| www.google.com.vn/url?q=IEQBZO82U018ETYNCV6WTYH64K0BD9FgQiApLjODz3yh4nNeW8uuQi&rct=33c3b9c7c7e6bac970407bbc91ed435ewDnNeW8yycT&sa=t&esrc=nTgV8F33c3b9c7c7e6bac970407bbc91ed435eA0xys8Em2FL&source=&cd=tS6T833c3b9c7c7e6bac970407bbc91ed435eTiw9XH&cad=JxWzDfBP33c3b9c7c7e6bac970407bbc91ed435eVS0Y&ved=xjnktlqryYWwVTDrgvK&uact=&url=amp/technicdude.in/opuyc/33c3b9c7c7e6bac970407bbc91ed435e/dmZ1cmZhcm9Ac2x1cnBtYWlsLm5ldA== | 142.250.178.67 | 302 Found | 313 B |
URL www.google.com.vn/url?q=IEQBZO82U018ETYNCV6WTYH64K0BD9FgQiApLjODz3yh4nNeW8uuQi&rct=33c3b9c7c7e6bac970407bbc91ed435ewDnNeW8yycT&sa=t&esrc=nTgV8F33c3b9c7c7e6bac970407bbc91ed435eA0xys8Em2FL&source=&cd=tS6T833c3b9c7c7e6bac970407bbc91ed435eTiw9XH&cad=JxWzDfBP33c3b9c7c7e6bac970407bbc91ed435eVS0Y&ved=xjnktlqryYWwVTDrgvK&uact=&url=amp/technicdude.in/opuyc/33c3b9c7c7e6bac970407bbc91ed435e/dmZ1cmZhcm9Ac2x1cnBtYWlsLm5ldA== IP 142.250.178.67:0
File typeHTML document, ASCII text, with CRLF, LF line terminators Hashe484f8e5c5b6a56f1ce89e46abd5b516 2816ff32102870d6808c45218d459f326ece9a65 5f201e6bc72866f9ad8b28df9e970cffea42e7c11d5e0c8c04730590027f7948
GET /url?q=IEQBZO82U018ETYNCV6WTYH64K0BD9FgQiApLjODz3yh4nNeW8uuQi&rct=33c3b9c7c7e6bac970407bbc91ed435ewDnNeW8yycT&sa=t&esrc=nTgV8F33c3b9c7c7e6bac970407bbc91ed435eA0xys8Em2FL&source=&cd=tS6T833c3b9c7c7e6bac970407bbc91ed435eTiw9XH&cad=JxWzDfBP33c3b9c7c7e6bac970407bbc91ed435eVS0Y&ved=xjnktlqryYWwVTDrgvK&uact=&url=amp/technicdude.in/opuyc/33c3b9c7c7e6bac970407bbc91ed435e/dmZ1cmZhcm9Ac2x1cnBtYWlsLm5ldA== HTTP/1.1
Host: www.google.com.vn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Cookie: SOCS=CAESHAgBEhJnd3NfMjAyMjA5MjktMF9SQzEaAnJvIAEaBgiAkvOZBg
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
location: https://www.google.com.vn/amp/technicdude.in/opuyc/33c3b9c7c7e6bac970407bbc91ed435e/dmZ1cmZhcm9Ac2x1cnBtYWlsLm5ldA==
cache-control: private
content-type: text/html; charset=UTF-8
strict-transport-security: max-age=31536000
content-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-bj00wqPBVT6sBZQnQX61GQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
date: Wed, 15 Jan 2025 00:20:48 GMT
server: gws
content-length: 313
x-xss-protection: 0
set-cookie: __Secure-ENID=25.SE=ZhFwbc2n5hOs5rSxMGj5a5lixblKg78uMsdYj9s5j84src2WdE9fMbKCt6cbpMN_EjyLgI4cYF2zNcHMguQ8jkj59_0NjHJznyS00AvX2jAvwQ88It7K08B_z65VIldENisb_jx_6VJsqw3yOAeK8VLismt2mbvUDma0t-32-rdevNrkW1hWCo2oq5I6nhhQOTiJ8QdmCnQ4GXMtK8D_OB2_i_cGyagXiIIJKNrjaC4; expires=Sat, 14-Feb-2026 16:39:06 GMT; path=/; domain=.google.com.vn; Secure; HttpOnly; SameSite=lax
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.google.com.vn/amp/technicdude.in/opuyc/33c3b9c7c7e6bac970407bbc91ed435e/dmZ1cmZhcm9Ac2x1cnBtYWlsLm5ldA== | 142.250.178.67 | 302 Found | 290 B |
URL www.google.com.vn/amp/technicdude.in/opuyc/33c3b9c7c7e6bac970407bbc91ed435e/dmZ1cmZhcm9Ac2x1cnBtYWlsLm5ldA== IP 142.250.178.67:0
File typeHTML document, ASCII text, with CRLF, LF line terminators Hash877cd15210063a5bb23b6fc73eafc88a ea13d865a4a352523efd86ce940932dd1ff27c85 90111618ac705c7e19a5a95bb43d1f8adda1aaca562486e1dc6e664fcaa1f731
