthLh45atSE8WmPT3U9sCIo9eutb5UKaUIx0Ty824S%2FS3vQprw9cIYl6vsGgpGt%2FdgMLiwU9V0ekERKuIvUhiJKJAe7sey5mqizGTtEAg2W1IG9LjzWgNyBI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87a927a28c0d1bfe-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| nylonnickel.xyz/c9b2l0k.php?key=ssh20i85vx88tciu4a4m&SUB_ID_SHORT=3912d58cf5e36c11b5213250d32c2dfd&COST_CPC=&PLACEMENT_ID=17136824&CAMPAIGN_ID=1028982&DEVICE_BRAND=Unknown&BROWSER_NAME=Firefox&USER_OS=Linux&USER_CARRIER=Blix%20Solutions&USERAGENT=Mozilla%2F5.0%20%28X11%3B%20Linux%20x86_64%3B%20rv%3A96.0%29%20Gecko%2F20100101%20Firefox%2F96.0&REMOTE_LANGUAGE=11&BANNER_ID=2901049 | 192.64.81.118 | | 0 B |
URL nylonnickel.xyz/c9b2l0k.php?key=ssh20i85vx88tciu4a4m&SUB_ID_SHORT=3912d58cf5e36c11b5213250d32c2dfd&COST_CPC=&PLACEMENT_ID=17136824&CAMPAIGN_ID=1028982&DEVICE_BRAND=Unknown&BROWSER_NAME=Firefox&USER_OS=Linux&USER_CARRIER=Blix%20Solutions&USERAGENT=Mozilla%2F5.0%20%28X11%3B%20Linux%20x86_64%3B%20rv%3A96.0%29%20Gecko%2F20100101%20Firefox%2F96.0&REMOTE_LANGUAGE=11&BANNER_ID=2901049 IP192.64.81.118:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /c9b2l0k.php?key=ssh20i85vx88tciu4a4m&SUB_ID_SHORT=3912d58cf5e36c11b5213250d32c2dfd&COST_CPC=&PLACEMENT_ID=17136824&CAMPAIGN_ID=1028982&DEVICE_BRAND=Unknown&BROWSER_NAME=Firefox&USER_OS=Linux&USER_CARRIER=Blix%20Solutions&USERAGENT=Mozilla%2F5.0%20%28X11%3B%20Linux%20x86_64%3B%20rv%3A96.0%29%20Gecko%2F20100101%20Firefox%2F96.0&REMOTE_LANGUAGE=11&BANNER_ID=2901049 HTTP/1.1
Host: nylonnickel.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.profitablegatecpm.com/
DNT: 1
Connection: keep-alive
Cookie: uclick=pmqnh98plp; uclickhash=pmqnh98plp-pmqnh9xo8r-xr46-0-usgm6o-9rib8n-9ribwj-3c88f3
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Server: nginx/1.22.0
Date: Fri, 26 Apr 2024 19:59:48 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: uclick=pmqnh98plp; expires=Sat, 27-Apr-2024 19:59:48 GMT; Max-Age=86400; path=/; secure; SameSite=none
uclickhash=pmqnh98plp-pmqnh9xoej-xr46-0-usgm6o-9rib8n-9ribwj-bdeab3; expires=Sat, 27-Apr-2024 19:59:48 GMT; Max-Age=86400; path=/; secure; SameSite=none
Location: https://rqqlj.canopusacrux.com/?pl=4l9EZwXc2kSH_LKKjogwWA&click_id=79c7bpmqnh9xoejd46&sub_id=17136824
Strict-Transport-Security: max-age=31536000
|
|
| rqqlj.canopusacrux.com/?pl=4l9EZwXc2kSH_LKKjogwWA&click_id=79c7bpmqnh9xoejd46&sub_id=17136824 | 188.114.96.1 | | 0 B |
URL rqqlj.canopusacrux.com/?pl=4l9EZwXc2kSH_LKKjogwWA&click_id=79c7bpmqnh9xoejd46&sub_id=17136824 IP188.114.96.1:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /?pl=4l9EZwXc2kSH_LKKjogwWA&click_id=79c7bpmqnh9xoejd46&sub_id=17136824 HTTP/1.1
Host: rqqlj.canopusacrux.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.profitablegatecpm.com/
DNT: 1
Connection: keep-alive
Cookie: 4l9EZwXc2kSH_LKKjogwWA=1%2C3; __pl=7b0cedb7-6011-4ef6-b6e5-14fb3b89903d; __cap=2
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 302 Found
date: Fri, 26 Apr 2024 19:59:48 GMT
content-length: 0
location: https://rqqlj.check-tl-ver-154-1.com/eyes-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&click_id=79c7bpmqnh9xoejd46&sub_id=17136824&nrid=ed6e06db888944498357b77d77127fff&hash=LgGsEDsTY7zfhIPnB9oTiQ&exp=1714161888
set-cookie: 4l9EZwXc2kSH_LKKjogwWA=1%2C3%2C5; max-age=345600; path=/; samesite=lax
__pl=7b0cedb7-6011-4ef6-b6e5-14fb3b89903d; expires=Sun, 26 Apr 2026 19:59:48 GMT; path=/; samesite=lax
__cap=3; max-age=3600; path=/; samesite=lax
cache-control: max-age=0, no-cache, no-store, must-revalidate
accept-ch: Sec-CH-UA, Sec-CH-UA-Platform, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=DXiME4ORsoMLu2Imk%2BOaF9tveQPXaaB8PMb1b4rDA%2FQW8Wvqwhta2SKbQUKZa1u2lKEyiPD22MdfhCFd4snWoZC3WaFa1WhiOtR9a%2BnRj%2BHeYmRzA8j8Xj2h8sUJ2zHpjnJ3r0W3fqcW"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87a927c84ea756b7-OSL
alt-svc: h3=":443"; ma=86400
|
|
| rqqlj.check-tl-ver-154-1.com/eyes-robot/assets/2.png | 188.114.97.1 | | 1.1 kB |
URL rqqlj.check-tl-ver-154-1.com/eyes-robot/assets/2.png IP188.114.97.1:0
File typePNG image data, 94 x 19, 8-bit colormap, non-interlaced Hashd708fbf0358752a082f5a394b74adda8 231c1527b4b039eb3af7d7e9eb5587ed87f6ea81 09d12e3c0e65fda26b9073e70e02fb24fa6941a4a3b1b81211b6470f00769ea5
GET /eyes-robot/assets/2.png HTTP/1.1
Host: rqqlj.check-tl-ver-154-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rqqlj.check-tl-ver-154-1.com/eyes-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&click_id=79c7bpmqnh9xoejd46&sub_id=17136824&nrid=ed6e06db888944498357b77d77127fff&hash=LgGsEDsTY7zfhIPnB9oTiQ&exp=1714161888
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:59:48 GMT
content-type: image/png
content-length: 1061
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
etag: "6627c958-425"
cache-control: max-age=14400
cf-cache-status: HIT
age: 5761
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=R7CRP6jAxSflrHmvrWN%2Bm3c67NMElh1RFK4o46CBOT55l%2Bu9l8wvHqMxSqYCDrhLrnNeMYwTNUwY9sa5BrkpbiGBmZg2tPR6HJhyWug0zEpKUqjMm%2FsytkVBOZXRwnbMOo5CceymrklYoHBRgUgf"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a927c99b52b52d-OSL
alt-svc: h3=":443"; ma=86400
|
|
| rqqlj.check-tl-ver-154-1.com/eyes-robot/assets/1.png | 188.114.97.1 | | 11 kB |
URL rqqlj.check-tl-ver-154-1.com/eyes-robot/assets/1.png IP188.114.97.1:0
File typePNG image data, 179 x 278, 8-bit colormap, non-interlaced Hasha6fa8154cc36da494df7b5103329c15a 3a2310088bcec14f7c0187f8409a5af5395665e8 967b8859fedb2c63afc8ae6ae2839fdd40f0e26af85adc6605a629f3c0ed0837
GET /eyes-robot/assets/1.png HTTP/1.1
Host: rqqlj.check-tl-ver-154-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rqqlj.check-tl-ver-154-1.com/eyes-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&click_id=79c7bpmqnh9xoejd46&sub_id=17136824&nrid=ed6e06db888944498357b77d77127fff&hash=LgGsEDsTY7zfhIPnB9oTiQ&exp=1714161888
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:59:48 GMT
content-type: image/png
content-length: 10591
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
etag: "6627c958-295f"
cache-control: max-age=14400
cf-cache-status: HIT
age: 5761
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TsrJhUN3ZAouztjAs019kv%2BM%2Fgswa605MQeUn5iq1Cg%2B66qi9eUqBr%2FBnECteW3uac8YeWZvD5AQD%2FuahK9rCtG0kKEZNANg20k45w%2BRSUys32JtjR26l3RPyOUEfuXZNSbCDJqx2zwsVfrN%2Fr8l"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a927c99b50b52d-OSL
alt-svc: h3=":443"; ma=86400
|
|
| rqqlj.check-tl-ver-154-1.com/eyes-robot/assets/image.png | 188.114.97.1 | | 11 kB |
URL rqqlj.check-tl-ver-154-1.com/eyes-robot/assets/image.png IP188.114.97.1:0
File typePNG image data, 260 x 260, 8-bit colormap, non-interlaced Hashca1f4de0ad1d4fad72d299a6411e6959 c9f6d409f09264a34ee8bac4265233c56c280d1a f0434a1fc8ffba3a47bbb9f1fa5a2f789651a020e7b86e507ff300b7c367057f
GET /eyes-robot/assets/image.png HTTP/1.1
Host: rqqlj.check-tl-ver-154-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rqqlj.check-tl-ver-154-1.com/eyes-robot/assets/style.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:59:48 GMT
content-type: image/png
content-length: 11043
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
etag: "6627c958-2b23"
cache-control: max-age=14400
cf-cache-status: HIT
age: 5201
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gYqgigKt03er2vOT1pzEhoJ9XnLbCJU3lkZfFkJfljaq6ziOOKyE%2FwXbDsNFszp5MSX21Ug37LBlv9xWe0wEi7APRvV1D4YEBWA4d2raGv3RpnG878ScHHalw74lClViXxMSlWGQxD0nwSROACam"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a927c9db8db52d-OSL
alt-svc: h3=":443"; ma=86400
|
|
| rqqlj.check-tl-ver-154-1.com/eyes-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&click_id=79c7bpmqnh9xoejd46&sub_id=17136824&nrid=ed6e06db888944498357b77d77127fff&hash=LgGsEDsTY7zfhIPnB9oTiQ&exp=1714161888 | 188.114.97.1 | | 16 kB |
URL rqqlj.check-tl-ver-154-1.com/eyes-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&click_id=79c7bpmqnh9xoejd46&sub_id=17136824&nrid=ed6e06db888944498357b77d77127fff&hash=LgGsEDsTY7zfhIPnB9oTiQ&exp=1714161888 IP188.114.97.1:0
File typeHTML document, Unicode text, UTF-8 text, with CRLF line terminators Hash666203c2cfc7ee8aafbd1cbf9ec04c69 7d74e745174fe6140ee2fbe1fe8b8c2ae33ade9a 57027a083c9c7eaf8a078a7090c454b254216a4a94782e2445fb71629725531b
GET /eyes-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&click_id=79c7bpmqnh9xoejd46&sub_id=17136824&nrid=ed6e06db888944498357b77d77127fff&hash=LgGsEDsTY7zfhIPnB9oTiQ&exp=1714161888 HTTP/1.1
Host: rqqlj.check-tl-ver-154-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.profitablegatecpm.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:59:48 GMT
content-type: text/html
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=yHZ4l4zzGe2w1vYIk6FpekuoBArkrlWf40yem70Pv1BKy2vQwhoETtA1iVB2ZxZkEXK0EoTyOP%2FBM0q5bF02aGGy%2BG7CEt8Rm3PKtbdtM1uK8ixHmkmiyGO8hEoFdwrc52mqwnP9Jo8grFMsJyW%2B"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87a927c89a07b52d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| www.gstatic.com/firebasejs/10.3.1/firebase-app-compat.js | 142.250.74.35 | | 9.3 kB |
URL www.gstatic.com/firebasejs/10.3.1/firebase-app-compat.js IP142.250.74.35:0
File typeJavaScript source, ASCII text, with very long lines (28368) Hash9900403b65514fad7df39a4e788a6e45 75f9ba061ef4e72bb23528c700f2a11c56d637e9 a202b2051ea9810cd9ba592b3f9418a89e2062f5c185e29e288080b28eb64fe5
GET /firebasejs/10.3.1/firebase-app-compat.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rqqlj.check-tl-ver-154-1.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/firebase-js
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="firebase-js"
report-to: {"group":"firebase-js","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/firebase-js"}]}
content-length: 9308
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 26 Apr 2024 06:13:11 GMT
expires: Sat, 26 Apr 2025 06:13:11 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 31 Aug 2023 15:20:38 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 49597
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| cdnstatic.check-tl-ver-154-1.com/ps/config.js?id=4l9EZwXc2kSH_LKKjogwWA | 188.114.97.1 | | 10 kB |
URL cdnstatic.check-tl-ver-154-1.com/ps/config.js?id=4l9EZwXc2kSH_LKKjogwWA IP188.114.97.1:0
File typeASCII text, with CRLF line terminators Hashdc65a2fbfc4c76147b8b778b759c8d91 b8374137f0fe797e6a7e58c0c6ef14aa7a6b9855 7e85c285fd983223d07a014d1a96804ba1c8f65fb43238a4fad204350e896958
GET /ps/config.js?id=4l9EZwXc2kSH_LKKjogwWA HTTP/1.1
Host: cdnstatic.check-tl-ver-154-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rqqlj.check-tl-ver-154-1.com/
Cookie: __psu=fb863536-3c01-41b4-b5f3-4d4cc7b5b99f
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:59:48 GMT
content-type: application/javascript
cache-control: max-age=0, no-cache, no-store, must-revalidate
accept-ch: Sec-CH-UA, Sec-CH-UA-Platform, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
cf-cache-status: BYPASS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bf2brGh80vOEpQ4%2FlR9ARsNmau3a1SUWeCPwD3tVfRXbpE4FNmByDgq9Grt3XlakHfuUbbSBEW%2BHz1vTkZaq8j8R2VYzB%2BwdY5svs45Lrh%2BPOB06Fy3GncFALki9PKact6fObxuz9ELqMyZHAth3Ftv6Tg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a927ca4c1ab52d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| qa.check-tl-ver-154-1.com/eyes-robot/assets/2.png | 188.114.97.1 | | 1.1 kB |
URL qa.check-tl-ver-154-1.com/eyes-robot/assets/2.png IP188.114.97.1:0
File typePNG image data, 94 x 19, 8-bit colormap, non-interlaced Hashd708fbf0358752a082f5a394b74adda8 231c1527b4b039eb3af7d7e9eb5587ed87f6ea81 09d12e3c0e65fda26b9073e70e02fb24fa6941a4a3b1b81211b6470f00769ea5
GET /eyes-robot/assets/2.png HTTP/1.1
Host: qa.check-tl-ver-154-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://qa.check-tl-ver-154-1.com/eyes-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&click_id=79c7bpmqnh9xoejd46&sub_id=17136824&nrid=ed6e06db888944498357b77d77127fff&hash=LgGsEDsTY7zfhIPnB9oTiQ&exp=1714161888
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:59:49 GMT
content-type: image/png
content-length: 1061
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
etag: "6627c958-425"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ia2%2FL9M%2FpUxg98RMEL7n7spstg71Dh0C78Rke28%2BfL9sLlV5xkNZ3xY4x6weHeYxKfYpr%2BLWJqhz9i%2B4hcW%2BxwHhXwReVB%2B4IuLgWeSbVFJjMz4a9uzwEeJ1TASp%2BZtFRdPDlMhE3gYGNYyV"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a927cc4e6fb52d-OSL
alt-svc: h3=":443"; ma=86400
|
|
| qa.check-tl-ver-154-1.com/eyes-robot/assets/1.png | 188.114.97.1 | | 11 kB |
URL qa.check-tl-ver-154-1.com/eyes-robot/assets/1.png IP188.114.97.1:0
File typePNG image data, 179 x 278, 8-bit colormap, non-interlaced Hasha6fa8154cc36da494df7b5103329c15a 3a2310088bcec14f7c0187f8409a5af5395665e8 967b8859fedb2c63afc8ae6ae2839fdd40f0e26af85adc6605a629f3c0ed0837
GET /eyes-robot/assets/1.png HTTP/1.1
Host: qa.check-tl-ver-154-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://qa.check-tl-ver-154-1.com/eyes-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&click_id=79c7bpmqnh9xoejd46&sub_id=17136824&nrid=ed6e06db888944498357b77d77127fff&hash=LgGsEDsTY7zfhIPnB9oTiQ&exp=1714161888
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:59:49 GMT
content-type: image/png
content-length: 10591
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
etag: "6627c958-295f"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2Fdh6TTEk1gJiE%2BflVHgyXeTP%2BVNn9nbeWuGqGd154s8WEES68Wb2%2F9GfmO64KmJLbDYc4YDynMG4FAMBkDmvB%2F6pYbeDZXt2aS3KJWEV358%2BRVqPoSGYK3CIRG35n%2BSAPKyaDm913xY7b1Bw"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a927cc3e67b52d-OSL
alt-svc: h3=":443"; ma=86400
|
|
| qa.check-tl-ver-154-1.com/eyes-robot/assets/image.png | 188.114.97.1 | | 11 kB |
URL qa.check-tl-ver-154-1.com/eyes-robot/assets/image.png IP188.114.97.1:0
File typePNG image data, 260 x 260, 8-bit colormap, non-interlaced Hashca1f4de0ad1d4fad72d299a6411e6959 c9f6d409f09264a34ee8bac4265233c56c280d1a f0434a1fc8ffba3a47bbb9f1fa5a2f789651a020e7b86e507ff300b7c367057f
GET /eyes-robot/assets/image.png HTTP/1.1
Host: qa.check-tl-ver-154-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://qa.check-tl-ver-154-1.com/eyes-robot/assets/style.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:59:49 GMT
content-type: image/png
content-length: 11043
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
etag: "6627c958-2b23"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=nUVaeCWFNa%2FFYZM35idv0HkiKLk9B2BeNG%2FUcc2oeGSPS0l5Bo8Qk3N9I5FqHOqXUGVUvAstaheg5BSqZ1JMZOjhjrIM74xcQYWlrHkPEqVUvhJbmOVwNvY6jf%2B8ZTLOwRfi2u4qADjVTjzj"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a927ccaee9b52d-OSL
alt-svc: h3=":443"; ma=86400
|
|
| cdnstatic.check-tl-ver-154-1.com/ps/ps.js?&edg=true&sw=&fullscreen=true&pl=true&pp=false&id=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&click_id=79c7bpmqnh9xoejd46&sub_id=17136824&appspot=&d=https%3A%2F%2Fcdnstatic.check-tl-ver-154-1.com&timeout=30&tb=true&nrid=ed6e06db888944498357b77d77127fff | 188.114.97.1 | | 14 kB |
URL cdnstatic.check-tl-ver-154-1.com/ps/ps.js?&edg=true&sw=&fullscreen=true&pl=true&pp=false&id=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&click_id=79c7bpmqnh9xoejd46&sub_id=17136824&appspot=&d=https%3A%2F%2Fcdnstatic.check-tl-ver-154-1.com&timeout=30&tb=true&nrid=ed6e06db888944498357b77d77127fff IP188.114.97.1:0
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (33137), with no line terminators Hash6a1d9bb844c21f09288e2c72ae8ed579 f811cf02d9a4e19a0fa8a510588b7bd8b22c2de1 7ed42bd82db32e4cfbe9df1a91377dcd91d9af751a21bba713141523bb0b0033
GET /ps/ps.js?&edg=true&sw=&fullscreen=true&pl=true&pp=false&id=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&click_id=79c7bpmqnh9xoejd46&sub_id=17136824&appspot=&d=https%3A%2F%2Fcdnstatic.check-tl-ver-154-1.com&timeout=30&tb=true&nrid=ed6e06db888944498357b77d77127fff HTTP/1.1
Host: cdnstatic.check-tl-ver-154-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://qa.check-tl-ver-154-1.com/
Cookie: __psu=fb863536-3c01-41b4-b5f3-4d4cc7b5b99f
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:59:49 GMT
content-type: application/javascript
cache-control: max-age=0, no-cache, no-store, must-revalidate
accept-ch: Sec-CH-UA, Sec-CH-UA-Platform, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
cf-cache-status: BYPASS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hvsTI3HacaZzXSMklF2bH1mFjYDVfP2EyQkRHmRjXtS2Irw1bnjwRe%2B7DD2ibbgPbQ4UOv7c0G2HwDqQgHtSB0dX%2Fa7dDLG4NkclDP8GTUUAkO1yQuW6q4%2FqW7qy7kXZiqB8ThxLiKB41TycpNTTXqDNnQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a927ccbef6b52d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| www.gstatic.com/firebasejs/10.3.1/firebase-app-compat.js | 142.250.74.35 | | 9.3 kB |
URL www.gstatic.com/firebasejs/10.3.1/firebase-app-compat.js IP142.250.74.35:0
File typeJavaScript source, ASCII text, with very long lines (28368) Hash9900403b65514fad7df39a4e788a6e45 75f9ba061ef4e72bb23528c700f2a11c56d637e9 a202b2051ea9810cd9ba592b3f9418a89e2062f5c185e29e288080b28eb64fe5
GET /firebasejs/10.3.1/firebase-app-compat.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://qa.check-tl-ver-154-1.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/firebase-js
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="firebase-js"
report-to: {"group":"firebase-js","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/firebase-js"}]}
content-length: 9308
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 26 Apr 2024 06:13:11 GMT
expires: Sat, 26 Apr 2025 06:13:11 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 31 Aug 2023 15:20:38 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 49598
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.gstatic.com/firebasejs/10.3.1/firebase-messaging-compat.js | 142.250.74.35 | | 9.9 kB |
URL www.gstatic.com/firebasejs/10.3.1/firebase-messaging-compat.js IP142.250.74.35:0
File typeJavaScript source, ASCII text, with very long lines (38231) Hash0541b823dfaf39162ef84cf075c9951b e0934726455558cc1a59823efada9651e33aafaa 21f1d62f222007068c793f0947d98f4ccb7c1595adb68efeb783390fdd8b5522
GET /firebasejs/10.3.1/firebase-messaging-compat.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://qa.check-tl-ver-154-1.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/firebase-js
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="firebase-js"
report-to: {"group":"firebase-js","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/firebase-js"}]}
content-length: 9934
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 25 Apr 2024 02:47:22 GMT
expires: Fri, 25 Apr 2025 02:47:22 GMT
cache-control: public, max-age=31536000
age: 148347
last-modified: Thu, 31 Aug 2023 15:20:50 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| wb.check-tl-ver-94-2.com/space-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=space-robot&click_id=e5c53pmqnh98plp47e&sub_id=17154615&nrid=e94bdec004ef4a49a14064b067a05785&hash=as5yObg-2mIUl07-4e6qOA&exp=1714161882 | 104.21.33.96 | | 28 kB |
URL wb.check-tl-ver-94-2.com/space-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=space-robot&click_id=e5c53pmqnh98plp47e&sub_id=17154615&nrid=e94bdec004ef4a49a14064b067a05785&hash=as5yObg-2mIUl07-4e6qOA&exp=1714161882 IP104.21.33.96:0
File typeHTML document, Unicode text, UTF-8 text, with very long lines (474) Hash01041709ecf6a3f0b549820730593c03 55775e4279d24a34f601bf8180d9f280b8131e0d 51907b3319c05ec1c1a7466f4017f4dcc7b6dc59a29ed962bfd36572f223bb51
GET /space-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=space-robot&click_id=e5c53pmqnh98plp47e&sub_id=17154615&nrid=e94bdec004ef4a49a14064b067a05785&hash=as5yObg-2mIUl07-4e6qOA&exp=1714161882 HTTP/1.1
Host: wb.check-tl-ver-94-2.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://wa.check-tl-ver-94-2.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:59:43 GMT
content-type: text/html
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Xb3lQXViKPhVRDJ%2ByiwCPHXurOGw0Jst26AESJZZlRU5D3izdDE9Qz9d8wDRXuXp3ZlWloKxoWo4T%2BDvH3Qo%2BfkBxVaL4MxKrX5dhmkFSAwY6X4lNYew8nFikczPp6LzRlIJN1J181m2wjs%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87a927a86f11568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| wb.check-tl-ver-94-2.com/space-robot/assets/trls.js | 104.21.33.96 | | 16 kB |
URL wb.check-tl-ver-94-2.com/space-robot/assets/trls.js IP104.21.33.96:0
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (357), with CRLF line terminators Hash7f5c725b2c23b9687fa08d162a17427a 94973f1227871750d2ef13a367ce691f1a062527 c9611ce748d6c7c99d3f374a0b687db2e2428fc5ec9c4e7ae71b2e4305ac60e3
GET /space-robot/assets/trls.js HTTP/1.1
Host: wb.check-tl-ver-94-2.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://wb.check-tl-ver-94-2.com/space-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=space-robot&click_id=e5c53pmqnh98plp47e&sub_id=17154615&nrid=e94bdec004ef4a49a14064b067a05785&hash=as5yObg-2mIUl07-4e6qOA&exp=1714161882
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:59:43 GMT
content-type: application/javascript
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
etag: W/"6627c958-2f4d"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xDEaBHqD%2BS3SrbW6HYpoXMEYU3KXlxHPGHco1DK651EVST9JEUxJkA3FvpUFf7InEoZe41KmaeaAoHA0dyx%2FNJwyJmGRV5rkRQKL0U6fPEY49ahnibP9lp0DBv3s9BxF6warmmEYTyN%2FIAk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a927a8ffc1568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| rqqlj.check-tl-ver-94-2.com/shared-js/assets/static-pl.js?v=2 | 104.21.33.96 | | 2.3 kB |
URL rqqlj.check-tl-ver-94-2.com/shared-js/assets/static-pl.js?v=2 IP104.21.33.96:0
File typeJavaScript source, ASCII text, with CRLF line terminators Hash7224243dd0b18bb2508a1d77d4b2a0b2 bd833c24aa241861316053fd8bd46a1bef3d343f 920aa94a10634fc23234b5e4f55c428f6311fc7811d3591792381678cb492659
GET /shared-js/assets/static-pl.js?v=2 HTTP/1.1
Host: rqqlj.check-tl-ver-94-2.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rqqlj.check-tl-ver-94-2.com/space-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=space-robot&click_id=e5c53pmqnh98plp47e&sub_id=17154615&nrid=e94bdec004ef4a49a14064b067a05785&hash=as5yObg-2mIUl07-4e6qOA&exp=1714161882
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:59:42 GMT
content-type: application/javascript
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
etag: W/"6627c958-dee"
cache-control: max-age=14400
cf-cache-status: HIT
age: 4007
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jXzgRnivcYuc0YZSFBOq%2ByUXUBfaodTkyY4NthK%2FX%2BBia72WbITDkOUsFl7p942%2FKh73lky3x4d3ih13qKMBGU8XK8YDE%2B74X5Pi0%2F8iU%2FhBfLXjaH9VqBmtLlSZQvx0boFD0ZWqY3r5K3DB%2BXQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a927a409c9568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| qb.check-tl-ver-154-1.com/eyes-robot/assets/image.png | 188.114.97.1 | | 11 kB |
URL qb.check-tl-ver-154-1.com/eyes-robot/assets/image.png IP188.114.97.1:0
File typePNG image data, 260 x 260, 8-bit colormap, non-interlaced Hashca1f4de0ad1d4fad72d299a6411e6959 c9f6d409f09264a34ee8bac4265233c56c280d1a f0434a1fc8ffba3a47bbb9f1fa5a2f789651a020e7b86e507ff300b7c367057f
GET /eyes-robot/assets/image.png HTTP/1.1
Host: qb.check-tl-ver-154-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://qb.check-tl-ver-154-1.com/eyes-robot/assets/style.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:59:49 GMT
content-type: image/png
content-length: 11043
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
etag: "6627c958-2b23"
cache-control: max-age=14400
cf-cache-status: HIT
age: 4579
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7xV3YZdJNCCmdlkE2OuqtWXrsp5Vs9R1T4%2ByeH0BY1niQqVA2LxPTP%2B7sQzYSR0BRP8%2BK8awmZEaV2du9kBugRUc7Lvy4gpfOe4sdR8LIR%2B8iSy96Z3Uz8IPaFlh3HPYJybucL8pxFJNZAaL"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a927cf09a5b52d-OSL
alt-svc: h3=":443"; ma=86400
|
|
| qb.check-tl-ver-154-1.com/favicon.ico | 188.114.97.1 | | 0 B |
URL qb.check-tl-ver-154-1.com/favicon.ico IP188.114.97.1:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1
Host: qb.check-tl-ver-154-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://qb.check-tl-ver-154-1.com/eyes-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&click_id=79c7bpmqnh9xoejd46&sub_id=17136824&nrid=ed6e06db888944498357b77d77127fff&hash=LgGsEDsTY7zfhIPnB9oTiQ&exp=1714161888
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 204 No Content
date: Fri, 26 Apr 2024 19:59:49 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 4579
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=KAl3ztXdDwh6R%2BjMMFfUHQqkrlKJVvAEpCS95M%2Bgws12j6%2FMxSc0KHjv453FfKoMfUfJk7aPa%2FpQPXE8bCYEDyvG7jhpUXLSJueKRd%2FC0y1gjD%2BXd9eW2EN%2FmZDtfu2351dk%2F%2Bk7hexN5hdB"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a927cf6a59b52d-OSL
alt-svc: h3=":443"; ma=86400
|
|
| www.gstatic.com/firebasejs/10.3.1/firebase-app-compat.js | 142.250.74.35 | | 9.3 kB |
URL www.gstatic.com/firebasejs/10.3.1/firebase-app-compat.js IP142.250.74.35:0
File typeJavaScript source, ASCII text, with very long lines (28368) Hash9900403b65514fad7df39a4e788a6e45 75f9ba061ef4e72bb23528c700f2a11c56d637e9 a202b2051ea9810cd9ba592b3f9418a89e2062f5c185e29e288080b28eb64fe5
GET /firebasejs/10.3.1/firebase-app-compat.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://qb.check-tl-ver-154-1.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/firebase-js
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="firebase-js"
report-to: {"group":"firebase-js","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/firebase-js"}]}
content-length: 9308
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 26 Apr 2024 06:13:11 GMT
expires: Sat, 26 Apr 2025 06:13:11 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 31 Aug 2023 15:20:38 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 49598
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.gstatic.com/firebasejs/10.3.1/firebase-messaging-compat.js | 142.250.74.35 | | 9.9 kB |
URL www.gstatic.com/firebasejs/10.3.1/firebase-messaging-compat.js IP142.250.74.35:0
File typeJavaScript source, ASCII text, with very long lines (38231) Hash0541b823dfaf39162ef84cf075c9951b e0934726455558cc1a59823efada9651e33aafaa 21f1d62f222007068c793f0947d98f4ccb7c1595adb68efeb783390fdd8b5522
GET /firebasejs/10.3.1/firebase-messaging-compat.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://qb.check-tl-ver-154-1.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/firebase-js
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="firebase-js"
report-to: {"group":"firebase-js","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/firebase-js"}]}
content-length: 9934
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 25 Apr 2024 02:47:22 GMT
expires: Fri, 25 Apr 2025 02:47:22 GMT
