| datanodes.to/cdn-cgi/challenge-platform/h/b/scripts/jsd/701fd2559006/main.js? |  104.26.15.76 | 200 OK | 8.5 kB |
URL GET datanodes.to/cdn-cgi/challenge-platform/h/b/scripts/jsd/701fd2559006/main.js? IP104.26.15.76:443
Requested byhttps://datanodes.to/download CertificateIssuerGoogle Trust Services Subjectdatanodes.to Fingerprint37:77:73:11:B8:A3:75:DF:17:A4:43:CB:D8:37:F9:B8:23:4A:C4:63 ValidityThu, 10 Apr 2025 04:51:00 GMT - Wed, 09 Jul 2025 05:50:41 GMT
File typeJavaScript source, ASCII text, with very long lines (8526), with no line terminators Hash1fdf0f2826901c6bfd6bbd49605aad74 51a02430131f55b810e37055ff68a4c57d936333 705cd8fe909d9769ced308406d228ff8168d48009acdf6b90f5f59671b4f8b8d
GET /cdn-cgi/challenge-platform/h/b/scripts/jsd/701fd2559006/main.js? HTTP/1.1
Host: datanodes.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: file_code=3k70932eajgm; lang=english; file_name=Napoleon-SteamGG.NET.zip; affiliate=0pcb%2F%2FX21UEJ2fSUcUnMpwvHc7fihr%2BnupZyULxIeDJ4vhisoLiwajWEY3hjXnLd%2FUmhlApiBRCLUcIY5rcxX6wNCQJj2FmwIQQ%3D; _ga_7DP7NV2LKF=GS2.1.s1746765616$o1$g0$t1746765616$j60$l0$h0; _ga=GA1.1.173775230.1746765617
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 09 May 2025 04:40:17 GMT
content-type: application/javascript; charset=UTF-8
cache-control: max-age=14400, stale-if-error=10800, stale-while-revalidate=10800, public
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hXqhrA8wa%2BhGAWCnaMbi63tvxS7DiKQ7hz8w93LEyrGQFjVJdPbCjGCHQmwvtWcZWA7nFqvFQP5rBkJQkgbiSOpJseih%2B8e4OEM4mRh8SXISO%2Bb%2FnoKLhnwGlPNoKA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 93ce84923b837128-OSL
content-encoding: br
server-timing: cfL4;desc="?proto=TCP&rtt=1879&min_rtt=402&rtt_var=814&sent=182&recv=146&lost=0&retrans=0&sent_bytes=207795&recv_bytes=3242&delivery_rate=48453024&cwnd=256&unsent_bytes=0&cid=515c5f21f79e31b2&ts=1307&x=0"
X-Firefox-Spdy: h2
|
|
| d3bviecoc049je.cloudfront.net/?eivbd=1158643 |  3.167.7.15 | 200 OK | 384 kB |
URL GET d3bviecoc049je.cloudfront.net/?eivbd=1158643 IP3.167.7.15:443
Requested byhttps://datanodes.to/download CertificateIssuerAmazon Subject*.cloudfront.net Fingerprint28:D3:87:79:3C:E8:8B:3C:D9:10:45:E5:F7:64:7A:6D:44:4E:5A:62 ValidityTue, 30 Jul 2024 00:00:00 GMT - Thu, 03 Jul 2025 23:59:59 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (38488) Size384 kB (384392 bytes) Hashfdbaa86ad4540175838d464430d4453c 657a1cf282434557b85e513c5768e3224ef8db68 bcef64a3223c673dcd9aacec5b95bca76bb0e87a03c48f86e8f68f62d04d122e
GET /?eivbd=1158643 HTTP/1.1
Host: d3bviecoc049je.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://datanodes.to/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-length: 126852
date: Fri, 09 May 2025 04:40:17 GMT
access-control-allow-origin: *
cache-control: no-store, no-cache, proxy-revalidate, must-revalidate, private, no-transform
content-encoding: gzip
pragma: no-cache
x-cache: Miss from cloudfront
via: 1.1 50a19afbefe1a01ca6a87078a2b119c2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P2
x-amz-cf-id: IVlDpvFjXTwkblJuWP47qIONSxGmw5Rm_2tKgsE4vKouT0qgFrfcFg==
X-Firefox-Spdy: h2
|
|
| rthformttet.com/b0NuUXoOIQ08RQ5+DHcPHS9TdEgpZlwXHlwhGDgfDCwNYU5WKQt/GQMsGzUcHSwAJVQBJhp0SCkqPBYCFRcDFBQuO14+IgUCKBdJIRIKBxYjJigDADwkI2k4LAk8FwNXFSQAMwwICQBJPiQNOSgWdwgZOS4RCwUvDgRfAwMhATxnPwIKNxIpHyAKFBUJDxlpEDoVOyM+Fic8ABcIAicQTyAmBTINJwEZPSIsdw0TKQwJIjYjNgwJYBMoESQrPiwwORYTJg0kBBYtACgDCzcFNGkvODQMFhMuBSUpCS4iXx9KLiQKIy9cEQoASC0RNwdCFyJfH0ooO0M+HTlwLBsrLjsrNRYYDwsXLAcbFBcIOnA/NDg4Nz0TLF4CCzpDXxE4C0I6ECMbPywWIQgsW3IIFzxeGysfX10FOwksJRI2ZTIjEVoGMS53VgIvKgo7GR42GzZkMiIVKBJcBTABPwpSGgcET1kbCWUJ | 3.164.240.84 | 200 OK | 3.1 kB |
URL GET rthformttet.com/b0NuUXoOIQ08RQ5+DHcPHS9TdEgpZlwXHlwhGDgfDCwNYU5WKQt/GQMsGzUcHSwAJVQBJhp0SCkqPBYCFRcDFBQuO14+IgUCKBdJIRIKBxYjJigDADwkI2k4LAk8FwNXFSQAMwwICQBJPiQNOSgWdwgZOS4RCwUvDgRfAwMhATxnPwIKNxIpHyAKFBUJDxlpEDoVOyM+Fic8ABcIAicQTyAmBTINJwEZPSIsdw0TKQwJIjYjNgwJYBMoESQrPiwwORYTJg0kBBYtACgDCzcFNGkvODQMFhMuBSUpCS4iXx9KLiQKIy9cEQoASC0RNwdCFyJfH0ooO0M+HTlwLBsrLjsrNRYYDwsXLAcbFBcIOnA/NDg4Nz0TLF4CCzpDXxE4C0I6ECMbPywWIQgsW3IIFzxeGysfX10FOwksJRI2ZTIjEVoGMS53VgIvKgo7GR42GzZkMiIVKBJcBTABPwpSGgcET1kbCWUJ IP3.164.240.84:443
Requested byhttps://datanodes.to/download CertificateIssuerAmazon Subjectrthformttet.com Fingerprint35:8E:5A:91:39:BA:7D:DD:00:76:88:9C:B4:95:37:AA:32:78:DF:7B ValidityMon, 21 Apr 2025 00:00:00 GMT - Wed, 20 May 2026 23:59:59 GMT
File typeHTML document, ASCII text, with very long lines (3060), with no line terminators Hash90d11ee2a05de8838b6ffce06413cd74 2b1f65f2a1385f47484a4aa629f4184e31e09f8a c00f4aed9119a454df782c27609d48b9de3efaa936af0052546f2771dcace2f7
GET /b0NuUXoOIQ08RQ5+DHcPHS9TdEgpZlwXHlwhGDgfDCwNYU5WKQt/GQMsGzUcHSwAJVQBJhp0SCkqPBYCFRcDFBQuO14+IgUCKBdJIRIKBxYjJigDADwkI2k4LAk8FwNXFSQAMwwICQBJPiQNOSgWdwgZOS4RCwUvDgRfAwMhATxnPwIKNxIpHyAKFBUJDxlpEDoVOyM+Fic8ABcIAicQTyAmBTINJwEZPSIsdw0TKQwJIjYjNgwJYBMoESQrPiwwORYTJg0kBBYtACgDCzcFNGkvODQMFhMuBSUpCS4iXx9KLiQKIy9cEQoASC0RNwdCFyJfH0ooO0M+HTlwLBsrLjsrNRYYDwsXLAcbFBcIOnA/NDg4Nz0TLF4CCzpDXxE4C0I6ECMbPywWIQgsW3IIFzxeGysfX10FOwksJRI2ZTIjEVoGMS53VgIvKgo7GR42GzZkMiIVKBJcBTABPwpSGgcET1kbCWUJ HTTP/1.1
Host: rthformttet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://datanodes.to/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/html
content-length: 1207
date: Fri, 09 May 2025 04:40:17 GMT
accept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List
set-cookie: AWSALB=cswSSgYLGa1zeQsOUIiBXPL8srCMUDp1oGFb7OmbDTarBTi7vKpGgFV9KssUZcvY4buZ4IPOZAItd98dCLv6BEHwBhTxDrLce7c9BzSQRY/HMsdQYoNansPdROUs; Expires=Fri, 16 May 2025 04:40:17 GMT; Path=/
AWSALBCORS=cswSSgYLGa1zeQsOUIiBXPL8srCMUDp1oGFb7OmbDTarBTi7vKpGgFV9KssUZcvY4buZ4IPOZAItd98dCLv6BEHwBhTxDrLce7c9BzSQRY/HMsdQYoNansPdROUs; Expires=Fri, 16 May 2025 04:40:17 GMT; Path=/; SameSite=None
server: openresty/1.17.8.2
cache-control: no-store, no-cache, must-revalidate, no-transform
pragma: no-cache
p3p: CP="NID DSP ALL COR"
content-encoding: gzip
x-cache: Miss from cloudfront
via: 1.1 b78539d5f13f3162976a6abc8783d3de.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN53-P2
x-amz-cf-id: F_uAIrmI6TRxhytUixZPnaG8U-f8y0vpFBvU71BKdUvtahXdpU1g6g==
X-Firefox-Spdy: h2
|
|
| ukankingwithea.com/ | 104.21.112.1 | 200 OK | 27 B |
IP104.21.112.1:443
Requested byhttps://datanodes.to/download CertificateIssuerGoogle Trust Services Subjectukankingwithea.com Fingerprint02:15:28:2A:F2:F8:5D:3A:DE:6D:1D:DC:CF:6D:06:BA:00:3A:63:70 ValidityTue, 29 Apr 2025 13:46:48 GMT - Mon, 28 Jul 2025 14:44:24 GMT
File typeASCII text, with no line terminators Hash3eac612ec1eaed10f5ded0b796e2e402 8b86f1b132ee56f902a0f0ad193a68b37a87fb34 275e094468cc01be1656c814f676ebca255026af85cac1d65ff70c5ce57555cf
GET / HTTP/1.1
Host: ukankingwithea.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://datanodes.to/
Origin: https://datanodes.to
DNT: 1
Connection: keep-alive
Cookie: csu=1089913626501351@1@1746765617
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 09 May 2025 04:40:18 GMT
content-type: text/plain
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=NbV6A3tbujKlEofuNNeCu1Bjhtpv8YtDCy7ndvzKxyBh41FXgB6n6QyGjdkMtfHFo0Anrj0Y1kPugyYfhtwjIFHcC5XR4MQH%2F2cNUIhYsJBlAFh%2BbKSUm86U56eU8GyrNDUP9ks%3D"}],"group":"cf-nel","max_age":604800}
set-cookie: csu=1089913626501351@2@1746765617; Max-Age=31104000; Secure; SameSite=None
access-control-allow-origin: https://datanodes.to
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-headers: X-Requested-With, content-type
cf-cache-status: DYNAMIC
content-encoding: br
cf-ray: 93ce84989d8d56af-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=7347&min_rtt=7145&rtt_var=2313&sent=24&recv=32&lost=0&retrans=0&sent_bytes=4382&recv_bytes=2441&delivery_rate=1555&cwnd=12000&unsent_bytes=0&cid=50ad9053a68a154f&ts=459&x=16"
|
|
| accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&hl=en&ifkv=ASKV5MheqXG7kBCuS3h4GEtFOAEsfWw5nmDxzrzA6ZpG4LTnUl_L0NSJCOnec59d2l6asj_dC5-O&passive=true&service=mail&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S1896194474%3A1746765618142836 | 64.233.164.84 | 403 Forbidden | 0 B |
URL GET accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&hl=en&ifkv=ASKV5MheqXG7kBCuS3h4GEtFOAEsfWw5nmDxzrzA6ZpG4LTnUl_L0NSJCOnec59d2l6asj_dC5-O&passive=true&service=mail&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S1896194474%3A1746765618142836 IP64.233.164.84:443
Requested byhttps://datanodes.to/download CertificateIssuerGoogle Trust Services Subject*.google.com Fingerprint9E:10:08:9D:11:84:1F:9C:2D:04:7B:3F:CB:2F:96:53:7F:73:BC:51 ValidityMon, 21 Apr 2025 08:40:46 GMT - Mon, 14 Jul 2025 08:40:45 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&hl=en&ifkv=ASKV5MheqXG7kBCuS3h4GEtFOAEsfWw5nmDxzrzA6ZpG4LTnUl_L0NSJCOnec59d2l6asj_dC5-O&passive=true&service=mail&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S1896194474%3A1746765618142836 HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://datanodes.to/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 403 Forbidden
content-type: text/html; charset=utf-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Fri, 09 May 2025 04:40:18 GMT
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-opener-policy-report-only: same-origin; report-to="AccountsSignInUi"
content-security-policy: script-src 'nonce-4EejQKRU95Fkki5hd5A_Og' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /v3/signin/_/AccountsSignInUi/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com https://support.google.com/inapp/ https://www.google.com/tools/feedback/ https://www.gstatic.com/inproduct_help/ https://www.gstatic.com/support/content/;report-uri /v3/signin/_/AccountsSignInUi/cspreport/allowlist, require-trusted-types-for 'script';report-uri /v3/signin/_/AccountsSignInUi/cspreport
content-security-policy-report-only: script-src 'unsafe-inline' 'unsafe-eval' blob: data: https://ajax.googleapis.com/ajax/libs/jquery/3.6.4/jquery.min.js https://translate.google.com/translate_a/element.js https://www.google.com/recaptcha/api.js https://www.google.com/tools/feedback/load.js https://www.google.com/tools/feedback/open.js https://www.google.com/tools/feedback/open_to_help_guide_lazy.js https://www.google.com/tools/feedback/help_api.js https://www.gstatic.com/inproduct_help/service/lazy.min.js https://www.gstatic.com/inproduct_help/api/main.min.js https://www.gstatic.com/inproduct_help/chatsupport/chatsupport_button_v2.js https://www.gstatic.com/feedback/js/help/prod/service/lazy.min.js https://www.gstatic.com/uservoice/feedback/client/web/live/ https://www.google.com/tools/feedback/chat_load.js https://www.gstatic.com/uservoice/surveys/resources/prod/js/survey/ https://www.gstatic.com/feedback/js/ghelp/ https://www.gstatic.com/_/mss/boq-one-google/_/ https://www.gstatic.com/og/_/js/ https://apis.google.com/js/api.js https://apis.google.com/js/client.js https://www.googletagmanager.com/gtag/js https://www.google-analytics.com/analytics.js https://www.googletagmanager.com/gtag/destination https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en.8x8cbXFxqmQ.es5.O/ https://apis.google.com/_/scs/abc-static/_/js/ https://translate.googleapis.com/_/translate_http/_/js/ https://www.gstatic.com/recaptcha/releases/;report-uri /v3/signin/_/AccountsSignInUi/cspreport/fine-allowlist
report-to: {"group":"AccountsSignInUi","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/AccountsSignInUi"}]}
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/poppins/v23/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2 | 142.250.74.35 | 200 OK | 8.0 kB |
URL GET fonts.gstatic.com/s/poppins/v23/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2 IP142.250.74.35:443
Requested byhttps://datanodes.to/download CertificateIssuerGoogle Trust Services Subject*.gstatic.com Fingerprint62:05:36:C2:8E:4C:CD:95:1E:1C:75:06:44:A3:57:E5:C0:17:02:80 ValidityMon, 31 Mar 2025 08:55:35 GMT - Mon, 23 Jun 2025 08:55:34 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 8000, version 1.0 Hash72993dddf88a63e8f226656f7de88e57 179f97ec0275f09603a8db94d4380eb584d81cd5 f4e80d9dfd374d02989b87a27b5ed4cb78fbb177c27f1478e9a8b0afb7513149
GET /s/poppins/v23/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://datanodes.to
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 8000
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 08 May 2025 10:35:53 GMT
expires: Fri, 08 May 2026 10:35:53 GMT
cache-control: public, max-age=31536000
age: 65063
last-modified: Wed, 23 Apr 2025 16:07:17 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/poppins/v23/pxiEyp8kv8JHgFVrJJfecg.woff2 | 142.250.74.35 | 200 OK | 7.9 kB |
URL GET fonts.gstatic.com/s/poppins/v23/pxiEyp8kv8JHgFVrJJfecg.woff2 IP142.250.74.35:443
Requested byhttps://datanodes.to/download CertificateIssuerGoogle Trust Services Subject*.gstatic.com Fingerprint62:05:36:C2:8E:4C:CD:95:1E:1C:75:06:44:A3:57:E5:C0:17:02:80 ValidityMon, 31 Mar 2025 08:55:35 GMT - Mon, 23 Jun 2025 08:55:34 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 7884, version 1.0 Hash9212f6f9860f9fc6c69b02fedf6db8c3 ac6d71b4d5fdd2b3dabc9a06ff6c001e4251da0b 7d93459d86585bfcdbb7e0376056226adb25821ee54b96236fe2123e9560929f
GET /s/poppins/v23/pxiEyp8kv8JHgFVrJJfecg.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://datanodes.to
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7884
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 08 May 2025 10:26:17 GMT
expires: Fri, 08 May 2026 10:26:17 GMT
cache-control: public, max-age=31536000
age: 65639
