| nkiri.com/download-the-man-from-uncle/ |  31.172.80.216 | 200 OK | 24 kB |
URL User Request GET HTTP/2nkiri.com/download-the-man-from-uncle/ IP31.172.80.216:443
CertificateIssuerLet's Encrypt Subjectnkiri.com Fingerprint5D:BC:4A:DE:FE:00:AB:7F:01:71:EF:81:CE:57:79:FC:0C:E4:1E:B8 ValidityFri, 07 Feb 2025 18:08:52 GMT - Thu, 08 May 2025 18:08:51 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (8856) Hash28e2648564931551d351a6e6e78c012e d0490d8f553b8c2e908e4cfebb97073fdd69a864 81b73ad65a965364d93c61e25a6152fe1d6582e1e68484721863b2c795e08895
GET /download-the-man-from-uncle/ HTTP/1.1
Host: nkiri.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
x-ua-compatible: IE=edge
x-frame-options: SAMEORIGIN
link: <https://nkiri.com/wp-json/>; rel="https://api.w.org/", <https://nkiri.com/wp-json/wp/v2/posts/1999>; rel="alternate"; title="JSON"; type="application/json", <https://nkiri.com/?p=1999>; rel=shortlink
etag: "6512918-1739278311;br"
x-litespeed-cache: hit
content-encoding: br
vary: Accept-Encoding
content-length: 24233
date: Tue, 11 Feb 2025 12:55:21 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
|
|
| nkiri.com/wp-includes/css/dist/block-library/style.css?ver=6.7.1 | 31.172.80.216 | 200 OK | 15 kB |
URL GET HTTP/3nkiri.com/wp-includes/css/dist/block-library/style.css?ver=6.7.1 IP31.172.80.216:443
Requested byhttps://nkiri.com/download-the-man-from-uncle/ CertificateIssuerLet's Encrypt Subjectnkiri.com Fingerprint5D:BC:4A:DE:FE:00:AB:7F:01:71:EF:81:CE:57:79:FC:0C:E4:1E:B8 ValidityFri, 07 Feb 2025 18:08:52 GMT - Thu, 08 May 2025 18:08:51 GMT
File typeASCII text, with very long lines (2914) Hash5a8d146264c8f744788ad69739bb354f 0e6ba5654315258d8a435bdfaab7918fdf56a5e0 a58001d08829546d85c9429abc2fde58f32237d29be75d8671b8eee2b0395374
GET /wp-includes/css/dist/block-library/style.css?ver=6.7.1 HTTP/1.1
Host: nkiri.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nkiri.com/download-the-man-from-uncle/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Tue, 18 Feb 2025 12:55:21 GMT
content-type: text/css; charset=UTF-8
last-modified: Tue, 10 Dec 2024 08:31:18 GMT
etag: "1e10f-6757fc56-f1de7c27d8a5465a;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 14917
date: Tue, 11 Feb 2025 12:55:21 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
|
|
| nkiri.com/wp-content/plugins/add-search-to-menu/public/css/ivory-search.min.css?ver=5.5.8 | 31.172.80.216 | 200 OK | 1.5 kB |
URL GET HTTP/3nkiri.com/wp-content/plugins/add-search-to-menu/public/css/ivory-search.min.css?ver=5.5.8 IP31.172.80.216:443
Requested byhttps://nkiri.com/download-the-man-from-uncle/ CertificateIssuerLet's Encrypt Subjectnkiri.com Fingerprint5D:BC:4A:DE:FE:00:AB:7F:01:71:EF:81:CE:57:79:FC:0C:E4:1E:B8 ValidityFri, 07 Feb 2025 18:08:52 GMT - Thu, 08 May 2025 18:08:51 GMT
File typeASCII text, with very long lines (6641), with no line terminators Hash45083ef30a6e71d04885f6b4276cb7a0 d595776f7b14a138d04ad5452c07276bea22babb 5e4d82463aa8389e0f15a7824efd4ff16c9c278bf79075a4b0b46fc156f59bec
GET /wp-content/plugins/add-search-to-menu/public/css/ivory-search.min.css?ver=5.5.8 HTTP/1.1
Host: nkiri.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nkiri.com/download-the-man-from-uncle/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Tue, 18 Feb 2025 12:55:21 GMT
content-type: text/css; charset=UTF-8
last-modified: Tue, 10 Dec 2024 08:31:23 GMT
etag: "19f1-6757fc5b-5896e789f969efa9;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 1519
date: Tue, 11 Feb 2025 12:55:21 GMT
server: LiteSpeed
|
|
| nkiri.com/wp-content/themes/oceanwp/assets/fonts/fontawesome/css/all.min.css?ver=4.0.3 | 31.172.80.216 | 200 OK | 22 kB |
URL GET HTTP/3nkiri.com/wp-content/themes/oceanwp/assets/fonts/fontawesome/css/all.min.css?ver=4.0.3 IP31.172.80.216:443
Requested byhttps://nkiri.com/download-the-man-from-uncle/ CertificateIssuerLet's Encrypt Subjectnkiri.com Fingerprint5D:BC:4A:DE:FE:00:AB:7F:01:71:EF:81:CE:57:79:FC:0C:E4:1E:B8 ValidityFri, 07 Feb 2025 18:08:52 GMT - Thu, 08 May 2025 18:08:51 GMT
File typeASCII text, with very long lines (52276) Hash5222e06b77a1692fa2520a219840e6be 8b4236206a8b86af3761a244277663046d7ff7ee 0934b1fc0d3a766d41d3adf5e7a115875e66e98ebba408d965a41cf3d2cb4ab5
GET /wp-content/themes/oceanwp/assets/fonts/fontawesome/css/all.min.css?ver=4.0.3 HTTP/1.1
Host: nkiri.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nkiri.com/download-the-man-from-uncle/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Tue, 18 Feb 2025 12:55:21 GMT
content-type: text/css; charset=UTF-8
last-modified: Tue, 10 Dec 2024 08:31:23 GMT
etag: "18f49-6757fc5b-84a3dd9d2fe2b803;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 21869
date: Tue, 11 Feb 2025 12:55:21 GMT
server: LiteSpeed
|
|
| nkiri.com/wp-content/themes/oceanwp/assets/css/third/simple-line-icons.min.css?ver=4.0.3 | 31.172.80.216 | 200 OK | 2.3 kB |
URL GET HTTP/3nkiri.com/wp-content/themes/oceanwp/assets/css/third/simple-line-icons.min.css?ver=4.0.3 IP31.172.80.216:443
Requested byhttps://nkiri.com/download-the-man-from-uncle/ CertificateIssuerLet's Encrypt Subjectnkiri.com Fingerprint5D:BC:4A:DE:FE:00:AB:7F:01:71:EF:81:CE:57:79:FC:0C:E4:1E:B8 ValidityFri, 07 Feb 2025 18:08:52 GMT - Thu, 08 May 2025 18:08:51 GMT
File typeASCII text, with very long lines (10927), with no line terminators Hash848b3d98a919b181ad03d17478e97b80 e05bd451823b6d37654fa624f3becde80dddd939 fe41a7936fba4a26a21face5fbb35961e74b9b11eb9e78fa26560f6986be6ed8
GET /wp-content/themes/oceanwp/assets/css/third/simple-line-icons.min.css?ver=4.0.3 HTTP/1.1
Host: nkiri.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nkiri.com/download-the-man-from-uncle/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Tue, 18 Feb 2025 12:55:21 GMT
content-type: text/css; charset=UTF-8
last-modified: Tue, 10 Dec 2024 08:31:23 GMT
etag: "2aaf-6757fc5b-c8f518b32f0bbf0b;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 2313
date: Tue, 11 Feb 2025 12:55:21 GMT
server: LiteSpeed
|
|
| nkiri.com/wp-content/plugins/elementor/assets/css/conditionals/e-swiper.css?ver=3.25.10 | 31.172.80.216 | 200 OK | 1.0 kB |
URL GET HTTP/3nkiri.com/wp-content/plugins/elementor/assets/css/conditionals/e-swiper.css?ver=3.25.10 IP31.172.80.216:443
Requested byhttps://nkiri.com/download-the-man-from-uncle/ CertificateIssuerLet's Encrypt Subjectnkiri.com Fingerprint5D:BC:4A:DE:FE:00:AB:7F:01:71:EF:81:CE:57:79:FC:0C:E4:1E:B8 ValidityFri, 07 Feb 2025 18:08:52 GMT - Thu, 08 May 2025 18:08:51 GMT
Hash3e3d755970706f7daf7b983af704edb0 dd189ae06539269922f3da96dbe6f4db561e4256 ecd39444e892dfdaa1d77b998e1d13d078de33eb6a92693024f905760faab975
GET /wp-content/plugins/elementor/assets/css/conditionals/e-swiper.css?ver=3.25.10 HTTP/1.1
Host: nkiri.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nkiri.com/download-the-man-from-uncle/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Tue, 18 Feb 2025 12:55:21 GMT
content-type: text/css; charset=UTF-8
last-modified: Tue, 10 Dec 2024 08:31:22 GMT
etag: "2a1a-6757fc5a-82b9fc0d0c31a047;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 1041
date: Tue, 11 Feb 2025 12:55:21 GMT
server: LiteSpeed
|
|
| nkiri.com/wp-content/themes/oceanwp/assets/css/style.min.css?ver=4.0.3 | 31.172.80.216 | 200 OK | 26 kB |
URL GET HTTP/3nkiri.com/wp-content/themes/oceanwp/assets/css/style.min.css?ver=4.0.3 IP31.172.80.216:443
Requested byhttps://nkiri.com/download-the-man-from-uncle/ CertificateIssuerLet's Encrypt Subjectnkiri.com Fingerprint5D:BC:4A:DE:FE:00:AB:7F:01:71:EF:81:CE:57:79:FC:0C:E4:1E:B8 ValidityFri, 07 Feb 2025 18:08:52 GMT - Thu, 08 May 2025 18:08:51 GMT
File typeUnicode text, UTF-8 (with BOM) text, with very long lines (65525), with no line terminators Hasha9c29569a90aca630e8b547f1213d8d9 5f6a00614cd79bd7ca7f8e8b1eaa87852768ad26 98874448ca2523cfc26f1f3e34fc89225c13130db3e883c3cd77ebfc446285a2
GET /wp-content/themes/oceanwp/assets/css/style.min.css?ver=4.0.3 HTTP/1.1
Host: nkiri.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nkiri.com/download-the-man-from-uncle/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Tue, 18 Feb 2025 12:55:21 GMT
content-type: text/css; charset=UTF-8
last-modified: Tue, 10 Dec 2024 08:31:23 GMT
etag: "2c30e-6757fc5b-cc695dd41f884c3d;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 25794
date: Tue, 11 Feb 2025 12:55:21 GMT
server: LiteSpeed
|
|
| nkiri.com/wp-content/uploads/elementor/css/post-7653.css?ver=1733743560 | 31.172.80.216 | 200 OK | 372 B |
URL GET HTTP/3nkiri.com/wp-content/uploads/elementor/css/post-7653.css?ver=1733743560 IP31.172.80.216:443
Requested byhttps://nkiri.com/download-the-man-from-uncle/ CertificateIssuerLet's Encrypt Subjectnkiri.com Fingerprint5D:BC:4A:DE:FE:00:AB:7F:01:71:EF:81:CE:57:79:FC:0C:E4:1E:B8 ValidityFri, 07 Feb 2025 18:08:52 GMT - Thu, 08 May 2025 18:08:51 GMT
File typeASCII text, with very long lines (1240), with no line terminators Hash8fe8ecbc061a9ea3c0f20a28f2ce394e 0eed42444117c4095c8c5100b3a26aa3e4cb638b 7e839cd4aa6a3b7bb157523850773283202142e771af440788020f76f14bc348
GET /wp-content/uploads/elementor/css/post-7653.css?ver=1733743560 HTTP/1.1
Host: nkiri.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nkiri.com/download-the-man-from-uncle/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Tue, 18 Feb 2025 12:55:21 GMT
content-type: text/css; charset=UTF-8
last-modified: Tue, 10 Dec 2024 08:31:20 GMT
etag: "4d8-6757fc58-fa64facc542f9e70;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 372
date: Tue, 11 Feb 2025 12:55:21 GMT
server: LiteSpeed
|
|
| nkiri.com/wp-content/plugins/elementor/assets/css/widget-text-editor.min.css?ver=3.25.10 | 31.172.80.216 | 200 OK | 198 B |
URL GET HTTP/3nkiri.com/wp-content/plugins/elementor/assets/css/widget-text-editor.min.css?ver=3.25.10 IP31.172.80.216:443
Requested byhttps://nkiri.com/download-the-man-from-uncle/ CertificateIssuerLet's Encrypt Subjectnkiri.com Fingerprint5D:BC:4A:DE:FE:00:AB:7F:01:71:EF:81:CE:57:79:FC:0C:E4:1E:B8 ValidityFri, 07 Feb 2025 18:08:52 GMT - Thu, 08 May 2025 18:08:51 GMT
File typeASCII text, with very long lines (664) Hashfe5b924e522b0650b9341998a0ad492d edcbe35f014ea34ff2d0c4dcc9dd05d0d449d02e 8774a849519bd33b973e8b0deb311ce92a48e0803fb8c78fccd5e06251ef0623
GET /wp-content/plugins/elementor/assets/css/widget-text-editor.min.css?ver=3.25.10 HTTP/1.1
Host: nkiri.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nkiri.com/download-the-man-from-uncle/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Tue, 18 Feb 2025 12:55:21 GMT
content-type: text/css; charset=UTF-8
last-modified: Tue, 10 Dec 2024 08:31:22 GMT
etag: "2c0-6757fc5a-3c0be02b58d7934f;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 198
date: Tue, 11 Feb 2025 12:55:21 GMT
server: LiteSpeed
|
|
| nkiri.com/wp-content/plugins/elementor/assets/css/widget-video.min.css?ver=3.25.10 | 31.172.80.216 | 200 OK | 413 B |
URL GET HTTP/3nkiri.com/wp-content/plugins/elementor/assets/css/widget-video.min.css?ver=3.25.10 IP31.172.80.216:443
Requested byhttps://nkiri.com/download-the-man-from-uncle/ CertificateIssuerLet's Encrypt Subjectnkiri.com Fingerprint5D:BC:4A:DE:FE:00:AB:7F:01:71:EF:81:CE:57:79:FC:0C:E4:1E:B8 ValidityFri, 07 Feb 2025 18:08:52 GMT - Thu, 08 May 2025 18:08:51 GMT
File typeASCII text, with very long lines (1828) Hashda9c524c23bc61c412e25735e584a903 31309ffbb444a8e8fe6fbb5f494783f456971b32 150701910cc6a63b0b7d17dd36237e62e9b61566bab7b4d8bd605061d452c4be
GET /wp-content/plugins/elementor/assets/css/widget-video.min.css?ver=3.25.10 HTTP/1.1
Host: nkiri.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nkiri.com/download-the-man-from-uncle/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Tue, 18 Feb 2025 12:55:21 GMT
content-type: text/css; charset=UTF-8
last-modified: Tue, 10 Dec 2024 08:31:22 GMT
etag: "74c-6757fc5a-d0f98e6a9f6af6a2;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 413
date: Tue, 11 Feb 2025 12:55:21 GMT
server: LiteSpeed
|
|
| nkiri.com/wp-content/plugins/elementor/assets/css/widget-image.min.css?ver=3.25.10 | 31.172.80.216 | 200 OK | 254 B |
URL GET HTTP/3nkiri.com/wp-content/plugins/elementor/assets/css/widget-image.min.css?ver=3.25.10 IP31.172.80.216:443
Requested byhttps://nkiri.com/download-the-man-from-uncle/ CertificateIssuerLet's Encrypt Subjectnkiri.com Fingerprint5D:BC:4A:DE:FE:00:AB:7F:01:71:EF:81:CE:57:79:FC:0C:E4:1E:B8 ValidityFri, 07 Feb 2025 18:08:52 GMT - Thu, 08 May 2025 18:08:51 GMT
Hashd5a6efd3ca21b342a77218c357a8bcae 7d914e7e00cedffee8a18b0cfa436fa1dd6a806f c96637576deebc6e435e2c5a65868b0db2d57b477009d704f050c51a50abd4a1
GET /wp-content/plugins/elementor/assets/css/widget-image.min.css?ver=3.25.10 HTTP/1.1
Host: nkiri.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nkiri.com/download-the-man-from-uncle/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Tue, 18 Feb 2025 12:55:21 GMT
content-type: text/css; charset=UTF-8
last-modified: Tue, 10 Dec 2024 08:31:22 GMT
etag: "fe-6757fc5a-df3c343cf7b218cf;;;"
accept-ranges: bytes
content-length: 254
date: Tue, 11 Feb 2025 12:55:21 GMT
server: LiteSpeed
|
|
| nkiri.com/wp-content/plugins/elementor/assets/css/widget-heading.min.css?ver=3.25.10 | 31.172.80.216 | 200 OK | 154 B |
URL GET HTTP/3nkiri.com/wp-content/plugins/elementor/assets/css/widget-heading.min.css?ver=3.25.10 IP31.172.80.216:443
Requested byhttps://nkiri.com/download-the-man-from-uncle/ CertificateIssuerLet's Encrypt Subjectnkiri.com Fingerprint5D:BC:4A:DE:FE:00:AB:7F:01:71:EF:81:CE:57:79:FC:0C:E4:1E:B8 ValidityFri, 07 Feb 2025 18:08:52 GMT - Thu, 08 May 2025 18:08:51 GMT
File typeASCII text, with very long lines (560) Hash59e167de412257fd98c73f2ff8915a03 38d39557addbd961a26810b1c898aa383a292858 768ce279895a5bf92b52e3fd9141ec2e700dd614070e7f6f56ba0e75533fd08b
GET /wp-content/plugins/elementor/assets/css/widget-heading.min.css?ver=3.25.10 HTTP/1.1
Host: nkiri.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nkiri.com/download-the-man-from-uncle/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Tue, 18 Feb 2025 12:55:21 GMT
content-type: text/css; charset=UTF-8
last-modified: Tue, 10 Dec 2024 08:31:22 GMT
etag: "258-6757fc5a-4e68f7e5569b3789;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 154
date: Tue, 11 Feb 2025 12:55:21 GMT
server: LiteSpeed
|
|
| nkiri.com/wp-content/plugins/elementor/assets/css/widget-alert.min.css?ver=3.25.10 | 31.172.80.216 | 200 OK | 443 B |
URL GET HTTP/3nkiri.com/wp-content/plugins/elementor/assets/css/widget-alert.min.css?ver=3.25.10 IP31.172.80.216:443
Requested byhttps://nkiri.com/download-the-man-from-uncle/ CertificateIssuerLet's Encrypt Subjectnkiri.com Fingerprint5D:BC:4A:DE:FE:00:AB:7F:01:71:EF:81:CE:57:79:FC:0C:E4:1E:B8 ValidityFri, 07 Feb 2025 18:08:52 GMT - Thu, 08 May 2025 18:08:51 GMT
File typeASCII text, with very long lines (1607) Hash8dd6f163276830e89836e6a2cd7b94e8 a0af3a26041befc73a76e810b818702c1cbb2f73 dd30496f015731b89ffd0186008c8e40538eebf237e81c670570afe30ae930a2
GET /wp-content/plugins/elementor/assets/css/widget-alert.min.css?ver=3.25.10 HTTP/1.1
Host: nkiri.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nkiri.com/download-the-man-from-uncle/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Tue, 18 Feb 2025 12:55:21 GMT
content-type: text/css; charset=UTF-8
last-modified: Tue, 10 Dec 2024 08:31:22 GMT
etag: "66f-6757fc5a-e705fd672678f5a8;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 443
date: Tue, 11 Feb 2025 12:55:21 GMT
server: LiteSpeed
|
|
| nkiri.com/wp-content/uploads/elementor/css/post-1999.css?ver=1733743910 | 31.172.80.216 | 200 OK | 614 B |
URL GET HTTP/3nkiri.com/wp-content/uploads/elementor/css/post-1999.css?ver=1733743910 IP31.172.80.216:443
Requested byhttps://nkiri.com/download-the-man-from-uncle/ CertificateIssuerLet's Encrypt Subjectnkiri.com Fingerprint5D:BC:4A:DE:FE:00:AB:7F:01:71:EF:81:CE:57:79:FC:0C:E4:1E:B8 ValidityFri, 07 Feb 2025 18:08:52 GMT - Thu, 08 May 2025 18:08:51 GMT
File typeASCII text, with very long lines (3642), with no line terminators Hash764deebb9771571375307106f69bb2bb 137c026e612799b4dc8192e0f1db7cbbf69508a1 f9ef293bce1483d65603f55dc7363a17ac30e0934199e8cd042fb90cab27db7f
GET /wp-content/uploads/elementor/css/post-1999.css?ver=1733743910 HTTP/1.1
Host: nkiri.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nkiri.com/download-the-man-from-uncle/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Tue, 18 Feb 2025 12:55:21 GMT
content-type: text/css; charset=UTF-8
last-modified: Tue, 10 Dec 2024 08:31:20 GMT
etag: "e3a-6757fc58-7ad5b56f654034a3;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 614
date: Tue, 11 Feb 2025 12:55:21 GMT
server: LiteSpeed
|
|
| nkiri.com/wp-content/plugins/essential-addons-for-elementor-lite/assets/front-end/css/view/general.min.css?ver=6.0.11 | 31.172.80.216 | 200 OK | 1.2 kB |
URL GET HTTP/3nkiri.com/wp-content/plugins/essential-addons-for-elementor-lite/assets/front-end/css/view/general.min.css?ver=6.0.11 IP31.172.80.216:443
Requested byhttps://nkiri.com/download-the-man-from-uncle/ CertificateIssuerLet's Encrypt Subjectnkiri.com Fingerprint5D:BC:4A:DE:FE:00:AB:7F:01:71:EF:81:CE:57:79:FC:0C:E4:1E:B8 ValidityFri, 07 Feb 2025 18:08:52 GMT - Thu, 08 May 2025 18:08:51 GMT
