| fitgirl-repacks.theproxy.ws/wp-login.php?redirect_to=https://fitgirl-repacks.theproxy.ws/inside-proper-cpy-crack/ | 104.21.43.99 | 200 OK | 17 kB |
URL User Request GET fitgirl-repacks.theproxy.ws/wp-login.php?redirect_to=https://fitgirl-repacks.theproxy.ws/inside-proper-cpy-crack/ IP 104.21.43.99:443
CertificateIssuerGoogle Trust Services Subjecttheproxy.ws Fingerprint7A:20:0C:C0:6F:44:A6:AB:87:6D:7A:C3:59:5B:E4:29:7D:AC:91:E0 ValidityMon, 10 Feb 2025 04:47:42 GMT - Sun, 11 May 2025 05:45:10 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (6870), with CRLF, LF line terminators Hash3747886c32b141c15645490b9f60c391 a263a4dfeac15615f01f8f2ab21a5cf546481b8f c615e95979236eacf88aa4dc7868e78607ae3fa28d92fba85c2109cec1c1f3bb
GET /wp-login.php?redirect_to=https://fitgirl-repacks.theproxy.ws/inside-proper-cpy-crack/ HTTP/1.1
Host: fitgirl-repacks.theproxy.ws
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 09 Apr 2025 05:08:45 GMT
set-cookie: view=1; expires=Thu, 10-Apr-2025 05:08:45 GMT; Max-Age=86400
PHPSESSID=va9bjdocsg2evtfn8oc5i4qjqj; path=/
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=VuT0%2BWiL83%2Ft8nNjfooBTt0uImwTHBXR%2BPQLOgV1tE%2BW2olhHHmYucgLQQ1XeQgkuhzg5KaHXb9ajD%2BfgQW5HYSLDs8a6ZQNetb6LFI%2FrFEdKJFKR1Kyj3HEccuA%2B4xQqS7oEjFA5QKguxyDYDQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 92d77d0a082f0b59-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=606&min_rtt=408&rtt_var=400&sent=7&recv=11&lost=0&retrans=0&sent_bytes=3197&recv_bytes=1195&delivery_rate=7702127&cwnd=250&unsent_bytes=0&cid=76fec80123450197&ts=225&x=0"
X-Firefox-Spdy: h2
|
|
| fitgirl-repacks.theproxy.ws/wp-includes/css/dashicons.min.css?ver=6.4.1 | 104.21.43.99 | 200 OK | 59 kB |
URL GET fitgirl-repacks.theproxy.ws/wp-includes/css/dashicons.min.css?ver=6.4.1 IP 104.21.43.99:443
Requested byhttps://fitgirl-repacks.theproxy.ws/wp-login.php?redirect_to=https://fitgirl-repacks.theproxy.ws/inside-proper-cpy-crack/ CertificateIssuerGoogle Trust Services Subjecttheproxy.ws Fingerprint7A:20:0C:C0:6F:44:A6:AB:87:6D:7A:C3:59:5B:E4:29:7D:AC:91:E0 ValidityMon, 10 Feb 2025 04:47:42 GMT - Sun, 11 May 2025 05:45:10 GMT
File typeASCII text, with very long lines (58981) Hashd68d6bf519169d86e155bad0bed833f8 27ba9c67d0e775fc4e6dd62011daf4c3902698fc c21e5a2b32c47bc5f9d9efc97bc0e29fd081946d1d3ebffc5621cfafb1d3960e
GET /wp-includes/css/dashicons.min.css?ver=6.4.1 HTTP/1.1
Host: fitgirl-repacks.theproxy.ws
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fitgirl-repacks.theproxy.ws/wp-login.php?redirect_to=https://fitgirl-repacks.theproxy.ws/inside-proper-cpy-crack/
Cookie: view=1; PHPSESSID=va9bjdocsg2evtfn8oc5i4qjqj
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 09 Apr 2025 05:08:46 GMT
content-type: text/css;charset=UTF-8
server: cloudflare
vary: accept-encoding
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
access-control-allow-origin: *
content-encoding: br
cf-cache-status: DYNAMIC
set-cookie: view=1; Max-Age=86400; Expires=Thu, 10 Apr 2025 05:08:46 GMT
cf-ray: 92d77d0c59910b59-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| fitgirl-repacks.theproxy.ws/wp-admin/css/login.min.css?ver=6.4.1 | 104.21.43.99 | 200 OK | 6.5 kB |
URL GET fitgirl-repacks.theproxy.ws/wp-admin/css/login.min.css?ver=6.4.1 IP 104.21.43.99:443
Requested byhttps://fitgirl-repacks.theproxy.ws/wp-login.php?redirect_to=https://fitgirl-repacks.theproxy.ws/inside-proper-cpy-crack/ CertificateIssuerGoogle Trust Services Subjecttheproxy.ws Fingerprint7A:20:0C:C0:6F:44:A6:AB:87:6D:7A:C3:59:5B:E4:29:7D:AC:91:E0 ValidityMon, 10 Feb 2025 04:47:42 GMT - Sun, 11 May 2025 05:45:10 GMT
File typeASCII text, with very long lines (6427) Hash5cdae8cccebf752b3006e86b5c69fd66 27a6f9a82f06888c6d15a0dda77fad42e81886d4 c21322814a7bf9dd579aefa0c4b161bdc316c8fa20cb134b5a09f37151b421c3
GET /wp-admin/css/login.min.css?ver=6.4.1 HTTP/1.1
Host: fitgirl-repacks.theproxy.ws
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fitgirl-repacks.theproxy.ws/wp-login.php?redirect_to=https://fitgirl-repacks.theproxy.ws/inside-proper-cpy-crack/
Cookie: view=1; PHPSESSID=va9bjdocsg2evtfn8oc5i4qjqj
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 09 Apr 2025 05:08:46 GMT
content-type: text/css;charset=UTF-8
set-cookie: view=1; expires=Thu, 10-Apr-2025 05:08:46 GMT; Max-Age=86400
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
access-control-allow-origin: *
cf-cache-status: DYNAMIC
vary: accept-encoding
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ZU3%2FldUzfryXz%2BULUIIbZ8yk0Iqz8n%2FnBdd%2FYBTrPUDLfy1QPY%2BhCSjoBz8UCZBX%2Bv14wWyJLtWqfeea17vf4HbzMc81F7ooEZ0eKa1YmvoH2ijQ678A8CjIyQhOZ60OyttgYvH8c3wiPU%2FfSSg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 92d77d0c59950b59-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=957&min_rtt=408&rtt_var=833&sent=32&recv=27&lost=0&retrans=0&sent_bytes=24486&recv_bytes=2558&delivery_rate=19306666&cwnd=253&unsent_bytes=0&cid=76fec80123450197&ts=543&x=0"
X-Firefox-Spdy: h2
|
|
| theusualsuspectz.biz/j/m/qqqq.js | 104.21.64.1 | 200 OK | 48 kB |
URL GET theusualsuspectz.biz/j/m/qqqq.js IP 104.21.64.1:443
Requested byhttps://fitgirl-repacks.theproxy.ws/wp-login.php?redirect_to=https://fitgirl-repacks.theproxy.ws/inside-proper-cpy-crack/ CertificateIssuerGoogle Trust Services Subjecttheusualsuspectz.biz FingerprintF5:AC:0A:DA:B5:30:7B:11:C1:A0:2D:DE:36:1A:3E:61:5B:CC:F8:1E ValidityTue, 04 Mar 2025 07:33:28 GMT - Mon, 02 Jun 2025 08:31:46 GMT
File typeJavaScript source, ASCII text, with very long lines (48351), with no line terminators Hashfebd5bfc829d7c8aa363e93e2e61f414 10d66213a9249bea47b15acf295323f01d217ef0 ff391f38fc73325f58d0626b9415ac121f1461407d74e86ebddefd8180050d76
GET /j/m/qqqq.js HTTP/1.1
Host: theusualsuspectz.biz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fitgirl-repacks.theproxy.ws/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 09 Apr 2025 05:08:46 GMT
content-type: application/javascript; charset=UTF-8
last-modified: Mon, 10 Mar 2025 23:57:44 GMT
etag: W/"67cf7c78-bcdf"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
age: 369725
