| sltrooms.cc/assets/images/404.png |  188.114.96.1 | 200 OK | 46 kB |
URL sltrooms.cc/assets/images/404.png IP188.114.96.1:0
File typePNG image data, 512 x 320, 8-bit/color RGBA, non-interlaced Hash2afa382da2bcb279aefabd75a66d996c 3aee81cc9b5f6f1b25d56ad173dc7495474d8242 8d756c141eb07e13e560553afe21ef18fed4bf0b5323c78ff344bda437c40f9d
GET /assets/images/404.png HTTP/1.1
Host: sltrooms.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sltrooms.cc/KvMQJX0ENxmmDZ0Ozeq0HgDGAmuO-_LBSPVA267JZPm-9f5ZF9BNKaaWdzR1CF7dEECvQ2SsQDPaku4RbsaQcA==
Cookie: userID=cPiP5-F6WojtmylHMxU2KIoJlD-SOpOLppSpdCMSh; sound_on_comment=on; sound_on_items=on; username=Gwen
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 15 Dec 2024 01:59:18 GMT
content-type: image/png
content-length: 45939
last-modified: Sun, 10 Nov 2024 20:46:51 GMT
etag: "67311bbb-b373"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6C0JMjoORFTndmnJCaImGpnAKROGi%2Bxq%2BV2FRSxypGUq4%2FQwTTQq4p3E%2BHseNZmi%2FRYbeyp3HEu%2F2jBG13w76680FWn%2BuYbNeVCTX0M2Qo4gYCCyTU0%2BZSXhHwfTKw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8f22d561eadc56c0-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=6771&min_rtt=1563&rtt_var=6932&sent=165&recv=29&lost=0&retrans=0&sent_bytes=173941&recv_bytes=7425&delivery_rate=9036826&cwnd=91200&unsent_bytes=0&cid=f0f3055f1cb299e4&ts=540&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| sltrooms.cc/assets/js/vendor/notifications/sweet_alert.min.js | 188.114.96.1 | 200 OK | 16 kB |
URL sltrooms.cc/assets/js/vendor/notifications/sweet_alert.min.js IP188.114.96.1:0
File typegzip compressed data, from Unix Hash32d6c0b073ed23581a3dce268bfdce8f 1a1679c11cb34c1dbedd8b33a0d57d6a7ca49fff a519fe8d7f6fc76b5114e64374ff5a55edccbec918a015f01afb089c093f4387
GET /assets/js/vendor/notifications/sweet_alert.min.js HTTP/1.1
Host: sltrooms.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sltrooms.cc/KvMQJX0ENxmmDZ0Ozeq0HgDGAmuO-_LBSPVA267JZPm-9f5ZF9BNKaaWdzR1CF7dEECvQ2SsQDPaku4RbsaQcA==
Cookie: userID=cPiP5-F6WojtmylHMxU2KIoJlD-SOpOLppSpdCMSh; sound_on_comment=on; sound_on_items=on; username=Gwen
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 15 Dec 2024 01:59:18 GMT
content-type: application/javascript
last-modified: Fri, 08 Nov 2024 21:00:52 GMT
vary: Accept-Encoding
etag: W/"672e7c04-aa55"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: REVALIDATED
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Ijs%2B3dj3ZaoFoVsw3vxheG3sPDlPN7jW%2F%2FYgTHHr6WvPkLgqCU6DGqrfVyG2%2BwCGP4geQ4tY98%2FwT8Y2BqMnUJsLNTIU1%2BtWKp2XmqW9IJtEXjuUDJmHk63idstPxQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8f22d561fadf56c0-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=6771&min_rtt=1563&rtt_var=6932&sent=243&recv=29&lost=0&retrans=0&sent_bytes=265141&recv_bytes=7425&delivery_rate=9036826&cwnd=91200&unsent_bytes=0&cid=f0f3055f1cb299e4&ts=544&x=1", cfExtPri, cfHdrFlush;dur=2
|
|