last-modified: Wed, 23 Apr 2025 16:05:59 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| handhadbeensotr.com/a1FaMnlEbjlBRDJhAHQdPQMLUSElEAMDDRI1D1YSPGIACig8EHxGEA9sawNPWmRvBl8bOD4PSFN3KUYYHyQpD0hNODRUFlZ3LA9IRWF0AFdedy8PSE0lKlMeVmB8Qg0fPWcDTl9nbQRMXWBtB0hd | 104.21.22.182 | 204 No Content | 0 B |
URL GET handhadbeensotr.com/a1FaMnlEbjlBRDJhAHQdPQMLUSElEAMDDRI1D1YSPGIACig8EHxGEA9sawNPWmRvBl8bOD4PSFN3KUYYHyQpD0hNODRUFlZ3LA9IRWF0AFdedy8PSE0lKlMeVmB8Qg0fPWcDTl9nbQRMXWBtB0hd IP104.21.22.182:443
Requested byhttps://datanodes.to/download CertificateIssuerGoogle Trust Services Subjecthandhadbeensotr.com FingerprintC0:43:BD:46:B4:27:70:E6:09:2E:FD:5C:F5:71:16:43:0D:2E:63:CF ValidityFri, 04 Apr 2025 10:43:35 GMT - Thu, 03 Jul 2025 11:41:45 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /a1FaMnlEbjlBRDJhAHQdPQMLUSElEAMDDRI1D1YSPGIACig8EHxGEA9sawNPWmRvBl8bOD4PSFN3KUYYHyQpD0hNODRUFlZ3LA9IRWF0AFdedy8PSE0lKlMeVmB8Qg0fPWcDTl9nbQRMXWBtB0hd HTTP/1.1
Host: handhadbeensotr.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://datanodes.to/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
date: Fri, 09 May 2025 04:40:17 GMT
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=sCBhuAKL%2FDOi%2BXGrJU%2BnRRF5auo1B8Mzj98yAp%2BCKxryQIpyZsj%2BbPgDKp7MAWCdvrcFFTZM3anoIk7%2F%2FGp%2B%2FCDy37SfPsjlAy%2FRBVNwdoi%2FtJNdVX3%2BlhHKDzWo8381AUz9YzKO"}]}
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
server: cloudflare
cf-ray: 93ce84972b49569f-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| handhadbeensotr.com/T3FITmhgTis9VSo2MBo8fCsJFloZQhkbURUoJncvHjckIA4KSW46AStMeX9dd0d9eU4/GCxzWWkCPC8cOgJ1f04mHy4hVWkHdX9GfEVmfV5hRW47VX5XPD4JKEx5aBg7BSRzWXhFfnleekd5eVx5Rg | 104.21.22.182 | 204 No Content | 0 B |
URL GET handhadbeensotr.com/T3FITmhgTis9VSo2MBo8fCsJFloZQhkbURUoJncvHjckIA4KSW46AStMeX9dd0d9eU4/GCxzWWkCPC8cOgJ1f04mHy4hVWkHdX9GfEVmfV5hRW47VX5XPD4JKEx5aBg7BSRzWXhFfnleekd5eVx5Rg IP104.21.22.182:443
Requested byhttps://datanodes.to/download CertificateIssuerGoogle Trust Services Subjecthandhadbeensotr.com FingerprintC0:43:BD:46:B4:27:70:E6:09:2E:FD:5C:F5:71:16:43:0D:2E:63:CF ValidityFri, 04 Apr 2025 10:43:35 GMT - Thu, 03 Jul 2025 11:41:45 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /T3FITmhgTis9VSo2MBo8fCsJFloZQhkbURUoJncvHjckIA4KSW46AStMeX9dd0d9eU4/GCxzWWkCPC8cOgJ1f04mHy4hVWkHdX9GfEVmfV5hRW47VX5XPD4JKEx5aBg7BSRzWXhFfnleekd5eVx5Rg HTTP/1.1
Host: handhadbeensotr.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://datanodes.to/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
date: Fri, 09 May 2025 04:40:17 GMT
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=RJ8rMkXkFIbxrz21IwRKh4vOTCuYMZZ085hZMKZeqn1DJ5NCLD3GkOsBeDac0CmSramgHECPeTGEsU4U1%2F7ONHKuUeWyzfzROl0VDTStf8UF3%2B4JqakrnPBD71cGmLVybugde6yP"}]}
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
server: cloudflare
cf-ray: 93ce84970b26569f-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| www.google.com/recaptcha/api2/clr?k=6LdhelkqAAAAAH_f47GPnSuEgnjRo4Pf0ukRioGs | 142.250.178.36 | 200 OK | 0 B |
URL POST www.google.com/recaptcha/api2/clr?k=6LdhelkqAAAAAH_f47GPnSuEgnjRo4Pf0ukRioGs IP142.250.178.36:443
Requested byhttps://datanodes.to/download CertificateIssuerGoogle Trust Services Subject*.google.com Fingerprint7E:CD:6A:9E:9E:00:6A:42:52:CC:9D:14:81:1C:68:D4:B9:C4:A4:73 ValidityMon, 31 Mar 2025 08:54:29 GMT - Mon, 23 Jun 2025 08:54:28 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /recaptcha/api2/clr?k=6LdhelkqAAAAAH_f47GPnSuEgnjRo4Pf0ukRioGs HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://datanodes.to/
Content-Length: 1597
Origin: https://datanodes.to
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: application/binary
cross-origin-opener-policy-report-only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d"
report-to: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]}
cross-origin-resource-policy: cross-origin
date: Fri, 09 May 2025 04:40:20 GMT
server: ESF
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| datanodes.to/images/logo.png?v=1 | 104.26.15.76 | 200 OK | 15 kB |
URL GET datanodes.to/images/logo.png?v=1 IP104.26.15.76:443
Requested byhttps://datanodes.to/download CertificateIssuerGoogle Trust Services Subjectdatanodes.to Fingerprint37:77:73:11:B8:A3:75:DF:17:A4:43:CB:D8:37:F9:B8:23:4A:C4:63 ValidityThu, 10 Apr 2025 04:51:00 GMT - Wed, 09 Jul 2025 05:50:41 GMT
File typePNG image data, 364 x 230, 8-bit/color RGBA, non-interlaced Hashc9338a5cbd74ee24aee2175a5ac9cfac eb519e37c50d2dd8908d80a2dd203879f2a430c9 e73da34c3963cd34608bc4016fd1060cf58de21ef14321a153ec45bc004ff56e
GET /images/logo.png?v=1 HTTP/1.1
Host: datanodes.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://datanodes.to/download
Cookie: file_code=3k70932eajgm; lang=english; file_name=Napoleon-SteamGG.NET.zip; affiliate=0pcb%2F%2FX21UEJ2fSUcUnMpwvHc7fihr%2BnupZyULxIeDJ4vhisoLiwajWEY3hjXnLd%2FUmhlApiBRCLUcIY5rcxX6wNCQJj2FmwIQQ%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 09 May 2025 04:40:16 GMT
content-type: image/png
content-length: 15350
last-modified: Tue, 16 Jan 2024 14:16:42 GMT
etag: "65a68fca-3bf6"
cache-control: max-age=14400
cf-cache-status: HIT
age: 1509
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FSrxkeA%2Bqoj8%2BN16VSpU0zVXysV8iGikaEYyRc68h0eeH%2FGLSf5o7ONg9OSbPkQcRuLRR8l%2FPf51aVSLklA%2BDo5X5SM7jEhgmCHlidUhvuFo3fTrRHacH2SOSw8%2FWQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 93ce848ddf647128-OSL
server-timing: cfL4;desc="?proto=TCP&rtt=1026&min_rtt=402&rtt_var=764&sent=77&recv=52&lost=0&retrans=0&sent_bytes=84454&recv_bytes=2030&delivery_rate=43376211&cwnd=256&unsent_bytes=0&cid=515c5f21f79e31b2&ts=608&x=0"
X-Firefox-Spdy: h2
|
|
| datanodes.to/cdn-cgi/challenge-platform/scripts/jsd/main.js | 104.26.15.76 | 302 Found | 8.5 kB |
URL GET datanodes.to/cdn-cgi/challenge-platform/scripts/jsd/main.js IP104.26.15.76:443
Requested byhttps://datanodes.to/download CertificateIssuerGoogle Trust Services Subjectdatanodes.to Fingerprint37:77:73:11:B8:A3:75:DF:17:A4:43:CB:D8:37:F9:B8:23:4A:C4:63 ValidityThu, 10 Apr 2025 04:51:00 GMT - Wed, 09 Jul 2025 05:50:41 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1
Host: datanodes.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: file_code=3k70932eajgm; lang=english; file_name=Napoleon-SteamGG.NET.zip; affiliate=0pcb%2F%2FX21UEJ2fSUcUnMpwvHc7fihr%2BnupZyULxIeDJ4vhisoLiwajWEY3hjXnLd%2FUmhlApiBRCLUcIY5rcxX6wNCQJj2FmwIQQ%3D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Fri, 09 May 2025 04:40:16 GMT
content-length: 0
location: /cdn-cgi/challenge-platform/h/b/scripts/jsd/701fd2559006/main.js?
cache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=10800, public
access-control-allow-origin: *
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=r9XL942qKi237a%2FC3b%2BHGISUhPfBFWKFHZGLPHxkxJoVG%2BPaFUNJb1dGhhOHjjpcq8hCtF%2BvAkalPFvPxNU4fSSdwHWe6tSSrxkDGjtQMljO%2FvkZucOMeXikio8Few%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 93ce84914aaa7128-OSL
server-timing: cfL4;desc="?proto=TCP&rtt=1585&min_rtt=402&rtt_var=346&sent=147&recv=124&lost=0&retrans=0&sent_bytes=174327&recv_bytes=2411&delivery_rate=48453024&cwnd=256&unsent_bytes=0&cid=515c5f21f79e31b2&ts=1159&x=0"
X-Firefox-Spdy: h2
|
|
| datanodes.to/theme_2023/dist/assets/LoadingIcon-59fcef50.js | 104.26.15.76 | 200 OK | 667 B |
URL GET datanodes.to/theme_2023/dist/assets/LoadingIcon-59fcef50.js IP104.26.15.76:443
Requested byhttps://datanodes.to/download CertificateIssuerGoogle Trust Services Subjectdatanodes.to Fingerprint37:77:73:11:B8:A3:75:DF:17:A4:43:CB:D8:37:F9:B8:23:4A:C4:63 ValidityThu, 10 Apr 2025 04:51:00 GMT - Wed, 09 Jul 2025 05:50:41 GMT
File typeJava source, ASCII text, with very long lines (666) Hash3bf8f7142f945fb29a79ec7ddde813ab 510746b341aec2afe4c3f6e4bdc58f3de28a6a7d d9d4e80bef2de510da666b488f7d8c4faf40604a500ac13bb5f165a09763e15e
GET /theme_2023/dist/assets/LoadingIcon-59fcef50.js HTTP/1.1
Host: datanodes.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://datanodes.to/theme_2023/dist/assets/VirusScan-e53a5e80.js
Cookie: file_code=3k70932eajgm; lang=english; file_name=Napoleon-SteamGG.NET.zip; affiliate=0pcb%2F%2FX21UEJ2fSUcUnMpwvHc7fihr%2BnupZyULxIeDJ4vhisoLiwajWEY3hjXnLd%2FUmhlApiBRCLUcIY5rcxX6wNCQJj2FmwIQQ%3D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 09 May 2025 04:40:16 GMT
content-type: application/javascript
last-modified: Sun, 09 Feb 2025 16:17:00 GMT
etag: W/"67a8d4fc-29b"
cache-control: max-age=14400
cf-cache-status: HIT
age: 5083
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=npnz8m15Ex%2B7sXTix3GecskFDs94mUI%2BndAebF0xjgV8DRVGQ0C56VJernWgH2jLH6SxFZOkNYf65XpGz5msu5b343oB7p%2BjnxlBhzOj%2BWHuq4Ep28BbpChr0%2BxFZg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 93ce84917ada7128-OSL
content-encoding: br
server-timing: cfL4;desc="?proto=TCP&rtt=1471&min_rtt=402&rtt_var=363&sent=150&recv=130&lost=0&retrans=0&sent_bytes=174860&recv_bytes=3037&delivery_rate=48453024&cwnd=256&unsent_bytes=0&cid=515c5f21f79e31b2&ts=1188&x=0"
X-Firefox-Spdy: h2
|
|
| datanodes.to/theme_2023/dist/assets/index-dd92db6d.js | 104.26.15.76 | 200 OK | 6.4 kB |
URL GET datanodes.to/theme_2023/dist/assets/index-dd92db6d.js IP104.26.15.76:443
Requested byhttps://datanodes.to/download CertificateIssuerGoogle Trust Services Subjectdatanodes.to Fingerprint37:77:73:11:B8:A3:75:DF:17:A4:43:CB:D8:37:F9:B8:23:4A:C4:63 ValidityThu, 10 Apr 2025 04:51:00 GMT - Wed, 09 Jul 2025 05:50:41 GMT
File typeJava source, ASCII text, with very long lines (6392) Hash6ce1ad7fa6b6028bd38010eb93880db5 dbf9628e8a116865693cbd5cce1c41fcaac94beb ba8edc5521e36bb2e21448a0f062d3727e459e9165cb9aabbd48bb1b6befd6c7
GET /theme_2023/dist/assets/index-dd92db6d.js HTTP/1.1
Host: datanodes.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://datanodes.to/theme_2023/dist/assets/VirusScan-e53a5e80.js
Cookie: file_code=3k70932eajgm; lang=english; file_name=Napoleon-SteamGG.NET.zip; affiliate=0pcb%2F%2FX21UEJ2fSUcUnMpwvHc7fihr%2BnupZyULxIeDJ4vhisoLiwajWEY3hjXnLd%2FUmhlApiBRCLUcIY5rcxX6wNCQJj2FmwIQQ%3D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 09 May 2025 04:40:16 GMT
content-type: application/javascript
last-modified: Sun, 09 Feb 2025 16:17:00 GMT
etag: W/"67a8d4fc-18f9"
cache-control: max-age=14400
cf-cache-status: HIT
age: 5083
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2B%2FzUDptJUqoYQt576qAxXu1Jgvf8izxrs78xGW7CZTuii1jo57DVrurEhMdEV21OV9dJKVffyUYsftGl5Jqx3%2BucWIDwLgVbzUGKowMG0JaTopVW%2F2guFfoRjbsTwQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 93ce84917ae07128-OSL
content-encoding: br
server-timing: cfL4;desc="?proto=TCP&rtt=1519&min_rtt=402&rtt_var=80&sent=175&recv=142&lost=0&retrans=0&sent_bytes=204399&recv_bytes=3037&delivery_rate=48453024&cwnd=256&unsent_bytes=0&cid=515c5f21f79e31b2&ts=1192&x=0"
X-Firefox-Spdy: h2
|
|
| accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&uilel=3&hl=en&service=mail | 64.233.164.84 | 302 Found | 0 B |
URL GET accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&uilel=3&hl=en&service=mail IP64.233.164.84:443
Requested byhttps://datanodes.to/download CertificateIssuerGoogle Trust Services Subjectaccounts.google.com Fingerprint59:74:47:4D:79:55:0E:D6:C9:C5:58:53:27:7B:B5:9B:F6:02:63:84 ValidityMon, 21 Apr 2025 08:42:44 GMT - Mon, 14 Jul 2025 08:42:43 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&uilel=3&hl=en&service=mail HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://datanodes.to/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
content-type: application/binary
set-cookie: __Host-GAPS=1:jSA33eVK-0bh5hIyZpQBfge12cRJ-Q:z_5Ehq1bnPT2Nkuw; Expires=Sun, 09-May-2027 04:40:18 GMT; Path=/; Secure; HttpOnly; Priority=HIGH
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Fri, 09 May 2025 04:40:18 GMT
location: https://accounts.google.com/InteractiveLogin?continue=https://www.google.com/favicon.ico&hl=en&passive=true&service=mail&uilel=3&ifkv=ASKV5MixvTc6o1_thUHLUzQhNBPSroNOnXfzuBbntyef1bbyXUK-nBr-lWtmefFkmSbPktF2fjuP
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-opener-policy: unsafe-none
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*
content-security-policy: script-src 'nonce-KG-uDfM8Z3g2WBPltayagw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/AccountsSigninPassiveLoginHttp/cspreport/allowlist, require-trusted-types-for 'script';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport
cross-origin-resource-policy: cross-origin
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
server: ESF
content-length: 0
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| accounts.google.com/InteractiveLogin?continue=https://www.google.com/favicon.ico&hl=en&passive=true&service=mail&uilel=3&ifkv=ASKV5MixvTc6o1_thUHLUzQhNBPSroNOnXfzuBbntyef1bbyXUK-nBr-lWtmefFkmSbPktF2fjuP | 64.233.164.84 | 302 Found | 0 B |
URL GET accounts.google.com/InteractiveLogin?continue=https://www.google.com/favicon.ico&hl=en&passive=true&service=mail&uilel=3&ifkv=ASKV5MixvTc6o1_thUHLUzQhNBPSroNOnXfzuBbntyef1bbyXUK-nBr-lWtmefFkmSbPktF2fjuP IP64.233.164.84:443
Requested byhttps://datanodes.to/download CertificateIssuerGoogle Trust Services Subjectaccounts.google.com Fingerprint59:74:47:4D:79:55:0E:D6:C9:C5:58:53:27:7B:B5:9B:F6:02:63:84 ValidityMon, 21 Apr 2025 08:42:44 GMT - Mon, 14 Jul 2025 08:42:43 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /InteractiveLogin?continue=https://www.google.com/favicon.ico&hl=en&passive=true&service=mail&uilel=3&ifkv=ASKV5MixvTc6o1_thUHLUzQhNBPSroNOnXfzuBbntyef1bbyXUK-nBr-lWtmefFkmSbPktF2fjuP HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://datanodes.to/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
content-type: text/html; charset=UTF-8
