| www.jsdh.site/single/1212/fnf-tails.exe |  91.108.103.116 | 403 Forbidden | 2.2 kB |
URL User Request GET HTTP/2www.jsdh.site/single/1212/fnf-tails.exe IP91.108.103.116:443 ASN#47583 Hostinger International Limited
CertificateIssuerGoogle Trust Services Subjectjsdh.site Fingerprint9E:BC:FC:B9:5B:86:B9:E9:89:BF:5B:E0:1E:25:5F:00:AA:57:C4:81 ValiditySun, 02 Feb 2025 17:13:34 GMT - Sat, 03 May 2025 17:13:33 GMT
File typeHTML document, ASCII text, with very long lines (4792), with no line terminators Hashb649bb4bbcec6444434d2df7501effb6 f8a04ac654e2234fa2644abf8e293d02bc01c8fd c2779250c7e25bb12281a890f3ec61c3585c5bbad82fbbb55a3068191004fc4a
| NIDS | Severity | Alert |
|---|
| suricata | high | ET HUNTING SUSPICIOUS Firesale gTLD EXE DL with no Referer June 13 2016 |
GET /single/1212/fnf-tails.exe HTTP/1.1
Host: www.jsdh.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 403 Forbidden
date: Wed, 05 Feb 2025 00:58:56 GMT
content-type: text/html
content-length: 2193
vary: Accept-Encoding
content-encoding: br
cross-origin-embedder-policy: require-corp
cross-origin-opener-policy: same-origin
cross-origin-resource-policy: same-origin
permissions-policy: accelerometer=(),autoplay=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()
referrer-policy: same-origin
x-frame-options: SAMEORIGIN
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
expires: Thu, 01 Jan 1970 00:00:01 GMT
server: hcdn
alt-svc: h3=":443"; ma=86400
x-hcdn-request-id: 81865a2d3af57c0102876d47a451c80e-fast-edge6
X-Firefox-Spdy: h2
|
|
| www.jsdh.site/single/1212/fnf-tails.exe | 91.108.103.116 | 403 Forbidden | 2.4 kB |
URL User Request GET HTTP/2www.jsdh.site/single/1212/fnf-tails.exe IP91.108.103.116:443 ASN#47583 Hostinger International Limited
CertificateIssuerGoogle Trust Services Subjectjsdh.site Fingerprint9E:BC:FC:B9:5B:86:B9:E9:89:BF:5B:E0:1E:25:5F:00:AA:57:C4:81 ValiditySun, 02 Feb 2025 17:13:34 GMT - Sat, 03 May 2025 17:13:33 GMT
File typeHTML document, ASCII text, with very long lines (4792), with no line terminators Hashb649bb4bbcec6444434d2df7501effb6 f8a04ac654e2234fa2644abf8e293d02bc01c8fd c2779250c7e25bb12281a890f3ec61c3585c5bbad82fbbb55a3068191004fc4a
| NIDS | Severity | Alert |
|---|
| suricata | high | ET HUNTING SUSPICIOUS Firesale gTLD EXE DL with no Referer June 13 2016 |
GET /single/1212/fnf-tails.exe HTTP/1.1
Host: www.jsdh.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 403 Forbidden
Date: Wed, 05 Feb 2025 00:58:56 GMT
Content-Type: text/html
Content-Length: 2393
Connection: keep-alive
Vary: Accept-Encoding
Content-Encoding: gzip
Cross-Origin-Embedder-Policy: require-corp
Cross-Origin-Opener-Policy: same-origin
Cross-Origin-Resource-Policy: same-origin
Permissions-Policy: accelerometer=(),autoplay=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()
Referrer-Policy: same-origin
X-Frame-Options: SAMEORIGIN
Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Server: hcdn
alt-svc: h3=":443"; ma=86400
x-hcdn-request-id: c4efcf57bbeccf0e651ad5699ebfa15a-fast-edge4
|
|
| www.jsdh.site/hcdn-cgi/jschallenge | 91.108.103.116 | 200 OK | 151 B |
URL www.jsdh.site/hcdn-cgi/jschallenge IP91.108.103.116:0 ASN#47583 Hostinger International Limited
CertificateIssuerGoogle Trust Services Subjectjsdh.site Fingerprint9E:BC:FC:B9:5B:86:B9:E9:89:BF:5B:E0:1E:25:5F:00:AA:57:C4:81 ValiditySun, 02 Feb 2025 17:13:34 GMT - Sat, 03 May 2025 17:13:33 GMT