cache-control: public, max-age=31536000
age: 148347
last-modified: Thu, 31 Aug 2023 15:20:50 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| rqqlj.check-tl-ver-94-2.com/space-robot/assets/main.js?v=3 | 104.21.33.96 | | 3.3 kB |
URL rqqlj.check-tl-ver-94-2.com/space-robot/assets/main.js?v=3 IP104.21.33.96:0
File typeJavaScript source, ASCII text, with very long lines (2745) Hash01c51ed0a287b5ddf6793778cfa3a72c ebd2613cd806b8e080f556b0d254c0f7a6c738a9 4c0224d810d4f0ac617ddd4ab215e0084aeec230d8944780a129c0046de2dad5
GET /space-robot/assets/main.js?v=3 HTTP/1.1
Host: rqqlj.check-tl-ver-94-2.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rqqlj.check-tl-ver-94-2.com/space-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=space-robot&click_id=e5c53pmqnh98plp47e&sub_id=17154615&nrid=e94bdec004ef4a49a14064b067a05785&hash=as5yObg-2mIUl07-4e6qOA&exp=1714161882
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:59:42 GMT
content-type: application/javascript
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
etag: W/"6627c958-1255"
cache-control: max-age=14400
cf-cache-status: HIT
age: 5038
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Rjcw3JBPTngPu%2BVR4kgNiWZpVgjTRA%2B5pH0WIem9eB9ut0hJ2FQnR%2Fl8ENhj49Q2W%2BeKB39A%2FsJMZy0jSv2UJdubTg5PKyyBp7Rdlt%2FI92LxvsLUhlZeb1K4Zw0KGFnEf%2FY%2Fj3C3FOfpHYWiwXI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a927a3f9c3568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| www.profitablegatecpm.com/api/users?token=L2tkaDh2emo1P2tleT04YjExMDc0NzA3MDIxZTkyMWUwMzQ2NmNjNDQxZTRhMSZwc3Q9MTcxNDE2MTY0OSZybXRjPXQmc2h1PWRhMWZlNTk3NjYzYzUyOTQ0ZDk1YTAyZGFlNzQ5YjQzOTJmZWY0YjljNzMwYzZiY2YwZjU3ZWY0OGYwY2JhYTE2MmUzY2I2MGU4ZjZmYThmMWZjYzE5MTg0M2E0M2NmMWNmMzExZDJjOTVjYzNmOTYxMGFjNzM2MWJiYzkxMzUxM2JjZjg5OGNhNGQwM2VlZDBkNDRkMTAxZGNkOWI2MzYyMDM5ZjlkYmI1YTQ0MjliZmJmMmEwNWYyMmQyOWVjZDY2&uuid=&pii=&in=false | 172.240.127.234 | | 0 B |
URL www.profitablegatecpm.com/api/users?token=L2tkaDh2emo1P2tleT04YjExMDc0NzA3MDIxZTkyMWUwMzQ2NmNjNDQxZTRhMSZwc3Q9MTcxNDE2MTY0OSZybXRjPXQmc2h1PWRhMWZlNTk3NjYzYzUyOTQ0ZDk1YTAyZGFlNzQ5YjQzOTJmZWY0YjljNzMwYzZiY2YwZjU3ZWY0OGYwY2JhYTE2MmUzY2I2MGU4ZjZmYThmMWZjYzE5MTg0M2E0M2NmMWNmMzExZDJjOTVjYzNmOTYxMGFjNzM2MWJiYzkxMzUxM2JjZjg5OGNhNGQwM2VlZDBkNDRkMTAxZGNkOWI2MzYyMDM5ZjlkYmI1YTQ0MjliZmJmMmEwNWYyMmQyOWVjZDY2&uuid=&pii=&in=false IP172.240.127.234:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /api/users?token=L2tkaDh2emo1P2tleT04YjExMDc0NzA3MDIxZTkyMWUwMzQ2NmNjNDQxZTRhMSZwc3Q9MTcxNDE2MTY0OSZybXRjPXQmc2h1PWRhMWZlNTk3NjYzYzUyOTQ0ZDk1YTAyZGFlNzQ5YjQzOTJmZWY0YjljNzMwYzZiY2YwZjU3ZWY0OGYwY2JhYTE2MmUzY2I2MGU4ZjZmYThmMWZjYzE5MTg0M2E0M2NmMWNmMzExZDJjOTVjYzNmOTYxMGFjNzM2MWJiYzkxMzUxM2JjZjg5OGNhNGQwM2VlZDBkNDRkMTAxZGNkOWI2MzYyMDM5ZjlkYmI1YTQ0MjliZmJmMmEwNWYyMmQyOWVjZDY2&uuid=&pii=&in=false HTTP/1.1
Host: www.profitablegatecpm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.profitablegatecpm.com/api/users?token=L2tkaDh2emo1P2tleT1hOTY5Y2E1YzlhZDI2MTE3NjJmMTFiNzlhNTI2ZTJkMiZzdWJtZXRyaWM9MTcxMzY4MjQ
Cookie: pdhtkv=true; uncs=1; pdhtkv28=true; uncs28=1; u_pl=17136824; ain=eyJhbGciOiJIUzI1NiJ9.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.A-hs6t-ALqez_ye67ir0JBECLHlUOBU2KXOfKE4BRtQ; cjs=t
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Server: nginx/1.21.6
Date: Fri, 26 Apr 2024 19:59:50 GMT
Content-Type: text/html
Content-Length: 0
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Location: https://nylonnickel.xyz/c9b2l0k.php?key=ssh20i85vx88tciu4a4m&SUB_ID_SHORT=3918ce495c23c886a080978b82470fa5&COST_CPC=&PLACEMENT_ID=17136824&CAMPAIGN_ID=1028982&DEVICE_BRAND=Unknown&BROWSER_NAME=Firefox&USER_OS=Linux&USER_CARRIER=Blix%20Solutions&USERAGENT=Mozilla%2F5.0%20%28X11%3B%20Linux%20x86_64%3B%20rv%3A96.0%29%20Gecko%2F20100101%20Firefox%2F96.0&REMOTE_LANGUAGE=11&BANNER_ID=2901049
Set-Cookie: pdhtkv=true; expires=Sat, 27 Apr 2024 19:59:50 GMT
uncs=1; expires=Sat, 27 Apr 2024 19:59:50 GMT
pdhtkv28=true; expires=Sat, 27 Apr 2024 19:59:50 GMT
uncs28=1; expires=Sat, 27 Apr 2024 19:59:50 GMT
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 1c652f8aec60c173d49d9a43006571dd
Strict-Transport-Security: max-age=0; includeSubdomains
|
|
| nylonnickel.xyz/c9b2l0k.php?key=ssh20i85vx88tciu4a4m&SUB_ID_SHORT=3918ce495c23c886a080978b82470fa5&COST_CPC=&PLACEMENT_ID=17136824&CAMPAIGN_ID=1028982&DEVICE_BRAND=Unknown&BROWSER_NAME=Firefox&USER_OS=Linux&USER_CARRIER=Blix%20Solutions&USERAGENT=Mozilla%2F5.0%20%28X11%3B%20Linux%20x86_64%3B%20rv%3A96.0%29%20Gecko%2F20100101%20Firefox%2F96.0&REMOTE_LANGUAGE=11&BANNER_ID=2901049 | 192.64.81.118 | | 0 B |
URL nylonnickel.xyz/c9b2l0k.php?key=ssh20i85vx88tciu4a4m&SUB_ID_SHORT=3918ce495c23c886a080978b82470fa5&COST_CPC=&PLACEMENT_ID=17136824&CAMPAIGN_ID=1028982&DEVICE_BRAND=Unknown&BROWSER_NAME=Firefox&USER_OS=Linux&USER_CARRIER=Blix%20Solutions&USERAGENT=Mozilla%2F5.0%20%28X11%3B%20Linux%20x86_64%3B%20rv%3A96.0%29%20Gecko%2F20100101%20Firefox%2F96.0&REMOTE_LANGUAGE=11&BANNER_ID=2901049 IP192.64.81.118:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /c9b2l0k.php?key=ssh20i85vx88tciu4a4m&SUB_ID_SHORT=3918ce495c23c886a080978b82470fa5&COST_CPC=&PLACEMENT_ID=17136824&CAMPAIGN_ID=1028982&DEVICE_BRAND=Unknown&BROWSER_NAME=Firefox&USER_OS=Linux&USER_CARRIER=Blix%20Solutions&USERAGENT=Mozilla%2F5.0%20%28X11%3B%20Linux%20x86_64%3B%20rv%3A96.0%29%20Gecko%2F20100101%20Firefox%2F96.0&REMOTE_LANGUAGE=11&BANNER_ID=2901049 HTTP/1.1
Host: nylonnickel.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.profitablegatecpm.com/
DNT: 1
Connection: keep-alive
Cookie: uclick=pmqnh98plp; uclickhash=pmqnh98plp-pmqnh9xoej-xr46-0-usgm6o-9rib8n-9ribwj-bdeab3
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Server: nginx/1.22.0
Date: Fri, 26 Apr 2024 19:59:50 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: uclick=pmqnh98plp; expires=Sat, 27-Apr-2024 19:59:50 GMT; Max-Age=86400; path=/; secure; SameSite=none
uclickhash=pmqnh98plp-pmqnh9k2j6-xr46-0-usgm6o-9rib8n-9ribwj-50333f; expires=Sat, 27-Apr-2024 19:59:50 GMT; Max-Age=86400; path=/; secure; SameSite=none
Location: https://rqqlj.canopusacrux.com/?pl=4l9EZwXc2kSH_LKKjogwWA&click_id=9320dpmqnh9k2j662b&sub_id=17136824
Strict-Transport-Security: max-age=31536000
|
|
| rqqlj.canopusacrux.com/?pl=4l9EZwXc2kSH_LKKjogwWA&click_id=9320dpmqnh9k2j662b&sub_id=17136824 | 188.114.96.1 | | 0 B |
URL rqqlj.canopusacrux.com/?pl=4l9EZwXc2kSH_LKKjogwWA&click_id=9320dpmqnh9k2j662b&sub_id=17136824 IP188.114.96.1:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /?pl=4l9EZwXc2kSH_LKKjogwWA&click_id=9320dpmqnh9k2j662b&sub_id=17136824 HTTP/1.1
Host: rqqlj.canopusacrux.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.profitablegatecpm.com/
DNT: 1
Connection: keep-alive
Cookie: 4l9EZwXc2kSH_LKKjogwWA=1%2C3%2C5; __pl=7b0cedb7-6011-4ef6-b6e5-14fb3b89903d; __cap=3
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 302 Found
date: Fri, 26 Apr 2024 19:59:50 GMT
content-length: 0
location: https://rqqlj.check-tl-ver-94-1.com/space-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=space-robot&click_id=9320dpmqnh9k2j662b&sub_id=17136824&nrid=01609b32c253432683bb62f4387e6d20&hash=PZmjLYGDSCBisxBtOUPf6g&exp=1714161890
set-cookie: 4l9EZwXc2kSH_LKKjogwWA=1; max-age=345600; path=/; samesite=lax
__pl=7b0cedb7-6011-4ef6-b6e5-14fb3b89903d; expires=Sun, 26 Apr 2026 19:59:50 GMT; path=/; samesite=lax
__cap=4; max-age=3600; path=/; samesite=lax
cache-control: max-age=0, no-cache, no-store, must-revalidate
accept-ch: Sec-CH-UA, Sec-CH-UA-Platform, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xFu5TpBx545kdJLc%2BM8SAB41lSF8VodnHmiYqeHKF4CuG73dlqk2LbzjTiHGPfDwiCpnZwQRbwrIvCtnLXhhL%2BKEvkQHFOdTziCHbntnC59XS%2FPBkJuXtDPiedSSLrUY2okANtWzH2XH"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87a927d6ad8056b7-OSL
alt-svc: h3=":443"; ma=86400
|
|
| rqqlj.check-tl-ver-94-1.com/space-robot/assets/corner.png | 188.114.96.1 | | 300 B |
URL rqqlj.check-tl-ver-94-1.com/space-robot/assets/corner.png IP188.114.96.1:0
File typePNG image data, 44 x 44, 8-bit colormap, non-interlaced Hashf66c38fa2cd7c50bd1989d41da28fb80 e1de333eca72647f3c1831083fe678cfa8fe9eab 3059be4046e0315ad1c0d1cb163d9daaf759bdf16e906e908842fac07e5608a2
GET /space-robot/assets/corner.png HTTP/1.1
Host: rqqlj.check-tl-ver-94-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rqqlj.check-tl-ver-94-1.com/space-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=space-robot&click_id=9320dpmqnh9k2j662b&sub_id=17136824&nrid=01609b32c253432683bb62f4387e6d20&hash=PZmjLYGDSCBisxBtOUPf6g&exp=1714161890
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:59:51 GMT
content-type: image/png
content-length: 300
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
etag: "6627c958-12c"
cache-control: max-age=14400
cf-cache-status: HIT
age: 3353
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4bpFkaMuFb3t4Tj7rXNqtLojvk%2BxZU4s%2B015fDtgmn5TWPvkpLLLU3HDqCi%2FmzvGeMCvBx8mqmxPtnJ42pfhzy1KGaXw3%2F%2BOGqpSh0UPJ9SzGaman%2FaFFkUsI4MyyzX7HnTyeGUa83wWrbgAZ8w%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a927d88ceb0b31-OSL
alt-svc: h3=":443"; ma=86400
|
|
| fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 | 216.58.207.227 | | 16 kB |
URL fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 IP216.58.207.227:0
File typeWeb Open Font Format (Version 2), TrueType, length 15552, version 1.0 Hash285467176f7fe6bb6a9c6873b3dad2cc ea04e4ff5142ddd69307c183def721a160e0a64e 5a8c1e7681318caa29e9f44e8a6e271f6a4067a2703e9916dfd4fe9099241db7
GET /s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://rqqlj.check-tl-ver-94-1.com
DNT: 1
Connection: keep-alive
Referer: https://rqqlj.check-tl-ver-94-1.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15552
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 25 Apr 2024 17:25:07 GMT
expires: Fri, 25 Apr 2025 17:25:07 GMT
cache-control: public, max-age=31536000
age: 95684
last-modified: Mon, 16 Oct 2017 17:33:02 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| rqqlj.check-tl-ver-94-1.com/space-robot/assets/favicon-16x16.png | 188.114.96.1 | | 1.2 kB |
URL rqqlj.check-tl-ver-94-1.com/space-robot/assets/favicon-16x16.png IP188.114.96.1:0
File typePNG image data, 16 x 16, 8-bit colormap, non-interlaced Hash9d35b617fd258f648c37812252297dd3 7e32fd007f1c6fe1466d15439173082c0fbe82da e8a768f8122da75777dc64b6d35e756a1848c4f330f293920c18480df085000a
GET /space-robot/assets/favicon-16x16.png HTTP/1.1
Host: rqqlj.check-tl-ver-94-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rqqlj.check-tl-ver-94-1.com/space-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=space-robot&click_id=9320dpmqnh9k2j662b&sub_id=17136824&nrid=01609b32c253432683bb62f4387e6d20&hash=PZmjLYGDSCBisxBtOUPf6g&exp=1714161890
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:59:51 GMT
content-type: image/png
content-length: 1163
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
etag: "6627c958-48b"
cache-control: max-age=14400
cf-cache-status: HIT
age: 4430
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0jGATXsvbPZ6%2FONpTAcq74jPtvdHZ%2F4wVpieCzZjSDls%2FZpGmeD2ABoXwXhQzB%2FCUbFv2K77UPv4wVZuuseBbNT48nB26%2BVB1767vT5OXnXjgw9ZQgGbFZlnvXnsD2kw19ED8v2vacHfWRhPGxM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a927d99e190b31-OSL
alt-svc: h3=":443"; ma=86400
|
|
| rqqlj.check-tl-ver-154-1.com/blue-robot/assets/trls.js | 188.114.97.1 | | 38 kB |
URL rqqlj.check-tl-ver-154-1.com/blue-robot/assets/trls.js IP188.114.97.1:0
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (362), with CRLF line terminators Hasha1172576cb7f22b41247c5571d2f6d9e 8ede5adfb13a76a2d04dfa26ccdf5a15d2abd18c 2c0b0f46a0c12f49cc290e1b3d62a890e8da3434dc80720e3c5a20bec0ab43e1
GET /blue-robot/assets/trls.js HTTP/1.1
Host: rqqlj.check-tl-ver-154-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rqqlj.check-tl-ver-154-1.com/blue-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=blue-robot&click_id=39d70pmqnh9xo8r0a3&sub_id=17136824&nrid=6a4cfbf0673e40d796b025bf27880852&hash=TJxFABSBu6uwW6htJKZ2Jw&exp=1714161885
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:59:45 GMT
content-type: application/javascript
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
etag: W/"6627c958-1fa7"
cache-control: max-age=14400
cf-cache-status: HIT
age: 3295
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=eKvuwOOBIaT62cCT4OJZI2YEcJ2bToxM3%2FNc0nbdij1i2dpvr5qUukfDrMdmEe2u1rVB2NzV2mfiWBVRZNIvNEUS1WPPx1ia7dq7iSvew1NVK4aCahmqBxEVmYrc8w8fZ9IVmOWIV4ouj1tXTxB1"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a927b67c37b52d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| rqqlj.check-tl-ver-94-1.com/space-robot/assets/main.js?v=3 | 188.114.96.1 | | 10 kB |
URL rqqlj.check-tl-ver-94-1.com/space-robot/assets/main.js?v=3 IP188.114.96.1:0
File typeJavaScript source, ASCII text, with very long lines (2745) Hash01c51ed0a287b5ddf6793778cfa3a72c ebd2613cd806b8e080f556b0d254c0f7a6c738a9 4c0224d810d4f0ac617ddd4ab215e0084aeec230d8944780a129c0046de2dad5
GET /space-robot/assets/main.js?v=3 HTTP/1.1
Host: rqqlj.check-tl-ver-94-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rqqlj.check-tl-ver-94-1.com/space-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=space-robot&click_id=9320dpmqnh9k2j662b&sub_id=17136824&nrid=01609b32c253432683bb62f4387e6d20&hash=PZmjLYGDSCBisxBtOUPf6g&exp=1714161890
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:59:51 GMT
content-type: application/javascript
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
etag: W/"6627c958-1255"
cache-control: max-age=14400
cf-cache-status: HIT
age: 3353
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bx2f%2F16QUDWLPtMTuozPqlGKHGYEkKHYbYlbsJ84PC2KbkuyzcKuyAnpVYXsQ0cMYf%2F8DcG%2B0u0%2BmHV40frlzIwW66uATgsjpKEV2vtKboElRezxDxwWsZC%2B5UgMbahFXSaWXGcvxEQQoYby3QA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a927d88cec0b31-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| www.gstatic.com/firebasejs/10.3.1/firebase-messaging-compat.js | 142.250.74.35 | | 9.9 kB |
URL www.gstatic.com/firebasejs/10.3.1/firebase-messaging-compat.js IP142.250.74.35:0
File typeJavaScript source, ASCII text, with very long lines (38231) Hash0541b823dfaf39162ef84cf075c9951b e0934726455558cc1a59823efada9651e33aafaa 21f1d62f222007068c793f0947d98f4ccb7c1595adb68efeb783390fdd8b5522
GET /firebasejs/10.3.1/firebase-messaging-compat.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rqqlj.check-tl-ver-94-1.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/firebase-js
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="firebase-js"
report-to: {"group":"firebase-js","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/firebase-js"}]}
content-length: 9934
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 25 Apr 2024 02:47:22 GMT
expires: Fri, 25 Apr 2025 02:47:22 GMT
cache-control: public, max-age=31536000
age: 148349
last-modified: Thu, 31 Aug 2023 15:20:50 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Early-Data: accepted
|
|
| da.check-tl-ver-94-1.com/space-robot/assets/corner.png | 188.114.96.1 | | 300 B |
URL da.check-tl-ver-94-1.com/space-robot/assets/corner.png IP188.114.96.1:0
File typePNG image data, 44 x 44, 8-bit colormap, non-interlaced Hashf66c38fa2cd7c50bd1989d41da28fb80 e1de333eca72647f3c1831083fe678cfa8fe9eab 3059be4046e0315ad1c0d1cb163d9daaf759bdf16e906e908842fac07e5608a2
GET /space-robot/assets/corner.png HTTP/1.1
Host: da.check-tl-ver-94-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://da.check-tl-ver-94-1.com/space-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=space-robot&click_id=9320dpmqnh9k2j662b&sub_id=17136824&nrid=01609b32c253432683bb62f4387e6d20&hash=PZmjLYGDSCBisxBtOUPf6g&exp=1714161890
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:59:51 GMT
content-type: image/png
content-length: 300
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
etag: "6627c958-12c"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=UzoF1wyLASx5L0%2FzYso4PlB13IvkC%2BpXmYgiwFdkr6a3Cb5Ok9BvxxEw7QqexYPXzVxqhN1zkG8ICsDptyfXhcTzSwADj8JHRwMmp06omG3SJiA1o%2FZ9vOElBElKNVkekHqg1UZu2Asy2Jc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a927dbc85e0b31-OSL
alt-svc: h3=":443"; ma=86400
|
|
| fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 | 216.58.207.227 | | 16 kB |
URL fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 IP216.58.207.227:0
File typeWeb Open Font Format (Version 2), TrueType, length 15552, version 1.0 Hash285467176f7fe6bb6a9c6873b3dad2cc ea04e4ff5142ddd69307c183def721a160e0a64e 5a8c1e7681318caa29e9f44e8a6e271f6a4067a2703e9916dfd4fe9099241db7
GET /s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://da.check-tl-ver-94-1.com
DNT: 1
Connection: keep-alive
Referer: https://da.check-tl-ver-94-1.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15552
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 25 Apr 2024 17:25:07 GMT
expires: Fri, 25 Apr 2025 17:25:07 GMT
cache-control: public, max-age=31536000
age: 95684
last-modified: Mon, 16 Oct 2017 17:33:02 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| da.check-tl-ver-94-1.com/space-robot/assets/apple-touch-icon.png | 188.114.96.1 | | 23 kB |
URL da.check-tl-ver-94-1.com/space-robot/assets/apple-touch-icon.png IP188.114.96.1:0
File typePNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced Hashf500ba7eee0ae7d1ceb44236ac253165 0614de220ecadb48038ed894d91120ba102c8367 ba5a3083c38d71a2191ee7e614a96812d1f9d88bbfb360d3b61dbb1ffcd51de5
GET /space-robot/assets/apple-touch-icon.png HTTP/1.1
Host: da.check-tl-ver-94-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://da.check-tl-ver-94-1.com/space-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=space-robot&click_id=9320dpmqnh9k2j662b&sub_id=17136824&nrid=01609b32c253432683bb62f4387e6d20&hash=PZmjLYGDSCBisxBtOUPf6g&exp=1714161890
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:59:51 GMT
content-type: image/png
content-length: 23177
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
etag: "6627c958-5a89"
cache-control: max-age=14400
cf-cache-status: HIT
age: 1765
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rNVsOtk%2BU5qnThn5oCRIPxY6PpLpfuFC4AT0dETGR3mbC5JVVyzmRhO7diTJWKCRX2%2B0kzX1Ay%2F16kLFpl78%2Bz7F8Xak6LOFn8kvuxF7B%2BcMNePX3aN3ca2%2FqVDlwupl3WbETpl3JCmP4c8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a927dcb9530b31-OSL
alt-svc: h3=":443"; ma=86400
|
|
| da.check-tl-ver-94-1.com/space-robot/assets/favicon-16x16.png | 188.114.96.1 | | 1.2 kB |
URL da.check-tl-ver-94-1.com/space-robot/assets/favicon-16x16.png IP188.114.96.1:0
File typePNG image data, 16 x 16, 8-bit colormap, non-interlaced Hash9d35b617fd258f648c37812252297dd3 7e32fd007f1c6fe1466d15439173082c0fbe82da e8a768f8122da75777dc64b6d35e756a1848c4f330f293920c18480df085000a
GET /space-robot/assets/favicon-16x16.png HTTP/1.1
Host: da.check-tl-ver-94-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://da.check-tl-ver-94-1.com/space-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=space-robot&click_id=9320dpmqnh9k2j662b&sub_id=17136824&nrid=01609b32c253432683bb62f4387e6d20&hash=PZmjLYGDSCBisxBtOUPf6g&exp=1714161890
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:59:51 GMT
content-type: image/png
content-length: 1163
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
etag: "6627c958-48b"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wcq3Eit6p%2FXsm20nCEHhSEdpp0nplY013L3fg91g24Eb9SeaGmaTIekC%2F3bOyVpN7b%2Fg6WYPd0nrjbv%2FsAcBcSUBYEysFQr4eKfwqwfLIffVufR6rranBI2v%2BrxSNzL6Z9FKWwCD7UrQjeQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a927dcb9540b31-OSL
alt-svc: h3=":443"; ma=86400
|
|
| www.gstatic.com/firebasejs/10.3.1/firebase-app-compat.js | 142.250.74.35 | | 9.3 kB |
URL www.gstatic.com/firebasejs/10.3.1/firebase-app-compat.js IP142.250.74.35:0
File typeJavaScript source, ASCII text, with very long lines (28368) Hash9900403b65514fad7df39a4e788a6e45 75f9ba061ef4e72bb23528c700f2a11c56d637e9 a202b2051ea9810cd9ba592b3f9418a89e2062f5c185e29e288080b28eb64fe5
GET /firebasejs/10.3.1/firebase-app-compat.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://da.check-tl-ver-94-1.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/firebase-js
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="firebase-js"
report-to: {"group":"firebase-js","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/firebase-js"}]}
content-length: 9308
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 26 Apr 2024 06:13:11 GMT
expires: Sat, 26 Apr 2025 06:13:11 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 31 Aug 2023 15:20:38 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 49600
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.gstatic.com/firebasejs/10.3.1/firebase-messaging-compat.js | 142.250.74.35 | | 9.9 kB |
URL www.gstatic.com/firebasejs/10.3.1/firebase-messaging-compat.js IP142.250.74.35:0
File typeJavaScript source, ASCII text, with very long lines (38231) Hash0541b823dfaf39162ef84cf075c9951b e0934726455558cc1a59823efada9651e33aafaa 21f1d62f222007068c793f0947d98f4ccb7c1595adb68efeb783390fdd8b5522
GET /firebasejs/10.3.1/firebase-messaging-compat.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://da.check-tl-ver-94-1.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/firebase-js
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="firebase-js"
report-to: {"group":"firebase-js","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/firebase-js"}]}
content-length: 9934
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 25 Apr 2024 02:47:22 GMT
expires: Fri, 25 Apr 2025 02:47:22 GMT
cache-control: public, max-age=31536000
age: 148349
last-modified: Thu, 31 Aug 2023 15:20:50 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| db.check-tl-ver-94-1.com/space-robot/assets/corner.png | 188.114.96.1 | | 300 B |
URL db.check-tl-ver-94-1.com/space-robot/assets/corner.png IP188.114.96.1:0
File typePNG image data, 44 x 44, 8-bit colormap, non-interlaced Hashf66c38fa2cd7c50bd1989d41da28fb80 e1de333eca72647f3c1831083fe678cfa8fe9eab 3059be4046e0315ad1c0d1cb163d9daaf759bdf16e906e908842fac07e5608a2
GET /space-robot/assets/corner.png HTTP/1.1
Host: db.check-tl-ver-94-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://db.check-tl-ver-94-1.com/space-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=space-robot&click_id=9320dpmqnh9k2j662b&sub_id=17136824&nrid=01609b32c253432683bb62f4387e6d20&hash=PZmjLYGDSCBisxBtOUPf6g&exp=1714161890
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:59:52 GMT
content-type: image/png
content-length: 300
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
etag: "6627c958-12c"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=u52OG7caEjDRH3EL4NV2GV%2B9Zk8h8TIg%2F%2FVkuw0FvTStq3SRPKHiM%2BJdSwK%2FD2pgUJ%2FSzzXP0GS0ccC5qABWX%2FJ0HUbBJLuOMf3nFlRb0m3t3Yz3iQZrR37b4AJbJGP6zhIEtZ7UatforPU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a927de1ab40b31-OSL
alt-svc: h3=":443"; ma=86400
|
|
| fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 | 216.58.207.227 | | 16 kB |
URL fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 IP216.58.207.227:0
File typeWeb Open Font Format (Version 2), TrueType, length 15552, version 1.0 Hash285467176f7fe6bb6a9c6873b3dad2cc ea04e4ff5142ddd69307c183def721a160e0a64e 5a8c1e7681318caa29e9f44e8a6e271f6a4067a2703e9916dfd4fe9099241db7
GET /s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://db.check-tl-ver-94-1.com
DNT: 1
Connection: keep-alive
Referer: https://db.check-tl-ver-94-1.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15552
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 25 Apr 2024 17:25:07 GMT
expires: Fri, 25 Apr 2025 17:25:07 GMT
cache-control: public, max-age=31536000
age: 95685
last-modified: Mon, 16 Oct 2017 17:33:02 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| ta.check-tl-ver-154-1.com/shared-js/assets/static-pl.js?v=2 | 188.114.97.1 | | 16 kB |
URL ta.check-tl-ver-154-1.com/shared-js/assets/static-pl.js?v=2 IP188.114.97.1:0
File typeJavaScript source, ASCII text, with CRLF line terminators Hash7224243dd0b18bb2508a1d77d4b2a0b2 bd833c24aa241861316053fd8bd46a1bef3d343f 920aa94a10634fc23234b5e4f55c428f6311fc7811d3591792381678cb492659
GET /shared-js/assets/static-pl.js?v=2 HTTP/1.1
Host: ta.check-tl-ver-154-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ta.check-tl-ver-154-1.com/blue-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=blue-robot&click_id=39d70pmqnh9xo8r0a3&sub_id=17136824&nrid=6a4cfbf0673e40d796b025bf27880852&hash=TJxFABSBu6uwW6htJKZ2Jw&exp=1714161885
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:59:46 GMT
content-type: application/javascript
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
etag: W/"6627c958-dee"
cache-control: max-age=14400
cf-cache-status: HIT
age: 5726
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Dz5q1u2Nxja3rAZngMZ2ws8NZNazrlcd5hbCxQ7FpYB5JWu%2FaPz8u3lfDTwL9G6H5l0t4EhGmRr28dbT%2Fz48qOotGmHmp83cJFsDJiabUN4yumr5uiDWQfY2%2FoHcd0ZFJqIiBHmMUPrTOUiF"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a927b9881bb52d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| rqqlj.check-tl-ver-154-1.com/shared-js/assets/static-pl.js?v=2 | 188.114.97.1 | | 25 kB |
URL rqqlj.check-tl-ver-154-1.com/shared-js/assets/static-pl.js?v=2 IP188.114.97.1:0
File typeJavaScript source, ASCII text, with CRLF line terminators Hash7224243dd0b18bb2508a1d77d4b2a0b2 bd833c24aa241861316053fd8bd46a1bef3d343f 920aa94a10634fc23234b5e4f55c428f6311fc7811d3591792381678cb492659
GET /shared-js/assets/static-pl.js?v=2 HTTP/1.1
Host: rqqlj.check-tl-ver-154-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rqqlj.check-tl-ver-154-1.com/blue-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=blue-robot&click_id=39d70pmqnh9xo8r0a3&sub_id=17136824&nrid=6a4cfbf0673e40d796b025bf27880852&hash=TJxFABSBu6uwW6htJKZ2Jw&exp=1714161885
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:59:45 GMT
content-type: application/javascript
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
etag: W/"6627c958-dee"
cache-control: max-age=14400
cf-cache-status: HIT
age: 3939
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=N%2F5IFTnE9RDf5K2%2Boflg%2BNIF7tcYgnz9PXl61PfmT13WFEVFhfm5hInazP%2BDPhYedQgyt%2Fy15gZZJd9qpgBceEXDufgILOPkmqSPT27ed7g4s%2Fy%2FTRYKWVYYgXYqu8JZpaM%2FxNmRI9Ncbfdu9miM"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a927b68c43b52d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| www.gstatic.com/firebasejs/10.3.1/firebase-app-compat.js | 142.250.74.35 | | 9.3 kB |
URL www.gstatic.com/firebasejs/10.3.1/firebase-app-compat.js IP142.250.74.35:0
File typeJavaScript source, ASCII text, with very long lines (28368) Hash9900403b65514fad7df39a4e788a6e45 75f9ba061ef4e72bb23528c700f2a11c56d637e9 a202b2051ea9810cd9ba592b3f9418a89e2062f5c185e29e288080b28eb64fe5