set-cookie: __Host-GAPS=1:i2Xqgp2Px6mBktbawEW-XfOJAJWl7A:s5SILYmknJAiIJuF;Path=/;Expires=Sun, 09-May-2027 04:40:18 GMT;Secure;HttpOnly;Priority=HIGH
x-frame-options: DENY
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Fri, 09 May 2025 04:40:18 GMT
location: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&hl=en&ifkv=ASKV5MheqXG7kBCuS3h4GEtFOAEsfWw5nmDxzrzA6ZpG4LTnUl_L0NSJCOnec59d2l6asj_dC5-O&passive=true&service=mail&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S1896194474%3A1746765618142836
strict-transport-security: max-age=31536000; includeSubDomains
content-security-policy: require-trusted-types-for 'script';report-uri /cspreport, script-src 'nonce-BeSxfAiywP4e6Mz4lzGU2Q' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /cspreport
report-to: {"group":"coop_gse_qebhlk","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gse_qebhlk"}]}
cross-origin-opener-policy-report-only: same-origin; report-to="coop_gse_qebhlk"
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 415
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&hl=en&ifkv=ASKV5MjEzy6chOTzD_vqikEXAktE4ZfKhZakfKV1VkBJERbqGwT4HqAM_5KpKFT-E1pFUy9YZNy2&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S657164674%3A1746765618144812 | 64.233.164.84 | 403 Forbidden | 0 B |
URL GET accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&hl=en&ifkv=ASKV5MjEzy6chOTzD_vqikEXAktE4ZfKhZakfKV1VkBJERbqGwT4HqAM_5KpKFT-E1pFUy9YZNy2&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S657164674%3A1746765618144812 IP64.233.164.84:443
Requested byhttps://datanodes.to/download CertificateIssuerGoogle Trust Services Subject*.google.com Fingerprint9E:10:08:9D:11:84:1F:9C:2D:04:7B:3F:CB:2F:96:53:7F:73:BC:51 ValidityMon, 21 Apr 2025 08:40:46 GMT - Mon, 14 Jul 2025 08:40:45 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /v3/signin/identifier?continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&hl=en&ifkv=ASKV5MjEzy6chOTzD_vqikEXAktE4ZfKhZakfKV1VkBJERbqGwT4HqAM_5KpKFT-E1pFUy9YZNy2&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S657164674%3A1746765618144812 HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://datanodes.to/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 403 Forbidden
content-type: text/html; charset=utf-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Fri, 09 May 2025 04:40:18 GMT
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
strict-transport-security: max-age=31536000; includeSubDomains
report-to: {"group":"AccountsSignInUi","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/AccountsSignInUi"}]}
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
content-security-policy: require-trusted-types-for 'script';report-uri /v3/signin/_/AccountsSignInUi/cspreport, script-src 'nonce-7h4cF-DFSNxNMa7EoaBRLg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /v3/signin/_/AccountsSignInUi/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com https://support.google.com/inapp/ https://www.google.com/tools/feedback/ https://www.gstatic.com/inproduct_help/ https://www.gstatic.com/support/content/;report-uri /v3/signin/_/AccountsSignInUi/cspreport/allowlist
cross-origin-opener-policy-report-only: same-origin; report-to="AccountsSignInUi"
content-security-policy-report-only: script-src 'unsafe-inline' 'unsafe-eval' blob: data: https://ajax.googleapis.com/ajax/libs/jquery/3.6.4/jquery.min.js https://translate.google.com/translate_a/element.js https://www.google.com/recaptcha/api.js https://www.google.com/tools/feedback/load.js https://www.google.com/tools/feedback/open.js https://www.google.com/tools/feedback/open_to_help_guide_lazy.js https://www.google.com/tools/feedback/help_api.js https://www.gstatic.com/inproduct_help/service/lazy.min.js https://www.gstatic.com/inproduct_help/api/main.min.js https://www.gstatic.com/inproduct_help/chatsupport/chatsupport_button_v2.js https://www.gstatic.com/feedback/js/help/prod/service/lazy.min.js https://www.gstatic.com/uservoice/feedback/client/web/live/ https://www.google.com/tools/feedback/chat_load.js https://www.gstatic.com/uservoice/surveys/resources/prod/js/survey/ https://www.gstatic.com/feedback/js/ghelp/ https://www.gstatic.com/_/mss/boq-one-google/_/ https://www.gstatic.com/og/_/js/ https://apis.google.com/js/api.js https://apis.google.com/js/client.js https://www.googletagmanager.com/gtag/js https://www.google-analytics.com/analytics.js https://www.googletagmanager.com/gtag/destination https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en.8x8cbXFxqmQ.es5.O/ https://apis.google.com/_/scs/abc-static/_/js/ https://translate.googleapis.com/_/translate_http/_/js/ https://www.gstatic.com/recaptcha/releases/;report-uri /v3/signin/_/AccountsSignInUi/cspreport/fine-allowlist
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.google.com/recaptcha/api2/clr?k=6LdhelkqAAAAAH_f47GPnSuEgnjRo4Pf0ukRioGs | 142.250.178.36 | 200 OK | 0 B |
URL POST www.google.com/recaptcha/api2/clr?k=6LdhelkqAAAAAH_f47GPnSuEgnjRo4Pf0ukRioGs IP142.250.178.36:443
Requested byhttps://www.google.com/recaptcha/api2/anchor?ar=1&k=6LdhelkqAAAAAH_f47GPnSuEgnjRo4Pf0ukRioGs&co=aHR0cHM6Ly9kYXRhbm9kZXMudG86NDQz&hl=en&v=Hi8UmRMnhdOBM3IuViTkapUP&size=invisible&cb=xuxyzgzbwf1x CertificateIssuerGoogle Trust Services Subject*.google.com Fingerprint7E:CD:6A:9E:9E:00:6A:42:52:CC:9D:14:81:1C:68:D4:B9:C4:A4:73 ValidityMon, 31 Mar 2025 08:54:29 GMT - Mon, 23 Jun 2025 08:54:28 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /recaptcha/api2/clr?k=6LdhelkqAAAAAH_f47GPnSuEgnjRo4Pf0ukRioGs HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-protobuf
Content-Length: 1580
Origin: https://www.google.com
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LdhelkqAAAAAH_f47GPnSuEgnjRo4Pf0ukRioGs&co=aHR0cHM6Ly9kYXRhbm9kZXMudG86NDQz&hl=en&v=Hi8UmRMnhdOBM3IuViTkapUP&size=invisible&cb=xuxyzgzbwf1x
Cookie: _GRECAPTCHA=09AMNxLB-rjnMLwMhuiz9D4pia0055Ijzz0gtwf_jyEVHiPXFm_Pg3ChzfHx7ikYjB_-i2sTOwLhUeNasVqFzMfsU
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: application/binary
cross-origin-resource-policy: cross-origin
report-to: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]}
cross-origin-opener-policy-report-only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d"
date: Fri, 09 May 2025 04:40:19 GMT
server: ESF
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.google.com/recaptcha/api2/clr?k=6LdhelkqAAAAAH_f47GPnSuEgnjRo4Pf0ukRioGs | 142.250.178.36 | 200 OK | 0 B |
URL POST www.google.com/recaptcha/api2/clr?k=6LdhelkqAAAAAH_f47GPnSuEgnjRo4Pf0ukRioGs IP142.250.178.36:443
Requested byhttps://datanodes.to/download CertificateIssuerGoogle Trust Services Subject*.google.com Fingerprint7E:CD:6A:9E:9E:00:6A:42:52:CC:9D:14:81:1C:68:D4:B9:C4:A4:73 ValidityMon, 31 Mar 2025 08:54:29 GMT - Mon, 23 Jun 2025 08:54:28 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /recaptcha/api2/clr?k=6LdhelkqAAAAAH_f47GPnSuEgnjRo4Pf0ukRioGs HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://datanodes.to/
Content-Length: 1597
Origin: https://datanodes.to
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: application/binary
cross-origin-opener-policy-report-only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d"
cross-origin-resource-policy: cross-origin
report-to: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]}
date: Fri, 09 May 2025 04:40:20 GMT
server: ESF
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| datanodes.to/theme_2023/dist/assets/Tooltip-4872b02d.css | 104.26.15.76 | 200 OK | 372 B |
URL GET datanodes.to/theme_2023/dist/assets/Tooltip-4872b02d.css IP104.26.15.76:443
Requested byhttps://datanodes.to/download CertificateIssuerGoogle Trust Services Subjectdatanodes.to Fingerprint37:77:73:11:B8:A3:75:DF:17:A4:43:CB:D8:37:F9:B8:23:4A:C4:63 ValidityThu, 10 Apr 2025 04:51:00 GMT - Wed, 09 Jul 2025 05:50:41 GMT
File typeASCII text, with very long lines (371) Hashcdfb8cc2e705f53d307841b8e9e2fe02 c86370de829ba384fdcde4d556472b27eca7b803 4872b02d2bbe6f70834822916d6e55e3190f18172efaddf935dada716fdb5452
GET /theme_2023/dist/assets/Tooltip-4872b02d.css HTTP/1.1
Host: datanodes.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://datanodes.to/download
Cookie: file_code=3k70932eajgm; lang=english; file_name=Napoleon-SteamGG.NET.zip; affiliate=0pcb%2F%2FX21UEJ2fSUcUnMpwvHc7fihr%2BnupZyULxIeDJ4vhisoLiwajWEY3hjXnLd%2FUmhlApiBRCLUcIY5rcxX6wNCQJj2FmwIQQ%3D
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 09 May 2025 04:40:16 GMT
content-type: text/css
last-modified: Sun, 09 Feb 2025 16:17:00 GMT
etag: W/"67a8d4fc-174"
cache-control: max-age=14400
cf-cache-status: HIT
age: 1509
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=c4pmO8Opu5WGO6zFjlvvs1MYvOgOHwWgHk4lxuDe7h0qQEllur8BlE3wFs6aAW6Omcha2RT9B9ONjlCswveJ3QvxOa2K0mRR5ub5oXWoKUsE%2FuqUHqEQRKYQ1uqiWw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 93ce8490d9df7128-OSL
content-encoding: br
server-timing: cfL4;desc="?proto=TCP&rtt=1211&min_rtt=402&rtt_var=144&sent=142&recv=118&lost=0&retrans=0&sent_bytes=172430&recv_bytes=2297&delivery_rate=48453024&cwnd=256&unsent_bytes=0&cid=515c5f21f79e31b2&ts=1089&x=0"
X-Firefox-Spdy: h2
|
|
| www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-7DP7NV2LKF&cid=173775230.1746765617>m=45je5571v9175474265za200&aip=1&dma=1&dma_cps=syphamo&gcd=13l3l3l2l1l1&npa=1&frm=0&tag_exp=101509156~103101750~103101752~103116025~103200001~103233424~103251618~103251620~103284320~103284322~103301114~103301116&tag_exp=101509156~103101750~103101752~103116025~103200001~103233424~103251618~103251620~103284320~103284322~103301114~103301116&z=1116727106 | 142.250.74.131 | 200 OK | 42 B |
URL GET www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-7DP7NV2LKF&cid=173775230.1746765617>m=45je5571v9175474265za200&aip=1&dma=1&dma_cps=syphamo&gcd=13l3l3l2l1l1&npa=1&frm=0&tag_exp=101509156~103101750~103101752~103116025~103200001~103233424~103251618~103251620~103284320~103284322~103301114~103301116&tag_exp=101509156~103101750~103101752~103116025~103200001~103233424~103251618~103251620~103284320~103284322~103301114~103301116&z=1116727106 IP142.250.74.131:443
Requested byhttps://datanodes.to/download CertificateIssuerGoogle Trust Services Subject*.google.no Fingerprint96:71:F5:6C:70:D9:6D:54:98:11:E4:CD:95:A0:65:AB:94:8A:2E:0B ValidityMon, 31 Mar 2025 08:57:23 GMT - Mon, 23 Jun 2025 08:57:22 GMT
File typeGIF image data, version 89a, 1 x 1 Hashd89746888da2d9510b64a9f031eaecd5 d5fceb6532643d0d84ffe09c40c481ecdf59e15a ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-7DP7NV2LKF&cid=173775230.1746765617>m=45je5571v9175474265za200&aip=1&dma=1&dma_cps=syphamo&gcd=13l3l3l2l1l1&npa=1&frm=0&tag_exp=101509156~103101750~103101752~103116025~103200001~103233424~103251618~103251620~103284320~103284322~103301114~103301116&tag_exp=101509156~103101750~103101752~103116025~103200001~103233424~103251618~103251620~103284320~103284322~103301114~103301116&z=1116727106 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://datanodes.to/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 09 May 2025 04:40:17 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| rthformttet.com/SDluMnApWw1fTykEDBQFOlVTF0IOHFx0FHtbGFsVK1YNAkRxUwscEyRWG1YWOlYARl4mXBoXQg5fPV86MWpdewAMaxlGJBwNInQeEn0LAxQDXztoRRp4Jwc2MUEIdBknfiVFByx1FlFFHHg3WSYLeDx6Ix16CkUHcHM/e1V6fzhVNTFrOUUnC3pXYhUjaAt5GD9NNgMhPXEtXhYZC15mPC97PlRBGRxccDUgCQlmCQlqLHE5KXAvVSoYQVtBNjB3XHoJHWApSxMtcl5WMQxsClklJF1bYx0BbylLJR9zPGcyKlIsBDQJYxtjODhtP18mC1tfdwcqUiwENhoUHV4iAAwmYyEkYQt0OQNfO2gGHW0sRyEAVj9wN317LQM+Cl9fSkYbCAoHISEJJncjCV0MAzF4XDt4Rx1SJAQhJk0mYzg7bCdKMRB1PAIJGgkvfCF7VTlqODxsPgNJDB8EQR8mSVNcPiZJGwYDMQ4 | 3.164.240.84 | 200 OK | 3.1 kB |
URL GET rthformttet.com/SDluMnApWw1fTykEDBQFOlVTF0IOHFx0FHtbGFsVK1YNAkRxUwscEyRWG1YWOlYARl4mXBoXQg5fPV86MWpdewAMaxlGJBwNInQeEn0LAxQDXztoRRp4Jwc2MUEIdBknfiVFByx1FlFFHHg3WSYLeDx6Ix16CkUHcHM/e1V6fzhVNTFrOUUnC3pXYhUjaAt5GD9NNgMhPXEtXhYZC15mPC97PlRBGRxccDUgCQlmCQlqLHE5KXAvVSoYQVtBNjB3XHoJHWApSxMtcl5WMQxsClklJF1bYx0BbylLJR9zPGcyKlIsBDQJYxtjODhtP18mC1tfdwcqUiwENhoUHV4iAAwmYyEkYQt0OQNfO2gGHW0sRyEAVj9wN317LQM+Cl9fSkYbCAoHISEJJncjCV0MAzF4XDt4Rx1SJAQhJk0mYzg7bCdKMRB1PAIJGgkvfCF7VTlqODxsPgNJDB8EQR8mSVNcPiZJGwYDMQ4 IP3.164.240.84:443
Requested byhttps://datanodes.to/download CertificateIssuerAmazon Subjectrthformttet.com Fingerprint35:8E:5A:91:39:BA:7D:DD:00:76:88:9C:B4:95:37:AA:32:78:DF:7B ValidityMon, 21 Apr 2025 00:00:00 GMT - Wed, 20 May 2026 23:59:59 GMT
File typeHTML document, ASCII text, with very long lines (3060), with no line terminators Hash91f92747ae50746b27851edef33660a8 5147313290331046092b3139ae1337cb393b257c ea80409385f40f1c145e737af6a77453e25561e69de1f93fac11dca0d0ca7d0d
GET /SDluMnApWw1fTykEDBQFOlVTF0IOHFx0FHtbGFsVK1YNAkRxUwscEyRWG1YWOlYARl4mXBoXQg5fPV86MWpdewAMaxlGJBwNInQeEn0LAxQDXztoRRp4Jwc2MUEIdBknfiVFByx1FlFFHHg3WSYLeDx6Ix16CkUHcHM/e1V6fzhVNTFrOUUnC3pXYhUjaAt5GD9NNgMhPXEtXhYZC15mPC97PlRBGRxccDUgCQlmCQlqLHE5KXAvVSoYQVtBNjB3XHoJHWApSxMtcl5WMQxsClklJF1bYx0BbylLJR9zPGcyKlIsBDQJYxtjODhtP18mC1tfdwcqUiwENhoUHV4iAAwmYyEkYQt0OQNfO2gGHW0sRyEAVj9wN317LQM+Cl9fSkYbCAoHISEJJncjCV0MAzF4XDt4Rx1SJAQhJk0mYzg7bCdKMRB1PAIJGgkvfCF7VTlqODxsPgNJDB8EQR8mSVNcPiZJGwYDMQ4 HTTP/1.1
Host: rthformttet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://datanodes.to/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/html
content-length: 1204
date: Fri, 09 May 2025 04:40:17 GMT
accept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List
set-cookie: AWSALB=TQzAKG+I/0byTHJSYRMqwPV4hUihsGKQyNlmo2eateQS/ULhtiqKeGfECEaG4AhjNgT9vufraku58cUdKd67kTi4i0EvvwSjOL851cbmcB3e8krMVQkYDg/r2ad0; Expires=Fri, 16 May 2025 04:40:17 GMT; Path=/