GET /amp/technicdude.in/opuyc/33c3b9c7c7e6bac970407bbc91ed435e/dmZ1cmZhcm9Ac2x1cnBtYWlsLm5ldA== HTTP/1.1
Host: www.google.com.vn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: SOCS=CAESHAgBEhJnd3NfMjAyMjA5MjktMF9SQzEaAnJvIAEaBgiAkvOZBg; __Secure-ENID=25.SE=ZhFwbc2n5hOs5rSxMGj5a5lixblKg78uMsdYj9s5j84src2WdE9fMbKCt6cbpMN_EjyLgI4cYF2zNcHMguQ8jkj59_0NjHJznyS00AvX2jAvwQ88It7K08B_z65VIldENisb_jx_6VJsqw3yOAeK8VLismt2mbvUDma0t-32-rdevNrkW1hWCo2oq5I6nhhQOTiJ8QdmCnQ4GXMtK8D_OB2_i_cGyagXiIIJKNrjaC4
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
location: http://technicdude.in/opuyc/33c3b9c7c7e6bac970407bbc91ed435e/dmZ1cmZhcm9Ac2x1cnBtYWlsLm5ldA==
cache-control: private
x-robots-tag: noindex
content-type: text/html; charset=UTF-8
content-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-kIrI1jV2w6zDij8KQt1x3A' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/fff
cross-origin-opener-policy: same-origin-allow-popups; report-to="gws"
report-to: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/fff"}]}
date: Wed, 15 Jan 2025 00:20:48 GMT
server: gws
content-length: 290
x-xss-protection: 0
x-frame-options: SAMEORIGIN
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| technicdude.in/opuyc/33c3b9c7c7e6bac970407bbc91ed435e/dmZ1cmZhcm9Ac2x1cnBtYWlsLm5ldA== | 185.221.216.102 | 200 OK | 0 B |
URL technicdude.in/opuyc/33c3b9c7c7e6bac970407bbc91ed435e/dmZ1cmZhcm9Ac2x1cnBtYWlsLm5ldA== IP 185.221.216.102:0
ASN#393960 HOST4GEEKS-LLC
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /opuyc/33c3b9c7c7e6bac970407bbc91ed435e/dmZ1cmZhcm9Ac2x1cnBtYWlsLm5ldA== HTTP/1.1
Host: technicdude.in
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 15 Jan 2025 00:20:49 GMT
Server: Apache
Refresh: 0; url=https://r.bitualicar.ru/2Q5WxE/#dmZ1cmZhcm9Ac2x1cnBtYWlsLm5ldA==
Content-Length: 0
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8
|
|
| challenges.cloudflare.com/turnstile/v0/api.js?render=explicit | 104.18.94.41 | 302 Found | 0 B |
URL GET HTTP/2challenges.cloudflare.com/turnstile/v0/api.js?render=explicit IP 104.18.94.41:443
Requested byhttps://r.bitualicar.ru/2Q5WxE/#dmZ1cmZhcm9Ac2x1cnBtYWlsLm5ldA== CertificateIssuerGoogle Trust Services Subjectchallenges.cloudflare.com FingerprintEF:AE:47:10:51:72:52:24:8B:84:F7:18:BC:91:3D:8F:CC:64:29:8D ValidityWed, 01 Jan 2025 16:48:17 GMT - Tue, 01 Apr 2025 17:48:13 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /turnstile/v0/api.js?render=explicit HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://r.bitualicar.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Wed, 15 Jan 2025 00:20:49 GMT
content-length: 0
access-control-allow-origin: *
cache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=300, public
cross-origin-resource-policy: cross-origin
location: /turnstile/v0/b/e0c90b6a3ed1/api.js
vary: Accept-Encoding
server: cloudflare
cf-ray: 9021b3c38d9d56ca-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| cdnjs.cloudflare.com/ajax/libs/crypto-js/4.1.1/crypto-js.min.js | 104.17.24.14 | 200 OK | 14 kB |