| sltrooms.cc/assets/js/vendor/notifications/noty.min.js | 188.114.96.1 | 200 OK | 229 kB |
URL sltrooms.cc/assets/js/vendor/notifications/noty.min.js IP188.114.96.1:0
File typegzip compressed data, from Unix Size229 kB (228560 bytes) Hashbbb40afded5d0771878d327eb993baef 995873befff418ebb2ce7208eac837819bc8e0d1 f06bbbc84a994c96526caed2c87802fa64dacb5ae5d4604068997541f5a7d10f
GET /assets/js/vendor/notifications/noty.min.js HTTP/1.1
Host: sltrooms.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sltrooms.cc/KvMQJX0ENxmmDZ0Ozeq0HgDGAmuO-_LBSPVA267JZPm-9f5ZF9BNKaaWdzR1CF7dEECvQ2SsQDPaku4RbsaQcA==
Cookie: userID=cPiP5-F6WojtmylHMxU2KIoJlD-SOpOLppSpdCMSh; sound_on_comment=on; sound_on_items=on; username=Gwen
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 15 Dec 2024 01:59:18 GMT
content-type: application/javascript
last-modified: Fri, 08 Nov 2024 21:00:52 GMT
vary: Accept-Encoding
etag: W/"672e7c04-7ab3"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: REVALIDATED
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ADaRcfKS1ZMYdTvTz2H6saNKjbGOKp1C%2FCGvHcsuyxcaKNGp9ZkQXWUsHK%2FVOiSwQ7CPjZMm%2Fo%2Fxvt1hGJFjuccagsZpvHN09mjtdfObwTx%2BO9hyHz5xj2t%2FXrY0Eg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8f22d561fade56c0-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=6375&min_rtt=1563&rtt_var=5991&sent=245&recv=30&lost=0&retrans=0&sent_bytes=266720&recv_bytes=7471&delivery_rate=17007688&cwnd=176400&unsent_bytes=0&cid=f0f3055f1cb299e4&ts=546&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| sltrooms.cc/assets/js/proms.js?ver=2.4.1 | 188.114.96.1 | 200 OK | 2.0 kB |
URL sltrooms.cc/assets/js/proms.js?ver=2.4.1 IP188.114.96.1:0
File typegzip compressed data, from Unix Hash811823ee3344ccf666584b486e5863e8 d5bea8c6e7c52ff70a2f97a7309d676c7e9d6268 4575f2ce70aa427ab05a8c8a3ab3c8e66a794b6d4a95af496767128e688e978f
GET /assets/js/proms.js?ver=2.4.1 HTTP/1.1
Host: sltrooms.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sltrooms.cc/KvMQJX0ENxmmDZ0Ozeq0HgDGAmuO-_LBSPVA267JZPm-9f5ZF9BNKaaWdzR1CF7dEECvQ2SsQDPaku4RbsaQcA==
Cookie: userID=cPiP5-F6WojtmylHMxU2KIoJlD-SOpOLppSpdCMSh; sound_on_comment=on; sound_on_items=on; username=Gwen
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 15 Dec 2024 01:59:18 GMT
content-type: application/javascript
last-modified: Sat, 14 Dec 2024 06:43:37 GMT
vary: Accept-Encoding
etag: W/"675d2919-1146"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: REVALIDATED
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9DFei6jPc8I1CIl7IzkWxr7zXBtTnfnK2q4lH%2Bd1gsgxLl0nSW2pFjmhWSd08awCk87bte8qaw2OWgHQEL%2FLVtgbFS1rSOXBht%2F1BkqFSZWEmQDI0%2Bd1wSZCkS2Rpw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8f22d561eada56c0-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=6771&min_rtt=1563&rtt_var=6932&sent=235&recv=29&lost=0&retrans=0&sent_bytes=257372&recv_bytes=7425&delivery_rate=9036826&cwnd=91200&unsent_bytes=0&cid=f0f3055f1cb299e4&ts=542&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| sltrooms.cc/assets/js/js.cookie.min.js | 188.114.96.1 | 200 OK | 3.3 kB |