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0RxTLzcWnVXgjTI%2B9f7S0a9nHKCp2gedgFlw7Eczey2iCHrxfE%2BUbhDB1R0gXP6KT2f0AkW%2FGLAXjfrCOOzhKC1Ax2dEfUUP%2FBZ4UzYAcygRUf0JYLu%2FMu%2F%2BM7t%2BngglFkUjge2LbQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 92d77d0cf98556c4-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=1339&min_rtt=420&rtt_var=1835&sent=7&recv=11&lost=0&retrans=0&sent_bytes=3301&recv_bytes=1212&delivery_rate=8227272&cwnd=241&unsent_bytes=0&cid=b01537878f7376fc&ts=63&x=0"
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/roboto/v47/KFOMCnqEu92Fr1ME7kSn66aGLdTylUAMQXC89YmC2DPNWubEbVmUiAo.woff2 | 142.250.74.35 | 200 OK | 21 kB |
URL GET fonts.gstatic.com/s/roboto/v47/KFOMCnqEu92Fr1ME7kSn66aGLdTylUAMQXC89YmC2DPNWubEbVmUiAo.woff2 IP 142.250.74.35:443
Requested byhttps://fitgirl-repacks.theproxy.ws/wp-login.php?redirect_to=https://fitgirl-repacks.theproxy.ws/inside-proper-cpy-crack/ CertificateIssuerGoogle Trust Services Subject*.gstatic.com Fingerprint04:FF:92:E7:16:B0:49:91:8B:B7:8D:C6:93:B9:20:B4:2A:33:9F:A8 ValidityThu, 20 Mar 2025 11:19:45 GMT - Thu, 12 Jun 2025 11:19:44 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 20612, version 1.0 Hashb07da7aa3e4f363c5cdbc11312239e8c 47bf5b2f24ea4a4caafccc89b9d2a6677ef9e3b8 e44c11f4834bdd4d6b6da7b8ee5eaebc8acb41250cd6bce5cc82ea8262140eaa
GET /s/roboto/v47/KFOMCnqEu92Fr1ME7kSn66aGLdTylUAMQXC89YmC2DPNWubEbVmUiAo.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://fitgirl-repacks.theproxy.ws
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 20612
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 03 Apr 2025 09:13:18 GMT
expires: Fri, 03 Apr 2026 09:13:18 GMT
cache-control: public, max-age=31536000
age: 503728
last-modified: Wed, 08 Jan 2025 18:23:11 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| matomo.hellohi.me/matomo.js | 104.21.80.1 | 404 Not Found | 0 B |
URL GET matomo.hellohi.me/matomo.js IP 104.21.80.1:443
Requested byhttps://fitgirl-repacks.theproxy.ws/wp-login.php?redirect_to=https://fitgirl-repacks.theproxy.ws/inside-proper-cpy-crack/ CertificateIssuerGoogle Trust Services Subjecthellohi.me FingerprintD3:43:68:F7:BA:C1:30:11:5E:6C:8C:03:B9:64:04:2D:3C:81:05:A9 ValidityTue, 18 Mar 2025 00:59:55 GMT - Mon, 16 Jun 2025 01:57:27 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /matomo.js HTTP/1.1
Host: matomo.hellohi.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fitgirl-repacks.theproxy.ws/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
date: Wed, 09 Apr 2025 05:08:46 GMT
content-type: text/html; charset=UTF-8
cache-control: max-age=14400
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=DRQSt0ISaBCmuQctBj6Gy0gCJXy1bs9yDyh8RYehAZJPywoYUIZvhQAeFXMnD1O%2FxuZcKc9EMKBV4tAYwF%2Ftm4e2towR8sZFS05OEZ9FMo%2Bj1TbnXjc0k%2BQxglWR%2BRjHxI11Zw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 92d77d108baa5688-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=527&min_rtt=505&rtt_var=91&sent=8&recv=10&lost=0&retrans=0&sent_bytes=3273&recv_bytes=1204&delivery_rate=7621052&cwnd=254&unsent_bytes=0&cid=1095cf21df8cbf15&ts=137&x=0"
X-Firefox-Spdy: h2
|
|
| fitgirl-repacks.theproxy.ws/wp-admin/css/forms.min.css?ver=6.4.1 | 104.21.43.99 | 200 OK | 28 kB |
URL GET fitgirl-repacks.theproxy.ws/wp-admin/css/forms.min.css?ver=6.4.1 IP 104.21.43.99:443
Requested byhttps://fitgirl-repacks.theproxy.ws/wp-login.php?redirect_to=https://fitgirl-repacks.theproxy.ws/inside-proper-cpy-crack/ CertificateIssuerGoogle Trust Services Subjecttheproxy.ws Fingerprint7A:20:0C:C0:6F:44:A6:AB:87:6D:7A:C3:59:5B:E4:29:7D:AC:91:E0 ValidityMon, 10 Feb 2025 04:47:42 GMT - Sun, 11 May 2025 05:45:10 GMT
File typeASCII text, with very long lines (27464) Hash5a15886252dbb4c70263284934863e9e 02d5696870805e4f39fb4b56133b314ce5736192 540227b6f2bbcb5104d00901a354cab618644e6fd3dcd1a42a193426bf9ae486
GET /wp-admin/css/forms.min.css?ver=6.4.1 HTTP/1.1
Host: fitgirl-repacks.theproxy.ws
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fitgirl-repacks.theproxy.ws/wp-login.php?redirect_to=https://fitgirl-repacks.theproxy.ws/inside-proper-cpy-crack/
Cookie: view=1; PHPSESSID=va9bjdocsg2evtfn8oc5i4qjqj
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 09 Apr 2025 05:08:46 GMT
content-type: text/css;charset=UTF-8
set-cookie: view=1; expires=Thu, 10-Apr-2025 05:08:46 GMT; Max-Age=86400
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
access-control-allow-origin: *
cf-cache-status: DYNAMIC
vary: accept-encoding
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=EObl%2FWxRJgNhrRWrK661qTNiu5AiE7dTiNr6fqU%2BnWlwWTSKr%2B%2FluC8MctDy5jIgrqAZRAAW07bcAb0qW5SDXt5KY84TG3fvvmjDcPEpCV1Ecg7AQ0fAUmc7Bsc6KdJiTErp9PdFfVPvLsDnpZ4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 92d77d0c59930b59-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=1526&min_rtt=408&rtt_var=1776&sent=44&recv=29&lost=0&retrans=0&sent_bytes=31746&recv_bytes=2558&delivery_rate=19306666&cwnd=253&unsent_bytes=0&cid=76fec80123450197&ts=553&x=0"
X-Firefox-Spdy: h2
|
|
| i.ibb.co/pyC2VvJ/alert-xxl.png | 91.134.9.160 | 200 OK | 5.6 kB |
URL GET i.ibb.co/pyC2VvJ/alert-xxl.png IP 91.134.9.160:443
Requested byhttps://fitgirl-repacks.theproxy.ws/wp-login.php?redirect_to=https://fitgirl-repacks.theproxy.ws/inside-proper-cpy-crack/ CertificateIssuerLet's Encrypt Subjectibb.co FingerprintF8:55:93:A2:23:0E:9F:7C:B4:90:E7:20:13:F4:0E:A8:FD:00:95:EA ValidityTue, 18 Feb 2025 22:30:01 GMT - Mon, 19 May 2025 22:30:00 GMT
File typePNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced Hash8d0eed07b450044fdca282d1daf8a58c 794e1284cdf81fd60154955c1805282ae21240cd baac89456a2d4dfdcdc14244fbe50a04ade7a401c82de605938a92e16f35c1af
GET /pyC2VvJ/alert-xxl.png HTTP/1.1
Host: i.ibb.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fitgirl-repacks.theproxy.ws/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 09 Apr 2025 05:08:46 GMT
content-type: image/png
content-length: 5554
last-modified: Mon, 07 Aug 2023 04:09:39 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| fitgirl-repacks.theproxy.ws/wp-content/plugins/jetpack/css/jetpack.css?ver=13.3 | 104.21.43.99 | 200 OK | 108 kB |
URL GET fitgirl-repacks.theproxy.ws/wp-content/plugins/jetpack/css/jetpack.css?ver=13.3 IP 104.21.43.99:443
Requested byhttps://fitgirl-repacks.theproxy.ws/wp-login.php?redirect_to=https://fitgirl-repacks.theproxy.ws/inside-proper-cpy-crack/ CertificateIssuerGoogle Trust Services Subjecttheproxy.ws Fingerprint7A:20:0C:C0:6F:44:A6:AB:87:6D:7A:C3:59:5B:E4:29:7D:AC:91:E0 ValidityMon, 10 Feb 2025 04:47:42 GMT - Sun, 11 May 2025 05:45:10 GMT
