| GET cdn.jsdelivr.net/npm/file-icon-vectors@1.0.0/dist/file-icon-square-o.min.css |  151.101.193.229 | 200 OK | 2.4 kB |
URL GET HTTP/2cdn.jsdelivr.net/npm/file-icon-vectors@1.0.0/dist/file-icon-square-o.min.css IP151.101.193.229:443
Requested byhttps://btdb.theproxy.app/ CertificateIssuerGlobalSign nv-sa Subjectjsdelivr.net Fingerprint05:87:2C:BA:73:14:21:54:82:00:8B:AD:85:8F:E9:C6:4D:C7:66:09 ValidityWed, 27 Sep 2023 18:13:13 GMT - Mon, 28 Oct 2024 18:13:12 GMT
File typeASCII text, with very long lines (25734) Hashfca0ba5ed4d8f09dd04b4b69669baf75 46b5d1d7ed20d24fafd7c920ec77aa7905c9c80c c7593a2088993b008f62c4f0e70de7ee5fe596646d6b74b1b76da918ef904dc0
GET /npm/file-icon-vectors@1.0.0/dist/file-icon-square-o.min.css HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://btdb.theproxy.app/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: text/css; charset=utf-8
x-jsd-version: 1.0.0
x-jsd-version-type: version
etag: W/"6578-RrXR1+0g0k+v18kg7HeqeQXJyAw"
content-encoding: br
accept-ranges: bytes
date: Sun, 22 Oct 2023 15:19:43 GMT
age: 2295833
x-served-by: cache-fra-etou8220052-FRA, cache-bma1668-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 2434
X-Firefox-Spdy: h2
|
|
| GET cdnjs.cloudflare.com/ajax/libs/jquery/3.3.1/jquery.min.js |  104.17.25.14 | 200 OK | 28 kB |
URL GET HTTP/2cdnjs.cloudflare.com/ajax/libs/jquery/3.3.1/jquery.min.js IP104.17.25.14:443
Requested byhttps://btdb.theproxy.app/ CertificateIssuerCloudflare, Inc. Subjectsni.cloudflaressl.com Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT
File typeASCII text, with very long lines (65451) Hasha09e13ee94d51c524b7e2a728c7d4039 0dc32db4aa9c5f03f3b38c47d883dbd4fed13aae 160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef
GET /ajax/libs/jquery/3.3.1/jquery.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://btdb.theproxy.app/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 22 Oct 2023 15:19:43 GMT
content-type: application/javascript; charset=utf-8
content-length: 27501
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "64942b1e-6b6d"
last-modified: Thu, 22 Jun 2023 11:06:06 GMT
cf-cdnjs-via: cfworker/r2
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 4505642
expires: Fri, 11 Oct 2024 15:19:43 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Rg4YW2cf%2BiCfuXyT1gyjTOwzwNwoqaurKHFsFtfBeTgaz2myd%2BRrWFI5YUbHG4VYRHAvTq%2FVdK3PWHQOsRadd2AAo4joOVeA6pFiJCUWERW5cRQLtzkez7tHYDoBVZxtTtNcLvlk"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 81a2b861f9b556a9-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| GET cdnjs.cloudflare.com/ajax/libs/jquery/3.3.1/jquery.min.js | 104.17.25.14 | 200 OK | 28 kB |
URL GET HTTP/2cdnjs.cloudflare.com/ajax/libs/jquery/3.3.1/jquery.min.js IP104.17.25.14:443
Requested byhttps://btdb.theproxy.app/ CertificateIssuerCloudflare, Inc. Subjectsni.cloudflaressl.com Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT
File typeASCII text, with very long lines (65451) Hasha09e13ee94d51c524b7e2a728c7d4039 0dc32db4aa9c5f03f3b38c47d883dbd4fed13aae 160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef
GET /ajax/libs/jquery/3.3.1/jquery.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://btdb.theproxy.app/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 22 Oct 2023 15:19:44 GMT
content-type: application/javascript; charset=utf-8
content-length: 27501
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "64942b1e-6b6d"
last-modified: Thu, 22 Jun 2023 11:06:06 GMT
cf-cdnjs-via: cfworker/r2
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 4505643
expires: Fri, 11 Oct 2024 15:19:44 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Iudi%2FiuLpJ9s%2B%2FGZWOQMT5LjISjPckRDF0GXcvworS6RbtsEDyMDzaeMR2ZLTPKovisZ2rG18K4sA2UhSwLJ6rRt%2ByGe9NfF1Dlzv5Cdg1bh1xEm9ZeI2LbvCMZudxUCFD7xabdn"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 81a2b8655bb156a4-OSL
alt-svc: h3=":443"; ma=86400
|
|
| GET a.we-are-anon.com/h/ | 172.67.141.212 | | 89 kB |
IP172.67.141.212:0