File typeASCII text, with very long lines (5658) Hash639513447535a82a9c2ad1074e4427b1 5118e78e549b23e9513a08aae0a37087f872b2be 20f1b6388645c9a21736819ed0c6cc85151ef940bd9d56869fd0912116ccf9f6
GET /wp-content/plugins/essential-addons-for-elementor-lite/assets/front-end/css/view/general.min.css?ver=6.0.11 HTTP/1.1
Host: nkiri.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nkiri.com/download-the-man-from-uncle/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Tue, 18 Feb 2025 12:55:21 GMT
content-type: text/css; charset=UTF-8
last-modified: Tue, 10 Dec 2024 08:31:23 GMT
etag: "161b-6757fc5b-153e0dea3b95fbbe;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 1170
date: Tue, 11 Feb 2025 12:55:21 GMT
server: LiteSpeed
|
|
| nkiri.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/fontawesome.css?ver=5.15.3 | 31.172.80.216 | 200 OK | 12 kB |
URL GET HTTP/3nkiri.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/fontawesome.css?ver=5.15.3 IP31.172.80.216:443
Requested byhttps://nkiri.com/download-the-man-from-uncle/ CertificateIssuerLet's Encrypt Subjectnkiri.com Fingerprint5D:BC:4A:DE:FE:00:AB:7F:01:71:EF:81:CE:57:79:FC:0C:E4:1E:B8 ValidityFri, 07 Feb 2025 18:08:52 GMT - Thu, 08 May 2025 18:08:51 GMT
Hashaae648ec410260f859ac89e58a8372c1 f7320458aadcbaa2ed94c43c8d7ddb9361d0b106 d417b6ed49cb6ae3dfe2b0bab5d865472052cd0286a9478c74cbb09a02a56d0d
GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/fontawesome.css?ver=5.15.3 HTTP/1.1
Host: nkiri.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nkiri.com/download-the-man-from-uncle/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Tue, 18 Feb 2025 12:55:21 GMT
content-type: text/css; charset=UTF-8
last-modified: Tue, 10 Dec 2024 08:31:22 GMT
etag: "119f8-6757fc5a-71a867c8f9884d45;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 12526
date: Tue, 11 Feb 2025 12:55:21 GMT
server: LiteSpeed
|
|
| nkiri.com/wp-content/plugins/elementor/assets/lib/eicons/css/elementor-icons.css?ver=5.32.0 | 31.172.80.216 | 200 OK | 3.8 kB |
URL GET HTTP/3nkiri.com/wp-content/plugins/elementor/assets/lib/eicons/css/elementor-icons.css?ver=5.32.0 IP31.172.80.216:443
Requested byhttps://nkiri.com/download-the-man-from-uncle/ CertificateIssuerLet's Encrypt Subjectnkiri.com Fingerprint5D:BC:4A:DE:FE:00:AB:7F:01:71:EF:81:CE:57:79:FC:0C:E4:1E:B8 ValidityFri, 07 Feb 2025 18:08:52 GMT - Thu, 08 May 2025 18:08:51 GMT
Hash9255cfb8579b2e1c1f93bdc5d387b4b7 a1dd29aec21684bcf0dbdc3371dff3781be50caf 61f977d3999db62a1328dac0a8c62231bc3d99f235e53d1d27df0853e0a4e94b
GET /wp-content/plugins/elementor/assets/lib/eicons/css/elementor-icons.css?ver=5.32.0 HTTP/1.1
Host: nkiri.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nkiri.com/download-the-man-from-uncle/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Tue, 18 Feb 2025 12:55:21 GMT
content-type: text/css; charset=UTF-8
last-modified: Tue, 10 Dec 2024 08:31:22 GMT
etag: "5ee6-6757fc5a-96c159b6038ca0ae;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 3839
date: Tue, 11 Feb 2025 12:55:21 GMT
server: LiteSpeed
|
|
| nkiri.com/wp-content/plugins/elementor/assets/css/frontend.css?ver=3.25.10 | 31.172.80.216 | 200 OK | 7.4 kB |
URL GET HTTP/3nkiri.com/wp-content/plugins/elementor/assets/css/frontend.css?ver=3.25.10 IP31.172.80.216:443
Requested byhttps://nkiri.com/download-the-man-from-uncle/ CertificateIssuerLet's Encrypt Subjectnkiri.com Fingerprint5D:BC:4A:DE:FE:00:AB:7F:01:71:EF:81:CE:57:79:FC:0C:E4:1E:B8 ValidityFri, 07 Feb 2025 18:08:52 GMT - Thu, 08 May 2025 18:08:51 GMT
File typeASCII text, with very long lines (638) Hashc3e68cde61aa7fc2332c6f5b32a607d6 8fa9e2d402a95661a8af69c74cb952b958379aa4 da8d797087c6a2d8384d7e814cfb3e45fbaaa7e5c416f6e48bbab724ad5ad934
GET /wp-content/plugins/elementor/assets/css/frontend.css?ver=3.25.10 HTTP/1.1
Host: nkiri.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nkiri.com/download-the-man-from-uncle/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Tue, 18 Feb 2025 12:55:21 GMT
content-type: text/css; charset=UTF-8
last-modified: Tue, 10 Dec 2024 08:31:22 GMT
etag: "11474-6757fc5a-e813945d39d25041;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 7441
date: Tue, 11 Feb 2025 12:55:21 GMT
server: LiteSpeed
|
|
| nkiri.com/wp-content/plugins/elementor/assets/lib/swiper/v8/css/swiper.css?ver=8.4.5 | 31.172.80.216 | 200 OK | 4.6 kB |
URL GET HTTP/3nkiri.com/wp-content/plugins/elementor/assets/lib/swiper/v8/css/swiper.css?ver=8.4.5 IP31.172.80.216:443
Requested byhttps://nkiri.com/download-the-man-from-uncle/ CertificateIssuerLet's Encrypt Subjectnkiri.com Fingerprint5D:BC:4A:DE:FE:00:AB:7F:01:71:EF:81:CE:57:79:FC:0C:E4:1E:B8 ValidityFri, 07 Feb 2025 18:08:52 GMT - Thu, 08 May 2025 18:08:51 GMT
File typeASCII text, with very long lines (2240) Hash9a1ce41378713cbe9bb50c7100094a74 9fd69fad45bd23f24f648d587e0a1945c3223e52 9d2f865efe879297fc46f736a1e7717f43ac548008f69f70acccf8fc28cfa19e
GET /wp-content/plugins/elementor/assets/lib/swiper/v8/css/swiper.css?ver=8.4.5 HTTP/1.1
Host: nkiri.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nkiri.com/download-the-man-from-uncle/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Tue, 18 Feb 2025 12:55:21 GMT
content-type: text/css; charset=UTF-8
last-modified: Tue, 10 Dec 2024 08:31:22 GMT
etag: "4b65-6757fc5a-bc378aba38698f5;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 4626
date: Tue, 11 Feb 2025 12:55:21 GMT
server: LiteSpeed
|
|
| nkiri.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/solid.css?ver=5.15.3 | 31.172.80.216 | 200 OK | 296 B |
URL GET HTTP/3nkiri.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/solid.css?ver=5.15.3 IP31.172.80.216:443
Requested byhttps://nkiri.com/download-the-man-from-uncle/ CertificateIssuerLet's Encrypt Subjectnkiri.com Fingerprint5D:BC:4A:DE:FE:00:AB:7F:01:71:EF:81:CE:57:79:FC:0C:E4:1E:B8 ValidityFri, 07 Feb 2025 18:08:52 GMT - Thu, 08 May 2025 18:08:51 GMT
File typeASCII text, with very long lines (307) Hash8d37441d69ebc9b55dff2c7c214ef997 9a292c8559131ea8838899863987ffdcfb4005ea 93cf6e96459e42f9f656e03ec4800578dc2c021dcde475c9e5e891a7780b0866
GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/solid.css?ver=5.15.3 HTTP/1.1
Host: nkiri.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nkiri.com/download-the-man-from-uncle/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Tue, 18 Feb 2025 12:55:21 GMT
content-type: text/css; charset=UTF-8
last-modified: Tue, 10 Dec 2024 08:31:22 GMT
etag: "2d7-6757fc5a-528f834d7d167424;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 296
date: Tue, 11 Feb 2025 12:55:21 GMT
server: LiteSpeed
|
|
| nkiri.com/wp-content/plugins/add-search-to-menu/public/css/ivory-ajax-search.min.css?ver=5.5.8 | 31.172.80.216 | 200 OK | 1.9 kB |
URL GET HTTP/3nkiri.com/wp-content/plugins/add-search-to-menu/public/css/ivory-ajax-search.min.css?ver=5.5.8 IP31.172.80.216:443
Requested byhttps://nkiri.com/download-the-man-from-uncle/ CertificateIssuerLet's Encrypt Subjectnkiri.com Fingerprint5D:BC:4A:DE:FE:00:AB:7F:01:71:EF:81:CE:57:79:FC:0C:E4:1E:B8 ValidityFri, 07 Feb 2025 18:08:52 GMT - Thu, 08 May 2025 18:08:51 GMT
File typeASCII text, with very long lines (8143), with no line terminators Hashd352c04bd92b5bb831a449a2b43096d9 a4f2932465c8134444702efefe05210f0c77d9b8 316868f97d2f29e79b0fa3501b5e72f84f3f4076a47a024936553dcc49e1aeb1
GET /wp-content/plugins/add-search-to-menu/public/css/ivory-ajax-search.min.css?ver=5.5.8 HTTP/1.1
Host: nkiri.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nkiri.com/download-the-man-from-uncle/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Tue, 18 Feb 2025 12:55:22 GMT
content-type: text/css; charset=UTF-8
last-modified: Tue, 10 Dec 2024 08:31:23 GMT
etag: "1fcf-6757fc5b-f2a75c5fd0246286;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 1928
date: Tue, 11 Feb 2025 12:55:22 GMT
server: LiteSpeed
|
|
| nkiri.com/wp-includes/js/jquery/jquery.js?ver=3.7.1 | 31.172.80.216 | 200 OK | 81 kB |
URL GET HTTP/3nkiri.com/wp-includes/js/jquery/jquery.js?ver=3.7.1 IP31.172.80.216:443
Requested byhttps://nkiri.com/download-the-man-from-uncle/ CertificateIssuerLet's Encrypt Subjectnkiri.com Fingerprint5D:BC:4A:DE:FE:00:AB:7F:01:71:EF:81:CE:57:79:FC:0C:E4:1E:B8 ValidityFri, 07 Feb 2025 18:08:52 GMT - Thu, 08 May 2025 18:08:51 GMT
File typeJavaScript source, ASCII text Hash16623e9f7cd802cf093c325c511a739c b364dbd40e67076a03e9d7b061c9b2624d081e31 1e7f83052e1e3442c4397ced9555033cd1d3f08444d85960683bcf91c8433cdb
GET /wp-includes/js/jquery/jquery.js?ver=3.7.1 HTTP/1.1
Host: nkiri.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nkiri.com/download-the-man-from-uncle/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: text/javascript; charset=UTF-8
last-modified: Tue, 10 Dec 2024 08:31:18 GMT
etag: "45a96-6757fc56-d612704df0bb8007;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 81316
date: Tue, 11 Feb 2025 12:55:21 GMT
server: LiteSpeed
|
|
| nkiri.com/wp-includes/js/jquery/jquery-migrate.js?ver=3.4.1 | 31.172.80.216 | 200 OK | 9.7 kB |
URL GET HTTP/3nkiri.com/wp-includes/js/jquery/jquery-migrate.js?ver=3.4.1 IP31.172.80.216:443
Requested byhttps://nkiri.com/download-the-man-from-uncle/ CertificateIssuerLet's Encrypt Subjectnkiri.com Fingerprint5D:BC:4A:DE:FE:00:AB:7F:01:71:EF:81:CE:57:79:FC:0C:E4:1E:B8 ValidityFri, 07 Feb 2025 18:08:52 GMT - Thu, 08 May 2025 18:08:51 GMT
File typeJavaScript source, ASCII text Hashe2620f2ae61d84e5edef5a0b7b95cf96 c79f1fd304b9452d5b5d73d98ac18c79deccf4dd 09f417c2e643b736c19e96b99e166681af1002e9b192b84e4e85b0794e764f7f
GET /wp-includes/js/jquery/jquery-migrate.js?ver=3.4.1 HTTP/1.1
Host: nkiri.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nkiri.com/download-the-man-from-uncle/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: text/javascript; charset=UTF-8
last-modified: Tue, 10 Dec 2024 08:31:18 GMT
etag: "7cea-6757fc56-9dfc6a18af61fe76;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 9712
date: Tue, 11 Feb 2025 12:55:21 GMT
server: LiteSpeed
|
|
| nkiri.com/wp-includes/js/comment-reply.js?ver=6.7.1 | 31.172.80.216 | 200 OK | 3.5 kB |
URL GET HTTP/3nkiri.com/wp-includes/js/comment-reply.js?ver=6.7.1 IP31.172.80.216:443
Requested byhttps://nkiri.com/download-the-man-from-uncle/ CertificateIssuerLet's Encrypt Subjectnkiri.com Fingerprint5D:BC:4A:DE:FE:00:AB:7F:01:71:EF:81:CE:57:79:FC:0C:E4:1E:B8 ValidityFri, 07 Feb 2025 18:08:52 GMT - Thu, 08 May 2025 18:08:51 GMT
Hashe2825530388a0a5bc687c54cf2661a40 65db533792a653e65cf1ec6940af44109442ceb4 a29028aa1ed8ed2be79f32e47e8d89d9e4fafa294bd6e1d854d44955fa5f6a67
GET /wp-includes/js/comment-reply.js?ver=6.7.1 HTTP/1.1
Host: nkiri.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nkiri.com/download-the-man-from-uncle/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: text/javascript; charset=UTF-8
last-modified: Tue, 10 Dec 2024 08:31:18 GMT
etag: "30e1-6757fc56-65ee03c15b795c00;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 3483
date: Tue, 11 Feb 2025 12:55:22 GMT
server: LiteSpeed
|
|
| nkiri.com/wp-includes/js/imagesloaded.min.js?ver=5.0.0 | 31.172.80.216 | 200 OK | 1.7 kB |
URL GET HTTP/3nkiri.com/wp-includes/js/imagesloaded.min.js?ver=5.0.0 IP31.172.80.216:443
Requested byhttps://nkiri.com/download-the-man-from-uncle/ CertificateIssuerLet's Encrypt Subjectnkiri.com Fingerprint5D:BC:4A:DE:FE:00:AB:7F:01:71:EF:81:CE:57:79:FC:0C:E4:1E:B8 ValidityFri, 07 Feb 2025 18:08:52 GMT - Thu, 08 May 2025 18:08:51 GMT
File typeJavaScript source, ASCII text, with very long lines (4358) Hash6823120876c9afc8929418c9a6f8e343 90b0adb37d70ffec5f9189c36bb0027c310c9502 b65b3de1bc923b9355248a0d941a0eaee15dfb9a6b8eadb51323a8df6189dcd1
GET /wp-includes/js/imagesloaded.min.js?ver=5.0.0 HTTP/1.1
Host: nkiri.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nkiri.com/download-the-man-from-uncle/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: text/javascript; charset=UTF-8
last-modified: Tue, 10 Dec 2024 08:31:18 GMT
etag: "1590-6757fc56-78911344fba53bd1;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 1687
date: Tue, 11 Feb 2025 12:55:22 GMT
server: LiteSpeed
|
|
| nkiri.com/wp-content/themes/oceanwp/assets/js/theme.min.js?ver=4.0.3 | 31.172.80.216 | 200 OK | 4.0 kB |
URL GET HTTP/3nkiri.com/wp-content/themes/oceanwp/assets/js/theme.min.js?ver=4.0.3 IP31.172.80.216:443
Requested byhttps://nkiri.com/download-the-man-from-uncle/ CertificateIssuerLet's Encrypt Subjectnkiri.com Fingerprint5D:BC:4A:DE:FE:00:AB:7F:01:71:EF:81:CE:57:79:FC:0C:E4:1E:B8 ValidityFri, 07 Feb 2025 18:08:52 GMT - Thu, 08 May 2025 18:08:51 GMT
File typeJavaScript source, ASCII text, with very long lines (19719), with no line terminators Hash39c95a10f0a6498ddf094b00fceaab43 3a6034a6441bad661c50627f5c7b3136ef3ddc48 68918493fab5f333343716eae17cc90f989906c3021984e9ad5e95e36aef4a63
GET /wp-content/themes/oceanwp/assets/js/theme.min.js?ver=4.0.3 HTTP/1.1
Host: nkiri.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nkiri.com/download-the-man-from-uncle/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: text/javascript; charset=UTF-8
last-modified: Tue, 10 Dec 2024 08:31:23 GMT
etag: "4d07-6757fc5b-2a15ee83ac4d3e11;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 3985
date: Tue, 11 Feb 2025 12:55:22 GMT
server: LiteSpeed
|
|
| nkiri.com/wp-content/themes/oceanwp/assets/js/drop-down-mobile-menu.min.js?ver=4.0.3 | 31.172.80.216 | 200 OK | 3.5 kB |
URL GET HTTP/3nkiri.com/wp-content/themes/oceanwp/assets/js/drop-down-mobile-menu.min.js?ver=4.0.3 IP31.172.80.216:443
Requested byhttps://nkiri.com/download-the-man-from-uncle/ CertificateIssuerLet's Encrypt Subjectnkiri.com Fingerprint5D:BC:4A:DE:FE:00:AB:7F:01:71:EF:81:CE:57:79:FC:0C:E4:1E:B8 ValidityFri, 07 Feb 2025 18:08:52 GMT - Thu, 08 May 2025 18:08:51 GMT
File typeJavaScript source, ASCII text, with very long lines (14581), with no line terminators Hash81ebdc3c76ba496273d4546b35572548 e0c60aa28b1e19af241d7484f3ac8666b9224034 244fc0d1bd29eae154fa9346040f14aad289c584856a7522e25ea1d3ba34780f
GET /wp-content/themes/oceanwp/assets/js/drop-down-mobile-menu.min.js?ver=4.0.3 HTTP/1.1
Host: nkiri.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nkiri.com/download-the-man-from-uncle/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: text/javascript; charset=UTF-8
last-modified: Tue, 10 Dec 2024 08:31:23 GMT
etag: "38f5-6757fc5b-fa0a351f3cceb232;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 3542
date: Tue, 11 Feb 2025 12:55:22 GMT
server: LiteSpeed
|
|
| nkiri.com/wp-content/themes/oceanwp/assets/js/drop-down-search.min.js?ver=4.0.3 | 31.172.80.216 | 200 OK | 1.9 kB |
URL GET HTTP/3nkiri.com/wp-content/themes/oceanwp/assets/js/drop-down-search.min.js?ver=4.0.3 IP31.172.80.216:443
Requested byhttps://nkiri.com/download-the-man-from-uncle/ CertificateIssuerLet's Encrypt Subjectnkiri.com Fingerprint5D:BC:4A:DE:FE:00:AB:7F:01:71:EF:81:CE:57:79:FC:0C:E4:1E:B8 ValidityFri, 07 Feb 2025 18:08:52 GMT - Thu, 08 May 2025 18:08:51 GMT
File typeJavaScript source, ASCII text, with very long lines (7540), with no line terminators Hashc7fa7b324baead665d76a2ffeab04152 a955c9646a728f8250f30e13772d129a3e0e2877 ca63a56d305249eb4cddeec8a6501010e206e110445f46572be1f2d56a1785fd
GET /wp-content/themes/oceanwp/assets/js/drop-down-search.min.js?ver=4.0.3 HTTP/1.1
Host: nkiri.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nkiri.com/download-the-man-from-uncle/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: text/javascript; charset=UTF-8
last-modified: Tue, 10 Dec 2024 08:31:23 GMT
etag: "1d74-6757fc5b-3d9dc7420317b35e;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 1935
date: Tue, 11 Feb 2025 12:55:22 GMT
server: LiteSpeed
|
|
| nkiri.com/wp-content/themes/oceanwp/assets/js/vendors/magnific-popup.min.js?ver=4.0.3 | 31.172.80.216 | 200 OK | 7.2 kB |
URL GET HTTP/3nkiri.com/wp-content/themes/oceanwp/assets/js/vendors/magnific-popup.min.js?ver=4.0.3 IP31.172.80.216:443
Requested byhttps://nkiri.com/download-the-man-from-uncle/ CertificateIssuerLet's Encrypt Subjectnkiri.com Fingerprint5D:BC:4A:DE:FE:00:AB:7F:01:71:EF:81:CE:57:79:FC:0C:E4:1E:B8 ValidityFri, 07 Feb 2025 18:08:52 GMT - Thu, 08 May 2025 18:08:51 GMT
File typeJavaScript source, ASCII text, with very long lines (20735) Hasha2578a786b481cc3f0f602615ccdc871 6b2e182c99a0065ba1708446813683acc6e66202 5a25fcee2abe666889666a26a4ee6b0eb4e2a1a7684e3a5f60be9b4e35d71c2b
GET /wp-content/themes/oceanwp/assets/js/vendors/magnific-popup.min.js?ver=4.0.3 HTTP/1.1
Host: nkiri.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nkiri.com/download-the-man-from-uncle/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: text/javascript; charset=UTF-8
last-modified: Tue, 10 Dec 2024 08:31:23 GMT
etag: "5180-6757fc5b-ab80d5b0a9c7c6d8;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 7209
date: Tue, 11 Feb 2025 12:55:22 GMT
server: LiteSpeed
|
|
| nkiri.com/wp-content/themes/oceanwp/assets/js/ow-lightbox.min.js?ver=4.0.3 | 31.172.80.216 | 200 OK | 1.3 kB |
URL GET HTTP/3nkiri.com/wp-content/themes/oceanwp/assets/js/ow-lightbox.min.js?ver=4.0.3 IP31.172.80.216:443
Requested byhttps://nkiri.com/download-the-man-from-uncle/ CertificateIssuerLet's Encrypt Subjectnkiri.com Fingerprint5D:BC:4A:DE:FE:00:AB:7F:01:71:EF:81:CE:57:79:FC:0C:E4:1E:B8 ValidityFri, 07 Feb 2025 18:08:52 GMT - Thu, 08 May 2025 18:08:51 GMT