URL sltrooms.cc/assets/js/js.cookie.min.js IP188.114.96.1:0
File typegzip compressed data, from Unix Hash4fa0019954e763f26a0ce0bdc72c43f3 c8a80bc93e5e666b4526631241ea9bf1a026820c 0bfdaa52d4d7f90014d05b51680a43eaab92a23c8011b360edbedbe1efa7ae41
GET /assets/js/js.cookie.min.js HTTP/1.1
Host: sltrooms.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sltrooms.cc/KvMQJX0ENxmmDZ0Ozeq0HgDGAmuO-_LBSPVA267JZPm-9f5ZF9BNKaaWdzR1CF7dEECvQ2SsQDPaku4RbsaQcA==
Cookie: userID=cPiP5-F6WojtmylHMxU2KIoJlD-SOpOLppSpdCMSh; sound_on_comment=on; sound_on_items=on; username=Gwen
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 15 Dec 2024 01:59:18 GMT
content-type: application/javascript
last-modified: Fri, 08 Nov 2024 21:00:49 GMT
vary: Accept-Encoding
etag: W/"672e7c01-695"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: REVALIDATED
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6F90b4d6jsvi747cbFb92Sb%2BgWh%2B1aj6kxlMp78GQ8x%2FAGVfXdyJNyILWZONPLjP9wWJrB%2BFoRTcQX3zDqKQWWZlXOQ4SALy1zz4Aegf4rBRXzr1Idwp9hFSw2OXgQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8f22d561fadd56c0-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=6771&min_rtt=1563&rtt_var=6932&sent=243&recv=29&lost=0&retrans=0&sent_bytes=265141&recv_bytes=7425&delivery_rate=9036826&cwnd=91200&unsent_bytes=0&cid=f0f3055f1cb299e4&ts=545&x=1", cfExtPri, cfHdrFlush;dur=1
|
|
| sltrooms.cc/assets/css/ltr/all.min.css | 188.114.96.1 | 200 OK | 120 kB |
URL sltrooms.cc/assets/css/ltr/all.min.css IP188.114.96.1:0
File typeUnicode text, UTF-8 text, with very long lines (65533), with no line terminators Size120 kB (119995 bytes) Hash1d0288bf402032f54fdf806702db148f d1a3810b0c6bbb6e73e808e6b789af5b2f8cfe9d 84f35aa1506ed917f932402a90f017fd7b1e3146edc02be2ada0e3e5eb5b4890
GET /assets/css/ltr/all.min.css HTTP/1.1
Host: sltrooms.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sltrooms.cc/KvMQJX0ENxmmDZ0Ozeq0HgDGAmuO-_LBSPVA267JZPm-9f5ZF9BNKaaWdzR1CF7dEECvQ2SsQDPaku4RbsaQcA==
Cookie: userID=cPiP5-F6WojtmylHMxU2KIoJlD-SOpOLppSpdCMSh; sound_on_comment=on; sound_on_items=on; username=Gwen
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 15 Dec 2024 01:59:18 GMT
content-type: text/css
last-modified: Fri, 08 Nov 2024 21:00:49 GMT
vary: Accept-Encoding
etag: W/"672e7c01-b02ab"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: REVALIDATED
priority: u=2,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7DRuUDM8UTDoG4oRR720cgKJscYfc2zgpH4IyxRekjLDl%2F1hA5th6h4tX5VHxU%2B3V28RS5RFCRIfvqymSeX0MZIMNtOh5YAphMj7e1J%2FSvcHB%2BdsXINHo%2BffdphPGA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8f22d561dac956c0-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=16337&min_rtt=5610&rtt_var=9766&sent=21&recv=20&lost=0&retrans=0&sent_bytes=4304&recv_bytes=7022&delivery_rate=105876&cwnd=12000&unsent_bytes=0&cid=f0f3055f1cb299e4&ts=469&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| sltrooms.cc/assets/favicon.png | 188.114.96.1 | 200 OK | 47 kB |
