| datanodes.to/cdn-cgi/challenge-platform/h/g/scripts/jsd/6fab0cec561d/main.js? |  104.26.14.76 | 200 OK | 8.4 kB |
URL GET datanodes.to/cdn-cgi/challenge-platform/h/g/scripts/jsd/6fab0cec561d/main.js? IP104.26.14.76:443
Requested byhttps://datanodes.to/download CertificateIssuerGoogle Trust Services Subjectdatanodes.to Fingerprint37:77:73:11:B8:A3:75:DF:17:A4:43:CB:D8:37:F9:B8:23:4A:C4:63 ValidityThu, 10 Apr 2025 04:51:00 GMT - Wed, 09 Jul 2025 05:50:41 GMT
File typeJavaScript source, ASCII text, with very long lines (8444), with no line terminators Hash7a07578f0155fbe9e7ad204fbf1b34e9 c5997fe380a3158b83a17f22cee23d911a22de45 49227c9a35e03891526f6b6db04625fc24c5bdbc98c44553be4ab7022349d74b
GET /cdn-cgi/challenge-platform/h/g/scripts/jsd/6fab0cec561d/main.js? HTTP/1.1
Host: datanodes.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: lang=english; file_code=qm14l5drg6an; file_name=MushihimeSama-NSP-ROMSLAB.rar; affiliate=qORHJYueob0J2fSUcUnMp9QyFqAnTJ5fEJsSnX0mFPwJIC6VYc%2BWqr21FoDOCXYFXmPQZr4prRgogJcirONaqALPkx0%3D; _ga_7DP7NV2LKF=GS2.1.s1747692187$o1$g0$t1747692187$j60$l0$h0$dW6neNVBcEvCeySFTnG8wMsdlI5_4F-SggQ; _ga=GA1.1.454051441.1747692188
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 19 May 2025 22:03:08 GMT
content-type: application/javascript; charset=UTF-8
cache-control: max-age=14400, stale-if-error=10800, stale-while-revalidate=10800, public
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3VjFBHNgJ8C7QsVdKJTLdTSor%2B1Hu8ICbEROLscWE92dGX0eeCSy0OmV3d8D3OYycFJ7bkDFWkwkzglLyIlgHddbg9HNjjGxNRKsY2gXQwzpF%2FD55CSt8EGwodc1jw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 9426e1f0ffd056b5-OSL
content-encoding: br
server-timing: cfL4;desc="?proto=TCP&rtt=759&min_rtt=415&rtt_var=255&sent=207&recv=102&lost=0&retrans=1&sent_bytes=230099&recv_bytes=3773&delivery_rate=79039301&cwnd=256&unsent_bytes=0&cid=cdbd7f71e2fd3cbd&ts=2304&x=0"
X-Firefox-Spdy: h2
|
|
| datanodes.to/theme_2023/dist/assets/open-closed-f13f7375.js | 104.26.14.76 | 200 OK | 3.5 kB |
URL GET datanodes.to/theme_2023/dist/assets/open-closed-f13f7375.js IP104.26.14.76:443
Requested byhttps://datanodes.to/download CertificateIssuerGoogle Trust Services Subjectdatanodes.to Fingerprint37:77:73:11:B8:A3:75:DF:17:A4:43:CB:D8:37:F9:B8:23:4A:C4:63 ValidityThu, 10 Apr 2025 04:51:00 GMT - Wed, 09 Jul 2025 05:50:41 GMT
File typeJavaScript source, ASCII text, with very long lines (1681) Hash7b96d51da905a5c0edc478d43d79c7c8 17dd5bebfca4ffd4e42f72ef4ab9434a00d3e70f d6d247a9877ed90663542f79369d23970577ba3910d707664fc06492d3878452
GET /theme_2023/dist/assets/open-closed-f13f7375.js HTTP/1.1
Host: datanodes.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://datanodes.to/theme_2023/dist/assets/FileActions-fa6032ae.js
Cookie: lang=english; file_code=qm14l5drg6an; file_name=MushihimeSama-NSP-ROMSLAB.rar; affiliate=qORHJYueob0J2fSUcUnMp9QyFqAnTJ5fEJsSnX0mFPwJIC6VYc%2BWqr21FoDOCXYFXmPQZr4prRgogJcirONaqALPkx0%3D; _ga_7DP7NV2LKF=GS2.1.s1747692187$o1$g0$t1747692187$j60$l0$h0$dW6neNVBcEvCeySFTnG8wMsdlI5_4F-SggQ; _ga=GA1.1.454051441.1747692188
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 19 May 2025 22:03:08 GMT
content-type: application/javascript
last-modified: Sun, 09 Feb 2025 16:17:00 GMT
etag: W/"67a8d4fc-d9f"
cache-control: max-age=14400
cf-cache-status: HIT
age: 1029
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=z6B7tXvDvEWSb9fwIqn7CTbLGOpZrMf9fQqXvgAI5qOAeG1SwehY0DkUt%2B9ZOjNU5fd0yvT9cQ9deSTuO%2FaLf%2BTG2%2FmtwMP8DayvRUJjHXY2f%2BUprd227JGqCrrryg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 9426e1f0dfaa56b5-OSL
content-encoding: br
server-timing: cfL4;desc="?proto=TCP&rtt=794&min_rtt=415&rtt_var=254&sent=203&recv=101&lost=0&retrans=1&sent_bytes=227805&recv_bytes=3773&delivery_rate=79039301&cwnd=256&unsent_bytes=0&cid=cdbd7f71e2fd3cbd&ts=2301&x=0"
X-Firefox-Spdy: h2
|
|
| region1.analytics.google.com/g/collect?v=2&tid=G-7DP7NV2LKF>m=45je55g2v9175474265za200&_p=1747692187068&_gaz=1&gcd=13l3l3l2l1l1&npa=1&dma_cps=syphamo&dma=1&tag_exp=101509157~103116026~103130495~103130497~103136993~103136995~103200004~103207802~103233427~103252644~103252646~103263073~103301114~103301116&cid=454051441.1747692188&ul=en-us&sr=1280x1024&frm=0&pscdl=noapi&_s=1&sid=1747692187&sct=1&seg=0&dl=https%3A%2F%2Fdatanodes.to%2Fdownload&dt=Download%20Mushihime%20Sama%20NSP%20ROMSLAB%20rar&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1&tfd=1931 |  216.239.34.36 | 204 No Content | 0 B |
URL POST region1.analytics.google.com/g/collect?v=2&tid=G-7DP7NV2LKF>m=45je55g2v9175474265za200&_p=1747692187068&_gaz=1&gcd=13l3l3l2l1l1&npa=1&dma_cps=syphamo&dma=1&tag_exp=101509157~103116026~103130495~103130497~103136993~103136995~103200004~103207802~103233427~103252644~103252646~103263073~103301114~103301116&cid=454051441.1747692188&ul=en-us&sr=1280x1024&frm=0&pscdl=noapi&_s=1&sid=1747692187&sct=1&seg=0&dl=https%3A%2F%2Fdatanodes.to%2Fdownload&dt=Download%20Mushihime%20Sama%20NSP%20ROMSLAB%20rar&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1&tfd=1931 IP216.239.34.36:443
Requested byhttps://datanodes.to/download CertificateIssuerGoogle Trust Services Subject*.google-analytics.com Fingerprint02:7D:56:C0:B9:20:0C:27:A4:AC:B9:8F:9D:45:1D:85:2A:30:50:AD ValidityMon, 21 Apr 2025 08:40:41 GMT - Mon, 14 Jul 2025 08:40:40 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-7DP7NV2LKF>m=45je55g2v9175474265za200&_p=1747692187068&_gaz=1&gcd=13l3l3l2l1l1&npa=1&dma_cps=syphamo&dma=1&tag_exp=101509157~103116026~103130495~103130497~103136993~103136995~103200004~103207802~103233427~103252644~103252646~103263073~103301114~103301116&cid=454051441.1747692188&ul=en-us&sr=1280x1024&frm=0&pscdl=noapi&_s=1&sid=1747692187&sct=1&seg=0&dl=https%3A%2F%2Fdatanodes.to%2Fdownload&dt=Download%20Mushihime%20Sama%20NSP%20ROMSLAB%20rar&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1&tfd=1931 HTTP/1.1
Host: region1.analytics.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://datanodes.to/
Origin: https://datanodes.to
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://datanodes.to
date: Mon, 19 May 2025 22:03:08 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
content-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsggc:153:0
cross-origin-opener-policy-report-only: same-origin; report-to=ascnsrsggc:153:0
report-to: {"group":"ascnsrsggc:153:0","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/ascnsrsggc:153:0"}],}
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.google.com/recaptcha/api2/anchor?ar=1&k=6LdhelkqAAAAAH_f47GPnSuEgnjRo4Pf0ukRioGs&co=aHR0cHM6Ly9kYXRhbm9kZXMudG86NDQz&hl=en&v=X-oVtzDcTGjZVms4LEgykmCV&size=invisible&cb=arj60wio1lh2 | 142.250.74.68 | 200 OK | 73 kB |
URL GET www.google.com/recaptcha/api2/anchor?ar=1&k=6LdhelkqAAAAAH_f47GPnSuEgnjRo4Pf0ukRioGs&co=aHR0cHM6Ly9kYXRhbm9kZXMudG86NDQz&hl=en&v=X-oVtzDcTGjZVms4LEgykmCV&size=invisible&cb=arj60wio1lh2 IP142.250.74.68:443
Requested byhttps://datanodes.to/download CertificateIssuerGoogle Trust Services Subject*.google.com Fingerprint2F:BC:E9:F2:13:41:F1:3E:34:53:D6:F4:E9:17:8E:40:10:82:D1:3E ValidityMon, 21 Apr 2025 08:40:42 GMT - Mon, 14 Jul 2025 08:40:41 GMT
File typeHTML document, ASCII text, with very long lines (56645) Hash3c76784486c723c58667710b19060d81 ba8996e5cd223e553a9f9762e482cf9c3969299d 9f662b7c2d8179d72aca353d06d18f152125dab20916b377d8c7bed804d63c99
GET /recaptcha/api2/anchor?ar=1&k=6LdhelkqAAAAAH_f47GPnSuEgnjRo4Pf0ukRioGs&co=aHR0cHM6Ly9kYXRhbm9kZXMudG86NDQz&hl=en&v=X-oVtzDcTGjZVms4LEgykmCV&size=invisible&cb=arj60wio1lh2 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://datanodes.to/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: text/html; charset=utf-8
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy: require-corp
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}, {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]}
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Mon, 19 May 2025 22:03:09 GMT
content-security-policy: script-src 'nonce-5tr7VFSA8h40cIBXgH0tvQ' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1
cross-origin-opener-policy-report-only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d"
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&uilel=3&hl=en&service=mail | 108.177.14.84 | 302 Found | 0 B |
URL GET accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&uilel=3&hl=en&service=mail IP108.177.14.84:443
Requested byhttps://datanodes.to/download CertificateIssuerGoogle Trust Services Subjectaccounts.google.com Fingerprint59:74:47:4D:79:55:0E:D6:C9:C5:58:53:27:7B:B5:9B:F6:02:63:84 ValidityMon, 21 Apr 2025 08:42:44 GMT - Mon, 14 Jul 2025 08:42:43 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&uilel=3&hl=en&service=mail HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://datanodes.to/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
content-type: application/binary
set-cookie: __Host-GAPS=1:Q6Hpix2A3bz8pu1cklmWtFFq6oXR4w:mAHr0_C901tIAzko; Expires=Wed, 19-May-2027 22:03:10 GMT; Path=/; Secure; HttpOnly; Priority=HIGH
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Mon, 19 May 2025 22:03:10 GMT
location: https://accounts.google.com/InteractiveLogin?continue=https://www.google.com/favicon.ico&hl=en&passive=true&service=mail&uilel=3&ifkv=ASKV5Mg6xe05QNLySyRrqGP2XWtOwoSiti0UIo_L1nyQwUiMq6Iy1Dio169STuX9ywfqfnA6K1YWtg
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: unsafe-none
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*
content-security-policy: require-trusted-types-for 'script';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport, script-src 'nonce-kZ1UZzOryP80LRelZhYdfg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/AccountsSigninPassiveLoginHttp/cspreport/allowlist
server: ESF
content-length: 0
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.google.com/recaptcha/api2/clr?k=6LdhelkqAAAAAH_f47GPnSuEgnjRo4Pf0ukRioGs | 142.250.74.68 | 200 OK | 0 B |
URL POST www.google.com/recaptcha/api2/clr?k=6LdhelkqAAAAAH_f47GPnSuEgnjRo4Pf0ukRioGs IP142.250.74.68:443
Requested byhttps://datanodes.to/download CertificateIssuerGoogle Trust Services Subject*.google.com Fingerprint2F:BC:E9:F2:13:41:F1:3E:34:53:D6:F4:E9:17:8E:40:10:82:D1:3E ValidityMon, 21 Apr 2025 08:40:42 GMT - Mon, 14 Jul 2025 08:40:41 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /recaptcha/api2/clr?k=6LdhelkqAAAAAH_f47GPnSuEgnjRo4Pf0ukRioGs HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://datanodes.to/
Content-Length: 1576
Origin: https://datanodes.to
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: application/binary
cross-origin-resource-policy: cross-origin
report-to: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]}
cross-origin-opener-policy-report-only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d"
date: Mon, 19 May 2025 22:03:13 GMT
server: ESF
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.googleapis.com/css2?family=Poppins:wght@300;400;500;600;700;800;900&display=swap | 142.250.74.10 | 200 OK | 8.4 kB |
URL GET fonts.googleapis.com/css2?family=Poppins:wght@300;400;500;600;700;800;900&display=swap IP142.250.74.10:443
Requested byhttps://datanodes.to/download CertificateIssuerGoogle Trust Services Subjectupload.video.google.com Fingerprint7A:29:E6:A8:BE:59:2C:AE:82:2D:CA:8E:15:89:41:BE:EC:D2:0D:EA ValidityMon, 21 Apr 2025 08:41:49 GMT - Mon, 14 Jul 2025 08:41:48 GMT
Hasha1d4e0616226c98268848dcf99794ee1 93d82dcf1ed351b8797bd7ec3986b61bea2dd343 d585f2a922a586533e9e88963865d16543e72c91e142a9e2b6774a71c0ce4eb7
GET /css2?family=Poppins:wght@300;400;500;600;700;800;900&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://datanodes.to/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Mon, 19 May 2025 22:03:06 GMT
date: Mon, 19 May 2025 22:03:06 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| datanodes.to/theme_2023/dist/assets/app-80bcdb82.js | 104.26.14.76 | 200 OK | 183 kB |
URL GET datanodes.to/theme_2023/dist/assets/app-80bcdb82.js IP104.26.14.76:443
Requested byhttps://datanodes.to/download CertificateIssuerGoogle Trust Services Subjectdatanodes.to Fingerprint37:77:73:11:B8:A3:75:DF:17:A4:43:CB:D8:37:F9:B8:23:4A:C4:63 ValidityThu, 10 Apr 2025 04:51:00 GMT - Wed, 09 Jul 2025 05:50:41 GMT
File typeJavaScript source, ASCII text, with very long lines (32531) Size183 kB (183021 bytes) Hash68168e1fcc3f0b89637287285c331e9b 2252e15424087258ef80a353512b685215e68335 df548d433ea12395b99a860e96667848bea70b8eeae6348959d3a1cee6fa57c4
GET /theme_2023/dist/assets/app-80bcdb82.js HTTP/1.1
Host: datanodes.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://datanodes.to/download
Cookie: lang=english; file_code=qm14l5drg6an; file_name=MushihimeSama-NSP-ROMSLAB.rar; affiliate=qORHJYueob0J2fSUcUnMp9QyFqAnTJ5fEJsSnX0mFPwJIC6VYc%2BWqr21FoDOCXYFXmPQZr4prRgogJcirONaqALPkx0%3D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 19 May 2025 22:03:06 GMT
content-type: application/javascript
last-modified: Sun, 09 Feb 2025 16:17:00 GMT
etag: W/"67a8d4fc-2caed"
cache-control: max-age=14400
cf-cache-status: HIT
age: 1027