Requested byhttps://btdb.theproxy.app/ CertificateIssuerGoogle Trust Services LLC Subjectwe-are-anon.com FingerprintBE:0B:14:13:DD:1E:0F:02:39:75:C1:FB:07:09:AD:F0:B7:05:A1:91 ValidityThu, 14 Sep 2023 04:33:05 GMT - Wed, 13 Dec 2023 04:33:04 GMT
File typeHTML document, ASCII text, with very long lines (25956) Hashf6867c2f54fc2c9a68a4ebc77de8f0b2 cf9a8e5da83c4db6f7a2f8939e3fae317f8242db 08b2519890eddf58f0112c43deea0f80fb012db486e58039126039991dec3b4d
GET /h/ HTTP/1.1
Host: a.we-are-anon.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://btdb.theproxy.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 22 Oct 2023 15:19:44 GMT
content-type: text/html; charset=UTF-8
set-cookie: PHPSESSID=aae68l0o17lse10vkvc0gar29n; path=/
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=H7wrCsjEPn9%2B%2BKDmz9TdC%2F5WggzksR35msumzU3tpiFQIN%2Bz3E0qqULGgFbzHvnr6ZSopk64V3GpRtvzGGCBOualTHhVcStABXre9ZwD6%2BErj63Nw%2BIvskgJ7qox47Whe3sAzw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 81a2b8651b7656c5-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| GET use.fontawesome.com/releases/v5.8.1/webfonts/fa-regular-400.woff2 | 172.64.103.11 | 200 OK | 14 kB |
URL GET HTTP/2use.fontawesome.com/releases/v5.8.1/webfonts/fa-regular-400.woff2 IP172.64.103.11:443
Requested byhttps://btdb.theproxy.app/ CertificateIssuerCloudflare, Inc. Subjectuse.fontawesome.com FingerprintCB:BE:6B:C4:5F:DF:18:7A:C3:AD:BF:6C:40:36:18:9F:E2:99:7F:78 ValidityThu, 12 Oct 2023 00:00:00 GMT - Thu, 10 Oct 2024 23:59:59 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 13552, version 329.-17761\012- data Hashe6257a726a0cf6ec8c6fec22821c055f 8583a4f0dd12e15a48b3395593307a84d971cc33 ccf4db1eeb68c96e05e74f8ebfa75cc60c3a0fed862dae6b0ad85d4e1b5b4e4f
GET /releases/v5.8.1/webfonts/fa-regular-400.woff2 HTTP/1.1
Host: use.fontawesome.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://btdb.theproxy.app
DNT: 1
Connection: keep-alive
Referer: https://use.fontawesome.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 22 Oct 2023 15:19:44 GMT
content-type: font/woff2
content-length: 13552
access-control-allow-origin: *
cache-control: max-age=31556926
etag: "e6257a726a0cf6ec8c6fec22821c055f"
last-modified: Fri, 22 Sep 2023 01:45:57 GMT
vary: Origin, Accept-Encoding
cf-cache-status: HIT
age: 4871
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=kALev3yMBNqHnMd7t9PglKoGOIN6nr5t134b9la2%2F2IOB7HsVKwv2CVgw0BszkfQJr9m6AyWRymJ5VYPPM8TCIcZQqQNBd%2F8iQcIm9RMF%2B4dtscJ%2FWLDf3TYvLw9OcrMdI0P1BsD"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 81a2b8667db663bf-LHR
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| GET heartilyscales.com/a2/86/90/a286902791a7f4c98bcb1e812322cd78.js | 192.243.61.225 | 200 OK | 14 kB |
URL GET HTTP/1.1heartilyscales.com/a2/86/90/a286902791a7f4c98bcb1e812322cd78.js IP192.243.61.225:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://btdb.theproxy.app/ CertificateIssuerLet's Encrypt Subjectheartilyscales.com FingerprintF0:0C:2F:00:27:D9:41:A2:9B:5F:2C:5F:B6:BE:55:43:BB:A5:CC:81 ValidityFri, 13 Oct 2023 06:44:51 GMT - Thu, 11 Jan 2024 06:44:50 GMT
File typeASCII text, with very long lines (40513), with no line terminators Hash7a182710d3ab1deeda56865ee3fcbb37 a8d7056fb8688a7c310a206c61e167d747e85530 2afb06cc2ac0709d78f8899a29f4cfd16fdb6e4534694a1bb3c01f1349aefd0d
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /a2/86/90/a286902791a7f4c98bcb1e812322cd78.js HTTP/1.1
Host: heartilyscales.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://btdb.theproxy.app/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Sun, 22 Oct 2023 15:19:44 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 1f75916548d549570279cf84dda16372
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
|
|
| GET use.fontawesome.com/releases/v5.8.1/css/all.css | 172.64.103.11 | 200 OK | 55 kB |
URL GET HTTP/2use.fontawesome.com/releases/v5.8.1/css/all.css IP172.64.103.11:443
Requested byhttps://btdb.theproxy.app/ CertificateIssuerCloudflare, Inc. Subjectuse.fontawesome.com FingerprintCB:BE:6B:C4:5F:DF:18:7A:C3:AD:BF:6C:40:36:18:9F:E2:99:7F:78 ValidityThu, 12 Oct 2023 00:00:00 GMT - Thu, 10 Oct 2024 23:59:59 GMT