Hash8f6dc24f5b4be5312d44f124cb4ec7c8 2d0f193d8e139fde00994690401347bb5af380cd 8741728413e98e631090cf30754ceda5fc800a71b66052b8d6c375d4a433c627
GET /hcdn-cgi/jschallenge HTTP/1.1
Host: www.jsdh.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://www.jsdh.site/single/1212/fnf-tails.exe
DNT: 1
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 05 Feb 2025 00:58:56 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Server: hcdn
alt-svc: h3=":443"; ma=86400
x-hcdn-request-id: 828446501db92e317ea66326bd96b37b-fast-edge4
Cross-Origin-Embedder-Policy: require-corp
Cross-Origin-Opener-Policy: same-origin
Cross-Origin-Resource-Policy: same-origin
Permissions-Policy: accelerometer=(),autoplay=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()
Referrer-Policy: same-origin
X-Frame-Options: SAMEORIGIN
Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Content-Encoding: gzip
|
|
| www.jsdh.site/favicon.ico | 91.108.103.116 | 403 Forbidden | 2.4 kB |
URL GET HTTP/2www.jsdh.site/favicon.ico IP91.108.103.116:443 ASN#47583 Hostinger International Limited
Requested byhttps://www.jsdh.site/single/1212/fnf-tails.exe CertificateIssuerGoogle Trust Services Subjectjsdh.site Fingerprint9E:BC:FC:B9:5B:86:B9:E9:89:BF:5B:E0:1E:25:5F:00:AA:57:C4:81 ValiditySun, 02 Feb 2025 17:13:34 GMT - Sat, 03 May 2025 17:13:33 GMT
File typeHTML document, ASCII text, with very long lines (4792), with no line terminators Hashb649bb4bbcec6444434d2df7501effb6 f8a04ac654e2234fa2644abf8e293d02bc01c8fd c2779250c7e25bb12281a890f3ec61c3585c5bbad82fbbb55a3068191004fc4a
GET /favicon.ico HTTP/1.1
Host: www.jsdh.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://www.jsdh.site/single/1212/fnf-tails.exe
DNT: 1
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 403 Forbidden
Date: Wed, 05 Feb 2025 00:58:56 GMT
Content-Type: text/html
Content-Length: 2393
Connection: keep-alive
Vary: Accept-Encoding
Content-Encoding: gzip
Cross-Origin-Embedder-Policy: require-corp
Cross-Origin-Opener-Policy: same-origin
Cross-Origin-Resource-Policy: same-origin
Permissions-Policy: accelerometer=(),autoplay=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()
Referrer-Policy: same-origin
X-Frame-Options: SAMEORIGIN
Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Server: hcdn
alt-svc: h3=":443"; ma=86400
x-hcdn-request-id: 6a822f546f640bb0b6059437f5fa141a-fast-edge4
|
|
| www.jsdh.site/hcdn-cgi/jschallenge-validate | 91.108.103.116 | 200 OK | 0 B |
URL www.jsdh.site/hcdn-cgi/jschallenge-validate IP91.108.103.116:0 ASN#47583 Hostinger International Limited
CertificateIssuerGoogle Trust Services Subjectjsdh.site Fingerprint9E:BC:FC:B9:5B:86:B9:E9:89:BF:5B:E0:1E:25:5F:00:AA:57:C4:81 ValiditySun, 02 Feb 2025 17:13:34 GMT - Sat, 03 May 2025 17:13:33 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /hcdn-cgi/jschallenge-validate HTTP/1.1
Host: www.jsdh.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://www.jsdh.site/single/1212/fnf-tails.exe
Content-Type: application/x-www-form-urlencoded
Content-Length: 74
Origin: http://www.jsdh.site
DNT: 1
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 05 Feb 2025 00:58:59 GMT
Content-Type: application/octet-stream
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: hcdn=AQEAHDYiv0VK_J2dWTfG1W4AAXShUkJECUICKeQoMx0rl3bTt6JnAAAAAADeAADzkYQLjvuRgaD8pdQ1wSlrAAAAsBghJeIaUvmQK7ptfCZBvA; Path=/; SameSite=Lax; HttpOnly
Server: hcdn