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=OUKbNeHU2m3d56U6kQhnqt%2B17y2D%2Ftnweg2EXdFGH0kxYhuELUzwiKnAVPwEbWPp68UUZTX44200DSjiVkzc8JW6KKTJtlZ4LtbgLsU5u8F6kK8fn%2F0GEkBsL0Ny7Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 9426e1e73b1156b5-OSL
content-encoding: br
server-timing: cfL4;desc="?proto=TCP&rtt=2757&min_rtt=472&rtt_var=2146&sent=89&recv=28&lost=0&retrans=0&sent_bytes=100383&recv_bytes=2029&delivery_rate=5413084&cwnd=256&unsent_bytes=0&cid=cdbd7f71e2fd3cbd&ts=755&x=0"
X-Firefox-Spdy: h2
|
|
| datanodes.to/theme_2023/dist/assets/FileActions-fa6032ae.js | 104.26.14.76 | 200 OK | 79 kB |
URL GET datanodes.to/theme_2023/dist/assets/FileActions-fa6032ae.js IP104.26.14.76:443
Requested byhttps://datanodes.to/download CertificateIssuerGoogle Trust Services Subjectdatanodes.to Fingerprint37:77:73:11:B8:A3:75:DF:17:A4:43:CB:D8:37:F9:B8:23:4A:C4:63 ValidityThu, 10 Apr 2025 04:51:00 GMT - Wed, 09 Jul 2025 05:50:41 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (55448) Hash0141e4901d84ce0029f3b424362c7af2 571f2a8995a2ebf2d68f3fafdfd5d316ede31ff0 a30a91209bf26dabfad3b83901707969815ac9908e11b12dc52b7a80b8f4ee80
GET /theme_2023/dist/assets/FileActions-fa6032ae.js HTTP/1.1
Host: datanodes.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://datanodes.to/theme_2023/dist/assets/app-80bcdb82.js
Cookie: lang=english; file_code=qm14l5drg6an; file_name=MushihimeSama-NSP-ROMSLAB.rar; affiliate=qORHJYueob0J2fSUcUnMp9QyFqAnTJ5fEJsSnX0mFPwJIC6VYc%2BWqr21FoDOCXYFXmPQZr4prRgogJcirONaqALPkx0%3D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 19 May 2025 22:03:07 GMT
content-type: application/javascript
last-modified: Sun, 09 Feb 2025 16:17:00 GMT
etag: W/"67a8d4fc-13480"
cache-control: max-age=14400
cf-cache-status: HIT
age: 1028
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=aT8fPWzEpRFkdQbHJhxSUdDrAgy%2FzimEzRpvvXsDQdtmKOk6mDZ1n%2F8DxNVVqwOP3Z9BMQyJnrUM%2BxRNfYluxQEQR0bWSu3hyy5l0wnO81qM1iFECawgHyyO5EPlJA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 9426e1edebcd56b5-OSL
content-encoding: br
server-timing: cfL4;desc="?proto=TCP&rtt=1753&min_rtt=472&rtt_var=1142&sent=152&recv=64&lost=0&retrans=0&sent_bytes=175757&recv_bytes=3036&delivery_rate=79039301&cwnd=256&unsent_bytes=0&cid=cdbd7f71e2fd3cbd&ts=1827&x=0"
X-Firefox-Spdy: h2
|
|
| datanodes.to/images/logo.png?v=1 | 104.26.14.76 | 200 OK | 15 kB |
URL GET datanodes.to/images/logo.png?v=1 IP104.26.14.76:443
Requested byhttps://datanodes.to/download CertificateIssuerGoogle Trust Services Subjectdatanodes.to Fingerprint37:77:73:11:B8:A3:75:DF:17:A4:43:CB:D8:37:F9:B8:23:4A:C4:63 ValidityThu, 10 Apr 2025 04:51:00 GMT - Wed, 09 Jul 2025 05:50:41 GMT
File typePNG image data, 364 x 230, 8-bit/color RGBA, non-interlaced Hashc9338a5cbd74ee24aee2175a5ac9cfac eb519e37c50d2dd8908d80a2dd203879f2a430c9 e73da34c3963cd34608bc4016fd1060cf58de21ef14321a153ec45bc004ff56e
GET /images/logo.png?v=1 HTTP/1.1
Host: datanodes.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://datanodes.to/download
Cookie: lang=english; file_code=qm14l5drg6an; file_name=MushihimeSama-NSP-ROMSLAB.rar; affiliate=qORHJYueob0J2fSUcUnMp9QyFqAnTJ5fEJsSnX0mFPwJIC6VYc%2BWqr21FoDOCXYFXmPQZr4prRgogJcirONaqALPkx0%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 19 May 2025 22:03:06 GMT
content-type: image/png
content-length: 15350
last-modified: Tue, 16 Jan 2024 14:16:42 GMT
etag: "65a68fca-3bf6"
cache-control: max-age=14400
cf-cache-status: HIT
age: 5312
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=BtOD5N6qzHdD3rorpkpZojS1%2FcziXHR4pc8NB9E7jKSU9ZD2m3X6UtSjLiytmVSYhW8LnWaVTXmNVCFgqcnOooqGhaUG0qNIe8Xgphimm3KmDuTt59hwJ7A0S9%2BCLQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 9426e1e73b0d56b5-OSL
server-timing: cfL4;desc="?proto=TCP&rtt=3041&min_rtt=472&rtt_var=2754&sent=77&recv=26&lost=0&retrans=0&sent_bytes=84409&recv_bytes=2029&delivery_rate=13325153&cwnd=256&unsent_bytes=0&cid=cdbd7f71e2fd3cbd&ts=751&x=0"
X-Firefox-Spdy: h2
|
|
| www.gstatic.com/recaptcha/releases/X-oVtzDcTGjZVms4LEgykmCV/recaptcha__en.js | 142.250.74.99 | 200 OK | 653 kB |
URL GET www.gstatic.com/recaptcha/releases/X-oVtzDcTGjZVms4LEgykmCV/recaptcha__en.js IP142.250.74.99:443
Requested byhttps://www.google.com/recaptcha/api2/anchor?ar=1&k=6LdhelkqAAAAAH_f47GPnSuEgnjRo4Pf0ukRioGs&co=aHR0cHM6Ly9kYXRhbm9kZXMudG86NDQz&hl=en&v=X-oVtzDcTGjZVms4LEgykmCV&size=invisible&cb=arj60wio1lh2 CertificateIssuerGoogle Trust Services Subject*.gstatic.com Fingerprint15:8B:D4:EA:7E:CB:34:1B:6F:2E:20:9E:39:44:7A:D6:D7:30:26:AB ValidityMon, 21 Apr 2025 08:41:49 GMT - Mon, 14 Jul 2025 08:41:48 GMT
Size653 kB (652777 bytes) Hashe95468d04c58cf02c6dc7a2b5b8d0767 d50cb8a0f60256d410d216da72a80105d4ad6a6f 6798aa15947bc933cb2b22bb61cf88b0334caba9f0a34e99d42b31792753636e
GET /recaptcha/releases/X-oVtzDcTGjZVms4LEgykmCV/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
timing-allow-origin: *
content-length: 277679
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 19 May 2025 12:16:37 GMT
expires: Tue, 19 May 2026 12:16:37 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 12 May 2025 12:00:32 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 35193
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| datanodes.to/qm14l5drg6an/MushihimeSama-NSP-ROMSLAB.rar | 104.26.14.76 | 302 Found | 82 kB |
URL User Request GET datanodes.to/qm14l5drg6an/MushihimeSama-NSP-ROMSLAB.rar IP104.26.14.76:443
CertificateIssuerGoogle Trust Services Subjectdatanodes.to Fingerprint37:77:73:11:B8:A3:75:DF:17:A4:43:CB:D8:37:F9:B8:23:4A:C4:63 ValidityThu, 10 Apr 2025 04:51:00 GMT - Wed, 09 Jul 2025 05:50:41 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /qm14l5drg6an/MushihimeSama-NSP-ROMSLAB.rar HTTP/1.1
Host: datanodes.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Mon, 19 May 2025 22:03:06 GMT
location: https://datanodes.to/download
cf-cache-status: BYPASS
set-cookie: lang=english; domain=.datanodes.to; path=/
file_code=qm14l5drg6an; domain=.datanodes.to; path=/; expires=Mon, 19-May-2025 23:03:06 GMT
file_name=MushihimeSama-NSP-ROMSLAB.rar; domain=.datanodes.to; path=/; expires=Mon, 19-May-2025 23:03:06 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gxYL394hPHA%2B50NCXZea6x8zOvAtuB9Thrfe8ePrYH57ihZtiCHySvsz34z1lGzH0GrdFZwuFAJAPqcdNUoAfQQjUmkB9CRNlzSsHeWYvy9UgUc%2FG93ZhjZCjyWq4w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 9426e1e2fd6f56b5-OSL
server-timing: cfL4;desc="?proto=TCP&rtt=5631&min_rtt=472&rtt_var=10334&sent=7&recv=12&lost=0&retrans=0&sent_bytes=3277&recv_bytes=1279&delivery_rate=6581818&cwnd=254&unsent_bytes=0&cid=cdbd7f71e2fd3cbd&ts=169&x=0"
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/poppins/v23/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2 | 142.250.74.35 | 200 OK | 8.0 kB |
URL GET fonts.gstatic.com/s/poppins/v23/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2 IP142.250.74.35:443
Requested byhttps://datanodes.to/download CertificateIssuerGoogle Trust Services Subject*.gstatic.com Fingerprint15:8B:D4:EA:7E:CB:34:1B:6F:2E:20:9E:39:44:7A:D6:D7:30:26:AB ValidityMon, 21 Apr 2025 08:41:49 GMT - Mon, 14 Jul 2025 08:41:48 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 8000, version 1.0 Hash72993dddf88a63e8f226656f7de88e57 179f97ec0275f09603a8db94d4380eb584d81cd5 f4e80d9dfd374d02989b87a27b5ed4cb78fbb177c27f1478e9a8b0afb7513149
GET /s/poppins/v23/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://datanodes.to
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 8000
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 16 May 2025 14:59:58 GMT
expires: Sat, 16 May 2026 14:59:58 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 23 Apr 2025 16:07:17 GMT
content-type: font/woff2
age: 284589
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| datanodes.to/cdn-cgi/challenge-platform/scripts/jsd/main.js | 104.26.14.76 | 302 Found | 8.4 kB |
URL GET datanodes.to/cdn-cgi/challenge-platform/scripts/jsd/main.js IP104.26.14.76:443
Requested byhttps://datanodes.to/download CertificateIssuerGoogle Trust Services Subjectdatanodes.to Fingerprint37:77:73:11:B8:A3:75:DF:17:A4:43:CB:D8:37:F9:B8:23:4A:C4:63 ValidityThu, 10 Apr 2025 04:51:00 GMT - Wed, 09 Jul 2025 05:50:41 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1
Host: datanodes.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: lang=english; file_code=qm14l5drg6an; file_name=MushihimeSama-NSP-ROMSLAB.rar; affiliate=qORHJYueob0J2fSUcUnMp9QyFqAnTJ5fEJsSnX0mFPwJIC6VYc%2BWqr21FoDOCXYFXmPQZr4prRgogJcirONaqALPkx0%3D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Mon, 19 May 2025 22:03:07 GMT
content-length: 0
location: /cdn-cgi/challenge-platform/h/g/scripts/jsd/6fab0cec561d/main.js?
cache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=10800, public
access-control-allow-origin: *
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=40QBdfE2QDB1M%2FVLEnJ5c32oVTv0nE0cnrPm4i4bZFKkUo6ZkykbPdTIwy8kyKnSoJ6cgW7hRNxoQGbFCva9%2F0ufsf0yWxmF8mT3GfRZclm6be4RYn4chziih9RbJg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 9426e1eddbbc56b5-OSL
server-timing: cfL4;desc="?proto=TCP&rtt=1271&min_rtt=472&rtt_var=133&sent=147&recv=60&lost=0&retrans=0&sent_bytes=174302&recv_bytes=2523&delivery_rate=79039301&cwnd=256&unsent_bytes=0&cid=cdbd7f71e2fd3cbd&ts=1807&x=0"
X-Firefox-Spdy: h2
|
|
| accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&hl=en&ifkv=ASKV5Mgs1toXM_K9WfEDpu9OZ8Liq6ATjpbevqsfwjKBh-XaQVIHedb-c9coq5yRt835KuamiOgcYw&passive=true&service=mail&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S36668009%3A1747692190769219 | 108.177.14.84 | 403 Forbidden | 0 B |
URL GET accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&hl=en&ifkv=ASKV5Mgs1toXM_K9WfEDpu9OZ8Liq6ATjpbevqsfwjKBh-XaQVIHedb-c9coq5yRt835KuamiOgcYw&passive=true&service=mail&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S36668009%3A1747692190769219 IP108.177.14.84:443
Requested byhttps://datanodes.to/download CertificateIssuerGoogle Trust Services Subject*.google.com Fingerprint44:D5:9C:A6:01:4B:21:80:05:6C:4D:0E:9B:34:C1:BF:E2:B4:AD:D5 ValidityTue, 29 Apr 2025 19:28:22 GMT - Tue, 22 Jul 2025 19:28:21 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&hl=en&ifkv=ASKV5Mgs1toXM_K9WfEDpu9OZ8Liq6ATjpbevqsfwjKBh-XaQVIHedb-c9coq5yRt835KuamiOgcYw&passive=true&service=mail&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S36668009%3A1747692190769219 HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://datanodes.to/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 403 Forbidden
content-type: text/html; charset=utf-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Mon, 19 May 2025 22:03:11 GMT
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-opener-policy-report-only: same-origin; report-to="AccountsSignInUi"
content-security-policy: script-src 'nonce-vEAENNIQbzQd5X0Mv8jPqg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /v3/signin/_/AccountsSignInUi/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com https://support.google.com/inapp/ https://www.google.com/tools/feedback/ https://www.gstatic.com/inproduct_help/ https://www.gstatic.com/support/content/;report-uri /v3/signin/_/AccountsSignInUi/cspreport/allowlist, require-trusted-types-for 'script';report-uri /v3/signin/_/AccountsSignInUi/cspreport
content-security-policy-report-only: script-src 'unsafe-inline' 'unsafe-eval' blob: data: https://ajax.googleapis.com/ajax/libs/jquery/3.6.4/jquery.min.js https://translate.google.com/translate_a/element.js https://www.google.com/recaptcha/api.js https://www.google.com/tools/feedback/load.js https://www.google.com/tools/feedback/open.js https://www.google.com/tools/feedback/open_to_help_guide_lazy.js https://www.google.com/tools/feedback/help_api.js https://www.gstatic.com/inproduct_help/service/lazy.min.js https://www.gstatic.com/inproduct_help/api/main.min.js https://www.gstatic.com/inproduct_help/chatsupport/chatsupport_button_v2.js https://www.gstatic.com/feedback/js/help/prod/service/lazy.min.js https://www.gstatic.com/uservoice/feedback/client/web/live/ https://www.google.com/tools/feedback/chat_load.js https://www.gstatic.com/uservoice/surveys/resources/prod/js/survey/ https://www.gstatic.com/feedback/js/ghelp/ https://www.gstatic.com/_/mss/boq-one-google/_/ https://www.gstatic.com/og/_/js/ https://apis.google.com/js/api.js https://apis.google.com/js/client.js https://www.googletagmanager.com/gtag/js https://www.google-analytics.com/analytics.js https://www.googletagmanager.com/gtag/destination https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en.NDLLMFEP-JU.es5.O/ https://apis.google.com/_/scs/abc-static/_/js/ https://translate.googleapis.com/_/translate_http/_/js/ https://www.gstatic.com/recaptcha/releases/;report-uri /v3/signin/_/AccountsSignInUi/cspreport/fine-allowlist
report-to: {"group":"AccountsSignInUi","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/AccountsSignInUi"}]}
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.google.com/recaptcha/api2/clr?k=6LdhelkqAAAAAH_f47GPnSuEgnjRo4Pf0ukRioGs | 142.250.74.68 | 200 OK | 0 B |
URL POST www.google.com/recaptcha/api2/clr?k=6LdhelkqAAAAAH_f47GPnSuEgnjRo4Pf0ukRioGs IP142.250.74.68:443