File typeJavaScript source, ASCII text, with very long lines (4111), with no line terminators Hash71c31400a12073b7c576c903dcd8cea5 2f048a9ca8727b169e761033b80209f53ffbf9f4 6678f5308a4fd9620f440c3e6433920f9a09a9d6465a13888d9638aa23d70191
GET /wp-content/themes/oceanwp/assets/js/ow-lightbox.min.js?ver=4.0.3 HTTP/1.1
Host: nkiri.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nkiri.com/download-the-man-from-uncle/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: text/javascript; charset=UTF-8
last-modified: Tue, 10 Dec 2024 08:31:23 GMT
etag: "100f-6757fc5b-f328bf6b07d00160;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 1327
date: Tue, 11 Feb 2025 12:55:22 GMT
server: LiteSpeed
|
|
| nkiri.com/wp-content/themes/oceanwp/assets/js/vendors/flickity.pkgd.min.js?ver=4.0.3 | 31.172.80.216 | 200 OK | 14 kB |
URL GET HTTP/3nkiri.com/wp-content/themes/oceanwp/assets/js/vendors/flickity.pkgd.min.js?ver=4.0.3 IP31.172.80.216:443
Requested byhttps://nkiri.com/download-the-man-from-uncle/ CertificateIssuerLet's Encrypt Subjectnkiri.com Fingerprint5D:BC:4A:DE:FE:00:AB:7F:01:71:EF:81:CE:57:79:FC:0C:E4:1E:B8 ValidityFri, 07 Feb 2025 18:08:52 GMT - Thu, 08 May 2025 18:08:51 GMT
File typeJavaScript source, ASCII text, with very long lines (21914) Hash0a54e842e3e395e6b9fcf6893283a105 e96d27e9c036db495b6fe00cfc8a0371d7aadd74 472c7748607b5b76986bb54ffe3fe79ea954f61705aabd2a0fa80d13b2eee46b
GET /wp-content/themes/oceanwp/assets/js/vendors/flickity.pkgd.min.js?ver=4.0.3 HTTP/1.1
Host: nkiri.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nkiri.com/download-the-man-from-uncle/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: text/javascript; charset=UTF-8
last-modified: Tue, 10 Dec 2024 08:31:23 GMT
etag: "e0a9-6757fc5b-4f5234beb2885dbf;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 13608
date: Tue, 11 Feb 2025 12:55:22 GMT
server: LiteSpeed
|
|
| nkiri.com/wp-content/themes/oceanwp/assets/js/ow-slider.min.js?ver=4.0.3 | 31.172.80.216 | 200 OK | 815 B |
URL GET HTTP/3nkiri.com/wp-content/themes/oceanwp/assets/js/ow-slider.min.js?ver=4.0.3 IP31.172.80.216:443
Requested byhttps://nkiri.com/download-the-man-from-uncle/ CertificateIssuerLet's Encrypt Subjectnkiri.com Fingerprint5D:BC:4A:DE:FE:00:AB:7F:01:71:EF:81:CE:57:79:FC:0C:E4:1E:B8 ValidityFri, 07 Feb 2025 18:08:52 GMT - Thu, 08 May 2025 18:08:51 GMT
File typeJavaScript source, ASCII text, with very long lines (2002), with no line terminators Hash3f249575b37232d51921e82536004592 5799b78581ed5968346cade85389b82b2d6a304d b817c9b9bb557b34222c4598548f3569a7c8f2bb30b796a6c92d47dd740e4271
GET /wp-content/themes/oceanwp/assets/js/ow-slider.min.js?ver=4.0.3 HTTP/1.1
Host: nkiri.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nkiri.com/download-the-man-from-uncle/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: text/javascript; charset=UTF-8
last-modified: Tue, 10 Dec 2024 08:31:23 GMT
etag: "7d2-6757fc5b-2a502170b7bfa111;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 815
date: Tue, 11 Feb 2025 12:55:22 GMT
server: LiteSpeed
|
|
| nkiri.com/wp-content/themes/oceanwp/assets/js/scroll-effect.min.js?ver=4.0.3 | 31.172.80.216 | 200 OK | 3.0 kB |
URL GET HTTP/3nkiri.com/wp-content/themes/oceanwp/assets/js/scroll-effect.min.js?ver=4.0.3 IP31.172.80.216:443
Requested byhttps://nkiri.com/download-the-man-from-uncle/ CertificateIssuerLet's Encrypt Subjectnkiri.com Fingerprint5D:BC:4A:DE:FE:00:AB:7F:01:71:EF:81:CE:57:79:FC:0C:E4:1E:B8 ValidityFri, 07 Feb 2025 18:08:52 GMT - Thu, 08 May 2025 18:08:51 GMT
File typeJavaScript source, ASCII text, with very long lines (12387), with no line terminators Hashcc80a85d2d00a0f7715521e51bcc7ed0 c5571ce8b1a3159023525f102033c9cc271a1087 bfcb7a468fc42a0754f4e0b5e9962badbb4ef44ffcc4f24bacbd150f98afd9e2
GET /wp-content/themes/oceanwp/assets/js/scroll-effect.min.js?ver=4.0.3 HTTP/1.1
Host: nkiri.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nkiri.com/download-the-man-from-uncle/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: text/javascript; charset=UTF-8
last-modified: Tue, 10 Dec 2024 08:31:23 GMT
etag: "3063-6757fc5b-4c085b2b4b56cf4b;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 3014
date: Tue, 11 Feb 2025 12:55:22 GMT
server: LiteSpeed
|
|
| nkiri.com/wp-content/themes/oceanwp/assets/js/scroll-top.min.js?ver=4.0.3 | 31.172.80.216 | 200 OK | 2.1 kB |
URL GET HTTP/3nkiri.com/wp-content/themes/oceanwp/assets/js/scroll-top.min.js?ver=4.0.3 IP31.172.80.216:443
Requested byhttps://nkiri.com/download-the-man-from-uncle/ CertificateIssuerLet's Encrypt Subjectnkiri.com Fingerprint5D:BC:4A:DE:FE:00:AB:7F:01:71:EF:81:CE:57:79:FC:0C:E4:1E:B8 ValidityFri, 07 Feb 2025 18:08:52 GMT - Thu, 08 May 2025 18:08:51 GMT
File typeJavaScript source, ASCII text, with very long lines (8989), with no line terminators Hash679293c5f2184c6a335f0ee58d691af5 2c93237d0e23d4ac94be43320b581a50365bd959 b27375090fa7a6b1b7953505ccce5ff008db3c23196579db5749f71f0f485304
GET /wp-content/themes/oceanwp/assets/js/scroll-top.min.js?ver=4.0.3 HTTP/1.1
Host: nkiri.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nkiri.com/download-the-man-from-uncle/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: text/javascript; charset=UTF-8
last-modified: Tue, 10 Dec 2024 08:31:23 GMT
etag: "231d-6757fc5b-639196ed9fa456ea;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 2145
date: Tue, 11 Feb 2025 12:55:22 GMT
server: LiteSpeed
|
|
| nkiri.com/wp-content/themes/oceanwp/assets/js/select.min.js?ver=4.0.3 | 31.172.80.216 | 200 OK | 1.4 kB |
URL GET HTTP/3nkiri.com/wp-content/themes/oceanwp/assets/js/select.min.js?ver=4.0.3 IP31.172.80.216:443
Requested byhttps://nkiri.com/download-the-man-from-uncle/ CertificateIssuerLet's Encrypt Subjectnkiri.com Fingerprint5D:BC:4A:DE:FE:00:AB:7F:01:71:EF:81:CE:57:79:FC:0C:E4:1E:B8 ValidityFri, 07 Feb 2025 18:08:52 GMT - Thu, 08 May 2025 18:08:51 GMT
File typeJavaScript source, ASCII text, with very long lines (5181), with no line terminators Hashcab72260c840201b4b6e0125b3f66af7 cf137934bc4ef8c0b0c42c325f53f6c639985f18 d05f3a54518cd3ac3a4e9b4cf8c5f0deab037e659299f66a534d00fe10618b64
GET /wp-content/themes/oceanwp/assets/js/select.min.js?ver=4.0.3 HTTP/1.1
Host: nkiri.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nkiri.com/download-the-man-from-uncle/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: text/javascript; charset=UTF-8
last-modified: Tue, 10 Dec 2024 08:31:23 GMT
etag: "143d-6757fc5b-262044e044b2f965;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 1394
date: Tue, 11 Feb 2025 12:55:22 GMT
server: LiteSpeed
|
|
| nkiri.com/wp-content/plugins/essential-addons-for-elementor-lite/assets/front-end/js/view/general.min.js?ver=6.0.11 | 31.172.80.216 | 200 OK | 3.9 kB |
URL GET HTTP/3nkiri.com/wp-content/plugins/essential-addons-for-elementor-lite/assets/front-end/js/view/general.min.js?ver=6.0.11 IP31.172.80.216:443
Requested byhttps://nkiri.com/download-the-man-from-uncle/ CertificateIssuerLet's Encrypt Subjectnkiri.com Fingerprint5D:BC:4A:DE:FE:00:AB:7F:01:71:EF:81:CE:57:79:FC:0C:E4:1E:B8 ValidityFri, 07 Feb 2025 18:08:52 GMT - Thu, 08 May 2025 18:08:51 GMT
File typeJavaScript source, ASCII text, with very long lines (11513), with no line terminators Hash116300cd6f7a75ac794039880825bcec 5daf8101e5b6a81d51795b9bda4e4cdac22c4fbb 39ba878b8c9b00f6bd2070334638bcf68ade533411e0bf68c5a19053581f14fd
GET /wp-content/plugins/essential-addons-for-elementor-lite/assets/front-end/js/view/general.min.js?ver=6.0.11 HTTP/1.1
Host: nkiri.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nkiri.com/download-the-man-from-uncle/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: text/javascript; charset=UTF-8
last-modified: Tue, 10 Dec 2024 08:31:23 GMT
etag: "2cf9-6757fc5b-9f978040082677ab;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 3868
date: Tue, 11 Feb 2025 12:55:22 GMT
server: LiteSpeed
|
|
| nkiri.com/wp-content/plugins/add-search-to-menu/public/js/ivory-search.min.js?ver=5.5.8 | 31.172.80.216 | 200 OK | 1.1 kB |
URL GET HTTP/3nkiri.com/wp-content/plugins/add-search-to-menu/public/js/ivory-search.min.js?ver=5.5.8 IP31.172.80.216:443
Requested byhttps://nkiri.com/download-the-man-from-uncle/ CertificateIssuerLet's Encrypt Subjectnkiri.com Fingerprint5D:BC:4A:DE:FE:00:AB:7F:01:71:EF:81:CE:57:79:FC:0C:E4:1E:B8 ValidityFri, 07 Feb 2025 18:08:52 GMT - Thu, 08 May 2025 18:08:51 GMT
File typeJavaScript source, ASCII text, with very long lines (4580), with no line terminators Hashce428a87a021e7b3f2eaf54cf42acdd8 61b07035596e0737e5bf55fb13be37b29124511a 66d0c8cbacc09ad8746e64ad28d887186d1f060f04c388c2f1102ee346120a8c
GET /wp-content/plugins/add-search-to-menu/public/js/ivory-search.min.js?ver=5.5.8 HTTP/1.1
Host: nkiri.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nkiri.com/download-the-man-from-uncle/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: text/javascript; charset=UTF-8
last-modified: Tue, 10 Dec 2024 08:31:23 GMT
etag: "11e4-6757fc5b-b190dcd9afd38aa0;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 1074
date: Tue, 11 Feb 2025 12:55:22 GMT
server: LiteSpeed
|
|
| nkiri.com/wp-content/plugins/add-search-to-menu/public/js/ivory-ajax-search.min.js?ver=5.5.8 | 31.172.80.216 | 200 OK | 20 kB |
URL GET HTTP/3nkiri.com/wp-content/plugins/add-search-to-menu/public/js/ivory-ajax-search.min.js?ver=5.5.8 IP31.172.80.216:443
Requested byhttps://nkiri.com/download-the-man-from-uncle/ CertificateIssuerLet's Encrypt Subjectnkiri.com Fingerprint5D:BC:4A:DE:FE:00:AB:7F:01:71:EF:81:CE:57:79:FC:0C:E4:1E:B8 ValidityFri, 07 Feb 2025 18:08:52 GMT - Thu, 08 May 2025 18:08:51 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (65506), with no line terminators Hash51480f0afb0a30743ae59a3455633c75 2b46f094cb87015fa342da2bf1767413ec5c92b5 108cd01e5eaa34e9942ca8af9f8fe70271d3a3a5028fa085c628c162c3706d2d
GET /wp-content/plugins/add-search-to-menu/public/js/ivory-ajax-search.min.js?ver=5.5.8 HTTP/1.1
Host: nkiri.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nkiri.com/download-the-man-from-uncle/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: text/javascript; charset=UTF-8
last-modified: Tue, 10 Dec 2024 08:31:23 GMT
etag: "10814-6757fc5b-5ea00cd8eea6adc2;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 20124
date: Tue, 11 Feb 2025 12:55:22 GMT
server: LiteSpeed
|
|
| nkiri.com/wp-content/plugins/all-in-one-wp-security-and-firewall/js/wp-security-front-script.js?ver=5.3.7 | 31.172.80.216 | 200 OK | 455 B |
URL GET HTTP/3nkiri.com/wp-content/plugins/all-in-one-wp-security-and-firewall/js/wp-security-front-script.js?ver=5.3.7 IP31.172.80.216:443
Requested byhttps://nkiri.com/download-the-man-from-uncle/ CertificateIssuerLet's Encrypt Subjectnkiri.com Fingerprint5D:BC:4A:DE:FE:00:AB:7F:01:71:EF:81:CE:57:79:FC:0C:E4:1E:B8 ValidityFri, 07 Feb 2025 18:08:52 GMT - Thu, 08 May 2025 18:08:51 GMT
File typeJavaScript source, ASCII text Hash7589d109c6e16af74b87106fa2458dd6 d5321b70c91904627407c8fbe49e0d80f985cb2d 0e01d6ac7a228317e1730e85e9df5d9908d5a131a618fc63189c1ae3f3351343
GET /wp-content/plugins/all-in-one-wp-security-and-firewall/js/wp-security-front-script.js?ver=5.3.7 HTTP/1.1
Host: nkiri.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nkiri.com/download-the-man-from-uncle/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: text/javascript; charset=UTF-8
last-modified: Tue, 10 Dec 2024 08:31:23 GMT
etag: "406-6757fc5b-8ec5ecf637f21040;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 455
date: Tue, 11 Feb 2025 12:55:22 GMT
server: LiteSpeed
|
|
| nkiri.com/wp-content/plugins/elementor/assets/js/webpack.runtime.js?ver=3.25.10 | 31.172.80.216 | 200 OK | 4.0 kB |
URL GET HTTP/3nkiri.com/wp-content/plugins/elementor/assets/js/webpack.runtime.js?ver=3.25.10 IP31.172.80.216:443
Requested byhttps://nkiri.com/download-the-man-from-uncle/ CertificateIssuerLet's Encrypt Subjectnkiri.com Fingerprint5D:BC:4A:DE:FE:00:AB:7F:01:71:EF:81:CE:57:79:FC:0C:E4:1E:B8 ValidityFri, 07 Feb 2025 18:08:52 GMT - Thu, 08 May 2025 18:08:51 GMT
File typeJavaScript source, ASCII text Hash43b5c564bfa183ed76a1a84f2830edfe 5953642d6ed87b841b26e6185bc37903e45ecead 9dec2db72bd50292c5904c97dbcf14364af5fdbc4b2f1b9528a919c423f30f11
GET /wp-content/plugins/elementor/assets/js/webpack.runtime.js?ver=3.25.10 HTTP/1.1
Host: nkiri.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nkiri.com/download-the-man-from-uncle/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: text/javascript; charset=UTF-8
last-modified: Tue, 10 Dec 2024 08:31:22 GMT
etag: "3e3e-6757fc5a-5160815079a5c613;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 3999
date: Tue, 11 Feb 2025 12:55:22 GMT
server: LiteSpeed
|
|
| nkiri.com/wp-content/plugins/elementor/assets/js/frontend-modules.js?ver=3.25.10 | 31.172.80.216 | 200 OK | 29 kB |
URL GET HTTP/3nkiri.com/wp-content/plugins/elementor/assets/js/frontend-modules.js?ver=3.25.10 IP31.172.80.216:443
Requested byhttps://nkiri.com/download-the-man-from-uncle/ CertificateIssuerLet's Encrypt Subjectnkiri.com Fingerprint5D:BC:4A:DE:FE:00:AB:7F:01:71:EF:81:CE:57:79:FC:0C:E4:1E:B8 ValidityFri, 07 Feb 2025 18:08:52 GMT - Thu, 08 May 2025 18:08:51 GMT
File typeJavaScript source, ASCII text Hash9417c7fb34c510632632e960ee7bc9c2 8b2367795656dcc15dee340a92c40d72e7793308 e727fb9f7dcd5eda0429ac1d6cc8cbffea5408dd19e1ba1a3f8d85c92c87050a
GET /wp-content/plugins/elementor/assets/js/frontend-modules.js?ver=3.25.10 HTTP/1.1
Host: nkiri.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nkiri.com/download-the-man-from-uncle/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: text/javascript; charset=UTF-8
last-modified: Tue, 10 Dec 2024 08:31:22 GMT
etag: "29292-6757fc5a-e0c0b464064e20d2;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 28639
date: Tue, 11 Feb 2025 12:55:22 GMT
server: LiteSpeed
|
|
| nkiri.com/wp-includes/js/jquery/ui/core.js?ver=1.13.3 | 31.172.80.216 | 200 OK | 13 kB |
URL GET HTTP/3nkiri.com/wp-includes/js/jquery/ui/core.js?ver=1.13.3 IP31.172.80.216:443
Requested byhttps://nkiri.com/download-the-man-from-uncle/ CertificateIssuerLet's Encrypt Subjectnkiri.com Fingerprint5D:BC:4A:DE:FE:00:AB:7F:01:71:EF:81:CE:57:79:FC:0C:E4:1E:B8 ValidityFri, 07 Feb 2025 18:08:52 GMT - Thu, 08 May 2025 18:08:51 GMT
File typeJavaScript source, ASCII text, with very long lines (1004) Hash38a7df32cd596667e2adf7f0a470d3fc ae696f67bb16576ca0472e9ac1dd64aaba74ac78 16b200f73cc5cf6bc342576b15b06369bb3979784bd53b46854e1a617cb24bfb
GET /wp-includes/js/jquery/ui/core.js?ver=1.13.3 HTTP/1.1
Host: nkiri.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nkiri.com/download-the-man-from-uncle/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: text/javascript; charset=UTF-8
last-modified: Tue, 10 Dec 2024 08:31:18 GMT
etag: "c2e0-6757fc56-47fbfd68128786e8;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 12968
date: Tue, 11 Feb 2025 12:55:22 GMT
server: LiteSpeed
|
|
| nkiri.com/wp-content/plugins/elementor/assets/js/frontend.js?ver=3.25.10 | 31.172.80.216 | 200 OK | 23 kB |
URL GET HTTP/3nkiri.com/wp-content/plugins/elementor/assets/js/frontend.js?ver=3.25.10 IP31.172.80.216:443
Requested byhttps://nkiri.com/download-the-man-from-uncle/ CertificateIssuerLet's Encrypt Subjectnkiri.com Fingerprint5D:BC:4A:DE:FE:00:AB:7F:01:71:EF:81:CE:57:79:FC:0C:E4:1E:B8 ValidityFri, 07 Feb 2025 18:08:52 GMT - Thu, 08 May 2025 18:08:51 GMT
File typeJavaScript source, ASCII text, with very long lines (640) Hashd452177340cc7d39497bb743b6d0808d c8d6e1c132e4d393288c422461a8037568c37bf3 d1a531456cda9d10b2ace9b11e41da9b23da41650231c13948b2dd2fa29ed862
GET /wp-content/plugins/elementor/assets/js/frontend.js?ver=3.25.10 HTTP/1.1
Host: nkiri.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nkiri.com/download-the-man-from-uncle/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: text/javascript; charset=UTF-8
last-modified: Tue, 10 Dec 2024 08:31:22 GMT
etag: "1b2e2-6757fc5a-82a06a5bddbbba93;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 23225
date: Tue, 11 Feb 2025 12:55:22 GMT
server: LiteSpeed
|
|
| nkiri.com/wp-content/plugins/google-analytics-for-wordpress/assets/js/frontend-gtag.js?ver=1739278310 | 31.172.80.216 | 200 OK | 6.0 kB |
URL GET HTTP/3nkiri.com/wp-content/plugins/google-analytics-for-wordpress/assets/js/frontend-gtag.js?ver=1739278310 IP31.172.80.216:443
Requested byhttps://nkiri.com/download-the-man-from-uncle/ CertificateIssuerLet's Encrypt Subjectnkiri.com Fingerprint5D:BC:4A:DE:FE:00:AB:7F:01:71:EF:81:CE:57:79:FC:0C:E4:1E:B8 ValidityFri, 07 Feb 2025 18:08:52 GMT - Thu, 08 May 2025 18:08:51 GMT
File typeJavaScript source, ASCII text Hash9c356ce43a7aa2dc96acfa354a321d68 04f641543bf49fed6a06f29bf1ba4cc6e77e6b01 736c3be5bc0dc712ae063b5e69335e535aa6c7e9dd5bd5362286054d5a15d095
GET /wp-content/plugins/google-analytics-for-wordpress/assets/js/frontend-gtag.js?ver=1739278310 HTTP/1.1
Host: nkiri.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nkiri.com/download-the-man-from-uncle/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: text/javascript; charset=UTF-8
last-modified: Tue, 10 Dec 2024 08:31:23 GMT