URL GET HTTP/2cdnjs.cloudflare.com/ajax/libs/crypto-js/4.1.1/crypto-js.min.js IP 104.17.24.14:443
Requested byhttps://r.bitualicar.ru/2Q5WxE/#dmZ1cmZhcm9Ac2x1cnBtYWlsLm5ldA== CertificateIssuerGoogle Trust Services Subjectcdnjs.cloudflare.com Fingerprint64:3F:50:40:E0:BD:89:CB:A9:C8:BE:E5:74:F6:9E:D6:2E:1A:32:02 ValidityTue, 26 Nov 2024 07:25:18 GMT - Mon, 24 Feb 2025 07:25:17 GMT
File typeJavaScript source, ASCII text, with very long lines (48316), with no line terminators Hash2ca03ad87885ab983541092b87adb299 1a17f60bf776a8c468a185c1e8e985c41a50dc27 8e3b0117f4df4be452c0b6af5b8f0a0acf9d4ade23d08d55d7e312af22077762
GET /ajax/libs/crypto-js/4.1.1/crypto-js.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://r.bitualicar.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 15 Jan 2025 00:20:49 GMT
content-type: application/javascript; charset=utf-8
content-length: 13972
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "61182885-3694"
last-modified: Sat, 14 Aug 2021 20:33:09 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 37159
expires: Mon, 05 Jan 2026 00:20:49 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QWRLvQBPcLuiPTCtVdQOgP%2BGrqgCvNMlFHaaFyl%2Bg8p7p8LMVmzFbgICQo6N3NHN9n9nUs3mSa3rP%2BNBM6nZ0J01g5q9VWZJFST%2BHQ5mK4XSAvahawD4Eb9YJ8weV7NAnN2dK5Bh"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 9021b3c38e1cb51b-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| code.jquery.com/jquery-3.6.0.min.js | 151.101.2.137 | 200 OK | 31 kB |
URL GET HTTP/2code.jquery.com/jquery-3.6.0.min.js IP 151.101.2.137:443
Requested byhttps://r.bitualicar.ru/2Q5WxE/#dmZ1cmZhcm9Ac2x1cnBtYWlsLm5ldA== CertificateIssuerSectigo Limited Subject*.jquery.com FingerprintCD:B5:6E:05:85:0C:5A:AE:47:12:80:2A:5B:C6:E5:8F:11:72:E2:B5 ValidityTue, 25 Jun 2024 00:00:00 GMT - Wed, 25 Jun 2025 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (65447) Hash8fb8fee4fcc3cc86ff6c724154c49c42 b82d238d4e31fdf618bae8ac11a6c812c03dd0d4 ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e
GET /jquery-3.6.0.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://r.bitualicar.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Fri, 18 Oct 1991 12:00:00 GMT
etag: W/"28feccc0-15d9d"
cache-control: public, max-age=31536000, stale-while-revalidate=604800
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Wed, 15 Jan 2025 00:20:49 GMT
age: 653984
x-served-by: cache-lga21931-LGA, cache-hel1410024-HEL
x-cache: HIT, HIT
x-cache-hits: 71, 51483
x-timer: S1736900450.915329,VS0,VE0
vary: Accept-Encoding
content-length: 30875
X-Firefox-Spdy: h2
|
|
| r.bitualicar.ru/favicon.ico | 104.21.86.91 | 404 Not Found | 64 B |
URL GET HTTP/3r.bitualicar.ru/favicon.ico IP 104.21.86.91:443
Requested byhttps://r.bitualicar.ru/2Q5WxE/#dmZ1cmZhcm9Ac2x1cnBtYWlsLm5ldA== CertificateIssuerGoogle Trust Services Subjectbitualicar.ru Fingerprint5E:C7:63:4A:2A:56:CD:7B:C7:34:F7:80:41:63:9D:7E:52:51:1F:F6 ValidityThu, 09 Jan 2025 18:31:19 GMT - Wed, 09 Apr 2025 19:28:31 GMT