GET /firebasejs/10.3.1/firebase-app-compat.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://db.check-tl-ver-94-1.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/firebase-js
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="firebase-js"
report-to: {"group":"firebase-js","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/firebase-js"}]}
content-length: 9308
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 26 Apr 2024 06:13:11 GMT
expires: Sat, 26 Apr 2025 06:13:11 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 31 Aug 2023 15:20:38 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 49601
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.gstatic.com/firebasejs/10.3.1/firebase-messaging-compat.js | 142.250.74.35 | | 9.9 kB |
URL www.gstatic.com/firebasejs/10.3.1/firebase-messaging-compat.js IP142.250.74.35:0
File typeJavaScript source, ASCII text, with very long lines (38231) Hash0541b823dfaf39162ef84cf075c9951b e0934726455558cc1a59823efada9651e33aafaa 21f1d62f222007068c793f0947d98f4ccb7c1595adb68efeb783390fdd8b5522
GET /firebasejs/10.3.1/firebase-messaging-compat.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://db.check-tl-ver-94-1.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/firebase-js
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="firebase-js"
report-to: {"group":"firebase-js","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/firebase-js"}]}
content-length: 9934
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 25 Apr 2024 02:47:22 GMT
expires: Fri, 25 Apr 2025 02:47:22 GMT
cache-control: public, max-age=31536000
age: 148350
last-modified: Thu, 31 Aug 2023 15:20:50 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.profitablegatecpm.com/kdh8vzj5?key=8b11074707021e921e03466cc441e4a1 | 172.240.127.234 | | 1.3 kB |
URL www.profitablegatecpm.com/kdh8vzj5?key=8b11074707021e921e03466cc441e4a1 IP172.240.127.234:0
File typeHTML document, ASCII text, with very long lines (412) Hasha2c096fe31edef4c112691c5d69bb336 8e47603f1f825ccfd987f26582e365e8f360f129 45a1645dd1c23eb232f0ea53850a0fac5fb70f4cdd3f4bcd482c9d9a62dc227b
GET /kdh8vzj5?key=8b11074707021e921e03466cc441e4a1 HTTP/1.1
Host: www.profitablegatecpm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: u_pl=17136824; ain=eyJhbGciOiJIUzI1NiJ9.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.A-hs6t-ALqez_ye67ir0JBECLHlUOBU2KXOfKE4BRtQ; cjs=t
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Fri, 26 Apr 2024 19:59:52 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Set-Cookie: ain=eyJhbGciOiJIUzI1NiJ9.eyJwIjp7ImlkIjoxNzEzNjgyNCwiayI6IjhiMTEwNzQ3MDcwMjFlOTIxZTAzNDY2Y2M0NDFlNGExIiwic2lkIjoiIiwiaXNpZCI6MiwiYXNpZCI6MSwiemlkIjoxODAyNTQyLCJwaWQiOjQyNzY1NywiYW4iOnRydWUsImxhbiI6dHJ1ZSwiY2lkIjozMSwiYWlkIjoyOCwicHQiOjQsInBrIjoia2RoOHZ6ajUiLCJ0IjoxfSwidSI6eyJ1IjoxLCJhdSI6MSwiZCI6eyJpZCI6Nzk5NTQxOTYsImlkcyI6IiIsImljIjpmYWxzZSwibiI6IkRlc2t0b3AsRW11bGF0b3IiLCJ2IjoiVW5rbm93biIsIm0iOiJVbmtub3duIiwiZiI6MSwiZm4iOiJEZXNrdG9wIiwib2lkIjoxODExMCwib24iOiJMaW51eCIsIm92IjoiVW5rbm93biIsImJpZCI6MTE2NjcwLCJibiI6IkZpcmVmb3giLCJidiI6Ijk2LjAiLCJ3diI6ZmFsc2UsImUiOmZhbHNlLCJhYiI6ZmFsc2V9LCJjIjp7ImlkIjoxNjIsImMiOiJOTyIsIm4iOiJOb3J3YXkifSwiYSI6ZmFsc2UsImNyIjp7Im4iOiJCbGl4IFNvbHV0aW9ucyJ9LCJ4ZiI6IiIsIml4ZiI6ZmFsc2UsImlneGYiOmZhbHNlLCJ1cCI6ZmFsc2UsInIiOiIiLCJhciI6W119fQ.A-hs6t-ALqez_ye67ir0JBECLHlUOBU2KXOfKE4BRtQ; expires=Fri, 26 Apr 2024 20:00:52 GMT
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 700c8d5707bf1f7bfe4ccede11f2ff08
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
|
|
| www.profitablegatecpm.com/api/users?token=L2tkaDh2emo1P2tleT04YjExMDc0NzA3MDIxZTkyMWUwMzQ2NmNjNDQxZTRhMSZwc3Q9MTcxNDE2MTY1MiZybXRjPXQmc2h1PWZiMTAzN2Q1OTA0NDExY2IzMmE4NWUyOGMzMTQyNzQ2NzNhMDRjOTk1ZTc3ZTcyZmJhM2RjZTk0ZWQxZDg1NDVmZTBlYTc5ZWI3MzUxZDUxMjYzYzJiYmMyYmY5OGJlYzljYWZkZjljNmUyMTYzYTQxY2NkYzcyMzIwOGNiYTJiMzBjNzZiNDNhYWMzZjYzMTAyZTM4OTdiMTc4NGM0ZTc0NjJkOWY5YjdjMjZhMjBhODI4M2E5ZmFkMTVkMmY2MDQy&uuid=&pii=&in=false | 172.240.127.234 | | 0 B |
URL www.profitablegatecpm.com/api/users?token=L2tkaDh2emo1P2tleT04YjExMDc0NzA3MDIxZTkyMWUwMzQ2NmNjNDQxZTRhMSZwc3Q9MTcxNDE2MTY1MiZybXRjPXQmc2h1PWZiMTAzN2Q1OTA0NDExY2IzMmE4NWUyOGMzMTQyNzQ2NzNhMDRjOTk1ZTc3ZTcyZmJhM2RjZTk0ZWQxZDg1NDVmZTBlYTc5ZWI3MzUxZDUxMjYzYzJiYmMyYmY5OGJlYzljYWZkZjljNmUyMTYzYTQxY2NkYzcyMzIwOGNiYTJiMzBjNzZiNDNhYWMzZjYzMTAyZTM4OTdiMTc4NGM0ZTc0NjJkOWY5YjdjMjZhMjBhODI4M2E5ZmFkMTVkMmY2MDQy&uuid=&pii=&in=false IP172.240.127.234:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /api/users?token=L2tkaDh2emo1P2tleT04YjExMDc0NzA3MDIxZTkyMWUwMzQ2NmNjNDQxZTRhMSZwc3Q9MTcxNDE2MTY1MiZybXRjPXQmc2h1PWZiMTAzN2Q1OTA0NDExY2IzMmE4NWUyOGMzMTQyNzQ2NzNhMDRjOTk1ZTc3ZTcyZmJhM2RjZTk0ZWQxZDg1NDVmZTBlYTc5ZWI3MzUxZDUxMjYzYzJiYmMyYmY5OGJlYzljYWZkZjljNmUyMTYzYTQxY2NkYzcyMzIwOGNiYTJiMzBjNzZiNDNhYWMzZjYzMTAyZTM4OTdiMTc4NGM0ZTc0NjJkOWY5YjdjMjZhMjBhODI4M2E5ZmFkMTVkMmY2MDQy&uuid=&pii=&in=false HTTP/1.1
Host: www.profitablegatecpm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.profitablegatecpm.com/api/users?token=L2tkaDh2emo1P2tleT1hOTY5Y2E1YzlhZDI2MTE3NjJmMTFiNzlhNTI2ZTJkMiZzdWJtZXRyaWM9MTcxMzY4MjQ
Cookie: pdhtkv=true; uncs=1; pdhtkv28=true; uncs28=1; u_pl=17136824; ain=eyJhbGciOiJIUzI1NiJ9.eyJwIjp7ImlkIjoxNzEzNjgyNCwiayI6IjhiMTEwNzQ3MDcwMjFlOTIxZTAzNDY2Y2M0NDFlNGExIiwic2lkIjoiIiwiaXNpZCI6MiwiYXNpZCI6MSwiemlkIjoxODAyNTQyLCJwaWQiOjQyNzY1NywiYW4iOnRydWUsImxhbiI6dHJ1ZSwiY2lkIjozMSwiYWlkIjoyOCwicHQiOjQsInBrIjoia2RoOHZ6ajUiLCJ0IjoxfSwidSI6eyJ1IjoxLCJhdSI6MSwiZCI6eyJpZCI6Nzk5NTQxOTYsImlkcyI6IiIsImljIjpmYWxzZSwibiI6IkRlc2t0b3AsRW11bGF0b3IiLCJ2IjoiVW5rbm93biIsIm0iOiJVbmtub3duIiwiZiI6MSwiZm4iOiJEZXNrdG9wIiwib2lkIjoxODExMCwib24iOiJMaW51eCIsIm92IjoiVW5rbm93biIsImJpZCI6MTE2NjcwLCJibiI6IkZpcmVmb3giLCJidiI6Ijk2LjAiLCJ3diI6ZmFsc2UsImUiOmZhbHNlLCJhYiI6ZmFsc2V9LCJjIjp7ImlkIjoxNjIsImMiOiJOTyIsIm4iOiJOb3J3YXkifSwiYSI6ZmFsc2UsImNyIjp7Im4iOiJCbGl4IFNvbHV0aW9ucyJ9LCJ4ZiI6IiIsIml4ZiI6ZmFsc2UsImlneGYiOmZhbHNlLCJ1cCI6ZmFsc2UsInIiOiIiLCJhciI6W119fQ.A-hs6t-ALqez_ye67ir0JBECLHlUOBU2KXOfKE4BRtQ; cjs=t
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Server: nginx/1.21.6
Date: Fri, 26 Apr 2024 19:59:53 GMT
Content-Type: text/html
Content-Length: 0
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Location: https://nylonnickel.xyz/c9b2l0k.php?key=ssh20i85vx88tciu4a4m&SUB_ID_SHORT=3917d74be63b7b7177d070c8925bbb0e&COST_CPC=&PLACEMENT_ID=17136824&CAMPAIGN_ID=1028982&DEVICE_BRAND=Unknown&BROWSER_NAME=Firefox&USER_OS=Linux&USER_CARRIER=Blix%20Solutions&USERAGENT=Mozilla%2F5.0%20%28X11%3B%20Linux%20x86_64%3B%20rv%3A96.0%29%20Gecko%2F20100101%20Firefox%2F96.0&REMOTE_LANGUAGE=11&BANNER_ID=2901049
Set-Cookie: pdhtkv=true; expires=Sat, 27 Apr 2024 19:59:53 GMT
uncs=1; expires=Sat, 27 Apr 2024 19:59:53 GMT
pdhtkv28=true; expires=Sat, 27 Apr 2024 19:59:53 GMT
uncs28=1; expires=Sat, 27 Apr 2024 19:59:53 GMT
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: acda6368f90094690dfde9031b9e7567
Strict-Transport-Security: max-age=0; includeSubdomains
|
|
| nylonnickel.xyz/c9b2l0k.php?key=ssh20i85vx88tciu4a4m&SUB_ID_SHORT=3917d74be63b7b7177d070c8925bbb0e&COST_CPC=&PLACEMENT_ID=17136824&CAMPAIGN_ID=1028982&DEVICE_BRAND=Unknown&BROWSER_NAME=Firefox&USER_OS=Linux&USER_CARRIER=Blix%20Solutions&USERAGENT=Mozilla%2F5.0%20%28X11%3B%20Linux%20x86_64%3B%20rv%3A96.0%29%20Gecko%2F20100101%20Firefox%2F96.0&REMOTE_LANGUAGE=11&BANNER_ID=2901049 | 192.64.81.118 | | 0 B |
URL nylonnickel.xyz/c9b2l0k.php?key=ssh20i85vx88tciu4a4m&SUB_ID_SHORT=3917d74be63b7b7177d070c8925bbb0e&COST_CPC=&PLACEMENT_ID=17136824&CAMPAIGN_ID=1028982&DEVICE_BRAND=Unknown&BROWSER_NAME=Firefox&USER_OS=Linux&USER_CARRIER=Blix%20Solutions&USERAGENT=Mozilla%2F5.0%20%28X11%3B%20Linux%20x86_64%3B%20rv%3A96.0%29%20Gecko%2F20100101%20Firefox%2F96.0&REMOTE_LANGUAGE=11&BANNER_ID=2901049 IP192.64.81.118:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /c9b2l0k.php?key=ssh20i85vx88tciu4a4m&SUB_ID_SHORT=3917d74be63b7b7177d070c8925bbb0e&COST_CPC=&PLACEMENT_ID=17136824&CAMPAIGN_ID=1028982&DEVICE_BRAND=Unknown&BROWSER_NAME=Firefox&USER_OS=Linux&USER_CARRIER=Blix%20Solutions&USERAGENT=Mozilla%2F5.0%20%28X11%3B%20Linux%20x86_64%3B%20rv%3A96.0%29%20Gecko%2F20100101%20Firefox%2F96.0&REMOTE_LANGUAGE=11&BANNER_ID=2901049 HTTP/1.1
Host: nylonnickel.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.profitablegatecpm.com/
DNT: 1
Connection: keep-alive
Cookie: uclick=pmqnh98plp; uclickhash=pmqnh98plp-pmqnh9k2j6-xr46-0-usgm6o-9rib8n-9ribwj-50333f
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Server: nginx/1.22.0
Date: Fri, 26 Apr 2024 19:59:53 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: uclick=pmqnh98plp; expires=Sat, 27-Apr-2024 19:59:53 GMT; Max-Age=86400; path=/; secure; SameSite=none
uclickhash=pmqnh98plp-pmqnh97sy9-xr46-0-usgm6o-9rib8n-9ribwj-669aa3; expires=Sat, 27-Apr-2024 19:59:53 GMT; Max-Age=86400; path=/; secure; SameSite=none
Location: https://rqqlj.canopusacrux.com/?pl=4l9EZwXc2kSH_LKKjogwWA&click_id=b5176pmqnh97sy9383&sub_id=17136824
Strict-Transport-Security: max-age=31536000
|
|
| rqqlj.canopusacrux.com/?pl=4l9EZwXc2kSH_LKKjogwWA&click_id=b5176pmqnh97sy9383&sub_id=17136824 | 188.114.96.1 | | 0 B |
URL rqqlj.canopusacrux.com/?pl=4l9EZwXc2kSH_LKKjogwWA&click_id=b5176pmqnh97sy9383&sub_id=17136824 IP188.114.96.1:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /?pl=4l9EZwXc2kSH_LKKjogwWA&click_id=b5176pmqnh97sy9383&sub_id=17136824 HTTP/1.1
Host: rqqlj.canopusacrux.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.profitablegatecpm.com/
DNT: 1
Connection: keep-alive
Cookie: 4l9EZwXc2kSH_LKKjogwWA=1; __pl=7b0cedb7-6011-4ef6-b6e5-14fb3b89903d; __cap=4
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 302 Found
date: Fri, 26 Apr 2024 19:59:53 GMT
content-length: 0
location: https://rqqlj.check-tl-ver-94-1.com/eyes-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&click_id=b5176pmqnh97sy9383&sub_id=17136824&nrid=0d1830daf4ff480b847baabb4904856b&hash=uIegkRK-kT8MTEn190s45Q&exp=1714161893
set-cookie: 4l9EZwXc2kSH_LKKjogwWA=1%2C5; max-age=345600; path=/; samesite=lax
__pl=7b0cedb7-6011-4ef6-b6e5-14fb3b89903d; expires=Sun, 26 Apr 2026 19:59:53 GMT; path=/; samesite=lax
__cap=5; max-age=3600; path=/; samesite=lax
cache-control: max-age=0, no-cache, no-store, must-revalidate
accept-ch: Sec-CH-UA, Sec-CH-UA-Platform, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=lT3vKXCKv5TgnYDlYuHPuB2nOiInc7HKU99DPWmaguzyBgpAU9ss1sZgw%2BqVhknV5CqVT7VuU%2FBK9%2B5o98ogmpPMrxS8RJlL3%2BNOqjJuPxJ8AYhrTn9GmlxSTclF9JuiUvCZJ8Eje349"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87a927e63bd256b7-OSL
alt-svc: h3=":443"; ma=86400
|
|
| db.check-tl-ver-94-1.com/shared-js/assets/static-pl.js?v=2 | 188.114.96.1 | | 2.3 kB |
URL db.check-tl-ver-94-1.com/shared-js/assets/static-pl.js?v=2 IP188.114.96.1:0
File typeJavaScript source, ASCII text, with CRLF line terminators Hash7224243dd0b18bb2508a1d77d4b2a0b2 bd833c24aa241861316053fd8bd46a1bef3d343f 920aa94a10634fc23234b5e4f55c428f6311fc7811d3591792381678cb492659
GET /shared-js/assets/static-pl.js?v=2 HTTP/1.1
Host: db.check-tl-ver-94-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://db.check-tl-ver-94-1.com/space-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=space-robot&click_id=9320dpmqnh9k2j662b&sub_id=17136824&nrid=01609b32c253432683bb62f4387e6d20&hash=PZmjLYGDSCBisxBtOUPf6g&exp=1714161890
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:59:52 GMT
content-type: application/javascript
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
etag: W/"6627c958-dee"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=DEqeV2d2lxw7n5Yzd8mTWBgF%2BmmFPyeFmpRS0DIAA1Sjss8oRAPurDXMONC5bjgD2k6DjftrWdfyeqyiFij5EcDrAvcnKpzB3NFJY2R%2BQq70msxFd2x4rBkl18zhN7ILMMSpx221iokHqKM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a927de1abb0b31-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| rqqlj.check-tl-ver-94-1.com/eyes-robot/assets/1.png | 188.114.96.1 | | 11 kB |
URL rqqlj.check-tl-ver-94-1.com/eyes-robot/assets/1.png IP188.114.96.1:0
File typePNG image data, 179 x 278, 8-bit colormap, non-interlaced Hasha6fa8154cc36da494df7b5103329c15a 3a2310088bcec14f7c0187f8409a5af5395665e8 967b8859fedb2c63afc8ae6ae2839fdd40f0e26af85adc6605a629f3c0ed0837
GET /eyes-robot/assets/1.png HTTP/1.1
Host: rqqlj.check-tl-ver-94-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rqqlj.check-tl-ver-94-1.com/eyes-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&click_id=b5176pmqnh97sy9383&sub_id=17136824&nrid=0d1830daf4ff480b847baabb4904856b&hash=uIegkRK-kT8MTEn190s45Q&exp=1714161893
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:59:53 GMT
content-type: image/png
content-length: 10591
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
etag: "6627c958-295f"
cache-control: max-age=14400
cf-cache-status: HIT
age: 4765
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=se5KZagunnIRYXdz03Azn2EntvoHsQKi3HhcDi3Typn%2FlmowKmielWaGMudAVaP82hDMzPM7YXb%2FvNvyHCYndY1PfQ6TiQdgBE9Nhj1g%2FolvqaTRZYN%2FB37WjWIFN%2B%2FNArAw8mo1Wy%2BnexZLL9g%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a927e78dd80b31-OSL
alt-svc: h3=":443"; ma=86400
|
|
| rqqlj.check-tl-ver-94-1.com/eyes-robot/assets/image.png | 188.114.96.1 | | 11 kB |
URL rqqlj.check-tl-ver-94-1.com/eyes-robot/assets/image.png IP188.114.96.1:0
File typePNG image data, 260 x 260, 8-bit colormap, non-interlaced Hashca1f4de0ad1d4fad72d299a6411e6959 c9f6d409f09264a34ee8bac4265233c56c280d1a f0434a1fc8ffba3a47bbb9f1fa5a2f789651a020e7b86e507ff300b7c367057f
GET /eyes-robot/assets/image.png HTTP/1.1
Host: rqqlj.check-tl-ver-94-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rqqlj.check-tl-ver-94-1.com/eyes-robot/assets/style.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:59:53 GMT
content-type: image/png
content-length: 11043
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
etag: "6627c958-2b23"
cache-control: max-age=14400
cf-cache-status: HIT
age: 4765
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4Dxrw8z0q83RSctal6x7aGbuAZMpJaVAsOzYAfn%2B2bkgtvq2tGCrTgNE9slnmnubrnB48cK0M6cSgc7RrZX1GsJbaYQq5tzpAEPvn8gEjTRZHhg7uCwqAfhKFwiG9gU9z4TDsyUwL1cvVq%2B7O7Q%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a927e7ee7c0b31-OSL
alt-svc: h3=":443"; ma=86400
|
|
| rqqlj.check-tl-ver-94-1.com/favicon.ico | 188.114.96.1 | | 0 B |
URL rqqlj.check-tl-ver-94-1.com/favicon.ico IP188.114.96.1:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1
Host: rqqlj.check-tl-ver-94-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rqqlj.check-tl-ver-94-1.com/eyes-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&click_id=b5176pmqnh97sy9383&sub_id=17136824&nrid=0d1830daf4ff480b847baabb4904856b&hash=uIegkRK-kT8MTEn190s45Q&exp=1714161893
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 204 No Content
date: Fri, 26 Apr 2024 19:59:53 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 5858
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Ud65Ad%2FRJCqGdTPD8dq%2BQ%2Bsw9x2VhWqyRFeEfNG9ksAecnqRhNlVXqh5B8XmEkftGat9%2BISq9mLaC%2FWUC17B2l85K9BvQTPPTAIPUUrZxPKugodka1oVewIsIqe71onwAzHUXVJ1Dzt1jhdKtv8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a927e84f260b31-OSL
alt-svc: h3=":443"; ma=86400
|
|
| www.gstatic.com/firebasejs/10.3.1/firebase-app-compat.js | 142.250.74.35 | | 9.3 kB |
URL www.gstatic.com/firebasejs/10.3.1/firebase-app-compat.js IP142.250.74.35:0
File typeJavaScript source, ASCII text, with very long lines (28368) Hash9900403b65514fad7df39a4e788a6e45 75f9ba061ef4e72bb23528c700f2a11c56d637e9 a202b2051ea9810cd9ba592b3f9418a89e2062f5c185e29e288080b28eb64fe5
GET /firebasejs/10.3.1/firebase-app-compat.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rqqlj.check-tl-ver-94-1.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/firebase-js
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="firebase-js"
report-to: {"group":"firebase-js","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/firebase-js"}]}
content-length: 9308
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 26 Apr 2024 06:13:11 GMT
expires: Sat, 26 Apr 2025 06:13:11 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 31 Aug 2023 15:20:38 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 49602
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.gstatic.com/firebasejs/10.3.1/firebase-messaging-compat.js | 142.250.74.35 | | 9.9 kB |
URL www.gstatic.com/firebasejs/10.3.1/firebase-messaging-compat.js IP142.250.74.35:0
File typeJavaScript source, ASCII text, with very long lines (38231) Hash0541b823dfaf39162ef84cf075c9951b e0934726455558cc1a59823efada9651e33aafaa 21f1d62f222007068c793f0947d98f4ccb7c1595adb68efeb783390fdd8b5522
GET /firebasejs/10.3.1/firebase-messaging-compat.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rqqlj.check-tl-ver-94-1.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/firebase-js
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="firebase-js"
report-to: {"group":"firebase-js","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/firebase-js"}]}
content-length: 9934
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 25 Apr 2024 02:47:22 GMT
expires: Fri, 25 Apr 2025 02:47:22 GMT
cache-control: public, max-age=31536000
age: 148351
last-modified: Thu, 31 Aug 2023 15:20:50 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| rqqlj.check-tl-ver-94-1.com/shared-js/assets/static-pl.js?v=2 | 188.114.96.1 | | 12 kB |
URL rqqlj.check-tl-ver-94-1.com/shared-js/assets/static-pl.js?v=2 IP188.114.96.1:0
File typeJavaScript source, ASCII text, with CRLF line terminators Hash7224243dd0b18bb2508a1d77d4b2a0b2 bd833c24aa241861316053fd8bd46a1bef3d343f 920aa94a10634fc23234b5e4f55c428f6311fc7811d3591792381678cb492659
GET /shared-js/assets/static-pl.js?v=2 HTTP/1.1
Host: rqqlj.check-tl-ver-94-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rqqlj.check-tl-ver-94-1.com/eyes-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&click_id=b5176pmqnh97sy9383&sub_id=17136824&nrid=0d1830daf4ff480b847baabb4904856b&hash=uIegkRK-kT8MTEn190s45Q&exp=1714161893
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:59:53 GMT
content-type: application/javascript
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
etag: W/"6627c958-dee"
cache-control: max-age=14400
cf-cache-status: HIT
age: 1867
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7%2FhduDAL7JBe4vn89ohElBRb0kkFzPAhE%2B4Yq%2B%2BGBXb%2BuRM%2BCAuvDJ0p5ygR2Rd7cXTWjyJIZaLYlD9IcM%2BDJ8P5WMsNwTCf024Hrrh9c5138q0IcU%2Fr8E1lBUbGinJxmnmH95WlrCJQcOEt2H0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a927e78de00b31-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| qa.check-tl-ver-94-1.com/eyes-robot/assets/2.png | 172.67.147.142 | | 1.1 kB |
URL qa.check-tl-ver-94-1.com/eyes-robot/assets/2.png IP172.67.147.142:0
File typePNG image data, 94 x 19, 8-bit colormap, non-interlaced Hashd708fbf0358752a082f5a394b74adda8 231c1527b4b039eb3af7d7e9eb5587ed87f6ea81 09d12e3c0e65fda26b9073e70e02fb24fa6941a4a3b1b81211b6470f00769ea5
GET /eyes-robot/assets/2.png HTTP/1.1
Host: qa.check-tl-ver-94-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://qa.check-tl-ver-94-1.com/eyes-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&click_id=b5176pmqnh97sy9383&sub_id=17136824&nrid=0d1830daf4ff480b847baabb4904856b&hash=uIegkRK-kT8MTEn190s45Q&exp=1714161893
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:59:53 GMT
content-type: image/png
content-length: 1061
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
etag: "6627c958-425"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7j9KkDUf4DFAPrqieBZxKDRaaam%2BUPOeeiTvcFFfKqVLC%2BATDT89MP3rmTQvvxWxM%2BAi5X5GNiawokbMnmdglGacS97HQQ2EprB3KoftTWWOGDIwRrrzdJRXt6nhhkK5VIxuZa1aVa0TquQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a927e9e96c569c-OSL
alt-svc: h3=":443"; ma=86400
|
|
| qa.check-tl-ver-94-1.com/eyes-robot/assets/style.css | 172.67.147.142 | | 12 kB |
URL qa.check-tl-ver-94-1.com/eyes-robot/assets/style.css IP172.67.147.142:0
File typeASCII text, with CRLF line terminators Hasha18afa3eac509b6062c9362a725ac421 5e06e9b3af42189e9456a7ea3bda665e10c86405 29ee31143c5bd03b7dcaf2e40476e50c4ed26d32a725525a4f3dced678c90896
GET /eyes-robot/assets/style.css HTTP/1.1
Host: qa.check-tl-ver-94-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://qa.check-tl-ver-94-1.com/eyes-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&click_id=b5176pmqnh97sy9383&sub_id=17136824&nrid=0d1830daf4ff480b847baabb4904856b&hash=uIegkRK-kT8MTEn190s45Q&exp=1714161893
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:59:53 GMT
content-type: text/css
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
etag: W/"6627c958-cf6"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8HXAjudIxx16Y5FVoz2eGlxHiHEj8TMEAv%2BocNvP4UpziUPl7wDM2zNThCjlvVSmEQiqL2UYlUkPFRfXO5VNcSvxCmus1cgRUVKjW5rSfgwZyBNo7vRbpfvJen%2F2cwp1RuZH8fT1B0%2Flhyo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a927e9e961569c-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| qa.check-tl-ver-94-1.com/favicon.ico | 172.67.147.142 | | 0 B |
URL qa.check-tl-ver-94-1.com/favicon.ico IP172.67.147.142:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1
Host: qa.check-tl-ver-94-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://qa.check-tl-ver-94-1.com/eyes-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&click_id=b5176pmqnh97sy9383&sub_id=17136824&nrid=0d1830daf4ff480b847baabb4904856b&hash=uIegkRK-kT8MTEn190s45Q&exp=1714161893
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 204 No Content
date: Fri, 26 Apr 2024 19:59:54 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 23
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zaok4wJU4meRu92Pt4NUSDnG0Hvi%2FI2ZC9Bc1khL0TO9w3W0jztpOhS9woecB0ZhnMjqgPdBUT3JynMsMVVpJyYb8Lg9IY4FYSKkG6EMX4sgXZz4cGE7yv0yAVYJZC8cBTHuTnba55m7y4Y%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a927eabad4569c-OSL
alt-svc: h3=":443"; ma=86400
|
|
| cdnstatic.check-tl-ver-154-1.com/ps/tb?id=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&sub_id=17136824&click_id=79c7bpmqnh9xoejd46&nrid=31a57132a2fe19f61f7228476439039c&reason=tb_exit&attempt=3 | 188.114.97.1 | | 9.7 kB |
URL cdnstatic.check-tl-ver-154-1.com/ps/tb?id=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&sub_id=17136824&click_id=79c7bpmqnh9xoejd46&nrid=31a57132a2fe19f61f7228476439039c&reason=tb_exit&attempt=3 IP188.114.97.1:0
File typeHTML document, ASCII text, with CRLF line terminators Hashdc8aa0a2249f884dac1f684a88c59598 6b4d3f69a35479a007e9e951d218455c1569ef04 c274fde41e16dfaadef3b885e4c831d19d3a8580450ec2dd063af0e453e061bd
GET /ps/tb?id=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&sub_id=17136824&click_id=79c7bpmqnh9xoejd46&nrid=31a57132a2fe19f61f7228476439039c&reason=tb_exit&attempt=3 HTTP/1.1
Host: cdnstatic.check-tl-ver-154-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://qb.check-tl-ver-154-1.com/
Cookie: __psu=fb863536-3c01-41b4-b5f3-4d4cc7b5b99f
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:59:49 GMT
content-type: text/html
cache-control: max-age=0, no-cache, no-store, must-revalidate
accept-ch: Sec-CH-UA, Sec-CH-UA-Platform, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bhX%2BbizXpmCxbOmGqNRA%2FQycB3C7jaDRUz0HFBhoiEJ891TLjpRJcLGlQy7HFnilwajjb8FL87cFP7WlB15DVH9Zjk5ScCmV1bWDHXcOE2L9esy2zMkrVfp%2BQeRVFApqGtuHsYsAh7dMPFgz1ZukbdwOEw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87a927d05bb0b52d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| www.gstatic.com/firebasejs/10.3.1/firebase-messaging-compat.js | 142.250.74.35 | | 9.9 kB |
URL www.gstatic.com/firebasejs/10.3.1/firebase-messaging-compat.js IP142.250.74.35:0
File typeJavaScript source, ASCII text, with very long lines (38231) Hash0541b823dfaf39162ef84cf075c9951b e0934726455558cc1a59823efada9651e33aafaa 21f1d62f222007068c793f0947d98f4ccb7c1595adb68efeb783390fdd8b5522
GET /firebasejs/10.3.1/firebase-messaging-compat.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://qa.check-tl-ver-94-1.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/firebase-js
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="firebase-js"
report-to: {"group":"firebase-js","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/firebase-js"}]}
content-length: 9934
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 25 Apr 2024 02:47:22 GMT
expires: Fri, 25 Apr 2025 02:47:22 GMT
cache-control: public, max-age=31536000
age: 148352
last-modified: Thu, 31 Aug 2023 15:20:50 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| qb.check-tl-ver-94-1.com/eyes-robot/assets/1.png | 172.67.147.142 | | 11 kB |
URL qb.check-tl-ver-94-1.com/eyes-robot/assets/1.png IP172.67.147.142:0
File typePNG image data, 179 x 278, 8-bit colormap, non-interlaced Hasha6fa8154cc36da494df7b5103329c15a 3a2310088bcec14f7c0187f8409a5af5395665e8 967b8859fedb2c63afc8ae6ae2839fdd40f0e26af85adc6605a629f3c0ed0837
GET /eyes-robot/assets/1.png HTTP/1.1
Host: qb.check-tl-ver-94-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://qb.check-tl-ver-94-1.com/eyes-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&click_id=b5176pmqnh97sy9383&sub_id=17136824&nrid=0d1830daf4ff480b847baabb4904856b&hash=uIegkRK-kT8MTEn190s45Q&exp=1714161893
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:59:54 GMT
content-type: image/png
content-length: 10591
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
etag: "6627c958-295f"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=XeFn9VevgTHzcGjJxiNkpJV3K%2B0fBlvU%2B73OJVsV5RBcxqSefNn9AoxF2RQzDoKZ73VlmnI2AQKxIfI8gNA9KD57N%2Bs%2Fd94Q%2FkGH7vFsS1xBSRZF4lW9%2B%2Btdlemo1bi4Zcb7tDo%2FTaYyy9E%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a927ec7df3569c-OSL
alt-svc: h3=":443"; ma=86400
|
|
| qb.check-tl-ver-94-1.com/eyes-robot/assets/2.png | 172.67.147.142 | | 1.1 kB |
URL qb.check-tl-ver-94-1.com/eyes-robot/assets/2.png IP172.67.147.142:0
File typePNG image data, 94 x 19, 8-bit colormap, non-interlaced Hashd708fbf0358752a082f5a394b74adda8 231c1527b4b039eb3af7d7e9eb5587ed87f6ea81 09d12e3c0e65fda26b9073e70e02fb24fa6941a4a3b1b81211b6470f00769ea5
GET /eyes-robot/assets/2.png HTTP/1.1
Host: qb.check-tl-ver-94-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://qb.check-tl-ver-94-1.com/eyes-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&click_id=b5176pmqnh97sy9383&sub_id=17136824&nrid=0d1830daf4ff480b847baabb4904856b&hash=uIegkRK-kT8MTEn190s45Q&exp=1714161893
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:59:54 GMT
content-type: image/png
content-length: 1061
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
etag: "6627c958-425"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Dfz4AyRLnZVOe6fbwXLFE7F2F7QE84xYXxHKMolXYROreQxLg89P6%2BO%2BaqQh6sNSQ2pHVstZ5h9u4Ixh8BEhx8AbHaA2I38sq8z7eS5KYvmVtsnwSnJo6dLJUOdnOYuCx2U%2F8wngzTeG%2Fss%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a927ec7e02569c-OSL