File typeUnicode text, UTF-8 text, with very long lines (65532), with no line terminators Size108 kB (107794 bytes) Hashb4e165af94210494139c45cc1794ab62 7ac4d0bd6a40320842bc798a285c5ec726f51a3a 2ec23484fae47980001eed8805ef2fa389d25d6b9db0a5aaeb41ecb76c411905
GET /wp-content/plugins/jetpack/css/jetpack.css?ver=13.3 HTTP/1.1
Host: fitgirl-repacks.theproxy.ws
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fitgirl-repacks.theproxy.ws/wp-login.php?redirect_to=https://fitgirl-repacks.theproxy.ws/inside-proper-cpy-crack/
DNT: 1
Connection: keep-alive
Cookie: view=1; PHPSESSID=va9bjdocsg2evtfn8oc5i4qjqj
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 09 Apr 2025 05:08:46 GMT
content-type: text/css;charset=UTF-8
server: cloudflare
vary: accept-encoding
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
access-control-allow-origin: *
content-encoding: br
cf-cache-status: DYNAMIC
set-cookie: view=1; Max-Age=86400; Expires=Thu, 10 Apr 2025 05:08:46 GMT
cf-ray: 92d77d0c59980b59-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| heartilyscales.com/a2/86/90/a286902791a7f4c98bcb1e812322cd78.js | 172.240.253.132 | 403 Forbidden | 0 B |
URL GET heartilyscales.com/a2/86/90/a286902791a7f4c98bcb1e812322cd78.js IP 172.240.253.132:443
Requested byhttps://fitgirl-repacks.theproxy.ws/wp-login.php?redirect_to=https://fitgirl-repacks.theproxy.ws/inside-proper-cpy-crack/ CertificateIssuerLet's Encrypt Subjectheartilyscales.com Fingerprint79:35:42:7D:68:22:6E:05:A1:82:F5:C5:9C:6E:A2:1E:48:9C:F9:05 ValiditySun, 06 Apr 2025 21:13:49 GMT - Sat, 05 Jul 2025 21:13:48 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /a2/86/90/a286902791a7f4c98bcb1e812322cd78.js HTTP/1.1
Host: heartilyscales.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fitgirl-repacks.theproxy.ws/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 403 Forbidden
Server: nginx/1.21.6
Date: Wed, 09 Apr 2025 05:08:46 GMT
Content-Type: application/javascript
Content-Length: 0
Connection: keep-alive
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
access-control-allow-origin: *
accept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
x-envoy-upstream-service-time: 0
Host: heartilyscales.com
|
|
| vmuid.com/script.js?sid=4dd7d833-3142-4a3f-a135-6fb1263ef9b8 | 178.162.215.162 | 200 OK | 10 kB |
URL GET vmuid.com/script.js?sid=4dd7d833-3142-4a3f-a135-6fb1263ef9b8 IP 178.162.215.162:443
ASN#28753 Leaseweb Deutschland GmbH
Requested byhttps://fitgirl-repacks.theproxy.ws/wp-login.php?redirect_to=https://fitgirl-repacks.theproxy.ws/inside-proper-cpy-crack/ CertificateIssuerLet's Encrypt Subjectvmuid.com FingerprintE2:BC:8A:04:7E:34:E6:49:12:C9:17:A8:13:B0:52:81:25:6B:00:AE ValiditySun, 23 Mar 2025 00:59:10 GMT - Sat, 21 Jun 2025 00:59:09 GMT
File typeJavaScript source, ASCII text, with very long lines (10178), with no line terminators Hashdedd352338543b137f608adc8d0d4aa8 100edb4e8fef9b6da043d51135077e68d2a61b22 b338a91ba1d2ab7c3a7a0dd659426f5ffa4cd699be38e2bed5075c4d3e773a48
GET /script.js?sid=4dd7d833-3142-4a3f-a135-6fb1263ef9b8 HTTP/1.1
Host: vmuid.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fitgirl-repacks.theproxy.ws/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 09 Apr 2025 05:08:46 GMT
Content-Type: text/javascript
Content-Length: 10178
Connection: keep-alive
Cache-Control: no-store, max-age=0
Accept-Ch: Sec-CH-UA-Platform,Sec-CH-UA-Full-Version,Sec-CH-UA-Platform-Version
X-Cache-Status: MISS
|
|
| fitgirl-repacks.theproxy.ws/app/x12.js | 104.21.43.99 | 200 OK | 11 kB |
URL GET fitgirl-repacks.theproxy.ws/app/x12.js IP 104.21.43.99:443
Requested byhttps://fitgirl-repacks.theproxy.ws/wp-login.php?redirect_to=https://fitgirl-repacks.theproxy.ws/inside-proper-cpy-crack/ CertificateIssuerGoogle Trust Services Subjecttheproxy.ws Fingerprint7A:20:0C:C0:6F:44:A6:AB:87:6D:7A:C3:59:5B:E4:29:7D:AC:91:E0 ValidityMon, 10 Feb 2025 04:47:42 GMT - Sun, 11 May 2025 05:45:10 GMT
File typeJavaScript source, ASCII text, with very long lines (11180), with no line terminators Hash94efa3c05291ac5cccd32cc3a11c9724 3a033e4d6f5e5eaf76030a81c8a05c619de436c2 58c753f7ffcb584d2ed43470ec9bdd30a4cd4723f368d83de6163413d5555102
GET /app/x12.js HTTP/1.1
Host: fitgirl-repacks.theproxy.ws
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fitgirl-repacks.theproxy.ws/wp-login.php?redirect_to=https://fitgirl-repacks.theproxy.ws/inside-proper-cpy-crack/
DNT: 1
Connection: keep-alive
Cookie: view=1; PHPSESSID=va9bjdocsg2evtfn8oc5i4qjqj
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 09 Apr 2025 05:08:46 GMT
content-type: application/javascript; charset=UTF-8
server: cloudflare
vary: accept-encoding
last-modified: Tue, 11 Mar 2025 00:36:24 GMT
etag: W/"67cf8588-2bac"
content-encoding: br
cf-cache-status: DYNAMIC
cf-ray: 92d77d0c69a20b59-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| pupspu.com/sdk.js?sid=4dd7d833-3142-4a3f-a135-6fb1263ef9b8 | 178.162.215.162 | 200 OK | 62 kB |
URL GET pupspu.com/sdk.js?sid=4dd7d833-3142-4a3f-a135-6fb1263ef9b8 IP 178.162.215.162:443
ASN#28753 Leaseweb Deutschland GmbH
Requested byhttps://fitgirl-repacks.theproxy.ws/wp-login.php?redirect_to=https://fitgirl-repacks.theproxy.ws/inside-proper-cpy-crack/ CertificateIssuerLet's Encrypt Subjectpupspu.com Fingerprint58:23:9D:35:68:8E:1E:79:15:4E:64:22:1F:09:C4:30:5A:A6:EB:DE ValiditySun, 23 Mar 2025 00:37:21 GMT - Sat, 21 Jun 2025 00:37:20 GMT
File typeJavaScript source, ASCII text, with very long lines (61691), with no line terminators Hashb24f4c3b40e235f2282775be7af7a827 5bac79518b3bc0a4f844dfa37368c27167553682 75c2838c1d37686bb566c20e9ee7d28dccca3bf999c538bbc49a29541c8a6caa
GET /sdk.js?sid=4dd7d833-3142-4a3f-a135-6fb1263ef9b8 HTTP/1.1
Host: pupspu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fitgirl-repacks.theproxy.ws/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 09 Apr 2025 05:08:47 GMT
Content-Type: text/javascript
Content-Length: 61691
Connection: keep-alive
Cache-Control: no-store, max-age=0
Accept-Ch: Sec-CH-UA-Platform,Sec-CH-UA-Full-Version,Sec-CH-UA-Platform-Version
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: true
X-Cache-Status: MISS
|
|
| metrica-yandex.com/metrika/tag.js?1001 | 104.21.80.1 | 200 OK | 60 kB |
URL GET metrica-yandex.com/metrika/tag.js?1001 IP 104.21.80.1:443