etag: "789c-6757fc5b-ccfdeddf4d239a0c;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 5958
date: Tue, 11 Feb 2025 12:55:21 GMT
server: LiteSpeed
|
|
| nkiri.com/wp-content/uploads/2019/08/use-on-site.png | 31.172.80.216 | 200 OK | 8.6 kB |
URL GET HTTP/3nkiri.com/wp-content/uploads/2019/08/use-on-site.png IP31.172.80.216:443
Requested byhttps://nkiri.com/download-the-man-from-uncle/ CertificateIssuerLet's Encrypt Subjectnkiri.com Fingerprint5D:BC:4A:DE:FE:00:AB:7F:01:71:EF:81:CE:57:79:FC:0C:E4:1E:B8 ValidityFri, 07 Feb 2025 18:08:52 GMT - Thu, 08 May 2025 18:08:51 GMT
File typePNG image data, 728 x 90, 8-bit/color RGB, non-interlaced Hasha9a4f13124ea2a32e5019cbea4f985f0 bc6635940482e3c9ac0f45290616de39119a2158 b4c0e5f1a41c59f157967edec6803c2441419a4c94e4669116f3d60a466e8cb5
GET /wp-content/uploads/2019/08/use-on-site.png HTTP/1.1
Host: nkiri.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nkiri.com/download-the-man-from-uncle/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Tue, 18 Feb 2025 12:55:21 GMT
content-type: image/png
last-modified: Tue, 10 Dec 2024 08:31:20 GMT
etag: "21a4-6757fc58-7634216b82349760;;;"
accept-ranges: bytes
content-length: 8612
date: Tue, 11 Feb 2025 12:55:21 GMT
server: LiteSpeed
|
|
| nkiri.com/wp-content/uploads/2023/07/Dramakey-ad.jpeg | 31.172.80.216 | 200 OK | 21 kB |
URL GET HTTP/3nkiri.com/wp-content/uploads/2023/07/Dramakey-ad.jpeg IP31.172.80.216:443
Requested byhttps://nkiri.com/download-the-man-from-uncle/ CertificateIssuerLet's Encrypt Subjectnkiri.com Fingerprint5D:BC:4A:DE:FE:00:AB:7F:01:71:EF:81:CE:57:79:FC:0C:E4:1E:B8 ValidityFri, 07 Feb 2025 18:08:52 GMT - Thu, 08 May 2025 18:08:51 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 729x90, components 3 Hash9e09e4c623f89939b4ad03d81bdacecb 2629cb7223eefc32a4ad53ee5e5d75cb4cde733e 6307fdce8944854af85a4a634e4a8f7915305a2dd0ef8a823aab5438539369df
GET /wp-content/uploads/2023/07/Dramakey-ad.jpeg HTTP/1.1
Host: nkiri.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nkiri.com/download-the-man-from-uncle/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Tue, 18 Feb 2025 12:55:21 GMT
content-type: image/jpeg
last-modified: Tue, 10 Dec 2024 08:31:21 GMT
etag: "5246-6757fc59-2ae5788a51a90ae3;;;"
accept-ranges: bytes
content-length: 21062
date: Tue, 11 Feb 2025 12:55:21 GMT
server: LiteSpeed
|
|
| nkiri.com/wp-content/uploads/2019/09/murder-mystery.jpg | 31.172.80.216 | 200 OK | 109 kB |
URL GET HTTP/3nkiri.com/wp-content/uploads/2019/09/murder-mystery.jpg IP31.172.80.216:443
Requested byhttps://nkiri.com/download-the-man-from-uncle/ CertificateIssuerLet's Encrypt Subjectnkiri.com Fingerprint5D:BC:4A:DE:FE:00:AB:7F:01:71:EF:81:CE:57:79:FC:0C:E4:1E:B8 ValidityFri, 07 Feb 2025 18:08:52 GMT - Thu, 08 May 2025 18:08:51 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 675x1000, components 3 Size109 kB (108838 bytes) Hash7286df71c16830e74ef2df18d312cfc0 8b368ea472cde1f5097a8ffbb23ba9fb6df138a0 dd7dcf946bdcd99a0e7b38ab7ee5a629dbb3753b432b3d688f36de6622e76b7e
GET /wp-content/uploads/2019/09/murder-mystery.jpg HTTP/1.1
Host: nkiri.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nkiri.com/download-the-man-from-uncle/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Tue, 18 Feb 2025 12:55:21 GMT
content-type: image/jpeg
last-modified: Tue, 10 Dec 2024 08:31:20 GMT
etag: "1a926-6757fc58-5a5a9b2009e06b41;;;"
accept-ranges: bytes
content-length: 108838
date: Tue, 11 Feb 2025 12:55:21 GMT
server: LiteSpeed
|
|
| nkiri.com/wp-content/uploads/2020/12/wander-hollywood-movie-200x300.jpg | 31.172.80.216 | 200 OK | 22 kB |
URL GET HTTP/3nkiri.com/wp-content/uploads/2020/12/wander-hollywood-movie-200x300.jpg IP31.172.80.216:443
Requested byhttps://nkiri.com/download-the-man-from-uncle/ CertificateIssuerLet's Encrypt Subjectnkiri.com Fingerprint5D:BC:4A:DE:FE:00:AB:7F:01:71:EF:81:CE:57:79:FC:0C:E4:1E:B8 ValidityFri, 07 Feb 2025 18:08:52 GMT - Thu, 08 May 2025 18:08:51 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 200x300, components 3 Hash1eeea331a4e6c21a5d8a090280aa4445 c1280aab4d80251abff36abca0b0d5156aab0227 a9e37e7956c8ce4dbe50053e9b6bc4fefeebd13750898bec45ebc4fa420dbb8d
GET /wp-content/uploads/2020/12/wander-hollywood-movie-200x300.jpg HTTP/1.1
Host: nkiri.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nkiri.com/download-the-man-from-uncle/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Tue, 18 Feb 2025 12:55:21 GMT
content-type: image/jpeg
last-modified: Tue, 10 Dec 2024 08:31:19 GMT
etag: "56f6-6757fc57-5d474ea56796cb4d;;;"
accept-ranges: bytes
content-length: 22262
date: Tue, 11 Feb 2025 12:55:21 GMT
server: LiteSpeed
|
|
| nkiri.com/wp-content/uploads/2022/09/fall-hollywood-movie-200x300.jpg | 31.172.80.216 | 200 OK | 19 kB |
URL GET HTTP/3nkiri.com/wp-content/uploads/2022/09/fall-hollywood-movie-200x300.jpg IP31.172.80.216:443
Requested byhttps://nkiri.com/download-the-man-from-uncle/ CertificateIssuerLet's Encrypt Subjectnkiri.com Fingerprint5D:BC:4A:DE:FE:00:AB:7F:01:71:EF:81:CE:57:79:FC:0C:E4:1E:B8 ValidityFri, 07 Feb 2025 18:08:52 GMT - Thu, 08 May 2025 18:08:51 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 200x300, components 3 Hash9c732344d1aad63295eade04ffa4272f 783a272531b9474ab01344c3569e0a0080a36499 ff0b9ec17b582dbb6feeafae69375dcd721decac64750081f493480206bf5d3a
GET /wp-content/uploads/2022/09/fall-hollywood-movie-200x300.jpg HTTP/1.1
Host: nkiri.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nkiri.com/download-the-man-from-uncle/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Tue, 18 Feb 2025 12:55:21 GMT
content-type: image/jpeg
last-modified: Tue, 10 Dec 2024 08:31:19 GMT
etag: "4909-6757fc57-abe404d08f9bcd27;;;"
accept-ranges: bytes
content-length: 18697
date: Tue, 11 Feb 2025 12:55:21 GMT
server: LiteSpeed
|
|
| nkiri.com/wp-content/uploads/2021/01/outside-the-wire-hollywood-movie-200x300.jpg | 31.172.80.216 | 200 OK | 16 kB |
URL GET HTTP/3nkiri.com/wp-content/uploads/2021/01/outside-the-wire-hollywood-movie-200x300.jpg IP31.172.80.216:443
Requested byhttps://nkiri.com/download-the-man-from-uncle/ CertificateIssuerLet's Encrypt Subjectnkiri.com Fingerprint5D:BC:4A:DE:FE:00:AB:7F:01:71:EF:81:CE:57:79:FC:0C:E4:1E:B8 ValidityFri, 07 Feb 2025 18:08:52 GMT - Thu, 08 May 2025 18:08:51 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 200x300, components 3 Hashb67207c39983085ce9e6633fc089da80 956cc8e18db91955c66021f6ab3705974abc59c1 460e8f1507ea0cd34664e78b38505a7d8df41d45fcfd67922aa5db3f19c9e22c
GET /wp-content/uploads/2021/01/outside-the-wire-hollywood-movie-200x300.jpg HTTP/1.1
Host: nkiri.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nkiri.com/download-the-man-from-uncle/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Tue, 18 Feb 2025 12:55:21 GMT
content-type: image/jpeg
last-modified: Tue, 10 Dec 2024 08:31:22 GMT
etag: "3e89-6757fc5a-55656964ed1f04c6;;;"
accept-ranges: bytes
content-length: 16009
date: Tue, 11 Feb 2025 12:55:21 GMT
server: LiteSpeed
|
|
| nkiri.com/wp-content/uploads/2023/06/Showing-Up-200x300.jpg | 31.172.80.216 | 200 OK | 14 kB |
URL GET HTTP/3nkiri.com/wp-content/uploads/2023/06/Showing-Up-200x300.jpg IP31.172.80.216:443
Requested byhttps://nkiri.com/download-the-man-from-uncle/ CertificateIssuerLet's Encrypt Subjectnkiri.com Fingerprint5D:BC:4A:DE:FE:00:AB:7F:01:71:EF:81:CE:57:79:FC:0C:E4:1E:B8 ValidityFri, 07 Feb 2025 18:08:52 GMT - Thu, 08 May 2025 18:08:51 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 82", baseline, precision 8, 200x300, components 3 Hashf18191b16cb43a6bf9b6059ba755df03 42bc9f4fc3cc6684bf91dffc51522e88507dbe33 d32c294d566116f3b653d7c344782c6a24f32f7760ea1c7c92d72f71f3236525
GET /wp-content/uploads/2023/06/Showing-Up-200x300.jpg HTTP/1.1
Host: nkiri.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nkiri.com/download-the-man-from-uncle/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Tue, 18 Feb 2025 12:55:21 GMT
content-type: image/jpeg
last-modified: Tue, 10 Dec 2024 08:31:21 GMT
etag: "3776-6757fc59-b69f2d63de745615;;;"
accept-ranges: bytes
content-length: 14198
date: Tue, 11 Feb 2025 12:55:21 GMT
server: LiteSpeed
|
|
| nkiri.com/wp-content/uploads/2024/11/cropped-cropped-logo.png | 31.172.80.216 | 200 OK | 24 kB |
URL GET HTTP/3nkiri.com/wp-content/uploads/2024/11/cropped-cropped-logo.png IP31.172.80.216:443
Requested byhttps://nkiri.com/download-the-man-from-uncle/ CertificateIssuerLet's Encrypt Subjectnkiri.com Fingerprint5D:BC:4A:DE:FE:00:AB:7F:01:71:EF:81:CE:57:79:FC:0C:E4:1E:B8 ValidityFri, 07 Feb 2025 18:08:52 GMT - Thu, 08 May 2025 18:08:51 GMT
File typePNG image data, 512 x 509, 8-bit/color RGBA, non-interlaced Hasha54bd95439f7d8ebc55f5034f5302100 7648ba5c559262dadd4a8838316f1b843ca4ea1f 9f45ebd9a043c74f405e7fe2b18d17c193058330ea1ef4221067237ad4ab43dc
GET /wp-content/uploads/2024/11/cropped-cropped-logo.png HTTP/1.1
Host: nkiri.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nkiri.com/download-the-man-from-uncle/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Tue, 18 Feb 2025 12:55:21 GMT
content-type: image/png
last-modified: Sun, 02 Feb 2025 08:34:06 GMT
etag: "5cf9-679f2dfe-39afb15d714406bc;;;"
accept-ranges: bytes
content-length: 23801
date: Tue, 11 Feb 2025 12:55:21 GMT
server: LiteSpeed
|
|
| nkiri.com/wp-content/uploads/2022/12/who-killed-sanat-hollywood-movie-200x300.jpg | 31.172.80.216 | 200 OK | 17 kB |
URL GET HTTP/3nkiri.com/wp-content/uploads/2022/12/who-killed-sanat-hollywood-movie-200x300.jpg IP31.172.80.216:443
Requested byhttps://nkiri.com/download-the-man-from-uncle/ CertificateIssuerLet's Encrypt Subjectnkiri.com Fingerprint5D:BC:4A:DE:FE:00:AB:7F:01:71:EF:81:CE:57:79:FC:0C:E4:1E:B8 ValidityFri, 07 Feb 2025 18:08:52 GMT - Thu, 08 May 2025 18:08:51 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 200x300, components 3 Hash3f30a42620df22443772bef7b41c94fe 5664f38cf132571552cffeb0189d81c4145b6c7f d19207125a6e648747136ec95e2a17c68d315199570672777c3e060cc3273aa1
GET /wp-content/uploads/2022/12/who-killed-sanat-hollywood-movie-200x300.jpg HTTP/1.1
Host: nkiri.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nkiri.com/download-the-man-from-uncle/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Tue, 18 Feb 2025 12:55:21 GMT
content-type: image/jpeg
last-modified: Tue, 10 Dec 2024 08:31:18 GMT
etag: "42a2-6757fc56-3aacdbb7fa945760;;;"
accept-ranges: bytes
content-length: 17058
date: Tue, 11 Feb 2025 12:55:21 GMT
server: LiteSpeed
|
|
| www.googletagmanager.com/gtag/js?id=G-XVP9497M24 |  142.250.74.136 | 200 OK | 99 kB |
URL GET HTTP/2www.googletagmanager.com/gtag/js?id=G-XVP9497M24 IP142.250.74.136:443
Requested byhttps://nkiri.com/download-the-man-from-uncle/ CertificateIssuerGoogle Trust Services Subject*.google-analytics.com Fingerprint18:BB:CC:69:33:72:62:2E:E5:B6:28:51:17:5B:BD:CE:CD:85:8D:B3 ValidityMon, 20 Jan 2025 08:36:04 GMT - Mon, 14 Apr 2025 08:36:03 GMT
File typeJavaScript source, ASCII text, with very long lines (5268) Hash40f13c113f403a8c14b63fe8ec8b5e34 8a2ed7a8f2cffafb74defe32daed4476b97ff4f0 94d4ac09c27684a7d1bae359e49eb81dc858133d631ae108ce0d9ac3d309466f
GET /gtag/js?id=G-XVP9497M24 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nkiri.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Tue, 11 Feb 2025 12:55:22 GMT
expires: Tue, 11 Feb 2025 12:55:22 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgcycc:1003:0
cross-origin-opener-policy-report-only: same-origin; report-to=ascgcycc:1003:0
report-to: {"group":"ascgcycc:1003:0","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgcycc:1003:0"}],}
server: Google Tag Manager
content-length: 98833
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| ei.platedmanlily.com/tC4ycDkrcOHEt0r47/43901 |  23.109.170.189 | 200 OK | 25 B |
URL GET HTTP/1.1ei.platedmanlily.com/tC4ycDkrcOHEt0r47/43901 IP23.109.170.189:443
Requested byhttps://nkiri.com/download-the-man-from-uncle/ CertificateIssuerLet's Encrypt Subjectei.platedmanlily.com Fingerprint77:24:B2:08:62:A5:BD:74:CA:03:79:33:2E:5A:1C:DB:A1:A9:C9:A2 ValiditySun, 09 Feb 2025 09:11:29 GMT - Sat, 10 May 2025 09:11:28 GMT
File typeASCII text, with no line terminators Hashf7a2939527fd9e68723da600e96d76bd a9e717b6364d2895ee0a716050db32ca0ef1bb42 d810f5146f4cd1517512a6e31946e764a73c58fb01427aae88d42cc2ae28718a
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /tC4ycDkrcOHEt0r47/43901 HTTP/1.1
Host: ei.platedmanlily.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nkiri.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 11 Feb 2025 12:55:22 GMT
Content-Type: application/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=20
Accept-ch: sec-ch-ua-platform-version,sec-ch-ua-model,sec-ch-ua-full-version,sec-ch-ua-full-version-list
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://nkiri.com
Access-Control-Allow-Headers: content-type, megageocheckolololo, x-forwarded-for, x-requested-with, cache-control, pragma, expires
Access-Control-Max-Age: 600
Access-Control-Allow-Methods: GET, POST, OPTIONS
X-Frame-Options: SAMEORIGIN
Set-Cookie: GL_UI4=eJw9zV1OhDAcBHC%2B2dUFnYQDeASKlPDqi1fwkRT6B%2BtCuykV9PYSE32bTH6T8TwvKB7gb8kZ4afgeGKsbdqaV21ZD62o%2Br5tGl72vC1ZxceR46zWzol%2BJhfhtC7Cus5tES4TabJq6AYjKcPjof6aqza7jhD3VmiZIV4OMWdIe2v2lWwRItJiIaSvytJovg4hPoxFyJ7rIyt9ZL9EYNYizO%2BQviktj2V%2BQcDKPE883N9m4UZjl07JxEc8WSEJ%2FgtOg3A0GfuNVNJ6deYGmFl2%2F%2F73ONxZiUTSpgZCbNw72R%2B3Z03l; expires=Wed, 12-Feb-2025 12:55:22 GMT; Max-Age=86400; path=/; secure; SameSite=None
GL_GI10=eJwViE0KgzAUBvMeJVAqhY96AE%2BQamsXbmuXRReewGopgZBIEvtz%2B%2BpiBmaEEJwmYD0hqQpV5ao8qeJSgl7gpgUPFrJx%2FtP%2FQB6cn8HeYtcG47LazTYuf8BmbZDG%2Fmr0N%2BucmaN2NoAXtnX%2FMM%2FjrbuDJkng6FaHMRWgtzz8AV7hHdE%3D; expires=Wed, 12-Feb-2025 12:55:22 GMT; Max-Age=86400; path=/; secure; SameSite=None
Content-Encoding: gzip
Vary: Accept-Encoding
Strict-Transport-Security: max-age=1
X-Content-Type-Options: nosniff
|
|
| nkiri.com/wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-solid-900.woff2 | 31.172.80.216 | 200 OK | 78 kB |
URL GET HTTP/3nkiri.com/wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-solid-900.woff2 IP31.172.80.216:443
Requested byhttps://nkiri.com/download-the-man-from-uncle/ CertificateIssuerLet's Encrypt Subjectnkiri.com Fingerprint5D:BC:4A:DE:FE:00:AB:7F:01:71:EF:81:CE:57:79:FC:0C:E4:1E:B8 ValidityFri, 07 Feb 2025 18:08:52 GMT - Thu, 08 May 2025 18:08:51 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 78196, version 331.-31261 Hashe8a427e15cc502bef99cfd722b37ea98 a9922842a120a7f1eaced667480c5e185a106d69 d0b4256abed72481585662971262eabee345c19f837af00d7ce24239d3b40eef
GET /wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-solid-900.woff2 HTTP/1.1
Host: nkiri.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://nkiri.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/solid.css?ver=5.15.3
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: font/woff2
last-modified: Tue, 10 Dec 2024 08:31:22 GMT
etag: "13174-6757fc5a-a25c46aa4ca68379;;;"
accept-ranges: bytes
content-length: 78196
date: Tue, 11 Feb 2025 12:55:22 GMT
server: LiteSpeed
|
|
| nkiri.com/wp-content/themes/oceanwp/assets/fonts/simple-line-icons/Simple-Line-Icons.woff2?v=2.4.0 | 31.172.80.216 | 200 OK | 30 kB |
URL GET HTTP/3nkiri.com/wp-content/themes/oceanwp/assets/fonts/simple-line-icons/Simple-Line-Icons.woff2?v=2.4.0 IP31.172.80.216:443
Requested byhttps://nkiri.com/download-the-man-from-uncle/ CertificateIssuerLet's Encrypt Subjectnkiri.com Fingerprint5D:BC:4A:DE:FE:00:AB:7F:01:71:EF:81:CE:57:79:FC:0C:E4:1E:B8 ValidityFri, 07 Feb 2025 18:08:52 GMT - Thu, 08 May 2025 18:08:51 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 30064, version 1.0 Hash0cb0b9c589c0624c9c78dd3d83e946f6 5da603104d4d6e362824ec9e7db32eb2d617949a 104673f4859604362a18fc6294197d8fffb8cb24ad3211e92eb04f655e18cf4a
GET /wp-content/themes/oceanwp/assets/fonts/simple-line-icons/Simple-Line-Icons.woff2?v=2.4.0 HTTP/1.1
Host: nkiri.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://nkiri.com/wp-content/themes/oceanwp/assets/css/third/simple-line-icons.min.css?ver=4.0.3
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: font/woff2
last-modified: Tue, 10 Dec 2024 08:31:23 GMT
etag: "7570-6757fc5b-9c7af105874b93c8;;;"
accept-ranges: bytes
content-length: 30064
date: Tue, 11 Feb 2025 12:55:22 GMT
server: LiteSpeed
|
|
| fonts.gstatic.com/s/roboto/v47/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 | 142.250.74.35 | 200 OK | 40 kB |
URL GET HTTP/2fonts.gstatic.com/s/roboto/v47/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 IP142.250.74.35:443
Requested byhttps://nkiri.com/download-the-man-from-uncle/ CertificateIssuerGoogle Trust Services Subject*.gstatic.com Fingerprint62:57:FE:D4:36:DB:03:15:19:B1:2C:50:42:64:6E:D7:C2:32:4F:B6 ValidityMon, 20 Jan 2025 08:37:07 GMT - Mon, 14 Apr 2025 08:37:06 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 40128, version 1.0 Hash9a01b69183a9604ab3a439e388b30501 8ed1d59003d0dbe6360481017b44665153665fbe 20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2
GET /s/roboto/v47/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://nkiri.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 40128
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 06 Feb 2025 10:03:46 GMT