alt-svc: h3=":443"; ma=86400
|
|
| qb.check-tl-ver-94-1.com/eyes-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&click_id=b5176pmqnh97sy9383&sub_id=17136824&nrid=0d1830daf4ff480b847baabb4904856b&hash=uIegkRK-kT8MTEn190s45Q&exp=1714161893 | 172.67.147.142 | | 13 kB |
URL qb.check-tl-ver-94-1.com/eyes-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&click_id=b5176pmqnh97sy9383&sub_id=17136824&nrid=0d1830daf4ff480b847baabb4904856b&hash=uIegkRK-kT8MTEn190s45Q&exp=1714161893 IP172.67.147.142:0
File typeHTML document, Unicode text, UTF-8 text, with CRLF line terminators Hash666203c2cfc7ee8aafbd1cbf9ec04c69 7d74e745174fe6140ee2fbe1fe8b8c2ae33ade9a 57027a083c9c7eaf8a078a7090c454b254216a4a94782e2445fb71629725531b
GET /eyes-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&click_id=b5176pmqnh97sy9383&sub_id=17136824&nrid=0d1830daf4ff480b847baabb4904856b&hash=uIegkRK-kT8MTEn190s45Q&exp=1714161893 HTTP/1.1
Host: qb.check-tl-ver-94-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://qa.check-tl-ver-94-1.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:59:54 GMT
content-type: text/html
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=btMZXuZEHPqPJ9nYjDp974agB3r0S4A%2B6vmcdRB0Y%2FFGmn2oxXKMfhvwOz%2Fbmv2uRIHZgDRa1AhCblUpBChM4ivfPilQEGwIbnuyycuyg9WDvvGft8JVbGNXOCX4BUZ5Mvu9yA2uzMCTzeg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87a927ebfcfd569c-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| qb.check-tl-ver-94-1.com/favicon.ico | 172.67.147.142 | | 0 B |
URL qb.check-tl-ver-94-1.com/favicon.ico IP172.67.147.142:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1
Host: qb.check-tl-ver-94-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://qb.check-tl-ver-94-1.com/eyes-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&click_id=b5176pmqnh97sy9383&sub_id=17136824&nrid=0d1830daf4ff480b847baabb4904856b&hash=uIegkRK-kT8MTEn190s45Q&exp=1714161893
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 204 No Content
date: Fri, 26 Apr 2024 19:59:54 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 21
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kmpocO%2FuA0cF%2BuQM8QHgwJy83Uwu%2Ba7XmDT%2B856IKBW1CxbPgpuMX7Hp4rWO2Qkp2u83OIToV2vmou7rv9KBBB3rMcFk4VCrMmPruuNc5LMcJIhE4p%2FBxPLRhzQFIHjdM%2FTwyCKMfTf%2BUGg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a927ed9f8a569c-OSL
alt-svc: h3=":443"; ma=86400
|
|
| rqqlj.check-tl-ver-94-1.com/space-robot/assets/style.css?v=4 | 188.114.96.1 | | 28 kB |
URL rqqlj.check-tl-ver-94-1.com/space-robot/assets/style.css?v=4 IP188.114.96.1:0
File typeASCII text, with very long lines (6532), with CRLF line terminators Hash8335155a7c4004d8296b7727a24273c4 387b7723ba35057b631809e1437c64cdd89f13bb 0b758313cde9005f3f2082f616558a3db63019d03a5f1376f3a49e64d874909e
GET /space-robot/assets/style.css?v=4 HTTP/1.1
Host: rqqlj.check-tl-ver-94-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rqqlj.check-tl-ver-94-1.com/space-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=space-robot&click_id=9320dpmqnh9k2j662b&sub_id=17136824&nrid=01609b32c253432683bb62f4387e6d20&hash=PZmjLYGDSCBisxBtOUPf6g&exp=1714161890
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:59:51 GMT
content-type: text/css
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
etag: W/"6627c958-1986"
cache-control: max-age=14400
cf-cache-status: HIT
age: 3353
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=JBJeXtgaEdCKY7nInH0oc1HYkM5Y2JwBddReqMftcKYiJrP%2BcTryTA%2FZOCDs%2B7wGI6Ta1cH3ANcq1waP8QKc%2B4YIInndUEdd80D8GpBregRI6Z0XiToGYfWMc%2Ba8Az7XNnuzwLfcnEWfWltOU1k%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a927d88ce50b31-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| www.gstatic.com/firebasejs/10.3.1/firebase-messaging-compat.js | 142.250.74.35 | | 9.9 kB |
URL www.gstatic.com/firebasejs/10.3.1/firebase-messaging-compat.js IP142.250.74.35:0
File typeJavaScript source, ASCII text, with very long lines (38231) Hash0541b823dfaf39162ef84cf075c9951b e0934726455558cc1a59823efada9651e33aafaa 21f1d62f222007068c793f0947d98f4ccb7c1595adb68efeb783390fdd8b5522
GET /firebasejs/10.3.1/firebase-messaging-compat.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://qb.check-tl-ver-94-1.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/firebase-js
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="firebase-js"
report-to: {"group":"firebase-js","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/firebase-js"}]}
content-length: 9934
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 25 Apr 2024 02:47:22 GMT
expires: Fri, 25 Apr 2025 02:47:22 GMT
cache-control: public, max-age=31536000
age: 148352
last-modified: Thu, 31 Aug 2023 15:20:50 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| cdnstatic.check-tl-ver-94-1.com/ps/config.js?id=4l9EZwXc2kSH_LKKjogwWA | 188.114.96.1 | | 1.6 kB |
URL cdnstatic.check-tl-ver-94-1.com/ps/config.js?id=4l9EZwXc2kSH_LKKjogwWA IP188.114.96.1:0
File typeASCII text, with CRLF line terminators Hashdc65a2fbfc4c76147b8b778b759c8d91 b8374137f0fe797e6a7e58c0c6ef14aa7a6b9855 7e85c285fd983223d07a014d1a96804ba1c8f65fb43238a4fad204350e896958
GET /ps/config.js?id=4l9EZwXc2kSH_LKKjogwWA HTTP/1.1
Host: cdnstatic.check-tl-ver-94-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rqqlj.check-tl-ver-94-1.com/
Cookie: __psu=0baf6f2c-55cb-4484-aae2-65d1f2b4b6b1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:59:51 GMT
content-type: application/javascript
cache-control: max-age=0, no-cache, no-store, must-revalidate
accept-ch: Sec-CH-UA, Sec-CH-UA-Platform, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
cf-cache-status: BYPASS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FYebvte%2Bzn3qw%2FaV%2FI6TfTElVOWMPKrkpZxQQnc9VjD2DcTJDHJedjRBvPelzjBAG9cTLFGcB7rdnM%2Fv20GyYL1QugmfPgcnGY5zjnN0vksfSsxvCT2XSDRnQCrpmYihJZtIMELe3MNBk6mVJ9kI%2BwCz"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a927d9ae390b31-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| www.profitablegatecpm.com/api/users?token=L2tkaDh2emo1P2tleT04YjExMDc0NzA3MDIxZTkyMWUwMzQ2NmNjNDQxZTRhMSZwc3Q9MTcxNDE2MTY1NCZybXRjPXQmc2h1PWZmOGIzZTM1ZGIxZTZkZDRmMzAxMDg0NDQxNWNmNTkzMTUzYTg5ZWM0YjgxOGFlY2M5MDgyM2E1MmQ2YmI0MjJiMzliMWIwNzFjZmE5ZTAwZTY3YTAyNzQzOGY0YTJmMGExMzlkZWIxOWVmZjFiYTA1NzVjMTk3MWMxZDY1ZDY0ZDBkY2IwMmI4Mjk4YTdiNGM5NzJiZTBkMDcyZjA5ODYwYjhjOWRmZmY5MTM0Y2FiMDgxMzVhZTFkNGQ1&uuid=&pii=&in=false | 172.240.127.234 | | 0 B |
URL www.profitablegatecpm.com/api/users?token=L2tkaDh2emo1P2tleT04YjExMDc0NzA3MDIxZTkyMWUwMzQ2NmNjNDQxZTRhMSZwc3Q9MTcxNDE2MTY1NCZybXRjPXQmc2h1PWZmOGIzZTM1ZGIxZTZkZDRmMzAxMDg0NDQxNWNmNTkzMTUzYTg5ZWM0YjgxOGFlY2M5MDgyM2E1MmQ2YmI0MjJiMzliMWIwNzFjZmE5ZTAwZTY3YTAyNzQzOGY0YTJmMGExMzlkZWIxOWVmZjFiYTA1NzVjMTk3MWMxZDY1ZDY0ZDBkY2IwMmI4Mjk4YTdiNGM5NzJiZTBkMDcyZjA5ODYwYjhjOWRmZmY5MTM0Y2FiMDgxMzVhZTFkNGQ1&uuid=&pii=&in=false IP172.240.127.234:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /api/users?token=L2tkaDh2emo1P2tleT04YjExMDc0NzA3MDIxZTkyMWUwMzQ2NmNjNDQxZTRhMSZwc3Q9MTcxNDE2MTY1NCZybXRjPXQmc2h1PWZmOGIzZTM1ZGIxZTZkZDRmMzAxMDg0NDQxNWNmNTkzMTUzYTg5ZWM0YjgxOGFlY2M5MDgyM2E1MmQ2YmI0MjJiMzliMWIwNzFjZmE5ZTAwZTY3YTAyNzQzOGY0YTJmMGExMzlkZWIxOWVmZjFiYTA1NzVjMTk3MWMxZDY1ZDY0ZDBkY2IwMmI4Mjk4YTdiNGM5NzJiZTBkMDcyZjA5ODYwYjhjOWRmZmY5MTM0Y2FiMDgxMzVhZTFkNGQ1&uuid=&pii=&in=false HTTP/1.1
Host: www.profitablegatecpm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.profitablegatecpm.com/api/users?token=L2tkaDh2emo1P2tleT1hOTY5Y2E1YzlhZDI2MTE3NjJmMTFiNzlhNTI2ZTJkMiZzdWJtZXRyaWM9MTcxMzY4MjQ
Cookie: pdhtkv=true; uncs=1; pdhtkv28=true; uncs28=1; u_pl=17136824; ain=eyJhbGciOiJIUzI1NiJ9.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.A-hs6t-ALqez_ye67ir0JBECLHlUOBU2KXOfKE4BRtQ; cjs=t
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Server: nginx/1.21.6
Date: Fri, 26 Apr 2024 19:59:55 GMT
Content-Type: text/html
Content-Length: 0
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Location: https://nylonnickel.xyz/c9b2l0k.php?key=ssh20i85vx88tciu4a4m&SUB_ID_SHORT=391373bd4e57e7e9640dc33062daf787&COST_CPC=&PLACEMENT_ID=17136824&CAMPAIGN_ID=1028982&DEVICE_BRAND=Unknown&BROWSER_NAME=Firefox&USER_OS=Linux&USER_CARRIER=Blix%20Solutions&USERAGENT=Mozilla%2F5.0%20%28X11%3B%20Linux%20x86_64%3B%20rv%3A96.0%29%20Gecko%2F20100101%20Firefox%2F96.0&REMOTE_LANGUAGE=11&BANNER_ID=2901049
Set-Cookie: pdhtkv=true; expires=Sat, 27 Apr 2024 19:59:55 GMT
uncs=1; expires=Sat, 27 Apr 2024 19:59:55 GMT
pdhtkv28=true; expires=Sat, 27 Apr 2024 19:59:55 GMT
uncs28=1; expires=Sat, 27 Apr 2024 19:59:55 GMT
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 86945cf72d373d13f1befcc7a1149c55
Strict-Transport-Security: max-age=0; includeSubdomains
|
|
| nylonnickel.xyz/c9b2l0k.php?key=ssh20i85vx88tciu4a4m&SUB_ID_SHORT=391373bd4e57e7e9640dc33062daf787&COST_CPC=&PLACEMENT_ID=17136824&CAMPAIGN_ID=1028982&DEVICE_BRAND=Unknown&BROWSER_NAME=Firefox&USER_OS=Linux&USER_CARRIER=Blix%20Solutions&USERAGENT=Mozilla%2F5.0%20%28X11%3B%20Linux%20x86_64%3B%20rv%3A96.0%29%20Gecko%2F20100101%20Firefox%2F96.0&REMOTE_LANGUAGE=11&BANNER_ID=2901049 | 192.64.81.118 | | 0 B |
URL nylonnickel.xyz/c9b2l0k.php?key=ssh20i85vx88tciu4a4m&SUB_ID_SHORT=391373bd4e57e7e9640dc33062daf787&COST_CPC=&PLACEMENT_ID=17136824&CAMPAIGN_ID=1028982&DEVICE_BRAND=Unknown&BROWSER_NAME=Firefox&USER_OS=Linux&USER_CARRIER=Blix%20Solutions&USERAGENT=Mozilla%2F5.0%20%28X11%3B%20Linux%20x86_64%3B%20rv%3A96.0%29%20Gecko%2F20100101%20Firefox%2F96.0&REMOTE_LANGUAGE=11&BANNER_ID=2901049 IP192.64.81.118:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /c9b2l0k.php?key=ssh20i85vx88tciu4a4m&SUB_ID_SHORT=391373bd4e57e7e9640dc33062daf787&COST_CPC=&PLACEMENT_ID=17136824&CAMPAIGN_ID=1028982&DEVICE_BRAND=Unknown&BROWSER_NAME=Firefox&USER_OS=Linux&USER_CARRIER=Blix%20Solutions&USERAGENT=Mozilla%2F5.0%20%28X11%3B%20Linux%20x86_64%3B%20rv%3A96.0%29%20Gecko%2F20100101%20Firefox%2F96.0&REMOTE_LANGUAGE=11&BANNER_ID=2901049 HTTP/1.1
Host: nylonnickel.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.profitablegatecpm.com/
DNT: 1
Connection: keep-alive
Cookie: uclick=pmqnh98plp; uclickhash=pmqnh98plp-pmqnh97sy9-xr46-0-usgm6o-9rib8n-9ribwj-669aa3
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Server: nginx/1.22.0
Date: Fri, 26 Apr 2024 19:59:55 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: uclick=pmqnh98plp; expires=Sat, 27-Apr-2024 19:59:55 GMT; Max-Age=86400; path=/; secure; SameSite=none
uclickhash=pmqnh98plp-pmqnh97s15-xr46-0-usgm6o-9rib8n-9ribwj-820f62; expires=Sat, 27-Apr-2024 19:59:55 GMT; Max-Age=86400; path=/; secure; SameSite=none
Location: https://rqqlj.canopusacrux.com/?pl=4l9EZwXc2kSH_LKKjogwWA&click_id=908bcpmqnh97s151af&sub_id=17136824
Strict-Transport-Security: max-age=31536000
|
|
| rqqlj.canopusacrux.com/?pl=4l9EZwXc2kSH_LKKjogwWA&click_id=908bcpmqnh97s151af&sub_id=17136824 | 188.114.96.1 | | 0 B |
URL rqqlj.canopusacrux.com/?pl=4l9EZwXc2kSH_LKKjogwWA&click_id=908bcpmqnh97s151af&sub_id=17136824 IP188.114.96.1:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /?pl=4l9EZwXc2kSH_LKKjogwWA&click_id=908bcpmqnh97s151af&sub_id=17136824 HTTP/1.1
Host: rqqlj.canopusacrux.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.profitablegatecpm.com/
DNT: 1
Connection: keep-alive
Cookie: 4l9EZwXc2kSH_LKKjogwWA=1%2C5; __pl=7b0cedb7-6011-4ef6-b6e5-14fb3b89903d; __cap=5
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 302 Found
date: Fri, 26 Apr 2024 19:59:55 GMT
content-length: 0
location: https://rqqlj.check-tl-ver-94-2.com/eyes-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&click_id=908bcpmqnh97s151af&sub_id=17136824&nrid=a85509f536b5469dab416c5c310e42e0&hash=lW0gfYOqLt0aQZaAVymQjg&exp=1714161895
set-cookie: 4l9EZwXc2kSH_LKKjogwWA=5; max-age=345600; path=/; samesite=lax
__pl=7b0cedb7-6011-4ef6-b6e5-14fb3b89903d; expires=Sun, 26 Apr 2026 19:59:55 GMT; path=/; samesite=lax
__cap=6; max-age=3600; path=/; samesite=lax
cache-control: max-age=0, no-cache, no-store, must-revalidate
accept-ch: Sec-CH-UA, Sec-CH-UA-Platform, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=nl9oTgzWsZusppWpeniCaezQmave1JH1az%2Ff18%2F%2FiIoTFQtbL04%2Fgb%2BXouCshqb%2F7s1xUir2THiiAbjVRhXZu5Fw5XaDYn6%2BDh0C1QQyK0vAg1Son1B7OXKnMhoaRnww5aRElTsKGNf1"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87a927f4692556b7-OSL
alt-svc: h3=":443"; ma=86400
|
|
| rqqlj.check-tl-ver-94-2.com/eyes-robot/assets/1.png | 104.21.33.96 | | 11 kB |
URL rqqlj.check-tl-ver-94-2.com/eyes-robot/assets/1.png IP104.21.33.96:0
File typePNG image data, 179 x 278, 8-bit colormap, non-interlaced Hasha6fa8154cc36da494df7b5103329c15a 3a2310088bcec14f7c0187f8409a5af5395665e8 967b8859fedb2c63afc8ae6ae2839fdd40f0e26af85adc6605a629f3c0ed0837
GET /eyes-robot/assets/1.png HTTP/1.1
Host: rqqlj.check-tl-ver-94-2.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rqqlj.check-tl-ver-94-2.com/eyes-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&click_id=908bcpmqnh97s151af&sub_id=17136824&nrid=a85509f536b5469dab416c5c310e42e0&hash=lW0gfYOqLt0aQZaAVymQjg&exp=1714161895
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:59:55 GMT
content-type: image/png
content-length: 10591
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
etag: "6627c958-295f"
cache-control: max-age=14400
cf-cache-status: HIT
age: 580
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=89cEVepEZWNUSepl3n6R%2FEUY7ju56pNzTv5M8RqikhCRYTlDohwaI7RpywAtMOJfAJMEpoS857wjHv8c4mXtw%2Btycj0I7solBWXaTgVIwOCKeQxVUOeGuMOhSu%2BBSpOVRauEOK%2F7pSGWfgeZpgM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a927f5eec4568e-OSL
alt-svc: h3=":443"; ma=86400
|
|
| rqqlj.check-tl-ver-94-2.com/eyes-robot/assets/2.png | 104.21.33.96 | | 1.1 kB |
URL rqqlj.check-tl-ver-94-2.com/eyes-robot/assets/2.png IP104.21.33.96:0
File typePNG image data, 94 x 19, 8-bit colormap, non-interlaced Hashd708fbf0358752a082f5a394b74adda8 231c1527b4b039eb3af7d7e9eb5587ed87f6ea81 09d12e3c0e65fda26b9073e70e02fb24fa6941a4a3b1b81211b6470f00769ea5
GET /eyes-robot/assets/2.png HTTP/1.1
Host: rqqlj.check-tl-ver-94-2.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rqqlj.check-tl-ver-94-2.com/eyes-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&click_id=908bcpmqnh97s151af&sub_id=17136824&nrid=a85509f536b5469dab416c5c310e42e0&hash=lW0gfYOqLt0aQZaAVymQjg&exp=1714161895
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:59:55 GMT
content-type: image/png
content-length: 1061
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
etag: "6627c958-425"
cache-control: max-age=14400
cf-cache-status: HIT
age: 580
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0NmH2Y8DV1iPbQ6LvQOOFkNtb%2B5ou1IE5plI7juPpU6g9oRdvwWGekPN8R7%2BkeNNdJ5vlckL%2Fq9iOe14h0%2B%2F0ujMruKl5tdbhT90R%2BaeRlUtVrcbavfGZavXzLUIL8Nezy7UkFl2ODzkBM1fgAI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a927f5eec8568e-OSL
alt-svc: h3=":443"; ma=86400
|
|
| qb.check-tl-ver-94-1.com/shared-js/assets/static-pl.js?v=2 | 172.67.147.142 | | 14 kB |
URL qb.check-tl-ver-94-1.com/shared-js/assets/static-pl.js?v=2 IP172.67.147.142:0
File typeJavaScript source, ASCII text, with CRLF line terminators Hash7224243dd0b18bb2508a1d77d4b2a0b2 bd833c24aa241861316053fd8bd46a1bef3d343f 920aa94a10634fc23234b5e4f55c428f6311fc7811d3591792381678cb492659
GET /shared-js/assets/static-pl.js?v=2 HTTP/1.1
Host: qb.check-tl-ver-94-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://qb.check-tl-ver-94-1.com/eyes-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&click_id=b5176pmqnh97sy9383&sub_id=17136824&nrid=0d1830daf4ff480b847baabb4904856b&hash=uIegkRK-kT8MTEn190s45Q&exp=1714161893
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:59:54 GMT
content-type: application/javascript
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
etag: W/"6627c958-dee"
cache-control: max-age=14400
cf-cache-status: HIT
age: 3330
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=OFLJKBfuwchBDZ7dBqlZtjoL2%2Fl%2FTBzNL9VxgbOZ14n%2FbIorsWmFMbFqXPbroFaSxLt1MPAQdBKaH5epEsz41Cz%2Bm6Fa3rLVDPsPCgo4Eshw5mOeoHS%2FAWbdLDC7IT4OQ%2BwsP6NBjzXrTi8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a927ec7e03569c-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| rqqlj.check-tl-ver-94-2.com/favicon.ico | 104.21.33.96 | | 0 B |
URL rqqlj.check-tl-ver-94-2.com/favicon.ico IP104.21.33.96:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1
Host: rqqlj.check-tl-ver-94-2.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rqqlj.check-tl-ver-94-2.com/eyes-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&click_id=908bcpmqnh97s151af&sub_id=17136824&nrid=a85509f536b5469dab416c5c310e42e0&hash=lW0gfYOqLt0aQZaAVymQjg&exp=1714161895
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 204 No Content
date: Fri, 26 Apr 2024 19:59:55 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 4591
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=AMw%2FiLYttTy5PIiUiDEj8IszKGRGJrYMoro9Vo3iWjE3pHAjXHk9pTxVhCsADMv0zefgWDqOuumqfgN10ynL%2BwHqhofJCnlAa6QAcp%2FvBr2sAe4eMmAniQG%2B5t6KD8Ft3c6HnXVk%2FdmrcnBk2fs%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a927f6a85c568e-OSL
alt-svc: h3=":443"; ma=86400
|
|
| www.gstatic.com/firebasejs/10.3.1/firebase-app-compat.js | 142.250.74.35 | | 9.3 kB |
URL www.gstatic.com/firebasejs/10.3.1/firebase-app-compat.js IP142.250.74.35:0
File typeJavaScript source, ASCII text, with very long lines (28368) Hash9900403b65514fad7df39a4e788a6e45 75f9ba061ef4e72bb23528c700f2a11c56d637e9 a202b2051ea9810cd9ba592b3f9418a89e2062f5c185e29e288080b28eb64fe5
GET /firebasejs/10.3.1/firebase-app-compat.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rqqlj.check-tl-ver-94-2.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/firebase-js
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="firebase-js"
report-to: {"group":"firebase-js","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/firebase-js"}]}
content-length: 9308
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 26 Apr 2024 06:13:11 GMT
expires: Sat, 26 Apr 2025 06:13:11 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 31 Aug 2023 15:20:38 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 49605
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.gstatic.com/firebasejs/10.3.1/firebase-messaging-compat.js | 142.250.74.35 | | 9.9 kB |
URL www.gstatic.com/firebasejs/10.3.1/firebase-messaging-compat.js IP142.250.74.35:0
File typeJavaScript source, ASCII text, with very long lines (38231) Hash0541b823dfaf39162ef84cf075c9951b e0934726455558cc1a59823efada9651e33aafaa 21f1d62f222007068c793f0947d98f4ccb7c1595adb68efeb783390fdd8b5522
GET /firebasejs/10.3.1/firebase-messaging-compat.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rqqlj.check-tl-ver-94-2.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/firebase-js
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="firebase-js"
report-to: {"group":"firebase-js","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/firebase-js"}]}
content-length: 9934
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 25 Apr 2024 02:47:22 GMT
expires: Fri, 25 Apr 2025 02:47:22 GMT
cache-control: public, max-age=31536000
age: 148354
last-modified: Thu, 31 Aug 2023 15:20:50 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| cdnstatic.check-tl-ver-94-1.com/ps/config.js?id=4l9EZwXc2kSH_LKKjogwWA | 188.114.96.1 | | 11 kB |
URL cdnstatic.check-tl-ver-94-1.com/ps/config.js?id=4l9EZwXc2kSH_LKKjogwWA IP188.114.96.1:0
File typeASCII text, with CRLF line terminators Hashdc65a2fbfc4c76147b8b778b759c8d91 b8374137f0fe797e6a7e58c0c6ef14aa7a6b9855 7e85c285fd983223d07a014d1a96804ba1c8f65fb43238a4fad204350e896958
GET /ps/config.js?id=4l9EZwXc2kSH_LKKjogwWA HTTP/1.1
Host: cdnstatic.check-tl-ver-94-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://qb.check-tl-ver-94-1.com/
Cookie: __psu=0baf6f2c-55cb-4484-aae2-65d1f2b4b6b1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:59:54 GMT
content-type: application/javascript
cache-control: max-age=0, no-cache, no-store, must-revalidate
accept-ch: Sec-CH-UA, Sec-CH-UA-Platform, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
cf-cache-status: BYPASS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=XPaiKZDggJ9QkKLuE2RPWCWKrE%2B5OJEPQq7vthbjruILV1i4wPZLuePIxd5kWM6vCaZG4tIsluAwQ5pfK7DhRmNpIWSKa%2B%2BuA%2FFqYNaQX0Hl%2Fw2WhGvgnoIeNuQ1%2B2ixo3wtmTwAKM6hr3fyf%2By3b%2Baq"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a927ed3cd90b31-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| wa.check-tl-ver-94-2.com/eyes-robot/assets/2.png | 104.21.33.96 | | 1.1 kB |
URL wa.check-tl-ver-94-2.com/eyes-robot/assets/2.png IP104.21.33.96:0
File typePNG image data, 94 x 19, 8-bit colormap, non-interlaced Hashd708fbf0358752a082f5a394b74adda8 231c1527b4b039eb3af7d7e9eb5587ed87f6ea81 09d12e3c0e65fda26b9073e70e02fb24fa6941a4a3b1b81211b6470f00769ea5
GET /eyes-robot/assets/2.png HTTP/1.1
Host: wa.check-tl-ver-94-2.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://wa.check-tl-ver-94-2.com/eyes-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&click_id=908bcpmqnh97s151af&sub_id=17136824&nrid=a85509f536b5469dab416c5c310e42e0&hash=lW0gfYOqLt0aQZaAVymQjg&exp=1714161895
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:59:56 GMT
content-type: image/png
content-length: 1061
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
etag: "6627c958-425"
cache-control: max-age=14400
cf-cache-status: HIT
age: 1935
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=YFFCtOErA6mvj2DOh5JN8whKD04dFg2cVcPrPwA%2FiMNrpisIdxr5kED8r29T7T381f1pRhuX5AOYw%2FSNdWlg0egRN7P9SrqijcVsWc57Ls9nqXiahNC9kNkUiOf5sXXV6ZG8Y9j1Z4JVMJ8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a927f82aaf568e-OSL
alt-svc: h3=":443"; ma=86400
|
|
| wb.check-tl-ver-94-2.com/shared-js/assets/static-pl.js?v=2 | 104.21.33.96 | | 12 kB |
URL wb.check-tl-ver-94-2.com/shared-js/assets/static-pl.js?v=2 IP104.21.33.96:0
File typeJavaScript source, ASCII text, with CRLF line terminators Hash7224243dd0b18bb2508a1d77d4b2a0b2 bd833c24aa241861316053fd8bd46a1bef3d343f 920aa94a10634fc23234b5e4f55c428f6311fc7811d3591792381678cb492659
GET /shared-js/assets/static-pl.js?v=2 HTTP/1.1
Host: wb.check-tl-ver-94-2.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://wb.check-tl-ver-94-2.com/space-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=space-robot&click_id=e5c53pmqnh98plp47e&sub_id=17154615&nrid=e94bdec004ef4a49a14064b067a05785&hash=as5yObg-2mIUl07-4e6qOA&exp=1714161882
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:59:43 GMT
content-type: application/javascript
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
etag: W/"6627c958-dee"
cache-control: max-age=14400
cf-cache-status: HIT
age: 1917
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=sO6B%2B4j0rdPgDcRcmT%2FymqiNUl0TrP%2B6tA%2BqDq%2BPzri5DSEW8wQJdLoRnlf9qpvFSAxNxctXXWrlDc1anVj3q6vNc9UXRndQmcOthn%2BH0%2Bgqn5Ai9OLcrZdiBT%2FbBTn2eZ64znb%2BQ7bu2Jw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a927a8ffcf568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| wa.check-tl-ver-94-2.com/eyes-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&click_id=908bcpmqnh97s151af&sub_id=17136824&nrid=a85509f536b5469dab416c5c310e42e0&hash=lW0gfYOqLt0aQZaAVymQjg&exp=1714161895 | 104.21.33.96 | | 16 kB |
URL wa.check-tl-ver-94-2.com/eyes-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&click_id=908bcpmqnh97s151af&sub_id=17136824&nrid=a85509f536b5469dab416c5c310e42e0&hash=lW0gfYOqLt0aQZaAVymQjg&exp=1714161895 IP104.21.33.96:0
File typeHTML document, Unicode text, UTF-8 text, with CRLF line terminators Hash666203c2cfc7ee8aafbd1cbf9ec04c69 7d74e745174fe6140ee2fbe1fe8b8c2ae33ade9a 57027a083c9c7eaf8a078a7090c454b254216a4a94782e2445fb71629725531b
GET /eyes-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&click_id=908bcpmqnh97s151af&sub_id=17136824&nrid=a85509f536b5469dab416c5c310e42e0&hash=lW0gfYOqLt0aQZaAVymQjg&exp=1714161895 HTTP/1.1
Host: wa.check-tl-ver-94-2.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rqqlj.check-tl-ver-94-2.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:59:56 GMT
content-type: text/html
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=UkT63IVStkJ1C2oG8feagJll%2BvPhXcIs%2BRd%2FtwLK4If0yrxozuxYPqH0YFKqHwtsy3NYxsrxVcxB%2F%2Bm4Sip%2FNRNPYZSFv2tqqZyyaIw7ATn%2FWoh6uK87HYDvoZs9zt3wLkN%2BiUfhBiM48Fw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87a927f7aa00568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| www.gstatic.com/firebasejs/10.3.1/firebase-app-compat.js | 142.250.74.35 | | 9.3 kB |
URL www.gstatic.com/firebasejs/10.3.1/firebase-app-compat.js IP142.250.74.35:0
File typeJavaScript source, ASCII text, with very long lines (28368) Hash9900403b65514fad7df39a4e788a6e45 75f9ba061ef4e72bb23528c700f2a11c56d637e9 a202b2051ea9810cd9ba592b3f9418a89e2062f5c185e29e288080b28eb64fe5
GET /firebasejs/10.3.1/firebase-app-compat.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://wa.check-tl-ver-94-2.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/firebase-js
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="firebase-js"
report-to: {"group":"firebase-js","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/firebase-js"}]}
content-length: 9308
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 26 Apr 2024 06:13:11 GMT
expires: Sat, 26 Apr 2025 06:13:11 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 31 Aug 2023 15:20:38 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 49605
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.gstatic.com/firebasejs/10.3.1/firebase-messaging-compat.js | 142.250.74.35 | | 9.9 kB |
URL www.gstatic.com/firebasejs/10.3.1/firebase-messaging-compat.js IP142.250.74.35:0
File typeJavaScript source, ASCII text, with very long lines (38231) Hash0541b823dfaf39162ef84cf075c9951b e0934726455558cc1a59823efada9651e33aafaa 21f1d62f222007068c793f0947d98f4ccb7c1595adb68efeb783390fdd8b5522
GET /firebasejs/10.3.1/firebase-messaging-compat.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://wa.check-tl-ver-94-2.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/firebase-js
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="firebase-js"
report-to: {"group":"firebase-js","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/firebase-js"}]}
content-length: 9934
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 25 Apr 2024 02:47:22 GMT
expires: Fri, 25 Apr 2025 02:47:22 GMT
cache-control: public, max-age=31536000
age: 148354
last-modified: Thu, 31 Aug 2023 15:20:50 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| wa.check-tl-ver-94-2.com/shared-js/assets/static-pl.js?v=2 | 104.21.33.96 | | 12 kB |
URL wa.check-tl-ver-94-2.com/shared-js/assets/static-pl.js?v=2 IP104.21.33.96:0