Hash2c3dd3d4a9bc9d1ffdf125e8439a3c00 a9b83cd7e27c23a420c3f56107ce51368e4662cb 0d68a8110cb0daf3c313fce8c1e3b950e49ed0d27fe4403f708734c3af15003d
GET /favicon.ico HTTP/1.1
Host: r.bitualicar.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://r.bitualicar.ru/2Q5WxE/
Cookie: XSRF-TOKEN=eyJpdiI6IjVEaXovWVFscFVlM0xtdGRJeUlVRlE9PSIsInZhbHVlIjoiMm9xOG5iWkhNV2tKaHFpa0c2MkFLQWRQMTJ6bDBVQTFmNG52S1paRC90d2N2QW1JZmthQUVpNEl4ZkUzRnlnRGJWcDZLbTA3WW9MN1IxV3Y4YWJOWVZxcWZ0SXVNc1d2UDlpWllKVUFNZVdlK3pjeEtrVUcvRGZaS0VGbTFRZFIiLCJtYWMiOiIxNjEyY2QzMGRiMjI4ZjVmYTc0NGYzZDVmNmQyZDdhYTFiYjFkY2NhMzIwZmNjODNiYTNmOGM1ZDFjN2Q5ZmFlIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImNoaGxVVnVFS0FVVEdZeEd6eS9makE9PSIsInZhbHVlIjoiT094YnJsNCtMcWtjM3VremdOcWk4ODVxeW9PcG1LU1hEcW15MWF6YWxOaU1paGs5aWpzRldrdS84Qk9vRjIxTVI4OTJOWm9nK2kyMU8zNFhKSWpta3RzZUVvWHM5UW9ERFFqZVVMYjFWaFh5M1hYZ3RPTFRnT2VBREp4WjFoRnAiLCJtYWMiOiI0MjkwYmQxNWU4MTFmYmU3Yzc1ZDhiZmFkMTgyYTk0YTM1OTMyNjUxNDM2MWQ4NjljOTY2ZDE1NDc3M2QzZWI5IiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 404 Not Found
date: Wed, 15 Jan 2025 00:20:50 GMT
content-type: text/html; charset=UTF-8
cache-control: max-age=14400
age: 7213
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=v%2BTcqTkE%2Bno2qOxPu2IfPX0iCTj8YB5Le7cW%2FUTGqsqZPeNJGzoXARxrVLSht%2FyzMl170j8bF10gR3bgQ7JfF%2BkNA69cfSr931Q5%2FgDuhe%2BcJK%2B5fXnKJBdfbO85%2BA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
cf-cache-status: HIT
priority: u=6,i=?0
server: cloudflare
cf-ray: 9021b3c50877568f-OSL
content-encoding: br
server-timing: cfL4;desc="?proto=TCP&rtt=4929&min_rtt=4903&rtt_var=1428&sent=4&recv=8&lost=0&retrans=0&sent_bytes=2823&recv_bytes=2084&delivery_rate=562734&cwnd=251&unsent_bytes=0&cid=a7f0c815622b1510&ts=40&x=0", cfL4;desc="?proto=QUIC&rtt=4269&min_rtt=4245&rtt_var=1640&sent=13&recv=8&lost=0&retrans=0&sent_bytes=4163&recv_bytes=1791&delivery_rate=133280&cwnd=12000&unsent_bytes=0&cid=abd33fb21bbdb09a&ts=398&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| r.bitualicar.ru/2Q5WxE/ | 104.21.86.91 | 200 OK | 9.9 kB |
IP 104.21.86.91:0
CertificateIssuerGoogle Trust Services Subjectbitualicar.ru Fingerprint5E:C7:63:4A:2A:56:CD:7B:C7:34:F7:80:41:63:9D:7E:52:51:1F:F6 ValidityThu, 09 Jan 2025 18:31:19 GMT - Wed, 09 Apr 2025 19:28:31 GMT
File typeHTML document, ASCII text, with very long lines (7497), with CRLF line terminators Hash91fd725aa42ea8284dad4a77b52a66d0 8d69b6c25eea2dfe0bb693672b9b5a0279a24116 7bf8ba50644d6ad0498ed2100028afbb7e105f08b861944d00e638d155ad9af7
GET /2Q5WxE/ HTTP/1.1
Host: r.bitualicar.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 15 Jan 2025 00:20:49 GMT
content-type: text/html; charset=UTF-8
cache-control: no-cache, private
cf-cache-status: DYNAMIC
vary: accept-encoding
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=XlbPA4r1ZkEXquxTiwPcXnxz0b5kDkDne0Gt6JOcKle%2BP5NdsBrTn0SwPFFH6siDoKuFULvN9dOR2%2BkgjppuqgV2NtqfOre00e%2B0VsEwPFInQVe%2BgxXdBVgau9P3Og%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