File typeASCII text, with very long lines (54926) Hashe4c542a7f6bf6f74fdd8cdf6e8096396 3a0571a695a35f238026b9398386dc99d9a0c56d eeb17a45a48aca1d7adbcf04de155dcd0b47cb36ad036310446bb471fea9aaa3
GET /releases/v5.8.1/css/all.css HTTP/1.1
Host: use.fontawesome.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://btdb.theproxy.app
DNT: 1
Connection: keep-alive
Referer: https://btdb.theproxy.app/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 22 Oct 2023 15:19:44 GMT
content-type: text/css
access-control-allow-origin: *
cache-control: max-age=31556926
etag: W/"e4c542a7f6bf6f74fdd8cdf6e8096396"
last-modified: Fri, 22 Sep 2023 01:45:55 GMT
vary: Origin, Accept-Encoding
cf-cache-status: HIT
age: 4871
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=wFN6mF5WVBBXkHSXe8HSNed97VRxtEJ6KQHHff2DosxgxModGd%2BweB1YeIX8g07sFZCIfuDD1ynWdfB5mHvn61m0ferCd1nKKjgucx4zGiod4wT28bKamTa1R6iNxtIfw2dCzTFM"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 81a2b8641a4463bf-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| GET formden.com/static/assets/demos/bootstrap-iso/bootstrap-iso/bootstrap-iso.css | 104.26.1.81 | 200 OK | 203 kB |
URL GET HTTP/2formden.com/static/assets/demos/bootstrap-iso/bootstrap-iso/bootstrap-iso.css IP104.26.1.81:443
Requested byhttps://btdb.theproxy.app/ CertificateIssuerCloudflare, Inc. Subjectsni.cloudflaressl.com FingerprintB4:20:D5:56:2D:B7:AA:41:22:3D:EF:6E:99:C8:76:04:93:79:F0:F1 ValidityWed, 19 Apr 2023 00:00:00 GMT - Thu, 18 Apr 2024 23:59:59 GMT
File typeASCII text, with very long lines (386) Size203 kB (202858 bytes) Hash983b32a3322df186728fb6b0f8a1fb74 16402572b9e1e854737c0adade7372b680739f2b 404e4e0e62d557f5850e6f82dcf55d7295566f59046b98d6bdd8f043bd61a136
GET /static/assets/demos/bootstrap-iso/bootstrap-iso/bootstrap-iso.css HTTP/1.1
Host: formden.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://btdb.theproxy.app/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 22 Oct 2023 15:19:43 GMT
content-type: text/css
last-modified: Fri, 25 Sep 2015 15:49:42 GMT
etag: W/"3186a-520944bc5d687-gzip"
vary: Accept-Encoding
access-control-allow-origin: *
cache-control: max-age=14400
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=7uMWSUiJnbZSfPq%2F5RJtr7naipnEEw95hOLJXTgNuhCwbp250S3Xx3bsLG3zeee%2FvLASHS5h9VAGU8%2BN%2Fe%2FYp2hwFP1niczh40txv0qrFlEmA%2BwRy%2FFznKvFu0W%2F"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 81a2b861ffb15695-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| GET vpop2.com/api_.null.p_.null.nfo.php?js=1 | 0.0.0.0 | | 0 B |
URL GET vpop2.com/api_.null.p_.null.nfo.php?js=1 IP0.0.0.0:0
Requested byhttps://btdb.theproxy.app/ CertificateIssuerGoogle Trust Services LLC Subjectvpop2.com Fingerprint42:76:18:68:08:D1:EA:9B:08:AB:8F:21:A7:4F:09:AF:A8:76:A5:DE ValiditySun, 15 Oct 2023 02:22:37 GMT - Sat, 13 Jan 2024 02:22:36 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /api_.null.p_.null.nfo.php?js=1 HTTP/1.1
Host: vpop2.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://btdb.theproxy.app/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Sun, 22 Oct 2023 15:19:43 GMT
content-type: text/html; charset=UTF-8
location: https://a.we-are-anon.com/h/
set-cookie: view=1; expires=Mon, 23-Oct-2023 15:19:43 GMT; Max-Age=86400
PHPSESSID=ba4ff4gon7ruhiha1j2jsrpu6p; path=/
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=AryY9J5vCwQg4FrkKmN1X9UabY%2B3n1wup0ZuJU9lzwN%2BcvnSDRB7wDWODY36loW0LfpDt0fE7jVl1g5cgYrek4dZhx%2B4VpbvBhGohxDE3vNLENbC5E0tKgp7acg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 81a2b8620fd35695-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| GET btdb.theproxy.app/app/apx19.js | 104.21.53.254 | 200 OK | 9.2 kB |
URL GET HTTP/3btdb.theproxy.app/app/apx19.js IP104.21.53.254:443
Requested byhttps://btdb.theproxy.app/ CertificateIssuerLet's Encrypt Subjecttheproxy.app Fingerprint31:97:DF:5C:93:B5:A8:B3:20:29:F7:D1:B1:71:02:4B:39:D2:73:BF ValiditySat, 09 Sep 2023 04:44:49 GMT - Fri, 08 Dec 2023 04:44:48 GMT