alt-svc: h3=":443"; ma=86400
x-hcdn-request-id: ff57cc120f2e158561f12b8414bfd178-fast-edge4
Cross-Origin-Embedder-Policy: require-corp
Cross-Origin-Opener-Policy: same-origin
Cross-Origin-Resource-Policy: same-origin
Permissions-Policy: accelerometer=(),autoplay=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()
Referrer-Policy: same-origin
X-Frame-Options: SAMEORIGIN
Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Expires: Thu, 01 Jan 1970 00:00:01 GMT
|
|
| www.jsdh.site/favicon.ico | 91.108.103.116 | 302 Found | 771 B |
URL GET HTTP/2www.jsdh.site/favicon.ico IP91.108.103.116:443 ASN#47583 Hostinger International Limited
Requested byhttps://www.jsdh.site/single/1212/fnf-tails.exe CertificateIssuerGoogle Trust Services Subjectjsdh.site Fingerprint9E:BC:FC:B9:5B:86:B9:E9:89:BF:5B:E0:1E:25:5F:00:AA:57:C4:81 ValiditySun, 02 Feb 2025 17:13:34 GMT - Sat, 03 May 2025 17:13:33 GMT
File typeHTML document, ASCII text, with CRLF, LF line terminators Hash1597c10f533a5853e70df48c1f50937c 18d401b292522117086c3dbdc1940444aa1cc4da b5ffafff1266d67b31cc80784d26d1f87b06773c1d50f490b84d10caabc15856
GET /favicon.ico HTTP/1.1
Host: www.jsdh.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.jsdh.site/single/1212/fnf-tails.exe
Cookie: hcdn=AQEAHDYiv0VK_J2dWTfG1W4AAXShUkJECUICKeQoMx0rl3bTt6JnAAAAAADeAADzkYQLjvuRgaD8pdQ1wSlrAAAAsBghJeIaUvmQK7ptfCZBvA
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
date: Wed, 05 Feb 2025 00:58:59 GMT
content-type: text/html
content-length: 771
location: https://jsdh.site/404
cache-control: no-cache, no-store, must-revalidate, max-age=0
platform: hostinger
panel: hpanel
content-security-policy: upgrade-insecure-requests
x-turbo-charged-by: LiteSpeed
server: hcdn
alt-svc: h3=":443"; ma=86400
x-hcdn-request-id: e0b9787059d6d86cd20fdcdaa0c75568-fast-edge6
x-hcdn-cache-status: MISS
x-hcdn-upstream-rt: 0.007
X-Firefox-Spdy: h2
|
|
| jsdh.site/404 | 185.77.97.31 | 403 Forbidden | 2.2 kB |
IP185.77.97.31:443 ASN#47583 Hostinger International Limited
Requested byhttps://www.jsdh.site/single/1212/fnf-tails.exe CertificateIssuerGoogle Trust Services Subjectjsdh.site Fingerprint9E:BC:FC:B9:5B:86:B9:E9:89:BF:5B:E0:1E:25:5F:00:AA:57:C4:81 ValiditySun, 02 Feb 2025 17:13:34 GMT - Sat, 03 May 2025 17:13:33 GMT
File typeHTML document, ASCII text, with very long lines (4792), with no line terminators Hashb649bb4bbcec6444434d2df7501effb6 f8a04ac654e2234fa2644abf8e293d02bc01c8fd c2779250c7e25bb12281a890f3ec61c3585c5bbad82fbbb55a3068191004fc4a
GET /404 HTTP/1.1
Host: jsdh.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.jsdh.site/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 403 Forbidden
date: Wed, 05 Feb 2025 00:59:00 GMT
content-type: text/html
content-length: 2193
vary: Accept-Encoding
content-encoding: br
cross-origin-embedder-policy: require-corp
cross-origin-opener-policy: same-origin
cross-origin-resource-policy: same-origin
permissions-policy: accelerometer=(),autoplay=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()
referrer-policy: same-origin
x-frame-options: SAMEORIGIN
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
expires: Thu, 01 Jan 1970 00:00:01 GMT
server: hcdn
alt-svc: h3=":443"; ma=86400
x-hcdn-request-id: 648b64e287aaac09ed9a2e3813d201d6-fast-edge4
X-Firefox-Spdy: h2
|
|
| www.recaptcha.net/recaptcha/api.js?onload=onloadCallback&render=explicit |  142.250.74.99 | 200 OK | 1.1 kB |