Requested byhttps://www.google.com/recaptcha/api2/anchor?ar=1&k=6LdhelkqAAAAAH_f47GPnSuEgnjRo4Pf0ukRioGs&co=aHR0cHM6Ly9kYXRhbm9kZXMudG86NDQz&hl=en&v=X-oVtzDcTGjZVms4LEgykmCV&size=invisible&cb=arj60wio1lh2 CertificateIssuerGoogle Trust Services Subject*.google.com Fingerprint2F:BC:E9:F2:13:41:F1:3E:34:53:D6:F4:E9:17:8E:40:10:82:D1:3E ValidityMon, 21 Apr 2025 08:40:42 GMT - Mon, 14 Jul 2025 08:40:41 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /recaptcha/api2/clr?k=6LdhelkqAAAAAH_f47GPnSuEgnjRo4Pf0ukRioGs HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-protobuf
Content-Length: 1559
Origin: https://www.google.com
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LdhelkqAAAAAH_f47GPnSuEgnjRo4Pf0ukRioGs&co=aHR0cHM6Ly9kYXRhbm9kZXMudG86NDQz&hl=en&v=X-oVtzDcTGjZVms4LEgykmCV&size=invisible&cb=arj60wio1lh2
Cookie: _GRECAPTCHA=09AMNxLB_b-2MHUXBXcu-knc8Jyd-PbbW9bqCloSvlkH5RTtL-hRyY1Ce--cATSru1kOHQK2hKWiXd-d3cmbDjT50
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: application/binary
report-to: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]}
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d"
date: Mon, 19 May 2025 22:03:13 GMT
server: ESF
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| accounts.google.com/InteractiveLogin?continue=https://www.youtube.com/favicon.ico&hl=en&passive=true&service=youtube&uilel=3&ifkv=ASKV5MieLXVSIuyZUM0JHu3m0vPrVyjIgTw83c6Wp9zU3JXMRTuZsEfvhliU9PbeEitdxeV_ajWBzg | 108.177.14.84 | 302 Found | 0 B |
URL GET accounts.google.com/InteractiveLogin?continue=https://www.youtube.com/favicon.ico&hl=en&passive=true&service=youtube&uilel=3&ifkv=ASKV5MieLXVSIuyZUM0JHu3m0vPrVyjIgTw83c6Wp9zU3JXMRTuZsEfvhliU9PbeEitdxeV_ajWBzg IP108.177.14.84:443
Requested byhttps://datanodes.to/download CertificateIssuerGoogle Trust Services Subject*.google.com Fingerprint44:D5:9C:A6:01:4B:21:80:05:6C:4D:0E:9B:34:C1:BF:E2:B4:AD:D5 ValidityTue, 29 Apr 2025 19:28:22 GMT - Tue, 22 Jul 2025 19:28:21 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /InteractiveLogin?continue=https://www.youtube.com/favicon.ico&hl=en&passive=true&service=youtube&uilel=3&ifkv=ASKV5MieLXVSIuyZUM0JHu3m0vPrVyjIgTw83c6Wp9zU3JXMRTuZsEfvhliU9PbeEitdxeV_ajWBzg HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://datanodes.to/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 302 Found
content-type: text/html; charset=UTF-8
set-cookie: __Host-GAPS=1:hk5cnm6Vv7O9tzv9jaJoc8Gewmu1Og:tQQ9wS6ob9b87MX6;Path=/;Expires=Wed, 19-May-2027 22:03:10 GMT;Secure;HttpOnly;Priority=HIGH
x-frame-options: DENY
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Mon, 19 May 2025 22:03:10 GMT
location: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&hl=en&ifkv=ASKV5MhqKW3Il_iNg_ElHrSMIEweG7vM3ckpTMrD6MN2ZGzPkEJa1_EIm03gu6KT34ATOAw0V1GQaA&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-2145354281%3A1747692190769801
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-opener-policy-report-only: same-origin; report-to="coop_gse_qebhlk"
content-security-policy: require-trusted-types-for 'script';report-uri /cspreport, script-src 'nonce-LU1PZFrs1O3l1DR6jipQSQ' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /cspreport
report-to: {"group":"coop_gse_qebhlk","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gse_qebhlk"}]}
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 418
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 | 142.250.74.35 | 200 OK | 16 kB |
URL GET fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 IP142.250.74.35:443
Requested byhttps://www.google.com/recaptcha/api2/anchor?ar=1&k=6LdhelkqAAAAAH_f47GPnSuEgnjRo4Pf0ukRioGs&co=aHR0cHM6Ly9kYXRhbm9kZXMudG86NDQz&hl=en&v=X-oVtzDcTGjZVms4LEgykmCV&size=invisible&cb=arj60wio1lh2 CertificateIssuerGoogle Trust Services Subject*.gstatic.com Fingerprint15:8B:D4:EA:7E:CB:34:1B:6F:2E:20:9E:39:44:7A:D6:D7:30:26:AB ValidityMon, 21 Apr 2025 08:41:49 GMT - Mon, 14 Jul 2025 08:41:48 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 15552, version 1.0 Hash285467176f7fe6bb6a9c6873b3dad2cc ea04e4ff5142ddd69307c183def721a160e0a64e 5a8c1e7681318caa29e9f44e8a6e271f6a4067a2703e9916dfd4fe9099241db7
GET /s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.google.com
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15552
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 16 May 2025 02:24:12 GMT
expires: Sat, 16 May 2026 02:24:12 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 16 Oct 2017 17:33:02 GMT
content-type: font/woff2
age: 329939
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| undefined/YUxITXgALisgRwBxKmsNEyB1aEonaXoLHFAlfD8bCTQvfQEAOX9jGw0jPSkeEyMmOVYPKTxoSicpBQgIFhl6eCwrHnx8LTQdIgs/VCoJFQAjFiQ+PQMNCSU7UBZ7CzwoLR0eKQcCPzk8Ow0ZdSsnI30FAlEpDBlAKwULAxsgNHwBMQ8ZMgpLNC0bJE0vFXglGyo0fH0tGRU+BRIjGAkaDzMCPzo2ByARIDwWfCYFAQoEEA4hMygkNUoHfX0nKxYGfho7MAQQJEwHBgp9LgQJCXQ/CRp8HD8rKQAjCDcVCzouBAkJJjpQeXAfMDsoKyBBIhUwFD8HIGUbHy0OHnkpIgkRCyAKNBEhSCQWDQ9OMjsCez4bFQYaATcaER4fIikjCxI5Kw57KTkWKww7FhYBHAw2BhklSjkEEnopUygJDD8WCiohQEcmOyIWEXE9NAssIAEjIC0JMSY | 0.0.0.0 | | 0 B |
URL GET undefined/YUxITXgALisgRwBxKmsNEyB1aEonaXoLHFAlfD8bCTQvfQEAOX9jGw0jPSkeEyMmOVYPKTxoSicpBQgIFhl6eCwrHnx8LTQdIgs/VCoJFQAjFiQ+PQMNCSU7UBZ7CzwoLR0eKQcCPzk8Ow0ZdSsnI30FAlEpDBlAKwULAxsgNHwBMQ8ZMgpLNC0bJE0vFXglGyo0fH0tGRU+BRIjGAkaDzMCPzo2ByARIDwWfCYFAQoEEA4hMygkNUoHfX0nKxYGfho7MAQQJEwHBgp9LgQJCXQ/CRp8HD8rKQAjCDcVCzouBAkJJjpQeXAfMDsoKyBBIhUwFD8HIGUbHy0OHnkpIgkRCyAKNBEhSCQWDQ9OMjsCez4bFQYaATcaER4fIikjCxI5Kw57KTkWKww7FhYBHAw2BhklSjkEEnopUygJDD8WCiohQEcmOyIWEXE9NAssIAEjIC0JMSY IP0.0.0.0:0
Requested byhttps://datanodes.to/download
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /YUxITXgALisgRwBxKmsNEyB1aEonaXoLHFAlfD8bCTQvfQEAOX9jGw0jPSkeEyMmOVYPKTxoSicpBQgIFhl6eCwrHnx8LTQdIgs/VCoJFQAjFiQ+PQMNCSU7UBZ7CzwoLR0eKQcCPzk8Ow0ZdSsnI30FAlEpDBlAKwULAxsgNHwBMQ8ZMgpLNC0bJE0vFXglGyo0fH0tGRU+BRIjGAkaDzMCPzo2ByARIDwWfCYFAQoEEA4hMygkNUoHfX0nKxYGfho7MAQQJEwHBgp9LgQJCXQ/CRp8HD8rKQAjCDcVCzouBAkJJjpQeXAfMDsoKyBBIhUwFD8HIGUbHy0OHnkpIgkRCyAKNBEhSCQWDQ9OMjsCez4bFQYaATcaER4fIikjCxI5Kw57KTkWKww7FhYBHAw2BhklSjkEEnopUygJDD8WCiohQEcmOyIWEXE9NAssIAEjIC0JMSY HTTP/1.1
Host: undefined
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://datanodes.to/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|
|
| fonts.gstatic.com/s/poppins/v23/pxiEyp8kv8JHgFVrJJfecg.woff2 | 142.250.74.35 | 200 OK | 7.9 kB |
URL GET fonts.gstatic.com/s/poppins/v23/pxiEyp8kv8JHgFVrJJfecg.woff2 IP142.250.74.35:443
Requested byhttps://datanodes.to/download CertificateIssuerGoogle Trust Services Subject*.gstatic.com Fingerprint15:8B:D4:EA:7E:CB:34:1B:6F:2E:20:9E:39:44:7A:D6:D7:30:26:AB ValidityMon, 21 Apr 2025 08:41:49 GMT - Mon, 14 Jul 2025 08:41:48 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 7884, version 1.0 Hash9212f6f9860f9fc6c69b02fedf6db8c3 ac6d71b4d5fdd2b3dabc9a06ff6c001e4251da0b 7d93459d86585bfcdbb7e0376056226adb25821ee54b96236fe2123e9560929f
GET /s/poppins/v23/pxiEyp8kv8JHgFVrJJfecg.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://datanodes.to
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7884
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 15 May 2025 10:26:17 GMT
expires: Fri, 15 May 2026 10:26:17 GMT
cache-control: public, max-age=31536000
age: 387410
last-modified: Wed, 23 Apr 2025 16:05:59 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| datanodes.to/theme_2023/dist/assets/_plugin-vue_export-helper-c27b6911.js | 104.26.14.76 | 200 OK | 91 B |
URL GET datanodes.to/theme_2023/dist/assets/_plugin-vue_export-helper-c27b6911.js IP104.26.14.76:443
Requested byhttps://datanodes.to/download CertificateIssuerGoogle Trust Services Subjectdatanodes.to Fingerprint37:77:73:11:B8:A3:75:DF:17:A4:43:CB:D8:37:F9:B8:23:4A:C4:63 ValidityThu, 10 Apr 2025 04:51:00 GMT - Wed, 09 Jul 2025 05:50:41 GMT
Hash25e3a5dcaf00fb2b1ba0c8ecea6d2560 7850b3fd4aeb69387bdb5a60025d15c41351d5eb cb85b0f263dbe24e857338301c0627076592e9f1f1a5662929f86d2c126444aa
GET /theme_2023/dist/assets/_plugin-vue_export-helper-c27b6911.js HTTP/1.1
Host: datanodes.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://datanodes.to/theme_2023/dist/assets/VirusScan-e53a5e80.js
Cookie: lang=english; file_code=qm14l5drg6an; file_name=MushihimeSama-NSP-ROMSLAB.rar; affiliate=qORHJYueob0J2fSUcUnMp9QyFqAnTJ5fEJsSnX0mFPwJIC6VYc%2BWqr21FoDOCXYFXmPQZr4prRgogJcirONaqALPkx0%3D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 19 May 2025 22:03:07 GMT
content-type: application/javascript
last-modified: Sun, 09 Feb 2025 16:17:00 GMT
etag: W/"67a8d4fc-5b"
cache-control: max-age=14400
cf-cache-status: HIT
age: 1028
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1o1gN99JLxiVmoxNDquCeneB3k9y0ZIyTWa9Cp3Bbp%2BXPuvRgB4bLCaPzjxaKnv4rbMdR1R%2Bp3ar7bwcXp3vO71LSyAgFVjBvFqHbmz9jpRX7d9Fc6Kq6iM%2FqeV0Qg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 9426e1edfbdc56b5-OSL
content-encoding: br
server-timing: cfL4;desc="?proto=TCP&rtt=951&min_rtt=472&rtt_var=373&sent=174&recv=75&lost=0&retrans=0&sent_bytes=204361&recv_bytes=3036&delivery_rate=79039301&cwnd=256&unsent_bytes=0&cid=cdbd7f71e2fd3cbd&ts=1829&x=0"
X-Firefox-Spdy: h2
|
|
| www.google.com/recaptcha/api2/clr?k=6LdhelkqAAAAAH_f47GPnSuEgnjRo4Pf0ukRioGs | 142.250.74.68 | 200 OK | 0 B |
URL POST www.google.com/recaptcha/api2/clr?k=6LdhelkqAAAAAH_f47GPnSuEgnjRo4Pf0ukRioGs IP142.250.74.68:443
Requested byhttps://datanodes.to/download CertificateIssuerGoogle Trust Services Subject*.google.com Fingerprint2F:BC:E9:F2:13:41:F1:3E:34:53:D6:F4:E9:17:8E:40:10:82:D1:3E ValidityMon, 21 Apr 2025 08:40:42 GMT - Mon, 14 Jul 2025 08:40:41 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /recaptcha/api2/clr?k=6LdhelkqAAAAAH_f47GPnSuEgnjRo4Pf0ukRioGs HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://datanodes.to/
Content-Length: 1576
Origin: https://datanodes.to
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: application/binary
report-to: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]}
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d"
date: Mon, 19 May 2025 22:03:13 GMT
server: ESF
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| datanodes.to/theme_2023/src/assets/images/virus-scan.png | 104.26.14.76 | 200 OK | 34 kB |
URL GET datanodes.to/theme_2023/src/assets/images/virus-scan.png IP104.26.14.76:443
Requested byhttps://datanodes.to/download CertificateIssuerGoogle Trust Services Subjectdatanodes.to Fingerprint37:77:73:11:B8:A3:75:DF:17:A4:43:CB:D8:37:F9:B8:23:4A:C4:63 ValidityThu, 10 Apr 2025 04:51:00 GMT - Wed, 09 Jul 2025 05:50:41 GMT
File typePNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced Hashed8693e5b49bbfec66898fd26b979317 0fe86ee5614e13c3c93672a4d57ef69555f3e701 5b6ef28011995150a50e6e59ca8728a5f0f92c7dfe27f08433e398a7fc177a9d
GET /theme_2023/src/assets/images/virus-scan.png HTTP/1.1
Host: datanodes.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://datanodes.to/download
Cookie: lang=english; file_code=qm14l5drg6an; file_name=MushihimeSama-NSP-ROMSLAB.rar; affiliate=qORHJYueob0J2fSUcUnMp9QyFqAnTJ5fEJsSnX0mFPwJIC6VYc%2BWqr21FoDOCXYFXmPQZr4prRgogJcirONaqALPkx0%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 19 May 2025 22:03:06 GMT
content-type: image/png
content-length: 33827
last-modified: Wed, 31 Jan 2024 09:41:40 GMT
etag: "65ba15d4-8423"
cache-control: max-age=14400
cf-cache-status: HIT
age: 5312
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RL0EUpvp%2Bcsfw3NVHRU0KzJh06Mbb4BtroQKx3pkPB6JVzp5ZR3p1RBTnY%2F3FOb15R0%2Fe5htHXQExekYklbg4DvnJyUQbythrbkaz7fLtEjAzaB0KsdPxmxJVryBIQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 9426e1e73b0f56b5-OSL
server-timing: cfL4;desc="?proto=TCP&rtt=3383&min_rtt=472&rtt_var=2759&sent=52&recv=25&lost=0&retrans=0&sent_bytes=49829&recv_bytes=2029&delivery_rate=13325153&cwnd=256&unsent_bytes=0&cid=cdbd7f71e2fd3cbd&ts=749&x=0"
X-Firefox-Spdy: h2
|
|
| datanodes.to/theme_2023/dist/assets/VirusScan-e53a5e80.js | 104.26.14.76 | 200 OK | 1.1 kB |
URL GET datanodes.to/theme_2023/dist/assets/VirusScan-e53a5e80.js IP104.26.14.76:443
Requested byhttps://datanodes.to/download CertificateIssuerGoogle Trust Services Subjectdatanodes.to Fingerprint37:77:73:11:B8:A3:75:DF:17:A4:43:CB:D8:37:F9:B8:23:4A:C4:63 ValidityThu, 10 Apr 2025 04:51:00 GMT - Wed, 09 Jul 2025 05:50:41 GMT
File typeJava source, ASCII text, with very long lines (1119) Hash4838938921365808702372a0947114c2 8aa1c4e51dacf60f069c52a80039fbcc6dc50e70 555e00c6b3d5c3ff1b6e855201b7216e68c5783adaa25dafc2ad68d3ee75677c
GET /theme_2023/dist/assets/VirusScan-e53a5e80.js HTTP/1.1
Host: datanodes.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://datanodes.to/theme_2023/dist/assets/app-80bcdb82.js
Cookie: lang=english; file_code=qm14l5drg6an; file_name=MushihimeSama-NSP-ROMSLAB.rar; affiliate=qORHJYueob0J2fSUcUnMp9QyFqAnTJ5fEJsSnX0mFPwJIC6VYc%2BWqr21FoDOCXYFXmPQZr4prRgogJcirONaqALPkx0%3D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 19 May 2025 22:03:07 GMT
content-type: application/javascript
last-modified: Sun, 09 Feb 2025 16:17:00 GMT
etag: W/"67a8d4fc-460"
cache-control: max-age=14400
cf-cache-status: HIT
age: 1028
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=N%2FClhk5%2BnM8Zwg9JCPjvLwlnuMvm2r3Oa2vMeb4yjF8TUV30T1e8%2FgGj%2BcEoHKqGTT5nkErU8BStDpdjkVTOQu0U3K7RbjvmSHKlh9mkqHHdtX9OURSmHHkerNS7sQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 9426e1ebf95156b5-OSL