AWSALBCORS=TQzAKG+I/0byTHJSYRMqwPV4hUihsGKQyNlmo2eateQS/ULhtiqKeGfECEaG4AhjNgT9vufraku58cUdKd67kTi4i0EvvwSjOL851cbmcB3e8krMVQkYDg/r2ad0; Expires=Fri, 16 May 2025 04:40:17 GMT; Path=/; SameSite=None
server: openresty/1.17.8.2
cache-control: no-store, no-cache, must-revalidate, no-transform
pragma: no-cache
p3p: CP="NID DSP ALL COR"
content-encoding: gzip
x-cache: Miss from cloudfront
via: 1.1 b78539d5f13f3162976a6abc8783d3de.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN53-P2
x-amz-cf-id: rHTsbc2ve4beNL6Qf5aPE2NuJlyk8tC1DM5ng5rvVX4FqGMKVgCCRA==
X-Firefox-Spdy: h2
|
|
| www.google.com/recaptcha/api2/reload?k=6LdhelkqAAAAAH_f47GPnSuEgnjRo4Pf0ukRioGs | 142.250.178.36 | 200 OK | 39 kB |
URL POST www.google.com/recaptcha/api2/reload?k=6LdhelkqAAAAAH_f47GPnSuEgnjRo4Pf0ukRioGs IP142.250.178.36:443
Requested byhttps://www.google.com/recaptcha/api2/anchor?ar=1&k=6LdhelkqAAAAAH_f47GPnSuEgnjRo4Pf0ukRioGs&co=aHR0cHM6Ly9kYXRhbm9kZXMudG86NDQz&hl=en&v=Hi8UmRMnhdOBM3IuViTkapUP&size=invisible&cb=xuxyzgzbwf1x CertificateIssuerGoogle Trust Services Subject*.google.com Fingerprint7E:CD:6A:9E:9E:00:6A:42:52:CC:9D:14:81:1C:68:D4:B9:C4:A4:73 ValidityMon, 31 Mar 2025 08:54:29 GMT - Mon, 23 Jun 2025 08:54:28 GMT
File typeASCII text, with very long lines (38802) Hash3264b65ba5aee0e9e5f51dcdcb9fea6b f40b93c9d52afd1009e8c39483d05e49ee6e409a f6369820c5beda1615304610dc3adf9d9790e38e3cf84a0f2ddf17a01698e3dc
POST /recaptcha/api2/reload?k=6LdhelkqAAAAAH_f47GPnSuEgnjRo4Pf0ukRioGs HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-protobuffer
Content-Length: 12884
Origin: https://www.google.com
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LdhelkqAAAAAH_f47GPnSuEgnjRo4Pf0ukRioGs&co=aHR0cHM6Ly9kYXRhbm9kZXMudG86NDQz&hl=en&v=Hi8UmRMnhdOBM3IuViTkapUP&size=invisible&cb=xuxyzgzbwf1x
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: application/json; charset=utf-8
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
x-content-type-options: nosniff
cross-origin-resource-policy: same-site
cross-origin-opener-policy-report-only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d"
report-to: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]}
content-encoding: gzip
date: Fri, 09 May 2025 04:40:19 GMT
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
set-cookie: _GRECAPTCHA=09AMNxLB-rjnMLwMhuiz9D4pia0055Ijzz0gtwf_jyEVHiPXFm_Pg3ChzfHx7ikYjB_-i2sTOwLhUeNasVqFzMfsU; Expires=Wed, 05-Nov-2025 04:40:19 GMT; Path=/recaptcha; Secure; HttpOnly; Priority=HIGH; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
expires: Fri, 09 May 2025 04:40:19 GMT
cache-control: private
|
|
| datanodes.to/theme_2023/dist/assets/app-80bcdb82.js | 104.26.15.76 | 200 OK | 183 kB |
URL GET datanodes.to/theme_2023/dist/assets/app-80bcdb82.js IP104.26.15.76:443
Requested byhttps://datanodes.to/download CertificateIssuerGoogle Trust Services Subjectdatanodes.to Fingerprint37:77:73:11:B8:A3:75:DF:17:A4:43:CB:D8:37:F9:B8:23:4A:C4:63 ValidityThu, 10 Apr 2025 04:51:00 GMT - Wed, 09 Jul 2025 05:50:41 GMT
File typeJavaScript source, ASCII text, with very long lines (32531) Size183 kB (183021 bytes) Hash68168e1fcc3f0b89637287285c331e9b 2252e15424087258ef80a353512b685215e68335 df548d433ea12395b99a860e96667848bea70b8eeae6348959d3a1cee6fa57c4
GET /theme_2023/dist/assets/app-80bcdb82.js HTTP/1.1
Host: datanodes.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://datanodes.to/download
Cookie: file_code=3k70932eajgm; lang=english; file_name=Napoleon-SteamGG.NET.zip; affiliate=0pcb%2F%2FX21UEJ2fSUcUnMpwvHc7fihr%2BnupZyULxIeDJ4vhisoLiwajWEY3hjXnLd%2FUmhlApiBRCLUcIY5rcxX6wNCQJj2FmwIQQ%3D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 09 May 2025 04:40:16 GMT
content-type: application/javascript
last-modified: Sun, 09 Feb 2025 16:17:00 GMT
etag: W/"67a8d4fc-2caed"
cache-control: max-age=14400
cf-cache-status: HIT
age: 5084
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vcyLy2xSRxIoVjobTth0K47w%2BG5SSebSh%2Biequ3xOqnJQujtByeRcCItPPQJs%2BykBBnyyuMaYX%2B6HQ1fDxwObWOv2zboBRBtYMLeM%2BI6chvPYaBdmQVA5Vdj59Zx%2Fg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 93ce848ddf6a7128-OSL
content-encoding: br
server-timing: cfL4;desc="?proto=TCP&rtt=671&min_rtt=402&rtt_var=156&sent=89&recv=64&lost=0&retrans=0&sent_bytes=100409&recv_bytes=2030&delivery_rate=43376211&cwnd=256&unsent_bytes=0&cid=515c5f21f79e31b2&ts=610&x=0"
X-Firefox-Spdy: h2
|
|
| www.google.com/recaptcha/api2/anchor?ar=1&k=6LdhelkqAAAAAH_f47GPnSuEgnjRo4Pf0ukRioGs&co=aHR0cHM6Ly9kYXRhbm9kZXMudG86NDQz&hl=en&v=Hi8UmRMnhdOBM3IuViTkapUP&size=invisible&cb=xuxyzgzbwf1x | 142.250.178.36 | 200 OK | 74 kB |
URL GET www.google.com/recaptcha/api2/anchor?ar=1&k=6LdhelkqAAAAAH_f47GPnSuEgnjRo4Pf0ukRioGs&co=aHR0cHM6Ly9kYXRhbm9kZXMudG86NDQz&hl=en&v=Hi8UmRMnhdOBM3IuViTkapUP&size=invisible&cb=xuxyzgzbwf1x IP142.250.178.36:443
Requested byhttps://datanodes.to/download CertificateIssuerGoogle Trust Services Subject*.google.com Fingerprint7E:CD:6A:9E:9E:00:6A:42:52:CC:9D:14:81:1C:68:D4:B9:C4:A4:73 ValidityMon, 31 Mar 2025 08:54:29 GMT - Mon, 23 Jun 2025 08:54:28 GMT
File typeHTML document, ASCII text, with very long lines (56624) Hash615e139e0b774cb1a5c2540f5bf24c02 4636d5adaf2fe27d7225b28694febef9c19806cc 2d036c2faf2737cc17977779254eefbec6901ed3ccdb2f0b41decd1021c3c6e2
GET /recaptcha/api2/anchor?ar=1&k=6LdhelkqAAAAAH_f47GPnSuEgnjRo4Pf0ukRioGs&co=aHR0cHM6Ly9kYXRhbm9kZXMudG86NDQz&hl=en&v=Hi8UmRMnhdOBM3IuViTkapUP&size=invisible&cb=xuxyzgzbwf1x HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://datanodes.to/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: text/html; charset=utf-8
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy: require-corp
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}, {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]}
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Fri, 09 May 2025 04:40:17 GMT
content-security-policy: script-src 'nonce-PiFBQf9d3hqJNtAQkBoopQ' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1
cross-origin-opener-policy-report-only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d"
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/poppins/v23/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2 | 142.250.74.35 | 200 OK | 7.8 kB |
URL GET fonts.gstatic.com/s/poppins/v23/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2 IP142.250.74.35:443
Requested byhttps://datanodes.to/download CertificateIssuerGoogle Trust Services Subject*.gstatic.com Fingerprint62:05:36:C2:8E:4C:CD:95:1E:1C:75:06:44:A3:57:E5:C0:17:02:80 ValidityMon, 31 Mar 2025 08:55:35 GMT - Mon, 23 Jun 2025 08:55:34 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 7816, version 1.0 Hash25b0e113ca7cce3770d542736db26368 cb726212d5d525021752a1d8470a0fb593e0c49e 9338e65fc077355c7a87ae0d64cc101e23b9bf8ad78ae65f0f319c857311b526
GET /s/poppins/v23/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://datanodes.to
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7816
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 07 May 2025 17:33:37 GMT
expires: Thu, 07 May 2026 17:33:37 GMT
cache-control: public, max-age=31536000
age: 126399
last-modified: Wed, 23 Apr 2025 16:07:25 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| datanodes.to/theme_2023/dist/assets/_plugin-vue_export-helper-c27b6911.js | 104.26.15.76 | 200 OK | 91 B |
URL GET datanodes.to/theme_2023/dist/assets/_plugin-vue_export-helper-c27b6911.js IP104.26.15.76:443
Requested byhttps://datanodes.to/download CertificateIssuerGoogle Trust Services Subjectdatanodes.to Fingerprint37:77:73:11:B8:A3:75:DF:17:A4:43:CB:D8:37:F9:B8:23:4A:C4:63 ValidityThu, 10 Apr 2025 04:51:00 GMT - Wed, 09 Jul 2025 05:50:41 GMT
Hash25e3a5dcaf00fb2b1ba0c8ecea6d2560 7850b3fd4aeb69387bdb5a60025d15c41351d5eb cb85b0f263dbe24e857338301c0627076592e9f1f1a5662929f86d2c126444aa
GET /theme_2023/dist/assets/_plugin-vue_export-helper-c27b6911.js HTTP/1.1
Host: datanodes.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://datanodes.to/theme_2023/dist/assets/VirusScan-e53a5e80.js
Cookie: file_code=3k70932eajgm; lang=english; file_name=Napoleon-SteamGG.NET.zip; affiliate=0pcb%2F%2FX21UEJ2fSUcUnMpwvHc7fihr%2BnupZyULxIeDJ4vhisoLiwajWEY3hjXnLd%2FUmhlApiBRCLUcIY5rcxX6wNCQJj2FmwIQQ%3D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 09 May 2025 04:40:16 GMT
content-type: application/javascript
last-modified: Sun, 09 Feb 2025 16:17:00 GMT
etag: W/"67a8d4fc-5b"
cache-control: max-age=14400
cf-cache-status: HIT
age: 5083
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7oOzyfur1M7jO9awQU6qKgQpGjoRtNt%2BVkK41%2Ft1THiCDCTjnxecROkJAjqDPVuwPQhuCmJrdJINhkh3DfEJXD%2FTJi%2BB%2BKpBc89BM7JJ%2FteF5f4UwYDKJjf6RJmeDw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 93ce84918ae17128-OSL
content-encoding: br
server-timing: cfL4;desc="?proto=TCP&rtt=1519&min_rtt=402&rtt_var=80&sent=178&recv=142&lost=0&retrans=0&sent_bytes=206318&recv_bytes=3037&delivery_rate=48453024&cwnd=256&unsent_bytes=0&cid=515c5f21f79e31b2&ts=1193&x=0"
X-Firefox-Spdy: h2
|
|
| www.gstatic.com/recaptcha/releases/Hi8UmRMnhdOBM3IuViTkapUP/styles__ltr.css | 142.250.74.99 | 200 OK | 79 kB |
URL GET www.gstatic.com/recaptcha/releases/Hi8UmRMnhdOBM3IuViTkapUP/styles__ltr.css IP142.250.74.99:443
Requested byhttps://www.google.com/recaptcha/api2/anchor?ar=1&k=6LdhelkqAAAAAH_f47GPnSuEgnjRo4Pf0ukRioGs&co=aHR0cHM6Ly9kYXRhbm9kZXMudG86NDQz&hl=en&v=Hi8UmRMnhdOBM3IuViTkapUP&size=invisible&cb=xuxyzgzbwf1x CertificateIssuerGoogle Trust Services Subject*.gstatic.com Fingerprint62:05:36:C2:8E:4C:CD:95:1E:1C:75:06:44:A3:57:E5:C0:17:02:80 ValidityMon, 31 Mar 2025 08:55:35 GMT - Mon, 23 Jun 2025 08:55:34 GMT
File typeASCII text, with very long lines (65536), with no line terminators Hasha68364262d4277632ec1d9f977ca653b 25cba53a73d4284e72688d399cba28403abc2fd3 b38e21e62209b1249673c8b40c2a5e00330f5f22b77dc94fb6ea261408e2abc1
GET /recaptcha/releases/Hi8UmRMnhdOBM3IuViTkapUP/styles__ltr.css HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
timing-allow-origin: *
content-length: 42056
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 08 May 2025 14:33:28 GMT
expires: Fri, 08 May 2026 14:33:28 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 29 Apr 2025 17:05:42 GMT
content-type: text/css
vary: Accept-Encoding
age: 50809
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| datanodes.to/theme_2023/dist/assets/FileActions-fa6032ae.js | 104.26.15.76 | 200 OK | 79 kB |
URL GET datanodes.to/theme_2023/dist/assets/FileActions-fa6032ae.js IP104.26.15.76:443
Requested byhttps://datanodes.to/download CertificateIssuerGoogle Trust Services Subjectdatanodes.to Fingerprint37:77:73:11:B8:A3:75:DF:17:A4:43:CB:D8:37:F9:B8:23:4A:C4:63 ValidityThu, 10 Apr 2025 04:51:00 GMT - Wed, 09 Jul 2025 05:50:41 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (55448) Hash0141e4901d84ce0029f3b424362c7af2 571f2a8995a2ebf2d68f3fafdfd5d316ede31ff0 a30a91209bf26dabfad3b83901707969815ac9908e11b12dc52b7a80b8f4ee80
GET /theme_2023/dist/assets/FileActions-fa6032ae.js HTTP/1.1
Host: datanodes.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://datanodes.to/theme_2023/dist/assets/app-80bcdb82.js
Cookie: file_code=3k70932eajgm; lang=english; file_name=Napoleon-SteamGG.NET.zip; affiliate=0pcb%2F%2FX21UEJ2fSUcUnMpwvHc7fihr%2BnupZyULxIeDJ4vhisoLiwajWEY3hjXnLd%2FUmhlApiBRCLUcIY5rcxX6wNCQJj2FmwIQQ%3D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 09 May 2025 04:40:16 GMT
content-type: application/javascript
last-modified: Sun, 09 Feb 2025 16:17:00 GMT
etag: W/"67a8d4fc-13480"
cache-control: max-age=14400
cf-cache-status: HIT
age: 5083
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=yzK1qUVJcegIUqqhIUBnKj3In7pab9D7xCx0pcRlzopHLEfx3Tfm7IRHYrfk9RoGFD4S%2FMAZu0Y1N9k1nO4tKIPR0QbN0Fyf%2BuXSYsXS%2FYP0ljN8UpNCGkFIpStdzg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 93ce84917ad77128-OSL
content-encoding: br
server-timing: cfL4;desc="?proto=TCP&rtt=1471&min_rtt=402&rtt_var=363&sent=153&recv=130&lost=0&retrans=0&sent_bytes=175796&recv_bytes=3037&delivery_rate=48453024&cwnd=256&unsent_bytes=0&cid=515c5f21f79e31b2&ts=1190&x=0"
X-Firefox-Spdy: h2
|
|
| datanodes.to/cdn-cgi/challenge-platform/h/b/jsd/r/0.39844459126763787:1746763693:HTjJqnsRM030S5-5nGB4s6raNMkUxzSb_6gdIxO9WGM/93ce848aecec7128 | 104.26.15.76 | 200 OK | 0 B |
URL POST datanodes.to/cdn-cgi/challenge-platform/h/b/jsd/r/0.39844459126763787:1746763693:HTjJqnsRM030S5-5nGB4s6raNMkUxzSb_6gdIxO9WGM/93ce848aecec7128 IP104.26.15.76:443
Requested byhttps://datanodes.to/download CertificateIssuerGoogle Trust Services Subjectdatanodes.to Fingerprint37:77:73:11:B8:A3:75:DF:17:A4:43:CB:D8:37:F9:B8:23:4A:C4:63 ValidityThu, 10 Apr 2025 04:51:00 GMT - Wed, 09 Jul 2025 05:50:41 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /cdn-cgi/challenge-platform/h/b/jsd/r/0.39844459126763787:1746763693:HTjJqnsRM030S5-5nGB4s6raNMkUxzSb_6gdIxO9WGM/93ce848aecec7128 HTTP/1.1
Host: datanodes.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 12068
Origin: https://datanodes.to
DNT: 1
Connection: keep-alive
Referer: https://datanodes.to/download
Cookie: file_code=3k70932eajgm; lang=english; file_name=Napoleon-SteamGG.NET.zip; affiliate=0pcb%2F%2FX21UEJ2fSUcUnMpwvHc7fihr%2BnupZyULxIeDJ4vhisoLiwajWEY3hjXnLd%2FUmhlApiBRCLUcIY5rcxX6wNCQJj2FmwIQQ%3D; _ga_7DP7NV2LKF=GS2.1.s1746765616$o1$g0$t1746765616$j60$l0$h0; _ga=GA1.1.173775230.1746765617
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 09 May 2025 04:40:17 GMT
content-type: text/plain; charset=UTF-8
content-length: 0