Requested byhttps://fitgirl-repacks.theproxy.ws/wp-login.php?redirect_to=https://fitgirl-repacks.theproxy.ws/inside-proper-cpy-crack/ CertificateIssuerGoogle Trust Services Subjectmetrica-yandex.com Fingerprint5F:25:48:D6:A1:A4:C1:47:E0:EE:62:59:A8:A0:B7:1F:91:2F:4E:CC ValiditySat, 01 Mar 2025 19:25:08 GMT - Fri, 30 May 2025 20:25:03 GMT
File typeJavaScript source, ASCII text, with very long lines (60271), with no line terminators Hashea67b2343fc359662afdae5d4c8c8e03 7f07219a8cd9d6d5c17e20bd7e80fac0281c2b18 5e31460a6eacabdc5895ad2ad898a4a570ac88f2794c61ddce6b0beee304eb11
GET /metrika/tag.js?1001 HTTP/1.1
Host: metrica-yandex.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fitgirl-repacks.theproxy.ws/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 09 Apr 2025 05:08:46 GMT
content-type: application/javascript; charset=UTF-8
last-modified: Thu, 30 Sep 2021 23:00:22 GMT
etag: W/"61564186-eb6f"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
cf-cache-status: HIT
age: 8313505
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2BjpgiGOMYV4BPwuVfV%2BIi2ZfbdNUktRa1oKtntzJrOWKUpTOGL%2FyoY8YC2LF5M03iWfCGv7KtNr1qzo8%2FQYs9W9%2F0GqQ9ZwAAhn%2FD2i6302nw99aCrt%2FeSuZECtCLjrYe8YNWpM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 92d77d0cff61b50c-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=656&min_rtt=475&rtt_var=369&sent=7&recv=11&lost=0&retrans=0&sent_bytes=3216&recv_bytes=1083&delivery_rate=7812949&cwnd=254&unsent_bytes=0&cid=bc24c15786730e5d&ts=68&x=0"
X-Firefox-Spdy: h2
|
|
| fitgirl-repacks.theproxy.ws/wp-includes/css/buttons.min.css?ver=6.4.1 | 104.21.43.99 | 200 OK | 5.9 kB |
URL GET fitgirl-repacks.theproxy.ws/wp-includes/css/buttons.min.css?ver=6.4.1 IP 104.21.43.99:443
Requested byhttps://fitgirl-repacks.theproxy.ws/wp-login.php?redirect_to=https://fitgirl-repacks.theproxy.ws/inside-proper-cpy-crack/ CertificateIssuerGoogle Trust Services Subjecttheproxy.ws Fingerprint7A:20:0C:C0:6F:44:A6:AB:87:6D:7A:C3:59:5B:E4:29:7D:AC:91:E0 ValidityMon, 10 Feb 2025 04:47:42 GMT - Sun, 11 May 2025 05:45:10 GMT
File typeASCII text, with very long lines (5890) Hashc4b8785adf7a6ff49403ca561e8e93d9 a2b37487164918e9961ac04fb8ae087efca84905 be47f84097fc1dcfe4a183ec10218db49578053af37a7d4bcf83d946fdeabc82
GET /wp-includes/css/buttons.min.css?ver=6.4.1 HTTP/1.1
Host: fitgirl-repacks.theproxy.ws
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fitgirl-repacks.theproxy.ws/wp-login.php?redirect_to=https://fitgirl-repacks.theproxy.ws/inside-proper-cpy-crack/
Cookie: view=1; PHPSESSID=va9bjdocsg2evtfn8oc5i4qjqj
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 09 Apr 2025 05:08:46 GMT
content-type: text/css;charset=UTF-8
server: cloudflare
vary: accept-encoding
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
access-control-allow-origin: *
content-encoding: br
cf-cache-status: DYNAMIC
set-cookie: view=1; Max-Age=86400; Expires=Thu, 10 Apr 2025 05:08:46 GMT
cf-ray: 92d77d0c59920b59-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| origunix.com/sdk.js?sid=4dd7d833-3142-4a3f-a135-6fb1263ef9b8 | 178.162.215.162 | 302 Found | 62 kB |
URL GET origunix.com/sdk.js?sid=4dd7d833-3142-4a3f-a135-6fb1263ef9b8 IP 178.162.215.162:443
ASN#28753 Leaseweb Deutschland GmbH
Requested byhttps://fitgirl-repacks.theproxy.ws/wp-login.php?redirect_to=https://fitgirl-repacks.theproxy.ws/inside-proper-cpy-crack/ CertificateIssuerLet's Encrypt Subjectorigunix.com Fingerprint42:02:32:65:4F:90:D6:1D:97:DC:EE:D8:25:5B:C0:47:74:A8:49:6F ValiditySun, 23 Mar 2025 00:14:26 GMT - Sat, 21 Jun 2025 00:14:25 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sdk.js?sid=4dd7d833-3142-4a3f-a135-6fb1263ef9b8 HTTP/1.1
Host: origunix.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fitgirl-repacks.theproxy.ws/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Server: nginx
Date: Wed, 09 Apr 2025 05:08:46 GMT
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, max-age=0
Accept-Ch: Sec-CH-UA-Platform,Sec-CH-UA-Full-Version,Sec-CH-UA-Platform-Version
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: true
Location: https://pupspu.com/sdk.js?sid=4dd7d833-3142-4a3f-a135-6fb1263ef9b8
X-Cache-Status: MISS
|
|
| fonts.gstatic.com/s/roboto/v47/KFOMCnqEu92Fr1ME7kSn66aGLdTylUAMQXC89YmC2DPNWubEbVn6iArmlw.woff2 | 142.250.74.35 | 200 OK | 11 kB |
URL GET fonts.gstatic.com/s/roboto/v47/KFOMCnqEu92Fr1ME7kSn66aGLdTylUAMQXC89YmC2DPNWubEbVn6iArmlw.woff2 IP 142.250.74.35:443
Requested byhttps://fitgirl-repacks.theproxy.ws/wp-login.php?redirect_to=https://fitgirl-repacks.theproxy.ws/inside-proper-cpy-crack/ CertificateIssuerGoogle Trust Services Subject*.gstatic.com Fingerprint04:FF:92:E7:16:B0:49:91:8B:B7:8D:C6:93:B9:20:B4:2A:33:9F:A8 ValidityThu, 20 Mar 2025 11:19:45 GMT - Thu, 12 Jun 2025 11:19:44 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 10576, version 1.0 Hash67fbc9a89d34a66c10ce237de8543401 9060b07f6600bd6cd8e4241843e8eec743e29264 add79d702aef2d1f1cf4865df00911e05816d06bd271602cca2966951f4658c3
GET /s/roboto/v47/KFOMCnqEu92Fr1ME7kSn66aGLdTylUAMQXC89YmC2DPNWubEbVn6iArmlw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://fitgirl-repacks.theproxy.ws
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 10576
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 03 Apr 2025 10:03:38 GMT
expires: Fri, 03 Apr 2026 10:03:38 GMT
cache-control: public, max-age=31536000
age: 500708
last-modified: Wed, 08 Jan 2025 18:23:10 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fitgirl-repacks.theproxy.ws/wp-admin/css/l10n.min.css?ver=6.4.1 | 104.21.43.99 | 200 OK | 2.5 kB |
URL GET fitgirl-repacks.theproxy.ws/wp-admin/css/l10n.min.css?ver=6.4.1 IP 104.21.43.99:443
Requested byhttps://fitgirl-repacks.theproxy.ws/wp-login.php?redirect_to=https://fitgirl-repacks.theproxy.ws/inside-proper-cpy-crack/ CertificateIssuerGoogle Trust Services Subjecttheproxy.ws Fingerprint7A:20:0C:C0:6F:44:A6:AB:87:6D:7A:C3:59:5B:E4:29:7D:AC:91:E0 ValidityMon, 10 Feb 2025 04:47:42 GMT - Sun, 11 May 2025 05:45:10 GMT
File typeASCII text, with very long lines (2442) Hash2b2ed5045b480dcfac2e6babbd2f2007 9d590c9bbc4c357ccec1c8b94ffe9feeeab58d3c 86669f0412fff3ba05a09c21f077c7a9ec4d9054633216b6ce04eb3c6c57538b
GET /wp-admin/css/l10n.min.css?ver=6.4.1 HTTP/1.1
Host: fitgirl-repacks.theproxy.ws