URL GET HTTP/2www.recaptcha.net/recaptcha/api.js?onload=onloadCallback&render=explicit IP142.250.74.99:443
Requested byhttps://www.jsdh.site/single/1212/fnf-tails.exe CertificateIssuerGoogle Trust Services Subjectmisc.google.com FingerprintA1:0A:AA:D4:6A:78:1B:7D:08:00:A5:B0:D4:87:64:73:CD:8B:CC:6C ValidityMon, 20 Jan 2025 08:36:20 GMT - Mon, 14 Apr 2025 08:36:19 GMT
File typegzip compressed data, max compression Hash348d45b6647c760f1b9a3814af8a3585 d54ac4e04268f98e06ac141d392f668c6b45f4c7 1acf09b041e897f7c97f9228b1c704eda49310492c84d5ab2a6f63e971871dd5
GET /recaptcha/api.js?onload=onloadCallback&render=explicit HTTP/1.1
Host: www.recaptcha.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.jsdh.site/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
expires: Wed, 05 Feb 2025 00:58:59 GMT
date: Wed, 05 Feb 2025 00:58:59 GMT
cache-control: private, max-age=300
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d"
report-to: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]}
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.gstatic.com/recaptcha/releases/I0bG74fWAenNf3Z5ncHSz-bd/recaptcha__en.js | 142.250.74.3 | 200 OK | 219 kB |
URL GET HTTP/3www.gstatic.com/recaptcha/releases/I0bG74fWAenNf3Z5ncHSz-bd/recaptcha__en.js IP142.250.74.3:443
Requested byhttps://www.recaptcha.net/recaptcha/api2/anchor?ar=1&k=6LewU34UAAAAAHvXqFOcQlm8z1MP1xpGAZCYEeZY&co=aHR0cHM6Ly93d3cuanNkaC5zaXRlOjQ0Mw..&hl=en&v=I0bG74fWAenNf3Z5ncHSz-bd&size=normal&cb=2yfy96xd0zkp CertificateIssuerGoogle Trust Services Subject*.gstatic.com Fingerprint62:57:FE:D4:36:DB:03:15:19:B1:2C:50:42:64:6E:D7:C2:32:4F:B6 ValidityMon, 20 Jan 2025 08:37:07 GMT - Mon, 14 Apr 2025 08:37:06 GMT
File typeJavaScript source, ASCII text, with very long lines (620) Size219 kB (219318 bytes) Hash29a58adc5d7834866fd236b05f781dfd 1921cd2cc3df5830baf47570c902e00f188cadf6 01e8f94227bcdc2b0894ea9e2655b35b7cdb82a04e4d0618296e8bc8e29aa687
GET /recaptcha/releases/I0bG74fWAenNf3Z5ncHSz-bd/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.jsdh.site
DNT: 1
Connection: keep-alive
Referer: https://www.jsdh.site/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
timing-allow-origin: *
content-length: 219318
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 04 Feb 2025 06:56:13 GMT
expires: Wed, 04 Feb 2026 06:56:13 GMT
cache-control: public, max-age=31536000
last-modified: Sun, 26 Jan 2025 23:01:57 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 64967
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.gstatic.com/recaptcha/releases/I0bG74fWAenNf3Z5ncHSz-bd/styles__ltr.css | 142.250.74.3 | 200 OK | 42 kB |
URL GET HTTP/3www.gstatic.com/recaptcha/releases/I0bG74fWAenNf3Z5ncHSz-bd/styles__ltr.css IP142.250.74.3:443
Requested byhttps://www.recaptcha.net/recaptcha/api2/bframe?hl=en&v=I0bG74fWAenNf3Z5ncHSz-bd&k=6LewU34UAAAAAHvXqFOcQlm8z1MP1xpGAZCYEeZY CertificateIssuerGoogle Trust Services Subject*.gstatic.com Fingerprint62:57:FE:D4:36:DB:03:15:19:B1:2C:50:42:64:6E:D7:C2:32:4F:B6 ValidityMon, 20 Jan 2025 08:37:07 GMT - Mon, 14 Apr 2025 08:37:06 GMT
File typeASCII text, with very long lines (65536), with no line terminators Hashe6fce3535dadede6291b6b755489a4c0 5fd4ba99212c0289e7c6f5a85b29e4a36a84fb8f e8240323ee880b0e1f92671d098a7960a9f1f4622c82b6ff37b4934f2f1d124b
GET /recaptcha/releases/I0bG74fWAenNf3Z5ncHSz-bd/styles__ltr.css HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.recaptcha.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