set-cookie: cf_clearance=p2QuZ6gnaEzrHUcpqEZN9kM.ISOxOrGUbwlkH4sk48A-1746765617-1.2.1.1-uYjGILjff6O3BuNwUbr7kmgzioL4tcXrMxk33wzGs6ZLEuZSSSwQse2Vn5NgliftZJsS6f48fmG_H_nH96152nOmJl3k0XfR8KXY5LIfWstexXTbGc.QhYKmqv0z5Q_.bLbvmBsWDysU0Rovtn1vW3Vj8eIZd6gE5OqOeWbfp9htzuxirQ.9hbaedXoMk_ANhIXTjUBsO1EhRuJUWSIlfE8rTX_Qy3CUaktdlSufY_n7F7gI2VftrsFtqCLcJR.ZlJsAC0TFZudvw0_w.J_j8HKBtNMrdaDERidYWIClxY.Y0YMW1KxLmaAHhmJbQWto9JfDcvQxDsMlObMGi4W4hDY67G_s5tlcmRCvHBcP6R4; HttpOnly; SameSite=None; Partitioned; Secure; Path=/; Domain=datanodes.to; Expires=Sat, 09 May 2026 04:40:17 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=fQv%2FMJKK9Zi%2BJ0ryQBvqnTl0gyuVZi02sARVOhqpUWwHZiE3M6YhWF4VpzS7GxTUHHBVjYUfpYkffLFemzjzNvd3WPpoaPJ4ReVWhnTGZQhKvkAstTaIzCcHSZPxNg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 93ce8493bd197128-OSL
server-timing: cfL4;desc="?proto=TCP&rtt=4472&min_rtt=402&rtt_var=6236&sent=222&recv=176&lost=0&retrans=1&sent_bytes=237441&recv_bytes=16201&delivery_rate=3557739&cwnd=256&unsent_bytes=0&cid=515c5f21f79e31b2&ts=1543&x=0"
X-Firefox-Spdy: h2
|
|
| www.gstatic.com/recaptcha/releases/Hi8UmRMnhdOBM3IuViTkapUP/recaptcha__en.js | 142.250.74.99 | 200 OK | 653 kB |
URL GET www.gstatic.com/recaptcha/releases/Hi8UmRMnhdOBM3IuViTkapUP/recaptcha__en.js IP142.250.74.99:443
Requested byhttps://www.google.com/recaptcha/api2/anchor?ar=1&k=6LdhelkqAAAAAH_f47GPnSuEgnjRo4Pf0ukRioGs&co=aHR0cHM6Ly9kYXRhbm9kZXMudG86NDQz&hl=en&v=Hi8UmRMnhdOBM3IuViTkapUP&size=invisible&cb=xuxyzgzbwf1x CertificateIssuerGoogle Trust Services Subject*.gstatic.com Fingerprint62:05:36:C2:8E:4C:CD:95:1E:1C:75:06:44:A3:57:E5:C0:17:02:80 ValidityMon, 31 Mar 2025 08:55:35 GMT - Mon, 23 Jun 2025 08:55:34 GMT
File typeJavaScript source, ASCII text, with very long lines (671) Size653 kB (652680 bytes) Hashcded17fc3b606bf50119ef5425541a3a e11985d3bbce813e0349e732e24cd757b5a8ea2f 31ab798a14c43a7608cd4eaa6026f4cf209371762263b6d1b0e562a264c00f4c
GET /recaptcha/releases/Hi8UmRMnhdOBM3IuViTkapUP/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
timing-allow-origin: *
content-length: 276859
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 09 May 2025 00:30:30 GMT
expires: Sat, 09 May 2026 00:30:30 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 29 Apr 2025 17:05:42 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 14987
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.google.com/recaptcha/api2/clr?k=6LdhelkqAAAAAH_f47GPnSuEgnjRo4Pf0ukRioGs | 142.250.178.36 | 200 OK | 0 B |
URL POST www.google.com/recaptcha/api2/clr?k=6LdhelkqAAAAAH_f47GPnSuEgnjRo4Pf0ukRioGs IP142.250.178.36:443
Requested byhttps://datanodes.to/download CertificateIssuerGoogle Trust Services Subject*.google.com Fingerprint7E:CD:6A:9E:9E:00:6A:42:52:CC:9D:14:81:1C:68:D4:B9:C4:A4:73 ValidityMon, 31 Mar 2025 08:54:29 GMT - Mon, 23 Jun 2025 08:54:28 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /recaptcha/api2/clr?k=6LdhelkqAAAAAH_f47GPnSuEgnjRo4Pf0ukRioGs HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://datanodes.to/
Content-Length: 1597
Origin: https://datanodes.to
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: application/binary
cross-origin-opener-policy-report-only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d"
report-to: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]}
cross-origin-resource-policy: cross-origin
date: Fri, 09 May 2025 04:40:20 GMT
server: ESF
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.googletagmanager.com/gtag/js?id=G-7DP7NV2LKF | 142.250.178.104 | 200 OK | 381 kB |
URL GET www.googletagmanager.com/gtag/js?id=G-7DP7NV2LKF IP142.250.178.104:443
Requested byhttps://datanodes.to/download CertificateIssuerGoogle Trust Services Subject*.google-analytics.com FingerprintB7:82:F3:C7:93:B0:60:B0:83:49:F8:74:0D:49:78:23:65:0B:37:01 ValidityMon, 31 Mar 2025 08:54:29 GMT - Mon, 23 Jun 2025 08:54:28 GMT
File typeJavaScript source, ASCII text, with very long lines (6125) Size381 kB (381221 bytes) Hash069cb235739f0db919e7da07e44d619d 1984936e3c9def44019446bda8c80e0730e3e196 4a08606c3b781ddccf5208326f55657381f4fa7a7913e5f5b5d1f022a2d77cb4
GET /gtag/js?id=G-7DP7NV2LKF HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://datanodes.to/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Fri, 09 May 2025 04:40:16 GMT
expires: Fri, 09 May 2025 04:40:16 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgcycc:1075:0
cross-origin-opener-policy-report-only: same-origin; report-to=ascgcycc:1075:0
report-to: {"group":"ascgcycc:1075:0","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgcycc:1075:0"}],}
server: Google Tag Manager
content-length: 127196
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| datanodes.to/theme_2023/dist/assets/_commonjsHelpers-d4b30cbb.js | 104.26.15.76 | 200 OK | 571 B |
URL GET datanodes.to/theme_2023/dist/assets/_commonjsHelpers-d4b30cbb.js IP104.26.15.76:443
Requested byhttps://datanodes.to/download CertificateIssuerGoogle Trust Services Subjectdatanodes.to Fingerprint37:77:73:11:B8:A3:75:DF:17:A4:43:CB:D8:37:F9:B8:23:4A:C4:63 ValidityThu, 10 Apr 2025 04:51:00 GMT - Wed, 09 Jul 2025 05:50:41 GMT
File typeJavaScript source, ASCII text, with very long lines (570) Hash438e021bb3322f23fb81092ef78dd510 51a31923f243d4af84ef0f6e710bdf202e52c6c9 85533b0eb874013bd2468499e014675813269c8983bf7e0abc366d1715020769
GET /theme_2023/dist/assets/_commonjsHelpers-d4b30cbb.js HTTP/1.1
Host: datanodes.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://datanodes.to/theme_2023/dist/assets/VirusScan-e53a5e80.js
Cookie: file_code=3k70932eajgm; lang=english; file_name=Napoleon-SteamGG.NET.zip; affiliate=0pcb%2F%2FX21UEJ2fSUcUnMpwvHc7fihr%2BnupZyULxIeDJ4vhisoLiwajWEY3hjXnLd%2FUmhlApiBRCLUcIY5rcxX6wNCQJj2FmwIQQ%3D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 09 May 2025 04:40:16 GMT
content-type: application/javascript
last-modified: Sun, 09 Feb 2025 16:17:00 GMT
etag: W/"67a8d4fc-23b"
cache-control: max-age=14400
cf-cache-status: HIT
age: 5083
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=v%2FPAVbfw8PCcQreuDtng0XiQoPbGQqES%2BGZLcI05GRRV5ZOto%2BmSCKDdhnihCE2pl5RtucZtCk0%2FXtQ%2FxQxF30NdPgkb7b5vkBxSeSp8Gy3DvfiQ0R1ysHhGCcC7BQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 93ce84918ae57128-OSL
content-encoding: br
server-timing: cfL4;desc="?proto=TCP&rtt=1602&min_rtt=402&rtt_var=346&sent=180&recv=144&lost=0&retrans=0&sent_bytes=206978&recv_bytes=3037&delivery_rate=48453024&cwnd=256&unsent_bytes=0&cid=515c5f21f79e31b2&ts=1199&x=0"
X-Firefox-Spdy: h2
|
|
| datanodes.to/theme_2023/dist/assets/Tooltip-298cb247.js | 104.26.15.76 | 200 OK | 17 kB |
URL GET datanodes.to/theme_2023/dist/assets/Tooltip-298cb247.js IP104.26.15.76:443
Requested byhttps://datanodes.to/download CertificateIssuerGoogle Trust Services Subjectdatanodes.to Fingerprint37:77:73:11:B8:A3:75:DF:17:A4:43:CB:D8:37:F9:B8:23:4A:C4:63 ValidityThu, 10 Apr 2025 04:51:00 GMT - Wed, 09 Jul 2025 05:50:41 GMT
File typeJavaScript source, ASCII text, with very long lines (16550) Hashe9abb5c958cc124ca4108f522fececdb cb0430b6ad9229cf2179a201e15360e496f24491 8125fdfeff86def1e8543526af797cbb7eb4bd87a161da3f18968b3fd8a83e53
GET /theme_2023/dist/assets/Tooltip-298cb247.js HTTP/1.1
Host: datanodes.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://datanodes.to/theme_2023/dist/assets/FileActions-fa6032ae.js
Cookie: file_code=3k70932eajgm; lang=english; file_name=Napoleon-SteamGG.NET.zip; affiliate=0pcb%2F%2FX21UEJ2fSUcUnMpwvHc7fihr%2BnupZyULxIeDJ4vhisoLiwajWEY3hjXnLd%2FUmhlApiBRCLUcIY5rcxX6wNCQJj2FmwIQQ%3D; _ga_7DP7NV2LKF=GS2.1.s1746765616$o1$g0$t1746765616$j60$l0$h0; _ga=GA1.1.173775230.1746765617
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 09 May 2025 04:40:17 GMT
content-type: application/javascript
last-modified: Sun, 09 Feb 2025 16:17:00 GMT
etag: W/"67a8d4fc-40a7"
cache-control: max-age=14400
cf-cache-status: HIT
age: 5084
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RBPrqG7YIvZQOF6RRieH88%2Bak37i4hp4iBZih8IPeIjuWipgNfUWoRss5jvK4vZ4HH1Q75W14uVo9wCCXOAe2WEqD0ZGZ8hHXLCLKGtCMxLf%2B6Z4WF2%2BU4LsdFMm7g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 93ce84926bba7128-OSL
content-encoding: br
server-timing: cfL4;desc="?proto=TCP&rtt=3132&min_rtt=402&rtt_var=4152&sent=192&recv=153&lost=0&retrans=0&sent_bytes=214156&recv_bytes=3745&delivery_rate=48453024&cwnd=256&unsent_bytes=0&cid=515c5f21f79e31b2&ts=1338&x=0"
X-Firefox-Spdy: h2
|
|
| datanodes.to/theme_2023/dist/assets/transition-a1567fd4.js | 104.26.15.76 | 200 OK | 28 kB |
URL GET datanodes.to/theme_2023/dist/assets/transition-a1567fd4.js IP104.26.15.76:443
Requested byhttps://datanodes.to/download CertificateIssuerGoogle Trust Services Subjectdatanodes.to Fingerprint37:77:73:11:B8:A3:75:DF:17:A4:43:CB:D8:37:F9:B8:23:4A:C4:63 ValidityThu, 10 Apr 2025 04:51:00 GMT - Wed, 09 Jul 2025 05:50:41 GMT
File typeJavaScript source, ASCII text, with very long lines (27942) Hash6b949827cd27578f8d96e716764745fd fc5d054a81cc11c95726bf55f11fc0c96ae0f58b 579bb21ed189cf13357365e55a2dc69ca1e3866ce7566362e163cfe86b3f3aee
GET /theme_2023/dist/assets/transition-a1567fd4.js HTTP/1.1
Host: datanodes.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://datanodes.to/theme_2023/dist/assets/FileActions-fa6032ae.js
Cookie: file_code=3k70932eajgm; lang=english; file_name=Napoleon-SteamGG.NET.zip; affiliate=0pcb%2F%2FX21UEJ2fSUcUnMpwvHc7fihr%2BnupZyULxIeDJ4vhisoLiwajWEY3hjXnLd%2FUmhlApiBRCLUcIY5rcxX6wNCQJj2FmwIQQ%3D; _ga_7DP7NV2LKF=GS2.1.s1746765616$o1$g0$t1746765616$j60$l0$h0; _ga=GA1.1.173775230.1746765617
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 09 May 2025 04:40:17 GMT
content-type: application/javascript
last-modified: Sun, 09 Feb 2025 16:17:00 GMT
etag: W/"67a8d4fc-6d27"
cache-control: max-age=14400
cf-cache-status: HIT
age: 5084
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0daIr9GDcK%2BjH6HyaapvnrLUVtmzaYID1GDssALqqnPraCLSCjQ85c2ACcjWOcPRfhjqEQy498cCxFvI1W%2BgdMjxzMQ33FT855NdNSKY2UixVuB4v9fvCXg4GJAiNA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 93ce84926bbb7128-OSL
content-encoding: br
server-timing: cfL4;desc="?proto=TCP&rtt=2308&min_rtt=402&rtt_var=1938&sent=203&recv=158&lost=0&retrans=0&sent_bytes=223962&recv_bytes=3745&delivery_rate=48453024&cwnd=256&unsent_bytes=0&cid=515c5f21f79e31b2&ts=1342&x=0"
X-Firefox-Spdy: h2
|
|
| handhadbeensotr.com/QlA2cTVtb1UCCBsFA0dgciRvF2A2OlAdZ3oDcTdMFD5CIW8aIxAFXCZtB0AAemYCQhMyOVJMBGQjQhBBNyMLQBMrPlAeCGQmC0AbcWQYQgNsZBAECHN2QgFUJW0HV0U2JFpMBHVkAEYDd2YHRgFxaQ | 104.21.22.182 | 204 No Content | 0 B |
URL GET handhadbeensotr.com/QlA2cTVtb1UCCBsFA0dgciRvF2A2OlAdZ3oDcTdMFD5CIW8aIxAFXCZtB0AAemYCQhMyOVJMBGQjQhBBNyMLQBMrPlAeCGQmC0AbcWQYQgNsZBAECHN2QgFUJW0HV0U2JFpMBHVkAEYDd2YHRgFxaQ IP104.21.22.182:443
Requested byhttps://datanodes.to/download CertificateIssuerGoogle Trust Services Subjecthandhadbeensotr.com FingerprintC0:43:BD:46:B4:27:70:E6:09:2E:FD:5C:F5:71:16:43:0D:2E:63:CF ValidityFri, 04 Apr 2025 10:43:35 GMT - Thu, 03 Jul 2025 11:41:45 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /QlA2cTVtb1UCCBsFA0dgciRvF2A2OlAdZ3oDcTdMFD5CIW8aIxAFXCZtB0AAemYCQhMyOVJMBGQjQhBBNyMLQBMrPlAeCGQmC0AbcWQYQgNsZBAECHN2QgFUJW0HV0U2JFpMBHVkAEYDd2YHRgFxaQ HTTP/1.1
Host: handhadbeensotr.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://datanodes.to/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
date: Fri, 09 May 2025 04:40:17 GMT
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=EgdkNbHFTTB2DEyrZKl66jHKYuuHSpby5zIQqXYxJH5f1jW267uz2YcSOqlBu%2BtC7eTA2vJNoTMnCklTiwOTIoaEgxTw7yVcqM2m7Fv013J3ujoAG4zpyVAVbleGDxxYIELs6Pwo"}]}
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
server: cloudflare
cf-ray: 93ce849589cb569f-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| datanodes.to/favicon.ico | 104.26.15.76 | 200 OK | 2.5 kB |
IP104.26.15.76:443
Requested byhttps://datanodes.to/download CertificateIssuerGoogle Trust Services Subjectdatanodes.to Fingerprint37:77:73:11:B8:A3:75:DF:17:A4:43:CB:D8:37:F9:B8:23:4A:C4:63 ValidityThu, 10 Apr 2025 04:51:00 GMT - Wed, 09 Jul 2025 05:50:41 GMT
File typePNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced Hashc813091dc9f029ba08588f60cc450755 d2b2f0efc676eff758c4194d80ff2e9ee973f556 682e513cfa795efc1e53c502e9a8aa3d91db160b7fd15f94de2a4156a6961474
GET /favicon.ico HTTP/1.1
Host: datanodes.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://datanodes.to/download
Cookie: file_code=3k70932eajgm; lang=english; file_name=Napoleon-SteamGG.NET.zip; affiliate=0pcb%2F%2FX21UEJ2fSUcUnMpwvHc7fihr%2BnupZyULxIeDJ4vhisoLiwajWEY3hjXnLd%2FUmhlApiBRCLUcIY5rcxX6wNCQJj2FmwIQQ%3D; _ga_7DP7NV2LKF=GS2.1.s1746765616$o1$g0$t1746765616$j60$l0$h0; _ga=GA1.1.173775230.1746765617
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 09 May 2025 04:40:17 GMT
content-type: image/x-icon
last-modified: Thu, 01 Sep 2022 19:47:58 GMT
etag: W/"63110c6e-99d"
cache-control: max-age=14400
cf-cache-status: HIT
age: 1510
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dd8kU0VDC6E8xV82%2BbtXcdGaidBNd%2F9AVZSLV066%2BUN%2BCGpCdjYzdSGWREc9RnPwTFICNo6u7n%2BGi6uXXN4UTT8DAItMXCU0buhb%2Fiv441NzwsHWgOG6c2Cemb7acQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 93ce8492ac027128-OSL
content-encoding: br
server-timing: cfL4;desc="?proto=TCP&rtt=4564&min_rtt=402&rtt_var=7156&sent=212&recv=163&lost=0&retrans=0&sent_bytes=234365&recv_bytes=3837&delivery_rate=48453024&cwnd=256&unsent_bytes=0&cid=515c5f21f79e31b2&ts=1378&x=0"
X-Firefox-Spdy: h2
|
|
| ukankingwithea.com/ | 104.21.112.1 | 200 OK | 27 B |
IP104.21.112.1:443
Requested byhttps://datanodes.to/download CertificateIssuerGoogle Trust Services Subjectukankingwithea.com Fingerprint02:15:28:2A:F2:F8:5D:3A:DE:6D:1D:DC:CF:6D:06:BA:00:3A:63:70 ValidityTue, 29 Apr 2025 13:46:48 GMT - Mon, 28 Jul 2025 14:44:24 GMT