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fitgirl-repacks.theproxy.ws/wp-login.php?redirect_to=https://fitgirl-repacks.theproxy.ws/inside-proper-cpy-crack/
Cookie: view=1; PHPSESSID=va9bjdocsg2evtfn8oc5i4qjqj
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 09 Apr 2025 05:08:46 GMT
content-type: text/css;charset=UTF-8
set-cookie: view=1; expires=Thu, 10-Apr-2025 05:08:46 GMT; Max-Age=86400
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
access-control-allow-origin: *
cf-cache-status: DYNAMIC
vary: accept-encoding
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jdS0uAi%2BdsLwhBygm%2BfK3E2JUMAADvqu9q3w8Lq8PX49dIVZuAXCgsQYSQDRKthCTQKzDIVvU3%2FfjSobrBMBTMSEDht%2FkQMDPjGu6BGGn94MGy5uLzDSIElmUsssxTW5lgYfW3f8Zu289zeuOog%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 92d77d0c59940b59-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=908&min_rtt=408&rtt_var=722&sent=40&recv=28&lost=0&retrans=0&sent_bytes=30561&recv_bytes=2558&delivery_rate=19306666&cwnd=253&unsent_bytes=0&cid=76fec80123450197&ts=547&x=0"
X-Firefox-Spdy: h2
|
|
| fitgirl-repacks.theproxy.ws/app/apx19.js | 104.21.43.99 | 200 OK | 9.2 kB |
URL GET fitgirl-repacks.theproxy.ws/app/apx19.js IP 104.21.43.99:443
Requested byhttps://fitgirl-repacks.theproxy.ws/wp-login.php?redirect_to=https://fitgirl-repacks.theproxy.ws/inside-proper-cpy-crack/ CertificateIssuerGoogle Trust Services Subjecttheproxy.ws Fingerprint7A:20:0C:C0:6F:44:A6:AB:87:6D:7A:C3:59:5B:E4:29:7D:AC:91:E0 ValidityMon, 10 Feb 2025 04:47:42 GMT - Sun, 11 May 2025 05:45:10 GMT
File typeJavaScript source, ASCII text, with very long lines (9183), with no line terminators Hash2344c3f05f624d595f6fb920e4d74ded eb4d1404ac2d5eecd307f4588aeeab5c8ef463f1 3a28fe59e4a2af96d8edeeb12d7040c574cf71fa88fccb5cf49e9c0a1d4e4c7a
GET /app/apx19.js HTTP/1.1
Host: fitgirl-repacks.theproxy.ws
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fitgirl-repacks.theproxy.ws/wp-login.php?redirect_to=https://fitgirl-repacks.theproxy.ws/inside-proper-cpy-crack/
DNT: 1
Connection: keep-alive
Cookie: view=1; PHPSESSID=va9bjdocsg2evtfn8oc5i4qjqj
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 09 Apr 2025 05:08:46 GMT
content-type: application/javascript; charset=UTF-8
last-modified: Tue, 11 Mar 2025 00:36:24 GMT
etag: W/"67cf8588-23df"
cf-cache-status: DYNAMIC
vary: accept-encoding
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xbahDOtILcTrkL7NDVjrgvN9i7HEQqlLEyAM22csd%2B503WZRL0kPSzfiLu1VmAXl7VJFLxFrqPcW711NlfwELDPN04u4M2IgR9hO5xJ%2FIy42wBXX81xLD1SeUnZpDEpmGqpwpYA8ePjHXXzlyJo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 92d77d0c599b0b59-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=908&min_rtt=408&rtt_var=722&sent=36&recv=28&lost=0&retrans=0&sent_bytes=27221&recv_bytes=2558&delivery_rate=19306666&cwnd=253&unsent_bytes=0&cid=76fec80123450197&ts=545&x=0"
X-Firefox-Spdy: h2
|
|
| belovedsalesman.com/a0/32/b4/a032b4d33c8aea68a4f9b84235614bff.js | 172.240.108.84 | 403 Forbidden | 0 B |
URL GET belovedsalesman.com/a0/32/b4/a032b4d33c8aea68a4f9b84235614bff.js IP 172.240.108.84:443
Requested byhttps://fitgirl-repacks.theproxy.ws/wp-login.php?redirect_to=https://fitgirl-repacks.theproxy.ws/inside-proper-cpy-crack/ CertificateIssuerLet's Encrypt Subjectbelovedsalesman.com FingerprintE3:18:62:B6:C9:60:49:E1:21:E1:6F:85:DF:FF:5D:71:6D:88:4C:E7 ValidityMon, 03 Mar 2025 19:27:43 GMT - Sun, 01 Jun 2025 19:27:42 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /a0/32/b4/a032b4d33c8aea68a4f9b84235614bff.js HTTP/1.1
Host: belovedsalesman.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fitgirl-repacks.theproxy.ws/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 403 Forbidden
Server: nginx/1.21.6
Date: Wed, 09 Apr 2025 05:08:46 GMT
Content-Type: application/javascript
Content-Length: 0
Connection: keep-alive
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
access-control-allow-origin: *
accept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
x-envoy-upstream-service-time: 1
Host: belovedsalesman.com
|
|
| fitgirl-repacks.theproxy.ws/wp-admin/images/wordpress-logo.svg?ver=20131107 | 104.21.43.99 | 200 OK | 11 kB |
URL GET fitgirl-repacks.theproxy.ws/wp-admin/images/wordpress-logo.svg?ver=20131107 IP 104.21.43.99:443
Requested byhttps://fitgirl-repacks.theproxy.ws/wp-login.php?redirect_to=https://fitgirl-repacks.theproxy.ws/inside-proper-cpy-crack/ CertificateIssuerGoogle Trust Services Subjecttheproxy.ws Fingerprint7A:20:0C:C0:6F:44:A6:AB:87:6D:7A:C3:59:5B:E4:29:7D:AC:91:E0 ValidityMon, 10 Feb 2025 04:47:42 GMT - Sun, 11 May 2025 05:45:10 GMT
File typeHTML document, ASCII text, with very long lines (6870) Hash263370b7b3e98f0fa06419234cfda6d0 b3016d53ec61faea8e4d67ecc3513d7955dd38cc 7efcdf937768576c52b6a91523ce9e06a743445fee20dc7031092b175f2f0faa
GET /wp-admin/images/wordpress-logo.svg?ver=20131107 HTTP/1.1
Host: fitgirl-repacks.theproxy.ws
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fitgirl-repacks.theproxy.ws/wp-admin/css/login.min.css?ver=6.4.1
Cookie: view=1; PHPSESSID=va9bjdocsg2evtfn8oc5i4qjqj
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 09 Apr 2025 05:08:46 GMT
content-type: image/svg+xml
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=J9gz5M50VwtFRuBELVgPhFTa20J8WB%2F%2BFodTMxPppCR%2FPv81zTbARqLJi9o9fTex3Zo1rs70p8bS1roWYFa8z1ikIa8Zo0eSdna8AZIINiYKQ1Xyl7sbG7lJKe4GozOZn6FtPsFnlFnBWYqJBfU%3D"}],"group":"cf-nel","max_age":604800}
set-cookie: view=1; expires=Thu, 10-Apr-2025 05:08:46 GMT; Max-Age=86400
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
access-control-allow-origin: *
cf-cache-status: DYNAMIC
vary: accept-encoding
content-encoding: br
cf-ray: 92d77d0edc51b50b-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3264&min_rtt=529&rtt_var=1353&sent=113&recv=155&lost=0&retrans=0&sent_bytes=9230&recv_bytes=8954&delivery_rate=2217&cwnd=12000&unsent_bytes=0&cid=a1f5e0e79cad8813&ts=732&x=16"
|
|
| fitgirl-repacks.theproxy.ws/wp-content/uploads/2016/08/cropped-icon-32x32.jpg | 104.21.43.99 | 200 OK | 1.1 kB |
URL GET fitgirl-repacks.theproxy.ws/wp-content/uploads/2016/08/cropped-icon-32x32.jpg IP 104.21.43.99:443