timing-allow-origin: *
content-length: 42054
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 04 Feb 2025 05:41:08 GMT
expires: Wed, 04 Feb 2026 05:41:08 GMT
cache-control: public, max-age=31536000
last-modified: Sun, 26 Jan 2025 23:01:57 GMT
content-type: text/css
vary: Accept-Encoding
age: 69472
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.gstatic.com/recaptcha/releases/I0bG74fWAenNf3Z5ncHSz-bd/recaptcha__en.js | 142.250.74.3 | 200 OK | 219 kB |
URL GET HTTP/3www.gstatic.com/recaptcha/releases/I0bG74fWAenNf3Z5ncHSz-bd/recaptcha__en.js IP142.250.74.3:443
Requested byhttps://www.recaptcha.net/recaptcha/api2/anchor?ar=1&k=6LewU34UAAAAAHvXqFOcQlm8z1MP1xpGAZCYEeZY&co=aHR0cHM6Ly93d3cuanNkaC5zaXRlOjQ0Mw..&hl=en&v=I0bG74fWAenNf3Z5ncHSz-bd&size=normal&cb=2yfy96xd0zkp CertificateIssuerGoogle Trust Services Subject*.gstatic.com Fingerprint62:57:FE:D4:36:DB:03:15:19:B1:2C:50:42:64:6E:D7:C2:32:4F:B6 ValidityMon, 20 Jan 2025 08:37:07 GMT - Mon, 14 Apr 2025 08:37:06 GMT
File typeJavaScript source, ASCII text, with very long lines (620) Size219 kB (219318 bytes) Hash29a58adc5d7834866fd236b05f781dfd 1921cd2cc3df5830baf47570c902e00f188cadf6 01e8f94227bcdc2b0894ea9e2655b35b7cdb82a04e4d0618296e8bc8e29aa687
GET /recaptcha/releases/I0bG74fWAenNf3Z5ncHSz-bd/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.recaptcha.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
timing-allow-origin: *
content-length: 219318
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 04 Feb 2025 06:56:13 GMT
expires: Wed, 04 Feb 2026 06:56:13 GMT
cache-control: public, max-age=31536000
last-modified: Sun, 26 Jan 2025 23:01:57 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 64967
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 | 142.250.74.35 | 200 OK | 15 kB |
URL GET HTTP/2fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 IP142.250.74.35:443
Requested byhttps://www.recaptcha.net/recaptcha/api2/anchor?ar=1&k=6LewU34UAAAAAHvXqFOcQlm8z1MP1xpGAZCYEeZY&co=aHR0cHM6Ly93d3cuanNkaC5zaXRlOjQ0Mw..&hl=en&v=I0bG74fWAenNf3Z5ncHSz-bd&size=normal&cb=2yfy96xd0zkp CertificateIssuerGoogle Trust Services Subject*.gstatic.com Fingerprint62:57:FE:D4:36:DB:03:15:19:B1:2C:50:42:64:6E:D7:C2:32:4F:B6 ValidityMon, 20 Jan 2025 08:37:07 GMT - Mon, 14 Apr 2025 08:37:06 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 15344, version 1.0 Hash5d4aeb4e5f5ef754e307d7ffaef688bd 06db651cdf354c64a7383ea9c77024ef4fb4cef8 3e253b66056519aa065b00a453bac37ac5ed8f3e6fe7b542e93a9dcdcc11d0bc
GET /s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.recaptcha.net
DNT: 1
Connection: keep-alive
Referer: https://www.recaptcha.net/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15344
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Jan 2025 10:20:38 GMT
expires: Fri, 30 Jan 2026 10:20:38 GMT
cache-control: public, max-age=31536000
age: 484703
last-modified: Mon, 16 Oct 2017 17:32:55 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.gstatic.com/recaptcha/api2/logo_48.png | 142.250.74.3 | 200 OK | 2.2 kB |
URL GET HTTP/3www.gstatic.com/recaptcha/api2/logo_48.png IP142.250.74.3:443
Requested byhttps://www.recaptcha.net/recaptcha/api2/anchor?ar=1&k=6LewU34UAAAAAHvXqFOcQlm8z1MP1xpGAZCYEeZY&co=aHR0cHM6Ly93d3cuanNkaC5zaXRlOjQ0Mw..&hl=en&v=I0bG74fWAenNf3Z5ncHSz-bd&size=normal&cb=2yfy96xd0zkp CertificateIssuerGoogle Trust Services Subject*.gstatic.com Fingerprint62:57:FE:D4:36:DB:03:15:19:B1:2C:50:42:64:6E:D7:C2:32:4F:B6 ValidityMon, 20 Jan 2025 08:37:07 GMT - Mon, 14 Apr 2025 08:37:06 GMT
File typePNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced Hashef9941290c50cd3866e2ba6b793f010d 4736508c795667dcea21f8d864233031223b7832 1b9efb22c938500971aac2b2130a475fa23684dd69e43103894968df83145b8a
GET /recaptcha/api2/logo_48.png HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.gstatic.com/recaptcha/releases/I0bG74fWAenNf3Z5ncHSz-bd/styles__ltr.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 2228
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 31 Jan 2025 19:49:08 GMT
expires: Fri, 07 Feb 2025 19:49:08 GMT
cache-control: public, max-age=604800
age: 364193
last-modified: Tue, 03 Mar 2020 20:15:00 GMT
content-type: image/png
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.gstatic.com/recaptcha/releases/I0bG74fWAenNf3Z5ncHSz-bd/recaptcha__en.js | 142.250.74.3 | 200 OK | 219 kB |
URL GET HTTP/3www.gstatic.com/recaptcha/releases/I0bG74fWAenNf3Z5ncHSz-bd/recaptcha__en.js IP142.250.74.3:443
Requested byhttps://www.recaptcha.net/recaptcha/api2/anchor?ar=1&k=6LewU34UAAAAAHvXqFOcQlm8z1MP1xpGAZCYEeZY&co=aHR0cHM6Ly93d3cuanNkaC5zaXRlOjQ0Mw..&hl=en&v=I0bG74fWAenNf3Z5ncHSz-bd&size=normal&cb=2yfy96xd0zkp CertificateIssuerGoogle Trust Services Subject*.gstatic.com Fingerprint62:57:FE:D4:36:DB:03:15:19:B1:2C:50:42:64:6E:D7:C2:32:4F:B6 ValidityMon, 20 Jan 2025 08:37:07 GMT - Mon, 14 Apr 2025 08:37:06 GMT
File typeJavaScript source, ASCII text, with very long lines (620) Size219 kB (219318 bytes) Hash29a58adc5d7834866fd236b05f781dfd 1921cd2cc3df5830baf47570c902e00f188cadf6 01e8f94227bcdc2b0894ea9e2655b35b7cdb82a04e4d0618296e8bc8e29aa687
GET /recaptcha/releases/I0bG74fWAenNf3Z5ncHSz-bd/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.recaptcha.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
timing-allow-origin: *
content-length: 219318
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 04 Feb 2025 06:56:13 GMT
expires: Wed, 04 Feb 2026 06:56:13 GMT
cache-control: public, max-age=31536000
last-modified: Sun, 26 Jan 2025 23:01:57 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 64968
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.gstatic.com/recaptcha/releases/I0bG74fWAenNf3Z5ncHSz-bd/styles__ltr.css | 142.250.74.3 | 200 OK | 42 kB |
URL GET HTTP/3www.gstatic.com/recaptcha/releases/I0bG74fWAenNf3Z5ncHSz-bd/styles__ltr.css IP142.250.74.3:443
Requested byhttps://www.recaptcha.net/recaptcha/api2/bframe?hl=en&v=I0bG74fWAenNf3Z5ncHSz-bd&k=6LewU34UAAAAAHvXqFOcQlm8z1MP1xpGAZCYEeZY CertificateIssuerGoogle Trust Services Subject*.gstatic.com Fingerprint62:57:FE:D4:36:DB:03:15:19:B1:2C:50:42:64:6E:D7:C2:32:4F:B6 ValidityMon, 20 Jan 2025 08:37:07 GMT - Mon, 14 Apr 2025 08:37:06 GMT
File typeASCII text, with very long lines (65536), with no line terminators Hashe6fce3535dadede6291b6b755489a4c0 5fd4ba99212c0289e7c6f5a85b29e4a36a84fb8f e8240323ee880b0e1f92671d098a7960a9f1f4622c82b6ff37b4934f2f1d124b
GET /recaptcha/releases/I0bG74fWAenNf3Z5ncHSz-bd/styles__ltr.css HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.recaptcha.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
timing-allow-origin: *
content-length: 42054
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 04 Feb 2025 05:41:08 GMT