expires: Fri, 06 Feb 2026 10:03:46 GMT
cache-control: public, max-age=31536000
age: 442296
last-modified: Wed, 08 Jan 2025 18:23:10 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/roboto/v47/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 | 142.250.74.35 | 200 OK | 40 kB |
URL GET HTTP/2fonts.gstatic.com/s/roboto/v47/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 IP142.250.74.35:443
Requested byhttps://nkiri.com/download-the-man-from-uncle/ CertificateIssuerGoogle Trust Services Subject*.gstatic.com Fingerprint62:57:FE:D4:36:DB:03:15:19:B1:2C:50:42:64:6E:D7:C2:32:4F:B6 ValidityMon, 20 Jan 2025 08:37:07 GMT - Mon, 14 Apr 2025 08:37:06 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 40128, version 1.0 Hash9a01b69183a9604ab3a439e388b30501 8ed1d59003d0dbe6360481017b44665153665fbe 20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2
GET /s/roboto/v47/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://nkiri.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 40128
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 06 Feb 2025 10:03:46 GMT
expires: Fri, 06 Feb 2026 10:03:46 GMT
cache-control: public, max-age=31536000
age: 442296
last-modified: Wed, 08 Jan 2025 18:23:10 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/roboto/v47/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 | 142.250.74.35 | 200 OK | 40 kB |
URL GET HTTP/2fonts.gstatic.com/s/roboto/v47/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 IP142.250.74.35:443
Requested byhttps://nkiri.com/download-the-man-from-uncle/ CertificateIssuerGoogle Trust Services Subject*.gstatic.com Fingerprint62:57:FE:D4:36:DB:03:15:19:B1:2C:50:42:64:6E:D7:C2:32:4F:B6 ValidityMon, 20 Jan 2025 08:37:07 GMT - Mon, 14 Apr 2025 08:37:06 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 40128, version 1.0 Hash9a01b69183a9604ab3a439e388b30501 8ed1d59003d0dbe6360481017b44665153665fbe 20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2
GET /s/roboto/v47/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://nkiri.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 40128
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 06 Feb 2025 10:03:46 GMT
expires: Fri, 06 Feb 2026 10:03:46 GMT
cache-control: public, max-age=31536000
age: 442296
last-modified: Wed, 08 Jan 2025 18:23:10 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/roboto/v47/KFO5CnqEu92Fr1Mu53ZEC9_Vu3r1gIhOszmkBnka.woff2 | 142.250.74.35 | 200 OK | 44 kB |
URL GET HTTP/2fonts.gstatic.com/s/roboto/v47/KFO5CnqEu92Fr1Mu53ZEC9_Vu3r1gIhOszmkBnka.woff2 IP142.250.74.35:443
Requested byhttps://nkiri.com/download-the-man-from-uncle/ CertificateIssuerGoogle Trust Services Subject*.gstatic.com Fingerprint62:57:FE:D4:36:DB:03:15:19:B1:2C:50:42:64:6E:D7:C2:32:4F:B6 ValidityMon, 20 Jan 2025 08:37:07 GMT - Mon, 14 Apr 2025 08:37:06 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 44192, version 1.0 Hash1c278435b6738e80614efd67b0aa1d75 553a407dccbf2e476e53a88b9bd5c625c48d8f99 9ec9eb9108f1752c30ba316606858d685a112a609d8bef1fb3d5d32c8e0b6507
GET /s/roboto/v47/KFO5CnqEu92Fr1Mu53ZEC9_Vu3r1gIhOszmkBnka.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://nkiri.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 44192
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 08 Feb 2025 22:49:03 GMT
expires: Sun, 08 Feb 2026 22:49:03 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 08 Jan 2025 18:23:37 GMT
content-type: font/woff2
age: 223579
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/roboto/v47/KFO5CnqEu92Fr1Mu53ZEC9_Vu3r1gIhOszmkBnka.woff2 | 142.250.74.35 | 200 OK | 44 kB |
URL GET HTTP/2fonts.gstatic.com/s/roboto/v47/KFO5CnqEu92Fr1Mu53ZEC9_Vu3r1gIhOszmkBnka.woff2 IP142.250.74.35:443
Requested byhttps://nkiri.com/download-the-man-from-uncle/ CertificateIssuerGoogle Trust Services Subject*.gstatic.com Fingerprint62:57:FE:D4:36:DB:03:15:19:B1:2C:50:42:64:6E:D7:C2:32:4F:B6 ValidityMon, 20 Jan 2025 08:37:07 GMT - Mon, 14 Apr 2025 08:37:06 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 44192, version 1.0 Hash1c278435b6738e80614efd67b0aa1d75 553a407dccbf2e476e53a88b9bd5c625c48d8f99 9ec9eb9108f1752c30ba316606858d685a112a609d8bef1fb3d5d32c8e0b6507
GET /s/roboto/v47/KFO5CnqEu92Fr1Mu53ZEC9_Vu3r1gIhOszmkBnka.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://nkiri.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 44192
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 08 Feb 2025 22:49:03 GMT
expires: Sun, 08 Feb 2026 22:49:03 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 08 Jan 2025 18:23:37 GMT
content-type: font/woff2
age: 223579
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| nkiri.com/wp-includes/js/twemoji.js?ver=6.7.1 | 31.172.80.216 | 200 OK | 7.9 kB |
URL GET HTTP/3nkiri.com/wp-includes/js/twemoji.js?ver=6.7.1 IP31.172.80.216:443
Requested byhttps://nkiri.com/download-the-man-from-uncle/ CertificateIssuerLet's Encrypt Subjectnkiri.com Fingerprint5D:BC:4A:DE:FE:00:AB:7F:01:71:EF:81:CE:57:79:FC:0C:E4:1E:B8 ValidityFri, 07 Feb 2025 18:08:52 GMT - Thu, 08 May 2025 18:08:51 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (12991) Hashbdb01526e0b7f76b0889c1c48a58e74e 4d75b305b228aad5015a40ac849e66bfe668e943 b75fdcb9cb724ed0e6a3c091e5ea96250e16643c5b9c6427a6240fff3c026e22
GET /wp-includes/js/twemoji.js?ver=6.7.1 HTTP/1.1
Host: nkiri.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nkiri.com/download-the-man-from-uncle/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: text/javascript; charset=UTF-8
last-modified: Tue, 10 Dec 2024 08:31:18 GMT
etag: "80a6-6757fc56-dbb32e220953908e;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 7883
date: Tue, 11 Feb 2025 12:55:23 GMT
server: LiteSpeed
|
|
| nkiri.com/wp-includes/js/wp-emoji.js?ver=6.7.1 | 31.172.80.216 | 200 OK | 3.2 kB |
URL GET HTTP/3nkiri.com/wp-includes/js/wp-emoji.js?ver=6.7.1 IP31.172.80.216:443
Requested byhttps://nkiri.com/download-the-man-from-uncle/ CertificateIssuerLet's Encrypt Subjectnkiri.com Fingerprint5D:BC:4A:DE:FE:00:AB:7F:01:71:EF:81:CE:57:79:FC:0C:E4:1E:B8 ValidityFri, 07 Feb 2025 18:08:52 GMT - Thu, 08 May 2025 18:08:51 GMT
File typeJavaScript source, ASCII text, with very long lines (786) Hash4b32aebbed7e5116c14ccae8656cfa7c 16dd4308edc56bcbcba2d8c4ec795751b0ccb3ca e9d54383a1ae1cc16b30c0a748ff78cebfffede0e53dd7821dfcb6328ccef47e
GET /wp-includes/js/wp-emoji.js?ver=6.7.1 HTTP/1.1
Host: nkiri.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nkiri.com/download-the-man-from-uncle/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: text/javascript; charset=UTF-8
last-modified: Tue, 10 Dec 2024 08:31:18 GMT
etag: "2309-6757fc56-29fb1076282790bd;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 3176
date: Tue, 11 Feb 2025 12:55:23 GMT
server: LiteSpeed
|
|
| clck.littlecdn.com/web/static/728x90/17.png |  172.67.141.89 | 200 OK | 9.1 kB |
URL GET HTTP/2clck.littlecdn.com/web/static/728x90/17.png IP172.67.141.89:443
Requested byhttps://nkiri.com/download-the-man-from-uncle/ CertificateIssuerGoogle Trust Services Subjectlittlecdn.com FingerprintEE:DB:71:61:D6:9F:A2:AE:A9:AC:01:F3:C3:A7:12:23:B5:52:02:32 ValidityTue, 31 Dec 2024 02:56:41 GMT - Mon, 31 Mar 2025 03:54:14 GMT
File typePNG image data, 728 x 90, 8-bit/color RGBA, non-interlaced Hasha2a69e28606439940606329c48c0b7f7 7117304a0e432b62bda28067cd73865321dcbd18 592fb4a6e811508bb1e258f5fcb4be7fa66a256a48dadc1a7acd89319ce24f13
GET /web/static/728x90/17.png HTTP/1.1
Host: clck.littlecdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 11 Feb 2025 12:55:23 GMT
content-type: image/png
content-length: 9124
last-modified: Thu, 16 May 2024 11:22:56 GMT
etag: "a2a69e28606439940606329c48c0b7f7"
expires: Tue, 11 Feb 2025 13:18:46 GMT
cache-control: max-age=86400
timing-allow-origin: *
cf-cache-status: HIT
age: 84997
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ml4O7HTdyGyO%2F81pgwkqOKEZvOE7f84y0rr%2BgmE5o7wIGeiY6ssDKH4Ys%2FGe43jhNllfb2mxGniYw1GslHMFgC2ibSTSW8zLArZZBLf%2BSlp2Cq0oyTksMfbHtw%2FRqCkTMdjbJhc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 91047e311c3256b7-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=739&min_rtt=469&rtt_var=481&sent=7&recv=10&lost=0&retrans=0&sent_bytes=3277&recv_bytes=1205&delivery_rate=4553459&cwnd=253&unsent_bytes=0&cid=95ee1a2eff6cf8de&ts=38&x=0"
X-Firefox-Spdy: h2
|
|
| staipseegnauw.com/btag.min.js |  139.45.197.119 | 200 OK | 11 kB |
URL GET HTTP/2staipseegnauw.com/btag.min.js IP139.45.197.119:443
Requested byhttps://nkiri.com/download-the-man-from-uncle/ CertificateIssuerLet's Encrypt Subjectstaipseegnauw.com Fingerprint49:3C:BC:F4:41:9F:6D:8F:2D:99:0C:05:55:DD:1F:70:BA:0B:6F:1A ValiditySun, 19 Jan 2025 05:52:44 GMT - Sat, 19 Apr 2025 05:52:43 GMT
File typegzip compressed data, max speed, from Unix Hash2982e796a4d93773f03b1358fde561b2 918a5e3c843d7566929798d5d8ed8e6e92c48943 50445e2772b5f4fbfd784cde1ee517b381c9a44d383d3df3252c78620d91ab20
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /btag.min.js HTTP/1.1
Host: staipseegnauw.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nkiri.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 11 Feb 2025 12:55:22 GMT
content-type: application/javascript
x-trace-id: 22fec63565935fcbf98c1d8ea4b069e6
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace, favicon
access-control-max-age: 86400
pragma: no-cache
expires: Tue, 11 Jan 1994 10:00:00 GMT
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| nkiri.com/wp-content/uploads/2024/11/cropped-logo-32x32.png | 31.172.80.216 | 200 OK | 1.2 kB |
URL GET HTTP/3nkiri.com/wp-content/uploads/2024/11/cropped-logo-32x32.png IP31.172.80.216:443
Requested byhttps://nkiri.com/download-the-man-from-uncle/ CertificateIssuerLet's Encrypt Subjectnkiri.com Fingerprint5D:BC:4A:DE:FE:00:AB:7F:01:71:EF:81:CE:57:79:FC:0C:E4:1E:B8 ValidityFri, 07 Feb 2025 18:08:52 GMT - Thu, 08 May 2025 18:08:51 GMT
File typePNG image data, 32 x 32, 8-bit colormap, non-interlaced Hash6d57e63055e9e87cbaf2fe2a27d7dbd7 53916d6b7a447c4b9fedc5d9cd6ee03cb74411ec 1a8a53c1a064f8061fd1a664905a81b2e435dfea29d388722a22068e8689436b
GET /wp-content/uploads/2024/11/cropped-logo-32x32.png HTTP/1.1
Host: nkiri.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nkiri.com/download-the-man-from-uncle/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Tue, 18 Feb 2025 12:55:23 GMT
content-type: image/png
last-modified: Tue, 10 Dec 2024 08:31:18 GMT
etag: "47e-6757fc56-38d7d449c80476d1;;;"
accept-ranges: bytes
content-length: 1150
date: Tue, 11 Feb 2025 12:55:23 GMT
server: LiteSpeed
|
|
| secure.gravatar.com/avatar/eac89be4a8fddff613e1968a150d0e5d?s=150&d=retro&r=g | 192.0.73.2 | 200 OK | 531 B |
URL GET HTTP/2secure.gravatar.com/avatar/eac89be4a8fddff613e1968a150d0e5d?s=150&d=retro&r=g IP192.0.73.2:443
Requested byhttps://nkiri.com/download-the-man-from-uncle/ CertificateIssuerLet's Encrypt Subjectgravatar.com Fingerprint64:D7:69:B4:39:40:3E:2B:AF:99:16:4D:D8:6E:E8:0F:65:F9:C1:FC ValidityMon, 16 Dec 2024 09:36:48 GMT - Sun, 16 Mar 2025 09:36:47 GMT
File typePNG image data, 150 x 150, 8-bit/color RGB, non-interlaced Hash25c8c8306603ef54221dfa09145d55a5 1aab74e640b8db857ca894ea0f4b56f2c7919ec2 1fe6d10bd9cce171f73d19d4c5e76d984019c7e2b3b5dce8a577bd58805352ee
GET /avatar/eac89be4a8fddff613e1968a150d0e5d?s=150&d=retro&r=g HTTP/1.1
Host: secure.gravatar.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nkiri.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 11 Feb 2025 12:55:23 GMT
content-type: image/png
content-length: 531
last-modified: Wed, 11 Jan 1984 08:00:00 GMT
link: <https://gravatar.com/avatar/eac89be4a8fddff613e1968a150d0e5d?s=150&d=retro&r=g>; rel="canonical"
access-control-allow-origin: *
accept-ranges: bytes
expires: Tue, 11 Feb 2025 13:00:23 GMT
cache-control: max-age=300
x-nc: MISS arn 3
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| nkiri.com/wp-content/plugins/elementor/assets/js/text-editor.2f2f7e0ea1e16387a004.bundle.js | 31.172.80.216 | 200 OK | 934 B |
URL GET HTTP/3nkiri.com/wp-content/plugins/elementor/assets/js/text-editor.2f2f7e0ea1e16387a004.bundle.js IP31.172.80.216:443
Requested byhttps://nkiri.com/download-the-man-from-uncle/ CertificateIssuerLet's Encrypt Subjectnkiri.com Fingerprint5D:BC:4A:DE:FE:00:AB:7F:01:71:EF:81:CE:57:79:FC:0C:E4:1E:B8 ValidityFri, 07 Feb 2025 18:08:52 GMT - Thu, 08 May 2025 18:08:51 GMT
File typeJavaScript source, ASCII text Hash43fd21705252cad3a0832dc88e198089 60c48ab2cff1c33aaf12979e365fe463d6b2af4b 48bbfcb11f5c6da7c42a843a88cf21950fb87ece919479a2c6163467a3cca8ec
GET /wp-content/plugins/elementor/assets/js/text-editor.2f2f7e0ea1e16387a004.bundle.js HTTP/1.1
Host: nkiri.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nkiri.com/download-the-man-from-uncle/
Cookie: _ga_XVP9497M24=GS1.1.1739278523.1.0.1739278523.0.0.0; _ga=GA1.1.1672808816.1739278523
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: text/javascript; charset=UTF-8
last-modified: Tue, 10 Dec 2024 08:31:22 GMT
etag: "af0-6757fc5a-d8a8a654e37f0c0d;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 934
date: Tue, 11 Feb 2025 12:55:23 GMT
server: LiteSpeed
|
|
| nkiri.com/wp-content/plugins/elementor/assets/js/video.817bd6a65a1542503aac.bundle.js | 31.172.80.216 | 200 OK | 1.9 kB |
URL GET HTTP/3nkiri.com/wp-content/plugins/elementor/assets/js/video.817bd6a65a1542503aac.bundle.js IP31.172.80.216:443
Requested byhttps://nkiri.com/download-the-man-from-uncle/ CertificateIssuerLet's Encrypt Subjectnkiri.com Fingerprint5D:BC:4A:DE:FE:00:AB:7F:01:71:EF:81:CE:57:79:FC:0C:E4:1E:B8 ValidityFri, 07 Feb 2025 18:08:52 GMT - Thu, 08 May 2025 18:08:51 GMT
File typeJavaScript source, ASCII text Hash80e6a586e9a81a7860cee04e5b28472b 3a396cd4e4c81ef7b9351dc0e584ed82f425c169 767b9f9efe7f8fce80074b017a50f16b8fe1d5132d9cc5a71ee8c4049ab0fffc
GET /wp-content/plugins/elementor/assets/js/video.817bd6a65a1542503aac.bundle.js HTTP/1.1
Host: nkiri.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nkiri.com/download-the-man-from-uncle/
Cookie: _ga_XVP9497M24=GS1.1.1739278523.1.0.1739278523.0.0.0; _ga=GA1.1.1672808816.1739278523
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: text/javascript; charset=UTF-8
last-modified: Tue, 10 Dec 2024 08:31:22 GMT
etag: "1847-6757fc5a-2462ae47ec440133;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 1854
date: Tue, 11 Feb 2025 12:55:23 GMT
server: LiteSpeed
|
|
| nkiri.com/wp-content/plugins/elementor/assets/js/alert.c3c6a3fdf4745bd26b7f.bundle.js | 31.172.80.216 | 200 OK | 492 B |
URL GET HTTP/3nkiri.com/wp-content/plugins/elementor/assets/js/alert.c3c6a3fdf4745bd26b7f.bundle.js IP31.172.80.216:443
Requested byhttps://nkiri.com/download-the-man-from-uncle/ CertificateIssuerLet's Encrypt Subjectnkiri.com Fingerprint5D:BC:4A:DE:FE:00:AB:7F:01:71:EF:81:CE:57:79:FC:0C:E4:1E:B8 ValidityFri, 07 Feb 2025 18:08:52 GMT - Thu, 08 May 2025 18:08:51 GMT
File typeJavaScript source, ASCII text Hashaf3696fad20da7d42956c9fd0a942ad1 ac7d36f76815074c0b34eb9ccbc4dd96fa0699a9 f986414812389d477413875b5d956b0f2b999e0e1f268cb46632a13dfa3bfcb1
GET /wp-content/plugins/elementor/assets/js/alert.c3c6a3fdf4745bd26b7f.bundle.js HTTP/1.1
Host: nkiri.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nkiri.com/download-the-man-from-uncle/
Cookie: _ga_XVP9497M24=GS1.1.1739278523.1.0.1739278523.0.0.0; _ga=GA1.1.1672808816.1739278523
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: text/javascript; charset=UTF-8
last-modified: Tue, 10 Dec 2024 08:31:22 GMT
etag: "474-6757fc5a-2fd50424a577b511;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 492
date: Tue, 11 Feb 2025 12:55:23 GMT
server: LiteSpeed
|
|
| weegraphooph.net/wrr?z=6649428&p_rid=6cb1d2e9-43d6-4d96-bc0e-214599e97a7a&rb=ZZ2Sa7yKK36KqfC83Muu1qkGtne8KtqnDV_yHpGj84SH_zx7GyjX2NCXyTMYPufm3vcTHmuxmhhYgpHJ67jShqWcdVBLUbjArJ6Ne8mIWutXURXhUhPO9xUWPKttWn0BQT2nZWx4LVjN45GTnAZZ-n95ItyE9Mulh8F5v9q4GBvBmjvNlV5L2XsTd0Z6tTOZgSTOjZPY9KITl8Wmt6IXZmFBNdrSB5Bh-AnrR43nSGEzJPqCS0DgxCVrTKKRaXWF&jsp=1&fs=0&cf=0&sw=1280&sh=1024&wih=90&wiw=728&ww=1280&wh=1024&sah=1024&wx=0&wy=0&cw=728&wfc=1&pl=about%3Ablank&drf=&np=1&pt=0&nb=1&ng=0&ix=1&nw=1&tb=false&btz=UTC&bto=0&tt=1&wgl=&js_build=iclick-v1.1082.0&navlng=en-US&vsbl=true&pnt=0&pnrc=0&wasm=1&dmn=weegraphooph.net&userId=00816d29f80d45fffdc39025464427ed | 139.45.197.106 | 200 OK | 2 B |
URL GET HTTP/2weegraphooph.net/wrr?z=6649428&p_rid=6cb1d2e9-43d6-4d96-bc0e-214599e97a7a&rb=ZZ2Sa7yKK36KqfC83Muu1qkGtne8KtqnDV_yHpGj84SH_zx7GyjX2NCXyTMYPufm3vcTHmuxmhhYgpHJ67jShqWcdVBLUbjArJ6Ne8mIWutXURXhUhPO9xUWPKttWn0BQT2nZWx4LVjN45GTnAZZ-n95ItyE9Mulh8F5v9q4GBvBmjvNlV5L2XsTd0Z6tTOZgSTOjZPY9KITl8Wmt6IXZmFBNdrSB5Bh-AnrR43nSGEzJPqCS0DgxCVrTKKRaXWF&jsp=1&fs=0&cf=0&sw=1280&sh=1024&wih=90&wiw=728&ww=1280&wh=1024&sah=1024&wx=0&wy=0&cw=728&wfc=1&pl=about%3Ablank&drf=&np=1&pt=0&nb=1&ng=0&ix=1&nw=1&tb=false&btz=UTC&bto=0&tt=1&wgl=&js_build=iclick-v1.1082.0&navlng=en-US&vsbl=true&pnt=0&pnrc=0&wasm=1&dmn=weegraphooph.net&userId=00816d29f80d45fffdc39025464427ed IP139.45.197.106:443
Requested byhttps://nkiri.com/download-the-man-from-uncle/ CertificateIssuerLet's Encrypt Subjectweegraphooph.net Fingerprint8A:62:1B:14:6E:42:92:BB:71:FD:AF:00:D0:72:7E:B0:20:AF:C6:97 ValiditySat, 01 Feb 2025 05:22:13 GMT - Fri, 02 May 2025 05:22:12 GMT