Requested byhttps://fitgirl-repacks.theproxy.ws/wp-login.php?redirect_to=https://fitgirl-repacks.theproxy.ws/inside-proper-cpy-crack/ CertificateIssuerGoogle Trust Services Subjecttheproxy.ws Fingerprint7A:20:0C:C0:6F:44:A6:AB:87:6D:7A:C3:59:5B:E4:29:7D:AC:91:E0 ValidityMon, 10 Feb 2025 04:47:42 GMT - Sun, 11 May 2025 05:45:10 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 32x32, components 3 Hashe410a24b3ef931098baa8b7d75417542 8f9ca041b1106a9d658ac225e0170dabe4f6e9e0 1eeba4504205814736c0865eedc8abaa929ddb78da1d08dc192705bb48bb73b9
GET /wp-content/uploads/2016/08/cropped-icon-32x32.jpg HTTP/1.1
Host: fitgirl-repacks.theproxy.ws
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fitgirl-repacks.theproxy.ws/wp-login.php?redirect_to=https://fitgirl-repacks.theproxy.ws/inside-proper-cpy-crack/
DNT: 1
Connection: keep-alive
Cookie: view=1; PHPSESSID=va9bjdocsg2evtfn8oc5i4qjqj
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 09 Apr 2025 05:08:48 GMT
content-type: image/jpeg
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=GhXQ5QjlMvUMBhsKgBKDI7mb5B0vlNCTfgjaKK%2FqyOjbObNTtRbNz9pVkvd5N302eUZR%2FMIwVONNzVI3O%2F5Fx9dVGm9dyRkIJQ3dZ7EDVw3APTql8WZmp43UaoRPaxs9%2BFDGa2PI8WgfHD3kPsQ%3D"}],"group":"cf-nel","max_age":604800}
set-cookie: view=1; expires=Thu, 10-Apr-2025 05:08:48 GMT; Max-Age=86400
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
access-control-allow-origin: *
cf-cache-status: DYNAMIC
cf-ray: 92d77d18ac7cb50b-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3264&min_rtt=529&rtt_var=1353&sent=113&recv=155&lost=0&retrans=0&sent_bytes=9230&recv_bytes=8954&delivery_rate=2217&cwnd=12000&unsent_bytes=0&cid=a1f5e0e79cad8813&ts=2283&x=16"
|
|
| fitgirl-repacks.theproxy.ws/wp-content/uploads/2016/08/cropped-icon-192x192.jpg | 104.21.43.99 | 200 OK | 6.9 kB |
URL GET fitgirl-repacks.theproxy.ws/wp-content/uploads/2016/08/cropped-icon-192x192.jpg IP 104.21.43.99:443
Requested byhttps://fitgirl-repacks.theproxy.ws/wp-login.php?redirect_to=https://fitgirl-repacks.theproxy.ws/inside-proper-cpy-crack/ CertificateIssuerGoogle Trust Services Subjecttheproxy.ws Fingerprint7A:20:0C:C0:6F:44:A6:AB:87:6D:7A:C3:59:5B:E4:29:7D:AC:91:E0 ValidityMon, 10 Feb 2025 04:47:42 GMT - Sun, 11 May 2025 05:45:10 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 192x192, components 3 Hash11a1f6e4ec6e64709ce253c2cfd39713 ce6f2127abbfc3f6bba91e0b2e70bc186eef9400 9c3b9f45b1c61888566dfcd113a390d82b6c0e0b25c1d33973198beb434ed0c7
GET /wp-content/uploads/2016/08/cropped-icon-192x192.jpg HTTP/1.1
Host: fitgirl-repacks.theproxy.ws
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fitgirl-repacks.theproxy.ws/wp-login.php?redirect_to=https://fitgirl-repacks.theproxy.ws/inside-proper-cpy-crack/
DNT: 1
Connection: keep-alive
Cookie: view=1; PHPSESSID=va9bjdocsg2evtfn8oc5i4qjqj
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 09 Apr 2025 05:08:48 GMT
content-type: image/jpeg
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=MxvqPLFsAEA7VDsYvnUYY%2F6MP75iaZF6h7MRUtaIEmSjiPeOMPOLJ9jMqEDsmTte8mMAkVGnp2q0qbMZlFnMyp2HLEw2joc0MEV3yKnNsXzQwme3os17tRB1Mkvm93ipMri%2BVS0Q26esdjT7H4w%3D"}],"group":"cf-nel","max_age":604800}
set-cookie: view=1; expires=Thu, 10-Apr-2025 05:08:48 GMT; Max-Age=86400
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
access-control-allow-origin: *
cf-cache-status: DYNAMIC
cf-ray: 92d77d18ac7bb50b-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3264&min_rtt=529&rtt_var=1353&sent=113&recv=155&lost=0&retrans=0&sent_bytes=9230&recv_bytes=8954&delivery_rate=2217&cwnd=12000&unsent_bytes=0&cid=a1f5e0e79cad8813&ts=2216&x=16"
|
|
| fitgirl-repacks.theproxy.ws/wp-content/plugins/jetpack/modules/theme-tools/compat/twentyfourteen.css?ver=13.3 | 104.21.43.99 | 200 OK | 11 kB |
URL GET fitgirl-repacks.theproxy.ws/wp-content/plugins/jetpack/modules/theme-tools/compat/twentyfourteen.css?ver=13.3 IP 104.21.43.99:443
Requested byhttps://fitgirl-repacks.theproxy.ws/wp-login.php?redirect_to=https://fitgirl-repacks.theproxy.ws/inside-proper-cpy-crack/ CertificateIssuerGoogle Trust Services Subjecttheproxy.ws Fingerprint7A:20:0C:C0:6F:44:A6:AB:87:6D:7A:C3:59:5B:E4:29:7D:AC:91:E0 ValidityMon, 10 Feb 2025 04:47:42 GMT - Sun, 11 May 2025 05:45:10 GMT
File typeHTML document, ASCII text, with very long lines (6870) Hasha5009638043516c1b07c8d565994a752 1540e9423de4302ebcba2f4c4608cce7bf44bce0 b88734f92242075f139fb04f2c1b0a25bba749795ab512e5d1260d7e02a157a7
GET /wp-content/plugins/jetpack/modules/theme-tools/compat/twentyfourteen.css?ver=13.3 HTTP/1.1
Host: fitgirl-repacks.theproxy.ws
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fitgirl-repacks.theproxy.ws/wp-login.php?redirect_to=https://fitgirl-repacks.theproxy.ws/inside-proper-cpy-crack/
Cookie: view=1; PHPSESSID=va9bjdocsg2evtfn8oc5i4qjqj
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 09 Apr 2025 05:08:46 GMT
content-type: text/css;charset=UTF-8
set-cookie: view=1; expires=Thu, 10-Apr-2025 05:08:46 GMT; Max-Age=86400
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
access-control-allow-origin: *
cf-cache-status: DYNAMIC
vary: accept-encoding
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mE0rRbQPLMbYugYcrR9hmA92fyZg%2BAvJwzELa3esb6380ReYDTLmcA%2BUFx2ZpJnrq%2FuH2vusUyUUIvkRt9P%2FCjutEWbKhDxAmQqLehJHOG%2Bvr9Lk7Pc5MhWg%2Bv7WK%2BdVx0nC8aJheF7ZpvEg0sc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 92d77d0c598f0b59-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=634&min_rtt=408&rtt_var=248&sent=27&recv=26&lost=0&retrans=0&sent_bytes=20939&recv_bytes=2558&delivery_rate=19306666&cwnd=253&unsent_bytes=0&cid=76fec80123450197&ts=488&x=0"
X-Firefox-Spdy: h2
|
|
| fitgirl-repacks.theproxy.ws/hy.js?q22q2q2 | 104.21.43.99 | 200 OK | 56 kB |
URL GET fitgirl-repacks.theproxy.ws/hy.js?q22q2q2 IP 104.21.43.99:443
Requested byhttps://fitgirl-repacks.theproxy.ws/wp-login.php?redirect_to=https://fitgirl-repacks.theproxy.ws/inside-proper-cpy-crack/ CertificateIssuerGoogle Trust Services Subjecttheproxy.ws Fingerprint7A:20:0C:C0:6F:44:A6:AB:87:6D:7A:C3:59:5B:E4:29:7D:AC:91:E0 ValidityMon, 10 Feb 2025 04:47:42 GMT - Sun, 11 May 2025 05:45:10 GMT
File typeJavaScript source, ASCII text, with very long lines (56131), with no line terminators Hash667d77da844b6d5ad62b2f26e77b4b12 01ae61192a38af73a93c67468fb8271d7bbfa4f6 f240ce7fa62cd81d92f29081815f2cd2376ea6867887d17d5625009ebdf355b1
GET /hy.js?q22q2q2 HTTP/1.1
Host: fitgirl-repacks.theproxy.ws
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fitgirl-repacks.theproxy.ws/wp-login.php?redirect_to=https://fitgirl-repacks.theproxy.ws/inside-proper-cpy-crack/