set-cookie: XSRF-TOKEN=eyJpdiI6IjVEaXovWVFscFVlM0xtdGRJeUlVRlE9PSIsInZhbHVlIjoiMm9xOG5iWkhNV2tKaHFpa0c2MkFLQWRQMTJ6bDBVQTFmNG52S1paRC90d2N2QW1JZmthQUVpNEl4ZkUzRnlnRGJWcDZLbTA3WW9MN1IxV3Y4YWJOWVZxcWZ0SXVNc1d2UDlpWllKVUFNZVdlK3pjeEtrVUcvRGZaS0VGbTFRZFIiLCJtYWMiOiIxNjEyY2QzMGRiMjI4ZjVmYTc0NGYzZDVmNmQyZDdhYTFiYjFkY2NhMzIwZmNjODNiYTNmOGM1ZDFjN2Q5ZmFlIiwidGFnIjoiIn0%3D; expires=Wed, 15-Jan-2025 02:20:49 GMT; Max-Age=7200; path=/; secure; samesite=none
laravel_session=eyJpdiI6ImNoaGxVVnVFS0FVVEdZeEd6eS9makE9PSIsInZhbHVlIjoiT094YnJsNCtMcWtjM3VremdOcWk4ODVxeW9PcG1LU1hEcW15MWF6YWxOaU1paGs5aWpzRldrdS84Qk9vRjIxTVI4OTJOWm9nK2kyMU8zNFhKSWpta3RzZUVvWHM5UW9ERFFqZVVMYjFWaFh5M1hYZ3RPTFRnT2VBREp4WjFoRnAiLCJtYWMiOiI0MjkwYmQxNWU4MTFmYmU3Yzc1ZDhiZmFkMTgyYTk0YTM1OTMyNjUxNDM2MWQ4NjljOTY2ZDE1NDc3M2QzZWI5IiwidGFnIjoiIn0%3D; expires=Wed, 15-Jan-2025 02:20:49 GMT; Max-Age=7200; path=/; secure; httponly; samesite=none
server: cloudflare
cf-ray: 9021b3c14e0156b5-OSL
content-encoding: br
server-timing: cfL4;desc="?proto=TCP&rtt=5230&min_rtt=5229&rtt_var=1963&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2823&recv_bytes=1386&delivery_rate=543822&cwnd=221&unsent_bytes=0&cid=61a86be89e0f9211&ts=108&x=0", cfL4;desc="?proto=TCP&rtt=5529&min_rtt=466&rtt_var=10118&sent=8&recv=11&lost=0&retrans=0&sent_bytes=3278&recv_bytes=1251&delivery_rate=6961538&cwnd=254&unsent_bytes=0&cid=10ba9da9bb274277&ts=223&x=0"
X-Firefox-Spdy: h2
|
|
| challenges.cloudflare.com/turnstile/v0/b/e0c90b6a3ed1/api.js | 104.18.94.41 | 200 OK | 48 kB |
URL GET HTTP/3challenges.cloudflare.com/turnstile/v0/b/e0c90b6a3ed1/api.js IP 104.18.94.41:443
Requested byhttps://r.bitualicar.ru/2Q5WxE/#dmZ1cmZhcm9Ac2x1cnBtYWlsLm5ldA== CertificateIssuerGoogle Trust Services Subjectchallenges.cloudflare.com FingerprintEF:AE:47:10:51:72:52:24:8B:84:F7:18:BC:91:3D:8F:CC:64:29:8D ValidityWed, 01 Jan 2025 16:48:17 GMT - Tue, 01 Apr 2025 17:48:13 GMT
File typeJavaScript source, ASCII text, with very long lines (47520) Hash7c92ec9d1395055ce0405a32607c7291 4ef0060484503e7a3d005254484d5a7facf42f27 a0ddae0fb79c4a4a66d8613157a0703771fa9be1a75790fccf5eeebaa329788b
GET /turnstile/v0/b/e0c90b6a3ed1/api.js HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://r.bitualicar.ru/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 15 Jan 2025 00:20:49 GMT
content-type: application/javascript; charset=UTF-8
last-modified: Wed, 08 Jan 2025 13:42:47 GMT
cache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
priority: u=2,i=?0
vary: Accept-Encoding
server: cloudflare
cf-ray: 9021b3c3ddd15695-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/zm1ay/0x4AAAAAAA5Dtl6jm2_BdC5F/auto/fbE/normal/auto/ | 104.18.94.41 | 200 OK | 26 kB |
URL GET HTTP/3challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/zm1ay/0x4AAAAAAA5Dtl6jm2_BdC5F/auto/fbE/normal/auto/ IP 104.18.94.41:443
Requested byhttps://r.bitualicar.ru/2Q5WxE/#dmZ1cmZhcm9Ac2x1cnBtYWlsLm5ldA== CertificateIssuerGoogle Trust Services Subjectchallenges.cloudflare.com FingerprintEF:AE:47:10:51:72:52:24:8B:84:F7:18:BC:91:3D:8F:CC:64:29:8D ValidityWed, 01 Jan 2025 16:48:17 GMT - Tue, 01 Apr 2025 17:48:13 GMT