File typeASCII text, with very long lines (10516), with no line terminators Hashd26dea46bd49f9297502159ed377f84c 2da344f74215617efd03c4805e5e15d7d8039515 77d7964a36f5c3105bc99271b3ffe2d4ebc5541e4acd38def734b3eaea38fd38
GET /app/apx19.js HTTP/1.1
Host: btdb.theproxy.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://btdb.theproxy.app/
Cookie: view=1; PHPSESSID=enhq7amqd3pur2007be7qbmsqs
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 22 Oct 2023 15:19:43 GMT
content-type: application/javascript; charset=UTF-8
last-modified: Tue, 15 Sep 2020 18:46:59 GMT
etag: W/"5f610c23-23df"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=86jfdmjDTXzdwE6otUPqEE77RuZuOaaIgE3W09pO1JbX8H6tsCzmHOOFoWyQzkQ%2Ft0W2O5prkdNhlTRWgQMfW0K98eCoMFCOpzgJiOPPc5Q0LdzF%2FMkMj2waNiUt9h4g4QTnqg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 81a2b8618a8d5689-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| GET btdb.theproxy.app/app/apx14.js | 104.21.53.254 | 200 OK | 7.7 kB |
URL GET HTTP/3btdb.theproxy.app/app/apx14.js IP104.21.53.254:443
Requested byhttps://btdb.theproxy.app/ CertificateIssuerLet's Encrypt Subjecttheproxy.app Fingerprint31:97:DF:5C:93:B5:A8:B3:20:29:F7:D1:B1:71:02:4B:39:D2:73:BF ValiditySat, 09 Sep 2023 04:44:49 GMT - Fri, 08 Dec 2023 04:44:48 GMT
File typeASCII text, with very long lines (8720), with no line terminators Hash3db7729f5768690d08cfbb852bda88b3 29d50e49674a25263da47dec24318c1a68f003e0 997dcda1cc75d9821ee6a9b2dba6fff73b5f104ed1a49792f998d7fe70d24893
GET /app/apx14.js HTTP/1.1
Host: btdb.theproxy.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://btdb.theproxy.app/
Cookie: view=1; PHPSESSID=enhq7amqd3pur2007be7qbmsqs
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 22 Oct 2023 15:19:43 GMT
content-type: application/javascript; charset=UTF-8
last-modified: Tue, 15 Sep 2020 18:26:19 GMT
etag: W/"5f61074b-1def"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Bdw4NSKsG3FMV9d8TIJ607%2BZbGaE8gdDQK12QVxjuFw0b30Z%2BZrMlyrH0rzzwrvaYJEvb2%2B7b6bOjej8iKsikAvzp29PFSqrNsj8WGFqMFSd2Ij%2B2IG4dwu7umL%2BrkFdv%2FaL5Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 81a2b8618a995689-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| GET theusualsuspectz.biz/j/m/qqqq.js | 104.21.87.80 | 200 OK | 48 kB |
URL GET HTTP/2theusualsuspectz.biz/j/m/qqqq.js IP104.21.87.80:443
Requested byhttps://btdb.theproxy.app/ CertificateIssuerGoogle Trust Services LLC Subjecttheusualsuspectz.biz Fingerprint24:F3:7E:77:4B:2B:67:1B:B9:2E:2F:DF:7F:15:E9:9A:23:12:2F:89 ValidityWed, 20 Sep 2023 02:26:53 GMT - Tue, 19 Dec 2023 02:26:52 GMT
File typeASCII text, with very long lines (48351), with no line terminators Hashfebd5bfc829d7c8aa363e93e2e61f414 10d66213a9249bea47b15acf295323f01d217ef0 ff391f38fc73325f58d0626b9415ac121f1461407d74e86ebddefd8180050d76
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /j/m/qqqq.js HTTP/1.1
Host: theusualsuspectz.biz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://btdb.theproxy.app/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 22 Oct 2023 15:19:43 GMT
content-type: application/javascript; charset=UTF-8
last-modified: Tue, 02 Mar 2021 03:16:06 GMT
etag: W/"603dadf6-bcdf"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
cf-cache-status: HIT
age: 23200801
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Cqtkh9a%2BdVPTkQ9%2FTvItP4xQ%2Bav3zsgXkDSaCkSD6GZmyQeC9ryhXhJoScNLpmjud1DUI%2BfBa88o5dXZluh9H7nUntTckWhm7X40k4pqFmAD3IHt5XGNc%2B1gtqN2AUXWArPdf5moIw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 81a2b8621a08b4ff-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| GET use.fontawesome.com/releases/v5.8.1/webfonts/fa-solid-900.woff2 | 172.64.103.11 | 200 OK | 74 kB |
URL GET HTTP/2use.fontawesome.com/releases/v5.8.1/webfonts/fa-solid-900.woff2 IP172.64.103.11:443
Requested byhttps://btdb.theproxy.app/ CertificateIssuerCloudflare, Inc. Subjectuse.fontawesome.com FingerprintCB:BE:6B:C4:5F:DF:18:7A:C3:AD:BF:6C:40:36:18:9F:E2:99:7F:78 ValidityThu, 12 Oct 2023 00:00:00 GMT - Thu, 10 Oct 2024 23:59:59 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 74256, version 329.-17761\012- data Hash418dad87601f9c8abd0e5798c0dc1feb a6b003ef506e92d05cde73adf67487d7fd7ec6df f18c486a80175cf02fee0e05c2b4acd86c04cdbaecec61c1ef91f920509b5efe