File typeJavaScript source, ASCII text, with CRLF line terminators Hash7224243dd0b18bb2508a1d77d4b2a0b2 bd833c24aa241861316053fd8bd46a1bef3d343f 920aa94a10634fc23234b5e4f55c428f6311fc7811d3591792381678cb492659
GET /shared-js/assets/static-pl.js?v=2 HTTP/1.1
Host: wa.check-tl-ver-94-2.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://wa.check-tl-ver-94-2.com/eyes-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&click_id=908bcpmqnh97s151af&sub_id=17136824&nrid=a85509f536b5469dab416c5c310e42e0&hash=lW0gfYOqLt0aQZaAVymQjg&exp=1714161895
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:59:56 GMT
content-type: application/javascript
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
etag: W/"6627c958-dee"
cache-control: max-age=14400
cf-cache-status: HIT
age: 6054
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=CWZeXwli3CdjOhlRRq9h5jXsd8UhDhC8ScTxNSZlWEN%2BNksk%2BWisg92nOoTZeXYMH%2B%2Bl%2FtoLP71k6zjaI5mGQML6ps%2B53yHC45TIdxdU%2BuGjo%2FR4zk1CqenCc%2B1gF4sBerhT%2B%2F%2FPb4UOk4Q%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a927f83abe568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| rqqlj.check-tl-ver-94-1.com/eyes-robot/assets/trls.js | 188.114.96.1 | | 18 kB |
URL rqqlj.check-tl-ver-94-1.com/eyes-robot/assets/trls.js IP188.114.96.1:0
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (362), with CRLF line terminators Hash0cdacbfa8d68265ac3893b159a75682a a85878b59036d00ac878739dc187305bc29df8c3 2fb2aad4f3b3426df4bb5633b627f529940bd06d0690f6b11cfcf42f0fea3e4b
GET /eyes-robot/assets/trls.js HTTP/1.1
Host: rqqlj.check-tl-ver-94-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rqqlj.check-tl-ver-94-1.com/eyes-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&click_id=b5176pmqnh97sy9383&sub_id=17136824&nrid=0d1830daf4ff480b847baabb4904856b&hash=uIegkRK-kT8MTEn190s45Q&exp=1714161893
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:59:53 GMT
content-type: application/javascript
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
etag: W/"6627c958-2af6"
cache-control: max-age=14400
cf-cache-status: HIT
age: 4765
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=y%2FtBkxIPrra2QQ2mjFWzMZtAsNsvZNWSdRSskS%2B9o4CpC6Usmi0IrBughiKyX91wWq5NflN95I9X8thLL8lzVQJ0GADaHjMoC7osdegDRSqE9F3fOqoSksmGXHrvBLMY2BaB%2BG1fuqiliErc6ak%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a927e78dd10b31-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| wa.check-tl-ver-94-2.com/eyes-robot/assets/style.css | 104.21.33.96 | | 13 kB |
URL wa.check-tl-ver-94-2.com/eyes-robot/assets/style.css IP104.21.33.96:0
File typeASCII text, with CRLF line terminators Hasha18afa3eac509b6062c9362a725ac421 5e06e9b3af42189e9456a7ea3bda665e10c86405 29ee31143c5bd03b7dcaf2e40476e50c4ed26d32a725525a4f3dced678c90896
GET /eyes-robot/assets/style.css HTTP/1.1
Host: wa.check-tl-ver-94-2.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://wa.check-tl-ver-94-2.com/eyes-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&click_id=908bcpmqnh97s151af&sub_id=17136824&nrid=a85509f536b5469dab416c5c310e42e0&hash=lW0gfYOqLt0aQZaAVymQjg&exp=1714161895
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:59:56 GMT
content-type: text/css
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
etag: W/"6627c958-cf6"
cache-control: max-age=14400
cf-cache-status: HIT
age: 1935
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wsrVmrlOzwVNWGOil%2Fc2XXS8cGMh4G02M54o6UAA750WM%2F1cvYUn0nz0IbcO2dIAUDIyyv8kiNv4zjSifmroLuoYQ7bMohHP6YEIgrVbzXLVTZBILWsVwSVkOfoFXE8bin4AyPcw7fh7Fyo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a927f82aa5568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| wb.check-tl-ver-94-2.com/eyes-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&click_id=908bcpmqnh97s151af&sub_id=17136824&nrid=a85509f536b5469dab416c5c310e42e0&hash=lW0gfYOqLt0aQZaAVymQjg&exp=1714161895 | 104.21.33.96 | | 16 kB |
URL wb.check-tl-ver-94-2.com/eyes-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&click_id=908bcpmqnh97s151af&sub_id=17136824&nrid=a85509f536b5469dab416c5c310e42e0&hash=lW0gfYOqLt0aQZaAVymQjg&exp=1714161895 IP104.21.33.96:0
File typeHTML document, Unicode text, UTF-8 text, with CRLF line terminators Hash666203c2cfc7ee8aafbd1cbf9ec04c69 7d74e745174fe6140ee2fbe1fe8b8c2ae33ade9a 57027a083c9c7eaf8a078a7090c454b254216a4a94782e2445fb71629725531b
GET /eyes-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&click_id=908bcpmqnh97s151af&sub_id=17136824&nrid=a85509f536b5469dab416c5c310e42e0&hash=lW0gfYOqLt0aQZaAVymQjg&exp=1714161895 HTTP/1.1
Host: wb.check-tl-ver-94-2.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://wa.check-tl-ver-94-2.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:59:56 GMT
content-type: text/html
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5fpx1BXejzM4DH4SxDY%2FUlWkggC9giJPUeOSU6z9X%2BIMkK83qJ27BySOogeATEm6KzIb9ZefEz99essG%2B9JOmofKny%2F0kDrpXb8erqxUiCF6kANSrBaBsVbHn78NdTLE%2FnlCQm8JKOoTdY8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87a927f99ce2568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| www.gstatic.com/firebasejs/10.3.1/firebase-app-compat.js | 142.250.74.35 | | 9.3 kB |
URL www.gstatic.com/firebasejs/10.3.1/firebase-app-compat.js IP142.250.74.35:0
File typeJavaScript source, ASCII text, with very long lines (28368) Hash9900403b65514fad7df39a4e788a6e45 75f9ba061ef4e72bb23528c700f2a11c56d637e9 a202b2051ea9810cd9ba592b3f9418a89e2062f5c185e29e288080b28eb64fe5
GET /firebasejs/10.3.1/firebase-app-compat.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://wb.check-tl-ver-94-2.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/firebase-js
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="firebase-js"
report-to: {"group":"firebase-js","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/firebase-js"}]}
content-length: 9308
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 26 Apr 2024 06:13:11 GMT
expires: Sat, 26 Apr 2025 06:13:11 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 31 Aug 2023 15:20:38 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 49605
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.gstatic.com/firebasejs/10.3.1/firebase-messaging-compat.js | 142.250.74.35 | | 9.9 kB |
URL www.gstatic.com/firebasejs/10.3.1/firebase-messaging-compat.js IP142.250.74.35:0
File typeJavaScript source, ASCII text, with very long lines (38231) Hash0541b823dfaf39162ef84cf075c9951b e0934726455558cc1a59823efada9651e33aafaa 21f1d62f222007068c793f0947d98f4ccb7c1595adb68efeb783390fdd8b5522
GET /firebasejs/10.3.1/firebase-messaging-compat.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://wb.check-tl-ver-94-2.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/firebase-js
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="firebase-js"
report-to: {"group":"firebase-js","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/firebase-js"}]}
content-length: 9934
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 25 Apr 2024 02:47:22 GMT
expires: Fri, 25 Apr 2025 02:47:22 GMT
cache-control: public, max-age=31536000
age: 148354
last-modified: Thu, 31 Aug 2023 15:20:50 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.profitablegatecpm.com/kdh8vzj5?key=8b11074707021e921e03466cc441e4a1 | 172.240.127.234 | | 1.3 kB |
URL www.profitablegatecpm.com/kdh8vzj5?key=8b11074707021e921e03466cc441e4a1 IP172.240.127.234:0
File typeHTML document, ASCII text, with very long lines (412) Hash0d8fe8528b997e4cd9d2ee03572036e7 c0da3cc721dc3aedd0435b29574b25e2038a159a 51addf648f007acbea6782cca16775cba394e47be0d805a791874856dd9a0fa0
GET /kdh8vzj5?key=8b11074707021e921e03466cc441e4a1 HTTP/1.1
Host: www.profitablegatecpm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: u_pl=17136824; ain=eyJhbGciOiJIUzI1NiJ9.eyJwIjp7ImlkIjoxNzEzNjgyNCwiayI6IjhiMTEwNzQ3MDcwMjFlOTIxZTAzNDY2Y2M0NDFlNGExIiwic2lkIjoiIiwiaXNpZCI6MiwiYXNpZCI6MSwiemlkIjoxODAyNTQyLCJwaWQiOjQyNzY1NywiYW4iOnRydWUsImxhbiI6dHJ1ZSwiY2lkIjozMSwiYWlkIjoyOCwicHQiOjQsInBrIjoia2RoOHZ6ajUiLCJ0IjoxfSwidSI6eyJ1IjoxLCJhdSI6MSwiZCI6eyJpZCI6Nzk5NTQxOTYsImlkcyI6IiIsImljIjpmYWxzZSwibiI6IkRlc2t0b3AsRW11bGF0b3IiLCJ2IjoiVW5rbm93biIsIm0iOiJVbmtub3duIiwiZiI6MSwiZm4iOiJEZXNrdG9wIiwib2lkIjoxODExMCwib24iOiJMaW51eCIsIm92IjoiVW5rbm93biIsImJpZCI6MTE2NjcwLCJibiI6IkZpcmVmb3giLCJidiI6Ijk2LjAiLCJ3diI6ZmFsc2UsImUiOmZhbHNlLCJhYiI6ZmFsc2V9LCJjIjp7ImlkIjoxNjIsImMiOiJOTyIsIm4iOiJOb3J3YXkifSwiYSI6ZmFsc2UsImNyIjp7Im4iOiJCbGl4IFNvbHV0aW9ucyJ9LCJ4ZiI6IiIsIml4ZiI6ZmFsc2UsImlneGYiOmZhbHNlLCJ1cCI6ZmFsc2UsInIiOiIiLCJhciI6W119fQ.A-hs6t-ALqez_ye67ir0JBECLHlUOBU2KXOfKE4BRtQ; cjs=t
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Fri, 26 Apr 2024 19:59:56 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Set-Cookie: ain=eyJhbGciOiJIUzI1NiJ9.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.A-hs6t-ALqez_ye67ir0JBECLHlUOBU2KXOfKE4BRtQ; expires=Fri, 26 Apr 2024 20:00:56 GMT
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 7c7666352532df19e66c05bffc5ef13e
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
|
|
| rqqlj.check-tl-ver-94-2.com/eyes-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&click_id=908bcpmqnh97s151af&sub_id=17136824&nrid=a85509f536b5469dab416c5c310e42e0&hash=lW0gfYOqLt0aQZaAVymQjg&exp=1714161895 | 104.21.33.96 | | 444 B |
URL rqqlj.check-tl-ver-94-2.com/eyes-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&click_id=908bcpmqnh97s151af&sub_id=17136824&nrid=a85509f536b5469dab416c5c310e42e0&hash=lW0gfYOqLt0aQZaAVymQjg&exp=1714161895 IP104.21.33.96:0
File typeHTML document, Unicode text, UTF-8 text, with CRLF line terminators Hash666203c2cfc7ee8aafbd1cbf9ec04c69 7d74e745174fe6140ee2fbe1fe8b8c2ae33ade9a 57027a083c9c7eaf8a078a7090c454b254216a4a94782e2445fb71629725531b
GET /eyes-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&click_id=908bcpmqnh97s151af&sub_id=17136824&nrid=a85509f536b5469dab416c5c310e42e0&hash=lW0gfYOqLt0aQZaAVymQjg&exp=1714161895 HTTP/1.1
Host: rqqlj.check-tl-ver-94-2.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.profitablegatecpm.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:59:55 GMT
content-type: text/html
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=JoEwmT3Z%2BqM0EyuRa%2BG%2B%2FgH2lsIFWcqcdB6qaMBUkvwANR1CS5s%2BDw%2FOlDjf1%2BBRI%2BzD%2Bnr1TRKh1GdVPIbwpkCRm3OpX0U2YVCjtDRKFWmwahlPqQ2UkSwIyCl8pkYHIVDQbY2TuiPGwyUJ4C4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87a927f4bd24568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| nylonnickel.xyz/c9b2l0k.php?key=ssh20i85vx88tciu4a4m&SUB_ID_SHORT=391397129380a075787fee172579838a&COST_CPC=&PLACEMENT_ID=17136824&CAMPAIGN_ID=1028982&DEVICE_BRAND=Unknown&BROWSER_NAME=Firefox&USER_OS=Linux&USER_CARRIER=Blix%20Solutions&USERAGENT=Mozilla%2F5.0%20%28X11%3B%20Linux%20x86_64%3B%20rv%3A96.0%29%20Gecko%2F20100101%20Firefox%2F96.0&REMOTE_LANGUAGE=11&BANNER_ID=2901049 | 192.64.81.118 | | 0 B |
URL nylonnickel.xyz/c9b2l0k.php?key=ssh20i85vx88tciu4a4m&SUB_ID_SHORT=391397129380a075787fee172579838a&COST_CPC=&PLACEMENT_ID=17136824&CAMPAIGN_ID=1028982&DEVICE_BRAND=Unknown&BROWSER_NAME=Firefox&USER_OS=Linux&USER_CARRIER=Blix%20Solutions&USERAGENT=Mozilla%2F5.0%20%28X11%3B%20Linux%20x86_64%3B%20rv%3A96.0%29%20Gecko%2F20100101%20Firefox%2F96.0&REMOTE_LANGUAGE=11&BANNER_ID=2901049 IP192.64.81.118:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /c9b2l0k.php?key=ssh20i85vx88tciu4a4m&SUB_ID_SHORT=391397129380a075787fee172579838a&COST_CPC=&PLACEMENT_ID=17136824&CAMPAIGN_ID=1028982&DEVICE_BRAND=Unknown&BROWSER_NAME=Firefox&USER_OS=Linux&USER_CARRIER=Blix%20Solutions&USERAGENT=Mozilla%2F5.0%20%28X11%3B%20Linux%20x86_64%3B%20rv%3A96.0%29%20Gecko%2F20100101%20Firefox%2F96.0&REMOTE_LANGUAGE=11&BANNER_ID=2901049 HTTP/1.1
Host: nylonnickel.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.profitablegatecpm.com/
DNT: 1
Connection: keep-alive
Cookie: uclick=pmqnh98plp; uclickhash=pmqnh98plp-pmqnh97s15-xr46-0-usgm6o-9rib8n-9ribwj-820f62
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Server: nginx/1.22.0
Date: Fri, 26 Apr 2024 19:59:57 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: uclick=pmqnh98plp; expires=Sat, 27-Apr-2024 19:59:57 GMT; Max-Age=86400; path=/; secure; SameSite=none
uclickhash=pmqnh98plp-pmqnh9qeb7-xr46-0-usgm6o-9rib8n-9ribwj-2ff061; expires=Sat, 27-Apr-2024 19:59:57 GMT; Max-Age=86400; path=/; secure; SameSite=none
Location: https://rqqlj.canopusacrux.com/?pl=4l9EZwXc2kSH_LKKjogwWA&click_id=a08e4pmqnh9qeb7945&sub_id=17136824
Strict-Transport-Security: max-age=31536000
|
|
| rqqlj.canopusacrux.com/?pl=4l9EZwXc2kSH_LKKjogwWA&click_id=a08e4pmqnh9qeb7945&sub_id=17136824 | 188.114.96.1 | | 0 B |
URL rqqlj.canopusacrux.com/?pl=4l9EZwXc2kSH_LKKjogwWA&click_id=a08e4pmqnh9qeb7945&sub_id=17136824 IP188.114.96.1:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /?pl=4l9EZwXc2kSH_LKKjogwWA&click_id=a08e4pmqnh9qeb7945&sub_id=17136824 HTTP/1.1
Host: rqqlj.canopusacrux.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.profitablegatecpm.com/
DNT: 1
Connection: keep-alive
Cookie: 4l9EZwXc2kSH_LKKjogwWA=5; __pl=7b0cedb7-6011-4ef6-b6e5-14fb3b89903d; __cap=6
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 302 Found
date: Fri, 26 Apr 2024 19:59:57 GMT
content-length: 0
location: https://rqqlj.check-tl-ver-154-1.com/eyes-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&click_id=a08e4pmqnh9qeb7945&sub_id=17136824&nrid=119a2b166a414fb98068f49253e258ed&hash=pi8N7SVX8oR6PIXuooBTXQ&exp=1714161897
set-cookie: 4l9EZwXc2kSH_LKKjogwWA=5; max-age=345600; path=/; samesite=lax
__pl=7b0cedb7-6011-4ef6-b6e5-14fb3b89903d; expires=Sun, 26 Apr 2026 19:59:57 GMT; path=/; samesite=lax
__cap=7; max-age=3600; path=/; samesite=lax
cache-control: max-age=0, no-cache, no-store, must-revalidate
accept-ch: Sec-CH-UA, Sec-CH-UA-Platform, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0%2BAB6T%2F86n1hR2rwNIrFYFt32EGi229jbAFheNVD55sNARLaCkvv8JeWbsbVB2e9pXhsTa6JKJ4s44dW02Ur348CXnf8%2BcTP%2F%2F15bgy8SgiQnTQWeJVUfJFIP%2BkgfVgMJBcKkEGpPBtp"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87a928022d4356b7-OSL
alt-svc: h3=":443"; ma=86400
|
|
| rqqlj.check-tl-ver-154-1.com/eyes-robot/assets/2.png | 188.114.97.1 | | 1.1 kB |
URL rqqlj.check-tl-ver-154-1.com/eyes-robot/assets/2.png IP188.114.97.1:0
File typePNG image data, 94 x 19, 8-bit colormap, non-interlaced Hashd708fbf0358752a082f5a394b74adda8 231c1527b4b039eb3af7d7e9eb5587ed87f6ea81 09d12e3c0e65fda26b9073e70e02fb24fa6941a4a3b1b81211b6470f00769ea5
GET /eyes-robot/assets/2.png HTTP/1.1
Host: rqqlj.check-tl-ver-154-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rqqlj.check-tl-ver-154-1.com/eyes-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&click_id=a08e4pmqnh9qeb7945&sub_id=17136824&nrid=119a2b166a414fb98068f49253e258ed&hash=pi8N7SVX8oR6PIXuooBTXQ&exp=1714161897
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:59:57 GMT
content-type: image/png
content-length: 1061
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
etag: "6627c958-425"
cache-control: max-age=14400
cf-cache-status: HIT
age: 5770
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=YCmlLH2dj1tPeP26%2F8LWEYLSXIzA0amZxTo9MuTxSECHtTdEEsb%2BXFnVvCVEeLY15TDk7GRZOsu2QPIfOfvu8TtGGx4kETAjmh5tDRIRHjoxXvg9WeQbash0GHi%2BXqJOGxQyR%2BnFAAdjcOLn2iI0"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a9280369bcb52d-OSL
alt-svc: h3=":443"; ma=86400
|
|
| qa.check-tl-ver-94-1.com/shared-js/assets/static-pl.js?v=2 | 172.67.147.142 | | 12 kB |
URL qa.check-tl-ver-94-1.com/shared-js/assets/static-pl.js?v=2 IP172.67.147.142:0
File typeJavaScript source, ASCII text, with CRLF line terminators Hash7224243dd0b18bb2508a1d77d4b2a0b2 bd833c24aa241861316053fd8bd46a1bef3d343f 920aa94a10634fc23234b5e4f55c428f6311fc7811d3591792381678cb492659
GET /shared-js/assets/static-pl.js?v=2 HTTP/1.1
Host: qa.check-tl-ver-94-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://qa.check-tl-ver-94-1.com/eyes-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&click_id=b5176pmqnh97sy9383&sub_id=17136824&nrid=0d1830daf4ff480b847baabb4904856b&hash=uIegkRK-kT8MTEn190s45Q&exp=1714161893
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:59:53 GMT
content-type: application/javascript
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
etag: W/"6627c958-dee"
cache-control: max-age=14400
cf-cache-status: HIT
age: 3348
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7OaE1bsI0QXTGEJb%2BAYipfVScPet64%2BWeB0tCA6UwFvxKIfOBZr2tnvRX1YlImftW0kOzxvUhjA0SudDwfyhjNA%2FRu2I4kQ5tokzPDhQdNGu6iFog9H2aAp5dB90IPwPpi4xD%2F%2FlbkulJfY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a927e9e974569c-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| rqqlj.check-tl-ver-154-1.com/eyes-robot/assets/image.png | 188.114.97.1 | | 11 kB |
URL rqqlj.check-tl-ver-154-1.com/eyes-robot/assets/image.png IP188.114.97.1:0
File typePNG image data, 260 x 260, 8-bit colormap, non-interlaced Hashca1f4de0ad1d4fad72d299a6411e6959 c9f6d409f09264a34ee8bac4265233c56c280d1a f0434a1fc8ffba3a47bbb9f1fa5a2f789651a020e7b86e507ff300b7c367057f
GET /eyes-robot/assets/image.png HTTP/1.1
Host: rqqlj.check-tl-ver-154-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rqqlj.check-tl-ver-154-1.com/eyes-robot/assets/style.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:59:58 GMT
content-type: image/png
content-length: 11043
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
etag: "6627c958-2b23"
cache-control: max-age=14400
cf-cache-status: HIT
age: 5211
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RIzDbCNFw3ABeXI%2FFiQiCIH444bELsphuYn7xdgxr6qiSocJz2fmM09AbsCMSIDut4tStveqGK6lHmuBuq6DY%2FiDFEElsojlKb5m0a6c2nq9WQeFMpr5NdXikeH0waDs4cv6KqH7P29iOodPSM2%2F"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a92803ca17b52d-OSL
alt-svc: h3=":443"; ma=86400
|
|
| wb.check-tl-ver-94-2.com/shared-js/assets/static-pl.js?v=2 | 104.21.33.96 | | 1.2 kB |
URL wb.check-tl-ver-94-2.com/shared-js/assets/static-pl.js?v=2 IP104.21.33.96:0
File typeJavaScript source, ASCII text, with CRLF line terminators Hash7224243dd0b18bb2508a1d77d4b2a0b2 bd833c24aa241861316053fd8bd46a1bef3d343f 920aa94a10634fc23234b5e4f55c428f6311fc7811d3591792381678cb492659
GET /shared-js/assets/static-pl.js?v=2 HTTP/1.1
Host: wb.check-tl-ver-94-2.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://wb.check-tl-ver-94-2.com/eyes-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&click_id=908bcpmqnh97s151af&sub_id=17136824&nrid=a85509f536b5469dab416c5c310e42e0&hash=lW0gfYOqLt0aQZaAVymQjg&exp=1714161895
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:59:56 GMT
content-type: application/javascript
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
etag: W/"6627c958-dee"
cache-control: max-age=14400
cf-cache-status: HIT
age: 1930
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8xZe4mZXTYf0rKdIPdzulv9bgrJxd44NSfGU3hDn8qghXJox6zmXn1hrdMxhkzNrg0STi%2B2UiHPanBlxVQXPp86AoE1vm2k8rmiAA0C5GE8KsW2ErT6BJsGEggLXhFvhPeXkMdJcssHgQrc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a927fa4e2e568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| cdnstatic.check-tl-ver-154-1.com/ps/config.js?id=4l9EZwXc2kSH_LKKjogwWA | 188.114.97.1 | | 9.8 kB |
URL cdnstatic.check-tl-ver-154-1.com/ps/config.js?id=4l9EZwXc2kSH_LKKjogwWA IP188.114.97.1:0
File typeASCII text, with CRLF line terminators Hashdc65a2fbfc4c76147b8b778b759c8d91 b8374137f0fe797e6a7e58c0c6ef14aa7a6b9855 7e85c285fd983223d07a014d1a96804ba1c8f65fb43238a4fad204350e896958
GET /ps/config.js?id=4l9EZwXc2kSH_LKKjogwWA HTTP/1.1
Host: cdnstatic.check-tl-ver-154-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://qa.check-tl-ver-154-1.com/
Cookie: __psu=fb863536-3c01-41b4-b5f3-4d4cc7b5b99f
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:59:49 GMT
content-type: application/javascript
cache-control: max-age=0, no-cache, no-store, must-revalidate
accept-ch: Sec-CH-UA, Sec-CH-UA-Platform, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
cf-cache-status: BYPASS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Q2mEKJgSSfSqhoxGcI3S0I7ccEficEA%2F3Yypl0Wo9iIZAJuq3TuoUgQmv%2BKKfUH2tX8m1y1%2FqcskmNSoJj%2BlqXuaTT%2Fmtge%2BMadKe1D4YQkkrmGQGDHeYFlFeP%2B43p%2BiOH9893dpVHGlTwG1fc4a52115Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a927cd1f6ab52d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| www.gstatic.com/firebasejs/10.3.1/firebase-messaging-compat.js | 142.250.74.35 | | 9.9 kB |
URL www.gstatic.com/firebasejs/10.3.1/firebase-messaging-compat.js IP142.250.74.35:0
File typeJavaScript source, ASCII text, with very long lines (38231) Hash0541b823dfaf39162ef84cf075c9951b e0934726455558cc1a59823efada9651e33aafaa 21f1d62f222007068c793f0947d98f4ccb7c1595adb68efeb783390fdd8b5522
GET /firebasejs/10.3.1/firebase-messaging-compat.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rqqlj.check-tl-ver-154-1.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/firebase-js
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="firebase-js"
report-to: {"group":"firebase-js","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/firebase-js"}]}
content-length: 9934
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 25 Apr 2024 02:47:22 GMT
expires: Fri, 25 Apr 2025 02:47:22 GMT
cache-control: public, max-age=31536000
age: 148356
last-modified: Thu, 31 Aug 2023 15:20:50 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| rqqlj.check-tl-ver-154-1.com/eyes-robot/assets/style.css | 188.114.97.1 | | 25 kB |
URL rqqlj.check-tl-ver-154-1.com/eyes-robot/assets/style.css IP188.114.97.1:0
File typeASCII text, with CRLF line terminators Hasha18afa3eac509b6062c9362a725ac421 5e06e9b3af42189e9456a7ea3bda665e10c86405 29ee31143c5bd03b7dcaf2e40476e50c4ed26d32a725525a4f3dced678c90896
GET /eyes-robot/assets/style.css HTTP/1.1
Host: rqqlj.check-tl-ver-154-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rqqlj.check-tl-ver-154-1.com/eyes-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&click_id=a08e4pmqnh9qeb7945&sub_id=17136824&nrid=119a2b166a414fb98068f49253e258ed&hash=pi8N7SVX8oR6PIXuooBTXQ&exp=1714161897
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:59:57 GMT
content-type: text/css
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
etag: W/"6627c958-cf6"
cache-control: max-age=14400
cf-cache-status: HIT
age: 5770
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rLFsRAIy4g77uPxltdkdo1U6TKtVjd856FYbXidV3ABp9HdENNoKMxOTGUx5lrRWjY72apfvUJ3lAUIz8vNF%2B%2Be2Xe%2BYdR%2BLhAjGlqONsjv%2F44jYusp0Xa8heIkUyn0mQToAJT1Pve5JNzXk9KrE"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a9280359b3b52d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| fa.check-tl-ver-154-1.com/eyes-robot/assets/2.png | 188.114.97.1 | | 1.1 kB |
URL fa.check-tl-ver-154-1.com/eyes-robot/assets/2.png IP188.114.97.1:0
File typePNG image data, 94 x 19, 8-bit colormap, non-interlaced Hashd708fbf0358752a082f5a394b74adda8 231c1527b4b039eb3af7d7e9eb5587ed87f6ea81 09d12e3c0e65fda26b9073e70e02fb24fa6941a4a3b1b81211b6470f00769ea5
GET /eyes-robot/assets/2.png HTTP/1.1
Host: fa.check-tl-ver-154-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fa.check-tl-ver-154-1.com/eyes-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&click_id=a08e4pmqnh9qeb7945&sub_id=17136824&nrid=119a2b166a414fb98068f49253e258ed&hash=pi8N7SVX8oR6PIXuooBTXQ&exp=1714161897
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:59:58 GMT
content-type: image/png
content-length: 1061
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
etag: "6627c958-425"
cache-control: max-age=14400
cf-cache-status: HIT
age: 3287
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=AE%2FVlUGOCcekhxxfWRJqYrWuOdMKzka%2FSfMVRm%2FSP4rlYSPtyaRrJ5DBKKF3zc4L2gg%2FgL%2FlUKSIAV27vRRbnghHiqBppNBrthwW0sM1Vz7dRuXPCECHfRoEL%2FWs8%2FirE1ypvDY5KOgSvWxd"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a928061c6eb52d-OSL
alt-svc: h3=":443"; ma=86400
|
|
| fa.check-tl-ver-154-1.com/eyes-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&click_id=a08e4pmqnh9qeb7945&sub_id=17136824&nrid=119a2b166a414fb98068f49253e258ed&hash=pi8N7SVX8oR6PIXuooBTXQ&exp=1714161897 | 188.114.97.1 | | 12 kB |
URL fa.check-tl-ver-154-1.com/eyes-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&click_id=a08e4pmqnh9qeb7945&sub_id=17136824&nrid=119a2b166a414fb98068f49253e258ed&hash=pi8N7SVX8oR6PIXuooBTXQ&exp=1714161897 IP188.114.97.1:0
File typeHTML document, Unicode text, UTF-8 text, with CRLF line terminators Hash666203c2cfc7ee8aafbd1cbf9ec04c69 7d74e745174fe6140ee2fbe1fe8b8c2ae33ade9a 57027a083c9c7eaf8a078a7090c454b254216a4a94782e2445fb71629725531b
GET /eyes-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&click_id=a08e4pmqnh9qeb7945&sub_id=17136824&nrid=119a2b166a414fb98068f49253e258ed&hash=pi8N7SVX8oR6PIXuooBTXQ&exp=1714161897 HTTP/1.1
Host: fa.check-tl-ver-154-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rqqlj.check-tl-ver-154-1.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:59:58 GMT
content-type: text/html
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=d4w%2B2Yeoy0Csp6%2BNBIYzNA4mJ0qM0v2yCY%2Fq%2FcFa1UBY5amokkFAF3CttLZF%2FfhV%2FRNZ6gJU09f5bufmZTjxJPOJLQI3YJjVXpxMkuYIOzH%2Fzdv%2F9pJZMnUhL46vV94%2FRG8bgTGvfP7bqjfy"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87a928056bccb52d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| rqqlj.check-tl-ver-94-2.com/eyes-robot/assets/style.css | 104.21.33.96 | | 15 kB |
URL rqqlj.check-tl-ver-94-2.com/eyes-robot/assets/style.css IP104.21.33.96:0
File typeASCII text, with CRLF line terminators Hasha18afa3eac509b6062c9362a725ac421 5e06e9b3af42189e9456a7ea3bda665e10c86405 29ee31143c5bd03b7dcaf2e40476e50c4ed26d32a725525a4f3dced678c90896
GET /eyes-robot/assets/style.css HTTP/1.1
Host: rqqlj.check-tl-ver-94-2.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rqqlj.check-tl-ver-94-2.com/eyes-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&click_id=908bcpmqnh97s151af&sub_id=17136824&nrid=a85509f536b5469dab416c5c310e42e0&hash=lW0gfYOqLt0aQZaAVymQjg&exp=1714161895
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:59:55 GMT
content-type: text/css
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
etag: W/"6627c958-cf6"
cache-control: max-age=14400
cf-cache-status: HIT
age: 580
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6Emf0FIYGo4a1K8DLaSfURpdrJkquXPgT8P%2Ba%2FUI8M3h6JTNZVDTkncMlV%2BRBy0HPF0Mdkds8J7Wn%2BxKFttTcWo3E67MK%2BBosobHXbQl14kmtjjkG23BRntVaD6FvQtXpwfw%2FnoD8FA9su6eLE8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a927f5eebf568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| cdnstatic.check-tl-ver-154-1.com/ps/config.js?id=4l9EZwXc2kSH_LKKjogwWA | 188.114.97.1 | | 9.5 kB |
URL cdnstatic.check-tl-ver-154-1.com/ps/config.js?id=4l9EZwXc2kSH_LKKjogwWA IP188.114.97.1:0