File typeASCII text, with no line terminators Hash3eac612ec1eaed10f5ded0b796e2e402 8b86f1b132ee56f902a0f0ad193a68b37a87fb34 275e094468cc01be1656c814f676ebca255026af85cac1d65ff70c5ce57555cf
GET / HTTP/1.1
Host: ukankingwithea.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://datanodes.to/
Origin: https://datanodes.to
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 09 May 2025 04:40:17 GMT
content-type: text/plain
server: cloudflare
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
access-control-allow-origin: https://datanodes.to
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-headers: X-Requested-With, content-type
cf-cache-status: DYNAMIC
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=rVRjDR%2F4abJpYYPXcfchzaxmsOMzG5SsnrpNzfQ%2Bgonnxk01w2dIweLoBHLB0j%2BdcLDBaeIZwZws31U7wejvHSueoVl7PVhE2ei7JuUL16nZZgH65ojfEpp7My3a9X4Y%2BCVIWK4%3D"}]}
content-encoding: br
set-cookie: csu=1089913626501351@1@1746765617; SameSite=None; Secure; Max-Age=31104000
cf-ray: 93ce84956b3556a5-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| accounts.google.com/InteractiveLogin?continue=https://www.youtube.com/favicon.ico&hl=en&passive=true&service=youtube&uilel=3&ifkv=ASKV5Mi2TiMnquQe36PpMgBnveqD6JU2UAdWvNJQYO3Q3TCvUJ6s4vMyDqOxaIY8G9i2mb-3wnAt | 64.233.164.84 | 302 Found | 0 B |
URL GET accounts.google.com/InteractiveLogin?continue=https://www.youtube.com/favicon.ico&hl=en&passive=true&service=youtube&uilel=3&ifkv=ASKV5Mi2TiMnquQe36PpMgBnveqD6JU2UAdWvNJQYO3Q3TCvUJ6s4vMyDqOxaIY8G9i2mb-3wnAt IP64.233.164.84:443
Requested byhttps://datanodes.to/download CertificateIssuerGoogle Trust Services Subjectaccounts.google.com Fingerprint59:74:47:4D:79:55:0E:D6:C9:C5:58:53:27:7B:B5:9B:F6:02:63:84 ValidityMon, 21 Apr 2025 08:42:44 GMT - Mon, 14 Jul 2025 08:42:43 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /InteractiveLogin?continue=https://www.youtube.com/favicon.ico&hl=en&passive=true&service=youtube&uilel=3&ifkv=ASKV5Mi2TiMnquQe36PpMgBnveqD6JU2UAdWvNJQYO3Q3TCvUJ6s4vMyDqOxaIY8G9i2mb-3wnAt HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://datanodes.to/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
content-type: text/html; charset=UTF-8
set-cookie: __Host-GAPS=1:TQOzL8zD83Mzj4W029HFNF5zj1PR0Q:etZK2JlGQYcid6LC;Path=/;Expires=Sun, 09-May-2027 04:40:18 GMT;Secure;HttpOnly;Priority=HIGH
x-frame-options: DENY
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Fri, 09 May 2025 04:40:18 GMT
location: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&hl=en&ifkv=ASKV5MjEzy6chOTzD_vqikEXAktE4ZfKhZakfKV1VkBJERbqGwT4HqAM_5KpKFT-E1pFUy9YZNy2&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S657164674%3A1746765618144812
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-opener-policy-report-only: same-origin; report-to="coop_gse_qebhlk"
report-to: {"group":"coop_gse_qebhlk","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gse_qebhlk"}]}
content-security-policy: require-trusted-types-for 'script';report-uri /cspreport, script-src 'nonce-yeOq6pnch5eEayTUoqq3bQ' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /cspreport
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 417
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 | 142.250.74.35 | 200 OK | 16 kB |
URL GET fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 IP142.250.74.35:443
Requested byhttps://www.google.com/recaptcha/api2/anchor?ar=1&k=6LdhelkqAAAAAH_f47GPnSuEgnjRo4Pf0ukRioGs&co=aHR0cHM6Ly9kYXRhbm9kZXMudG86NDQz&hl=en&v=Hi8UmRMnhdOBM3IuViTkapUP&size=invisible&cb=xuxyzgzbwf1x CertificateIssuerGoogle Trust Services Subject*.gstatic.com Fingerprint62:05:36:C2:8E:4C:CD:95:1E:1C:75:06:44:A3:57:E5:C0:17:02:80 ValidityMon, 31 Mar 2025 08:55:35 GMT - Mon, 23 Jun 2025 08:55:34 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 15552, version 1.0 Hash285467176f7fe6bb6a9c6873b3dad2cc ea04e4ff5142ddd69307c183def721a160e0a64e 5a8c1e7681318caa29e9f44e8a6e271f6a4067a2703e9916dfd4fe9099241db7
GET /s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.google.com
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15552
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 08 May 2025 10:26:11 GMT
expires: Fri, 08 May 2026 10:26:11 GMT
cache-control: public, max-age=31536000
age: 65647
last-modified: Mon, 16 Oct 2017 17:33:02 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| datanodes.to/3k70932eajgm/Napoleon-SteamGG.NET.zip | 104.26.15.76 | 302 Found | 82 kB |
URL User Request GET datanodes.to/3k70932eajgm/Napoleon-SteamGG.NET.zip IP104.26.15.76:443
CertificateIssuerGoogle Trust Services Subjectdatanodes.to Fingerprint37:77:73:11:B8:A3:75:DF:17:A4:43:CB:D8:37:F9:B8:23:4A:C4:63 ValidityThu, 10 Apr 2025 04:51:00 GMT - Wed, 09 Jul 2025 05:50:41 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /3k70932eajgm/Napoleon-SteamGG.NET.zip HTTP/1.1
Host: datanodes.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Fri, 09 May 2025 04:40:15 GMT
location: https://datanodes.to/download
cf-cache-status: BYPASS
set-cookie: file_code=3k70932eajgm; domain=.datanodes.to; path=/; expires=Fri, 09-May-2025 05:40:15 GMT
lang=english; domain=.datanodes.to; path=/
file_name=Napoleon-SteamGG.NET.zip; domain=.datanodes.to; path=/; expires=Fri, 09-May-2025 05:40:15 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=qRZLO%2FUxTqqp8119KPaWmlHsDpzimEM67jnZIP0FebkscShbxVdXDIpEGGCZIoLAgAtmWOqY%2BIdpuMZmx989vZw70J%2FjtBhbBAdG3a9KAZ9gxn7UZCmRSkDXWEE9cA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 93ce848a3c6c7128-OSL
server-timing: cfL4;desc="?proto=TCP&rtt=7566&min_rtt=512&rtt_var=12109&sent=7&recv=11&lost=0&retrans=0&sent_bytes=3278&recv_bytes=1275&delivery_rate=7121311&cwnd=254&unsent_bytes=0&cid=515c5f21f79e31b2&ts=117&x=0"
X-Firefox-Spdy: h2
|
|
| www.google.com/recaptcha/api2/webworker.js?hl=en&v=Hi8UmRMnhdOBM3IuViTkapUP | 142.250.178.36 | 200 OK | 102 B |
URL GET www.google.com/recaptcha/api2/webworker.js?hl=en&v=Hi8UmRMnhdOBM3IuViTkapUP IP142.250.178.36:443
Requested byhttps://www.google.com/recaptcha/api2/anchor?ar=1&k=6LdhelkqAAAAAH_f47GPnSuEgnjRo4Pf0ukRioGs&co=aHR0cHM6Ly9kYXRhbm9kZXMudG86NDQz&hl=en&v=Hi8UmRMnhdOBM3IuViTkapUP&size=invisible&cb=xuxyzgzbwf1x CertificateIssuerGoogle Trust Services Subject*.google.com Fingerprint7E:CD:6A:9E:9E:00:6A:42:52:CC:9D:14:81:1C:68:D4:B9:C4:A4:73 ValidityMon, 31 Mar 2025 08:54:29 GMT - Mon, 23 Jun 2025 08:54:28 GMT
File typeASCII text, with no line terminators Hash1a68e7627d97797a90c2ffcb3d213036 4dcfa77ea7083b5d4185ff524f944def15c747f0 8ae36edae3521eb27294881730e3699c0787838eb7f427b4f283d8af896096cb
GET /recaptcha/api2/webworker.js?hl=en&v=Hi8UmRMnhdOBM3IuViTkapUP HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LdhelkqAAAAAH_f47GPnSuEgnjRo4Pf0ukRioGs&co=aHR0cHM6Ly9kYXRhbm9kZXMudG86NDQz&hl=en&v=Hi8UmRMnhdOBM3IuViTkapUP&size=invisible&cb=xuxyzgzbwf1x
Sec-Fetch-Dest: worker
Sec-Fetch-Mode: same-origin
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: text/javascript; charset=utf-8
cross-origin-embedder-policy: require-corp
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}, {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]}
expires: Fri, 09 May 2025 04:40:18 GMT
date: Fri, 09 May 2025 04:40:18 GMT
cache-control: private, max-age=300
cross-origin-opener-policy-report-only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d"
cross-origin-resource-policy: same-site
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.gstatic.com/recaptcha/api2/logo_48.png | 142.250.74.99 | 200 OK | 2.2 kB |
URL GET www.gstatic.com/recaptcha/api2/logo_48.png IP142.250.74.99:443
Requested byhttps://www.google.com/recaptcha/api2/anchor?ar=1&k=6LdhelkqAAAAAH_f47GPnSuEgnjRo4Pf0ukRioGs&co=aHR0cHM6Ly9kYXRhbm9kZXMudG86NDQz&hl=en&v=Hi8UmRMnhdOBM3IuViTkapUP&size=invisible&cb=xuxyzgzbwf1x CertificateIssuerGoogle Trust Services Subject*.gstatic.com Fingerprint62:05:36:C2:8E:4C:CD:95:1E:1C:75:06:44:A3:57:E5:C0:17:02:80 ValidityMon, 31 Mar 2025 08:55:35 GMT - Mon, 23 Jun 2025 08:55:34 GMT
File typePNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced Hashef9941290c50cd3866e2ba6b793f010d 4736508c795667dcea21f8d864233031223b7832 1b9efb22c938500971aac2b2130a475fa23684dd69e43103894968df83145b8a
GET /recaptcha/api2/logo_48.png HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.gstatic.com/recaptcha/releases/Hi8UmRMnhdOBM3IuViTkapUP/styles__ltr.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
accept-ranges: bytes
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 2228
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 08 May 2025 10:27:36 GMT
expires: Thu, 15 May 2025 10:27:36 GMT
cache-control: public, max-age=604800
age: 65562
last-modified: Tue, 03 Mar 2020 20:15:00 GMT
content-type: image/png
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/poppins/v23/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2 | 142.250.74.35 | 200 OK | 7.7 kB |
URL GET fonts.gstatic.com/s/poppins/v23/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2 IP142.250.74.35:443
Requested byhttps://datanodes.to/download CertificateIssuerGoogle Trust Services Subject*.gstatic.com Fingerprint62:05:36:C2:8E:4C:CD:95:1E:1C:75:06:44:A3:57:E5:C0:17:02:80 ValidityMon, 31 Mar 2025 08:55:35 GMT - Mon, 23 Jun 2025 08:55:34 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 7748, version 1.0 Hasha09f2fccfee35b7247b08a1a266f0328 0da2d17e738f46d2a09e6fb7969da451719a9820 cd36de204aca2d5fa263a731f7c20009b5e3d754ba1f1e03c33e93a48f3e7446
GET /s/poppins/v23/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://datanodes.to
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7748
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 07 May 2025 20:17:34 GMT
expires: Thu, 07 May 2026 20:17:34 GMT
cache-control: public, max-age=31536000
age: 116562
last-modified: Wed, 23 Apr 2025 16:07:32 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| | 104.26.15.76 | 200 OK | 82 kB |
IP104.26.15.76:443
CertificateIssuerGoogle Trust Services Subjectdatanodes.to Fingerprint37:77:73:11:B8:A3:75:DF:17:A4:43:CB:D8:37:F9:B8:23:4A:C4:63 ValidityThu, 10 Apr 2025 04:51:00 GMT - Wed, 09 Jul 2025 05:50:41 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (56968) Hash13d1fb256ee0491389765b83817c1b13 0d079ef38a76db84c68423fb313f5ab053031310 62eeaa310fa84fedf7022075914729e94c92eabc8484bdcf7df25c8358032071
GET /download HTTP/1.1
Host: datanodes.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: file_code=3k70932eajgm; lang=english; file_name=Napoleon-SteamGG.NET.zip
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 09 May 2025 04:40:15 GMT
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
set-cookie: affiliate=0pcb%2F%2FX21UEJ2fSUcUnMpwvHc7fihr%2BnupZyULxIeDJ4vhisoLiwajWEY3hjXnLd%2FUmhlApiBRCLUcIY5rcxX6wNCQJj2FmwIQQ%3D; domain=.datanodes.to; path=/; expires=Fri, 23-May-2025 04:40:15 GMT
expires: Thu, 08 May 2025 04:40:15 GMT
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=h%2BZLXn0MObakCVBMz%2FYraAAEyIXfZSRcewHoVDRbPP0uFbfVccUscd1Z0jU6sqMOdqmHGO1U44DxxIUuogMUXd2k2P%2BeSi%2FxLCbP5512EaLtPMYJSLJT4nervkRDew%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 93ce848aecec7128-OSL
content-encoding: br
server-timing: cfL4;desc="?proto=TCP&rtt=5899&min_rtt=433&rtt_var=9702&sent=10&recv=14&lost=0&retrans=0&sent_bytes=4070&recv_bytes=1405&delivery_rate=7121311&cwnd=256&unsent_bytes=0&cid=515c5f21f79e31b2&ts=242&x=0"
X-Firefox-Spdy: h2
|
|
| accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&uilel=3&hl=en&service=youtube | 64.233.164.84 | 302 Found | 0 B |
URL GET accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&uilel=3&hl=en&service=youtube IP64.233.164.84:443
Requested byhttps://datanodes.to/download CertificateIssuerGoogle Trust Services Subjectaccounts.google.com Fingerprint59:74:47:4D:79:55:0E:D6:C9:C5:58:53:27:7B:B5:9B:F6:02:63:84 ValidityMon, 21 Apr 2025 08:42:44 GMT - Mon, 14 Jul 2025 08:42:43 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&uilel=3&hl=en&service=youtube HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://datanodes.to/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
content-type: application/binary
set-cookie: __Host-GAPS=1:zXMPaMlsJCZsJJd2fiSOW65k4MTHrw:nSqKuh1820tVopOd; Expires=Sun, 09-May-2027 04:40:18 GMT; Path=/; Secure; HttpOnly; Priority=HIGH
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Fri, 09 May 2025 04:40:18 GMT
location: https://accounts.google.com/InteractiveLogin?continue=https://www.youtube.com/favicon.ico&hl=en&passive=true&service=youtube&uilel=3&ifkv=ASKV5Mi2TiMnquQe36PpMgBnveqD6JU2UAdWvNJQYO3Q3TCvUJ6s4vMyDqOxaIY8G9i2mb-3wnAt
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-opener-policy: unsafe-none
content-security-policy: require-trusted-types-for 'script';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport, script-src 'nonce-p-t9IISS38DwmchQm_miUQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/AccountsSigninPassiveLoginHttp/cspreport/allowlist
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
cross-origin-resource-policy: cross-origin
server: ESF
content-length: 0
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| region1.analytics.google.com/g/collect?v=2&tid=G-7DP7NV2LKF>m=45je5571v9175474265za200&_p=1746765616590&gcd=13l3l3l2l1l1&npa=1&dma_cps=syphamo&dma=1&tag_exp=101509156~103101750~103101752~103116025~103200001~103233424~103251618~103251620~103284320~103284322~103301114~103301116&cid=173775230.1746765617&ul=en-us&sr=1280x1024&frm=0&pscdl=noapi&_eu=AEAAAAQ&_s=2&sid=1746765616&sct=1&seg=0&dl=https%3A%2F%2Fdatanodes.to%2Fdownload&dt=Download%20Napoleon%20SteamGG%20zip&en=scroll&epn.percent_scrolled=90&tfd=6656 | 216.239.32.36 | 204 No Content | 0 B |