content-encoding: br
server-timing: cfL4;desc="?proto=TCP&rtt=1244&min_rtt=472&rtt_var=107&sent=144&recv=57&lost=0&retrans=0&sent_bytes=173125&recv_bytes=2296&delivery_rate=79039301&cwnd=256&unsent_bytes=0&cid=cdbd7f71e2fd3cbd&ts=1512&x=0"
X-Firefox-Spdy: h2
|
|
| datanodes.to/theme_2023/dist/assets/_commonjsHelpers-d4b30cbb.js | 104.26.14.76 | 200 OK | 571 B |
URL GET datanodes.to/theme_2023/dist/assets/_commonjsHelpers-d4b30cbb.js IP104.26.14.76:443
Requested byhttps://datanodes.to/download CertificateIssuerGoogle Trust Services Subjectdatanodes.to Fingerprint37:77:73:11:B8:A3:75:DF:17:A4:43:CB:D8:37:F9:B8:23:4A:C4:63 ValidityThu, 10 Apr 2025 04:51:00 GMT - Wed, 09 Jul 2025 05:50:41 GMT
File typeJavaScript source, ASCII text, with very long lines (570) Hash438e021bb3322f23fb81092ef78dd510 51a31923f243d4af84ef0f6e710bdf202e52c6c9 85533b0eb874013bd2468499e014675813269c8983bf7e0abc366d1715020769
GET /theme_2023/dist/assets/_commonjsHelpers-d4b30cbb.js HTTP/1.1
Host: datanodes.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://datanodes.to/theme_2023/dist/assets/VirusScan-e53a5e80.js
Cookie: lang=english; file_code=qm14l5drg6an; file_name=MushihimeSama-NSP-ROMSLAB.rar; affiliate=qORHJYueob0J2fSUcUnMp9QyFqAnTJ5fEJsSnX0mFPwJIC6VYc%2BWqr21FoDOCXYFXmPQZr4prRgogJcirONaqALPkx0%3D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 19 May 2025 22:03:07 GMT
content-type: application/javascript
last-modified: Sun, 09 Feb 2025 16:17:00 GMT
etag: W/"67a8d4fc-23b"
cache-control: max-age=14400
cf-cache-status: HIT
age: 1028
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mNDlOHsqjwB4HoQQs9UxqfwwbFxisPrawB74BvTleay6FqJqZHJ1sNVZ%2FvplXl07S41NfEeop12JuxLdpze%2FIaaVpXoa6k%2FEni5eNhOgFt20KcvqZ%2BAdGP5NMQY2nw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 9426e1ee0bea56b5-OSL
content-encoding: br
server-timing: cfL4;desc="?proto=TCP&rtt=1237&min_rtt=434&rtt_var=853&sent=179&recv=76&lost=0&retrans=0&sent_bytes=206936&recv_bytes=3036&delivery_rate=79039301&cwnd=256&unsent_bytes=0&cid=cdbd7f71e2fd3cbd&ts=1838&x=0"
X-Firefox-Spdy: h2
|
|
| datanodes.to/theme_2023/dist/assets/LoadingIcon-59fcef50.js | 104.26.14.76 | 200 OK | 667 B |
URL GET datanodes.to/theme_2023/dist/assets/LoadingIcon-59fcef50.js IP104.26.14.76:443
Requested byhttps://datanodes.to/download CertificateIssuerGoogle Trust Services Subjectdatanodes.to Fingerprint37:77:73:11:B8:A3:75:DF:17:A4:43:CB:D8:37:F9:B8:23:4A:C4:63 ValidityThu, 10 Apr 2025 04:51:00 GMT - Wed, 09 Jul 2025 05:50:41 GMT
File typeJava source, ASCII text, with very long lines (666) Hash3bf8f7142f945fb29a79ec7ddde813ab 510746b341aec2afe4c3f6e4bdc58f3de28a6a7d d9d4e80bef2de510da666b488f7d8c4faf40604a500ac13bb5f165a09763e15e
GET /theme_2023/dist/assets/LoadingIcon-59fcef50.js HTTP/1.1
Host: datanodes.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://datanodes.to/theme_2023/dist/assets/VirusScan-e53a5e80.js
Cookie: lang=english; file_code=qm14l5drg6an; file_name=MushihimeSama-NSP-ROMSLAB.rar; affiliate=qORHJYueob0J2fSUcUnMp9QyFqAnTJ5fEJsSnX0mFPwJIC6VYc%2BWqr21FoDOCXYFXmPQZr4prRgogJcirONaqALPkx0%3D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 19 May 2025 22:03:07 GMT
content-type: application/javascript
last-modified: Sun, 09 Feb 2025 16:17:00 GMT
etag: W/"67a8d4fc-29b"
cache-control: max-age=14400
cf-cache-status: HIT
age: 1028
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9Ke%2Bc05mv9MvZ8rFcv3mfmssEOOmM0J40GFActWmAAQTs3qOE1gcpUG25CqvJBCfXR4cOeWsB8b5WT6LhhvaBeqa5RQmRB37V%2F%2BOW9CZPqPog2sdK20r2dFRttiNJQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 9426e1edfbd556b5-OSL
content-encoding: br
server-timing: cfL4;desc="?proto=TCP&rtt=1851&min_rtt=472&rtt_var=1261&sent=149&recv=63&lost=0&retrans=0&sent_bytes=174828&recv_bytes=2918&delivery_rate=79039301&cwnd=256&unsent_bytes=0&cid=cdbd7f71e2fd3cbd&ts=1825&x=0"
X-Firefox-Spdy: h2
|
|
| ngforanoppor.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 | 108.157.229.70 | 200 OK | 3.1 kB |
URL GET ngforanoppor.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 IP108.157.229.70:443
Requested byhttps://datanodes.to/download CertificateIssuerAmazon Subjectngforanoppor.org Fingerprint6E:AD:2C:FE:EA:E7:AC:61:EF:42:91:7A:87:A5:E9:A2:12:25:E3:62 ValidityTue, 29 Apr 2025 00:00:00 GMT - Thu, 28 May 2026 23:59:59 GMT
File typeHTML document, ASCII text, with very long lines (3077), with no line terminators Hashcbbdfac0eaf599459d36c4d015f0a565 a377123f6f74a2e3b51ceb27d8b438cc75083e18 9f22e0e39c93654a3103d93b40f95373ad7defd65723176c190120a5a5da86c3
GET /czBXNXESUjRYThINNRMEAVxqEEM1FWVzFUJZY0cSG0gwBQgSRWAbEh9fIlEXAV85QV8dVSMQQzVVAnEnQWZlYAskWDBNJhpiNHAcA2UOZDM8aQFzGzZHDlkwN2kecBsqYhpjAil9IHQbNEceASAJQBByJRhmNWAGIXkTbEUndR5NODBiLWUlRmMNYgkieS8NQTB1DU0yJ3Y1cCYDdBljAiVRO2dDJXIeBCY0YQN0GBB7GEIWMn4GeEckWGNdMjB2A2AyOnU1YxYpfAZCSSRiM0wnC2kWYjYXcQ5SJxZ5FkJUQXICZxoUdjlgOSFaPGcVIlQQbx0lFWV3MyUdGV47QGUfZxgyfQdSPzBTO2wiNnUFWzkkaRVgQyJeM2QVNHoFe0AxWjNYJx5hNWcfRnEOUiQhfTBsRiRcGVk4QXkRZ0MXZg5kJztTO1EWJkhvWTA3ajZxHzloEVIjNWlnQRY2RxlEJzIWPUYeHUBqTBYEYz9MRRV1I3M6GgdibA HTTP/1.1
Host: ngforanoppor.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://datanodes.to/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/html
content-length: 1219
date: Mon, 19 May 2025 22:03:09 GMT
accept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List
set-cookie: AWSALB=F7STSMMy73GqcOs8L+IHsjsnUkD7KBkyvdTuPu5coHj83711xaohYQN2jAJtdhV4ZwSKWU+MMDgUTQo3gCzmEb+BZJ6EhAvH2WghZi09F3H+QtbRvXTeIVuFhHHe; Expires=Mon, 26 May 2025 22:03:09 GMT; Path=/
AWSALBCORS=F7STSMMy73GqcOs8L+IHsjsnUkD7KBkyvdTuPu5coHj83711xaohYQN2jAJtdhV4ZwSKWU+MMDgUTQo3gCzmEb+BZJ6EhAvH2WghZi09F3H+QtbRvXTeIVuFhHHe; Expires=Mon, 26 May 2025 22:03:09 GMT; Path=/; SameSite=None
server: openresty/1.17.8.2
cache-control: no-store, no-cache, must-revalidate, no-transform
pragma: no-cache
p3p: CP="NID DSP ALL COR"
content-encoding: gzip
x-cache: Miss from cloudfront
via: 1.1 0f31cf94bd251bd501ac532dacb719fe.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN56-P2
x-amz-cf-id: ql-XMcaIYLAgt53qugedUz2vutkG78er6-9kAWbPuowLiIvkVse14g==
X-Firefox-Spdy: h2
|
|
| ukzemydream.com/UG80R1F/UFc0bAUnejYAYFZfFT1pWFF1Cxs4Bx10Yi1tdxsxDFowdyQGUHpgYVoMcWRnSUQuNW1eEjQlMRtBNGxhSV0pNz9SEjFsYUEHc39jWRpzdyVSBWElIA5TemB2H0AzPW1eA3NmZlYGdmlpXAx2 | 188.114.97.1 | 204 No Content | 0 B |
URL GET ukzemydream.com/UG80R1F/UFc0bAUnejYAYFZfFT1pWFF1Cxs4Bx10Yi1tdxsxDFowdyQGUHpgYVoMcWRnSUQuNW1eEjQlMRtBNGxhSV0pNz9SEjFsYUEHc39jWRpzdyVSBWElIA5TemB2H0AzPW1eA3NmZlYGdmlpXAx2 IP188.114.97.1:443
Requested byhttps://datanodes.to/download CertificateIssuerGoogle Trust Services Subjectukzemydream.com Fingerprint53:69:20:ED:28:03:81:E8:BB:A9:21:47:D2:D2:B1:15:7E:2E:53:CC ValidityTue, 22 Apr 2025 09:05:17 GMT - Mon, 21 Jul 2025 10:03:33 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /UG80R1F/UFc0bAUnejYAYFZfFT1pWFF1Cxs4Bx10Yi1tdxsxDFowdyQGUHpgYVoMcWRnSUQuNW1eEjQlMRtBNGxhSV0pNz9SEjFsYUEHc39jWRpzdyVSBWElIA5TemB2H0AzPW1eA3NmZlYGdmlpXAx2 HTTP/1.1
Host: ukzemydream.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://datanodes.to/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
date: Mon, 19 May 2025 22:03:09 GMT
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=W07j%2FG2s157D9tcFssduyyK%2FTSK0DZp3Qw5%2BdeXn2vesSqdmxomMARJa8Ie94P2SNmJ8VwCVDtbZZSHCSI9upR609%2Feu5t7NlGHjVzk%3D"}]}
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
server: cloudflare
cf-ray: 9426e1f7ec447128-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| ukankingwithea.com/ | 104.21.80.1 | 200 OK | 26 B |
IP104.21.80.1:443
Requested byhttps://datanodes.to/download CertificateIssuerGoogle Trust Services Subjectukankingwithea.com Fingerprint02:15:28:2A:F2:F8:5D:3A:DE:6D:1D:DC:CF:6D:06:BA:00:3A:63:70 ValidityTue, 29 Apr 2025 13:46:48 GMT - Mon, 28 Jul 2025 14:44:24 GMT
File typeASCII text, with no line terminators Hashdfa7ed4681d86d2bdfbe483b8857784a ebb97b30e67cdda050647e4ccafdf57c87120242 562c8dcc7941f42050d9b83b4bf731cd6818d9ba3e192420ef058eb78a4f039b
GET / HTTP/1.1
Host: ukankingwithea.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://datanodes.to/
Origin: https://datanodes.to
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 19 May 2025 22:03:10 GMT
content-type: text/plain
server: cloudflare
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
access-control-allow-origin: https://datanodes.to
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-headers: X-Requested-With, content-type
cf-cache-status: DYNAMIC
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=xTKlnHdZ9da4%2BtVP8OADRaHtyBcGnS%2Bh0lOAbl8Wg5sPWUFIO6n%2BUe%2FaQlzq5qqi2JOyBHQ20ugZ1ZAcfD1EpJm3%2Br8f%2BmJJnAgOZS3a2Ak%3D"}]}
content-encoding: br
set-cookie: csu=172262720306563@1@1747692190; SameSite=None; Secure; Max-Age=31104000
cf-ray: 9426e1fb3e240b65-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&hl=en&ifkv=ASKV5MhqKW3Il_iNg_ElHrSMIEweG7vM3ckpTMrD6MN2ZGzPkEJa1_EIm03gu6KT34ATOAw0V1GQaA&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-2145354281%3A1747692190769801 | 108.177.14.84 | 403 Forbidden | 0 B |
URL GET accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&hl=en&ifkv=ASKV5MhqKW3Il_iNg_ElHrSMIEweG7vM3ckpTMrD6MN2ZGzPkEJa1_EIm03gu6KT34ATOAw0V1GQaA&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-2145354281%3A1747692190769801 IP108.177.14.84:443
Requested byhttps://datanodes.to/download CertificateIssuerGoogle Trust Services Subject*.google.com Fingerprint44:D5:9C:A6:01:4B:21:80:05:6C:4D:0E:9B:34:C1:BF:E2:B4:AD:D5 ValidityTue, 29 Apr 2025 19:28:22 GMT - Tue, 22 Jul 2025 19:28:21 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /v3/signin/identifier?continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&hl=en&ifkv=ASKV5MhqKW3Il_iNg_ElHrSMIEweG7vM3ckpTMrD6MN2ZGzPkEJa1_EIm03gu6KT34ATOAw0V1GQaA&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-2145354281%3A1747692190769801 HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://datanodes.to/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 403 Forbidden
content-type: text/html; charset=utf-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Mon, 19 May 2025 22:03:11 GMT
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
strict-transport-security: max-age=31536000; includeSubDomains
content-security-policy: require-trusted-types-for 'script';report-uri /v3/signin/_/AccountsSignInUi/cspreport, script-src 'nonce-AEnICN6A__znt_Ixe2OKfA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /v3/signin/_/AccountsSignInUi/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com https://support.google.com/inapp/ https://www.google.com/tools/feedback/ https://www.gstatic.com/inproduct_help/ https://www.gstatic.com/support/content/;report-uri /v3/signin/_/AccountsSignInUi/cspreport/allowlist
content-security-policy-report-only: script-src 'unsafe-inline' 'unsafe-eval' blob: data: https://ajax.googleapis.com/ajax/libs/jquery/3.6.4/jquery.min.js https://translate.google.com/translate_a/element.js https://www.google.com/recaptcha/api.js https://www.google.com/tools/feedback/load.js https://www.google.com/tools/feedback/open.js https://www.google.com/tools/feedback/open_to_help_guide_lazy.js https://www.google.com/tools/feedback/help_api.js https://www.gstatic.com/inproduct_help/service/lazy.min.js https://www.gstatic.com/inproduct_help/api/main.min.js https://www.gstatic.com/inproduct_help/chatsupport/chatsupport_button_v2.js https://www.gstatic.com/feedback/js/help/prod/service/lazy.min.js https://www.gstatic.com/uservoice/feedback/client/web/live/ https://www.google.com/tools/feedback/chat_load.js https://www.gstatic.com/uservoice/surveys/resources/prod/js/survey/ https://www.gstatic.com/feedback/js/ghelp/ https://www.gstatic.com/_/mss/boq-one-google/_/ https://www.gstatic.com/og/_/js/ https://apis.google.com/js/api.js https://apis.google.com/js/client.js https://www.googletagmanager.com/gtag/js https://www.google-analytics.com/analytics.js https://www.googletagmanager.com/gtag/destination https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en.NDLLMFEP-JU.es5.O/ https://apis.google.com/_/scs/abc-static/_/js/ https://translate.googleapis.com/_/translate_http/_/js/ https://www.gstatic.com/recaptcha/releases/;report-uri /v3/signin/_/AccountsSignInUi/cspreport/fine-allowlist
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*
report-to: {"group":"AccountsSignInUi","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/AccountsSignInUi"}]}
cross-origin-opener-policy-report-only: same-origin; report-to="AccountsSignInUi"
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 | 142.250.74.35 | 200 OK | 15 kB |
URL GET fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 IP142.250.74.35:443
Requested byhttps://www.google.com/recaptcha/api2/anchor?ar=1&k=6LdhelkqAAAAAH_f47GPnSuEgnjRo4Pf0ukRioGs&co=aHR0cHM6Ly9kYXRhbm9kZXMudG86NDQz&hl=en&v=X-oVtzDcTGjZVms4LEgykmCV&size=invisible&cb=arj60wio1lh2 CertificateIssuerGoogle Trust Services Subject*.gstatic.com Fingerprint15:8B:D4:EA:7E:CB:34:1B:6F:2E:20:9E:39:44:7A:D6:D7:30:26:AB ValidityMon, 21 Apr 2025 08:41:49 GMT - Mon, 14 Jul 2025 08:41:48 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 15344, version 1.0 Hash5d4aeb4e5f5ef754e307d7ffaef688bd 06db651cdf354c64a7383ea9c77024ef4fb4cef8 3e253b66056519aa065b00a453bac37ac5ed8f3e6fe7b542e93a9dcdcc11d0bc