GET /releases/v5.8.1/webfonts/fa-solid-900.woff2 HTTP/1.1
Host: use.fontawesome.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://btdb.theproxy.app
DNT: 1
Connection: keep-alive
Referer: https://use.fontawesome.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 22 Oct 2023 15:19:44 GMT
content-type: font/woff2
content-length: 74256
access-control-allow-origin: *
cache-control: max-age=31556926
etag: "418dad87601f9c8abd0e5798c0dc1feb"
last-modified: Fri, 22 Sep 2023 01:45:57 GMT
vary: Origin, Accept-Encoding
cf-cache-status: HIT
age: 4871
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=63vP4R%2Ff4oDQTIkaDW36Qyui0Dtd1Xs6CKk9te4xEIQkPcW8oFrKpEHqPgPh2ErhXgjzquOn02z1lPHHKcYDhUBEc4GCl89A5tigv%2FKr3jy7O53cEmwXdhNZ7nQxM4RtfG2NWS9%2B"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 81a2b8664d8663bf-LHR
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| GET btdb.theproxy.app/favicon.ico | 104.21.53.254 | 200 OK | 15 kB |
URL GET HTTP/3btdb.theproxy.app/favicon.ico IP104.21.53.254:443
Requested byhttps://btdb.theproxy.app/ CertificateIssuerLet's Encrypt Subjecttheproxy.app Fingerprint31:97:DF:5C:93:B5:A8:B3:20:29:F7:D1:B1:71:02:4B:39:D2:73:BF ValiditySat, 09 Sep 2023 04:44:49 GMT - Fri, 08 Dec 2023 04:44:48 GMT
File typeMS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel\012- data Hash78dd0e186388a14197d9f79a10712145 a3250a837f99f52cbdd470c8b035aced9c3853d9 9097c15555c5392a97778f6a3860d7648b8ff59d06b28d2bae1d147052fd8ddc
GET /favicon.ico HTTP/1.1
Host: btdb.theproxy.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://btdb.theproxy.app/
Cookie: view=1; PHPSESSID=enhq7amqd3pur2007be7qbmsqs
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 22 Oct 2023 15:19:45 GMT
content-type: image/x-icon
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
access-control-allow-origin: *
cf-cache-status: BYPASS
set-cookie: view=1; expires=Mon, 23-Oct-2023 15:19:45 GMT; Max-Age=86400
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=fuFTNHwirbQCIa8HNAsKklbt3DM6CkZe02ROu9VaxrXMdgE10v4tLHUer99akRDyKW50E1pCSPm%2FXBMwPaoMV2a8NBJa0X4otsFFiGrVp8fJ1K6wNsxVTDWaa3HZsj0l0bfC4Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 81a2b86cfbb55689-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| GET btdb.theproxy.app/files/style.css?v=3 | 104.21.53.254 | 200 OK | 15 kB |
URL GET HTTP/3btdb.theproxy.app/files/style.css?v=3 IP104.21.53.254:443
Requested byhttps://btdb.theproxy.app/ CertificateIssuerLet's Encrypt Subjecttheproxy.app Fingerprint31:97:DF:5C:93:B5:A8:B3:20:29:F7:D1:B1:71:02:4B:39:D2:73:BF ValiditySat, 09 Sep 2023 04:44:49 GMT - Fri, 08 Dec 2023 04:44:48 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /files/style.css?v=3 HTTP/1.1
Host: btdb.theproxy.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://btdb.theproxy.app/
Cookie: view=1; PHPSESSID=enhq7amqd3pur2007be7qbmsqs
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 22 Oct 2023 15:19:43 GMT
content-type: text/css;charset=UTF-8
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
access-control-allow-origin: *
cf-cache-status: BYPASS
set-cookie: view=1; expires=Mon, 23-Oct-2023 15:19:43 GMT; Max-Age=86400
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=t4y32nQI6jO0dRo%2FQNvcyi4X21cHCANfs2ZB9kMjAZbEZbQ%2FAQC3jqb3VnX4QjB%2FaGQEY2B2hzZKpc%2BQbFmfEPnobgfRm2sHx5Xd88wDWYEowIx0baaIkkuvArLs8UjCNKNN5A%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 81a2b8615a6b5689-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| GET btdb.theproxy.app/app/x12.js | 104.21.53.254 | 200 OK | 11 kB |
URL GET HTTP/3btdb.theproxy.app/app/x12.js IP104.21.53.254:443
Requested byhttps://btdb.theproxy.app/ CertificateIssuerLet's Encrypt Subjecttheproxy.app Fingerprint31:97:DF:5C:93:B5:A8:B3:20:29:F7:D1:B1:71:02:4B:39:D2:73:BF ValiditySat, 09 Sep 2023 04:44:49 GMT - Fri, 08 Dec 2023 04:44:48 GMT