File typeASCII text, with no line terminators Hash444bcb3a3fcf8389296c49467f27e1d6 7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb 2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wrr?z=6649428&p_rid=6cb1d2e9-43d6-4d96-bc0e-214599e97a7a&rb=ZZ2Sa7yKK36KqfC83Muu1qkGtne8KtqnDV_yHpGj84SH_zx7GyjX2NCXyTMYPufm3vcTHmuxmhhYgpHJ67jShqWcdVBLUbjArJ6Ne8mIWutXURXhUhPO9xUWPKttWn0BQT2nZWx4LVjN45GTnAZZ-n95ItyE9Mulh8F5v9q4GBvBmjvNlV5L2XsTd0Z6tTOZgSTOjZPY9KITl8Wmt6IXZmFBNdrSB5Bh-AnrR43nSGEzJPqCS0DgxCVrTKKRaXWF&jsp=1&fs=0&cf=0&sw=1280&sh=1024&wih=90&wiw=728&ww=1280&wh=1024&sah=1024&wx=0&wy=0&cw=728&wfc=1&pl=about%3Ablank&drf=&np=1&pt=0&nb=1&ng=0&ix=1&nw=1&tb=false&btz=UTC&bto=0&tt=1&wgl=&js_build=iclick-v1.1082.0&navlng=en-US&vsbl=true&pnt=0&pnrc=0&wasm=1&dmn=weegraphooph.net&userId=00816d29f80d45fffdc39025464427ed HTTP/1.1
Host: weegraphooph.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://nkiri.com/
Origin: https://nkiri.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 11 Feb 2025 12:55:23 GMT
content-type: text/plain
content-length: 2
x-trace-id: e42f850804aa03ad1424f60dbd388e94
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
access-control-allow-origin: https://nkiri.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace, favicon
access-control-max-age: 86400
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
set-cookie: OAID=00816d29f80d45fffdc39025464427ed; expires=Wed, 11 Feb 2026 12:55:23 GMT; path=/; secure; SameSite=None
oaidts=1739278523; expires=Wed, 11 Feb 2026 12:55:23 GMT; path=/; secure; SameSite=None
syncedCookie=true; expires=Tue, 18 Feb 2025 12:55:23 GMT; path=/; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
|
|
| www.youtube.com/s/player/9c6dfc4a/www-widgetapi.vflset/www-widgetapi.js | 142.250.74.110 | 200 OK | 10 kB |
URL GET HTTP/2www.youtube.com/s/player/9c6dfc4a/www-widgetapi.vflset/www-widgetapi.js IP142.250.74.110:443
Requested byhttps://nkiri.com/download-the-man-from-uncle/ CertificateIssuerGoogle Trust Services Subject*.google.com FingerprintAC:A6:80:49:BB:24:5F:7D:C3:BD:8D:4C:35:5E:DD:36:EB:F8:C1:95 ValidityMon, 20 Jan 2025 08:36:04 GMT - Mon, 14 Apr 2025 08:36:03 GMT
File typeJavaScript source, ASCII text, with very long lines (570) Hash85ccdeaf4aeb05d35d040f8461fc1524 776fe7860dd6f3301bb58ba53fa21b308f86e9a4 e7e038a97c859394664a2b65bfed05a1571fab38ed1b730b9ff35b222d78f096
GET /s/player/9c6dfc4a/www-widgetapi.vflset/www-widgetapi.js HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nkiri.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: br
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 10303
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 08 Feb 2025 22:36:15 GMT
expires: Sun, 08 Feb 2026 22:36:15 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 04 Feb 2025 05:19:01 GMT
content-type: text/javascript
vary: Accept-Encoding, Origin
age: 224348
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| weegraphooph.net/?rb=scx1An_UdcsiWCoz6izWQEvRj_dQXUN4PV-nzj5UeK5d4XAgrZ_ek3VytP1bDHzL4D5fmnuGryFn9JET--Kot8Ahl9axkqBMVKBRPDz7pwaUcXYliLDhnWC_pCSj6oLpWyPFCUzA8XAlhf9CfArnpuRyL8wsZWS6PJWAoFTeOf3mMwFA6wU7zsc1R0hl93RXrIPAhhSiyBoAtI2MjSs3eEX2H1QId2Y0rfGCu9tLcVhuzh-_zP5IPqkbREtwKDO47wuqOcYcjJFRtwzz_NLliM4aD3Z_JF5d&request_ab2=0&zoneid=7677500&js_build=iclick-v1.1082.0&jsp=1&fs=0&cf=0&sw=1280&sh=1024&wih=1024&wiw=1280&ww=1280&wh=1024&sah=1024&wx=0&wy=0&cw=1280&wfc=1&pl=https%3A%2F%2Fnkiri.com%2Fdownload-the-man-from-uncle%2F&drf=&np=1&pt=0&nb=1&ng=0&ix=0&nw=1&tb=false&btz=UTC&bto=0&tt=2&wgl=&js_build=iclick-v1.1082.0&navlng=en-US&vsbl=true&pnt=0&pnrc=0&bs=e9a9cbe4-0adb-4bf0-bdfe-0673874f5c2f&wasm=1&userId=00816d29f80d45fffdc39025464427ed&m=link | 139.45.197.106 | 200 OK | 9.1 kB |
URL GET HTTP/2weegraphooph.net/?rb=scx1An_UdcsiWCoz6izWQEvRj_dQXUN4PV-nzj5UeK5d4XAgrZ_ek3VytP1bDHzL4D5fmnuGryFn9JET--Kot8Ahl9axkqBMVKBRPDz7pwaUcXYliLDhnWC_pCSj6oLpWyPFCUzA8XAlhf9CfArnpuRyL8wsZWS6PJWAoFTeOf3mMwFA6wU7zsc1R0hl93RXrIPAhhSiyBoAtI2MjSs3eEX2H1QId2Y0rfGCu9tLcVhuzh-_zP5IPqkbREtwKDO47wuqOcYcjJFRtwzz_NLliM4aD3Z_JF5d&request_ab2=0&zoneid=7677500&js_build=iclick-v1.1082.0&jsp=1&fs=0&cf=0&sw=1280&sh=1024&wih=1024&wiw=1280&ww=1280&wh=1024&sah=1024&wx=0&wy=0&cw=1280&wfc=1&pl=https%3A%2F%2Fnkiri.com%2Fdownload-the-man-from-uncle%2F&drf=&np=1&pt=0&nb=1&ng=0&ix=0&nw=1&tb=false&btz=UTC&bto=0&tt=2&wgl=&js_build=iclick-v1.1082.0&navlng=en-US&vsbl=true&pnt=0&pnrc=0&bs=e9a9cbe4-0adb-4bf0-bdfe-0673874f5c2f&wasm=1&userId=00816d29f80d45fffdc39025464427ed&m=link IP139.45.197.106:443
Requested byhttps://nkiri.com/download-the-man-from-uncle/ CertificateIssuerLet's Encrypt Subjectweegraphooph.net Fingerprint8A:62:1B:14:6E:42:92:BB:71:FD:AF:00:D0:72:7E:B0:20:AF:C6:97 ValiditySat, 01 Feb 2025 05:22:13 GMT - Fri, 02 May 2025 05:22:12 GMT
File typegzip compressed data, max speed, from Unix Hash9d7236016fbea322df38069674d74900 a3a88f5842d468d8fe8258f1b99afc8ff739e229 32556d98ea22b04c1cc515883d7ba578859808808ddb89c823bdbca0111c31e2
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /?rb=scx1An_UdcsiWCoz6izWQEvRj_dQXUN4PV-nzj5UeK5d4XAgrZ_ek3VytP1bDHzL4D5fmnuGryFn9JET--Kot8Ahl9axkqBMVKBRPDz7pwaUcXYliLDhnWC_pCSj6oLpWyPFCUzA8XAlhf9CfArnpuRyL8wsZWS6PJWAoFTeOf3mMwFA6wU7zsc1R0hl93RXrIPAhhSiyBoAtI2MjSs3eEX2H1QId2Y0rfGCu9tLcVhuzh-_zP5IPqkbREtwKDO47wuqOcYcjJFRtwzz_NLliM4aD3Z_JF5d&request_ab2=0&zoneid=7677500&js_build=iclick-v1.1082.0&jsp=1&fs=0&cf=0&sw=1280&sh=1024&wih=1024&wiw=1280&ww=1280&wh=1024&sah=1024&wx=0&wy=0&cw=1280&wfc=1&pl=https%3A%2F%2Fnkiri.com%2Fdownload-the-man-from-uncle%2F&drf=&np=1&pt=0&nb=1&ng=0&ix=0&nw=1&tb=false&btz=UTC&bto=0&tt=2&wgl=&js_build=iclick-v1.1082.0&navlng=en-US&vsbl=true&pnt=0&pnrc=0&bs=e9a9cbe4-0adb-4bf0-bdfe-0673874f5c2f&wasm=1&userId=00816d29f80d45fffdc39025464427ed&m=link HTTP/1.1
Host: weegraphooph.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://nkiri.com/
Origin: https://nkiri.com
DNT: 1
Connection: keep-alive
Cookie: OAID=00816d29f80d45fffdc39025464427ed; oaidts=1739278523
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 11 Feb 2025 12:55:23 GMT
content-type: application/json
x-trace-id: 85165cae401f5ddd58d52c579ce76b3c
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
access-control-allow-origin: https://nkiri.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace, favicon
access-control-max-age: 86400
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
set-cookie: OAID=00816d29f80d45fffdc39025464427ed; expires=Wed, 11 Feb 2026 12:55:23 GMT; path=/; secure; SameSite=None
oaidts=1739278523; expires=Wed, 11 Feb 2026 12:55:23 GMT; path=/; secure; SameSite=None
syncedCookie=true; expires=Tue, 18 Feb 2025 12:55:23 GMT; path=/; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| www.youtube.com/embed/jzXXCSGu7HM?controls=1&rel=0&playsinline=0&modestbranding=1&autoplay=0&enablejsapi=1&origin=https%3A%2F%2Fnkiri.com&widgetid=1 | 142.250.74.110 | 200 OK | 58 kB |
URL GET HTTP/3www.youtube.com/embed/jzXXCSGu7HM?controls=1&rel=0&playsinline=0&modestbranding=1&autoplay=0&enablejsapi=1&origin=https%3A%2F%2Fnkiri.com&widgetid=1 IP142.250.74.110:443
Requested byhttps://nkiri.com/download-the-man-from-uncle/ CertificateIssuerGoogle Trust Services Subject*.google.com FingerprintAC:A6:80:49:BB:24:5F:7D:C3:BD:8D:4C:35:5E:DD:36:EB:F8:C1:95 ValidityMon, 20 Jan 2025 08:36:04 GMT - Mon, 14 Apr 2025 08:36:03 GMT
File typeHTML document, ASCII text, with very long lines (57946) Hash342cc3b844193e8250feb63c1286bb9a 65dfbb3e70f924cb79cb1a6ed15796eec75a6148 5b380be47867cd78f324ebabe504678ba6c8ce489bf328b09ea95352fa7baf04
GET /embed/jzXXCSGu7HM?controls=1&rel=0&playsinline=0&modestbranding=1&autoplay=0&enablejsapi=1&origin=https%3A%2F%2Fnkiri.com&widgetid=1 HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://nkiri.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: text/html; charset=utf-8
x-content-type-options: nosniff
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Tue, 11 Feb 2025 12:55:24 GMT
strict-transport-security: max-age=31536000
cross-origin-opener-policy-report-only: same-origin; report-to="youtube_main"
content-security-policy: require-trusted-types-for 'script';report-uri /cspreport
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*
report-to: {"group":"youtube_main","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube_main"}]}
cross-origin-resource-policy: cross-origin
origin-trial: AmhMBR6zCLzDDxpW+HfpP67BqwIknWnyMOXOQGfzYswFmJe+fgaI6XZgAzcxOrzNtP7hEDsOo1jdjFnVr2IdxQ4AAAB4eyJvcmlnaW4iOiJodHRwczovL3lvdXR1YmUuY29tOjQ0MyIsImZlYXR1cmUiOiJXZWJWaWV3WFJlcXVlc3RlZFdpdGhEZXByZWNhdGlvbiIsImV4cGlyeSI6MTc1ODA2NzE5OSwiaXNTdWJkb21haW4iOnRydWV9
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657?hl=en for more info."
content-encoding: br
server: ESF
x-xss-protection: 0
set-cookie: YSC=EN-4FFWKD60; Domain=.youtube.com; Path=/; Secure; HttpOnly; SameSite=none
__Secure-ROLLOUT_TOKEN=CNT7svja25vy6wEQnvPotNW7iwMYnvPotNW7iwM%3D; Domain=youtube.com; Expires=Sun, 10-Aug-2025 12:55:24 GMT; Path=/; Secure; HttpOnly; SameSite=none; Partitioned
VISITOR_INFO1_LIVE=6vWbRu90xNo; Domain=.youtube.com; Expires=Sun, 10-Aug-2025 12:55:24 GMT; Path=/; Secure; HttpOnly; SameSite=none
VISITOR_PRIVACY_METADATA=CgJOTxIcEhgSFhMLFBUWFwwYGRobHB0eHw4PIBAREiEgYA%3D%3D; Domain=.youtube.com; Expires=Sun, 10-Aug-2025 12:55:24 GMT; Path=/; Secure; HttpOnly; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 | 142.250.74.35 | 200 OK | 16 kB |
URL GET HTTP/2fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 IP142.250.74.35:443
Requested byhttps://www.youtube.com/embed/jzXXCSGu7HM?controls=1&rel=0&playsinline=0&modestbranding=1&autoplay=0&enablejsapi=1&origin=https%3A%2F%2Fnkiri.com&widgetid=1 CertificateIssuerGoogle Trust Services Subject*.gstatic.com Fingerprint62:57:FE:D4:36:DB:03:15:19:B1:2C:50:42:64:6E:D7:C2:32:4F:B6 ValidityMon, 20 Jan 2025 08:37:07 GMT - Mon, 14 Apr 2025 08:37:06 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 15552, version 1.0 Hash285467176f7fe6bb6a9c6873b3dad2cc ea04e4ff5142ddd69307c183def721a160e0a64e 5a8c1e7681318caa29e9f44e8a6e271f6a4067a2703e9916dfd4fe9099241db7
GET /s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15552
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sun, 09 Feb 2025 01:26:47 GMT
expires: Mon, 09 Feb 2026 01:26:47 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 16 Oct 2017 17:33:02 GMT
content-type: font/woff2
age: 214117
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.youtube.com/s/player/9c6dfc4a/player_ias.vflset/en_US/embed.js | 142.250.74.110 | 200 OK | 9.5 kB |
URL GET HTTP/3www.youtube.com/s/player/9c6dfc4a/player_ias.vflset/en_US/embed.js IP142.250.74.110:443
Requested byhttps://www.youtube.com/embed/jzXXCSGu7HM?controls=1&rel=0&playsinline=0&modestbranding=1&autoplay=0&enablejsapi=1&origin=https%3A%2F%2Fnkiri.com&widgetid=1 CertificateIssuerGoogle Trust Services Subject*.google.com FingerprintAC:A6:80:49:BB:24:5F:7D:C3:BD:8D:4C:35:5E:DD:36:EB:F8:C1:95 ValidityMon, 20 Jan 2025 08:36:04 GMT - Mon, 14 Apr 2025 08:36:03 GMT
File typeJavaScript source, ASCII text, with very long lines (3391) Hash83b6b01bafe8a095c8a55eff15c75f57 04c44a813a37e01e6adbd4f6cdad4c43a978c761 ad2b4e6263ef493abf8a20e3b0bf43505e5a8e42f7d468e5c73edf66dc495c0e
GET /s/player/9c6dfc4a/player_ias.vflset/en_US/embed.js HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/jzXXCSGu7HM?controls=1&rel=0&playsinline=0&modestbranding=1&autoplay=0&enablejsapi=1&origin=https%3A%2F%2Fnkiri.com&widgetid=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: br
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 9526
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sun, 09 Feb 2025 01:15:21 GMT
expires: Mon, 09 Feb 2026 01:15:21 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 04 Feb 2025 05:19:01 GMT
content-type: text/javascript
vary: Accept-Encoding, Origin
age: 214803
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.youtube.com/s/player/9c6dfc4a/www-player.css | 142.250.74.110 | 200 OK | 52 kB |
URL GET HTTP/3www.youtube.com/s/player/9c6dfc4a/www-player.css IP142.250.74.110:443
Requested byhttps://www.youtube.com/embed/jzXXCSGu7HM?controls=1&rel=0&playsinline=0&modestbranding=1&autoplay=0&enablejsapi=1&origin=https%3A%2F%2Fnkiri.com&widgetid=1 CertificateIssuerGoogle Trust Services Subject*.google.com FingerprintAC:A6:80:49:BB:24:5F:7D:C3:BD:8D:4C:35:5E:DD:36:EB:F8:C1:95 ValidityMon, 20 Jan 2025 08:36:04 GMT - Mon, 14 Apr 2025 08:36:03 GMT
File typeUnicode text, UTF-8 text, with very long lines (65534), with no line terminators Hasha0c596d923a7bbe72719f0e324d71d5c 7104d466705d41e72fd5d18397bd31f8f649b718 7214ff2d8b71600f9d57e8b8753db827f1a658480533c55a64af2139919e5744
GET /s/player/9c6dfc4a/www-player.css HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/jzXXCSGu7HM?controls=1&rel=0&playsinline=0&modestbranding=1&autoplay=0&enablejsapi=1&origin=https%3A%2F%2Fnkiri.com&widgetid=1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: br
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 51688
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 08 Feb 2025 00:16:14 GMT
expires: Sun, 08 Feb 2026 00:16:14 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 04 Feb 2025 05:19:01 GMT
content-type: text/css
vary: Accept-Encoding, Origin
age: 304750
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.youtube.com/s/player/9c6dfc4a/www-embed-player.vflset/www-embed-player.js | 142.250.74.110 | 200 OK | 104 kB |
URL GET HTTP/3www.youtube.com/s/player/9c6dfc4a/www-embed-player.vflset/www-embed-player.js IP142.250.74.110:443
Requested byhttps://www.youtube.com/embed/jzXXCSGu7HM?controls=1&rel=0&playsinline=0&modestbranding=1&autoplay=0&enablejsapi=1&origin=https%3A%2F%2Fnkiri.com&widgetid=1 CertificateIssuerGoogle Trust Services Subject*.google.com FingerprintAC:A6:80:49:BB:24:5F:7D:C3:BD:8D:4C:35:5E:DD:36:EB:F8:C1:95 ValidityMon, 20 Jan 2025 08:36:04 GMT - Mon, 14 Apr 2025 08:36:03 GMT
File typeJavaScript source, ASCII text, with very long lines (1159) Size104 kB (103960 bytes) Hashbb12cda967549f9abc34f494e313ea60 2b1a67e8fcee1997ba1e22558d78682654127e9e 661aeae090c394bb2420e219aa4b9d91948743cc1bf3bd24bb7c2f75df2d2406
GET /s/player/9c6dfc4a/www-embed-player.vflset/www-embed-player.js HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/jzXXCSGu7HM?controls=1&rel=0&playsinline=0&modestbranding=1&autoplay=0&enablejsapi=1&origin=https%3A%2F%2Fnkiri.com&widgetid=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: br
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 103960
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 08 Feb 2025 16:49:21 GMT
expires: Sun, 08 Feb 2026 16:49:21 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 04 Feb 2025 05:19:01 GMT
content-type: text/javascript
vary: Accept-Encoding, Origin
age: 245163
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.youtube.com/s/player/9c6dfc4a/player_ias.vflset/en_US/base.js | 142.250.74.110 | 200 OK | 658 kB |
URL GET HTTP/3www.youtube.com/s/player/9c6dfc4a/player_ias.vflset/en_US/base.js IP142.250.74.110:443
Requested byhttps://www.youtube.com/embed/jzXXCSGu7HM?controls=1&rel=0&playsinline=0&modestbranding=1&autoplay=0&enablejsapi=1&origin=https%3A%2F%2Fnkiri.com&widgetid=1 CertificateIssuerGoogle Trust Services Subject*.google.com FingerprintAC:A6:80:49:BB:24:5F:7D:C3:BD:8D:4C:35:5E:DD:36:EB:F8:C1:95 ValidityMon, 20 Jan 2025 08:36:04 GMT - Mon, 14 Apr 2025 08:36:03 GMT
File typeJavaScript source, ASCII text, with very long lines (568) Size658 kB (657961 bytes) Hashda74b61bfbf067c188c961178777d2ea 4b043c47a7ffa8e15d305be2f628a82ca15c7afa a9bde12b4512ae81f9e55386d3750defd180e456d8840d5d67472b4543f80fe4
GET /s/player/9c6dfc4a/player_ias.vflset/en_US/base.js HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/jzXXCSGu7HM?controls=1&rel=0&playsinline=0&modestbranding=1&autoplay=0&enablejsapi=1&origin=https%3A%2F%2Fnkiri.com&widgetid=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: br
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 657961
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sun, 09 Feb 2025 00:14:29 GMT
expires: Mon, 09 Feb 2026 00:14:29 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 04 Feb 2025 05:19:01 GMT
content-type: text/javascript
vary: Accept-Encoding, Origin
age: 218455
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create | 142.250.178.106 | 200 OK | 0 B |
URL OPTIONS HTTP/2jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create IP142.250.178.106:443
Requested byhttps://www.youtube.com/embed/jzXXCSGu7HM?controls=1&rel=0&playsinline=0&modestbranding=1&autoplay=0&enablejsapi=1&origin=https%3A%2F%2Fnkiri.com&widgetid=1 CertificateIssuerGoogle Trust Services Subjectupload.video.google.com Fingerprint91:3E:F9:90:4B:40:4C:8E:D9:11:EA:64:14:86:3D:AD:DB:41:93:5C ValidityMon, 20 Jan 2025 08:37:08 GMT - Mon, 14 Apr 2025 08:37:07 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /$rpc/google.internal.waa.v1.Waa/Create HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type,x-goog-api-key,x-user-agent
Referer: https://www.youtube.com/
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: https://www.youtube.com
vary: origin, referer, x-origin