GET /s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.google.com
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15344
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 15 May 2025 09:35:39 GMT
expires: Fri, 15 May 2026 09:35:39 GMT
cache-control: public, max-age=31536000
age: 390452
last-modified: Mon, 16 Oct 2017 17:32:55 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| | 104.26.14.76 | 200 OK | 82 kB |
IP104.26.14.76:443
CertificateIssuerGoogle Trust Services Subjectdatanodes.to Fingerprint37:77:73:11:B8:A3:75:DF:17:A4:43:CB:D8:37:F9:B8:23:4A:C4:63 ValidityThu, 10 Apr 2025 04:51:00 GMT - Wed, 09 Jul 2025 05:50:41 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (56936) Hashdc8b048dac332ab39b781b529c75bd38 07c9449b85a0235c991aca528ed57d216f2b3f24 dbf55edc9c868b3a150af8fa3fd8db00f247466f7177b7de5ee7a3c6c3f0dc60
GET /download HTTP/1.1
Host: datanodes.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: lang=english; file_code=qm14l5drg6an; file_name=MushihimeSama-NSP-ROMSLAB.rar
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 19 May 2025 22:03:06 GMT
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
set-cookie: affiliate=qORHJYueob0J2fSUcUnMp9QyFqAnTJ5fEJsSnX0mFPwJIC6VYc%2BWqr21FoDOCXYFXmPQZr4prRgogJcirONaqALPkx0%3D; domain=.datanodes.to; path=/; expires=Mon, 02-Jun-2025 22:03:06 GMT
expires: Sun, 18 May 2025 22:03:06 GMT
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TynFKsSZph0M4qpvdlZLyfOSDJwEHnx1RGz0fewlRjda8eCKhDrzh5BvffixSBGNNyqbUJqZXdZtrnPmhsgwQiExXHLfMKzQnitpFUKsimNoNDj0FIfzSMkp5Mz23w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 9426e1e3ce7156b5-OSL
content-encoding: br
server-timing: cfL4;desc="?proto=TCP&rtt=4434&min_rtt=472&rtt_var=7889&sent=10&recv=15&lost=0&retrans=0&sent_bytes=4072&recv_bytes=1414&delivery_rate=6581818&cwnd=256&unsent_bytes=0&cid=cdbd7f71e2fd3cbd&ts=324&x=0"
X-Firefox-Spdy: h2
|
|
| www.google.com/recaptcha/api.js?render=6LdhelkqAAAAAH_f47GPnSuEgnjRo4Pf0ukRioGs | 142.250.74.68 | 200 OK | 945 B |
URL GET www.google.com/recaptcha/api.js?render=6LdhelkqAAAAAH_f47GPnSuEgnjRo4Pf0ukRioGs IP142.250.74.68:443
Requested byhttps://datanodes.to/download CertificateIssuerGoogle Trust Services Subjectwww.google.com FingerprintC0:9B:21:A5:10:36:7E:DC:25:8D:0B:AB:4B:D9:D7:AD:92:06:96:49 ValidityMon, 21 Apr 2025 08:42:35 GMT - Mon, 14 Jul 2025 08:42:34 GMT
File typeJavaScript source, ASCII text, with very long lines (945), with no line terminators Hash272038e5f3831c613843afda4b71c345 213808564963826d5911f6c9d4b953274aca852d 2beccf5b8fd1fd80313899b461fdaac0433b9c8dccd02e1bb600b60f044236a6
GET /recaptcha/api.js?render=6LdhelkqAAAAAH_f47GPnSuEgnjRo4Pf0ukRioGs HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://datanodes.to/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
expires: Mon, 19 May 2025 22:03:06 GMT
date: Mon, 19 May 2025 22:03:06 GMT
cache-control: private, max-age=300
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d"
report-to: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]}
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.googletagmanager.com/gtag/js?id=G-7DP7NV2LKF | 142.250.74.168 | 200 OK | 385 kB |
URL GET www.googletagmanager.com/gtag/js?id=G-7DP7NV2LKF IP142.250.74.168:443
Requested byhttps://datanodes.to/download CertificateIssuerGoogle Trust Services Subject*.google-analytics.com Fingerprint02:7D:56:C0:B9:20:0C:27:A4:AC:B9:8F:9D:45:1D:85:2A:30:50:AD ValidityMon, 21 Apr 2025 08:40:41 GMT - Mon, 14 Jul 2025 08:40:40 GMT
File typeJavaScript source, ASCII text, with very long lines (6125) Size385 kB (385240 bytes) Hashda046422a58229aec8f97ff65b670a37 2ca9c438e7baa7a5f55b3e3759153c6f33a1b277 370a53b004c7216b49d96b87786f19492144e3781c7eeae0b0eff14b6fe22f61
GET /gtag/js?id=G-7DP7NV2LKF HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://datanodes.to/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Mon, 19 May 2025 22:03:06 GMT
expires: Mon, 19 May 2025 22:03:06 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgcycc:1075:0
cross-origin-opener-policy-report-only: same-origin; report-to=ascgcycc:1075:0
report-to: {"group":"ascgcycc:1075:0","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgcycc:1075:0"}],}
server: Google Tag Manager
content-length: 128805
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/poppins/v23/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2 | 142.250.74.35 | 200 OK | 7.8 kB |
URL GET fonts.gstatic.com/s/poppins/v23/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2 IP142.250.74.35:443
Requested byhttps://datanodes.to/download CertificateIssuerGoogle Trust Services Subject*.gstatic.com Fingerprint15:8B:D4:EA:7E:CB:34:1B:6F:2E:20:9E:39:44:7A:D6:D7:30:26:AB ValidityMon, 21 Apr 2025 08:41:49 GMT - Mon, 14 Jul 2025 08:41:48 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 7816, version 1.0 Hash25b0e113ca7cce3770d542736db26368 cb726212d5d525021752a1d8470a0fb593e0c49e 9338e65fc077355c7a87ae0d64cc101e23b9bf8ad78ae65f0f319c857311b526
GET /s/poppins/v23/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://datanodes.to
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7816
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 14 May 2025 17:33:37 GMT
expires: Thu, 14 May 2026 17:33:37 GMT
cache-control: public, max-age=31536000
age: 448170
last-modified: Wed, 23 Apr 2025 16:07:25 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.google.com/recaptcha/api2/webworker.js?hl=en&v=X-oVtzDcTGjZVms4LEgykmCV | 142.250.74.68 | 200 OK | 102 B |
URL GET www.google.com/recaptcha/api2/webworker.js?hl=en&v=X-oVtzDcTGjZVms4LEgykmCV IP142.250.74.68:443
Requested byhttps://www.google.com/recaptcha/api2/anchor?ar=1&k=6LdhelkqAAAAAH_f47GPnSuEgnjRo4Pf0ukRioGs&co=aHR0cHM6Ly9kYXRhbm9kZXMudG86NDQz&hl=en&v=X-oVtzDcTGjZVms4LEgykmCV&size=invisible&cb=arj60wio1lh2 CertificateIssuerGoogle Trust Services Subject*.google.com Fingerprint2F:BC:E9:F2:13:41:F1:3E:34:53:D6:F4:E9:17:8E:40:10:82:D1:3E ValidityMon, 21 Apr 2025 08:40:42 GMT - Mon, 14 Jul 2025 08:40:41 GMT
File typeASCII text, with no line terminators Hasheb5ac6e09ab4e499923da321a3170bb0 bab2f66ae7f5b1341adf875707ea98bc63d78303 77fa05a500906d32604366ec2b46fa9958fac7c9c16f8006e1010e0cb883d345
GET /recaptcha/api2/webworker.js?hl=en&v=X-oVtzDcTGjZVms4LEgykmCV HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LdhelkqAAAAAH_f47GPnSuEgnjRo4Pf0ukRioGs&co=aHR0cHM6Ly9kYXRhbm9kZXMudG86NDQz&hl=en&v=X-oVtzDcTGjZVms4LEgykmCV&size=invisible&cb=arj60wio1lh2
Sec-Fetch-Dest: worker
Sec-Fetch-Mode: same-origin
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: text/javascript; charset=utf-8
cross-origin-embedder-policy: require-corp
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}, {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]}
expires: Mon, 19 May 2025 22:03:11 GMT
date: Mon, 19 May 2025 22:03:11 GMT
cache-control: private, max-age=300
cross-origin-resource-policy: same-site
cross-origin-opener-policy-report-only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d"
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.google.com/recaptcha/api2/reload?k=6LdhelkqAAAAAH_f47GPnSuEgnjRo4Pf0ukRioGs | 142.250.74.68 | 200 OK | 39 kB |
URL POST www.google.com/recaptcha/api2/reload?k=6LdhelkqAAAAAH_f47GPnSuEgnjRo4Pf0ukRioGs IP142.250.74.68:443
Requested byhttps://www.google.com/recaptcha/api2/anchor?ar=1&k=6LdhelkqAAAAAH_f47GPnSuEgnjRo4Pf0ukRioGs&co=aHR0cHM6Ly9kYXRhbm9kZXMudG86NDQz&hl=en&v=X-oVtzDcTGjZVms4LEgykmCV&size=invisible&cb=arj60wio1lh2 CertificateIssuerGoogle Trust Services Subject*.google.com Fingerprint2F:BC:E9:F2:13:41:F1:3E:34:53:D6:F4:E9:17:8E:40:10:82:D1:3E ValidityMon, 21 Apr 2025 08:40:42 GMT - Mon, 14 Jul 2025 08:40:41 GMT
File typeASCII text, with very long lines (38664) Hashf6ed4c62c2e597abc494f996429ac52b 1ce1a0a256897d9c7fbbf957787ad07c55e5bebe 60fae56292a2bca76fa9fb20bfcfb42e76433da5f35e65ef3662071dc7d2322c
POST /recaptcha/api2/reload?k=6LdhelkqAAAAAH_f47GPnSuEgnjRo4Pf0ukRioGs HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-protobuffer
Content-Length: 11816
Origin: https://www.google.com
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LdhelkqAAAAAH_f47GPnSuEgnjRo4Pf0ukRioGs&co=aHR0cHM6Ly9kYXRhbm9kZXMudG86NDQz&hl=en&v=X-oVtzDcTGjZVms4LEgykmCV&size=invisible&cb=arj60wio1lh2
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: application/json; charset=utf-8
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
x-content-type-options: nosniff
report-to: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]}
cross-origin-resource-policy: same-site
cross-origin-opener-policy-report-only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d"
content-encoding: gzip
date: Mon, 19 May 2025 22:03:13 GMT
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
set-cookie: _GRECAPTCHA=09AMNxLB_b-2MHUXBXcu-knc8Jyd-PbbW9bqCloSvlkH5RTtL-hRyY1Ce--cATSru1kOHQK2hKWiXd-d3cmbDjT50; Expires=Sat, 15-Nov-2025 22:03:13 GMT; Path=/recaptcha; Secure; HttpOnly; Priority=HIGH; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
expires: Mon, 19 May 2025 22:03:13 GMT
cache-control: private
|
|
| datanodes.to/theme_2023/dist/assets/Tooltip-4872b02d.css | 104.26.14.76 | 200 OK | 372 B |
URL GET datanodes.to/theme_2023/dist/assets/Tooltip-4872b02d.css IP104.26.14.76:443
Requested byhttps://datanodes.to/download CertificateIssuerGoogle Trust Services Subjectdatanodes.to Fingerprint37:77:73:11:B8:A3:75:DF:17:A4:43:CB:D8:37:F9:B8:23:4A:C4:63 ValidityThu, 10 Apr 2025 04:51:00 GMT - Wed, 09 Jul 2025 05:50:41 GMT
File typeASCII text, with very long lines (371) Hashcdfb8cc2e705f53d307841b8e9e2fe02 c86370de829ba384fdcde4d556472b27eca7b803 4872b02d2bbe6f70834822916d6e55e3190f18172efaddf935dada716fdb5452
GET /theme_2023/dist/assets/Tooltip-4872b02d.css HTTP/1.1
Host: datanodes.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://datanodes.to/download
Cookie: lang=english; file_code=qm14l5drg6an; file_name=MushihimeSama-NSP-ROMSLAB.rar; affiliate=qORHJYueob0J2fSUcUnMp9QyFqAnTJ5fEJsSnX0mFPwJIC6VYc%2BWqr21FoDOCXYFXmPQZr4prRgogJcirONaqALPkx0%3D
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 19 May 2025 22:03:07 GMT
content-type: text/css
last-modified: Sun, 09 Feb 2025 16:17:00 GMT
etag: W/"67a8d4fc-174"
cache-control: max-age=14400
cf-cache-status: HIT
age: 5312
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8wPHCHAqrlPplfC9p33q9dvh%2BzoaadFdnkm8sDKMTJztxtuOAEjzrZnfKsfjcPtkZaxjnPkXdnwPoLDZbwqFEmGucbRTRiNs7Gla%2BiaUYFzR%2BxyTDg0cOTDfOGCOGA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 9426e1ebe94156b5-OSL
content-encoding: br
server-timing: cfL4;desc="?proto=TCP&rtt=1266&min_rtt=472&rtt_var=105&sent=142&recv=56&lost=0&retrans=0&sent_bytes=172401&recv_bytes=2296&delivery_rate=79039301&cwnd=256&unsent_bytes=0&cid=cdbd7f71e2fd3cbd&ts=1501&x=0"
X-Firefox-Spdy: h2
|
|
| d2eq4x4u2q3fwc.cloudfront.net/?uxqed=1158643 | 54.230.245.20 | 200 OK | 384 kB |
URL GET d2eq4x4u2q3fwc.cloudfront.net/?uxqed=1158643 IP54.230.245.20:443
Requested byhttps://datanodes.to/download CertificateIssuerAmazon Subject*.cloudfront.net Fingerprint28:D3:87:79:3C:E8:8B:3C:D9:10:45:E5:F7:64:7A:6D:44:4E:5A:62 ValidityTue, 30 Jul 2024 00:00:00 GMT - Thu, 03 Jul 2025 23:59:59 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (38488) Size384 kB (384393 bytes) Hash5f7b5d1d97ece86c39398d34071df858 df0756ccac906b0a480d7beceb0eb34a3f337439 c2b96859f079d593e6a4662979e54ea8bea4d6e4e49e0a4f84713467531d0e51
GET /?uxqed=1158643 HTTP/1.1
Host: d2eq4x4u2q3fwc.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://datanodes.to/
Origin: https://datanodes.to
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-length: 126853
access-control-allow-credentials: true
access-control-allow-origin: https://datanodes.to
cache-control: no-store, no-cache, proxy-revalidate, must-revalidate, private, no-transform
content-encoding: gzip
pragma: no-cache
date: Mon, 19 May 2025 08:00:04 GMT
x-cache: Hit from cloudfront
via: 1.1 e2f427863e6bdb72ad8bed72b596d81e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: wt-rd96Zf5D_mlP9tviTSSfm4vxfTiIqtCjXBif1yvRkO5TBNTMsQw==
age: 50584
X-Firefox-Spdy: h2
|
|
| datanodes.to/favicon.ico | 104.26.14.76 | 200 OK | 2.5 kB |
IP104.26.14.76:443
Requested byhttps://datanodes.to/download CertificateIssuerGoogle Trust Services Subjectdatanodes.to Fingerprint37:77:73:11:B8:A3:75:DF:17:A4:43:CB:D8:37:F9:B8:23:4A:C4:63 ValidityThu, 10 Apr 2025 04:51:00 GMT - Wed, 09 Jul 2025 05:50:41 GMT
File typePNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced Hashc813091dc9f029ba08588f60cc450755 d2b2f0efc676eff758c4194d80ff2e9ee973f556 682e513cfa795efc1e53c502e9a8aa3d91db160b7fd15f94de2a4156a6961474
GET /favicon.ico HTTP/1.1
Host: datanodes.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://datanodes.to/download
Cookie: lang=english; file_code=qm14l5drg6an; file_name=MushihimeSama-NSP-ROMSLAB.rar; affiliate=qORHJYueob0J2fSUcUnMp9QyFqAnTJ5fEJsSnX0mFPwJIC6VYc%2BWqr21FoDOCXYFXmPQZr4prRgogJcirONaqALPkx0%3D; _ga_7DP7NV2LKF=GS2.1.s1747692187$o1$g0$t1747692187$j60$l0$h0$dW6neNVBcEvCeySFTnG8wMsdlI5_4F-SggQ; _ga=GA1.1.454051441.1747692188