URL POST region1.analytics.google.com/g/collect?v=2&tid=G-7DP7NV2LKF>m=45je5571v9175474265za200&_p=1746765616590&gcd=13l3l3l2l1l1&npa=1&dma_cps=syphamo&dma=1&tag_exp=101509156~103101750~103101752~103116025~103200001~103233424~103251618~103251620~103284320~103284322~103301114~103301116&cid=173775230.1746765617&ul=en-us&sr=1280x1024&frm=0&pscdl=noapi&_eu=AEAAAAQ&_s=2&sid=1746765616&sct=1&seg=0&dl=https%3A%2F%2Fdatanodes.to%2Fdownload&dt=Download%20Napoleon%20SteamGG%20zip&en=scroll&epn.percent_scrolled=90&tfd=6656 IP216.239.32.36:443
Requested byhttps://datanodes.to/download CertificateIssuerGoogle Trust Services Subject*.google-analytics.com FingerprintB7:82:F3:C7:93:B0:60:B0:83:49:F8:74:0D:49:78:23:65:0B:37:01 ValidityMon, 31 Mar 2025 08:54:29 GMT - Mon, 23 Jun 2025 08:54:28 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-7DP7NV2LKF>m=45je5571v9175474265za200&_p=1746765616590&gcd=13l3l3l2l1l1&npa=1&dma_cps=syphamo&dma=1&tag_exp=101509156~103101750~103101752~103116025~103200001~103233424~103251618~103251620~103284320~103284322~103301114~103301116&cid=173775230.1746765617&ul=en-us&sr=1280x1024&frm=0&pscdl=noapi&_eu=AEAAAAQ&_s=2&sid=1746765616&sct=1&seg=0&dl=https%3A%2F%2Fdatanodes.to%2Fdownload&dt=Download%20Napoleon%20SteamGG%20zip&en=scroll&epn.percent_scrolled=90&tfd=6656 HTTP/1.1
Host: region1.analytics.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://datanodes.to/
Origin: https://datanodes.to
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Content-Length: 0
HTTP/3 204 No Content
access-control-allow-origin: https://datanodes.to
date: Fri, 09 May 2025 04:40:22 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
content-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsggc:153:0
cross-origin-opener-policy-report-only: same-origin; report-to=ascnsrsggc:153:0
report-to: {"group":"ascnsrsggc:153:0","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/ascnsrsggc:153:0"}],}
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| d2eq4x4u2q3fwc.cloudfront.net/?uxqed=1158643 | 54.230.245.130 | 200 OK | 384 kB |
URL GET d2eq4x4u2q3fwc.cloudfront.net/?uxqed=1158643 IP54.230.245.130:443
Requested byhttps://datanodes.to/download CertificateIssuerAmazon Subject*.cloudfront.net Fingerprint28:D3:87:79:3C:E8:8B:3C:D9:10:45:E5:F7:64:7A:6D:44:4E:5A:62 ValidityTue, 30 Jul 2024 00:00:00 GMT - Thu, 03 Jul 2025 23:59:59 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (38488) Size384 kB (384401 bytes) Hash7dcd006c7c9f193ab02f47dc30e3c131 ebdfedcca4bc90332ceb45f70364c392e9955243 5f9e372df19a54b52d1e08004d24fd4b8a4370bbd51c52fc1a5130a8616a1bae
GET /?uxqed=1158643 HTTP/1.1
Host: d2eq4x4u2q3fwc.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://datanodes.to/
Origin: https://datanodes.to
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-length: 126858
date: Thu, 08 May 2025 08:34:56 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://datanodes.to
cache-control: no-store, no-cache, proxy-revalidate, must-revalidate, private, no-transform
content-encoding: gzip
pragma: no-cache
x-cache: Hit from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 6icFOaJfvSyTYIehdNstAFjW0IRM6vezicrJo8DJ2HBnmwCNhkXySg==
age: 72321
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 | 142.250.74.35 | 200 OK | 15 kB |
URL GET fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 IP142.250.74.35:443
Requested byhttps://www.google.com/recaptcha/api2/anchor?ar=1&k=6LdhelkqAAAAAH_f47GPnSuEgnjRo4Pf0ukRioGs&co=aHR0cHM6Ly9kYXRhbm9kZXMudG86NDQz&hl=en&v=Hi8UmRMnhdOBM3IuViTkapUP&size=invisible&cb=xuxyzgzbwf1x CertificateIssuerGoogle Trust Services Subject*.gstatic.com Fingerprint62:05:36:C2:8E:4C:CD:95:1E:1C:75:06:44:A3:57:E5:C0:17:02:80 ValidityMon, 31 Mar 2025 08:55:35 GMT - Mon, 23 Jun 2025 08:55:34 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 15344, version 1.0 Hash5d4aeb4e5f5ef754e307d7ffaef688bd 06db651cdf354c64a7383ea9c77024ef4fb4cef8 3e253b66056519aa065b00a453bac37ac5ed8f3e6fe7b542e93a9dcdcc11d0bc
GET /s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.google.com
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15344
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 08 May 2025 09:35:39 GMT
expires: Fri, 08 May 2026 09:35:39 GMT
cache-control: public, max-age=31536000
age: 68679
last-modified: Mon, 16 Oct 2017 17:32:55 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| datanodes.to/theme_2023/dist/assets/app-36afb1c9.css | 104.26.15.76 | 200 OK | 53 kB |
URL GET datanodes.to/theme_2023/dist/assets/app-36afb1c9.css IP104.26.15.76:443
Requested byhttps://datanodes.to/download CertificateIssuerGoogle Trust Services Subjectdatanodes.to Fingerprint37:77:73:11:B8:A3:75:DF:17:A4:43:CB:D8:37:F9:B8:23:4A:C4:63 ValidityThu, 10 Apr 2025 04:51:00 GMT - Wed, 09 Jul 2025 05:50:41 GMT
File typeUnicode text, UTF-8 text, with very long lines (53102) Hash2cdd57f3f007cbfdba60cf21c501419d 62720b0e8af26f35c3b3cea435fe42f9dd8a8b11 36afb1c9ed858b12e612a7e7db9bb7f6993c8f595ba4c600e226cd7c15be6b2f
GET /theme_2023/dist/assets/app-36afb1c9.css HTTP/1.1
Host: datanodes.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://datanodes.to/download
Cookie: file_code=3k70932eajgm; lang=english; file_name=Napoleon-SteamGG.NET.zip; affiliate=0pcb%2F%2FX21UEJ2fSUcUnMpwvHc7fihr%2BnupZyULxIeDJ4vhisoLiwajWEY3hjXnLd%2FUmhlApiBRCLUcIY5rcxX6wNCQJj2FmwIQQ%3D
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 09 May 2025 04:40:16 GMT
content-type: text/css
last-modified: Sun, 09 Feb 2025 16:17:00 GMT
etag: W/"67a8d4fc-cf77"
cache-control: max-age=14400
cf-cache-status: HIT
age: 1510
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=DPBbRLKLdUSv8k67u22R3hBnW1yjiaxhtrh5JOmDhApLELZAe7BppzT9YzDFIhXJ%2FzFxVNpkNrWZJOUzOu%2F0zoj%2FmrVN%2F4MbzJjZkxxYjyd18wRCqWADRORPEXWaGA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 93ce848ddf637128-OSL
content-encoding: br
server-timing: cfL4;desc="?proto=TCP&rtt=8612&min_rtt=433&rtt_var=13886&sent=43&recv=30&lost=0&retrans=0&sent_bytes=39356&recv_bytes=2030&delivery_rate=14393638&cwnd=256&unsent_bytes=0&cid=515c5f21f79e31b2&ts=605&x=0"
X-Firefox-Spdy: h2
|
|
| www.google.com/recaptcha/api.js?render=6LdhelkqAAAAAH_f47GPnSuEgnjRo4Pf0ukRioGs | 142.250.178.36 | 200 OK | 945 B |
URL GET www.google.com/recaptcha/api.js?render=6LdhelkqAAAAAH_f47GPnSuEgnjRo4Pf0ukRioGs IP142.250.178.36:443
Requested byhttps://datanodes.to/download CertificateIssuerGoogle Trust Services Subjectwww.google.com FingerprintFD:1E:8C:23:6E:3E:CE:28:8F:BB:1E:C1:87:A0:77:5D:45:20:F7:03 ValidityMon, 31 Mar 2025 08:56:21 GMT - Mon, 23 Jun 2025 08:56:20 GMT
File typeJavaScript source, ASCII text, with very long lines (945), with no line terminators Hash36b7d527ad2705f79a36605316a39c17 9111537a4ef352032896ea3b78fb731a52cfbdbf 117dfe4ea6d44981d9598ff4825ab8518b1649d9fd158109fc0490d1dca2b444
GET /recaptcha/api.js?render=6LdhelkqAAAAAH_f47GPnSuEgnjRo4Pf0ukRioGs HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://datanodes.to/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
expires: Fri, 09 May 2025 04:40:16 GMT
date: Fri, 09 May 2025 04:40:16 GMT
cache-control: private, max-age=300
cross-origin-resource-policy: cross-origin
report-to: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]}
cross-origin-opener-policy-report-only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d"
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| datanodes.to/theme_2023/dist/assets/VirusScan-e53a5e80.js | 104.26.15.76 | 200 OK | 1.1 kB |
URL GET datanodes.to/theme_2023/dist/assets/VirusScan-e53a5e80.js IP104.26.15.76:443
Requested byhttps://datanodes.to/download CertificateIssuerGoogle Trust Services Subjectdatanodes.to Fingerprint37:77:73:11:B8:A3:75:DF:17:A4:43:CB:D8:37:F9:B8:23:4A:C4:63 ValidityThu, 10 Apr 2025 04:51:00 GMT - Wed, 09 Jul 2025 05:50:41 GMT
File typeJava source, ASCII text, with very long lines (1119) Hash4838938921365808702372a0947114c2 8aa1c4e51dacf60f069c52a80039fbcc6dc50e70 555e00c6b3d5c3ff1b6e855201b7216e68c5783adaa25dafc2ad68d3ee75677c
GET /theme_2023/dist/assets/VirusScan-e53a5e80.js HTTP/1.1
Host: datanodes.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://datanodes.to/theme_2023/dist/assets/app-80bcdb82.js
Cookie: file_code=3k70932eajgm; lang=english; file_name=Napoleon-SteamGG.NET.zip; affiliate=0pcb%2F%2FX21UEJ2fSUcUnMpwvHc7fihr%2BnupZyULxIeDJ4vhisoLiwajWEY3hjXnLd%2FUmhlApiBRCLUcIY5rcxX6wNCQJj2FmwIQQ%3D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 09 May 2025 04:40:16 GMT
content-type: application/javascript
last-modified: Sun, 09 Feb 2025 16:17:00 GMT
etag: W/"67a8d4fc-460"
cache-control: max-age=14400
cf-cache-status: HIT
age: 3960
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=iuZ9hWX3UREsQRVeFwbBv9PGzFYVNjgts4%2B%2FjHILpaubC6y3PfNTg8zSX9okmqcNgL6sjjRh0xh0jSD5o7AKLrX16grff4LNiYgfWUly7o6GiH3zXaOEE%2BdNRNjn2g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 93ce8490e9e67128-OSL
content-encoding: br
server-timing: cfL4;desc="?proto=TCP&rtt=1530&min_rtt=402&rtt_var=633&sent=144&recv=120&lost=0&retrans=0&sent_bytes=173129&recv_bytes=2297&delivery_rate=48453024&cwnd=256&unsent_bytes=0&cid=515c5f21f79e31b2&ts=1098&x=0"
X-Firefox-Spdy: h2
|
|
| datanodes.to/theme_2023/dist/assets/Util-ba300788.js | 104.26.15.76 | 200 OK | 2.9 kB |
URL GET datanodes.to/theme_2023/dist/assets/Util-ba300788.js IP104.26.15.76:443
Requested byhttps://datanodes.to/download CertificateIssuerGoogle Trust Services Subjectdatanodes.to Fingerprint37:77:73:11:B8:A3:75:DF:17:A4:43:CB:D8:37:F9:B8:23:4A:C4:63 ValidityThu, 10 Apr 2025 04:51:00 GMT - Wed, 09 Jul 2025 05:50:41 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (2854) Hash5813b7c66e53d58affc0cbed8e8de4d8 178cc0740966c30105212ab634ff274db3cca2f7 64e9941143b72dce37a3a356e68f051bbf5aaa12c3ac0b2f3972b471083d7477
GET /theme_2023/dist/assets/Util-ba300788.js HTTP/1.1
Host: datanodes.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://datanodes.to/theme_2023/dist/assets/FileActions-fa6032ae.js
Cookie: file_code=3k70932eajgm; lang=english; file_name=Napoleon-SteamGG.NET.zip; affiliate=0pcb%2F%2FX21UEJ2fSUcUnMpwvHc7fihr%2BnupZyULxIeDJ4vhisoLiwajWEY3hjXnLd%2FUmhlApiBRCLUcIY5rcxX6wNCQJj2FmwIQQ%3D; _ga_7DP7NV2LKF=GS2.1.s1746765616$o1$g0$t1746765616$j60$l0$h0; _ga=GA1.1.173775230.1746765617
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 09 May 2025 04:40:17 GMT
content-type: application/javascript
last-modified: Sun, 09 Feb 2025 16:17:00 GMT
etag: W/"67a8d4fc-b29"
cache-control: max-age=14400
cf-cache-status: HIT
age: 5084
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9voTI%2BcaCv77ehybcAC9LRO%2FUiFtqEVAwr7oPlka0%2BT%2FxM49%2BYsUD74wRzlg7oEpKoxUKkRDLhTczwTV%2F24UXPNy%2BKOyZl1G8ueJ44UV1d8Kmh13OB5zkKP6ATaS%2Fw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 93ce84926bb77128-OSL
content-encoding: br
server-timing: cfL4;desc="?proto=TCP&rtt=3510&min_rtt=402&rtt_var=4529&sent=189&recv=152&lost=0&retrans=0&sent_bytes=212360&recv_bytes=3745&delivery_rate=48453024&cwnd=256&unsent_bytes=0&cid=515c5f21f79e31b2&ts=1335&x=0"
X-Firefox-Spdy: h2
|
|
| datanodes.to/theme_2023/dist/assets/open-closed-f13f7375.js | 104.26.15.76 | 200 OK | 3.5 kB |
URL GET datanodes.to/theme_2023/dist/assets/open-closed-f13f7375.js IP104.26.15.76:443
Requested byhttps://datanodes.to/download CertificateIssuerGoogle Trust Services Subjectdatanodes.to Fingerprint37:77:73:11:B8:A3:75:DF:17:A4:43:CB:D8:37:F9:B8:23:4A:C4:63 ValidityThu, 10 Apr 2025 04:51:00 GMT - Wed, 09 Jul 2025 05:50:41 GMT
File typeJavaScript source, ASCII text, with very long lines (1681) Hash7b96d51da905a5c0edc478d43d79c7c8 17dd5bebfca4ffd4e42f72ef4ab9434a00d3e70f d6d247a9877ed90663542f79369d23970577ba3910d707664fc06492d3878452
GET /theme_2023/dist/assets/open-closed-f13f7375.js HTTP/1.1
Host: datanodes.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://datanodes.to/theme_2023/dist/assets/FileActions-fa6032ae.js
Cookie: file_code=3k70932eajgm; lang=english; file_name=Napoleon-SteamGG.NET.zip; affiliate=0pcb%2F%2FX21UEJ2fSUcUnMpwvHc7fihr%2BnupZyULxIeDJ4vhisoLiwajWEY3hjXnLd%2FUmhlApiBRCLUcIY5rcxX6wNCQJj2FmwIQQ%3D; _ga_7DP7NV2LKF=GS2.1.s1746765616$o1$g0$t1746765616$j60$l0$h0; _ga=GA1.1.173775230.1746765617
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 09 May 2025 04:40:17 GMT
content-type: application/javascript
last-modified: Sun, 09 Feb 2025 16:17:00 GMT
etag: W/"67a8d4fc-d9f"
cache-control: max-age=14400
cf-cache-status: HIT
age: 5084
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=npFGxg60EtEN1FBowBQGdtzouKQSsmtk4X6ClRavpj3KM3uqdQwbpzePLxNB3%2FoozLD2WwQmpE8sD%2FCBpvUZDzAiOyofxpztV%2BrxQfFvvuauN6xZT%2FPY%2B5%2F%2FiGqgaQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 93ce84926bbf7128-OSL
content-encoding: br
server-timing: cfL4;desc="?proto=TCP&rtt=2523&min_rtt=402&rtt_var=2806&sent=199&recv=156&lost=0&retrans=0&sent_bytes=221668&recv_bytes=3745&delivery_rate=48453024&cwnd=256&unsent_bytes=0&cid=515c5f21f79e31b2&ts=1339&x=0"
X-Firefox-Spdy: h2
|
|
| www.gstatic.com/recaptcha/releases/Hi8UmRMnhdOBM3IuViTkapUP/recaptcha__en.js | 142.250.74.99 | 200 OK | 653 kB |
URL GET www.gstatic.com/recaptcha/releases/Hi8UmRMnhdOBM3IuViTkapUP/recaptcha__en.js IP142.250.74.99:443
Requested byhttps://datanodes.to/download CertificateIssuerGoogle Trust Services Subject*.gstatic.com Fingerprint62:05:36:C2:8E:4C:CD:95:1E:1C:75:06:44:A3:57:E5:C0:17:02:80 ValidityMon, 31 Mar 2025 08:55:35 GMT - Mon, 23 Jun 2025 08:55:34 GMT