File typeASCII text, with CRLF line terminators Hashdc65a2fbfc4c76147b8b778b759c8d91 b8374137f0fe797e6a7e58c0c6ef14aa7a6b9855 7e85c285fd983223d07a014d1a96804ba1c8f65fb43238a4fad204350e896958
GET /ps/config.js?id=4l9EZwXc2kSH_LKKjogwWA HTTP/1.1
Host: cdnstatic.check-tl-ver-154-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fa.check-tl-ver-154-1.com/
Cookie: __psu=fb863536-3c01-41b4-b5f3-4d4cc7b5b99f
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:59:58 GMT
content-type: application/javascript
cache-control: max-age=0, no-cache, no-store, must-revalidate
accept-ch: Sec-CH-UA, Sec-CH-UA-Platform, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
cf-cache-status: BYPASS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=cZeuyPYQWFL3GdHxebTr%2BFcYlQzEA9OyIP9i86%2BCOnEaG2kl%2FDsq1d3uWCI72KKy83zOvK9jdeqdkW9PwexnUbZhQ%2FpYuHdpBTeDsBlX222IVLNe7hxajTPGLhKtvpANpo1qZy4qF8gTl4PAZOOR9DYGag%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a92806dd41b52d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| www.gstatic.com/firebasejs/10.3.1/firebase-messaging-compat.js | 142.250.74.35 | | 9.9 kB |
URL www.gstatic.com/firebasejs/10.3.1/firebase-messaging-compat.js IP142.250.74.35:0
File typeJavaScript source, ASCII text, with very long lines (38231) Hash0541b823dfaf39162ef84cf075c9951b e0934726455558cc1a59823efada9651e33aafaa 21f1d62f222007068c793f0947d98f4ccb7c1595adb68efeb783390fdd8b5522
GET /firebasejs/10.3.1/firebase-messaging-compat.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fa.check-tl-ver-154-1.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/firebase-js
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="firebase-js"
report-to: {"group":"firebase-js","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/firebase-js"}]}
content-length: 9934
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 25 Apr 2024 02:47:22 GMT
expires: Fri, 25 Apr 2025 02:47:22 GMT
cache-control: public, max-age=31536000
age: 148356
last-modified: Thu, 31 Aug 2023 15:20:50 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| tb.check-tl-ver-154-1.com/blue-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=blue-robot&click_id=39d70pmqnh9xo8r0a3&sub_id=17136824&nrid=6a4cfbf0673e40d796b025bf27880852&hash=TJxFABSBu6uwW6htJKZ2Jw&exp=1714161885 | 188.114.97.1 | | 19 kB |
URL tb.check-tl-ver-154-1.com/blue-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=blue-robot&click_id=39d70pmqnh9xo8r0a3&sub_id=17136824&nrid=6a4cfbf0673e40d796b025bf27880852&hash=TJxFABSBu6uwW6htJKZ2Jw&exp=1714161885 IP188.114.97.1:0
File typeHTML document, ASCII text, with very long lines (1380), with CRLF line terminators Hash9a97caf42661ea48c9a8d347229b398a 5ee1404818c517813439e1a056b4016531fa11c7 8ac0a629dba5a9c8e52055295882680ede84c8d0a9f9e1c1af3636d1f47fa3bd
GET /blue-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=blue-robot&click_id=39d70pmqnh9xo8r0a3&sub_id=17136824&nrid=6a4cfbf0673e40d796b025bf27880852&hash=TJxFABSBu6uwW6htJKZ2Jw&exp=1714161885 HTTP/1.1
Host: tb.check-tl-ver-154-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ta.check-tl-ver-154-1.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:59:46 GMT
content-type: text/html
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9M15D95pJa0WkeTWoJ01d%2B7MfPS9wTvjcKaSD2O26FpkZ9%2FDkhAtgpqfOwey0oVGkMmFZyyiRd%2F5tsmXjlGqfUbRqkb4NGAiuW3SMMkIPXfS2%2BA8oyG0G5372LFqVTuaLSmeKNr7ursWHgXw"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87a927bb7a58b52d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| rqqlj.check-tl-ver-94-1.com/space-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=space-robot&click_id=9320dpmqnh9k2j662b&sub_id=17136824&nrid=01609b32c253432683bb62f4387e6d20&hash=PZmjLYGDSCBisxBtOUPf6g&exp=1714161890 | 188.114.96.1 | | 4.6 kB |
URL rqqlj.check-tl-ver-94-1.com/space-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=space-robot&click_id=9320dpmqnh9k2j662b&sub_id=17136824&nrid=01609b32c253432683bb62f4387e6d20&hash=PZmjLYGDSCBisxBtOUPf6g&exp=1714161890 IP188.114.96.1:0
File typeHTML document, Unicode text, UTF-8 text, with very long lines (474) Hash01041709ecf6a3f0b549820730593c03 55775e4279d24a34f601bf8180d9f280b8131e0d 51907b3319c05ec1c1a7466f4017f4dcc7b6dc59a29ed962bfd36572f223bb51
GET /space-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=space-robot&click_id=9320dpmqnh9k2j662b&sub_id=17136824&nrid=01609b32c253432683bb62f4387e6d20&hash=PZmjLYGDSCBisxBtOUPf6g&exp=1714161890 HTTP/1.1
Host: rqqlj.check-tl-ver-94-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.profitablegatecpm.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 26 Apr 2024 19:59:50 GMT
content-type: text/html
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Gh4PzqvLaBie14apdWQHn85CUGPK4C3s1RgrkhqrC%2Fhtt5jlFsq3PK%2FkDtwDlMvmtLcDHONvHwMe41ilR3VQN%2F4GlM5MmuY1TgmNj%2F37ghUBgt41lVP23OOYJoiuqY%2B6BnzgI%2Bf7Z8Gx3kHX4z0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87a927d75b12b4f4-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| fb.check-tl-ver-154-1.com/eyes-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&click_id=a08e4pmqnh9qeb7945&sub_id=17136824&nrid=119a2b166a414fb98068f49253e258ed&hash=pi8N7SVX8oR6PIXuooBTXQ&exp=1714161897 | 188.114.97.1 | | 13 kB |
URL fb.check-tl-ver-154-1.com/eyes-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&click_id=a08e4pmqnh9qeb7945&sub_id=17136824&nrid=119a2b166a414fb98068f49253e258ed&hash=pi8N7SVX8oR6PIXuooBTXQ&exp=1714161897 IP188.114.97.1:0
File typeHTML document, Unicode text, UTF-8 text, with CRLF line terminators Hash666203c2cfc7ee8aafbd1cbf9ec04c69 7d74e745174fe6140ee2fbe1fe8b8c2ae33ade9a 57027a083c9c7eaf8a078a7090c454b254216a4a94782e2445fb71629725531b
GET /eyes-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&click_id=a08e4pmqnh9qeb7945&sub_id=17136824&nrid=119a2b166a414fb98068f49253e258ed&hash=pi8N7SVX8oR6PIXuooBTXQ&exp=1714161897 HTTP/1.1
Host: fb.check-tl-ver-154-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fa.check-tl-ver-154-1.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:59:58 GMT
content-type: text/html
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2Fij69eSJ%2FtLmP5ZYO5noHVVafoZE%2BG6hi3iHvi%2Bn5Mp4ROo9HdT%2F9XXfZ1pNXiNvuPGrra%2Bv4fz0YaspZOusEWINSZjGvUH2iqbap1SWJsGzyXoFxJb1%2B9qGIEzGtFWbOdkBlNT%2B6KQHujb%2B"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87a92807ee64b52d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| fb.check-tl-ver-154-1.com/favicon.ico | 188.114.97.1 | | 0 B |
URL fb.check-tl-ver-154-1.com/favicon.ico IP188.114.97.1:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1
Host: fb.check-tl-ver-154-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fb.check-tl-ver-154-1.com/eyes-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&click_id=a08e4pmqnh9qeb7945&sub_id=17136824&nrid=119a2b166a414fb98068f49253e258ed&hash=pi8N7SVX8oR6PIXuooBTXQ&exp=1714161897
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 204 No Content
date: Fri, 26 Apr 2024 19:59:58 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 6990
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=N%2FJeQ2%2BgGDiNEhKvoIqtvQ8oHEtZ2lMZEvou27mVsOVUZMaYnCpe6IIQXtYzws26gvtirLtUbSsXk6MI9GY3efbiEfzusRbv43o2co%2FGjYvpzDO6tvVOddqr00TsvXywGo4kHrR4uDesVHhb"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a928095854b52d-OSL
alt-svc: h3=":443"; ma=86400
|
|
| www.gstatic.com/firebasejs/10.3.1/firebase-app-compat.js | 142.250.74.35 | | 9.3 kB |
URL www.gstatic.com/firebasejs/10.3.1/firebase-app-compat.js IP142.250.74.35:0
File typeJavaScript source, ASCII text, with very long lines (28368) Hash9900403b65514fad7df39a4e788a6e45 75f9ba061ef4e72bb23528c700f2a11c56d637e9 a202b2051ea9810cd9ba592b3f9418a89e2062f5c185e29e288080b28eb64fe5
GET /firebasejs/10.3.1/firebase-app-compat.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fb.check-tl-ver-154-1.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/firebase-js
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="firebase-js"
report-to: {"group":"firebase-js","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/firebase-js"}]}
content-length: 9308
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 26 Apr 2024 06:13:11 GMT
expires: Sat, 26 Apr 2025 06:13:11 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 31 Aug 2023 15:20:38 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 49608
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fb.check-tl-ver-154-1.com/eyes-robot/assets/style.css | 188.114.97.1 | | 25 kB |
URL fb.check-tl-ver-154-1.com/eyes-robot/assets/style.css IP188.114.97.1:0
File typeASCII text, with CRLF line terminators Hasha18afa3eac509b6062c9362a725ac421 5e06e9b3af42189e9456a7ea3bda665e10c86405 29ee31143c5bd03b7dcaf2e40476e50c4ed26d32a725525a4f3dced678c90896
GET /eyes-robot/assets/style.css HTTP/1.1
Host: fb.check-tl-ver-154-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fb.check-tl-ver-154-1.com/eyes-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&click_id=a08e4pmqnh9qeb7945&sub_id=17136824&nrid=119a2b166a414fb98068f49253e258ed&hash=pi8N7SVX8oR6PIXuooBTXQ&exp=1714161897
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:59:58 GMT
content-type: text/css
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
etag: W/"6627c958-cf6"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=tlQ4K9VUHEWAk9pgxeOKjEwX%2BL%2Fs2tBGJpTjEQDP62THLLctR8%2Bgicm1hdUxzfLZYkp5nqAXeg2nugWYi2YO%2FFjfyOH9TRvwGrUDwKfY3UrV428F707LUcNs9MEYPRMnIRjvutmxkXVguKOe"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a928087f33b52d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| www.profitablegatecpm.com/kdh8vzj5?key=8b11074707021e921e03466cc441e4a1 | 172.240.127.234 | | 1.3 kB |
URL www.profitablegatecpm.com/kdh8vzj5?key=8b11074707021e921e03466cc441e4a1 IP172.240.127.234:0
File typeHTML document, ASCII text, with very long lines (407) Hash3be0386bc1cc1ce3325390fc6c869694 a677326172b533a5e193f438179927cfaf262d16 d92f62dc8eb93da1a628d601469a1ebddecff9d0fc92e58cdb0a7328c968d196
GET /kdh8vzj5?key=8b11074707021e921e03466cc441e4a1 HTTP/1.1
Host: www.profitablegatecpm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: u_pl=17136824; ain=eyJhbGciOiJIUzI1NiJ9.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.A-hs6t-ALqez_ye67ir0JBECLHlUOBU2KXOfKE4BRtQ; cjs=t
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Fri, 26 Apr 2024 19:59:59 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Set-Cookie: ain=eyJhbGciOiJIUzI1NiJ9.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.A-hs6t-ALqez_ye67ir0JBECLHlUOBU2KXOfKE4BRtQ; expires=Fri, 26 Apr 2024 20:00:59 GMT
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: aade0349246f28cc90d13824c521f1e1
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
|
|
| www.profitablegatecpm.com/api/users?token=L2tkaDh2emo1P2tleT04YjExMDc0NzA3MDIxZTkyMWUwMzQ2NmNjNDQxZTRhMSZwc3Q9MTcxNDE2MTY1OSZybXRjPXQmc2h1PTE2MTkxNzA5NzZkZTM4ODNiMTE5MjA4NGUxZDc3ZTI5ZmM3MDJhNzU5ZjM5M2EzNmFhMjBkZWE0NGRmY2IxOTg3N2Y3YmNjNjFiNGZkOGM2YzU0NWMxYzI1ZTNiN2I0YjYzNTA2YTk4MTk2OTRlNDgxNzQxMzEzMmZkZWU0MWNkNWUyZTg3OGVjNmVkMmFiYWVkMTk3ZjBmMTU4MGUyMmRjZDExMDJhNTJjNzIxODgyMThkNWE1M2NmZDdhZTc&uuid=&pii=&in=false | 172.240.127.234 | | 0 B |
URL www.profitablegatecpm.com/api/users?token=L2tkaDh2emo1P2tleT04YjExMDc0NzA3MDIxZTkyMWUwMzQ2NmNjNDQxZTRhMSZwc3Q9MTcxNDE2MTY1OSZybXRjPXQmc2h1PTE2MTkxNzA5NzZkZTM4ODNiMTE5MjA4NGUxZDc3ZTI5ZmM3MDJhNzU5ZjM5M2EzNmFhMjBkZWE0NGRmY2IxOTg3N2Y3YmNjNjFiNGZkOGM2YzU0NWMxYzI1ZTNiN2I0YjYzNTA2YTk4MTk2OTRlNDgxNzQxMzEzMmZkZWU0MWNkNWUyZTg3OGVjNmVkMmFiYWVkMTk3ZjBmMTU4MGUyMmRjZDExMDJhNTJjNzIxODgyMThkNWE1M2NmZDdhZTc&uuid=&pii=&in=false IP172.240.127.234:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /api/users?token=L2tkaDh2emo1P2tleT04YjExMDc0NzA3MDIxZTkyMWUwMzQ2NmNjNDQxZTRhMSZwc3Q9MTcxNDE2MTY1OSZybXRjPXQmc2h1PTE2MTkxNzA5NzZkZTM4ODNiMTE5MjA4NGUxZDc3ZTI5ZmM3MDJhNzU5ZjM5M2EzNmFhMjBkZWE0NGRmY2IxOTg3N2Y3YmNjNjFiNGZkOGM2YzU0NWMxYzI1ZTNiN2I0YjYzNTA2YTk4MTk2OTRlNDgxNzQxMzEzMmZkZWU0MWNkNWUyZTg3OGVjNmVkMmFiYWVkMTk3ZjBmMTU4MGUyMmRjZDExMDJhNTJjNzIxODgyMThkNWE1M2NmZDdhZTc&uuid=&pii=&in=false HTTP/1.1
Host: www.profitablegatecpm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.profitablegatecpm.com/api/users?token=L2tkaDh2emo1P2tleT1hOTY5Y2E1YzlhZDI2MTE3NjJmMTFiNzlhNTI2ZTJkMiZzdWJtZXRyaWM9MTcxMzY4MjQ
Cookie: pdhtkv=true; uncs=1; pdhtkv28=true; uncs28=1; u_pl=17136824; ain=eyJhbGciOiJIUzI1NiJ9.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.A-hs6t-ALqez_ye67ir0JBECLHlUOBU2KXOfKE4BRtQ; cjs=t
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Server: nginx/1.21.6
Date: Fri, 26 Apr 2024 19:59:59 GMT
Content-Type: text/html
Content-Length: 0
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Location: https://nylonnickel.xyz/c9b2l0k.php?key=ssh20i85vx88tciu4a4m&SUB_ID_SHORT=391804bf27525404b98983484e6fae46&COST_CPC=&PLACEMENT_ID=17136824&CAMPAIGN_ID=1028982&DEVICE_BRAND=Unknown&BROWSER_NAME=Firefox&USER_OS=Linux&USER_CARRIER=Blix%20Solutions&USERAGENT=Mozilla%2F5.0%20%28X11%3B%20Linux%20x86_64%3B%20rv%3A96.0%29%20Gecko%2F20100101%20Firefox%2F96.0&REMOTE_LANGUAGE=11&BANNER_ID=2901049
Set-Cookie: pdhtkv=true; expires=Sat, 27 Apr 2024 19:59:59 GMT
uncs=1; expires=Sat, 27 Apr 2024 19:59:59 GMT
pdhtkv28=true; expires=Sat, 27 Apr 2024 19:59:59 GMT
uncs28=1; expires=Sat, 27 Apr 2024 19:59:59 GMT
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 24593b215d51be1dda7e58d4038bfc6a
Strict-Transport-Security: max-age=0; includeSubdomains
|
|
| nylonnickel.xyz/c9b2l0k.php?key=ssh20i85vx88tciu4a4m&SUB_ID_SHORT=391804bf27525404b98983484e6fae46&COST_CPC=&PLACEMENT_ID=17136824&CAMPAIGN_ID=1028982&DEVICE_BRAND=Unknown&BROWSER_NAME=Firefox&USER_OS=Linux&USER_CARRIER=Blix%20Solutions&USERAGENT=Mozilla%2F5.0%20%28X11%3B%20Linux%20x86_64%3B%20rv%3A96.0%29%20Gecko%2F20100101%20Firefox%2F96.0&REMOTE_LANGUAGE=11&BANNER_ID=2901049 | 192.64.81.118 | | 0 B |
URL nylonnickel.xyz/c9b2l0k.php?key=ssh20i85vx88tciu4a4m&SUB_ID_SHORT=391804bf27525404b98983484e6fae46&COST_CPC=&PLACEMENT_ID=17136824&CAMPAIGN_ID=1028982&DEVICE_BRAND=Unknown&BROWSER_NAME=Firefox&USER_OS=Linux&USER_CARRIER=Blix%20Solutions&USERAGENT=Mozilla%2F5.0%20%28X11%3B%20Linux%20x86_64%3B%20rv%3A96.0%29%20Gecko%2F20100101%20Firefox%2F96.0&REMOTE_LANGUAGE=11&BANNER_ID=2901049 IP192.64.81.118:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /c9b2l0k.php?key=ssh20i85vx88tciu4a4m&SUB_ID_SHORT=391804bf27525404b98983484e6fae46&COST_CPC=&PLACEMENT_ID=17136824&CAMPAIGN_ID=1028982&DEVICE_BRAND=Unknown&BROWSER_NAME=Firefox&USER_OS=Linux&USER_CARRIER=Blix%20Solutions&USERAGENT=Mozilla%2F5.0%20%28X11%3B%20Linux%20x86_64%3B%20rv%3A96.0%29%20Gecko%2F20100101%20Firefox%2F96.0&REMOTE_LANGUAGE=11&BANNER_ID=2901049 HTTP/1.1
Host: nylonnickel.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.profitablegatecpm.com/
DNT: 1
Connection: keep-alive
Cookie: uclick=pmqnh98plp; uclickhash=pmqnh98plp-pmqnh9qeb7-xr46-0-usgm6o-9rib8n-9ribwj-2ff061
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Server: nginx/1.22.0
Date: Fri, 26 Apr 2024 20:00:00 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: uclick=pmqnh98plp; expires=Sat, 27-Apr-2024 20:00:00 GMT; Max-Age=86400; path=/; secure; SameSite=none
uclickhash=pmqnh98plp-pmqnh95m17-xr46-0-usgm6o-9rib8n-9ribwj-1400fd; expires=Sat, 27-Apr-2024 20:00:00 GMT; Max-Age=86400; path=/; secure; SameSite=none
Location: https://rqqlj.canopusacrux.com/?pl=4l9EZwXc2kSH_LKKjogwWA&click_id=70737pmqnh95m179ab&sub_id=17136824
Strict-Transport-Security: max-age=31536000
|
|
| qa.check-tl-ver-94-1.com/eyes-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&click_id=b5176pmqnh97sy9383&sub_id=17136824&nrid=0d1830daf4ff480b847baabb4904856b&hash=uIegkRK-kT8MTEn190s45Q&exp=1714161893 | 172.67.147.142 | | 16 kB |
URL qa.check-tl-ver-94-1.com/eyes-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&click_id=b5176pmqnh97sy9383&sub_id=17136824&nrid=0d1830daf4ff480b847baabb4904856b&hash=uIegkRK-kT8MTEn190s45Q&exp=1714161893 IP172.67.147.142:0
File typeHTML document, Unicode text, UTF-8 text, with CRLF line terminators Hash666203c2cfc7ee8aafbd1cbf9ec04c69 7d74e745174fe6140ee2fbe1fe8b8c2ae33ade9a 57027a083c9c7eaf8a078a7090c454b254216a4a94782e2445fb71629725531b
GET /eyes-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&click_id=b5176pmqnh97sy9383&sub_id=17136824&nrid=0d1830daf4ff480b847baabb4904856b&hash=uIegkRK-kT8MTEn190s45Q&exp=1714161893 HTTP/1.1
Host: qa.check-tl-ver-94-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rqqlj.check-tl-ver-94-1.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 26 Apr 2024 19:59:53 GMT
content-type: text/html
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=26SQqkq3T8vsvYVeu%2F1lhqCmSSIEYGFgcu0tMhLI1tmSh%2Bf%2FgKq2JewFTtE3cCADdikpZ9k9CglvOl99hOb9tqcXngubuqOvs%2F4Z6Gd0f3X9qbMeWEWdjT9GR7WNrtqllbH%2FmrjEYTZQpYM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87a927e959135693-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| cdnstatic.check-tl-ver-94-2.com/ps/ps.js?&edg=true&sw=&fullscreen=true&pl=true&pp=false&id=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&click_id=908bcpmqnh97s151af&sub_id=17136824&appspot=&d=https%3A%2F%2Fcdnstatic.check-tl-ver-94-2.com&timeout=30&tb=true&nrid=a85509f536b5469dab416c5c310e42e0 | 104.21.33.96 | | 14 kB |
URL cdnstatic.check-tl-ver-94-2.com/ps/ps.js?&edg=true&sw=&fullscreen=true&pl=true&pp=false&id=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&click_id=908bcpmqnh97s151af&sub_id=17136824&appspot=&d=https%3A%2F%2Fcdnstatic.check-tl-ver-94-2.com&timeout=30&tb=true&nrid=a85509f536b5469dab416c5c310e42e0 IP104.21.33.96:0
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (33135), with no line terminators Hash088ad5ee23c0e24b31e3adf71c9b9e74 d0ab1fc3e7028cda884558af711fcf53782545d9 2e1df96637d12fadf02c7409f92dcd171fcc794393f852c789e6203de8043ec9
GET /ps/ps.js?&edg=true&sw=&fullscreen=true&pl=true&pp=false&id=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&click_id=908bcpmqnh97s151af&sub_id=17136824&appspot=&d=https%3A%2F%2Fcdnstatic.check-tl-ver-94-2.com&timeout=30&tb=true&nrid=a85509f536b5469dab416c5c310e42e0 HTTP/1.1
Host: cdnstatic.check-tl-ver-94-2.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rqqlj.check-tl-ver-94-2.com/
Cookie: __psu=ef4a31c6-5c33-4a47-bed9-d8e4d791767c
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:59:55 GMT
content-type: application/javascript
cache-control: max-age=0, no-cache, no-store, must-revalidate
accept-ch: Sec-CH-UA, Sec-CH-UA-Platform, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
cf-cache-status: BYPASS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QqeJnIe9KQMWfjAf0u35iIAf4zm5kKyrifO4rS0wr7Ihc3RgrOl5kx1xpZ1bx01CQ%2B%2BvSNvN6tu1nrJTrXJwsAL%2FyBDmTIV5qo%2B%2FRYf2%2Bb8%2BfRfp%2Flrj9yEECO4D5mLXKdypHFQcsN4fehIwhDesYs88"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a927f65fb0568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| rqqlj.check-tl-ver-94-2.com/space-robot/assets/trls.js | 104.21.33.96 | | 20 kB |
URL rqqlj.check-tl-ver-94-2.com/space-robot/assets/trls.js IP104.21.33.96:0
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (357), with CRLF line terminators Hash7f5c725b2c23b9687fa08d162a17427a 94973f1227871750d2ef13a367ce691f1a062527 c9611ce748d6c7c99d3f374a0b687db2e2428fc5ec9c4e7ae71b2e4305ac60e3
GET /space-robot/assets/trls.js HTTP/1.1
Host: rqqlj.check-tl-ver-94-2.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rqqlj.check-tl-ver-94-2.com/space-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=space-robot&click_id=70737pmqnh95m179ab&sub_id=17136824&nrid=c3d42fbcb5eb44d7b1d0d7ccff4c1263&hash=SIFhtzsp0FdE800EIGS-Yg&exp=1714161900
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 26 Apr 2024 20:00:00 GMT
content-type: application/javascript
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
etag: W/"6627c958-2f4d"
cache-control: max-age=14400
cf-cache-status: HIT
age: 5056
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=oasCoxd%2FbiceghtAMRQJsXgEUIBzD1nRfauWmhN1eERXUqZ3ZGxYYx3bkXQzBuN6fDgIALDAp2BVcTX0bk%2BPRMRbW8qPYxLIWqo%2F5Z7Gi%2BlTCJV1%2Fiw%2BKuclLJCbL7lYUUaB1K2Km6Hg2WpFT%2Bk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a92812194f568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| rqqlj.check-tl-ver-94-2.com/space-robot/assets/favicon-16x16.png | 104.21.33.96 | | 1.2 kB |
URL rqqlj.check-tl-ver-94-2.com/space-robot/assets/favicon-16x16.png IP104.21.33.96:0
File typePNG image data, 16 x 16, 8-bit colormap, non-interlaced Hash9d35b617fd258f648c37812252297dd3 7e32fd007f1c6fe1466d15439173082c0fbe82da e8a768f8122da75777dc64b6d35e756a1848c4f330f293920c18480df085000a
GET /space-robot/assets/favicon-16x16.png HTTP/1.1
Host: rqqlj.check-tl-ver-94-2.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rqqlj.check-tl-ver-94-2.com/space-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=space-robot&click_id=70737pmqnh95m179ab&sub_id=17136824&nrid=c3d42fbcb5eb44d7b1d0d7ccff4c1263&hash=SIFhtzsp0FdE800EIGS-Yg&exp=1714161900
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 26 Apr 2024 20:00:00 GMT
content-type: image/png
content-length: 1163
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
etag: "6627c958-48b"
cache-control: max-age=14400
cf-cache-status: HIT
age: 4436
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TNZ6hSb0%2FwliBteUKQV3WWRVnrsJpkFDjR2sxdDtAsj5oHNCEXyOblRqmuhxQmif5uXzas137wyfnSUGJqVyxGr574WdZrB6AnA6q8vtB5XDZVlYp6J1Za2k0FtdHVjDSbIt9fPzAluLhs13fFw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a928130b0a568e-OSL
alt-svc: h3=":443"; ma=86400
|
|
| cdnstatic.check-tl-ver-94-2.com/ps/ps.js?&edg=true&sw=&fullscreen=true&pl=true&pp=false&id=4l9EZwXc2kSH_LKKjogwWA&sm=space-robot&click_id=70737pmqnh95m179ab&sub_id=17136824&appspot=&d=https%3A%2F%2Fcdnstatic.check-tl-ver-94-2.com&timeout=30&tb=true&nrid=c3d42fbcb5eb44d7b1d0d7ccff4c1263 | 104.21.33.96 | | 37 kB |
URL cdnstatic.check-tl-ver-94-2.com/ps/ps.js?&edg=true&sw=&fullscreen=true&pl=true&pp=false&id=4l9EZwXc2kSH_LKKjogwWA&sm=space-robot&click_id=70737pmqnh95m179ab&sub_id=17136824&appspot=&d=https%3A%2F%2Fcdnstatic.check-tl-ver-94-2.com&timeout=30&tb=true&nrid=c3d42fbcb5eb44d7b1d0d7ccff4c1263 IP104.21.33.96:0
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (33136), with no line terminators Hash0a164a76dad16e439ea533cd697d70a6 9cf38a0374a09b7e760e532173c3fe65fc6d7315 ff67ffc729f92573de1cae3e9897f4b0cb4362db36837a33c852852fc96c7458
GET /ps/ps.js?&edg=true&sw=&fullscreen=true&pl=true&pp=false&id=4l9EZwXc2kSH_LKKjogwWA&sm=space-robot&click_id=70737pmqnh95m179ab&sub_id=17136824&appspot=&d=https%3A%2F%2Fcdnstatic.check-tl-ver-94-2.com&timeout=30&tb=true&nrid=c3d42fbcb5eb44d7b1d0d7ccff4c1263 HTTP/1.1
Host: cdnstatic.check-tl-ver-94-2.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rqqlj.check-tl-ver-94-2.com/
Cookie: __psu=ef4a31c6-5c33-4a47-bed9-d8e4d791767c
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 26 Apr 2024 20:00:00 GMT
content-type: application/javascript
cache-control: max-age=0, no-cache, no-store, must-revalidate
accept-ch: Sec-CH-UA, Sec-CH-UA-Platform, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
cf-cache-status: BYPASS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=VAiEvK5n%2BsJ7xCnMYRuR1VKisdjC1QMTG5Jvcpw8HzOK7%2Bld90lBSSO5GEO3n4X0INUG8g1DubMR2QAY6JKSGVhk4XRtcQolv%2FL9kLMJ9mwsnxYr7zW9O14233ga7qFChY6eb6a51OEvgxzW%2FOpPkqKz"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a92812aa52568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| www.gstatic.com/firebasejs/10.3.1/firebase-app-compat.js | 142.250.74.35 | | 9.3 kB |
URL www.gstatic.com/firebasejs/10.3.1/firebase-app-compat.js IP142.250.74.35:0
File typeJavaScript source, ASCII text, with very long lines (28368) Hash9900403b65514fad7df39a4e788a6e45 75f9ba061ef4e72bb23528c700f2a11c56d637e9 a202b2051ea9810cd9ba592b3f9418a89e2062f5c185e29e288080b28eb64fe5
GET /firebasejs/10.3.1/firebase-app-compat.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rqqlj.check-tl-ver-94-2.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/firebase-js
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="firebase-js"
report-to: {"group":"firebase-js","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/firebase-js"}]}
content-length: 9308
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 26 Apr 2024 06:13:11 GMT
expires: Sat, 26 Apr 2025 06:13:11 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 31 Aug 2023 15:20:38 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 49609
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.gstatic.com/firebasejs/10.3.1/firebase-messaging-compat.js | 142.250.74.35 | | 9.9 kB |
URL www.gstatic.com/firebasejs/10.3.1/firebase-messaging-compat.js IP142.250.74.35:0
File typeJavaScript source, ASCII text, with very long lines (38231) Hash0541b823dfaf39162ef84cf075c9951b e0934726455558cc1a59823efada9651e33aafaa 21f1d62f222007068c793f0947d98f4ccb7c1595adb68efeb783390fdd8b5522
GET /firebasejs/10.3.1/firebase-messaging-compat.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rqqlj.check-tl-ver-94-2.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/firebase-js
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="firebase-js"
report-to: {"group":"firebase-js","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/firebase-js"}]}
content-length: 9934
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 25 Apr 2024 02:47:22 GMT
expires: Fri, 25 Apr 2025 02:47:22 GMT
cache-control: public, max-age=31536000
age: 148358
last-modified: Thu, 31 Aug 2023 15:20:50 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| cdnstatic.check-tl-ver-94-2.com/ps/config.js?id=4l9EZwXc2kSH_LKKjogwWA | 104.21.33.96 | | 528 B |
URL cdnstatic.check-tl-ver-94-2.com/ps/config.js?id=4l9EZwXc2kSH_LKKjogwWA IP104.21.33.96:0
File typeASCII text, with CRLF line terminators Hashdc65a2fbfc4c76147b8b778b759c8d91 b8374137f0fe797e6a7e58c0c6ef14aa7a6b9855 7e85c285fd983223d07a014d1a96804ba1c8f65fb43238a4fad204350e896958
GET /ps/config.js?id=4l9EZwXc2kSH_LKKjogwWA HTTP/1.1
Host: cdnstatic.check-tl-ver-94-2.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://wa.check-tl-ver-94-2.com/
Cookie: __psu=ef4a31c6-5c33-4a47-bed9-d8e4d791767c
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:59:56 GMT
content-type: application/javascript
cache-control: max-age=0, no-cache, no-store, must-revalidate
accept-ch: Sec-CH-UA, Sec-CH-UA-Platform, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
cf-cache-status: BYPASS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=SgpsvALRyzg%2BWMdQM7g4UOFtO6mfiAU78xikHqeYTm0THS67T3lf2ruw6TbjYrptNiWJWzsiaknjXbtoidQiMjqhltVJRNXYpN7p33xKDfZd3%2BIJVhyL2gNJTjAf3tnDY5l4ZF0gRfQZgaHIiVhhI4YJ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a927f8ebbd568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| cdnstatic.check-tl-ver-94-2.com/ps/config.js?id=4l9EZwXc2kSH_LKKjogwWA | 104.21.33.96 | | 17 kB |