File typeASCII text, with very long lines (11180), with no line terminators Hash94efa3c05291ac5cccd32cc3a11c9724 3a033e4d6f5e5eaf76030a81c8a05c619de436c2 58c753f7ffcb584d2ed43470ec9bdd30a4cd4723f368d83de6163413d5555102
GET /app/x12.js HTTP/1.1
Host: btdb.theproxy.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://btdb.theproxy.app/
Cookie: view=1; PHPSESSID=enhq7amqd3pur2007be7qbmsqs
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 22 Oct 2023 15:19:43 GMT
content-type: application/javascript; charset=UTF-8
last-modified: Tue, 15 Sep 2020 18:26:18 GMT
etag: W/"5f61074a-2bac"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=tOEy7V3daqF71d3iFZklWE5wuPH%2FFfB%2FAveBn00hgOkXOWnOiyg36LpdL%2FP1ZXavUnTEw7K57sNFdZ2Q7D85TkP1zQxIguIDwiKndS%2Bpb3Vzj5HR27SVb3nbr%2FKpzO0K4y00CA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 81a2b861bab35689-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| GET matomo.hellohi.me/matomo.js | 172.67.219.82 | 200 OK | 66 kB |
URL GET HTTP/2matomo.hellohi.me/matomo.js IP172.67.219.82:443
Requested byhttps://btdb.theproxy.app/ CertificateIssuerCloudflare, Inc. Subjectsni.cloudflaressl.com Fingerprint3B:19:FF:F4:F0:F2:6F:BE:66:7F:4C:A0:E8:02:E6:F4:94:A8:6C:68 ValidityWed, 01 Mar 2023 00:00:00 GMT - Thu, 29 Feb 2024 23:59:59 GMT
File typeASCII text, with very long lines (1601) Hasha3a7245d6daf7d31d2069c0ba05879dd ec1bf464889e71aec1ced6d8361a26c76e4a1460 d7fc375178c93a2fc15fd888e30170eedf4ef3d04497e7f951ab7bfe0c921693
GET /matomo.js HTTP/1.1
Host: matomo.hellohi.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://btdb.theproxy.app/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 22 Oct 2023 15:19:44 GMT
content-type: application/javascript; charset=UTF-8
last-modified: Thu, 19 Oct 2023 04:58:52 GMT
etag: W/"6530b78c-10132"
expires: Sun, 22 Oct 2023 16:18:27 GMT
cache-control: public, max-age=14400
pragma: public
cf-cache-status: HIT
age: 77
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=O2ZnBfp5ydP6qVgiu9lIixpAqG%2BRpvwGNc0HOYv2UVYKInmsfLPbh5YacFGCxdGSHGkgY%2FXJSikn75JQBp%2BWgGxQgwyKhGzabws5QLJV2ofnCNBzE7ZokJPVuJRtqTKKTEq1CA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 81a2b8689c920b3d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| GET maxcdn.bootstrapcdn.com/bootstrap/3.3.0/js/bootstrap.min.js | 104.18.11.207 | 200 OK | 35 kB |
URL GET HTTP/2maxcdn.bootstrapcdn.com/bootstrap/3.3.0/js/bootstrap.min.js IP104.18.11.207:443
Requested byhttps://btdb.theproxy.app/ CertificateIssuerCloudflare, Inc. Subjectsni.cloudflaressl.com Fingerprint5B:F7:8F:50:AD:E5:5B:5E:8C:4A:39:3D:0C:98:E8:8C:18:4B:3D:8A ValidityFri, 30 Dec 2022 00:00:00 GMT - Sat, 30 Dec 2023 23:59:59 GMT
File typeASCII text, with very long lines (32108) Hash281cd50dd9f58c5550620fc148a7bc39 dfb8410ffc10a57d69b81620087c5a0b6027765a 484081bfe6c76d77610eb71a6e71206fe5304d62c037f058b403592192069306
GET /bootstrap/3.3.0/js/bootstrap.min.js HTTP/1.1
Host: maxcdn.bootstrapcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://btdb.theproxy.app/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 22 Oct 2023 15:19:43 GMT
content-type: application/javascript; charset=utf-8
vary: Accept-Encoding
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
cdn-edgestorageid: 565, 617, 617
last-modified: Mon, 25 Jan 2021 22:03:57 GMT
cdn-cachedat: 2021-06-08 21:25:28
cdn-requestpullsuccess: True
cdn-requestpullcode: 200
cache-control: public, max-age=31919000
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
x-content-type-options: nosniff
cdn-requestid: 228ac7b1bbec9f47d120a9620e4c6c75
cdn-status: 200
cdn-cache: HIT
cf-cache-status: HIT
age: 11901215
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 81a2b861bd3356c9-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| GET btdb.theproxy.app/files/logo.png | 104.21.53.254 | 200 OK | 1.9 kB |
URL GET HTTP/3btdb.theproxy.app/files/logo.png IP104.21.53.254:443
Requested byhttps://btdb.theproxy.app/ CertificateIssuerLet's Encrypt Subjecttheproxy.app Fingerprint31:97:DF:5C:93:B5:A8:B3:20:29:F7:D1:B1:71:02:4B:39:D2:73:BF ValiditySat, 09 Sep 2023 04:44:49 GMT - Fri, 08 Dec 2023 04:44:48 GMT