access-control-allow-credentials: true
access-control-allow-methods: DELETE,GET,HEAD,OPTIONS,PATCH,POST,PUT
access-control-allow-headers: content-type,x-goog-api-key,x-user-agent
access-control-max-age: 3600
date: Tue, 11 Feb 2025 12:55:25 GMT
content-type: text/html
server: ESF
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create | 142.250.178.106 | 200 OK | 44 kB |
URL OPTIONS HTTP/2jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create IP142.250.178.106:443
Requested byhttps://www.youtube.com/embed/jzXXCSGu7HM?controls=1&rel=0&playsinline=0&modestbranding=1&autoplay=0&enablejsapi=1&origin=https%3A%2F%2Fnkiri.com&widgetid=1 CertificateIssuerGoogle Trust Services Subjectupload.video.google.com Fingerprint91:3E:F9:90:4B:40:4C:8E:D9:11:EA:64:14:86:3D:AD:DB:41:93:5C ValidityMon, 20 Jan 2025 08:37:08 GMT - Mon, 14 Apr 2025 08:37:07 GMT
Hashd7c64e3f80d9a2bafba3ec2f83959003 8162debddae7970f95d1b14c9bbfc41f54c46d71 74d75f7b0b5100ece25f120229a6f179a6e517e6b0ea9e348feda6ef9f1c0572
POST /$rpc/google.internal.waa.v1.Waa/Create HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Api-Key: AIzaSyDyT5W0Jh49F30Pqqtyfdf7pDLFKLJoAnw
Content-Type: application/json+protobuf
X-User-Agent: grpc-web-javascript/0.1
Content-Length: 24
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/json+protobuf; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: gzip
date: Tue, 11 Feb 2025 12:55:25 GMT
server: ESF
content-length: 43587
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: https://www.youtube.com
access-control-allow-credentials: true
access-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.youtube.com/s/player/9c6dfc4a/player_ias.vflset/en_US/remote.js | 142.250.74.110 | 200 OK | 35 kB |
URL GET HTTP/3www.youtube.com/s/player/9c6dfc4a/player_ias.vflset/en_US/remote.js IP142.250.74.110:443
Requested byhttps://www.youtube.com/embed/jzXXCSGu7HM?controls=1&rel=0&playsinline=0&modestbranding=1&autoplay=0&enablejsapi=1&origin=https%3A%2F%2Fnkiri.com&widgetid=1 CertificateIssuerGoogle Trust Services Subject*.google.com FingerprintAC:A6:80:49:BB:24:5F:7D:C3:BD:8D:4C:35:5E:DD:36:EB:F8:C1:95 ValidityMon, 20 Jan 2025 08:36:04 GMT - Mon, 14 Apr 2025 08:36:03 GMT
File typeJavaScript source, ASCII text, with very long lines (543) Hash7203692c3ca25a1fdc76333b45a66045 a5c53bd578e7d05e5eea0744b6c4ef02c48e222b 2b06cbe575020ced60c8b56d4558e1fa3548a5d8d7d02f5d4e6df6bbea82e4a5
GET /s/player/9c6dfc4a/player_ias.vflset/en_US/remote.js HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/jzXXCSGu7HM?controls=1&rel=0&playsinline=0&modestbranding=1&autoplay=0&enablejsapi=1&origin=https%3A%2F%2Fnkiri.com&widgetid=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: br
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 35297
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 08 Feb 2025 06:04:36 GMT
expires: Sun, 08 Feb 2026 06:04:36 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 04 Feb 2025 05:19:01 GMT
content-type: text/javascript
vary: Accept-Encoding, Origin
age: 283849
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.google.com/js/th/bMD8Mb9KjuwvUEjG2wKGW_SboZEAlyyu-JRM21Xvjg0.js | 142.250.178.100 | 200 OK | 21 kB |
URL GET HTTP/2www.google.com/js/th/bMD8Mb9KjuwvUEjG2wKGW_SboZEAlyyu-JRM21Xvjg0.js IP142.250.178.100:443
Requested byhttps://www.youtube.com/embed/jzXXCSGu7HM?controls=1&rel=0&playsinline=0&modestbranding=1&autoplay=0&enablejsapi=1&origin=https%3A%2F%2Fnkiri.com&widgetid=1 CertificateIssuerGoogle Trust Services Subjectwww.google.com FingerprintA5:8A:8C:6D:C5:D6:86:EA:BD:43:96:00:02:99:B8:C6:97:0C:AF:E5 ValidityMon, 20 Jan 2025 08:37:54 GMT - Mon, 14 Apr 2025 08:37:53 GMT
File typeJavaScript source, ASCII text, with very long lines (53678) Hashac46a1438a9d7222b89a0c651d3479d0 5f8a078152fd5d16ff6e6d44df7c12525edb4c0c 6cc0fc31bf4a8eec2f5048c6db02865bf49ba19100972caef8944cdb55ef8e0d
GET /js/th/bMD8Mb9KjuwvUEjG2wKGW_SboZEAlyyu-JRM21Xvjg0.js HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: br
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/botguard-scs
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="botguard-scs"
report-to: {"group":"botguard-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/botguard-scs"}]}
content-length: 21071
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 05 Feb 2025 06:36:06 GMT
expires: Thu, 05 Feb 2026 06:36:06 GMT
cache-control: public, max-age=31536000
age: 541159
last-modified: Mon, 27 Jan 2025 15:00:00 GMT
content-type: text/javascript
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT | 142.250.178.106 | 200 OK | 0 B |
URL POST HTTP/2jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT IP142.250.178.106:443
Requested byhttps://www.youtube.com/embed/jzXXCSGu7HM?controls=1&rel=0&playsinline=0&modestbranding=1&autoplay=0&enablejsapi=1&origin=https%3A%2F%2Fnkiri.com&widgetid=1 CertificateIssuerGoogle Trust Services Subjectupload.video.google.com Fingerprint91:3E:F9:90:4B:40:4C:8E:D9:11:EA:64:14:86:3D:AD:DB:41:93:5C ValidityMon, 20 Jan 2025 08:37:08 GMT - Mon, 14 Apr 2025 08:37:07 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /$rpc/google.internal.waa.v1.Waa/GenerateIT HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type,x-goog-api-key,x-user-agent
Referer: https://www.youtube.com/
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: https://www.youtube.com
vary: origin, referer, x-origin
access-control-allow-credentials: true
access-control-allow-methods: DELETE,GET,HEAD,OPTIONS,PATCH,POST,PUT
access-control-allow-headers: content-type,x-goog-api-key,x-user-agent
access-control-max-age: 3600
date: Tue, 11 Feb 2025 12:55:26 GMT
content-type: text/html
server: ESF
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| play.google.com/log?format=json&hasfast=true&authuser=0 | 142.250.74.110 | 200 OK | 0 B |
URL POST HTTP/3play.google.com/log?format=json&hasfast=true&authuser=0 IP142.250.74.110:443
Requested byhttps://www.youtube.com/embed/jzXXCSGu7HM?controls=1&rel=0&playsinline=0&modestbranding=1&autoplay=0&enablejsapi=1&origin=https%3A%2F%2Fnkiri.com&widgetid=1 CertificateIssuerGoogle Trust Services Subject*.google.com FingerprintAC:A6:80:49:BB:24:5F:7D:C3:BD:8D:4C:35:5E:DD:36:EB:F8:C1:95 ValidityMon, 20 Jan 2025 08:36:04 GMT - Mon, 14 Apr 2025 08:36:03 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /log?format=json&hasfast=true&authuser=0 HTTP/1.1
Host: play.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: x-goog-authuser
Referer: https://www.youtube.com/
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
access-control-allow-origin: https://www.youtube.com
access-control-allow-methods: GET, POST, OPTIONS
access-control-max-age: 86400
access-control-allow-credentials: true
access-control-allow-headers: X-Playlog-Web,authorization,origin,x-goog-authuser
content-type: text/plain; charset=UTF-8
date: Tue, 11 Feb 2025 12:55:26 GMT
server: Playlog
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| play.google.com/log?format=json&hasfast=true&authuser=0 | 142.250.74.110 | 200 OK | 0 B |
URL POST HTTP/3play.google.com/log?format=json&hasfast=true&authuser=0 IP142.250.74.110:443
Requested byhttps://www.youtube.com/embed/jzXXCSGu7HM?controls=1&rel=0&playsinline=0&modestbranding=1&autoplay=0&enablejsapi=1&origin=https%3A%2F%2Fnkiri.com&widgetid=1 CertificateIssuerGoogle Trust Services Subject*.google.com FingerprintAC:A6:80:49:BB:24:5F:7D:C3:BD:8D:4C:35:5E:DD:36:EB:F8:C1:95 ValidityMon, 20 Jan 2025 08:36:04 GMT - Mon, 14 Apr 2025 08:36:03 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /log?format=json&hasfast=true&authuser=0 HTTP/1.1
Host: play.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: x-goog-authuser
Referer: https://www.youtube.com/
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
access-control-allow-origin: https://www.youtube.com
access-control-allow-methods: GET, POST, OPTIONS
access-control-max-age: 86400
access-control-allow-credentials: true
access-control-allow-headers: X-Playlog-Web,authorization,origin,x-goog-authuser
content-type: text/plain; charset=UTF-8
date: Tue, 11 Feb 2025 12:55:26 GMT
server: Playlog
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT | 142.250.178.106 | 200 OK | 114 B |
URL POST HTTP/2jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT IP142.250.178.106:443
Requested byhttps://www.youtube.com/embed/jzXXCSGu7HM?controls=1&rel=0&playsinline=0&modestbranding=1&autoplay=0&enablejsapi=1&origin=https%3A%2F%2Fnkiri.com&widgetid=1 CertificateIssuerGoogle Trust Services Subjectupload.video.google.com Fingerprint91:3E:F9:90:4B:40:4C:8E:D9:11:EA:64:14:86:3D:AD:DB:41:93:5C ValidityMon, 20 Jan 2025 08:37:08 GMT - Mon, 14 Apr 2025 08:37:07 GMT
Hashaee5ce3ae5a4ec7881e978d03ad4f402 3c87ea55e577d7a082312f3d9548135498bda1b3 fd32cc4f23169fabc92a1c0b5c74291208a217fa0f473ce3f5965b528d4bf1c3
POST /$rpc/google.internal.waa.v1.Waa/GenerateIT HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Api-Key: AIzaSyDyT5W0Jh49F30Pqqtyfdf7pDLFKLJoAnw
Content-Type: application/json+protobuf
X-User-Agent: grpc-web-javascript/0.1
Content-Length: 866
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/json+protobuf; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: gzip
date: Tue, 11 Feb 2025 12:55:26 GMT
server: ESF
content-length: 114
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: https://www.youtube.com
access-control-allow-credentials: true
access-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| play.google.com/log?format=json&hasfast=true&authuser=0 | 142.250.74.110 | 200 OK | 131 B |
URL POST HTTP/3play.google.com/log?format=json&hasfast=true&authuser=0 IP142.250.74.110:443
Requested byhttps://www.youtube.com/embed/jzXXCSGu7HM?controls=1&rel=0&playsinline=0&modestbranding=1&autoplay=0&enablejsapi=1&origin=https%3A%2F%2Fnkiri.com&widgetid=1 CertificateIssuerGoogle Trust Services Subject*.google.com FingerprintAC:A6:80:49:BB:24:5F:7D:C3:BD:8D:4C:35:5E:DD:36:EB:F8:C1:95 ValidityMon, 20 Jan 2025 08:36:04 GMT - Mon, 14 Apr 2025 08:36:03 GMT
Hashca0b7e866005f6774d284b9f438ebfd2 53644f5ee3640189bdb223473ba6a2d46606c556 502e9680cfa78fa8be779cbf4f1947c8eaa3d43bf8c7464800ec772b2ddea358
POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1
Host: play.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-AuthUser: 0
Content-Type: application/x-www-form-urlencoded;charset=utf-8
Content-Length: 898
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
access-control-allow-origin: https://www.youtube.com
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
access-control-allow-headers: X-Playlog-Web
content-type: text/plain; charset=UTF-8
content-encoding: gzip
date: Tue, 11 Feb 2025 12:55:26 GMT
server: Playlog
content-length: 131
x-xss-protection: 0
x-frame-options: SAMEORIGIN
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| play.google.com/log?format=json&hasfast=true&authuser=0 | 142.250.74.110 | 200 OK | 131 B |
URL POST HTTP/3play.google.com/log?format=json&hasfast=true&authuser=0 IP142.250.74.110:443
Requested byhttps://www.youtube.com/embed/jzXXCSGu7HM?controls=1&rel=0&playsinline=0&modestbranding=1&autoplay=0&enablejsapi=1&origin=https%3A%2F%2Fnkiri.com&widgetid=1 CertificateIssuerGoogle Trust Services Subject*.google.com FingerprintAC:A6:80:49:BB:24:5F:7D:C3:BD:8D:4C:35:5E:DD:36:EB:F8:C1:95 ValidityMon, 20 Jan 2025 08:36:04 GMT - Mon, 14 Apr 2025 08:36:03 GMT
Hashca0b7e866005f6774d284b9f438ebfd2 53644f5ee3640189bdb223473ba6a2d46606c556 502e9680cfa78fa8be779cbf4f1947c8eaa3d43bf8c7464800ec772b2ddea358
POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1
Host: play.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-AuthUser: 0
Content-Type: application/x-www-form-urlencoded;charset=utf-8
Content-Length: 674
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
access-control-allow-origin: https://www.youtube.com
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
access-control-allow-headers: X-Playlog-Web
content-type: text/plain; charset=UTF-8
content-encoding: gzip
date: Tue, 11 Feb 2025 12:55:26 GMT
server: Playlog
content-length: 131
x-xss-protection: 0
x-frame-options: SAMEORIGIN
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| yt3.ggpht.com/XbePyK2PhhrMU8wjLc9dKf-b5xYxQylY0nDABqZiE73uqoRsdestPC8ev1GsfPumGSIcIv0yEbY=s68-c-k-c0x00ffffff-no-rj | 142.250.74.97 | 200 OK | 2.0 kB |
URL GET HTTP/2yt3.ggpht.com/XbePyK2PhhrMU8wjLc9dKf-b5xYxQylY0nDABqZiE73uqoRsdestPC8ev1GsfPumGSIcIv0yEbY=s68-c-k-c0x00ffffff-no-rj IP142.250.74.97:443
Requested byhttps://www.youtube.com/embed/jzXXCSGu7HM?controls=1&rel=0&playsinline=0&modestbranding=1&autoplay=0&enablejsapi=1&origin=https%3A%2F%2Fnkiri.com&widgetid=1 CertificateIssuerGoogle Trust Services Subject*.googleusercontent.com FingerprintC8:CC:73:3C:09:B6:EA:83:B3:FA:9E:8C:00:A3:C5:10:94:1A:0A:E7 ValidityMon, 20 Jan 2025 08:37:02 GMT - Mon, 14 Apr 2025 08:37:01 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 68x68, components 3 Hashc339c4bc53e1e07986073c32723023e5 608d66aa3d09462e1b46910aa6ed32fdba9e99d2 4de147ce6315c7bc6be312f99c5cff96c8dc7e41c2916c01a04195c28c7a8c83
GET /XbePyK2PhhrMU8wjLc9dKf-b5xYxQylY0nDABqZiE73uqoRsdestPC8ev1GsfPumGSIcIv0yEbY=s68-c-k-c0x00ffffff-no-rj HTTP/1.1
Host: yt3.ggpht.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
etag: "v1"
expires: Wed, 12 Feb 2025 12:55:26 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="channels4_profile.jpg"
x-content-type-options: nosniff
date: Tue, 11 Feb 2025 12:55:26 GMT
server: fife
content-length: 2028
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.youtube.com/generate_204?CsXHjQ | 142.250.74.110 | 204 No Content | 0 B |
URL GET HTTP/3www.youtube.com/generate_204?CsXHjQ IP142.250.74.110:443
Requested byhttps://www.youtube.com/embed/jzXXCSGu7HM?controls=1&rel=0&playsinline=0&modestbranding=1&autoplay=0&enablejsapi=1&origin=https%3A%2F%2Fnkiri.com&widgetid=1 CertificateIssuerGoogle Trust Services Subject*.google.com FingerprintAC:A6:80:49:BB:24:5F:7D:C3:BD:8D:4C:35:5E:DD:36:EB:F8:C1:95 ValidityMon, 20 Jan 2025 08:36:04 GMT - Mon, 14 Apr 2025 08:36:03 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /generate_204?CsXHjQ HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/jzXXCSGu7HM?controls=1&rel=0&playsinline=0&modestbranding=1&autoplay=0&enablejsapi=1&origin=https%3A%2F%2Fnkiri.com&widgetid=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 204 No Content
content-length: 0
cross-origin-resource-policy: cross-origin
date: Tue, 11 Feb 2025 12:55:26 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| play.google.com/log?format=json&hasfast=true&authuser=0 | 142.250.74.110 | 200 OK | 0 B |
URL POST HTTP/3play.google.com/log?format=json&hasfast=true&authuser=0 IP142.250.74.110:443
Requested byhttps://www.youtube.com/embed/jzXXCSGu7HM?controls=1&rel=0&playsinline=0&modestbranding=1&autoplay=0&enablejsapi=1&origin=https%3A%2F%2Fnkiri.com&widgetid=1 CertificateIssuerGoogle Trust Services Subject*.google.com FingerprintAC:A6:80:49:BB:24:5F:7D:C3:BD:8D:4C:35:5E:DD:36:EB:F8:C1:95 ValidityMon, 20 Jan 2025 08:36:04 GMT - Mon, 14 Apr 2025 08:36:03 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /log?format=json&hasfast=true&authuser=0 HTTP/1.1
Host: play.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: x-goog-authuser
Referer: https://www.youtube.com/
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
access-control-allow-origin: https://www.youtube.com
access-control-allow-methods: GET, POST, OPTIONS
access-control-max-age: 86400
access-control-allow-credentials: true
access-control-allow-headers: X-Playlog-Web,authorization,origin,x-goog-authuser
content-type: text/plain; charset=UTF-8
date: Tue, 11 Feb 2025 12:55:26 GMT
server: Playlog
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| play.google.com/log?format=json&hasfast=true&authuser=0 | 142.250.74.110 | 200 OK | 131 B |
URL POST HTTP/3play.google.com/log?format=json&hasfast=true&authuser=0 IP142.250.74.110:443
Requested byhttps://www.youtube.com/embed/jzXXCSGu7HM?controls=1&rel=0&playsinline=0&modestbranding=1&autoplay=0&enablejsapi=1&origin=https%3A%2F%2Fnkiri.com&widgetid=1 CertificateIssuerGoogle Trust Services Subject*.google.com FingerprintAC:A6:80:49:BB:24:5F:7D:C3:BD:8D:4C:35:5E:DD:36:EB:F8:C1:95 ValidityMon, 20 Jan 2025 08:36:04 GMT - Mon, 14 Apr 2025 08:36:03 GMT
Hashca0b7e866005f6774d284b9f438ebfd2 53644f5ee3640189bdb223473ba6a2d46606c556 502e9680cfa78fa8be779cbf4f1947c8eaa3d43bf8c7464800ec772b2ddea358
POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1
Host: play.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-AuthUser: 0
Content-Type: application/x-www-form-urlencoded;charset=utf-8
Content-Length: 416
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
access-control-allow-origin: https://www.youtube.com
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
access-control-allow-headers: X-Playlog-Web
content-type: text/plain; charset=UTF-8
content-encoding: gzip
date: Tue, 11 Feb 2025 12:55:26 GMT
server: Playlog
content-length: 131
x-xss-protection: 0
x-frame-options: SAMEORIGIN
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.youtube.com/youtubei/v1/log_event?alt=json | 142.250.74.110 | 200 OK | 31 B |