URL sltrooms.cc/assets/favicon.png IP188.114.96.1:0
File typePNG image data, 168 x 179, 8-bit/color RGBA, non-interlaced Hash0bd02aa268f89563c6efc0a0f38fd83a 7d7b802856650cf55d9fc4f164e02f7a41885b74 2599df4f617a3207f39b35ad047e17f3dc83d96ef30650e47b1604ca2c232566
GET /assets/favicon.png HTTP/1.1
Host: sltrooms.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sltrooms.cc/KvMQJX0ENxmmDZ0Ozeq0HgDGAmuO-_LBSPVA267JZPm-9f5ZF9BNKaaWdzR1CF7dEECvQ2SsQDPaku4RbsaQcA==
Cookie: userID=cPiP5-F6WojtmylHMxU2KIoJlD-SOpOLppSpdCMSh; sound_on_comment=on; sound_on_items=on; username=Gwen
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 15 Dec 2024 01:59:18 GMT
content-type: image/png
content-length: 47155
last-modified: Fri, 08 Nov 2024 21:00:49 GMT
etag: "672e7c01-b833"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
priority: u=6,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=72cXndG5h1WGSVq1ZI2xI2BryOuhNCwvJG4ptQ1MKr%2BGwlHSE8HRnFFhqp3CezoS46xaUsv3aVZbVEe1NEtNLvW0mM9UeaLqLm8fGHZqy23IOOV6aDaqCYPqU1p0DA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8f22d565cd7956c0-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=4815&min_rtt=1563&rtt_var=3206&sent=589&recv=37&lost=0&retrans=0&sent_bytes=673226&recv_bytes=8550&delivery_rate=4253701&cwnd=352800&unsent_bytes=0&cid=f0f3055f1cb299e4&ts=1158&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| POST medium-love.com/Yv2-xxpyZ.Wz5A0_ZCGDFE0FY-TH9IyJcKm_lMkNPOTPR-mRZSTTYUy_MWjXhYjZZ-WbQcydMeT_NgihOiTjR-mlMmGnEo4_ZqTrdsktM-mvYwyxMyz_QAyBNCjDg-3F | 88.85.68.219 | 200 OK | 0 B |
URL POST HTTP/2medium-love.com/Yv2-xxpyZ.Wz5A0_ZCGDFE0FY-TH9IyJcKm_lMkNPOTPR-mRZSTTYUy_MWjXhYjZZ-WbQcydMeT_NgihOiTjR-mlMmGnEo4_ZqTrdsktM-mvYwyxMyz_QAyBNCjDg-3F IP88.85.68.219:443
Requested byhttps://sltrooms.cc/KvMQJX0ENxmmDZ0Ozeq0HgDGAmuO-_LBSPVA267JZPm-9f5ZF9BNKaaWdzR1CF7dEECvQ2SsQDPaku4RbsaQcA== CertificateIssuerLet's Encrypt Subjectmedium-love.com FingerprintDD:AE:18:7A:D0:C7:6F:ED:A6:54:CD:F4:40:F8:80:95:C1:0E:13:FE ValidityTue, 15 Oct 2024 06:03:02 GMT - Mon, 13 Jan 2025 06:03:01 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
POST /Yv2-xxpyZ.Wz5A0_ZCGDFE0FY-TH9IyJcKm_lMkNPOTPR-mRZSTTYUy_MWjXhYjZZ-WbQcydMeT_NgihOiTjR-mlMmGnEo4_ZqTrdsktM-mvYwyxMyz_QAyBNCjDg-3F HTTP/1.1
Host: medium-love.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 133
Origin: https://sltrooms.cc
DNT: 1
Connection: keep-alive
Referer: https://sltrooms.cc/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 15 Dec 2024 01:59:18 GMT
content-length: 0
expires: Mon, 26 Jul 2011 05:00:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
accept-ch: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-WoW64
x-content-type-options: nosniff
X-Firefox-Spdy: h2