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 19 May 2025 22:03:08 GMT
content-type: image/x-icon
last-modified: Thu, 01 Sep 2022 19:47:58 GMT
etag: W/"63110c6e-99d"
cache-control: max-age=14400
cf-cache-status: HIT
age: 5441
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=D9dRT4i2%2FmTRscZO5PKYWZSdDi1D804wG0TetSJrsW9Js1yjQ04rBPrby6T1C0iNJtSOgENtjS4bnF9rkfxXhumquKxBa5ERUo8RTPbQfVoMu4XCjaHtxCv%2BP4Evog%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 9426e1f1a8c256b5-OSL
content-encoding: br
server-timing: cfL4;desc="?proto=TCP&rtt=6345&min_rtt=415&rtt_var=11259&sent=212&recv=106&lost=0&retrans=1&sent_bytes=234591&recv_bytes=3865&delivery_rate=79039301&cwnd=256&unsent_bytes=0&cid=cdbd7f71e2fd3cbd&ts=2418&x=0"
X-Firefox-Spdy: h2
|
|
| datanodes.to/cdn-cgi/challenge-platform/h/g/jsd/r/0.5586651975752952:1747689189:lOYiTpVzINs0NHj5I_YbpjDGOCm4hHvE6skDsGH9Gco/9426e1e3ce7156b5 | 104.26.14.76 | 200 OK | 0 B |
URL POST datanodes.to/cdn-cgi/challenge-platform/h/g/jsd/r/0.5586651975752952:1747689189:lOYiTpVzINs0NHj5I_YbpjDGOCm4hHvE6skDsGH9Gco/9426e1e3ce7156b5 IP104.26.14.76:443
Requested byhttps://datanodes.to/download CertificateIssuerGoogle Trust Services Subjectdatanodes.to Fingerprint37:77:73:11:B8:A3:75:DF:17:A4:43:CB:D8:37:F9:B8:23:4A:C4:63 ValidityThu, 10 Apr 2025 04:51:00 GMT - Wed, 09 Jul 2025 05:50:41 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /cdn-cgi/challenge-platform/h/g/jsd/r/0.5586651975752952:1747689189:lOYiTpVzINs0NHj5I_YbpjDGOCm4hHvE6skDsGH9Gco/9426e1e3ce7156b5 HTTP/1.1
Host: datanodes.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 12066
Origin: https://datanodes.to
DNT: 1
Connection: keep-alive
Referer: https://datanodes.to/download
Cookie: lang=english; file_code=qm14l5drg6an; file_name=MushihimeSama-NSP-ROMSLAB.rar; affiliate=qORHJYueob0J2fSUcUnMp9QyFqAnTJ5fEJsSnX0mFPwJIC6VYc%2BWqr21FoDOCXYFXmPQZr4prRgogJcirONaqALPkx0%3D; _ga_7DP7NV2LKF=GS2.1.s1747692187$o1$g0$t1747692187$j60$l0$h0$dW6neNVBcEvCeySFTnG8wMsdlI5_4F-SggQ; _ga=GA1.1.454051441.1747692188
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 19 May 2025 22:03:09 GMT
content-type: text/plain; charset=UTF-8
content-length: 0
set-cookie: cf_clearance=IVv6CqATDNy1Y0AowKQpa9Q_Q7SbQYAOJUOXj04NZy0-1747692189-1.2.1.1-gS5Rv.zcE8G_ymju2Eb_9W4MnMfTkhXwsY2pdKQHamFrh9.w1FmLt8dnXgGV8KWep7taWP6VCbuDZ4XfVUyRmI_GyZnBEX2TYj7DpLrOgtF2ChBu3DVjj_kEEu7TVBvi.wjwuhMAG_gyjuv8Go4fzQ8Yv0BfBLpdut5pKxrSkXsUsrZqoWQ.IblyZouDEW.SlceI0EWY5CA6W4StxL8BuRKWbCVeVQiG.A.JXVMYvHM9UMdkwno8K4om7JB8d8q1g7f5CvJPhgwEl_XK4waxBNB7WVYG3RlzptDHU4BzMSFTcvSFYgXbAwNAKFykcSSGoRPJOJIM98qKpo6QHsBxQJGmRpztoAZWgaF6YcHeXXg; HttpOnly; SameSite=None; Partitioned; Secure; Path=/; Domain=datanodes.to; Expires=Tue, 19 May 2026 22:03:09 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vBLqwvoweBEI3s9Ke8km538BcpSNTdd31dxcT%2B7Rqoj116vp6xMseWztKXkgBnmvDOpFXmGO6I9Lnm1so0i7saiGWQWWETAmMbG2Htt5Fu0%2BZC2IP6tjUP5Kh4uYEQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 9426e1f56da256b5-OSL
server-timing: cfL4;desc="?proto=TCP&rtt=3771&min_rtt=415&rtt_var=5389&sent=220&recv=121&lost=0&retrans=1&sent_bytes=237656&recv_bytes=16226&delivery_rate=79039301&cwnd=256&unsent_bytes=0&cid=cdbd7f71e2fd3cbd&ts=3017&x=0"
X-Firefox-Spdy: h2
|
|
| accounts.google.com/InteractiveLogin?continue=https://www.google.com/favicon.ico&hl=en&passive=true&service=mail&uilel=3&ifkv=ASKV5Mg6xe05QNLySyRrqGP2XWtOwoSiti0UIo_L1nyQwUiMq6Iy1Dio169STuX9ywfqfnA6K1YWtg | 108.177.14.84 | 302 Found | 0 B |
URL GET accounts.google.com/InteractiveLogin?continue=https://www.google.com/favicon.ico&hl=en&passive=true&service=mail&uilel=3&ifkv=ASKV5Mg6xe05QNLySyRrqGP2XWtOwoSiti0UIo_L1nyQwUiMq6Iy1Dio169STuX9ywfqfnA6K1YWtg IP108.177.14.84:443
Requested byhttps://datanodes.to/download CertificateIssuerGoogle Trust Services Subject*.google.com Fingerprint44:D5:9C:A6:01:4B:21:80:05:6C:4D:0E:9B:34:C1:BF:E2:B4:AD:D5 ValidityTue, 29 Apr 2025 19:28:22 GMT - Tue, 22 Jul 2025 19:28:21 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /InteractiveLogin?continue=https://www.google.com/favicon.ico&hl=en&passive=true&service=mail&uilel=3&ifkv=ASKV5Mg6xe05QNLySyRrqGP2XWtOwoSiti0UIo_L1nyQwUiMq6Iy1Dio169STuX9ywfqfnA6K1YWtg HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://datanodes.to/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 302 Found
content-type: text/html; charset=UTF-8
set-cookie: __Host-GAPS=1:rsA7YcbDZ6DHYVxaWnY_KkRDPKBnkQ:D_kwQL__SQSqDL8V;Path=/;Expires=Wed, 19-May-2027 22:03:10 GMT;Secure;HttpOnly;Priority=HIGH
x-frame-options: DENY
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Mon, 19 May 2025 22:03:10 GMT
location: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&hl=en&ifkv=ASKV5Mgs1toXM_K9WfEDpu9OZ8Liq6ATjpbevqsfwjKBh-XaQVIHedb-c9coq5yRt835KuamiOgcYw&passive=true&service=mail&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S36668009%3A1747692190769219
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-opener-policy-report-only: same-origin; report-to="coop_gse_qebhlk"
content-security-policy: require-trusted-types-for 'script';report-uri /cspreport, script-src 'nonce-7ANbrrsDv4ovndIAAobwqA' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /cspreport
report-to: {"group":"coop_gse_qebhlk","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gse_qebhlk"}]}
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 411
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| ukankingwithea.com/ | 104.21.80.1 | 200 OK | 26 B |
IP104.21.80.1:443
Requested byhttps://datanodes.to/download CertificateIssuerGoogle Trust Services Subjectukankingwithea.com Fingerprint02:15:28:2A:F2:F8:5D:3A:DE:6D:1D:DC:CF:6D:06:BA:00:3A:63:70 ValidityTue, 29 Apr 2025 13:46:48 GMT - Mon, 28 Jul 2025 14:44:24 GMT
File typeASCII text, with no line terminators Hash32c18577159cd8a8301758c2689d4842 c5cbcc16dd5f5794e6be19e4c456e9c0fa2edb9e 7e711b60c8b8f7f3155b8f6d4a74111aaa02fbf064b36b6ec34fe65a18b3ceb6
GET / HTTP/1.1
Host: ukankingwithea.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://datanodes.to/
Origin: https://datanodes.to
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 19 May 2025 22:03:10 GMT
content-type: text/plain
server: cloudflare
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
access-control-allow-origin: https://datanodes.to
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-headers: X-Requested-With, content-type
cf-cache-status: DYNAMIC
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=lMnhCss2v2ZBOtmF6NxwnZoDpf7dLzEM2TaRMm8WxHyPCTxNb6n57okCvzhk8U2y4y6MXCCc%2BhWd4OzIx%2F24Kq518Np7UZ2Z812R%2FQgDHCw%3D"}]}
content-encoding: br
set-cookie: csu=765206918725635@1@1747692190; SameSite=None; Secure; Max-Age=31104000
cf-ray: 9426e1fb3e220b65-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&uilel=3&hl=en&service=youtube | 108.177.14.84 | 302 Found | 0 B |
URL GET accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&uilel=3&hl=en&service=youtube IP108.177.14.84:443
Requested byhttps://datanodes.to/download CertificateIssuerGoogle Trust Services Subjectaccounts.google.com Fingerprint59:74:47:4D:79:55:0E:D6:C9:C5:58:53:27:7B:B5:9B:F6:02:63:84 ValidityMon, 21 Apr 2025 08:42:44 GMT - Mon, 14 Jul 2025 08:42:43 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&uilel=3&hl=en&service=youtube HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://datanodes.to/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
content-type: application/binary
set-cookie: __Host-GAPS=1:9rJ3Xa3ooxluOBd_bLdoFmZ8CLyXLg:cuhUbCdxAL5uYV7u; Expires=Wed, 19-May-2027 22:03:10 GMT; Path=/; Secure; HttpOnly; Priority=HIGH
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Mon, 19 May 2025 22:03:10 GMT
location: https://accounts.google.com/InteractiveLogin?continue=https://www.youtube.com/favicon.ico&hl=en&passive=true&service=youtube&uilel=3&ifkv=ASKV5MieLXVSIuyZUM0JHu3m0vPrVyjIgTw83c6Wp9zU3JXMRTuZsEfvhliU9PbeEitdxeV_ajWBzg
strict-transport-security: max-age=31536000; includeSubDomains
content-security-policy: script-src 'nonce-OqRn7d4fpfp_6jJh8nGc1g' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/AccountsSigninPassiveLoginHttp/cspreport/allowlist, require-trusted-types-for 'script';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*
cross-origin-opener-policy: unsafe-none
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
cross-origin-resource-policy: cross-origin
server: ESF
content-length: 0
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.gstatic.com/recaptcha/releases/X-oVtzDcTGjZVms4LEgykmCV/styles__ltr.css | 142.250.74.99 | 200 OK | 79 kB |
URL GET www.gstatic.com/recaptcha/releases/X-oVtzDcTGjZVms4LEgykmCV/styles__ltr.css IP142.250.74.99:443
Requested byhttps://www.google.com/recaptcha/api2/anchor?ar=1&k=6LdhelkqAAAAAH_f47GPnSuEgnjRo4Pf0ukRioGs&co=aHR0cHM6Ly9kYXRhbm9kZXMudG86NDQz&hl=en&v=X-oVtzDcTGjZVms4LEgykmCV&size=invisible&cb=arj60wio1lh2 CertificateIssuerGoogle Trust Services Subject*.gstatic.com Fingerprint15:8B:D4:EA:7E:CB:34:1B:6F:2E:20:9E:39:44:7A:D6:D7:30:26:AB ValidityMon, 21 Apr 2025 08:41:49 GMT - Mon, 14 Jul 2025 08:41:48 GMT
File typeASCII text, with very long lines (65536), with no line terminators Hash07beee6eb1882cc9366d133f575e2675 80ae26cac3a2bd2e83f228c99d36224bf239eb3d 99b577755ca8d781c85bae19125a29c57344161150fa31e976265b574d556ddd
GET /recaptcha/releases/X-oVtzDcTGjZVms4LEgykmCV/styles__ltr.css HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
timing-allow-origin: *
content-length: 42061
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 19 May 2025 12:16:36 GMT
expires: Tue, 19 May 2026 12:16:36 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 12 May 2025 12:00:32 GMT
content-type: text/css
vary: Accept-Encoding
age: 35194
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.gstatic.com/recaptcha/api2/logo_48.png | 142.250.74.99 | 200 OK | 2.2 kB |
URL GET www.gstatic.com/recaptcha/api2/logo_48.png IP142.250.74.99:443
Requested byhttps://www.google.com/recaptcha/api2/anchor?ar=1&k=6LdhelkqAAAAAH_f47GPnSuEgnjRo4Pf0ukRioGs&co=aHR0cHM6Ly9kYXRhbm9kZXMudG86NDQz&hl=en&v=X-oVtzDcTGjZVms4LEgykmCV&size=invisible&cb=arj60wio1lh2 CertificateIssuerGoogle Trust Services Subject*.gstatic.com Fingerprint15:8B:D4:EA:7E:CB:34:1B:6F:2E:20:9E:39:44:7A:D6:D7:30:26:AB ValidityMon, 21 Apr 2025 08:41:49 GMT - Mon, 14 Jul 2025 08:41:48 GMT
File typePNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced Hashef9941290c50cd3866e2ba6b793f010d 4736508c795667dcea21f8d864233031223b7832 1b9efb22c938500971aac2b2130a475fa23684dd69e43103894968df83145b8a
GET /recaptcha/api2/logo_48.png HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.gstatic.com/recaptcha/releases/X-oVtzDcTGjZVms4LEgykmCV/styles__ltr.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
accept-ranges: bytes
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 2228
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 15 May 2025 10:27:36 GMT
expires: Thu, 22 May 2025 10:27:36 GMT
cache-control: public, max-age=604800
age: 387335
last-modified: Tue, 03 Mar 2020 20:15:00 GMT
content-type: image/png
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.gstatic.com/recaptcha/releases/X-oVtzDcTGjZVms4LEgykmCV/recaptcha__en.js | 142.250.74.99 | 200 OK | 653 kB |
URL GET www.gstatic.com/recaptcha/releases/X-oVtzDcTGjZVms4LEgykmCV/recaptcha__en.js IP142.250.74.99:443
Requested byhttps://www.google.com/recaptcha/api2/webworker.js?hl=en&v=X-oVtzDcTGjZVms4LEgykmCV CertificateIssuerGoogle Trust Services Subject*.gstatic.com Fingerprint15:8B:D4:EA:7E:CB:34:1B:6F:2E:20:9E:39:44:7A:D6:D7:30:26:AB ValidityMon, 21 Apr 2025 08:41:49 GMT - Mon, 14 Jul 2025 08:41:48 GMT
Size653 kB (652777 bytes) Hashe95468d04c58cf02c6dc7a2b5b8d0767 d50cb8a0f60256d410d216da72a80105d4ad6a6f 6798aa15947bc933cb2b22bb61cf88b0334caba9f0a34e99d42b31792753636e
GET /recaptcha/releases/X-oVtzDcTGjZVms4LEgykmCV/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
timing-allow-origin: *
content-length: 277679
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 19 May 2025 12:16:37 GMT
expires: Tue, 19 May 2026 12:16:37 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 12 May 2025 12:00:32 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 35194
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| region1.analytics.google.com/g/collect?v=2&tid=G-7DP7NV2LKF>m=45je55g2v9175474265za200&_p=1747692187068&gcd=13l3l3l2l1l1&npa=1&dma_cps=syphamo&dma=1&tag_exp=101509157~103116026~103130495~103130497~103136993~103136995~103200004~103207802~103233427~103252644~103252646~103263073~103301114~103301116&cid=454051441.1747692188&ul=en-us&sr=1280x1024&frm=0&pscdl=noapi&_eu=AEAAAAQ&_s=2&sid=1747692187&sct=1&seg=0&dl=https%3A%2F%2Fdatanodes.to%2Fdownload&dt=Download%20Mushihime%20Sama%20NSP%20ROMSLAB%20rar&en=scroll&epn.percent_scrolled=90&tfd=7021 | 216.239.34.36 | 204 No Content | 0 B |