URL cdnstatic.check-tl-ver-94-2.com/ps/config.js?id=4l9EZwXc2kSH_LKKjogwWA IP104.21.33.96:0
File typeASCII text, with CRLF line terminators Hashdc65a2fbfc4c76147b8b778b759c8d91 b8374137f0fe797e6a7e58c0c6ef14aa7a6b9855 7e85c285fd983223d07a014d1a96804ba1c8f65fb43238a4fad204350e896958
GET /ps/config.js?id=4l9EZwXc2kSH_LKKjogwWA HTTP/1.1
Host: cdnstatic.check-tl-ver-94-2.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://wb.check-tl-ver-94-2.com/
Cookie: __psu=ef4a31c6-5c33-4a47-bed9-d8e4d791767c
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:59:56 GMT
content-type: application/javascript
cache-control: max-age=0, no-cache, no-store, must-revalidate
accept-ch: Sec-CH-UA, Sec-CH-UA-Platform, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
cf-cache-status: BYPASS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=v8CuvYL6hl%2Bwtp8rAIss%2BvmQhdBD%2Fvbc7qBHuWN%2BQOoO%2B8SVCOmFmgzPbdw%2FXtAfa8DGMJ9XCCBIYxewpNIbDP89RsE5PgPCkjsHYDA27my2zn4nu078szWwxKQDusaxkl%2BXD9Al%2BopPliBaTHQUIBgR"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a927faff2d568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| ta.check-tl-ver-94-2.com/space-robot/assets/main.js?v=3 | 104.21.33.96 | | 24 kB |
URL ta.check-tl-ver-94-2.com/space-robot/assets/main.js?v=3 IP104.21.33.96:0
File typeJavaScript source, ASCII text, with very long lines (2745) Hash01c51ed0a287b5ddf6793778cfa3a72c ebd2613cd806b8e080f556b0d254c0f7a6c738a9 4c0224d810d4f0ac617ddd4ab215e0084aeec230d8944780a129c0046de2dad5
GET /space-robot/assets/main.js?v=3 HTTP/1.1
Host: ta.check-tl-ver-94-2.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ta.check-tl-ver-94-2.com/space-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=space-robot&click_id=70737pmqnh95m179ab&sub_id=17136824&nrid=c3d42fbcb5eb44d7b1d0d7ccff4c1263&hash=SIFhtzsp0FdE800EIGS-Yg&exp=1714161900
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 26 Apr 2024 20:00:00 GMT
content-type: application/javascript
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
etag: W/"6627c958-1255"
cache-control: max-age=14400
cf-cache-status: HIT
age: 5944
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=UG4g%2F6LFf0q%2FbZSW67vh1iFxd1awQ5K8nPgJrqEs0uq54Nauam%2FEWnZxOue7sBsAQGVyhzy7XgkWIA8m4GRYauPupe0MYWjf1AxeKwTPDp4YqAr8IzT671PQCqzX4o7y54qTSDw0LcoYmks%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a928149dc1568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| ta.check-tl-ver-94-2.com/space-robot/assets/favicon-16x16.png | 104.21.33.96 | | 1.2 kB |
URL ta.check-tl-ver-94-2.com/space-robot/assets/favicon-16x16.png IP104.21.33.96:0
File typePNG image data, 16 x 16, 8-bit colormap, non-interlaced Hash9d35b617fd258f648c37812252297dd3 7e32fd007f1c6fe1466d15439173082c0fbe82da e8a768f8122da75777dc64b6d35e756a1848c4f330f293920c18480df085000a
GET /space-robot/assets/favicon-16x16.png HTTP/1.1
Host: ta.check-tl-ver-94-2.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ta.check-tl-ver-94-2.com/space-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=space-robot&click_id=70737pmqnh95m179ab&sub_id=17136824&nrid=c3d42fbcb5eb44d7b1d0d7ccff4c1263&hash=SIFhtzsp0FdE800EIGS-Yg&exp=1714161900
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 26 Apr 2024 20:00:00 GMT
content-type: image/png
content-length: 1163
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
etag: "6627c958-48b"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=MlmrUjcjoqH3FcKBUoZ2h8qai81%2FUhpCmQNBMwkP7hruKG8JVQM80GnvPXa05VemgnZGdKMe%2FK5ighMAnnnE0YsVVlDuAmn0nuiLgUsGJyPu8nq9CpDrz7TbjNFpG6KVcQRjzl871FwCa8E%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a928153ee5568e-OSL
alt-svc: h3=":443"; ma=86400
|
|
| www.gstatic.com/firebasejs/10.3.1/firebase-app-compat.js | 142.250.74.35 | | 9.3 kB |
URL www.gstatic.com/firebasejs/10.3.1/firebase-app-compat.js IP142.250.74.35:0
File typeJavaScript source, ASCII text, with very long lines (28368) Hash9900403b65514fad7df39a4e788a6e45 75f9ba061ef4e72bb23528c700f2a11c56d637e9 a202b2051ea9810cd9ba592b3f9418a89e2062f5c185e29e288080b28eb64fe5
GET /firebasejs/10.3.1/firebase-app-compat.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ta.check-tl-ver-94-2.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/firebase-js
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="firebase-js"
report-to: {"group":"firebase-js","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/firebase-js"}]}
content-length: 9308
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 26 Apr 2024 06:13:11 GMT
expires: Sat, 26 Apr 2025 06:13:11 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 31 Aug 2023 15:20:38 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 49609
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| ta.check-tl-ver-94-2.com/space-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=space-robot&click_id=70737pmqnh95m179ab&sub_id=17136824&nrid=c3d42fbcb5eb44d7b1d0d7ccff4c1263&hash=SIFhtzsp0FdE800EIGS-Yg&exp=1714161900 | 104.21.33.96 | | 18 kB |
URL ta.check-tl-ver-94-2.com/space-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=space-robot&click_id=70737pmqnh95m179ab&sub_id=17136824&nrid=c3d42fbcb5eb44d7b1d0d7ccff4c1263&hash=SIFhtzsp0FdE800EIGS-Yg&exp=1714161900 IP104.21.33.96:0
File typeHTML document, Unicode text, UTF-8 text, with very long lines (474) Hash01041709ecf6a3f0b549820730593c03 55775e4279d24a34f601bf8180d9f280b8131e0d 51907b3319c05ec1c1a7466f4017f4dcc7b6dc59a29ed962bfd36572f223bb51
GET /space-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=space-robot&click_id=70737pmqnh95m179ab&sub_id=17136824&nrid=c3d42fbcb5eb44d7b1d0d7ccff4c1263&hash=SIFhtzsp0FdE800EIGS-Yg&exp=1714161900 HTTP/1.1
Host: ta.check-tl-ver-94-2.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rqqlj.check-tl-ver-94-2.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 26 Apr 2024 20:00:00 GMT
content-type: text/html
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LF%2BNsI2hQOGDfUCuL1pPuHk3FXHBqeOLVVMOHbLIBsnHz8j4Ei6R3xHS5x8yyNObcDOmpBJiTLPKBrkrW%2Fsu6%2BVeMs%2BQzsK3lLpJdRBjWW44WN2TeKp5tyDtlWFmUu2thtEfUJ1bDvIai0I%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87a928140cc7568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| tb.check-tl-ver-94-2.com/space-robot/assets/corner.png | 104.21.33.96 | | 300 B |
URL tb.check-tl-ver-94-2.com/space-robot/assets/corner.png IP104.21.33.96:0
File typePNG image data, 44 x 44, 8-bit colormap, non-interlaced Hashf66c38fa2cd7c50bd1989d41da28fb80 e1de333eca72647f3c1831083fe678cfa8fe9eab 3059be4046e0315ad1c0d1cb163d9daaf759bdf16e906e908842fac07e5608a2
GET /space-robot/assets/corner.png HTTP/1.1
Host: tb.check-tl-ver-94-2.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tb.check-tl-ver-94-2.com/space-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=space-robot&click_id=70737pmqnh95m179ab&sub_id=17136824&nrid=c3d42fbcb5eb44d7b1d0d7ccff4c1263&hash=SIFhtzsp0FdE800EIGS-Yg&exp=1714161900
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 26 Apr 2024 20:00:01 GMT
content-type: image/png
content-length: 300
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
etag: "6627c958-12c"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=lxjzI%2BXOo46X66dNrKQrPPXZiiB8wfx4FUabSa41Fq8EA7E3pa7bqe4xhjj35M%2Fo9zMiWBOUW7%2BwokzNVXQ1HjEJiMgvZYJ%2BMuhFJa5uKvTeMwUEJn7Bh3J6DYuXiP9RXo3x733QIW5IJJ0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a92816b928568e-OSL
alt-svc: h3=":443"; ma=86400
|
|
| tb.check-tl-ver-94-2.com/shared-js/assets/static-pl.js?v=2 | 104.21.33.96 | | 17 kB |
URL tb.check-tl-ver-94-2.com/shared-js/assets/static-pl.js?v=2 IP104.21.33.96:0
File typeJavaScript source, ASCII text, with CRLF line terminators Hash7224243dd0b18bb2508a1d77d4b2a0b2 bd833c24aa241861316053fd8bd46a1bef3d343f 920aa94a10634fc23234b5e4f55c428f6311fc7811d3591792381678cb492659
GET /shared-js/assets/static-pl.js?v=2 HTTP/1.1
Host: tb.check-tl-ver-94-2.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tb.check-tl-ver-94-2.com/space-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=space-robot&click_id=70737pmqnh95m179ab&sub_id=17136824&nrid=c3d42fbcb5eb44d7b1d0d7ccff4c1263&hash=SIFhtzsp0FdE800EIGS-Yg&exp=1714161900
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 26 Apr 2024 20:00:01 GMT
content-type: application/javascript
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
etag: W/"6627c958-dee"
cache-control: max-age=14400
cf-cache-status: HIT
age: 5882
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=iutiu15%2BFEDfl5eNaPQoskTWYk5z6lDkiEYVIT7UVgM5W0V80Jm43PrCvY16%2BWoeFwuNp7HxpChhKoNzSvoIG43JM%2Fapla8FvhrI9JaZ87S0pM%2BENgBVmuPWZjRhjPQOZZfr9ePONZ1dixU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a92816b92f568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| tb.check-tl-ver-94-2.com/space-robot/assets/favicon-16x16.png | 104.21.33.96 | | 1.2 kB |
URL tb.check-tl-ver-94-2.com/space-robot/assets/favicon-16x16.png IP104.21.33.96:0
File typePNG image data, 16 x 16, 8-bit colormap, non-interlaced Hash9d35b617fd258f648c37812252297dd3 7e32fd007f1c6fe1466d15439173082c0fbe82da e8a768f8122da75777dc64b6d35e756a1848c4f330f293920c18480df085000a
GET /space-robot/assets/favicon-16x16.png HTTP/1.1
Host: tb.check-tl-ver-94-2.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tb.check-tl-ver-94-2.com/space-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=space-robot&click_id=70737pmqnh95m179ab&sub_id=17136824&nrid=c3d42fbcb5eb44d7b1d0d7ccff4c1263&hash=SIFhtzsp0FdE800EIGS-Yg&exp=1714161900
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 26 Apr 2024 20:00:01 GMT
content-type: image/png
content-length: 1163
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
etag: "6627c958-48b"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LaXpAsVLlyBLIz9OiFK%2B5WH2LUDq%2Bav48ihPVoc2JSGWfrHrcXaeaKsLlo%2FPY97sS6pqXFAVqX4%2BPLugMPH0gJQTIBq8ScT%2BFdf2zedKkt78fX6rQVGqhSY%2FxCIvmwQdvWs06v8UF9CH5pA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a92817ba97568e-OSL
alt-svc: h3=":443"; ma=86400
|
|
| tb.check-tl-ver-94-2.com/space-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=space-robot&click_id=70737pmqnh95m179ab&sub_id=17136824&nrid=c3d42fbcb5eb44d7b1d0d7ccff4c1263&hash=SIFhtzsp0FdE800EIGS-Yg&exp=1714161900 | 104.21.33.96 | | 45 kB |
URL tb.check-tl-ver-94-2.com/space-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=space-robot&click_id=70737pmqnh95m179ab&sub_id=17136824&nrid=c3d42fbcb5eb44d7b1d0d7ccff4c1263&hash=SIFhtzsp0FdE800EIGS-Yg&exp=1714161900 IP104.21.33.96:0
File typeHTML document, Unicode text, UTF-8 text, with very long lines (474) Hash01041709ecf6a3f0b549820730593c03 55775e4279d24a34f601bf8180d9f280b8131e0d 51907b3319c05ec1c1a7466f4017f4dcc7b6dc59a29ed962bfd36572f223bb51
GET /space-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=space-robot&click_id=70737pmqnh95m179ab&sub_id=17136824&nrid=c3d42fbcb5eb44d7b1d0d7ccff4c1263&hash=SIFhtzsp0FdE800EIGS-Yg&exp=1714161900 HTTP/1.1
Host: tb.check-tl-ver-94-2.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ta.check-tl-ver-94-2.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 26 Apr 2024 20:00:01 GMT
content-type: text/html
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1DyVWsV7FivWiYovzQwQdT9r%2BlNjf1fQFzS6%2B7orrk8NqNnQrU1Pd%2FkUB1UV5NGA9YdbDVFsM%2FK%2FAD5GFHbto%2FgqQIKc%2FhAPKhxwXKTlSJ37VKO7ExUPFkCFAfQh0O9Nyn8gpuPf2BrcIBE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87a928161867568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| www.gstatic.com/firebasejs/10.3.1/firebase-app-compat.js | 142.250.74.35 | | 9.3 kB |
URL www.gstatic.com/firebasejs/10.3.1/firebase-app-compat.js IP142.250.74.35:0
File typeJavaScript source, ASCII text, with very long lines (28368) Hash9900403b65514fad7df39a4e788a6e45 75f9ba061ef4e72bb23528c700f2a11c56d637e9 a202b2051ea9810cd9ba592b3f9418a89e2062f5c185e29e288080b28eb64fe5
GET /firebasejs/10.3.1/firebase-app-compat.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tb.check-tl-ver-94-2.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/firebase-js
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="firebase-js"
report-to: {"group":"firebase-js","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/firebase-js"}]}
content-length: 9308
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 26 Apr 2024 06:13:11 GMT
expires: Sat, 26 Apr 2025 06:13:11 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 31 Aug 2023 15:20:38 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 49610
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.gstatic.com/firebasejs/10.3.1/firebase-messaging-compat.js | 142.250.74.35 | | 9.9 kB |
URL www.gstatic.com/firebasejs/10.3.1/firebase-messaging-compat.js IP142.250.74.35:0
File typeJavaScript source, ASCII text, with very long lines (38231) Hash0541b823dfaf39162ef84cf075c9951b e0934726455558cc1a59823efada9651e33aafaa 21f1d62f222007068c793f0947d98f4ccb7c1595adb68efeb783390fdd8b5522
GET /firebasejs/10.3.1/firebase-messaging-compat.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tb.check-tl-ver-94-2.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/firebase-js
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="firebase-js"
report-to: {"group":"firebase-js","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/firebase-js"}]}
content-length: 9934
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 25 Apr 2024 02:47:22 GMT
expires: Fri, 25 Apr 2025 02:47:22 GMT
cache-control: public, max-age=31536000
age: 148359
last-modified: Thu, 31 Aug 2023 15:20:50 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.profitablegatecpm.com/kdh8vzj5?key=8b11074707021e921e03466cc441e4a1 | 172.240.127.234 | | 1.3 kB |
URL www.profitablegatecpm.com/kdh8vzj5?key=8b11074707021e921e03466cc441e4a1 IP172.240.127.234:0
File typeHTML document, ASCII text, with very long lines (404) Hash801201414811ceb5eb1fada7f829b289 2304538d81370ce4ebe44159a465051f96502424 2019e49a3d778db5d8d2782c8dedebc16fe459cee3b16b07d6ab166710c56458
GET /kdh8vzj5?key=8b11074707021e921e03466cc441e4a1 HTTP/1.1
Host: www.profitablegatecpm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: u_pl=17136824; ain=eyJhbGciOiJIUzI1NiJ9.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.A-hs6t-ALqez_ye67ir0JBECLHlUOBU2KXOfKE4BRtQ; cjs=t
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Fri, 26 Apr 2024 20:00:01 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Set-Cookie: ain=eyJhbGciOiJIUzI1NiJ9.eyJwIjp7ImlkIjoxNzEzNjgyNCwiayI6IjhiMTEwNzQ3MDcwMjFlOTIxZTAzNDY2Y2M0NDFlNGExIiwic2lkIjoiIiwiaXNpZCI6MiwiYXNpZCI6MSwiemlkIjoxODAyNTQyLCJwaWQiOjQyNzY1NywiYW4iOnRydWUsImxhbiI6dHJ1ZSwiY2lkIjozMSwiYWlkIjoyOCwicHQiOjQsInBrIjoia2RoOHZ6ajUiLCJ0IjoxfSwidSI6eyJ1IjoxLCJhdSI6MSwiZCI6eyJpZCI6Nzk5NTQxOTYsImlkcyI6IiIsImljIjpmYWxzZSwibiI6IkRlc2t0b3AsRW11bGF0b3IiLCJ2IjoiVW5rbm93biIsIm0iOiJVbmtub3duIiwiZiI6MSwiZm4iOiJEZXNrdG9wIiwib2lkIjoxODExMCwib24iOiJMaW51eCIsIm92IjoiVW5rbm93biIsImJpZCI6MTE2NjcwLCJibiI6IkZpcmVmb3giLCJidiI6Ijk2LjAiLCJ3diI6ZmFsc2UsImUiOmZhbHNlLCJhYiI6ZmFsc2V9LCJjIjp7ImlkIjoxNjIsImMiOiJOTyIsIm4iOiJOb3J3YXkifSwiYSI6ZmFsc2UsImNyIjp7Im4iOiJCbGl4IFNvbHV0aW9ucyJ9LCJ4ZiI6IiIsIml4ZiI6ZmFsc2UsImlneGYiOmZhbHNlLCJ1cCI6ZmFsc2UsInIiOiIiLCJhciI6W119fQ.A-hs6t-ALqez_ye67ir0JBECLHlUOBU2KXOfKE4BRtQ; expires=Fri, 26 Apr 2024 20:01:01 GMT
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: ef7aac6413a9acde4e86d5be572a2a1d
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
|
|
| cdnstatic.check-tl-ver-154-1.com/ps/tb?id=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&sub_id=17136824&click_id=a08e4pmqnh9qeb7945&nrid=267abec9504fcf7897b5fcc53d82e0fd&reason=tb_exit&attempt=3 | 188.114.97.1 | | 170 B |
URL cdnstatic.check-tl-ver-154-1.com/ps/tb?id=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&sub_id=17136824&click_id=a08e4pmqnh9qeb7945&nrid=267abec9504fcf7897b5fcc53d82e0fd&reason=tb_exit&attempt=3 IP188.114.97.1:0
File typeHTML document, ASCII text, with CRLF line terminators Hashdc8aa0a2249f884dac1f684a88c59598 6b4d3f69a35479a007e9e951d218455c1569ef04 c274fde41e16dfaadef3b885e4c831d19d3a8580450ec2dd063af0e453e061bd
GET /ps/tb?id=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&sub_id=17136824&click_id=a08e4pmqnh9qeb7945&nrid=267abec9504fcf7897b5fcc53d82e0fd&reason=tb_exit&attempt=3 HTTP/1.1
Host: cdnstatic.check-tl-ver-154-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fb.check-tl-ver-154-1.com/
Cookie: __psu=fb863536-3c01-41b4-b5f3-4d4cc7b5b99f
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:59:59 GMT
content-type: text/html
cache-control: max-age=0, no-cache, no-store, must-revalidate
accept-ch: Sec-CH-UA, Sec-CH-UA-Platform, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zqzIVK0GDqokQxKotcKizYj1OevGeHQUeB3%2FOA4hndaAFpiMfhV%2BlmIRsadrPakOIoIrk%2F8eVS2zV%2BtrlVIO2ONthhmZbRI8CluFRvU4uhMoP4yrp8Lb3tfKUE2btx45Pqz1ipHua5ng2XxDS2vQIFLzUA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87a9280a2986b52d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| nylonnickel.xyz/c9b2l0k.php?key=ssh20i85vx88tciu4a4m&SUB_ID_SHORT=39124b25421536fe742c0b619fa3c9b9&COST_CPC=&PLACEMENT_ID=17136824&CAMPAIGN_ID=1028982&DEVICE_BRAND=Unknown&BROWSER_NAME=Firefox&USER_OS=Linux&USER_CARRIER=Blix%20Solutions&USERAGENT=Mozilla%2F5.0%20%28X11%3B%20Linux%20x86_64%3B%20rv%3A96.0%29%20Gecko%2F20100101%20Firefox%2F96.0&REMOTE_LANGUAGE=11&BANNER_ID=2901049 | 192.64.81.118 | | 0 B |
URL nylonnickel.xyz/c9b2l0k.php?key=ssh20i85vx88tciu4a4m&SUB_ID_SHORT=39124b25421536fe742c0b619fa3c9b9&COST_CPC=&PLACEMENT_ID=17136824&CAMPAIGN_ID=1028982&DEVICE_BRAND=Unknown&BROWSER_NAME=Firefox&USER_OS=Linux&USER_CARRIER=Blix%20Solutions&USERAGENT=Mozilla%2F5.0%20%28X11%3B%20Linux%20x86_64%3B%20rv%3A96.0%29%20Gecko%2F20100101%20Firefox%2F96.0&REMOTE_LANGUAGE=11&BANNER_ID=2901049 IP192.64.81.118:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /c9b2l0k.php?key=ssh20i85vx88tciu4a4m&SUB_ID_SHORT=39124b25421536fe742c0b619fa3c9b9&COST_CPC=&PLACEMENT_ID=17136824&CAMPAIGN_ID=1028982&DEVICE_BRAND=Unknown&BROWSER_NAME=Firefox&USER_OS=Linux&USER_CARRIER=Blix%20Solutions&USERAGENT=Mozilla%2F5.0%20%28X11%3B%20Linux%20x86_64%3B%20rv%3A96.0%29%20Gecko%2F20100101%20Firefox%2F96.0&REMOTE_LANGUAGE=11&BANNER_ID=2901049 HTTP/1.1
Host: nylonnickel.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.profitablegatecpm.com/
DNT: 1
Connection: keep-alive
Cookie: uclick=pmqnh98plp; uclickhash=pmqnh98plp-pmqnh95m17-xr46-0-usgm6o-9rib8n-9ribwj-1400fd
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Server: nginx/1.22.0
Date: Fri, 26 Apr 2024 20:00:02 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: uclick=pmqnh98plp; expires=Sat, 27-Apr-2024 20:00:02 GMT; Max-Age=86400; path=/; secure; SameSite=none
uclickhash=pmqnh98plp-pmqnh95mrn-xr46-0-usgm6o-9rib8n-9ribwj-01cd75; expires=Sat, 27-Apr-2024 20:00:02 GMT; Max-Age=86400; path=/; secure; SameSite=none
Location: https://rqqlj.canopusacrux.com/?pl=4l9EZwXc2kSH_LKKjogwWA&click_id=3c8cfpmqnh95mrnf73&sub_id=17136824
Strict-Transport-Security: max-age=31536000
|
|
| rqqlj.canopusacrux.com/?pl=4l9EZwXc2kSH_LKKjogwWA&click_id=3c8cfpmqnh95mrnf73&sub_id=17136824 | 188.114.96.1 | | 0 B |
URL rqqlj.canopusacrux.com/?pl=4l9EZwXc2kSH_LKKjogwWA&click_id=3c8cfpmqnh95mrnf73&sub_id=17136824 IP188.114.96.1:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /?pl=4l9EZwXc2kSH_LKKjogwWA&click_id=3c8cfpmqnh95mrnf73&sub_id=17136824 HTTP/1.1
Host: rqqlj.canopusacrux.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.profitablegatecpm.com/
DNT: 1
Connection: keep-alive
Cookie: 4l9EZwXc2kSH_LKKjogwWA=5%2C1; __pl=7b0cedb7-6011-4ef6-b6e5-14fb3b89903d; __cap=8
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 302 Found
date: Fri, 26 Apr 2024 20:00:02 GMT
content-length: 0
location: https://rqqlj.check-tl-ver-154-1.com/blue-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=blue-robot&click_id=3c8cfpmqnh95mrnf73&sub_id=17136824&nrid=7adaa48154634f639d1f28f78dec312d&hash=5xuHeGGMAKwkuPTrSX6LYA&exp=1714161902
set-cookie: 4l9EZwXc2kSH_LKKjogwWA=5%2C1%2C3; max-age=345600; path=/; samesite=lax
__pl=7b0cedb7-6011-4ef6-b6e5-14fb3b89903d; expires=Sun, 26 Apr 2026 20:00:02 GMT; path=/; samesite=lax
__cap=9; max-age=3600; path=/; samesite=lax
cache-control: max-age=0, no-cache, no-store, must-revalidate
accept-ch: Sec-CH-UA, Sec-CH-UA-Platform, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ELxQ7DwFq3jYjuJrcfoQdMZRhqxQmCv06XWUZieFkaW4bntrDmGjYMVw9roDb4m3Dyfy5b%2FfSSyxf8tVrYIR4IzwU%2Fbz9mODwfGvxBeCEo4z0jI%2FsBo9z5J3npxIJIt3Ld%2FLHGbzKE0%2F"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87a9281f188956b7-OSL
alt-svc: h3=":443"; ma=86400
|
|
| tb.check-tl-ver-94-2.com/space-robot/assets/main.js?v=3 | 104.21.33.96 | | 16 kB |
URL tb.check-tl-ver-94-2.com/space-robot/assets/main.js?v=3 IP104.21.33.96:0
File typeJavaScript source, ASCII text, with very long lines (2745) Hash01c51ed0a287b5ddf6793778cfa3a72c ebd2613cd806b8e080f556b0d254c0f7a6c738a9 4c0224d810d4f0ac617ddd4ab215e0084aeec230d8944780a129c0046de2dad5
GET /space-robot/assets/main.js?v=3 HTTP/1.1
Host: tb.check-tl-ver-94-2.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tb.check-tl-ver-94-2.com/space-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=space-robot&click_id=70737pmqnh95m179ab&sub_id=17136824&nrid=c3d42fbcb5eb44d7b1d0d7ccff4c1263&hash=SIFhtzsp0FdE800EIGS-Yg&exp=1714161900
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 26 Apr 2024 20:00:01 GMT
content-type: application/javascript
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
etag: W/"6627c958-1255"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ERDbK73vVvhDfFFwKVtZChNOnFXsUqllTTNaQb%2BSj0ROZ839uQ0m7jJEGoicf5MsbIIh1vEgMRPxyl02bLz6U50n0QW0%2BdQbdbm59zrL%2Fr9WenG79MC6vvEBhd%2F8DWnk9bYImFueqDCGY1M%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a92816b929568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| tb.check-tl-ver-94-2.com/space-robot/assets/style.css?v=4 | 104.21.33.96 | | 19 kB |
URL tb.check-tl-ver-94-2.com/space-robot/assets/style.css?v=4 IP104.21.33.96:0
File typeASCII text, with very long lines (6532), with CRLF line terminators Hash8335155a7c4004d8296b7727a24273c4 387b7723ba35057b631809e1437c64cdd89f13bb 0b758313cde9005f3f2082f616558a3db63019d03a5f1376f3a49e64d874909e
GET /space-robot/assets/style.css?v=4 HTTP/1.1
Host: tb.check-tl-ver-94-2.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tb.check-tl-ver-94-2.com/space-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=space-robot&click_id=70737pmqnh95m179ab&sub_id=17136824&nrid=c3d42fbcb5eb44d7b1d0d7ccff4c1263&hash=SIFhtzsp0FdE800EIGS-Yg&exp=1714161900
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 26 Apr 2024 20:00:01 GMT
content-type: text/css
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
etag: W/"6627c958-1986"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=b4qJ%2ByyPn%2FSf96zZSe2UbRNQj1xaMja%2BPRLOmPcppw8USNaxbPI1b4m7Edza4%2FBL8H6OWt2x2uY8MbFyLb1VJTGJXdLg2BOOFyNsOUh7PWUyQa5OVwyhPHcOtzEpwkpdUnqmrgkHtZiMxYA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a92816b917568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| rqqlj.check-tl-ver-154-1.com/favicon.ico | 188.114.97.1 | | 0 B |
URL rqqlj.check-tl-ver-154-1.com/favicon.ico IP188.114.97.1:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1
Host: rqqlj.check-tl-ver-154-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rqqlj.check-tl-ver-154-1.com/blue-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=blue-robot&click_id=3c8cfpmqnh95mrnf73&sub_id=17136824&nrid=7adaa48154634f639d1f28f78dec312d&hash=5xuHeGGMAKwkuPTrSX6LYA&exp=1714161902
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 204 No Content
date: Fri, 26 Apr 2024 20:00:02 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 1768
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Y5lhzU5T81PI15ZrOQPkomvVEc2jiLa13Y3crP5EZhKfuoT0CX4VAhH0w9cVYWa0JZYibL82RUdyiJodXa%2BvfCMKbV0cKMEFEJwmi5WN6Mloed%2BFzJnMzi05bCWUh2wMvVqKioZdEHrPzPOxiZSv"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a9282149d9b52d-OSL
alt-svc: h3=":443"; ma=86400
|
|
| rqqlj.check-tl-ver-154-1.com/blue-robot/assets/style.css | 188.114.97.1 | | 24 kB |
URL rqqlj.check-tl-ver-154-1.com/blue-robot/assets/style.css IP188.114.97.1:0
File typeASCII text, with CRLF line terminators Hashff38fe2c7e467d3883201690baacfa93 edb4a93e0faa1c7b8968aab788b3e33e181c6c00 3a4bd4aed7f8c1fe11b9a39c4e70da33ccf8df29109e23f1ec10f6d07220bcd9
GET /blue-robot/assets/style.css HTTP/1.1
Host: rqqlj.check-tl-ver-154-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rqqlj.check-tl-ver-154-1.com/blue-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=blue-robot&click_id=3c8cfpmqnh95mrnf73&sub_id=17136824&nrid=7adaa48154634f639d1f28f78dec312d&hash=5xuHeGGMAKwkuPTrSX6LYA&exp=1714161902
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 26 Apr 2024 20:00:02 GMT
content-type: text/css
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
etag: W/"6627c958-f8e"
cache-control: max-age=14400
cf-cache-status: HIT
age: 3312
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=r3xt14HIPsHsxAUwSiuNDnl5Ma87T9QaRsXH1sq7B6fFE2%2Fsf3McF87JKGHnY53T%2FQ1Yav1KrcHAzvA9ES%2FOH2ITA9ev%2FCNyEts0TgQ5idJ7qLlkLt4wjysqjoOugyOhz8yiNcWTMfkMC7eBH3pT"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a928202801b52d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| www.gstatic.com/firebasejs/10.3.1/firebase-messaging-compat.js | 142.250.74.35 | | 9.9 kB |
URL www.gstatic.com/firebasejs/10.3.1/firebase-messaging-compat.js IP142.250.74.35:0
File typeJavaScript source, ASCII text, with very long lines (38231) Hash0541b823dfaf39162ef84cf075c9951b e0934726455558cc1a59823efada9651e33aafaa 21f1d62f222007068c793f0947d98f4ccb7c1595adb68efeb783390fdd8b5522
GET /firebasejs/10.3.1/firebase-messaging-compat.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rqqlj.check-tl-ver-154-1.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/firebase-js
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="firebase-js"
report-to: {"group":"firebase-js","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/firebase-js"}]}
content-length: 9934
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 25 Apr 2024 02:47:22 GMT
expires: Fri, 25 Apr 2025 02:47:22 GMT
cache-control: public, max-age=31536000
age: 148360
last-modified: Thu, 31 Aug 2023 15:20:50 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| ia.check-tl-ver-154-1.com/blue-robot/assets/style.css | 188.114.97.1 | | 16 kB |
URL ia.check-tl-ver-154-1.com/blue-robot/assets/style.css IP188.114.97.1:0
File typeASCII text, with CRLF line terminators Hashff38fe2c7e467d3883201690baacfa93 edb4a93e0faa1c7b8968aab788b3e33e181c6c00 3a4bd4aed7f8c1fe11b9a39c4e70da33ccf8df29109e23f1ec10f6d07220bcd9