|
|
| GET www.exoticfarmer.pro/ecc874/6f6a08c38596.js |  45.133.44.1 | 200 OK | 71 kB |
URL GET HTTP/2www.exoticfarmer.pro/ecc874/6f6a08c38596.js IP45.133.44.1:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://sltrooms.cc/KvMQJX0ENxmmDZ0Ozeq0HgDGAmuO-_LBSPVA267JZPm-9f5ZF9BNKaaWdzR1CF7dEECvQ2SsQDPaku4RbsaQcA== CertificateIssuerLet's Encrypt Subjectwww.exoticfarmer.pro FingerprintCA:02:AF:62:2C:20:0E:83:6E:11:B1:6D:60:91:A2:7D:AF:39:19:A1 ValidityMon, 09 Dec 2024 07:03:35 GMT - Sun, 09 Mar 2025 07:03:34 GMT
File typegzip compressed data, max speed, from Unix Hashb6adb3d22da51bcdb0aee5de4f69f39f 56814ce8f2050cc6b8f51c4b82deffa896c0100c 9884218a50e92034e3746f35f4986cf091ff9d129e43838470f7f4e3777761c1
GET /ecc874/6f6a08c38596.js HTTP/1.1
Host: www.exoticfarmer.pro
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: text/plain
Origin: https://sltrooms.cc
DNT: 1
Connection: keep-alive
Referer: https://sltrooms.cc/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 15 Dec 2024 01:59:18 GMT
content-type: application/javascript; charset=utf-8
server: nginx
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-headers: Content-Type
cache-control: max-age=172800
content-encoding: gzip
expires: Tue, 17 Dec 2024 01:59:18 GMT
x-proxy-cache: HIT
x-cdn-host-id: ah0543
X-Firefox-Spdy: h2
|
|
| sltrooms.cc/assets/js/bootstrap/bootstrap.bundle.min.js | 188.114.96.1 | 200 OK | 32 kB |
URL sltrooms.cc/assets/js/bootstrap/bootstrap.bundle.min.js IP188.114.96.1:0
File typegzip compressed data, from Unix Hash2428888b55e24feee90856a78ebc4c10 c62152899e4af6aafe1fe3a05b8524fab1c855f4 71f0e1e2b9bc997f383575fa5a6767b033233a5e154cec8e8a79c0897be7ed23
GET /assets/js/bootstrap/bootstrap.bundle.min.js HTTP/1.1
Host: sltrooms.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sltrooms.cc/KvMQJX0ENxmmDZ0Ozeq0HgDGAmuO-_LBSPVA267JZPm-9f5ZF9BNKaaWdzR1CF7dEECvQ2SsQDPaku4RbsaQcA==
Cookie: userID=cPiP5-F6WojtmylHMxU2KIoJlD-SOpOLppSpdCMSh; sound_on_comment=on; sound_on_items=on; username=Gwen
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 15 Dec 2024 01:59:18 GMT
content-type: application/javascript
last-modified: Fri, 08 Nov 2024 21:00:52 GMT
vary: Accept-Encoding
etag: W/"672e7c04-13a70"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: REVALIDATED
priority: u=2,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=lEYaPyg%2BEOEnIggiXCbTBJaWmKrlhrkCgfzCaGei9nnZq7XSvbKqY8XTfrAPXV83mxN26%2B1FujlB32G7w%2BOmkcmhX2hE%2FWIk9QtNiULIjcBDyUAuVTmofpQnyXECSA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8f22d561ead656c0-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=9754&min_rtt=1563&rtt_var=9976&sent=125&recv=25&lost=0&retrans=0&sent_bytes=128024&recv_bytes=7242&delivery_rate=11811788&cwnd=91200&unsent_bytes=0&cid=f0f3055f1cb299e4&ts=476&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| GET www.exoticfarmer.pro/ecc874/6f6a08c38596.js | 45.133.44.1 | 200 OK | 35 kB |