File typePNG image data, 304 x 93, 8-bit colormap, non-interlaced\012- data Hash6f645b7af1f3bdca67aa63b6ff66feff c2f7b59a1056156f2f626b00d1090e154299ddfd bbf464c6924486f9dac61ca28427e1f17e4a4f02cc5f3e4009e48241622636f9
GET /files/logo.png HTTP/1.1
Host: btdb.theproxy.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://btdb.theproxy.app/
Cookie: view=1; PHPSESSID=enhq7amqd3pur2007be7qbmsqs
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 22 Oct 2023 15:19:43 GMT
content-type: image/png
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
access-control-allow-origin: *
cf-cache-status: BYPASS
set-cookie: view=1; expires=Mon, 23-Oct-2023 15:19:43 GMT; Max-Age=86400
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=IQ%2FMu5IGB2BAuxnFkd7u%2FmwbW1zhAbAyc8fFNt5qUn%2BsF6tisOJHBwLLgfnf4NoeM%2B8FZ4ygq%2BNAg%2FhAMrliFLiSymJLZnfPgh%2FQ6UQCpZg2it34VpefGJaBDN%2FRqtEoAHWWYg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 81a2b8618a8c5689-OSL
alt-svc: h3=":443"; ma=86400
|
|
| GET btdb.theproxy.app/hy.js?q22q2q2 | 104.21.53.254 | 200 OK | 56 kB |
URL GET HTTP/3btdb.theproxy.app/hy.js?q22q2q2 IP104.21.53.254:443
Requested byhttps://btdb.theproxy.app/ CertificateIssuerLet's Encrypt Subjecttheproxy.app Fingerprint31:97:DF:5C:93:B5:A8:B3:20:29:F7:D1:B1:71:02:4B:39:D2:73:BF ValiditySat, 09 Sep 2023 04:44:49 GMT - Fri, 08 Dec 2023 04:44:48 GMT
File typeASCII text, with very long lines (56131), with no line terminators Hash667d77da844b6d5ad62b2f26e77b4b12 01ae61192a38af73a93c67468fb8271d7bbfa4f6 f240ce7fa62cd81d92f29081815f2cd2376ea6867887d17d5625009ebdf355b1
GET /hy.js?q22q2q2 HTTP/1.1
Host: btdb.theproxy.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://btdb.theproxy.app/
Cookie: view=1; PHPSESSID=enhq7amqd3pur2007be7qbmsqs
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 22 Oct 2023 15:19:43 GMT
content-type: application/javascript; charset=UTF-8
last-modified: Tue, 02 Mar 2021 05:53:48 GMT
etag: W/"603dd2ec-db43"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2B7%2BqaXVN9pRRiMlCb7Un%2BcxJ89NgGYjrMPrstXbdeJLckOy%2FP25mz4pUEdW45xzRiTdhCSSWTlMyPSHLxvsHpBGfi9%2Br%2BKme72JtpQdViLU6llI7yhlyAzTGoyEs9ZclWjxcAA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 81a2b8618a905689-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| POST btdb.theproxy.app/user.php | 104.21.53.254 | 200 OK | 0 B |
URL POST HTTP/3btdb.theproxy.app/user.php IP104.21.53.254:443
Requested byhttps://btdb.theproxy.app/ CertificateIssuerLet's Encrypt Subjecttheproxy.app Fingerprint31:97:DF:5C:93:B5:A8:B3:20:29:F7:D1:B1:71:02:4B:39:D2:73:BF ValiditySat, 09 Sep 2023 04:44:49 GMT - Fri, 08 Dec 2023 04:44:48 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /user.php HTTP/1.1
Host: btdb.theproxy.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
X-Requested-With: XMLHttpRequest
Content-Length: 39
Origin: https://btdb.theproxy.app
DNT: 1
Connection: keep-alive
Referer: https://btdb.theproxy.app/
Cookie: view=1; PHPSESSID=enhq7amqd3pur2007be7qbmsqs
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 22 Oct 2023 15:19:44 GMT
content-type: text/html; charset=UTF-8
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=C0LXbegkFOWLJ2IJCA%2FmUBtOljJsAEJjVzyp6rLOFeSibaxGX8vqdUpX%2BeCqJ5pw%2BBB3uFu9%2FYZ83rdDo4ArFP6J06VP1P36cCeUS6h12XrkFEvrEcRtGhu7FaipMgi0JdHxTg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 81a2b867ffad5689-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| | 104.21.53.254 | 200 OK | 126 kB |
URL User Request GET HTTP/2IP104.21.53.254:443
CertificateIssuerLet's Encrypt Subjecttheproxy.app Fingerprint31:97:DF:5C:93:B5:A8:B3:20:29:F7:D1:B1:71:02:4B:39:D2:73:BF ValiditySat, 09 Sep 2023 04:44:49 GMT - Fri, 08 Dec 2023 04:44:48 GMT
Size126 kB (126472 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: btdb.theproxy.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 22 Oct 2023 15:19:43 GMT
content-type: text/html;charset=UTF-8
set-cookie: view=1; expires=Mon, 23-Oct-2023 15:19:43 GMT; Max-Age=86400
PHPSESSID=enhq7amqd3pur2007be7qbmsqs; path=/