GET /blue-robot/assets/style.css HTTP/1.1
Host: ia.check-tl-ver-154-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ia.check-tl-ver-154-1.com/blue-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=blue-robot&click_id=3c8cfpmqnh95mrnf73&sub_id=17136824&nrid=7adaa48154634f639d1f28f78dec312d&hash=5xuHeGGMAKwkuPTrSX6LYA&exp=1714161902
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 26 Apr 2024 20:00:03 GMT
content-type: text/css
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
etag: W/"6627c958-f8e"
cache-control: max-age=14400
cf-cache-status: HIT
age: 3313
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Upa52fS9vX%2FxRL90Sq%2Fa%2BdXuIzULHG9yd%2B6uVOHipS1GDh5bsG3TmvBv1%2BmnZXiumb3v%2FqcDmuCO9Wsh4orTdDuiKlGY8aFwxq0Tb2YtsmVe%2FKry4V7zUIW%2BrNV8PaB09GHwFvcFn9c9V4Qy"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a928232d01b52d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| rqqlj.check-tl-ver-94-1.com/eyes-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&click_id=b5176pmqnh97sy9383&sub_id=17136824&nrid=0d1830daf4ff480b847baabb4904856b&hash=uIegkRK-kT8MTEn190s45Q&exp=1714161893 | 188.114.96.1 | | 19 kB |
URL rqqlj.check-tl-ver-94-1.com/eyes-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&click_id=b5176pmqnh97sy9383&sub_id=17136824&nrid=0d1830daf4ff480b847baabb4904856b&hash=uIegkRK-kT8MTEn190s45Q&exp=1714161893 IP188.114.96.1:0
File typeHTML document, Unicode text, UTF-8 text, with CRLF line terminators Hash666203c2cfc7ee8aafbd1cbf9ec04c69 7d74e745174fe6140ee2fbe1fe8b8c2ae33ade9a 57027a083c9c7eaf8a078a7090c454b254216a4a94782e2445fb71629725531b
GET /eyes-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&click_id=b5176pmqnh97sy9383&sub_id=17136824&nrid=0d1830daf4ff480b847baabb4904856b&hash=uIegkRK-kT8MTEn190s45Q&exp=1714161893 HTTP/1.1
Host: rqqlj.check-tl-ver-94-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.profitablegatecpm.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:59:53 GMT
content-type: text/html
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kvKL%2BI1XBuhQBm7pyTmmKAdmrdW5AHJUhh8Q%2BomNsfwKtU%2BRSJnKout1WyAr2cmJ6piXJs%2BS53zZ%2FTQboHZOcJABuxvb%2B6Gc3MPJ%2Fbm6wzv0L2YOF4BPzDPUbj%2FyUOtQ%2FuR%2FNkOJH1EbYckeXAc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87a927e68cab0b31-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| cdnstatic.check-tl-ver-94-1.com/ps/tb?id=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&sub_id=17136824&click_id=b5176pmqnh97sy9383&nrid=a17d5ea925cbe6dc58a18350ef130699&reason=tb_exit&attempt=3 | 188.114.96.1 | | 15 kB |
URL cdnstatic.check-tl-ver-94-1.com/ps/tb?id=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&sub_id=17136824&click_id=b5176pmqnh97sy9383&nrid=a17d5ea925cbe6dc58a18350ef130699&reason=tb_exit&attempt=3 IP188.114.96.1:0
File typeHTML document, ASCII text, with CRLF line terminators Hashdc8aa0a2249f884dac1f684a88c59598 6b4d3f69a35479a007e9e951d218455c1569ef04 c274fde41e16dfaadef3b885e4c831d19d3a8580450ec2dd063af0e453e061bd
GET /ps/tb?id=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&sub_id=17136824&click_id=b5176pmqnh97sy9383&nrid=a17d5ea925cbe6dc58a18350ef130699&reason=tb_exit&attempt=3 HTTP/1.1
Host: cdnstatic.check-tl-ver-94-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://qb.check-tl-ver-94-1.com/
Cookie: __psu=0baf6f2c-55cb-4484-aae2-65d1f2b4b6b1
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:59:54 GMT
content-type: text/html
cache-control: max-age=0, no-cache, no-store, must-revalidate
accept-ch: Sec-CH-UA, Sec-CH-UA-Platform, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=eZCJWcso4EoXfNQ%2F%2ByqD3dPhIDLs3JMkEBEUSyWTl%2BYwSY0FvtpvOF3gbp%2F6CCg%2F0ASdKCpwYg%2FbLUEmxkFcsqHqMB%2FUv8aEAoij%2BqqYK6lMcs9GSJUM7DEwaaXDX79v2wgkYITnZ2K5LKA%2Fc1%2ByWWOo"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87a927ee0da80b31-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| www.gstatic.com/firebasejs/10.3.1/firebase-app-compat.js | 142.250.74.35 | | 9.3 kB |
URL www.gstatic.com/firebasejs/10.3.1/firebase-app-compat.js IP142.250.74.35:0
File typeJavaScript source, ASCII text, with very long lines (28368) Hash9900403b65514fad7df39a4e788a6e45 75f9ba061ef4e72bb23528c700f2a11c56d637e9 a202b2051ea9810cd9ba592b3f9418a89e2062f5c185e29e288080b28eb64fe5
GET /firebasejs/10.3.1/firebase-app-compat.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ia.check-tl-ver-154-1.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/firebase-js
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="firebase-js"
report-to: {"group":"firebase-js","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/firebase-js"}]}
content-length: 9308
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 26 Apr 2024 06:13:11 GMT
expires: Sat, 26 Apr 2025 06:13:11 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 31 Aug 2023 15:20:38 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 49612
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.gstatic.com/firebasejs/10.3.1/firebase-messaging-compat.js | 142.250.74.35 | | 9.9 kB |
URL www.gstatic.com/firebasejs/10.3.1/firebase-messaging-compat.js IP142.250.74.35:0
File typeJavaScript source, ASCII text, with very long lines (38231) Hash0541b823dfaf39162ef84cf075c9951b e0934726455558cc1a59823efada9651e33aafaa 21f1d62f222007068c793f0947d98f4ccb7c1595adb68efeb783390fdd8b5522
GET /firebasejs/10.3.1/firebase-messaging-compat.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ia.check-tl-ver-154-1.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/firebase-js
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="firebase-js"
report-to: {"group":"firebase-js","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/firebase-js"}]}
content-length: 9934
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 25 Apr 2024 02:47:22 GMT
expires: Fri, 25 Apr 2025 02:47:22 GMT
cache-control: public, max-age=31536000
age: 148361
last-modified: Thu, 31 Aug 2023 15:20:50 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| ib.check-tl-ver-154-1.com/blue-robot/assets/trls.js | 188.114.97.1 | | 17 kB |
URL ib.check-tl-ver-154-1.com/blue-robot/assets/trls.js IP188.114.97.1:0
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (362), with CRLF line terminators Hasha1172576cb7f22b41247c5571d2f6d9e 8ede5adfb13a76a2d04dfa26ccdf5a15d2abd18c 2c0b0f46a0c12f49cc290e1b3d62a890e8da3434dc80720e3c5a20bec0ab43e1
GET /blue-robot/assets/trls.js HTTP/1.1
Host: ib.check-tl-ver-154-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ib.check-tl-ver-154-1.com/blue-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=blue-robot&click_id=3c8cfpmqnh95mrnf73&sub_id=17136824&nrid=7adaa48154634f639d1f28f78dec312d&hash=5xuHeGGMAKwkuPTrSX6LYA&exp=1714161902
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 26 Apr 2024 20:00:03 GMT
content-type: application/javascript
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
etag: W/"6627c958-1fa7"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=uT9uYzaiF%2F0z2CIRRirADHqDZvx5eYpSGTapvoOX0msSDoOMZiEJOMcAihl69x5DTvO2%2Flsou4wACWLuO3SWkOuDo8JGaRQ32IehIPThOsaW8lTUhnnNaGtpoy8vugDFvFSeeUAcPSCNnZZq"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a928256fc7b52d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| rqqlj.check-tl-ver-94-1.com/space-robot/assets/trls.js | 188.114.96.1 | | 20 kB |
URL rqqlj.check-tl-ver-94-1.com/space-robot/assets/trls.js IP188.114.96.1:0
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (357), with CRLF line terminators Hash7f5c725b2c23b9687fa08d162a17427a 94973f1227871750d2ef13a367ce691f1a062527 c9611ce748d6c7c99d3f374a0b687db2e2428fc5ec9c4e7ae71b2e4305ac60e3
GET /space-robot/assets/trls.js HTTP/1.1
Host: rqqlj.check-tl-ver-94-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rqqlj.check-tl-ver-94-1.com/space-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=space-robot&click_id=9320dpmqnh9k2j662b&sub_id=17136824&nrid=01609b32c253432683bb62f4387e6d20&hash=PZmjLYGDSCBisxBtOUPf6g&exp=1714161890
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:59:51 GMT
content-type: application/javascript
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
etag: W/"6627c958-2f4d"
cache-control: max-age=14400
cf-cache-status: HIT
age: 3353
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=PIGZHAWhNModxDS50h%2Fmbzu4HHd94g466kBKaHLDH%2BDITzn306qDtreUPEzJYqNKAWeEW9WD3lF8eg3JQkxytbhkTu1mCjcWXEv946QfatJlT%2B1X31mXhKHnCMyvGy3L%2BsIC%2B0%2F24JzG1DgzQY4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a927d88ce10b31-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| ib.check-tl-ver-154-1.com/favicon.ico | 188.114.97.1 | | 0 B |
URL ib.check-tl-ver-154-1.com/favicon.ico IP188.114.97.1:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1
Host: ib.check-tl-ver-154-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ib.check-tl-ver-154-1.com/blue-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=blue-robot&click_id=3c8cfpmqnh95mrnf73&sub_id=17136824&nrid=7adaa48154634f639d1f28f78dec312d&hash=5xuHeGGMAKwkuPTrSX6LYA&exp=1714161902
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 204 No Content
date: Fri, 26 Apr 2024 20:00:03 GMT
cache-control: max-age=14400
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=KzFyFP%2FkaBj0E0oNgNmgkjn%2BpD98SgrO76i1%2BgdaqrpPABbgt2%2B%2B33t5YrRWUQ09xbCVRHcmPL8SCmbbv%2BMfr%2FPaX8WwDHuWVMFH%2BBIrBY1at16YcPkvtTh2ETJMy1%2FrEJtf8tLCzKBs3c4l"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a928269974b52d-OSL
alt-svc: h3=":443"; ma=86400
|
|
| www.gstatic.com/firebasejs/10.3.1/firebase-app-compat.js | 142.250.74.35 | | 9.3 kB |
URL www.gstatic.com/firebasejs/10.3.1/firebase-app-compat.js IP142.250.74.35:0
File typeJavaScript source, ASCII text, with very long lines (28368) Hash9900403b65514fad7df39a4e788a6e45 75f9ba061ef4e72bb23528c700f2a11c56d637e9 a202b2051ea9810cd9ba592b3f9418a89e2062f5c185e29e288080b28eb64fe5
GET /firebasejs/10.3.1/firebase-app-compat.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ib.check-tl-ver-154-1.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/firebase-js
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="firebase-js"
report-to: {"group":"firebase-js","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/firebase-js"}]}
content-length: 9308
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 26 Apr 2024 06:13:11 GMT
expires: Sat, 26 Apr 2025 06:13:11 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 31 Aug 2023 15:20:38 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 49612
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.gstatic.com/firebasejs/10.3.1/firebase-messaging-compat.js | 142.250.74.35 | | 9.9 kB |
URL www.gstatic.com/firebasejs/10.3.1/firebase-messaging-compat.js IP142.250.74.35:0
File typeJavaScript source, ASCII text, with very long lines (38231) Hash0541b823dfaf39162ef84cf075c9951b e0934726455558cc1a59823efada9651e33aafaa 21f1d62f222007068c793f0947d98f4ccb7c1595adb68efeb783390fdd8b5522
GET /firebasejs/10.3.1/firebase-messaging-compat.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ib.check-tl-ver-154-1.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/firebase-js
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="firebase-js"
report-to: {"group":"firebase-js","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/firebase-js"}]}
content-length: 9934
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 25 Apr 2024 02:47:22 GMT
expires: Fri, 25 Apr 2025 02:47:22 GMT
cache-control: public, max-age=31536000
age: 148361
last-modified: Thu, 31 Aug 2023 15:20:50 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| cdnstatic.check-tl-ver-154-1.com/ps/config.js?id=4l9EZwXc2kSH_LKKjogwWA | 188.114.97.1 | | 1.6 kB |
URL cdnstatic.check-tl-ver-154-1.com/ps/config.js?id=4l9EZwXc2kSH_LKKjogwWA IP188.114.97.1:0
File typeASCII text, with CRLF line terminators Hashdc65a2fbfc4c76147b8b778b759c8d91 b8374137f0fe797e6a7e58c0c6ef14aa7a6b9855 7e85c285fd983223d07a014d1a96804ba1c8f65fb43238a4fad204350e896958
GET /ps/config.js?id=4l9EZwXc2kSH_LKKjogwWA HTTP/1.1
Host: cdnstatic.check-tl-ver-154-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ib.check-tl-ver-154-1.com/
Cookie: __psu=fb863536-3c01-41b4-b5f3-4d4cc7b5b99f
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 26 Apr 2024 20:00:03 GMT
content-type: application/javascript
cache-control: max-age=0, no-cache, no-store, must-revalidate
accept-ch: Sec-CH-UA, Sec-CH-UA-Platform, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
cf-cache-status: BYPASS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=OMyC1%2FTRnl%2B%2FiSUYUhMzZyMtRNsjC%2B%2BmLR%2FW0dIizkJR5U2APLrcW00eld8pMf6eSf6dBiMeIsrenWqwof%2F3fxr%2Fg9mI2IevQ%2FUxaK0FIassdUK2pQxng29hXxeEFVcCQFFqAq2zPM8PL%2FdFdEooCX9fVA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a928269982b52d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| ib.check-tl-ver-154-1.com/blue-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=blue-robot&click_id=3c8cfpmqnh95mrnf73&sub_id=17136824&nrid=7adaa48154634f639d1f28f78dec312d&hash=5xuHeGGMAKwkuPTrSX6LYA&exp=1714161902 | 188.114.97.1 | | 6.3 kB |
URL ib.check-tl-ver-154-1.com/blue-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=blue-robot&click_id=3c8cfpmqnh95mrnf73&sub_id=17136824&nrid=7adaa48154634f639d1f28f78dec312d&hash=5xuHeGGMAKwkuPTrSX6LYA&exp=1714161902 IP188.114.97.1:0
File typeHTML document, ASCII text, with very long lines (1380), with CRLF line terminators Hash9a97caf42661ea48c9a8d347229b398a 5ee1404818c517813439e1a056b4016531fa11c7 8ac0a629dba5a9c8e52055295882680ede84c8d0a9f9e1c1af3636d1f47fa3bd
GET /blue-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=blue-robot&click_id=3c8cfpmqnh95mrnf73&sub_id=17136824&nrid=7adaa48154634f639d1f28f78dec312d&hash=5xuHeGGMAKwkuPTrSX6LYA&exp=1714161902 HTTP/1.1
Host: ib.check-tl-ver-154-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ia.check-tl-ver-154-1.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 26 Apr 2024 20:00:03 GMT
content-type: text/html
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Vcj9RRO0j89pv%2Bl65Ho%2BOTwt5sFpOJgJ0AJt03KVMjyAG2pL6WUz87KtMPqK1XMY1AkkBxDhwa4bf6n%2FhPPEU57EpZEmVTy9A615jWAi3n8s9VSInyCmdt4iUgSMq2Fe1qpYpDd5CcBaXgOM"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87a92824ef0ab52d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| nylonnickel.xyz/c9b2l0k.php?key=ssh20i85vx88tciu4a4m&SUB_ID_SHORT=3914cce020adddf423624f4b419207e5&COST_CPC=&PLACEMENT_ID=17136824&CAMPAIGN_ID=1028982&DEVICE_BRAND=Unknown&BROWSER_NAME=Firefox&USER_OS=Linux&USER_CARRIER=Blix%20Solutions&USERAGENT=Mozilla%2F5.0%20%28X11%3B%20Linux%20x86_64%3B%20rv%3A96.0%29%20Gecko%2F20100101%20Firefox%2F96.0&REMOTE_LANGUAGE=11&BANNER_ID=2901049 | 192.64.81.118 | | 0 B |
URL nylonnickel.xyz/c9b2l0k.php?key=ssh20i85vx88tciu4a4m&SUB_ID_SHORT=3914cce020adddf423624f4b419207e5&COST_CPC=&PLACEMENT_ID=17136824&CAMPAIGN_ID=1028982&DEVICE_BRAND=Unknown&BROWSER_NAME=Firefox&USER_OS=Linux&USER_CARRIER=Blix%20Solutions&USERAGENT=Mozilla%2F5.0%20%28X11%3B%20Linux%20x86_64%3B%20rv%3A96.0%29%20Gecko%2F20100101%20Firefox%2F96.0&REMOTE_LANGUAGE=11&BANNER_ID=2901049 IP192.64.81.118:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /c9b2l0k.php?key=ssh20i85vx88tciu4a4m&SUB_ID_SHORT=3914cce020adddf423624f4b419207e5&COST_CPC=&PLACEMENT_ID=17136824&CAMPAIGN_ID=1028982&DEVICE_BRAND=Unknown&BROWSER_NAME=Firefox&USER_OS=Linux&USER_CARRIER=Blix%20Solutions&USERAGENT=Mozilla%2F5.0%20%28X11%3B%20Linux%20x86_64%3B%20rv%3A96.0%29%20Gecko%2F20100101%20Firefox%2F96.0&REMOTE_LANGUAGE=11&BANNER_ID=2901049 HTTP/1.1
Host: nylonnickel.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.profitablegatecpm.com/
DNT: 1
Connection: keep-alive
Cookie: uclick=pmqnh98plp; uclickhash=pmqnh98plp-pmqnh95mrn-xr46-0-usgm6o-9rib8n-9ribwj-01cd75
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Server: nginx/1.22.0
Date: Fri, 26 Apr 2024 20:00:04 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: uclick=pmqnh98plp; expires=Sat, 27-Apr-2024 20:00:04 GMT; Max-Age=86400; path=/; secure; SameSite=none
uclickhash=pmqnh98plp-pmqnh9ydhq-xr46-0-usgm6o-9rib8n-9ribwj-017791; expires=Sat, 27-Apr-2024 20:00:04 GMT; Max-Age=86400; path=/; secure; SameSite=none
Location: https://rqqlj.canopusacrux.com/?pl=4l9EZwXc2kSH_LKKjogwWA&click_id=034d1pmqnh9ydhq1e2&sub_id=17136824
Strict-Transport-Security: max-age=31536000
|
|
| www.profitablegatecpm.com/api/users?token=L2tkaDh2emo1P2tleT1hOTY5Y2E1YzlhZDI2MTE3NjJmMTFiNzlhNTI2ZTJkMiZzdWJtZXRyaWM9MTcxMzY4MjQ | 192.243.59.13 | | 1.3 kB |
URL www.profitablegatecpm.com/api/users?token=L2tkaDh2emo1P2tleT1hOTY5Y2E1YzlhZDI2MTE3NjJmMTFiNzlhNTI2ZTJkMiZzdWJtZXRyaWM9MTcxMzY4MjQ IP192.243.59.13:0 ASN#39572 DataWeb Global Group B.V.
File typeHTML document, ASCII text, with very long lines (443) Hash39d3738378f82c32ab6014522012665a 6e9c565fac659beb2e68fe36e75681e371d9e5de 07e81211368ec81f92afb741f8f0d50ac82dac6394250825e7192a42cb254b17
GET /api/users?token=L2tkaDh2emo1P2tleT1hOTY5Y2E1YzlhZDI2MTE3NjJmMTFiNzlhNTI2ZTJkMiZzdWJtZXRyaWM9MTcxMzY4MjQ HTTP/1.1
Host: www.profitablegatecpm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Fri, 26 Apr 2024 20:00:04 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Set-Cookie: u_pl=15548089; expires=Sat, 27 Apr 2024 20:00:04 GMT
ain=eyJhbGciOiJIUzI1NiJ9.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.3XRPKMYtAZpXHYSP3cIfoi6Y54jOXooCzC0nbGKbZDY; expires=Fri, 26 Apr 2024 20:01:04 GMT
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: d8aa46e7f59f06d8688bdc33d00d24f5
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
|
|
| rqqlj.canopusacrux.com/?pl=4l9EZwXc2kSH_LKKjogwWA&click_id=034d1pmqnh9ydhq1e2&sub_id=17136824 | 188.114.96.1 | | 0 B |
URL rqqlj.canopusacrux.com/?pl=4l9EZwXc2kSH_LKKjogwWA&click_id=034d1pmqnh9ydhq1e2&sub_id=17136824 IP188.114.96.1:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /?pl=4l9EZwXc2kSH_LKKjogwWA&click_id=034d1pmqnh9ydhq1e2&sub_id=17136824 HTTP/1.1
Host: rqqlj.canopusacrux.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.profitablegatecpm.com/
DNT: 1
Connection: keep-alive
Cookie: 4l9EZwXc2kSH_LKKjogwWA=5%2C1%2C3; __pl=7b0cedb7-6011-4ef6-b6e5-14fb3b89903d; __cap=9
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 302 Found
date: Fri, 26 Apr 2024 20:00:04 GMT
content-length: 0
location: https://rqqlj.check-tl-ver-94-2.com/blue-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=blue-robot&click_id=034d1pmqnh9ydhq1e2&sub_id=17136824&nrid=1eb612679cb242d6a4c795c4f180cc08&hash=fC7euQT12MUnxll-xpSurw&exp=1714161904
set-cookie: 4l9EZwXc2kSH_LKKjogwWA=3; max-age=345600; path=/; samesite=lax
__pl=7b0cedb7-6011-4ef6-b6e5-14fb3b89903d; expires=Sun, 26 Apr 2026 20:00:04 GMT; path=/; samesite=lax
__cap=10; max-age=3600; path=/; samesite=lax
cache-control: max-age=0, no-cache, no-store, must-revalidate
accept-ch: Sec-CH-UA, Sec-CH-UA-Platform, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=fwJ1RW5q%2B72pAp%2B70I7EGKt4DQeJ1RY%2B%2F4SQhabpd01qh3I8cvBQhsfEKBrwJ4Elny94PEN9p8bkDjLjvdBIE1422vWajxQowFCKHpoOH0JgU3cFY%2B67fMoKmj2DQi4NZD%2BBqccoyrzh"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87a9282e38e156b7-OSL
alt-svc: h3=":443"; ma=86400
|
|
| cdnstatic.check-tl-ver-94-2.com/ps/tb?id=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&sub_id=17136824&click_id=908bcpmqnh97s151af&nrid=81986c5f315650f0b5b5cfc7e284c1c8&reason=tb_exit&attempt=3 | 104.21.33.96 | | 18 kB |
URL cdnstatic.check-tl-ver-94-2.com/ps/tb?id=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&sub_id=17136824&click_id=908bcpmqnh97s151af&nrid=81986c5f315650f0b5b5cfc7e284c1c8&reason=tb_exit&attempt=3 IP104.21.33.96:0
File typeHTML document, ASCII text, with CRLF line terminators Hashdc8aa0a2249f884dac1f684a88c59598 6b4d3f69a35479a007e9e951d218455c1569ef04 c274fde41e16dfaadef3b885e4c831d19d3a8580450ec2dd063af0e453e061bd
GET /ps/tb?id=4l9EZwXc2kSH_LKKjogwWA&sm=eyes-robot&sub_id=17136824&click_id=908bcpmqnh97s151af&nrid=81986c5f315650f0b5b5cfc7e284c1c8&reason=tb_exit&attempt=3 HTTP/1.1
Host: cdnstatic.check-tl-ver-94-2.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://wb.check-tl-ver-94-2.com/
Cookie: __psu=ef4a31c6-5c33-4a47-bed9-d8e4d791767c
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 26 Apr 2024 19:59:56 GMT
content-type: text/html
cache-control: max-age=0, no-cache, no-store, must-revalidate
accept-ch: Sec-CH-UA, Sec-CH-UA-Platform, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=XBvnrxg7VgzeefsxLEZqjXCpbvjOPM%2FQfMfHPJozSak6qfBrw4MR5TSthAqtGNsYd2xZ2tRXInv9A6U7MaMevskqPwmIS%2B70u1bJa7Xa3oQLQfC9IpYVVIwJ1aLXpjpYsAODqLI04rbbPdZdEYi42fz3"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87a927fba881568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| ta.check-tl-ver-94-2.com/space-robot/assets/style.css?v=4 | 104.21.33.96 | | 19 kB |
URL ta.check-tl-ver-94-2.com/space-robot/assets/style.css?v=4 IP104.21.33.96:0
File typeASCII text, with very long lines (6532), with CRLF line terminators Hash8335155a7c4004d8296b7727a24273c4 387b7723ba35057b631809e1437c64cdd89f13bb 0b758313cde9005f3f2082f616558a3db63019d03a5f1376f3a49e64d874909e
GET /space-robot/assets/style.css?v=4 HTTP/1.1
Host: ta.check-tl-ver-94-2.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ta.check-tl-ver-94-2.com/space-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=space-robot&click_id=70737pmqnh95m179ab&sub_id=17136824&nrid=c3d42fbcb5eb44d7b1d0d7ccff4c1263&hash=SIFhtzsp0FdE800EIGS-Yg&exp=1714161900
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 26 Apr 2024 20:00:00 GMT
content-type: text/css
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
etag: W/"6627c958-1986"
cache-control: max-age=14400
cf-cache-status: HIT
age: 5944
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9EereuxqhxKRA3D39u%2B8r10MEQJZ8uKOrTKpK9jG1l343xF4GDafPJmyTg06eMljMkSUwfc8dRsTlno%2FBM5LyF4EjJNaothdLA%2B1jGJio0llR1LKa9BXAbk6J8reJHNNoFww5bYILGclaXQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a928149db1568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| cdnstatic.check-tl-ver-94-2.com/ps/config.js?id=4l9EZwXc2kSH_LKKjogwWA | 104.21.33.96 | | 28 kB |
URL cdnstatic.check-tl-ver-94-2.com/ps/config.js?id=4l9EZwXc2kSH_LKKjogwWA IP104.21.33.96:0
File typeASCII text, with CRLF line terminators Hashdc65a2fbfc4c76147b8b778b759c8d91 b8374137f0fe797e6a7e58c0c6ef14aa7a6b9855 7e85c285fd983223d07a014d1a96804ba1c8f65fb43238a4fad204350e896958
GET /ps/config.js?id=4l9EZwXc2kSH_LKKjogwWA HTTP/1.1
Host: cdnstatic.check-tl-ver-94-2.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rqqlj.check-tl-ver-94-2.com/
Cookie: __psu=ef4a31c6-5c33-4a47-bed9-d8e4d791767c
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 26 Apr 2024 20:00:00 GMT
content-type: application/javascript
cache-control: max-age=0, no-cache, no-store, must-revalidate
accept-ch: Sec-CH-UA, Sec-CH-UA-Platform, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
cf-cache-status: BYPASS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=PscJ5ipA5kgl%2F4uwCMJHll9uY5GvsIyFw1KyiOBQmmh%2FB83QpYrTLv8p%2FpQokJ2EAyTZneVYzwJOduRv6LIN0hjQQ6qL56ESCmck68ZXu7phzIbtNpqPBGMPLuGbTTWhbwlmD7YoMsimhYIDz%2F9dl%2B6v"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a928131b36568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| ia.check-tl-ver-154-1.com/blue-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=blue-robot&click_id=3c8cfpmqnh95mrnf73&sub_id=17136824&nrid=7adaa48154634f639d1f28f78dec312d&hash=5xuHeGGMAKwkuPTrSX6LYA&exp=1714161902 | 188.114.97.1 | | 16 kB |
URL ia.check-tl-ver-154-1.com/blue-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=blue-robot&click_id=3c8cfpmqnh95mrnf73&sub_id=17136824&nrid=7adaa48154634f639d1f28f78dec312d&hash=5xuHeGGMAKwkuPTrSX6LYA&exp=1714161902 IP188.114.97.1:0
File typeHTML document, ASCII text, with very long lines (1380), with CRLF line terminators Hash9a97caf42661ea48c9a8d347229b398a 5ee1404818c517813439e1a056b4016531fa11c7 8ac0a629dba5a9c8e52055295882680ede84c8d0a9f9e1c1af3636d1f47fa3bd
GET /blue-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=blue-robot&click_id=3c8cfpmqnh95mrnf73&sub_id=17136824&nrid=7adaa48154634f639d1f28f78dec312d&hash=5xuHeGGMAKwkuPTrSX6LYA&exp=1714161902 HTTP/1.1
Host: ia.check-tl-ver-154-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rqqlj.check-tl-ver-154-1.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 26 Apr 2024 20:00:03 GMT
content-type: text/html
last-modified: Tue, 23 Apr 2024 14:44:40 GMT
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wiHn9jh7nD7hJ%2BcNVdunDtW1QNPMmwC7CN0r9wYbTjBNQOdhb%2BpyXf0wHnWutNQuA%2B%2FeH9MWHHj2pwD%2Fw7MmDAoNyWOYPXZZZONJP0GCFzWIiqu%2BrtDV89WN42nrc5FNG6KlKTUssffWXxt4"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87a928229c42b52d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| www.gstatic.com/firebasejs/10.3.1/firebase-messaging-compat.js | 142.250.74.35 | | 9.9 kB |
URL www.gstatic.com/firebasejs/10.3.1/firebase-messaging-compat.js IP142.250.74.35:0
File typeJavaScript source, ASCII text, with very long lines (38231) Hash0541b823dfaf39162ef84cf075c9951b e0934726455558cc1a59823efada9651e33aafaa 21f1d62f222007068c793f0947d98f4ccb7c1595adb68efeb783390fdd8b5522
GET /firebasejs/10.3.1/firebase-messaging-compat.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rqqlj.check-tl-ver-94-2.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/firebase-js
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="firebase-js"
report-to: {"group":"firebase-js","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/firebase-js"}]}
content-length: 9934
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 25 Apr 2024 02:47:22 GMT
expires: Fri, 25 Apr 2025 02:47:22 GMT
cache-control: public, max-age=31536000
age: 148363
last-modified: Thu, 31 Aug 2023 15:20:50 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| ia.check-tl-ver-154-1.com/blue-robot/assets/trls.js | 188.114.97.1 | 200 OK | 0 B |
URL GET HTTP/3ia.check-tl-ver-154-1.com/blue-robot/assets/trls.js IP188.114.97.1:443
Requested byhttps://ia.check-tl-ver-154-1.com/blue-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=blue-robot&click_id=3c8cfpmqnh95mrnf73&sub_id=17136824&nrid=7adaa48154634f639d1f28f78dec312d&hash=5xuHeGGMAKwkuPTrSX6LYA&exp=1714161902
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /blue-robot/assets/trls.js HTTP/1.1
Host: ia.check-tl-ver-154-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ia.check-tl-ver-154-1.com/blue-robot/?pl=4l9EZwXc2kSH_LKKjogwWA&sm=blue-robot&click_id=3c8cfpmqnh95mrnf73&sub_id=17136824&nrid=7adaa48154634f639d1f28f78dec312d&hash=5xuHeGGMAKwkuPTrSX6LYA&exp=1714161902
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
|
|