expires: Wed, 04 Feb 2026 05:41:08 GMT
cache-control: public, max-age=31536000
last-modified: Sun, 26 Jan 2025 23:01:57 GMT
content-type: text/css
vary: Accept-Encoding
age: 69473
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.gstatic.com/recaptcha/releases/I0bG74fWAenNf3Z5ncHSz-bd/recaptcha__en.js | 142.250.74.3 | 200 OK | 219 kB |
URL GET HTTP/3www.gstatic.com/recaptcha/releases/I0bG74fWAenNf3Z5ncHSz-bd/recaptcha__en.js IP142.250.74.3:443
Requested byhttps://www.recaptcha.net/recaptcha/api2/anchor?ar=1&k=6LewU34UAAAAAHvXqFOcQlm8z1MP1xpGAZCYEeZY&co=aHR0cHM6Ly93d3cuanNkaC5zaXRlOjQ0Mw..&hl=en&v=I0bG74fWAenNf3Z5ncHSz-bd&size=normal&cb=2yfy96xd0zkp CertificateIssuerGoogle Trust Services Subject*.gstatic.com Fingerprint62:57:FE:D4:36:DB:03:15:19:B1:2C:50:42:64:6E:D7:C2:32:4F:B6 ValidityMon, 20 Jan 2025 08:37:07 GMT - Mon, 14 Apr 2025 08:37:06 GMT
File typeJavaScript source, ASCII text, with very long lines (620) Size219 kB (219318 bytes) Hash29a58adc5d7834866fd236b05f781dfd 1921cd2cc3df5830baf47570c902e00f188cadf6 01e8f94227bcdc2b0894ea9e2655b35b7cdb82a04e4d0618296e8bc8e29aa687
GET /recaptcha/releases/I0bG74fWAenNf3Z5ncHSz-bd/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.recaptcha.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
timing-allow-origin: *
content-length: 219318
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 04 Feb 2025 06:56:13 GMT
expires: Wed, 04 Feb 2026 06:56:13 GMT
cache-control: public, max-age=31536000
last-modified: Sun, 26 Jan 2025 23:01:57 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 64968
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.recaptcha.net/recaptcha/api2/bframe?hl=en&v=I0bG74fWAenNf3Z5ncHSz-bd&k=6LewU34UAAAAAHvXqFOcQlm8z1MP1xpGAZCYEeZY | 142.250.74.99 | 200 OK | 7.7 kB |
URL GET HTTP/3www.recaptcha.net/recaptcha/api2/bframe?hl=en&v=I0bG74fWAenNf3Z5ncHSz-bd&k=6LewU34UAAAAAHvXqFOcQlm8z1MP1xpGAZCYEeZY IP142.250.74.99:443
Requested byhttps://www.jsdh.site/single/1212/fnf-tails.exe CertificateIssuerGoogle Trust Services Subjectmisc.google.com FingerprintA1:0A:AA:D4:6A:78:1B:7D:08:00:A5:B0:D4:87:64:73:CD:8B:CC:6C ValidityMon, 20 Jan 2025 08:36:20 GMT - Mon, 14 Apr 2025 08:36:19 GMT
File typeHTML document, ASCII text, with very long lines (7934), with no line terminators Hashdaebcae1745ac5c1ef99785cd0d6b76c a859c36c6e05d673f48a6130d05943482eb36011 94a4882750b4933d45d8c48590a86c342fe17d22e48b38b6f60efbc3d2fc6177
GET /recaptcha/api2/bframe?hl=en&v=I0bG74fWAenNf3Z5ncHSz-bd&k=6LewU34UAAAAAHvXqFOcQlm8z1MP1xpGAZCYEeZY HTTP/1.1
Host: www.recaptcha.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.jsdh.site/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: text/html; charset=utf-8
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy: require-corp
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}, {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]}
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Wed, 05 Feb 2025 00:59:01 GMT
content-security-policy: script-src 'nonce-cBRxUMr3elHa5J7x4UC9GQ' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1
cross-origin-opener-policy-report-only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d"
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.recaptcha.net/recaptcha/api2/anchor?ar=1&k=6LewU34UAAAAAHvXqFOcQlm8z1MP1xpGAZCYEeZY&co=aHR0cHM6Ly93d3cuanNkaC5zaXRlOjQ0Mw..&hl=en&v=I0bG74fWAenNf3Z5ncHSz-bd&size=normal&cb=2yfy96xd0zkp | 142.250.74.99 | 200 OK | 73 kB |