URL GET HTTP/2www.exoticfarmer.pro/ecc874/6f6a08c38596.js IP45.133.44.1:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://sltrooms.cc/KvMQJX0ENxmmDZ0Ozeq0HgDGAmuO-_LBSPVA267JZPm-9f5ZF9BNKaaWdzR1CF7dEECvQ2SsQDPaku4RbsaQcA== CertificateIssuerLet's Encrypt Subjectwww.exoticfarmer.pro FingerprintCA:02:AF:62:2C:20:0E:83:6E:11:B1:6D:60:91:A2:7D:AF:39:19:A1 ValidityMon, 09 Dec 2024 07:03:35 GMT - Sun, 09 Mar 2025 07:03:34 GMT
File typegzip compressed data, max speed, from Unix Hashef94684f35e121ba8eb5f4690de16934 2c75cd3423f46d83b8d955c94dbba9eab484a09b 3bdb215fb0590f3de09fe92787514894820ec9ae905643a9bbcdf9669e6da3f5
GET /ecc874/6f6a08c38596.js HTTP/1.1
Host: www.exoticfarmer.pro
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sltrooms.cc/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 15 Dec 2024 01:59:18 GMT
content-type: application/javascript; charset=utf-8
server: nginx
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-headers: Content-Type
cache-control: max-age=172800
content-encoding: gzip
expires: Tue, 17 Dec 2024 01:59:18 GMT
x-proxy-cache: HIT
x-cdn-host-id: ah0543
X-Firefox-Spdy: h2
|
|
| aus5.mozilla.org/update/3/GMP/111.0a1/20240129201730/Linux_x86_64-gcc3/null/default/Linux%205.15.0-102-generic%20(GTK%203.24.37%2Clibpulse%20not-available)/default/default/update.xml | 35.244.181.201 | 200 OK | 444 B |
URL aus5.mozilla.org/update/3/GMP/111.0a1/20240129201730/Linux_x86_64-gcc3/null/default/Linux%205.15.0-102-generic%20(GTK%203.24.37%2Clibpulse%20not-available)/default/default/update.xml IP35.244.181.201:0 ASN#396982 GOOGLE-CLOUD-PLATFORM
File typeXML 1.0 document, ASCII text, with very long lines (332) Hash3b324dec137a87ef7e24a30a65b13dd0 c0faa95b2f1018e264b3a14aaf50d1003e6c27b3 6cd0b591d9239fc8564627e92a804fc261951b1cbaf5fa58a8ada3cc13f51463
GET /update/3/GMP/111.0a1/20240129201730/Linux_x86_64-gcc3/null/default/Linux%205.15.0-102-generic%20(GTK%203.24.37%2Clibpulse%20not-available)/default/default/update.xml HTTP/1.1
Host: aus5.mozilla.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Cache-Control: no-cache
Pragma: no-cache
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
rule-id: unknown
rule-data-version: unknown
content-signature: x5u=https://content-signature-2.cdn.mozilla.net/chains/202402/aus.content-signature.mozilla.org-2025-01-22-11-21-23.chain; p384ecdsa=i01pI4nIv6i9-J2Pi-CDiKFGZlz31PYL4-2mwQ1maxBKsX1a2joE53dm_DisqJ_1VkBMnMxYtj9nHIk9Pp9yUcnkNopo0uWSy47GoE06i8t8ki8hdcK91lkh5cHHIm4O
strict-transport-security: max-age=31536000;
x-content-type-options: nosniff
content-security-policy: default-src 'none'; frame-ancestors 'none'
x-proxy-cache-status: EXPIRED
content-encoding: gzip
via: 1.1 google
date: Sun, 15 Dec 2024 01:57:18 GMT
content-type: text/xml; charset=utf-8
vary: Accept-Encoding
content-length: 444
age: 138
cache-control: public,max-age=90
alt-svc: clear
X-Firefox-Spdy: h2
|
|
188.114.97.1
0.0.0.0