DNT: 1
Connection: keep-alive
Cookie: view=1; PHPSESSID=va9bjdocsg2evtfn8oc5i4qjqj
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 09 Apr 2025 05:08:46 GMT
content-type: application/javascript; charset=UTF-8
server: cloudflare
vary: accept-encoding
last-modified: Tue, 11 Mar 2025 00:36:26 GMT
etag: W/"67cf858a-db43"
content-encoding: br
cf-cache-status: DYNAMIC
cf-ray: 92d77d0c599c0b59-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| belovedsalesman.com/22/00/54/2200540f09f939738419313a1a090c32.js | 172.240.108.84 | 403 Forbidden | 0 B |
URL GET belovedsalesman.com/22/00/54/2200540f09f939738419313a1a090c32.js IP 172.240.108.84:443
Requested byhttps://fitgirl-repacks.theproxy.ws/wp-login.php?redirect_to=https://fitgirl-repacks.theproxy.ws/inside-proper-cpy-crack/ CertificateIssuerLet's Encrypt Subjectbelovedsalesman.com FingerprintE3:18:62:B6:C9:60:49:E1:21:E1:6F:85:DF:FF:5D:71:6D:88:4C:E7 ValidityMon, 03 Mar 2025 19:27:43 GMT - Sun, 01 Jun 2025 19:27:42 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /22/00/54/2200540f09f939738419313a1a090c32.js HTTP/1.1
Host: belovedsalesman.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fitgirl-repacks.theproxy.ws/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 403 Forbidden
Server: nginx/1.21.6
Date: Wed, 09 Apr 2025 05:08:46 GMT
Content-Type: application/javascript
Content-Length: 0
Connection: keep-alive
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
access-control-allow-origin: *
accept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
x-envoy-upstream-service-time: 1
Host: belovedsalesman.com
|
|
| fonts.gstatic.com/s/roboto/v47/KFOMCnqEu92Fr1ME7kSn66aGLdTylUAMQXC89YmC2DPNWubEbVmQiArmlw.woff2 | 142.250.74.35 | 200 OK | 12 kB |
URL GET fonts.gstatic.com/s/roboto/v47/KFOMCnqEu92Fr1ME7kSn66aGLdTylUAMQXC89YmC2DPNWubEbVmQiArmlw.woff2 IP 142.250.74.35:443
Requested byhttps://fitgirl-repacks.theproxy.ws/wp-login.php?redirect_to=https://fitgirl-repacks.theproxy.ws/inside-proper-cpy-crack/ CertificateIssuerGoogle Trust Services Subject*.gstatic.com Fingerprint04:FF:92:E7:16:B0:49:91:8B:B7:8D:C6:93:B9:20:B4:2A:33:9F:A8 ValidityThu, 20 Mar 2025 11:19:45 GMT - Thu, 12 Jun 2025 11:19:44 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 11840, version 1.0 Hasha0f8baa16418514a286278c0a773d3a6 e3029db449750770ccb50c74364a7ef61e8ddb36 fe56d0d137acb0f9b17754d3670f5ecaee2185548dd9a8c44535a5f194117ddc
GET /s/roboto/v47/KFOMCnqEu92Fr1ME7kSn66aGLdTylUAMQXC89YmC2DPNWubEbVmQiArmlw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://fitgirl-repacks.theproxy.ws
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 11840
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 03 Apr 2025 09:21:51 GMT
expires: Fri, 03 Apr 2026 09:21:51 GMT
cache-control: public, max-age=31536000
age: 503215
last-modified: Wed, 08 Jan 2025 18:23:08 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/roboto/v47/KFOMCnqEu92Fr1ME7kSn66aGLdTylUAMQXC89YmC2DPNWubEbVmbiArmlw.woff2 | 142.250.74.35 | 200 OK | 7.9 kB |
URL GET fonts.gstatic.com/s/roboto/v47/KFOMCnqEu92Fr1ME7kSn66aGLdTylUAMQXC89YmC2DPNWubEbVmbiArmlw.woff2 IP 142.250.74.35:443
Requested byhttps://fitgirl-repacks.theproxy.ws/wp-login.php?redirect_to=https://fitgirl-repacks.theproxy.ws/inside-proper-cpy-crack/ CertificateIssuerGoogle Trust Services Subject*.gstatic.com Fingerprint04:FF:92:E7:16:B0:49:91:8B:B7:8D:C6:93:B9:20:B4:2A:33:9F:A8 ValidityThu, 20 Mar 2025 11:19:45 GMT - Thu, 12 Jun 2025 11:19:44 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 7856, version 1.0 Hashed88153e0e734ac1c23e62ca9059d570 4b115706af1f4c17ffb5555f4dd3e96e5cbb3661 beabfea8c7ef7693427c37f99ece071f4c3aaf14b590b12c45c3ea6258d896a8
GET /s/roboto/v47/KFOMCnqEu92Fr1ME7kSn66aGLdTylUAMQXC89YmC2DPNWubEbVmbiArmlw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://fitgirl-repacks.theproxy.ws
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7856
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 03 Apr 2025 09:17:56 GMT
expires: Fri, 03 Apr 2026 09:17:56 GMT
cache-control: public, max-age=31536000
age: 503450
last-modified: Wed, 08 Jan 2025 18:23:13 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fitgirl-repacks.theproxy.ws/user.php | 104.21.43.99 | 200 OK | 0 B |
URL POST fitgirl-repacks.theproxy.ws/user.php IP 104.21.43.99:443
Requested byhttps://fitgirl-repacks.theproxy.ws/wp-login.php?redirect_to=https://fitgirl-repacks.theproxy.ws/inside-proper-cpy-crack/ CertificateIssuerGoogle Trust Services Subjecttheproxy.ws Fingerprint7A:20:0C:C0:6F:44:A6:AB:87:6D:7A:C3:59:5B:E4:29:7D:AC:91:E0 ValidityMon, 10 Feb 2025 04:47:42 GMT - Sun, 11 May 2025 05:45:10 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /user.php HTTP/1.1
Host: fitgirl-repacks.theproxy.ws
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fitgirl-repacks.theproxy.ws/wp-login.php?redirect_to=https://fitgirl-repacks.theproxy.ws/inside-proper-cpy-crack/
Content-Type: application/x-www-form-urlencoded
X-Requested-With: XMLHttpRequest
Content-Length: 39
Origin: https://fitgirl-repacks.theproxy.ws
DNT: 1
Connection: keep-alive
Cookie: view=1; PHPSESSID=va9bjdocsg2evtfn8oc5i4qjqj
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 09 Apr 2025 05:08:46 GMT
content-type: text/html; charset=UTF-8
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6756jE%2BQCfqORd83W4G1Ly9qmrPRSk%2Bpn%2Bkq8IBW%2Bq9qc1dvaBFx80WVEaXJEe%2FPT3OB992dOULDAT%2FeAxDyOLnKLiHVMvdz1pTDckb0j1RCZDVSujUN89R5RXMzhd%2BlVRL0LaRy66sZDqzVO3I%3D"}],"group":"cf-nel","max_age":604800}
cf-cache-status: DYNAMIC
vary: accept-encoding
content-encoding: br
cf-ray: 92d77d102c57b50b-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3264&min_rtt=529&rtt_var=1353&sent=113&recv=155&lost=0&retrans=0&sent_bytes=9230&recv_bytes=8954&delivery_rate=2217&cwnd=12000&unsent_bytes=0&cid=a1f5e0e79cad8813&ts=889&x=16"
|
|
| fonts.googleapis.com/css2?family=Roboto:wght@400&display=swap | 142.250.74.10 | 200 OK | 5.7 kB |
URL GET fonts.googleapis.com/css2?family=Roboto:wght@400&display=swap IP 142.250.74.10:443
Requested byhttps://fitgirl-repacks.theproxy.ws/wp-login.php?redirect_to=https://fitgirl-repacks.theproxy.ws/inside-proper-cpy-crack/ CertificateIssuerGoogle Trust Services Subjectupload.video.google.com Fingerprint3C:2E:67:30:A6:95:F3:D3:61:49:AB:AC:BC:D1:CF:77:3E:33:8F:B7 ValidityThu, 20 Mar 2025 11:19:46 GMT - Thu, 12 Jun 2025 11:19:45 GMT