URL GET HTTP/3www.recaptcha.net/recaptcha/api2/anchor?ar=1&k=6LewU34UAAAAAHvXqFOcQlm8z1MP1xpGAZCYEeZY&co=aHR0cHM6Ly93d3cuanNkaC5zaXRlOjQ0Mw..&hl=en&v=I0bG74fWAenNf3Z5ncHSz-bd&size=normal&cb=2yfy96xd0zkp IP142.250.74.99:443
Requested byhttps://www.jsdh.site/single/1212/fnf-tails.exe CertificateIssuerGoogle Trust Services Subjectmisc.google.com FingerprintA1:0A:AA:D4:6A:78:1B:7D:08:00:A5:B0:D4:87:64:73:CD:8B:CC:6C ValidityMon, 20 Jan 2025 08:36:20 GMT - Mon, 14 Apr 2025 08:36:19 GMT
File typeHTML document, ASCII text, with very long lines (56621) Hashb59c3002b03dded5b4b96664f3259c8c 8be41b482dd93c71235437c52748bd892da4bd05 e6e28f2e80e398516aff27c8ad905b9321e55a5818a54e8ffab8bb2b4487dca2
GET /recaptcha/api2/anchor?ar=1&k=6LewU34UAAAAAHvXqFOcQlm8z1MP1xpGAZCYEeZY&co=aHR0cHM6Ly93d3cuanNkaC5zaXRlOjQ0Mw..&hl=en&v=I0bG74fWAenNf3Z5ncHSz-bd&size=normal&cb=2yfy96xd0zkp HTTP/1.1
Host: www.recaptcha.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.jsdh.site/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: text/html; charset=utf-8
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy: require-corp
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}, {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]}
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Wed, 05 Feb 2025 00:59:00 GMT
content-security-policy: script-src 'nonce-vJ96d7ki0DcYtK8XYBHE7A' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1
cross-origin-opener-policy-report-only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d"
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.recaptcha.net/recaptcha/api2/webworker.js?hl=en&v=I0bG74fWAenNf3Z5ncHSz-bd | 142.250.74.99 | 200 OK | 102 B |
URL GET HTTP/3www.recaptcha.net/recaptcha/api2/webworker.js?hl=en&v=I0bG74fWAenNf3Z5ncHSz-bd IP142.250.74.99:443
Requested byhttps://www.recaptcha.net/recaptcha/api2/anchor?ar=1&k=6LewU34UAAAAAHvXqFOcQlm8z1MP1xpGAZCYEeZY&co=aHR0cHM6Ly93d3cuanNkaC5zaXRlOjQ0Mw..&hl=en&v=I0bG74fWAenNf3Z5ncHSz-bd&size=normal&cb=2yfy96xd0zkp CertificateIssuerGoogle Trust Services Subjectmisc.google.com FingerprintA1:0A:AA:D4:6A:78:1B:7D:08:00:A5:B0:D4:87:64:73:CD:8B:CC:6C ValidityMon, 20 Jan 2025 08:36:20 GMT - Mon, 14 Apr 2025 08:36:19 GMT
File typeASCII text, with no line terminators Hash8e985395225a3e223bfcaf6e67d7881d 8a8a09912a3bd91e870bdfc18569fb485931ce34 82ad25604cddfebb2d8b0ba367f35e37752bb1178a870421b33740d1b42d7cf9
GET /recaptcha/api2/webworker.js?hl=en&v=I0bG74fWAenNf3Z5ncHSz-bd HTTP/1.1
Host: www.recaptcha.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.recaptcha.net/recaptcha/api2/anchor?ar=1&k=6LewU34UAAAAAHvXqFOcQlm8z1MP1xpGAZCYEeZY&co=aHR0cHM6Ly93d3cuanNkaC5zaXRlOjQ0Mw..&hl=en&v=I0bG74fWAenNf3Z5ncHSz-bd&size=normal&cb=2yfy96xd0zkp
Sec-Fetch-Dest: worker
Sec-Fetch-Mode: same-origin
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: text/javascript; charset=utf-8
cross-origin-embedder-policy: require-corp
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}, {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]}
expires: Wed, 05 Feb 2025 00:59:01 GMT
date: Wed, 05 Feb 2025 00:59:01 GMT
cache-control: private, max-age=300
cross-origin-resource-policy: same-site
cross-origin-opener-policy-report-only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d"
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
84.32.84.213
91.108.103.116