File typeHTML document, ASCII text, with very long lines (22074) Hashe1360450aba8b088b6ca74eeb0b6a0dc 07f62a2d07026d1ab49e63409291638e1b60c53b cd42c77d238e02328ebb8f6f7345b443761f05b846103a5e8ec3ecd6684abe64
GET /cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/zm1ay/0x4AAAAAAA5Dtl6jm2_BdC5F/auto/fbE/normal/auto/ HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://r.bitualicar.ru/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 15 Jan 2025 00:20:50 GMT
content-type: text/html; charset=UTF-8
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()
content-security-policy: frame-src https://challenges.cloudflare.com/; base-uri 'self'
cross-origin-embedder-policy: require-corp
cross-origin-opener-policy: same-origin
cross-origin-resource-policy: cross-origin
origin-agent-cluster: ?1
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
critical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
referrer-policy: same-origin
document-policy: js-profiling
priority: u=4,i=?0
server: cloudflare
cf-ray: 9021b3c4de5b5695-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| | 104.21.86.91 | 200 OK | 20 kB |
URL User Request GET HTTP/2IP 104.21.86.91:443
CertificateIssuerGoogle Trust Services Subjectbitualicar.ru Fingerprint5E:C7:63:4A:2A:56:CD:7B:C7:34:F7:80:41:63:9D:7E:52:51:1F:F6 ValidityThu, 09 Jan 2025 18:31:19 GMT - Wed, 09 Apr 2025 19:28:31 GMT
File typeHTML document, ASCII text, with very long lines (7497), with CRLF line terminators Hash91fd725aa42ea8284dad4a77b52a66d0 8d69b6c25eea2dfe0bb693672b9b5a0279a24116 7bf8ba50644d6ad0498ed2100028afbb7e105f08b861944d00e638d155ad9af7
GET /2Q5WxE/ HTTP/1.1
Host: r.bitualicar.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 15 Jan 2025 00:20:49 GMT
content-type: text/html; charset=UTF-8
cache-control: no-cache, private
cf-cache-status: DYNAMIC
vary: accept-encoding
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=XlbPA4r1ZkEXquxTiwPcXnxz0b5kDkDne0Gt6JOcKle%2BP5NdsBrTn0SwPFFH6siDoKuFULvN9dOR2%2BkgjppuqgV2NtqfOre00e%2B0VsEwPFInQVe%2BgxXdBVgau9P3Og%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
set-cookie: XSRF-TOKEN=eyJpdiI6IjVEaXovWVFscFVlM0xtdGRJeUlVRlE9PSIsInZhbHVlIjoiMm9xOG5iWkhNV2tKaHFpa0c2MkFLQWRQMTJ6bDBVQTFmNG52S1paRC90d2N2QW1JZmthQUVpNEl4ZkUzRnlnRGJWcDZLbTA3WW9MN1IxV3Y4YWJOWVZxcWZ0SXVNc1d2UDlpWllKVUFNZVdlK3pjeEtrVUcvRGZaS0VGbTFRZFIiLCJtYWMiOiIxNjEyY2QzMGRiMjI4ZjVmYTc0NGYzZDVmNmQyZDdhYTFiYjFkY2NhMzIwZmNjODNiYTNmOGM1ZDFjN2Q5ZmFlIiwidGFnIjoiIn0%3D; expires=Wed, 15-Jan-2025 02:20:49 GMT; Max-Age=7200; path=/; secure; samesite=none
laravel_session=eyJpdiI6ImNoaGxVVnVFS0FVVEdZeEd6eS9makE9PSIsInZhbHVlIjoiT094YnJsNCtMcWtjM3VremdOcWk4ODVxeW9PcG1LU1hEcW15MWF6YWxOaU1paGs5aWpzRldrdS84Qk9vRjIxTVI4OTJOWm9nK2kyMU8zNFhKSWpta3RzZUVvWHM5UW9ERFFqZVVMYjFWaFh5M1hYZ3RPTFRnT2VBREp4WjFoRnAiLCJtYWMiOiI0MjkwYmQxNWU4MTFmYmU3Yzc1ZDhiZmFkMTgyYTk0YTM1OTMyNjUxNDM2MWQ4NjljOTY2ZDE1NDc3M2QzZWI5IiwidGFnIjoiIn0%3D; expires=Wed, 15-Jan-2025 02:20:49 GMT; Max-Age=7200; path=/; secure; httponly; samesite=none