URL POST region1.analytics.google.com/g/collect?v=2&tid=G-7DP7NV2LKF>m=45je55g2v9175474265za200&_p=1747692187068&gcd=13l3l3l2l1l1&npa=1&dma_cps=syphamo&dma=1&tag_exp=101509157~103116026~103130495~103130497~103136993~103136995~103200004~103207802~103233427~103252644~103252646~103263073~103301114~103301116&cid=454051441.1747692188&ul=en-us&sr=1280x1024&frm=0&pscdl=noapi&_eu=AEAAAAQ&_s=2&sid=1747692187&sct=1&seg=0&dl=https%3A%2F%2Fdatanodes.to%2Fdownload&dt=Download%20Mushihime%20Sama%20NSP%20ROMSLAB%20rar&en=scroll&epn.percent_scrolled=90&tfd=7021 IP216.239.34.36:443
Requested byhttps://datanodes.to/download CertificateIssuerGoogle Trust Services Subject*.google-analytics.com Fingerprint02:7D:56:C0:B9:20:0C:27:A4:AC:B9:8F:9D:45:1D:85:2A:30:50:AD ValidityMon, 21 Apr 2025 08:40:41 GMT - Mon, 14 Jul 2025 08:40:40 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-7DP7NV2LKF>m=45je55g2v9175474265za200&_p=1747692187068&gcd=13l3l3l2l1l1&npa=1&dma_cps=syphamo&dma=1&tag_exp=101509157~103116026~103130495~103130497~103136993~103136995~103200004~103207802~103233427~103252644~103252646~103263073~103301114~103301116&cid=454051441.1747692188&ul=en-us&sr=1280x1024&frm=0&pscdl=noapi&_eu=AEAAAAQ&_s=2&sid=1747692187&sct=1&seg=0&dl=https%3A%2F%2Fdatanodes.to%2Fdownload&dt=Download%20Mushihime%20Sama%20NSP%20ROMSLAB%20rar&en=scroll&epn.percent_scrolled=90&tfd=7021 HTTP/1.1
Host: region1.analytics.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://datanodes.to/
Origin: https://datanodes.to
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Content-Length: 0
HTTP/3 204 No Content
access-control-allow-origin: https://datanodes.to
date: Mon, 19 May 2025 22:03:13 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
content-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsggc:153:0
cross-origin-opener-policy-report-only: same-origin; report-to=ascnsrsggc:153:0
report-to: {"group":"ascnsrsggc:153:0","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/ascnsrsggc:153:0"}],}
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| datanodes.to/theme_2023/dist/assets/Util-ba300788.js | 104.26.14.76 | 200 OK | 2.9 kB |
URL GET datanodes.to/theme_2023/dist/assets/Util-ba300788.js IP104.26.14.76:443
Requested byhttps://datanodes.to/download CertificateIssuerGoogle Trust Services Subjectdatanodes.to Fingerprint37:77:73:11:B8:A3:75:DF:17:A4:43:CB:D8:37:F9:B8:23:4A:C4:63 ValidityThu, 10 Apr 2025 04:51:00 GMT - Wed, 09 Jul 2025 05:50:41 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (2854) Hash5813b7c66e53d58affc0cbed8e8de4d8 178cc0740966c30105212ab634ff274db3cca2f7 64e9941143b72dce37a3a356e68f051bbf5aaa12c3ac0b2f3972b471083d7477
GET /theme_2023/dist/assets/Util-ba300788.js HTTP/1.1
Host: datanodes.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://datanodes.to/theme_2023/dist/assets/FileActions-fa6032ae.js
Cookie: lang=english; file_code=qm14l5drg6an; file_name=MushihimeSama-NSP-ROMSLAB.rar; affiliate=qORHJYueob0J2fSUcUnMp9QyFqAnTJ5fEJsSnX0mFPwJIC6VYc%2BWqr21FoDOCXYFXmPQZr4prRgogJcirONaqALPkx0%3D; _ga_7DP7NV2LKF=GS2.1.s1747692187$o1$g0$t1747692187$j60$l0$h0$dW6neNVBcEvCeySFTnG8wMsdlI5_4F-SggQ; _ga=GA1.1.454051441.1747692188
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 19 May 2025 22:03:08 GMT
content-type: application/javascript
last-modified: Sun, 09 Feb 2025 16:17:00 GMT
etag: W/"67a8d4fc-b29"
cache-control: max-age=14400
cf-cache-status: HIT
age: 1029
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ib%2Fy%2BymrB85h94dyBFI3r77JQhe7dW8rvVdTaFh9odhdqT3sQ0viyH1DHhBxDECVn0EqkaP%2FmPf74cQKpAzqMkpczexeSN%2BtG%2FwAB1IsYGWRxMj1MQ0aFRed1koXDQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 9426e1f0cf9156b5-OSL
content-encoding: br
server-timing: cfL4;desc="?proto=TCP&rtt=2582&min_rtt=434&rtt_var=3330&sent=184&recv=81&lost=0&retrans=1&sent_bytes=208128&recv_bytes=3644&delivery_rate=79039301&cwnd=256&unsent_bytes=0&cid=cdbd7f71e2fd3cbd&ts=2282&x=0"
X-Firefox-Spdy: h2
|
|
| datanodes.to/theme_2023/dist/assets/transition-a1567fd4.js | 104.26.14.76 | 200 OK | 28 kB |
URL GET datanodes.to/theme_2023/dist/assets/transition-a1567fd4.js IP104.26.14.76:443
Requested byhttps://datanodes.to/download CertificateIssuerGoogle Trust Services Subjectdatanodes.to Fingerprint37:77:73:11:B8:A3:75:DF:17:A4:43:CB:D8:37:F9:B8:23:4A:C4:63 ValidityThu, 10 Apr 2025 04:51:00 GMT - Wed, 09 Jul 2025 05:50:41 GMT
File typeJavaScript source, ASCII text, with very long lines (27942) Hash6b949827cd27578f8d96e716764745fd fc5d054a81cc11c95726bf55f11fc0c96ae0f58b 579bb21ed189cf13357365e55a2dc69ca1e3866ce7566362e163cfe86b3f3aee
GET /theme_2023/dist/assets/transition-a1567fd4.js HTTP/1.1
Host: datanodes.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://datanodes.to/theme_2023/dist/assets/FileActions-fa6032ae.js
Cookie: lang=english; file_code=qm14l5drg6an; file_name=MushihimeSama-NSP-ROMSLAB.rar; affiliate=qORHJYueob0J2fSUcUnMp9QyFqAnTJ5fEJsSnX0mFPwJIC6VYc%2BWqr21FoDOCXYFXmPQZr4prRgogJcirONaqALPkx0%3D; _ga_7DP7NV2LKF=GS2.1.s1747692187$o1$g0$t1747692187$j60$l0$h0$dW6neNVBcEvCeySFTnG8wMsdlI5_4F-SggQ; _ga=GA1.1.454051441.1747692188
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 19 May 2025 22:03:08 GMT
content-type: application/javascript
last-modified: Sun, 09 Feb 2025 16:17:00 GMT
etag: W/"67a8d4fc-6d27"
cache-control: max-age=14400
cf-cache-status: HIT
age: 1029
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=XgspRgywLBPBqcp6PyIMY7KPkk6XSr6u9JcQEt9c%2Fy8NGpdNUpU%2Fy5s6HRoWKRWCDw1aAY4gCoIjxbxDvFQ6Jwz%2B5pxlaTBG0bKtRlKdO9yDPp6qyqBwjK9qeL9vKQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 9426e1f0df9d56b5-OSL
content-encoding: br
server-timing: cfL4;desc="?proto=TCP&rtt=1089&min_rtt=415&rtt_var=982&sent=194&recv=91&lost=0&retrans=1&sent_bytes=217357&recv_bytes=3644&delivery_rate=79039301&cwnd=256&unsent_bytes=0&cid=cdbd7f71e2fd3cbd&ts=2288&x=0"
X-Firefox-Spdy: h2
|
|
| www.gstatic.com/recaptcha/releases/X-oVtzDcTGjZVms4LEgykmCV/recaptcha__en.js | 142.250.74.99 | 200 OK | 653 kB |
URL GET www.gstatic.com/recaptcha/releases/X-oVtzDcTGjZVms4LEgykmCV/recaptcha__en.js IP142.250.74.99:443
Requested byhttps://datanodes.to/download CertificateIssuerGoogle Trust Services Subject*.gstatic.com Fingerprint15:8B:D4:EA:7E:CB:34:1B:6F:2E:20:9E:39:44:7A:D6:D7:30:26:AB ValidityMon, 21 Apr 2025 08:41:49 GMT - Mon, 14 Jul 2025 08:41:48 GMT
Size653 kB (652777 bytes) Hashe95468d04c58cf02c6dc7a2b5b8d0767 d50cb8a0f60256d410d216da72a80105d4ad6a6f 6798aa15947bc933cb2b22bb61cf88b0334caba9f0a34e99d42b31792753636e
GET /recaptcha/releases/X-oVtzDcTGjZVms4LEgykmCV/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://datanodes.to
DNT: 1
Connection: keep-alive
Referer: https://datanodes.to/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
timing-allow-origin: *
content-length: 277679
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 19 May 2025 12:16:37 GMT
expires: Tue, 19 May 2026 12:16:37 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 12 May 2025 12:00:32 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 35191
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| ngforanoppor.org/MUhDejlQKiAXBlB1IVxMQyR+Xwt3bXE8XQAhdwhaWTAkSkBQPXRUWl0nNh5fQyctDhdfLTdfC3cdFwBdehsuSkpmCxIJbFs8JjZXVSslHXNILgUSDXQcLE56ciMINlBCEg8WUl0EJB0Bdhx3FmpIHgYwamAsIBRWXg8AFXBgCSA4cmACDBh9BRAIDUkHKgI/TGYbcklqSDgZMWFVKyIsYEQDBTgOdBx3THhYGQgqelYECSxeWBgCOxwDChYtThR6BT5xeykJLnh0AXIJS1N5ezB4XBp1KXEBABoQCXQBFTdVYRp2C3tpJyg9bl4OJhRNVRESHk9UG3oLe2llLEN7cg0BHFQILQcocwUtKywMcHp6T3UDJwUfU1YqIh1ofS1yTw52EDMQanl4CzZqCQcJPFFHLQAOAHN7N0xhaXwLHwsILiVLfFsHAh1JZgwJDGFGIwQfYQQMJQJ8FHoFHghGbikJVl84fjdbYw8EDXR6DA4D | 108.157.229.70 | 200 OK | 3.1 kB |
URL GET ngforanoppor.org/MUhDejlQKiAXBlB1IVxMQyR+Xwt3bXE8XQAhdwhaWTAkSkBQPXRUWl0nNh5fQyctDhdfLTdfC3cdFwBdehsuSkpmCxIJbFs8JjZXVSslHXNILgUSDXQcLE56ciMINlBCEg8WUl0EJB0Bdhx3FmpIHgYwamAsIBRWXg8AFXBgCSA4cmACDBh9BRAIDUkHKgI/TGYbcklqSDgZMWFVKyIsYEQDBTgOdBx3THhYGQgqelYECSxeWBgCOxwDChYtThR6BT5xeykJLnh0AXIJS1N5ezB4XBp1KXEBABoQCXQBFTdVYRp2C3tpJyg9bl4OJhRNVRESHk9UG3oLe2llLEN7cg0BHFQILQcocwUtKywMcHp6T3UDJwUfU1YqIh1ofS1yTw52EDMQanl4CzZqCQcJPFFHLQAOAHN7N0xhaXwLHwsILiVLfFsHAh1JZgwJDGFGIwQfYQQMJQJ8FHoFHghGbikJVl84fjdbYw8EDXR6DA4D IP108.157.229.70:443
Requested byhttps://datanodes.to/download CertificateIssuerAmazon Subjectngforanoppor.org Fingerprint6E:AD:2C:FE:EA:E7:AC:61:EF:42:91:7A:87:A5:E9:A2:12:25:E3:62 ValidityTue, 29 Apr 2025 00:00:00 GMT - Thu, 28 May 2026 23:59:59 GMT
File typeHTML document, ASCII text, with very long lines (3065), with no line terminators Hash74bc8e51f0c026cdaa03099b7538c5a3 367a794f149c202aed957925bd8768b87b5a7fb1 77018a32ac515d04bbcf238498b0a2c6620dc32f6bbef335f8917856673c0bbd
GET /MUhDejlQKiAXBlB1IVxMQyR+Xwt3bXE8XQAhdwhaWTAkSkBQPXRUWl0nNh5fQyctDhdfLTdfC3cdFwBdehsuSkpmCxIJbFs8JjZXVSslHXNILgUSDXQcLE56ciMINlBCEg8WUl0EJB0Bdhx3FmpIHgYwamAsIBRWXg8AFXBgCSA4cmACDBh9BRAIDUkHKgI/TGYbcklqSDgZMWFVKyIsYEQDBTgOdBx3THhYGQgqelYECSxeWBgCOxwDChYtThR6BT5xeykJLnh0AXIJS1N5ezB4XBp1KXEBABoQCXQBFTdVYRp2C3tpJyg9bl4OJhRNVRESHk9UG3oLe2llLEN7cg0BHFQILQcocwUtKywMcHp6T3UDJwUfU1YqIh1ofS1yTw52EDMQanl4CzZqCQcJPFFHLQAOAHN7N0xhaXwLHwsILiVLfFsHAh1JZgwJDGFGIwQfYQQMJQJ8FHoFHghGbikJVl84fjdbYw8EDXR6DA4D HTTP/1.1
Host: ngforanoppor.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://datanodes.to/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/html
content-length: 1211
date: Mon, 19 May 2025 22:03:09 GMT
accept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List
set-cookie: AWSALB=PCAO9KqFrXa+BY+NgrO+4Fbe2E27Kpsd4hhyRw9BxYgJxFXwwvQcqT3LG4DoKYbgpDA+eXlUeWNbYcWragLK5bZI7ScuqHqU3PXJkIEHsrJBCyhUpcD/CQbXj/X1; Expires=Mon, 26 May 2025 22:03:09 GMT; Path=/
AWSALBCORS=PCAO9KqFrXa+BY+NgrO+4Fbe2E27Kpsd4hhyRw9BxYgJxFXwwvQcqT3LG4DoKYbgpDA+eXlUeWNbYcWragLK5bZI7ScuqHqU3PXJkIEHsrJBCyhUpcD/CQbXj/X1; Expires=Mon, 26 May 2025 22:03:09 GMT; Path=/; SameSite=None
server: openresty/1.17.8.2
cache-control: no-store, no-cache, must-revalidate, no-transform
pragma: no-cache
p3p: CP="NID DSP ALL COR"
content-encoding: gzip
x-cache: Miss from cloudfront
via: 1.1 0f31cf94bd251bd501ac532dacb719fe.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN56-P2
x-amz-cf-id: LO8Q1ku-cldIuBdZih24YLE0_3B37ayXJCDV0B5aV1U2CC85pJFI9Q==
X-Firefox-Spdy: h2
|
|
| ukzemydream.com/eVpwNjlWZRNFBCsNQXF3LiJCYQpBHChYcy88B05fGjZFTnhIblZCUB1nQQcPSG9FAh8JMxQLCEF8A0JYDS8DCwhfMx5QVkR8BgsIV2peBBdMfAULCF8uAFdeRGtWRk0NNk0HDk1tRg8LSGJJAghA | 188.114.97.1 | 204 No Content | 0 B |
URL GET ukzemydream.com/eVpwNjlWZRNFBCsNQXF3LiJCYQpBHChYcy88B05fGjZFTnhIblZCUB1nQQcPSG9FAh8JMxQLCEF8A0JYDS8DCwhfMx5QVkR8BgsIV2peBBdMfAULCF8uAFdeRGtWRk0NNk0HDk1tRg8LSGJJAghA IP188.114.97.1:443
Requested byhttps://datanodes.to/download CertificateIssuerGoogle Trust Services Subjectukzemydream.com Fingerprint53:69:20:ED:28:03:81:E8:BB:A9:21:47:D2:D2:B1:15:7E:2E:53:CC ValidityTue, 22 Apr 2025 09:05:17 GMT - Mon, 21 Jul 2025 10:03:33 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /eVpwNjlWZRNFBCsNQXF3LiJCYQpBHChYcy88B05fGjZFTnhIblZCUB1nQQcPSG9FAh8JMxQLCEF8A0JYDS8DCwhfMx5QVkR8BgsIV2peBBdMfAULCF8uAFdeRGtWRk0NNk0HDk1tRg8LSGJJAghA HTTP/1.1
Host: ukzemydream.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://datanodes.to/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
date: Mon, 19 May 2025 22:03:09 GMT
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=sXhk7uq572er2ePr7nM%2FzLt4jYoCkWPjoRrY0obpZiOkw5%2FAkYRZ%2B3oIM5jBWzUt7d7UkzBcvfZSzxfhnWNBMQndpBJs9I7%2FE9bz%2FT8%3D"}]}
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
server: cloudflare
cf-ray: 9426e1f81c7d7128-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| qn.ethnicspue.com/1clkn/31269 |  23.109.170.72 | 200 OK | 6 B |
URL GET qn.ethnicspue.com/1clkn/31269 IP23.109.170.72:443
Requested byhttps://datanodes.to/download CertificateIssuerLet's Encrypt Subjectqn.ethnicspue.com Fingerprint13:C7:7F:6D:6E:BA:A5:B1:24:05:53:A9:75:60:09:DE:81:37:18:50 ValidityMon, 31 Mar 2025 06:33:52 GMT - Sun, 29 Jun 2025 06:33:51 GMT
File typeASCII text, with no line terminators Hash9082dc37e5e8046929da411544ad071a 41e0e3963ed94e59e8a2f115994c382712411537 b7848d86edc8dc3b5bc6a5c666069f9a31e000cee51575d3b6083951607e1550
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /1clkn/31269 HTTP/1.1
Host: qn.ethnicspue.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://datanodes.to/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 19 May 2025 22:03:07 GMT
Content-Type: application/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=20
Accept-ch: sec-ch-ua-platform-version,sec-ch-ua-model,sec-ch-ua-full-version,sec-ch-ua-full-version-list
Set-Cookie: GL_UI4=eJw9zV1OhDAcBHC%2B2dUFnYQDeASKlPDqi1fwkRT6B%2BtCuykV9PYSE32bTH6T8TwvKB7gb8kZ4afgeGKsbdqaV21ZD62o%2Br5tGl72vC1ZxceR46zWzol%2BJhfhtC7Cus5tES4TabJq6AYjKcPjof6aqza7jhD3VmiZIV4OMWdIe2v2lWwRItJiIaSvytJovg4hPoxFyJ7rIyt9ZL9EYNYizO%2BQviktj2V%2BQcDKPE883N9m4UZjl07JxEc8WSEJ%2FgtOg3A0GfuNVNJ6deYGmFl2%2F%2F73ONxZiUTSpgZCbNw72R%2B3Z03l; expires=Tue, 20-May-2025 22:03:07 GMT; Max-Age=86400; path=/; secure; SameSite=None
GL_GI10=eJwVyM0KgkAUhuE5hxiIJPjIC%2FAKTMsWbrNl6MIrMIsYGObIzNjP3WeLd%2FG8SilOE7CZkNRlXhd5dcjLUwV6gtsOPDroVvx7%2BII8uDiCvcOmC1ayRmYXlz9i9TfIYHu25pP1YudoxAXw0roZbvaxv%2FRX0KQJHEUzONxTBXrp3Q9e7R3S; expires=Tue, 20-May-2025 22:03:07 GMT; Max-Age=86400; path=/; secure; SameSite=None
Content-Encoding: gzip
Vary: Accept-Encoding
Strict-Transport-Security: max-age=1
X-Content-Type-Options: nosniff
|
|