File typeASCII text, with very long lines (1572) Hashdce8b1041389e28a34e22250feed115a 9c290194b85035fb588c9e25fa515c676172b920 1ede014f47795c3d04812b724ef687909970f776d37854e7312a5ad859c84e41
GET /css2?family=Roboto:wght@400&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fitgirl-repacks.theproxy.ws/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 09 Apr 2025 05:08:46 GMT
date: Wed, 09 Apr 2025 05:08:46 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fitgirl-repacks.theproxy.ws/zpp/zpp4.js?q22q2q2 | 104.21.43.99 | 200 OK | 39 kB |
URL GET fitgirl-repacks.theproxy.ws/zpp/zpp4.js?q22q2q2 IP 104.21.43.99:443
Requested byhttps://fitgirl-repacks.theproxy.ws/wp-login.php?redirect_to=https://fitgirl-repacks.theproxy.ws/inside-proper-cpy-crack/ CertificateIssuerGoogle Trust Services Subjecttheproxy.ws Fingerprint7A:20:0C:C0:6F:44:A6:AB:87:6D:7A:C3:59:5B:E4:29:7D:AC:91:E0 ValidityMon, 10 Feb 2025 04:47:42 GMT - Sun, 11 May 2025 05:45:10 GMT
File typeJavaScript source, ASCII text, with very long lines (38995), with no line terminators Hash7dc63553536847077855df4f82f1ec18 146c3aac34cb4e7e1e9c692ccd0161b2e4f018de 3a18b1964d1d209c46d754459b9ef98d4a9a85065e245f8311be727ffee3f960
GET /zpp/zpp4.js?q22q2q2 HTTP/1.1
Host: fitgirl-repacks.theproxy.ws
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fitgirl-repacks.theproxy.ws/wp-login.php?redirect_to=https://fitgirl-repacks.theproxy.ws/inside-proper-cpy-crack/
DNT: 1
Connection: keep-alive
Cookie: view=1; PHPSESSID=va9bjdocsg2evtfn8oc5i4qjqj
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 09 Apr 2025 05:08:46 GMT
content-type: application/javascript; charset=UTF-8
last-modified: Tue, 11 Mar 2025 00:36:24 GMT
etag: W/"67cf8588-9853"
cf-cache-status: DYNAMIC
vary: accept-encoding
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xTEdXlVy2M2cBNyo1nSuavh%2BBJlqsJfhb0i%2BeK8uTBhf%2F9X28RF%2BhBE44bdFvCptnde6RqDTYMgj4muTHM5osikYbrakr5tHrA2vJf5zh9QNCYHLMgoaT64FQWYAsj6A0nRoUAGcwukHi0eyk74%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 92d77d0c699f0b59-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=1526&min_rtt=408&rtt_var=1776&sent=54&recv=29&lost=0&retrans=0&sent_bytes=41378&recv_bytes=2558&delivery_rate=19306666&cwnd=253&unsent_bytes=0&cid=76fec80123450197&ts=556&x=0"
X-Firefox-Spdy: h2
|
|
| fitgirl-repacks.theproxy.ws/app/apx14.js | 104.21.43.99 | 200 OK | 7.7 kB |
URL GET fitgirl-repacks.theproxy.ws/app/apx14.js IP 104.21.43.99:443
Requested byhttps://fitgirl-repacks.theproxy.ws/wp-login.php?redirect_to=https://fitgirl-repacks.theproxy.ws/inside-proper-cpy-crack/ CertificateIssuerGoogle Trust Services Subjecttheproxy.ws Fingerprint7A:20:0C:C0:6F:44:A6:AB:87:6D:7A:C3:59:5B:E4:29:7D:AC:91:E0 ValidityMon, 10 Feb 2025 04:47:42 GMT - Sun, 11 May 2025 05:45:10 GMT
File typeJavaScript source, ASCII text, with very long lines (7663), with no line terminators Hashdfb1f327618e201778f2de85cfbcd173 fceb89a2221463e5bc5a71feff1247683ab08cc5 dc03bc8b63938916a73dd976e186d05559ddc61da2725e1063b7936fa9f0fc33
GET /app/apx14.js HTTP/1.1
Host: fitgirl-repacks.theproxy.ws
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fitgirl-repacks.theproxy.ws/wp-login.php?redirect_to=https://fitgirl-repacks.theproxy.ws/inside-proper-cpy-crack/
DNT: 1
Connection: keep-alive
Cookie: view=1; PHPSESSID=va9bjdocsg2evtfn8oc5i4qjqj
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 09 Apr 2025 05:08:46 GMT
content-type: application/javascript; charset=UTF-8
server: cloudflare
vary: accept-encoding
last-modified: Tue, 11 Mar 2025 00:36:24 GMT
etag: W/"67cf8588-1def"
content-encoding: br
cf-cache-status: DYNAMIC
cf-ray: 92d77d0c69a00b59-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/roboto/v47/KFOMCnqEu92Fr1ME7kSn66aGLdTylUAMQXC89YmC2DPNWubEbVnoiArmlw.woff2 | 142.250.74.35 | 200 OK | 20 kB |
URL GET fonts.gstatic.com/s/roboto/v47/KFOMCnqEu92Fr1ME7kSn66aGLdTylUAMQXC89YmC2DPNWubEbVnoiArmlw.woff2 IP 142.250.74.35:443
Requested byhttps://fitgirl-repacks.theproxy.ws/wp-login.php?redirect_to=https://fitgirl-repacks.theproxy.ws/inside-proper-cpy-crack/ CertificateIssuerGoogle Trust Services Subject*.gstatic.com Fingerprint04:FF:92:E7:16:B0:49:91:8B:B7:8D:C6:93:B9:20:B4:2A:33:9F:A8 ValidityThu, 20 Mar 2025 11:19:45 GMT - Thu, 12 Jun 2025 11:19:44 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 19660, version 1.0 Hash819bbfbefdc5869939993f262df71cba 8e6ab75be2b7c378c11b3b4fcb6402b7bac21338 a08aab97ea21fc5299645d12e3ef57bfb5e86e524e1a59ea86bfe4bc1afe2f6a
GET /s/roboto/v47/KFOMCnqEu92Fr1ME7kSn66aGLdTylUAMQXC89YmC2DPNWubEbVnoiArmlw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://fitgirl-repacks.theproxy.ws
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 19660
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 03 Apr 2025 09:15:31 GMT
expires: Fri, 03 Apr 2026 09:15:31 GMT
cache-control: public, max-age=31536000
age: 503595
last-modified: Wed, 08 Jan 2025 18:23:12 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/roboto/v47/KFOMCnqEu92Fr1ME7kSn66aGLdTylUAMQXC89YmC2DPNWubEbVmXiArmlw.woff2 | 142.250.74.35 | 200 OK | 9.6 kB |
URL GET fonts.gstatic.com/s/roboto/v47/KFOMCnqEu92Fr1ME7kSn66aGLdTylUAMQXC89YmC2DPNWubEbVmXiArmlw.woff2 IP 142.250.74.35:443
Requested byhttps://fitgirl-repacks.theproxy.ws/wp-login.php?redirect_to=https://fitgirl-repacks.theproxy.ws/inside-proper-cpy-crack/ CertificateIssuerGoogle Trust Services Subject*.gstatic.com Fingerprint04:FF:92:E7:16:B0:49:91:8B:B7:8D:C6:93:B9:20:B4:2A:33:9F:A8 ValidityThu, 20 Mar 2025 11:19:45 GMT - Thu, 12 Jun 2025 11:19:44 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 9644, version 1.0 Hashbb024613fed16187df15c7c0da75a423 95e6ba969c4e9c7695966ede1146c9c84098cdea 742a490470ad5add81a8614602f59609db11ebf8f31f5f586eff2b34c7fb5da7
GET /s/roboto/v47/KFOMCnqEu92Fr1ME7kSn66aGLdTylUAMQXC89YmC2DPNWubEbVmXiArmlw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://fitgirl-repacks.theproxy.ws
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 9644
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 03 Apr 2025 09:18:31 GMT
expires: Fri, 03 Apr 2026 09:18:31 GMT
cache-control: public, max-age=31536000
age: 503415
last-modified: Wed, 08 Jan 2025 18:23:08 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|