server: cloudflare
cf-ray: 9021b3c14e0156b5-OSL
content-encoding: br
server-timing: cfL4;desc="?proto=TCP&rtt=5230&min_rtt=5229&rtt_var=1963&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2823&recv_bytes=1386&delivery_rate=543822&cwnd=221&unsent_bytes=0&cid=61a86be89e0f9211&ts=108&x=0", cfL4;desc="?proto=TCP&rtt=5529&min_rtt=466&rtt_var=10118&sent=8&recv=11&lost=0&retrans=0&sent_bytes=3278&recv_bytes=1251&delivery_rate=6961538&cwnd=254&unsent_bytes=0&cid=10ba9da9bb274277&ts=223&x=0"
X-Firefox-Spdy: h2
|
|
| challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/cmg/1 | 104.18.94.41 | 200 OK | 61 B |
URL GET HTTP/3challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/cmg/1 IP 104.18.94.41:443
Requested byhttps://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/zm1ay/0x4AAAAAAA5Dtl6jm2_BdC5F/auto/fbE/normal/auto/ CertificateIssuerGoogle Trust Services Subjectchallenges.cloudflare.com FingerprintEF:AE:47:10:51:72:52:24:8B:84:F7:18:BC:91:3D:8F:CC:64:29:8D ValidityWed, 01 Jan 2025 16:48:17 GMT - Tue, 01 Apr 2025 17:48:13 GMT
File typePNG image data, 2 x 2, 8-bit/color RGB, non-interlaced Hash9246cca8fc3c00f50035f28e9f6b7f7d 3aa538440f70873b574f40cd793060f53ec17a5d c07d7d29e3c20fa6ca4c5d20663688d52bad13e129ad82ce06b80eb187d9dc84
GET /cdn-cgi/challenge-platform/h/b/cmg/1 HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/zm1ay/0x4AAAAAAA5Dtl6jm2_BdC5F/auto/fbE/normal/auto/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 15 Jan 2025 00:20:50 GMT
content-type: image/png
content-length: 61
cache-control: max-age=2629800, public
priority: u=4,i=?0
server: cloudflare
cf-ray: 9021b3c5aed35695-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=9021b3c4de5b5695&lang=auto | 104.18.94.41 | 200 OK | 112 kB |
URL GET HTTP/3challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=9021b3c4de5b5695&lang=auto IP 104.18.94.41:443
Requested byhttps://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/zm1ay/0x4AAAAAAA5Dtl6jm2_BdC5F/auto/fbE/normal/auto/ CertificateIssuerGoogle Trust Services Subjectchallenges.cloudflare.com FingerprintEF:AE:47:10:51:72:52:24:8B:84:F7:18:BC:91:3D:8F:CC:64:29:8D ValidityWed, 01 Jan 2025 16:48:17 GMT - Tue, 01 Apr 2025 17:48:13 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Size112 kB (111594 bytes) Hash0db7424d584ac3fea69847c690752831 3fdb3dd4c0280a2d004aacde7bbd2ef8a8c427ed 0de98270091cd4218d8724d1341b7680eac2b611a8e16ed72f4dea71e9acc138
GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=9021b3c4de5b5695&lang=auto HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/zm1ay/0x4AAAAAAA5Dtl6jm2_BdC5F/auto/fbE/normal/auto/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 15 Jan 2025 00:20:50 GMT
content-type: application/javascript; charset=UTF-8
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
priority: u=2,i=?0
server: cloudflare
cf-ray: 9021b3c5aed45695-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|