| fonts.gstatic.com/s/poppins/v23/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2 | 142.250.74.35 | 200 OK | 7.7 kB |
URL GET fonts.gstatic.com/s/poppins/v23/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2 IP142.250.74.35:443
Requested byhttps://datanodes.to/download CertificateIssuerGoogle Trust Services Subject*.gstatic.com Fingerprint15:8B:D4:EA:7E:CB:34:1B:6F:2E:20:9E:39:44:7A:D6:D7:30:26:AB ValidityMon, 21 Apr 2025 08:41:49 GMT - Mon, 14 Jul 2025 08:41:48 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 7748, version 1.0 Hasha09f2fccfee35b7247b08a1a266f0328 0da2d17e738f46d2a09e6fb7969da451719a9820 cd36de204aca2d5fa263a731f7c20009b5e3d754ba1f1e03c33e93a48f3e7446
GET /s/poppins/v23/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://datanodes.to
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7748
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 14 May 2025 20:17:34 GMT
expires: Thu, 14 May 2026 20:17:34 GMT
cache-control: public, max-age=31536000
age: 438333
last-modified: Wed, 23 Apr 2025 16:07:32 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-7DP7NV2LKF&cid=454051441.1747692188>m=45je55g2v9175474265za200&aip=1&dma=1&dma_cps=syphamo&gcd=13l3l3l2l1l1&npa=1&frm=0&tag_exp=101509157~103116026~103130495~103130497~103136993~103136995~103200004~103207802~103233427~103252644~103252646~103263073~103301114~103301116&tag_exp=101509157~103116026~103130495~103130497~103136993~103136995~103200004~103207802~103233427~103252644~103252646~103263073~103301114~103301116&z=562201957 | 142.250.74.131 | 200 OK | 42 B |
URL GET www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-7DP7NV2LKF&cid=454051441.1747692188>m=45je55g2v9175474265za200&aip=1&dma=1&dma_cps=syphamo&gcd=13l3l3l2l1l1&npa=1&frm=0&tag_exp=101509157~103116026~103130495~103130497~103136993~103136995~103200004~103207802~103233427~103252644~103252646~103263073~103301114~103301116&tag_exp=101509157~103116026~103130495~103130497~103136993~103136995~103200004~103207802~103233427~103252644~103252646~103263073~103301114~103301116&z=562201957 IP142.250.74.131:443
Requested byhttps://datanodes.to/download CertificateIssuerGoogle Trust Services Subject*.google.no Fingerprint66:A3:1A:F5:73:DE:8E:7D:0E:AA:01:69:6B:5C:DA:3F:F8:63:CD:5F ValidityMon, 21 Apr 2025 08:43:35 GMT - Mon, 14 Jul 2025 08:43:34 GMT
File typeGIF image data, version 89a, 1 x 1 Hashd89746888da2d9510b64a9f031eaecd5 d5fceb6532643d0d84ffe09c40c481ecdf59e15a ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-7DP7NV2LKF&cid=454051441.1747692188>m=45je55g2v9175474265za200&aip=1&dma=1&dma_cps=syphamo&gcd=13l3l3l2l1l1&npa=1&frm=0&tag_exp=101509157~103116026~103130495~103130497~103136993~103136995~103200004~103207802~103233427~103252644~103252646~103263073~103301114~103301116&tag_exp=101509157~103116026~103130495~103130497~103136993~103136995~103200004~103207802~103233427~103252644~103252646~103263073~103301114~103301116&z=562201957 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://datanodes.to/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Mon, 19 May 2025 22:03:08 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| d1i4rchxg0yau7.cloudfront.net/?hcrid=1158643 | 54.230.245.80 | 200 OK | 384 kB |
URL GET d1i4rchxg0yau7.cloudfront.net/?hcrid=1158643 IP54.230.245.80:443
Requested byhttps://datanodes.to/download CertificateIssuerAmazon Subject*.cloudfront.net Fingerprint28:D3:87:79:3C:E8:8B:3C:D9:10:45:E5:F7:64:7A:6D:44:4E:5A:62 ValidityTue, 30 Jul 2024 00:00:00 GMT - Thu, 03 Jul 2025 23:59:59 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (38488) Size384 kB (384392 bytes) Hash961a8fc9dd760e9872e13c3c100171a4 1ac847d21772b29f2912160ca7f80751a7f78a48 ffb41ba708f1446a1a244de271b625a4fe89b7cbd2bb2e26707b24f016fca3bf
GET /?hcrid=1158643 HTTP/1.1
Host: d1i4rchxg0yau7.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://datanodes.to/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-length: 126868
access-control-allow-origin: *
cache-control: no-store, no-cache, proxy-revalidate, must-revalidate, private, no-transform
content-encoding: gzip
pragma: no-cache
date: Mon, 19 May 2025 21:50:19 GMT
x-cache: Hit from cloudfront
via: 1.1 a2c3c8b833b34851dca4f7753ecaae58.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: _mhpPlL6ZfJISF9USKqH_AJ6OU4peJdZOoV4M9czD5HNmvsqXPxhTg==
age: 769
X-Firefox-Spdy: h2
|
|
| www.google.com/recaptcha/api2/clr?k=6LdhelkqAAAAAH_f47GPnSuEgnjRo4Pf0ukRioGs | 142.250.74.68 | 200 OK | 0 B |
URL POST www.google.com/recaptcha/api2/clr?k=6LdhelkqAAAAAH_f47GPnSuEgnjRo4Pf0ukRioGs IP142.250.74.68:443
Requested byhttps://datanodes.to/download CertificateIssuerGoogle Trust Services Subject*.google.com Fingerprint2F:BC:E9:F2:13:41:F1:3E:34:53:D6:F4:E9:17:8E:40:10:82:D1:3E ValidityMon, 21 Apr 2025 08:40:42 GMT - Mon, 14 Jul 2025 08:40:41 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /recaptcha/api2/clr?k=6LdhelkqAAAAAH_f47GPnSuEgnjRo4Pf0ukRioGs HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://datanodes.to/
Content-Length: 1576
Origin: https://datanodes.to
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: application/binary
cross-origin-resource-policy: cross-origin
report-to: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]}
cross-origin-opener-policy-report-only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d"
date: Mon, 19 May 2025 22:03:13 GMT
server: ESF
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.google.com/recaptcha/api2/clr?k=6LdhelkqAAAAAH_f47GPnSuEgnjRo4Pf0ukRioGs | 142.250.74.68 | 200 OK | 0 B |
URL POST www.google.com/recaptcha/api2/clr?k=6LdhelkqAAAAAH_f47GPnSuEgnjRo4Pf0ukRioGs IP142.250.74.68:443
Requested byhttps://datanodes.to/download CertificateIssuerGoogle Trust Services Subject*.google.com Fingerprint2F:BC:E9:F2:13:41:F1:3E:34:53:D6:F4:E9:17:8E:40:10:82:D1:3E ValidityMon, 21 Apr 2025 08:40:42 GMT - Mon, 14 Jul 2025 08:40:41 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /recaptcha/api2/clr?k=6LdhelkqAAAAAH_f47GPnSuEgnjRo4Pf0ukRioGs HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://datanodes.to/
Content-Length: 1576
Origin: https://datanodes.to
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: application/binary
report-to: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]}
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d"
date: Mon, 19 May 2025 22:03:13 GMT
server: ESF
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| datanodes.to/theme_2023/dist/assets/index-dd92db6d.js | 104.26.14.76 | 200 OK | 6.4 kB |
URL GET datanodes.to/theme_2023/dist/assets/index-dd92db6d.js IP104.26.14.76:443
Requested byhttps://datanodes.to/download CertificateIssuerGoogle Trust Services Subjectdatanodes.to Fingerprint37:77:73:11:B8:A3:75:DF:17:A4:43:CB:D8:37:F9:B8:23:4A:C4:63 ValidityThu, 10 Apr 2025 04:51:00 GMT - Wed, 09 Jul 2025 05:50:41 GMT
File typeJava source, ASCII text, with very long lines (6392) Hash6ce1ad7fa6b6028bd38010eb93880db5 dbf9628e8a116865693cbd5cce1c41fcaac94beb ba8edc5521e36bb2e21448a0f062d3727e459e9165cb9aabbd48bb1b6befd6c7
GET /theme_2023/dist/assets/index-dd92db6d.js HTTP/1.1
Host: datanodes.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://datanodes.to/theme_2023/dist/assets/VirusScan-e53a5e80.js
Cookie: lang=english; file_code=qm14l5drg6an; file_name=MushihimeSama-NSP-ROMSLAB.rar; affiliate=qORHJYueob0J2fSUcUnMp9QyFqAnTJ5fEJsSnX0mFPwJIC6VYc%2BWqr21FoDOCXYFXmPQZr4prRgogJcirONaqALPkx0%3D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 19 May 2025 22:03:07 GMT
content-type: application/javascript
last-modified: Sun, 09 Feb 2025 16:17:00 GMT
etag: W/"67a8d4fc-18f9"
cache-control: max-age=14400
cf-cache-status: HIT
age: 1028
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7Jc8WmUuapwvuooNA2ubWuXHPG5s00x%2BxL5UMfSVNgSuZV%2BiVNweo6ZTPR6cgtH1g3nul6KoW2rsKCOjsn1H1Hh52767t%2BiO1MoO1UrFdAPVL6fhJSuPNW2qKGVlrQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 9426e1edfbdb56b5-OSL
content-encoding: br
server-timing: cfL4;desc="?proto=TCP&rtt=951&min_rtt=472&rtt_var=373&sent=176&recv=75&lost=0&retrans=0&sent_bytes=204970&recv_bytes=3036&delivery_rate=79039301&cwnd=256&unsent_bytes=0&cid=cdbd7f71e2fd3cbd&ts=1832&x=0"
X-Firefox-Spdy: h2
|
|
| datanodes.to/theme_2023/dist/assets/app-36afb1c9.css | 104.26.14.76 | 200 OK | 53 kB |
URL GET datanodes.to/theme_2023/dist/assets/app-36afb1c9.css IP104.26.14.76:443
Requested byhttps://datanodes.to/download CertificateIssuerGoogle Trust Services Subjectdatanodes.to Fingerprint37:77:73:11:B8:A3:75:DF:17:A4:43:CB:D8:37:F9:B8:23:4A:C4:63 ValidityThu, 10 Apr 2025 04:51:00 GMT - Wed, 09 Jul 2025 05:50:41 GMT
File typeUnicode text, UTF-8 text, with very long lines (53102) Hash2cdd57f3f007cbfdba60cf21c501419d 62720b0e8af26f35c3b3cea435fe42f9dd8a8b11 36afb1c9ed858b12e612a7e7db9bb7f6993c8f595ba4c600e226cd7c15be6b2f
GET /theme_2023/dist/assets/app-36afb1c9.css HTTP/1.1
Host: datanodes.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://datanodes.to/download
Cookie: lang=english; file_code=qm14l5drg6an; file_name=MushihimeSama-NSP-ROMSLAB.rar; affiliate=qORHJYueob0J2fSUcUnMp9QyFqAnTJ5fEJsSnX0mFPwJIC6VYc%2BWqr21FoDOCXYFXmPQZr4prRgogJcirONaqALPkx0%3D
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 19 May 2025 22:03:06 GMT
content-type: text/css
last-modified: Sun, 09 Feb 2025 16:17:00 GMT
etag: W/"67a8d4fc-cf77"
cache-control: max-age=14400
cf-cache-status: HIT
age: 5312
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=KGPb5%2FXsOvjvi%2Bk9NVsW8sE6FCwvmsjpDYoYQ%2FtWLiLc313XMrejCnV36xxOIcByA%2F%2FagQq4v7nej1tpPb%2BdYQ8id3V1Nj565H6zknshSX2d0i0Ea0Hu2YXm7y%2FGZg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 9426e1e72afd56b5-OSL
content-encoding: br
server-timing: cfL4;desc="?proto=TCP&rtt=3183&min_rtt=472&rtt_var=3145&sent=42&recv=24&lost=0&retrans=0&sent_bytes=39338&recv_bytes=2029&delivery_rate=13325153&cwnd=256&unsent_bytes=0&cid=cdbd7f71e2fd3cbd&ts=742&x=0"
X-Firefox-Spdy: h2
|
|
| datanodes.to/theme_2023/dist/assets/Tooltip-298cb247.js | 104.26.14.76 | 200 OK | 17 kB |
URL GET datanodes.to/theme_2023/dist/assets/Tooltip-298cb247.js IP104.26.14.76:443
Requested byhttps://datanodes.to/download CertificateIssuerGoogle Trust Services Subjectdatanodes.to Fingerprint37:77:73:11:B8:A3:75:DF:17:A4:43:CB:D8:37:F9:B8:23:4A:C4:63 ValidityThu, 10 Apr 2025 04:51:00 GMT - Wed, 09 Jul 2025 05:50:41 GMT
File typeJavaScript source, ASCII text, with very long lines (16550) Hashe9abb5c958cc124ca4108f522fececdb cb0430b6ad9229cf2179a201e15360e496f24491 8125fdfeff86def1e8543526af797cbb7eb4bd87a161da3f18968b3fd8a83e53
GET /theme_2023/dist/assets/Tooltip-298cb247.js HTTP/1.1
Host: datanodes.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://datanodes.to/theme_2023/dist/assets/FileActions-fa6032ae.js
Cookie: lang=english; file_code=qm14l5drg6an; file_name=MushihimeSama-NSP-ROMSLAB.rar; affiliate=qORHJYueob0J2fSUcUnMp9QyFqAnTJ5fEJsSnX0mFPwJIC6VYc%2BWqr21FoDOCXYFXmPQZr4prRgogJcirONaqALPkx0%3D; _ga_7DP7NV2LKF=GS2.1.s1747692187$o1$g0$t1747692187$j60$l0$h0$dW6neNVBcEvCeySFTnG8wMsdlI5_4F-SggQ; _ga=GA1.1.454051441.1747692188
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 19 May 2025 22:03:08 GMT
content-type: application/javascript
last-modified: Sun, 09 Feb 2025 16:17:00 GMT
etag: W/"67a8d4fc-40a7"
cache-control: max-age=14400
cf-cache-status: HIT
age: 1029
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jK8lxghxsueH9MKtZEBGet3%2F9PXe8o40LVjTiZc2J8DpV5Z7AmLdUuU2NNlm9nwC1tCSGU%2FgrQA18rI0glZfWkgV6oOjJIIa9pwSimcnXuLv5C2sYIiBtDKZOkgW3Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 9426e1f0df9756b5-OSL
content-encoding: br
server-timing: cfL4;desc="?proto=TCP&rtt=1882&min_rtt=434&rtt_var=2458&sent=187&recv=84&lost=0&retrans=1&sent_bytes=209942&recv_bytes=3644&delivery_rate=79039301&cwnd=256&unsent_bytes=0&cid=cdbd7f71e2fd3cbd&ts=2284&x=0"
X-Firefox-Spdy: h2
|
|
| ukzemydream.com/OEppYUoXdQoSd24kBVAeYAAONQ9icjpTBHobBxkGYQ8ZJi59H08VI1x3WFB/AHxdUmxIIw1cex45HQA+TTlUUGxRJA8Odx48VFBkC35HUnwWfk8UdwlsHRErX3dYRzpMPgVcew9+XldzCntRWHkKfA | 188.114.97.1 | 204 No Content | 0 B |
URL GET ukzemydream.com/OEppYUoXdQoSd24kBVAeYAAONQ9icjpTBHobBxkGYQ8ZJi59H08VI1x3WFB/AHxdUmxIIw1cex45HQA+TTlUUGxRJA8Odx48VFBkC35HUnwWfk8UdwlsHRErX3dYRzpMPgVcew9+XldzCntRWHkKfA IP188.114.97.1:443
Requested byhttps://datanodes.to/download CertificateIssuerGoogle Trust Services Subjectukzemydream.com Fingerprint53:69:20:ED:28:03:81:E8:BB:A9:21:47:D2:D2:B1:15:7E:2E:53:CC ValidityTue, 22 Apr 2025 09:05:17 GMT - Mon, 21 Jul 2025 10:03:33 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /OEppYUoXdQoSd24kBVAeYAAONQ9icjpTBHobBxkGYQ8ZJi59H08VI1x3WFB/AHxdUmxIIw1cex45HQA+TTlUUGxRJA8Odx48VFBkC35HUnwWfk8UdwlsHRErX3dYRzpMPgVcew9+XldzCntRWHkKfA HTTP/1.1
Host: ukzemydream.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://datanodes.to/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
date: Mon, 19 May 2025 22:03:09 GMT
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=22uR%2F%2FLBMF7DdCyMtn8KjO7xCZ%2Bbpg9UVaGIlEhKiYywzwxPb2MF%2BaeXxnVw9%2FmGrqVGuL1iMSlCk%2BxkYWqZ2gtzfYIjAaygNInCG%2F4%3D"}]}
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
server: cloudflare
cf-ray: 9426e1f7bbd77128-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
0.0.0.0