URL POST HTTP/3www.youtube.com/youtubei/v1/log_event?alt=json IP142.250.74.110:443
Requested byhttps://www.youtube.com/embed/jzXXCSGu7HM?controls=1&rel=0&playsinline=0&modestbranding=1&autoplay=0&enablejsapi=1&origin=https%3A%2F%2Fnkiri.com&widgetid=1 CertificateIssuerGoogle Trust Services Subject*.google.com FingerprintAC:A6:80:49:BB:24:5F:7D:C3:BD:8D:4C:35:5E:DD:36:EB:F8:C1:95 ValidityMon, 20 Jan 2025 08:36:04 GMT - Mon, 14 Apr 2025 08:36:03 GMT
Hash5e1fa6fd9abd549a576f3f24b1d3c8d4 d5335d7f7d33be6a0b663f03b2df4df2521c4a87 d7d5e54ad1e33d7ab49c664323ced79cb9723ff15e9764cd0edc3e15208e8336
POST /youtubei/v1/log_event?alt=json HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Request-Time: 1739278527716
Content-Type: application/json
X-Goog-Visitor-Id: Cgs2dldiUnU5MHhObyi8ka29BjIiCgJOTxIcEhgSFhMLFBUWFwwYGRobHB0eHw4PIBAREiEgYA%3D%3D
X-YouTube-Client-Name: 56
X-YouTube-Client-Version: 1.20250203.01.00.if7
X-YouTube-Device: cbr=Firefox&cbrver=134.0&ceng=Gecko&cengver=134.0&cos=Windows&cosver=10.0&cplatform=DESKTOP
X-YouTube-Page-CL: 722885260
X-YouTube-Page-Label: youtube.player.web_20250203_01_RC00
X-YouTube-Utc-Offset: 0
X-YouTube-Time-Zone: UTC
X-YouTube-Ad-Signals: dt=1739278524709&flash=0&frm=2&u_tz&u_his=2&u_h=1024&u_w=1280&u_ah=1024&u_aw=1280&u_cd=24&bc=31&bih=-12245933&biw=-12245933&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C1024%2C808%2C455&vis=1&wgl=true&ca_type=image
Content-Length: 12505
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/jzXXCSGu7HM?controls=1&rel=0&playsinline=0&modestbranding=1&autoplay=0&enablejsapi=1&origin=https%3A%2F%2Fnkiri.com&widgetid=1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/json; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: br
date: Tue, 11 Feb 2025 12:55:27 GMT
server: scaffolding on HTTPServer2
content-length: 31
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.youtube.com/youtubei/v1/log_event?alt=json | 142.250.74.110 | 200 OK | 31 B |
URL POST HTTP/3www.youtube.com/youtubei/v1/log_event?alt=json IP142.250.74.110:443
Requested byhttps://www.youtube.com/embed/jzXXCSGu7HM?controls=1&rel=0&playsinline=0&modestbranding=1&autoplay=0&enablejsapi=1&origin=https%3A%2F%2Fnkiri.com&widgetid=1 CertificateIssuerGoogle Trust Services Subject*.google.com FingerprintAC:A6:80:49:BB:24:5F:7D:C3:BD:8D:4C:35:5E:DD:36:EB:F8:C1:95 ValidityMon, 20 Jan 2025 08:36:04 GMT - Mon, 14 Apr 2025 08:36:03 GMT
Hash5e1fa6fd9abd549a576f3f24b1d3c8d4 d5335d7f7d33be6a0b663f03b2df4df2521c4a87 d7d5e54ad1e33d7ab49c664323ced79cb9723ff15e9764cd0edc3e15208e8336
POST /youtubei/v1/log_event?alt=json HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Request-Time: 1739278553982
Content-Type: application/json
X-Goog-Visitor-Id: Cgs2dldiUnU5MHhObyi8ka29BjIiCgJOTxIcEhgSFhMLFBUWFwwYGRobHB0eHw4PIBAREiEgYA%3D%3D
X-YouTube-Client-Name: 56
X-YouTube-Client-Version: 1.20250203.01.00.if7
X-YouTube-Device: cbr=Firefox&cbrver=134.0&ceng=Gecko&cengver=134.0&cos=Windows&cosver=10.0&cplatform=DESKTOP
X-YouTube-Page-CL: 722885260
X-YouTube-Page-Label: youtube.player.web_20250203_01_RC00
X-YouTube-Utc-Offset: 0
X-YouTube-Time-Zone: UTC
X-YouTube-Ad-Signals: dt=1739278524709&flash=0&frm=2&u_tz&u_his=2&u_h=1024&u_w=1280&u_ah=1024&u_aw=1280&u_cd=24&bc=31&bih=-12245933&biw=-12245933&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C1024%2C808%2C455&vis=1&wgl=true&ca_type=image
Content-Length: 1218
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/jzXXCSGu7HM?controls=1&rel=0&playsinline=0&modestbranding=1&autoplay=0&enablejsapi=1&origin=https%3A%2F%2Fnkiri.com&widgetid=1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/json; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: br
date: Tue, 11 Feb 2025 12:55:54 GMT
server: scaffolding on HTTPServer2
content-length: 31
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| my.rtmark.net/gid.js?userId=00816d29f80d45fffdc39025464427ed | 104.18.41.22 | 200 OK | 65 B |
URL GET HTTP/2my.rtmark.net/gid.js?userId=00816d29f80d45fffdc39025464427ed IP104.18.41.22:443
Requested byhttps://nkiri.com/download-the-man-from-uncle/ CertificateIssuerGoogle Trust Services Subjectmy.rtmark.net Fingerprint56:7F:53:10:57:2F:C3:F4:06:8B:DB:2F:C1:F7:6A:1D:68:59:14:3F ValiditySat, 04 Jan 2025 10:02:11 GMT - Fri, 04 Apr 2025 11:00:33 GMT
File typetroff or preprocessor input, ASCII text, with no line terminators Hasha2139041390e31c9b539c740d80460f1 8216e7ed9dca282f903a59e7443b6292e64c6a07 e383f5d67df0ab7a3bf394e8fca36f86b11364955eaba1f87ce0e69e1d7570b9
GET /gid.js?userId=00816d29f80d45fffdc39025464427ed HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://nkiri.com
DNT: 1
Connection: keep-alive
Referer: https://nkiri.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 11 Feb 2025 12:55:23 GMT
content-type: application/json; charset=utf-8
access-control-allow-origin: https://nkiri.com
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
timing-allow-origin: *, *
set-cookie: ID=00816d29f80d45fffdc39025464427ed; expires=Wed, 11 Feb 2026 12:55:23 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 91047e330af456a5-OSL
content-encoding: gzip
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| www.youtube.com/iframe_api | 142.250.74.110 | 200 OK | 993 B |
URL GET HTTP/2www.youtube.com/iframe_api IP142.250.74.110:443
Requested byhttps://nkiri.com/download-the-man-from-uncle/ CertificateIssuerGoogle Trust Services Subject*.google.com FingerprintAC:A6:80:49:BB:24:5F:7D:C3:BD:8D:4C:35:5E:DD:36:EB:F8:C1:95 ValidityMon, 20 Jan 2025 08:36:04 GMT - Mon, 14 Apr 2025 08:36:03 GMT
File typeJavaScript source, ASCII text, with very long lines (1025), with no line terminators Hash8bb780491a1adaa60b712470d837ca6f 9d964399449acab30efe364649a8586925c14551 a7d25c12244165d0279ea52a160814f6c0617b530d2fe1a1f9e3db85d41b0959
GET /iframe_api HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nkiri.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
x-content-type-options: nosniff
expires: Tue, 11 Feb 2025 12:55:23 GMT
date: Tue, 11 Feb 2025 12:55:23 GMT
cache-control: private, max-age=0
strict-transport-security: max-age=31536000
x-frame-options: SAMEORIGIN
cross-origin-resource-policy: cross-origin
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*
report-to: {"group":"youtube_main","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube_main"}]}
content-security-policy: require-trusted-types-for 'script'
origin-trial: AmhMBR6zCLzDDxpW+HfpP67BqwIknWnyMOXOQGfzYswFmJe+fgaI6XZgAzcxOrzNtP7hEDsOo1jdjFnVr2IdxQ4AAAB4eyJvcmlnaW4iOiJodHRwczovL3lvdXR1YmUuY29tOjQ0MyIsImZlYXR1cmUiOiJXZWJWaWV3WFJlcXVlc3RlZFdpdGhEZXByZWNhdGlvbiIsImV4cGlyeSI6MTc1ODA2NzE5OSwiaXNTdWJkb21haW4iOnRydWV9
cross-origin-opener-policy-report-only: same-origin; report-to="youtube_main"
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657?hl=en for more info."
content-encoding: br
server: ESF
x-xss-protection: 0
set-cookie: YSC=osH5-UTyFKw; Domain=.youtube.com; Path=/; Secure; HttpOnly; SameSite=none
VISITOR_INFO1_LIVE=YR39Cpg2fuc; Domain=.youtube.com; Expires=Sun, 10-Aug-2025 12:55:23 GMT; Path=/; Secure; HttpOnly; SameSite=none
VISITOR_PRIVACY_METADATA=CgJOTxIcEhgSFhMLFBUWFwwYGRobHB0eHw4PIBAREiEgSQ%3D%3D; Domain=.youtube.com; Expires=Sun, 10-Aug-2025 12:55:23 GMT; Path=/; Secure; HttpOnly; SameSite=none
__Secure-ROLLOUT_TOKEN=COjc8bTj1YmiNBDqgce01buLAxjqgce01buLAw%3D%3D; Domain=youtube.com; Expires=Sun, 10-Aug-2025 12:55:23 GMT; Path=/; Secure; HttpOnly; SameSite=none; Partitioned
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| zogrookarter.com/5/7677500/?oo=1&js_build=iclick-v1.1082.0&dmn=jouwaikekaivep.net&tt=2&ix=0 | 139.45.197.243 | 200 OK | 4.1 kB |
URL GET HTTP/2zogrookarter.com/5/7677500/?oo=1&js_build=iclick-v1.1082.0&dmn=jouwaikekaivep.net&tt=2&ix=0 IP139.45.197.243:443
Requested byhttps://nkiri.com/download-the-man-from-uncle/ CertificateIssuerLet's Encrypt Subjectzogrookarter.com FingerprintB8:78:2E:92:46:FB:1D:0E:D8:71:2A:05:0B:94:E8:FB:7B:FD:74:E0 ValidityTue, 21 Jan 2025 13:48:06 GMT - Mon, 21 Apr 2025 13:48:05 GMT
File typetroff or preprocessor input, ASCII text, with very long lines (4129), with no line terminators Hash85a15130ee564ce127e03e7eac386dc3 5922bbf2234026a2c632fcd2d9568bfa5db77302 62ec1ae3c426b4911e7eaa8e5d2ddadc3508e7902a857ebd545e4959469fa963
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /5/7677500/?oo=1&js_build=iclick-v1.1082.0&dmn=jouwaikekaivep.net&tt=2&ix=0 HTTP/1.1
Host: zogrookarter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://nkiri.com
DNT: 1
Connection: keep-alive
Referer: https://nkiri.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 11 Feb 2025 12:55:23 GMT
content-type: application/json
x-trace-id: 51bb5b7f1fa0ccdfe7a16e3529118cb6
link: <https://my.rtmark.net>; rel="preconnect dns-prefetch"
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
access-control-allow-origin: https://nkiri.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace, favicon
access-control-max-age: 86400
timing-allow-origin: *
set-cookie: OAID=00816d2fd1b0413fe575d7867d29e7f6; expires=Wed, 11 Feb 2026 12:55:23 GMT; path=/; secure; SameSite=None
oaidts=1739278523; expires=Wed, 11 Feb 2026 12:55:23 GMT; path=/; secure; SameSite=None
syncedCookie=; expires=Tue, 10 Nov 2009 23:00:00 GMT
pragma: no-cache, no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT, Mon, 26 Jul 1997 05:00:00 GMT
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| weegraphooph.net/5/6649428/?bnr=1 | 139.45.197.106 | 200 OK | 76 kB |
URL GET HTTP/2weegraphooph.net/5/6649428/?bnr=1 IP139.45.197.106:443
Requested byhttps://nkiri.com/download-the-man-from-uncle/ CertificateIssuerLet's Encrypt Subjectweegraphooph.net Fingerprint8A:62:1B:14:6E:42:92:BB:71:FD:AF:00:D0:72:7E:B0:20:AF:C6:97 ValiditySat, 01 Feb 2025 05:22:13 GMT - Fri, 02 May 2025 05:22:12 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Hashf138b5be61e1262e25433f662ff7d2a0 378ba8fb0c17915e58cc44ef8e070e27bc40840b 196a8cea337f7dbd226861f43a3ed78a313511ef1a5544e87b6c7bfcb187114f
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /5/6649428/?bnr=1 HTTP/1.1
Host: weegraphooph.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 11 Feb 2025 12:55:23 GMT
content-type: application/javascript
x-trace-id: 43f8341d630812f3905e693991e4fe14
link: <https://my.rtmark.net>; rel="preconnect dns-prefetch"
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace, favicon
access-control-max-age: 86400
timing-allow-origin: *
set-cookie: OAID=00816d29f80d45fffdc39025464427ed; expires=Wed, 11 Feb 2026 12:55:23 GMT; path=/; secure; SameSite=None
oaidts=1739278523; expires=Wed, 11 Feb 2026 12:55:23 GMT; path=/; secure; SameSite=None
syncedCookie=; expires=Tue, 10 Nov 2009 23:00:00 GMT
pragma: no-cache, no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT, Mon, 26 Jul 1997 05:00:00 GMT
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| nkiri.com/wp-content/uploads/2024/11/cropped-logo-192x192.png | 31.172.80.216 | 200 OK | 8.5 kB |
URL GET HTTP/3nkiri.com/wp-content/uploads/2024/11/cropped-logo-192x192.png IP31.172.80.216:443
Requested byhttps://nkiri.com/download-the-man-from-uncle/ CertificateIssuerLet's Encrypt Subjectnkiri.com Fingerprint5D:BC:4A:DE:FE:00:AB:7F:01:71:EF:81:CE:57:79:FC:0C:E4:1E:B8 ValidityFri, 07 Feb 2025 18:08:52 GMT - Thu, 08 May 2025 18:08:51 GMT
File typePNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced Hash0b254f84c1449de3081f42ffb655bdbb ccfc1d88c6eae2113038f6b75e409b01375ea0b9 f8349948c5d7b4ab28fef815c078d4f814c514157dedb6db484e768e66aaa7e1
GET /wp-content/uploads/2024/11/cropped-logo-192x192.png HTTP/1.1
Host: nkiri.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nkiri.com/download-the-man-from-uncle/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Tue, 18 Feb 2025 12:55:23 GMT
content-type: image/png
last-modified: Tue, 10 Dec 2024 08:31:18 GMT
etag: "210a-6757fc56-55a4411bb26fb191;;;"
accept-ranges: bytes
content-length: 8458
date: Tue, 11 Feb 2025 12:55:23 GMT
server: LiteSpeed
|
|
| i.ytimg.com/vi/jzXXCSGu7HM/maxresdefault.jpg | 142.250.178.118 | 200 OK | 176 kB |
URL GET HTTP/2i.ytimg.com/vi/jzXXCSGu7HM/maxresdefault.jpg IP142.250.178.118:443
Requested byhttps://www.youtube.com/embed/jzXXCSGu7HM?controls=1&rel=0&playsinline=0&modestbranding=1&autoplay=0&enablejsapi=1&origin=https%3A%2F%2Fnkiri.com&widgetid=1 CertificateIssuerGoogle Trust Services Subjectedgestatic.com Fingerprint2E:1F:FC:BB:8C:34:37:75:5C:DF:74:3A:05:23:52:2F:6C:F3:9F:76 ValidityMon, 20 Jan 2025 08:36:03 GMT - Mon, 14 Apr 2025 08:36:02 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1280x720, components 3 Size176 kB (175970 bytes) Hash4fadd3cfd8d160608d58a82860b6e212 447b3d62c2075aedadbdc902d76a7ec57a89a003 d25a05d6d9ea59ccc689e6bc5b5f1e9725852593326b2a880b165102744d1fad
GET /vi/jzXXCSGu7HM/maxresdefault.jpg HTTP/1.1
Host: i.ytimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-type: image/jpeg
vary: Origin
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
timing-allow-origin: *
content-length: 175970
date: Tue, 11 Feb 2025 12:55:25 GMT
expires: Tue, 11 Feb 2025 14:55:25 GMT
cache-control: public, max-age=7200
etag: "1446501604"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 | 142.250.74.35 | 200 OK | 15 kB |
URL GET HTTP/2fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 IP142.250.74.35:443
Requested byhttps://www.youtube.com/embed/jzXXCSGu7HM?controls=1&rel=0&playsinline=0&modestbranding=1&autoplay=0&enablejsapi=1&origin=https%3A%2F%2Fnkiri.com&widgetid=1 CertificateIssuerGoogle Trust Services Subject*.gstatic.com Fingerprint62:57:FE:D4:36:DB:03:15:19:B1:2C:50:42:64:6E:D7:C2:32:4F:B6 ValidityMon, 20 Jan 2025 08:37:07 GMT - Mon, 14 Apr 2025 08:37:06 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 15344, version 1.0 Hash5d4aeb4e5f5ef754e307d7ffaef688bd 06db651cdf354c64a7383ea9c77024ef4fb4cef8 3e253b66056519aa065b00a453bac37ac5ed8f3e6fe7b542e93a9dcdcc11d0bc
GET /s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15344
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 06 Feb 2025 10:20:38 GMT
expires: Fri, 06 Feb 2026 10:20:38 GMT
cache-control: public, max-age=31536000
age: 441286
last-modified: Mon, 16 Oct 2017 17:32:55 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| jouwaikekaivep.net/tag.min.js | 188.114.97.1 | 200 OK | 71 kB |
URL GET HTTP/2jouwaikekaivep.net/tag.min.js IP188.114.97.1:443
Requested byhttps://nkiri.com/download-the-man-from-uncle/ CertificateIssuerGoogle Trust Services Subjectjouwaikekaivep.net Fingerprint34:BD:3A:05:AC:DE:0A:BA:D3:A4:26:99:EA:EE:67:C9:A1:4B:FD:9D ValiditySat, 28 Dec 2024 19:58:54 GMT - Fri, 28 Mar 2025 20:56:32 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Hashaefd81544c97d3f9cb48518481c91ee9 217b24f54082c7ed1c70c5ee4f3e679e0a71bb06 45762d2ce9c7c15fefca616c32233535c5c77b58817aae8adc4999a3cc65947b
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /tag.min.js HTTP/1.1
Host: jouwaikekaivep.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nkiri.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 11 Feb 2025 12:55:22 GMT
content-type: application/javascript
x-trace-id: 6718572d1e38403b6e9365c6c4517d09
cache-control: public, max-age=3600, s-maxage=1800
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace, favicon
access-control-max-age: 86400
timing-allow-origin: *
content-encoding: gzip
cf-cache-status: HIT
age: 956
last-modified: Tue, 11 Feb 2025 12:39:26 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=30uwodsOJ6GW9Gqp2Y4Ic4TA5vhqnKfwyT6y7L6Fi2o2mI0ytnusRsy7Dq6mYKXsnyDqDI8gieDEFrZWHlVR1HaK3uIwNHvWhoJB4uiFQLNhYHX0e6WiKJF2E4AI3HQ2pLCWalk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 91047e2e49f2b517-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=701&min_rtt=540&rtt_var=253&sent=7&recv=10&lost=0&retrans=0&sent_bytes=3293&recv_bytes=1194&delivery_rate=7581151&cwnd=253&unsent_bytes=0&cid=c82d724ea2145f66&ts=36&x=0"
X-Firefox-Spdy: h2
|
|
| fonts.googleapis.com/css?family=Roboto%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CRoboto+Slab%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic&display=auto&ver=6.7.1 | 142.250.74.10 | 200 OK | 118 kB |
URL GET HTTP/2fonts.googleapis.com/css?family=Roboto%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CRoboto+Slab%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic&display=auto&ver=6.7.1 IP142.250.74.10:443
Requested byhttps://nkiri.com/download-the-man-from-uncle/ CertificateIssuerGoogle Trust Services Subjectupload.video.google.com Fingerprint91:3E:F9:90:4B:40:4C:8E:D9:11:EA:64:14:86:3D:AD:DB:41:93:5C ValidityMon, 20 Jan 2025 08:37:08 GMT - Mon, 14 Apr 2025 08:37:07 GMT
File typeASCII text, with very long lines (1572) Size118 kB (118179 bytes) Hash197c586e3d989eef70d1030d010f7035 9fef5f10e5814a35d081aa4e5221c1e0aeba9e11 83a97033414ef0d0bf41f819757f7de3ffb976d3efd9b831c629a9db3936603a
GET /css?family=Roboto%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CRoboto+Slab%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic&display=auto&ver=6.7.1 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nkiri.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Tue, 11 Feb 2025 12:55:22 GMT
date: Tue, 11 Feb 2025 12:55:22 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|