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=TV5He%2FNoS9%2Fqp15fieDZ65fqyX0DSDqHsPucIv%2F%2FReiG%2BxBMO5br4%2FaUdC4NZAyPpFztPpWUrGF%2F670LsU%2BIc2zOggeYhN0YT5JDhlWQ7EnyNpNRQzslDJdEBnRAkzpJ7xFyQw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 81a2b85d7fe3b4eb-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| GET btdb.theproxy.app/cdn-cgi/apps/head/eonMsSaWoPGHqHdsBoYDBPjD6UM.js | 104.21.53.254 | 404 Not Found | 0 B |
URL GET HTTP/3btdb.theproxy.app/cdn-cgi/apps/head/eonMsSaWoPGHqHdsBoYDBPjD6UM.js IP104.21.53.254:443
Requested byhttps://btdb.theproxy.app/ CertificateIssuerLet's Encrypt Subjecttheproxy.app Fingerprint31:97:DF:5C:93:B5:A8:B3:20:29:F7:D1:B1:71:02:4B:39:D2:73:BF ValiditySat, 09 Sep 2023 04:44:49 GMT - Fri, 08 Dec 2023 04:44:48 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cdn-cgi/apps/head/eonMsSaWoPGHqHdsBoYDBPjD6UM.js HTTP/1.1
Host: btdb.theproxy.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://btdb.theproxy.app/
Cookie: view=1; PHPSESSID=enhq7amqd3pur2007be7qbmsqs
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
date: Sun, 22 Oct 2023 15:19:43 GMT
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=9A9A2%2BdPKu1UeCWGS9%2F6aiNNt76vTpEZ%2B681egdFJOqZKAOtFsZKgTlF1ff%2BY77g0pltnIDUk4ZhMSKhOqw7n0P1so9A0HAFxT3bVwfffCi1lB9v2ycdQ6hAOIFw6ikd%2Bxt%2F1w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 81a2b8615a535689-OSL
alt-svc: h3=":443"; ma=86400
|
|
| GET btdb.theproxy.app/files/font-awesome.min.css | 104.21.53.254 | 200 OK | 32 kB |
URL GET HTTP/3btdb.theproxy.app/files/font-awesome.min.css IP104.21.53.254:443
Requested byhttps://btdb.theproxy.app/ CertificateIssuerLet's Encrypt Subjecttheproxy.app Fingerprint31:97:DF:5C:93:B5:A8:B3:20:29:F7:D1:B1:71:02:4B:39:D2:73:BF ValiditySat, 09 Sep 2023 04:44:49 GMT - Fri, 08 Dec 2023 04:44:48 GMT
File typeASCII text, with very long lines (30808) Hash617e867a0b0f815f3bb65942971a26e3 542160bc1c9a120eb1660f11d4426d9e9cbb5ce3 d802f77b468c09dbaf124f8fffc9de28bad80b11589d0652deee6c06b871ea4f
GET /files/font-awesome.min.css HTTP/1.1
Host: btdb.theproxy.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://btdb.theproxy.app/
Cookie: view=1; PHPSESSID=enhq7amqd3pur2007be7qbmsqs
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 22 Oct 2023 15:19:43 GMT
content-type: text/css;charset=UTF-8
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
access-control-allow-origin: *
cf-cache-status: BYPASS
set-cookie: view=1; expires=Mon, 23-Oct-2023 15:19:43 GMT; Max-Age=86400
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=1isciXqNCpOBnTab0njnXUilXvC4N0gqzbyvFMdTjy8Z9Jw%2BaW6Ql7CKUFKQxMHezm%2Fx66Gc5CtapOaXR2BucX4DtGQzR7M2%2FYzvcSf6XNeL5NfKi22r%2BgkOR%2Be7gcZhsRa9sg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 81a2b8615a725689-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| GET btdb.theproxy.app/zpp/zpp4.js?q22q2q2 | 104.21.53.254 | 200 OK | 39 kB |
URL GET HTTP/3btdb.theproxy.app/zpp/zpp4.js?q22q2q2 IP104.21.53.254:443
Requested byhttps://btdb.theproxy.app/ CertificateIssuerLet's Encrypt Subjecttheproxy.app Fingerprint31:97:DF:5C:93:B5:A8:B3:20:29:F7:D1:B1:71:02:4B:39:D2:73:BF ValiditySat, 09 Sep 2023 04:44:49 GMT - Fri, 08 Dec 2023 04:44:48 GMT
File typeASCII text, with very long lines (38995), with no line terminators Hash7dc63553536847077855df4f82f1ec18 146c3aac34cb4e7e1e9c692ccd0161b2e4f018de 3a18b1964d1d209c46d754459b9ef98d4a9a85065e245f8311be727ffee3f960
GET /zpp/zpp4.js?q22q2q2 HTTP/1.1
Host: btdb.theproxy.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://btdb.theproxy.app/
Cookie: view=1; PHPSESSID=enhq7amqd3pur2007be7qbmsqs
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 22 Oct 2023 15:19:43 GMT
content-type: application/javascript; charset=UTF-8
last-modified: Tue, 02 Mar 2021 05:53:53 GMT
etag: W/"603dd2f1-9853"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=iW0M%2FJNgB3yig2K7pOcqa0qaK03IUiLZ3dIz4kYx6AOaT2DOKG0uwulNao%2BEpPy%2BeGIZww2dfQzQaa7HYgDMxF1aM3HxIesWozF6YI7BBYJLKbhNq7vG7TIkyQ1arl62vfpugg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 81a2b8618a985689-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|