File typeJavaScript source, ASCII text, with very long lines (671) Size653 kB (652680 bytes) Hashcded17fc3b606bf50119ef5425541a3a e11985d3bbce813e0349e732e24cd757b5a8ea2f 31ab798a14c43a7608cd4eaa6026f4cf209371762263b6d1b0e562a264c00f4c
GET /recaptcha/releases/Hi8UmRMnhdOBM3IuViTkapUP/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://datanodes.to
DNT: 1
Connection: keep-alive
Referer: https://datanodes.to/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
timing-allow-origin: *
content-length: 276859
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 09 May 2025 00:30:30 GMT
expires: Sat, 09 May 2026 00:30:30 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 29 Apr 2025 17:05:42 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 14987
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.gstatic.com/recaptcha/releases/Hi8UmRMnhdOBM3IuViTkapUP/recaptcha__en.js | 142.250.74.99 | 200 OK | 653 kB |
URL GET www.gstatic.com/recaptcha/releases/Hi8UmRMnhdOBM3IuViTkapUP/recaptcha__en.js IP142.250.74.99:443
Requested byhttps://www.google.com/recaptcha/api2/webworker.js?hl=en&v=Hi8UmRMnhdOBM3IuViTkapUP CertificateIssuerGoogle Trust Services Subject*.gstatic.com Fingerprint62:05:36:C2:8E:4C:CD:95:1E:1C:75:06:44:A3:57:E5:C0:17:02:80 ValidityMon, 31 Mar 2025 08:55:35 GMT - Mon, 23 Jun 2025 08:55:34 GMT
File typeJavaScript source, ASCII text, with very long lines (671) Size653 kB (652680 bytes) Hashcded17fc3b606bf50119ef5425541a3a e11985d3bbce813e0349e732e24cd757b5a8ea2f 31ab798a14c43a7608cd4eaa6026f4cf209371762263b6d1b0e562a264c00f4c
GET /recaptcha/releases/Hi8UmRMnhdOBM3IuViTkapUP/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
timing-allow-origin: *
content-length: 276859
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 09 May 2025 00:30:30 GMT
expires: Sat, 09 May 2026 00:30:30 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 29 Apr 2025 17:05:42 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 14988
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.google.com/recaptcha/api2/clr?k=6LdhelkqAAAAAH_f47GPnSuEgnjRo4Pf0ukRioGs | 142.250.178.36 | 200 OK | 0 B |
URL POST www.google.com/recaptcha/api2/clr?k=6LdhelkqAAAAAH_f47GPnSuEgnjRo4Pf0ukRioGs IP142.250.178.36:443
Requested byhttps://datanodes.to/download CertificateIssuerGoogle Trust Services Subject*.google.com Fingerprint7E:CD:6A:9E:9E:00:6A:42:52:CC:9D:14:81:1C:68:D4:B9:C4:A4:73 ValidityMon, 31 Mar 2025 08:54:29 GMT - Mon, 23 Jun 2025 08:54:28 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /recaptcha/api2/clr?k=6LdhelkqAAAAAH_f47GPnSuEgnjRo4Pf0ukRioGs HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://datanodes.to/
Content-Length: 1597
Origin: https://datanodes.to
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: application/binary
cross-origin-opener-policy-report-only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d"
cross-origin-resource-policy: cross-origin
report-to: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]}
date: Fri, 09 May 2025 04:40:20 GMT
server: ESF
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.googleapis.com/css2?family=Poppins:wght@300;400;500;600;700;800;900&display=swap | 142.250.74.10 | 200 OK | 8.4 kB |
URL GET fonts.googleapis.com/css2?family=Poppins:wght@300;400;500;600;700;800;900&display=swap IP142.250.74.10:443
Requested byhttps://datanodes.to/download CertificateIssuerGoogle Trust Services Subjectupload.video.google.com Fingerprint06:13:4C:49:F4:23:BB:58:C3:31:41:0E:F9:E0:C5:EF:74:A9:0C:67 ValidityMon, 31 Mar 2025 08:55:35 GMT - Mon, 23 Jun 2025 08:55:34 GMT
Hasha1d4e0616226c98268848dcf99794ee1 93d82dcf1ed351b8797bd7ec3986b61bea2dd343 d585f2a922a586533e9e88963865d16543e72c91e142a9e2b6774a71c0ce4eb7
GET /css2?family=Poppins:wght@300;400;500;600;700;800;900&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://datanodes.to/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 09 May 2025 04:40:16 GMT
date: Fri, 09 May 2025 04:40:16 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| qn.ethnicspue.com/1clkn/31269 |  23.109.170.71 | 200 OK | 6 B |
URL GET qn.ethnicspue.com/1clkn/31269 IP23.109.170.71:443
Requested byhttps://datanodes.to/download CertificateIssuerLet's Encrypt Subjectqn.ethnicspue.com Fingerprint13:C7:7F:6D:6E:BA:A5:B1:24:05:53:A9:75:60:09:DE:81:37:18:50 ValidityMon, 31 Mar 2025 06:33:52 GMT - Sun, 29 Jun 2025 06:33:51 GMT
File typeASCII text, with no line terminators Hash9082dc37e5e8046929da411544ad071a 41e0e3963ed94e59e8a2f115994c382712411537 b7848d86edc8dc3b5bc6a5c666069f9a31e000cee51575d3b6083951607e1550
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /1clkn/31269 HTTP/1.1
Host: qn.ethnicspue.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://datanodes.to/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 09 May 2025 04:40:16 GMT
Content-Type: application/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=20
Accept-ch: sec-ch-ua-platform-version,sec-ch-ua-model,sec-ch-ua-full-version,sec-ch-ua-full-version-list
Set-Cookie: GL_UI4=eJw9zV1OhDAcBHC%2B2dUFnYQDeASKlPDqi1fwkRT6B%2BtCuykV9PYSE32bTH6T8TwvKB7gb8kZ4afgeGKsbdqaV21ZD62o%2Br5tGl72vC1ZxceR46zWzol%2BJhfhtC7Cus5tES4TabJq6AYjKcPjof6aqza7jhD3VmiZIV4OMWdIe2v2lWwRItJiIaSvytJovg4hPoxFyJ7rIyt9ZL9EYNYizO%2BQviktj2V%2BQcDKPE883N9m4UZjl07JxEc8WSEJ%2FgtOg3A0GfuNVNJ6deYGmFl2%2F%2F73ONxZiUTSpgZCbNw72R%2B3Z03l; expires=Sat, 10-May-2025 04:40:16 GMT; Max-Age=86400; path=/; secure; SameSite=None
GL_GI10=eJwVyM0KgkAUhuE5hxiIJPjIC%2FAKTMsWbrNl6MIrMIsYGObIzNjP3WeLd%2FG8SilOE7CZkNRlXhd5dcjLUwV6gtsOPDroVvx7%2BII8uDiCvcOmC1ayRmYXlz9i9TfIYHu25pP1YudoxAXw0roZbvaxv%2FRX0KQJHEUzONxTBXrp3Q9e7R3S; expires=Sat, 10-May-2025 04:40:16 GMT; Max-Age=86400; path=/; secure; SameSite=None
Content-Encoding: gzip
Vary: Accept-Encoding
Strict-Transport-Security: max-age=1
X-Content-Type-Options: nosniff
|
|
| datanodes.to/theme_2023/src/assets/images/virus-scan.png | 104.26.15.76 | 200 OK | 34 kB |
URL GET datanodes.to/theme_2023/src/assets/images/virus-scan.png IP104.26.15.76:443
Requested byhttps://datanodes.to/download CertificateIssuerGoogle Trust Services Subjectdatanodes.to Fingerprint37:77:73:11:B8:A3:75:DF:17:A4:43:CB:D8:37:F9:B8:23:4A:C4:63 ValidityThu, 10 Apr 2025 04:51:00 GMT - Wed, 09 Jul 2025 05:50:41 GMT
File typePNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced Hashed8693e5b49bbfec66898fd26b979317 0fe86ee5614e13c3c93672a4d57ef69555f3e701 5b6ef28011995150a50e6e59ca8728a5f0f92c7dfe27f08433e398a7fc177a9d
GET /theme_2023/src/assets/images/virus-scan.png HTTP/1.1
Host: datanodes.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://datanodes.to/download
Cookie: file_code=3k70932eajgm; lang=english; file_name=Napoleon-SteamGG.NET.zip; affiliate=0pcb%2F%2FX21UEJ2fSUcUnMpwvHc7fihr%2BnupZyULxIeDJ4vhisoLiwajWEY3hjXnLd%2FUmhlApiBRCLUcIY5rcxX6wNCQJj2FmwIQQ%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 09 May 2025 04:40:16 GMT
content-type: image/png
content-length: 33827
last-modified: Wed, 31 Jan 2024 09:41:40 GMT
etag: "65ba15d4-8423"
cache-control: max-age=14400
cf-cache-status: HIT
age: 1509
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FYxmKa3tcJ6sRcorRB9cm3EY%2FK55Fe9XLB3KzTtg8ugJlASf0himRF3RPVTC7QziuFH9GQwuJ%2FcO9N7KZKObOrlMvKZbHN1smCdzEk4Re2htsoHCZ7f%2FMizbMNf1Yw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 93ce848ddf667128-OSL
server-timing: cfL4;desc="?proto=TCP&rtt=8612&min_rtt=433&rtt_var=13886&sent=52&recv=30&lost=0&retrans=0&sent_bytes=49871&recv_bytes=2030&delivery_rate=14393638&cwnd=256&unsent_bytes=0&cid=515c5f21f79e31b2&ts=605&x=0"
X-Firefox-Spdy: h2
|
|
| region1.analytics.google.com/g/collect?v=2&tid=G-7DP7NV2LKF>m=45je5571v9175474265za200&_p=1746765616590&_gaz=1&gcd=13l3l3l2l1l1&npa=1&dma_cps=syphamo&dma=1&tag_exp=101509156~103101750~103101752~103116025~103200001~103233424~103251618~103251620~103284320~103284322~103301114~103301116&cid=173775230.1746765617&ul=en-us&sr=1280x1024&frm=0&pscdl=noapi&_s=1&sid=1746765616&sct=1&seg=0&dl=https%3A%2F%2Fdatanodes.to%2Fdownload&dt=Download%20Napoleon%20SteamGG%20zip&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1&tfd=1299 | 216.239.32.36 | 204 No Content | 0 B |
URL POST region1.analytics.google.com/g/collect?v=2&tid=G-7DP7NV2LKF>m=45je5571v9175474265za200&_p=1746765616590&_gaz=1&gcd=13l3l3l2l1l1&npa=1&dma_cps=syphamo&dma=1&tag_exp=101509156~103101750~103101752~103116025~103200001~103233424~103251618~103251620~103284320~103284322~103301114~103301116&cid=173775230.1746765617&ul=en-us&sr=1280x1024&frm=0&pscdl=noapi&_s=1&sid=1746765616&sct=1&seg=0&dl=https%3A%2F%2Fdatanodes.to%2Fdownload&dt=Download%20Napoleon%20SteamGG%20zip&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1&tfd=1299 IP216.239.32.36:443
Requested byhttps://datanodes.to/download CertificateIssuerGoogle Trust Services Subject*.google-analytics.com FingerprintB7:82:F3:C7:93:B0:60:B0:83:49:F8:74:0D:49:78:23:65:0B:37:01 ValidityMon, 31 Mar 2025 08:54:29 GMT - Mon, 23 Jun 2025 08:54:28 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-7DP7NV2LKF>m=45je5571v9175474265za200&_p=1746765616590&_gaz=1&gcd=13l3l3l2l1l1&npa=1&dma_cps=syphamo&dma=1&tag_exp=101509156~103101750~103101752~103116025~103200001~103233424~103251618~103251620~103284320~103284322~103301114~103301116&cid=173775230.1746765617&ul=en-us&sr=1280x1024&frm=0&pscdl=noapi&_s=1&sid=1746765616&sct=1&seg=0&dl=https%3A%2F%2Fdatanodes.to%2Fdownload&dt=Download%20Napoleon%20SteamGG%20zip&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1&tfd=1299 HTTP/1.1
Host: region1.analytics.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://datanodes.to/
Origin: https://datanodes.to
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://datanodes.to
date: Fri, 09 May 2025 04:40:17 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
content-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsggc:153:0
cross-origin-opener-policy-report-only: same-origin; report-to=ascnsrsggc:153:0
report-to: {"group":"ascnsrsggc:153:0","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/ascnsrsggc:153:0"}],}
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| undefined/TzJsS3UuUA8mSi4PDm0APV5RbkcJF14NEXxQGiIQLF0Pe0F2WAllFiNdGS8TPV0CP1shVxhuRwkKOnkZF2M6DkUNWAclFyZ/LQZGN1U2J0wiVisZHxtLDzE7C3Q5BgwOXiIsFnt4OBoeHUshPhE1Ag0ENndaDSISNnYVOBkNZT0DLCVdWBEcf1Y2IE0lfRYdBBhqKT84C1kjKhgsAiMaBT5RJChHC2Y6cy8Xdw8FGzgKIwk4agAuByF/ADgMIAdoJCcvLFwiIxM3Bkl5NwNIOX89JmAHEkcseiV5JyVoXSMbLQAqMiInZAcSRyxXPCJMIWtcMx4OAT4nIhwfVXgvF3gNDSIdWDYzBidoKwIiGHU+ehN9Vi0oGwFaIQoCf3kGfgwYSioxLBhoNhFGDVo2IA0jUTgoUH1wKzE8IWIFcjgVYwgsLwkDWSgtLFs6DCxpWB8kGz8PLS47NUAAeDN8Xz16GQMD | 0.0.0.0 | | 0 B |
URL GET undefined/TzJsS3UuUA8mSi4PDm0APV5RbkcJF14NEXxQGiIQLF0Pe0F2WAllFiNdGS8TPV0CP1shVxhuRwkKOnkZF2M6DkUNWAclFyZ/LQZGN1U2J0wiVisZHxtLDzE7C3Q5BgwOXiIsFnt4OBoeHUshPhE1Ag0ENndaDSISNnYVOBkNZT0DLCVdWBEcf1Y2IE0lfRYdBBhqKT84C1kjKhgsAiMaBT5RJChHC2Y6cy8Xdw8FGzgKIwk4agAuByF/ADgMIAdoJCcvLFwiIxM3Bkl5NwNIOX89JmAHEkcseiV5JyVoXSMbLQAqMiInZAcSRyxXPCJMIWtcMx4OAT4nIhwfVXgvF3gNDSIdWDYzBidoKwIiGHU+ehN9Vi0oGwFaIQoCf3kGfgwYSioxLBhoNhFGDVo2IA0jUTgoUH1wKzE8IWIFcjgVYwgsLwkDWSgtLFs6DCxpWB8kGz8PLS47NUAAeDN8Xz16GQMD IP0.0.0.0:0
Requested byhttps://datanodes.to/download
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /TzJsS3UuUA8mSi4PDm0APV5RbkcJF14NEXxQGiIQLF0Pe0F2WAllFiNdGS8TPV0CP1shVxhuRwkKOnkZF2M6DkUNWAclFyZ/LQZGN1U2J0wiVisZHxtLDzE7C3Q5BgwOXiIsFnt4OBoeHUshPhE1Ag0ENndaDSISNnYVOBkNZT0DLCVdWBEcf1Y2IE0lfRYdBBhqKT84C1kjKhgsAiMaBT5RJChHC2Y6cy8Xdw8FGzgKIwk4agAuByF/ADgMIAdoJCcvLFwiIxM3Bkl5NwNIOX89JmAHEkcseiV5JyVoXSMbLQAqMiInZAcSRyxXPCJMIWtcMx4OAT4nIhwfVXgvF3gNDSIdWDYzBidoKwIiGHU+ehN9Vi0oGwFaIQoCf3kGfgwYSioxLBhoNhFGDVo2IA0jUTgoUH1wKzE8IWIFcjgVYwgsLwkDWSgtLFs6DCxpWB8kGz8PLS47NUAAeDN8Xz16GQMD HTTP/1.1
Host: undefined
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://datanodes.to/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|
|
| handhadbeensotr.com/S09IYmJkcCsRXykIcSgtDyceOiosBgw0Di8qPw0gHH44WiYsKG4WCy9yeVNXc3l8UUQ7JixfU208PAMWPjx1UVJ7fm4LDC0gdVJSe35uFF96YXtWTHh5ZlZEPnJ5UlpydnlRVHl5fVJTeHp5RBY7Li9fU20/PBYOdn5/VlR8eX1UU3N5eVc | 104.21.22.182 | 204 No Content | 0 B |
URL POST handhadbeensotr.com/S09IYmJkcCsRXykIcSgtDyceOiosBgw0Di8qPw0gHH44WiYsKG4WCy9yeVNXc3l8UUQ7JixfU208PAMWPjx1UVJ7fm4LDC0gdVJSe35uFF96YXtWTHh5ZlZEPnJ5UlpydnlRVHl5fVJTeHp5RBY7Li9fU20/PBYOdn5/VlR8eX1UU3N5eVc IP104.21.22.182:443
Requested byhttps://datanodes.to/download CertificateIssuerGoogle Trust Services Subjecthandhadbeensotr.com FingerprintC0:43:BD:46:B4:27:70:E6:09:2E:FD:5C:F5:71:16:43:0D:2E:63:CF ValidityFri, 04 Apr 2025 10:43:35 GMT - Thu, 03 Jul 2025 11:41:45 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /S09IYmJkcCsRXykIcSgtDyceOiosBgw0Di8qPw0gHH44WiYsKG4WCy9yeVNXc3l8UUQ7JixfU208PAMWPjx1UVJ7fm4LDC0gdVJSe35uFF96YXtWTHh5ZlZEPnJ5UlpydnlRVHl5fVJTeHp5RBY7Li9fU20/PBYOdn5/VlR8eX1UU3N5eVc HTTP/1.1
Host: handhadbeensotr.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://datanodes.to
DNT: 1
Connection: keep-alive
Referer: https://datanodes.to/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/3 204 No Content
date: Fri, 09 May 2025 04:40:18 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ES2GQz%2BD8J8rqII8eWSCSnEfcgKvEAY%2B3Cm8gHmKLBZlVeZepbf%2B2Ze1ECp6IOKzE%2Fm1s%2FVyxJHPyUHftecvuXOYLBqAkAdul%2FjhAEuJzV0ZMkdFIn7ddGSr%2FwlbVQvxUd7CV%2BSq"}],"group":"cf-nel","max_age":604800}
access-control-allow-origin: *
cf-cache-status: DYNAMIC
cf-ray: 93ce849c8d9cb4ff-OSL
server: cloudflare
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=8122&min_rtt=4999&rtt_var=5537&sent=26&recv=36&lost=0&retrans=0&sent_bytes=5191&recv_bytes=2975&delivery_rate=18143&cwnd=12000&unsent_bytes=0&cid=dce82971965003cb&ts=1041&x=16"
|
|
0.0.0.0