504 B IP
ASN #20940 Akamai International B.V.
Hash 7335e53b6e780bcc46feb27b6421e625
d5405503dbb1d5d734473133fdd449be49ef8ef0
3fe77d2e06518aee992b779c45a0b57d1353d7e9232e57d99d79bfdfaa488e34
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "3FE77D2E06518AEE992B779C45A0B57D1353D7E9232E57D99D79BFDFAA488E34"
Last-Modified: Mon, 29 Jul 2024 18:58:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4384
Expires: Tue, 30 Jul 2024 21:38:10 GMT
Date: Tue, 30 Jul 2024 20:25:06 GMT
Connection: keep-alive
504 B IP
ASN #20940 Akamai International B.V.
Hash 82b2663199053445571dc9d67e7e50bf
8b3bcfd732c9742dbccdc0469b6291fda621054e
3a1f6dcd614b189fea9d453e4a6101aed280eae92c612c243c4f01a6cccb151c
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "3A1F6DCD614B189FEA9D453E4A6101AED280EAE92C612C243C4F01A6CCCB151C"
Last-Modified: Mon, 29 Jul 2024 19:06:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2837
Expires: Tue, 30 Jul 2024 21:12:23 GMT
Date: Tue, 30 Jul 2024 20:25:06 GMT
Connection: keep-alive
200 OK 4.3 kB URL User Request GET HTTP/2 IP
ASN #63949 Akamai Connected Cloud
Certificate IssuerLet's Encrypt
Subjectold.sermitsiaq.ag
Fingerprint9A:1E:08:6F:51:5A:ED:71:4B:70:70:2A:91:24:38:91:DB:68:AC:CC
ValiditySat, 13 Jul 2024 17:46:17 GMT - Fri, 11 Oct 2024 17:46:16 GMT
File type HTML document, Unicode text, UTF-8 text, with very long lines (399)
Hash ae976a2695583a8a3c5b1e227677ba79
e4044bae3177ea559b0d678ceb4c6577ab7cd41e
b2da44c93fb0ac76fe22c5c1c6a5e2e910f019d6b6288b75ae021ec5151ade9c
GET / HTTP/1.1
Host: old.sermitsiaq.ag
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
last-modified: Sun, 24 Sep 2023 18:18:12 GMT
etag: "6344-6061edd5df9e8-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 4336
content-type: text/html
date: Tue, 30 Jul 2024 20:25:06 GMT
server: Apache
X-Firefox-Spdy: h2
GET old.sermitsiaq.ag/en/detailed-oc-template.html
200 OK 6.1 kB URL GET HTTP/2 old.sermitsiaq.ag/en/detailed-oc-template.html
IP
ASN #63949 Akamai Connected Cloud
Requested by https://old.sermitsiaq.ag/
Certificate IssuerLet's Encrypt
Subjectold.sermitsiaq.ag
Fingerprint9A:1E:08:6F:51:5A:ED:71:4B:70:70:2A:91:24:38:91:DB:68:AC:CC
ValiditySat, 13 Jul 2024 17:46:17 GMT - Fri, 11 Oct 2024 17:46:16 GMT
File type HTML document, Unicode text, UTF-8 text, with very long lines (1763), with CRLF, LF line terminators
Hash e91d2f1d048ae71d499ff4d195a5f5bc
d543414d7ee662e7ddca0705062720a414d83881
349ff2fbfc281f7aa4e70fb701cc0e8dfea73d629a8970923a1303dac53f80f0
GET /en/detailed-oc-template.html HTTP/1.1
Host: old.sermitsiaq.ag
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://old.sermitsiaq.ag/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Sun, 24 Sep 2023 06:09:57 GMT
etag: "80fa-60614b0e25740-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 6105
content-type: text/html
date: Tue, 30 Jul 2024 20:25:07 GMT
server: Apache
X-Firefox-Spdy: h2
GET old.sermitsiaq.ag/en/project-discovery-template.html
200 OK 5.7 kB URL GET HTTP/2 old.sermitsiaq.ag/en/project-discovery-template.html
IP
ASN #63949 Akamai Connected Cloud
Requested by https://old.sermitsiaq.ag/
Certificate IssuerLet's Encrypt
Subjectold.sermitsiaq.ag
Fingerprint9A:1E:08:6F:51:5A:ED:71:4B:70:70:2A:91:24:38:91:DB:68:AC:CC
ValiditySat, 13 Jul 2024 17:46:17 GMT - Fri, 11 Oct 2024 17:46:16 GMT
File type HTML document, Unicode text, UTF-8 text, with very long lines (1402), with CRLF, LF line terminators
Hash fa1934b212616ddc4b936cae211216c5
54841628d4aa1ae962132acdc9c98a7b4f3a2726
193e99803bf7f9be1986260edb40be4b1dff591d8a12e0dd7f0ba08a07f5acf5
GET /en/project-discovery-template.html HTTP/1.1
Host: old.sermitsiaq.ag
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://old.sermitsiaq.ag/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Sun, 24 Sep 2023 04:44:18 GMT
etag: "7a63-606137e936c80-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 5680
content-type: text/html
date: Tue, 30 Jul 2024 20:25:07 GMT
server: Apache
X-Firefox-Spdy: h2
GET old.sermitsiaq.ag/en/printable-puff-htv.html
200 OK 5.2 kB URL GET HTTP/2 old.sermitsiaq.ag/en/printable-puff-htv.html
IP
ASN #63949 Akamai Connected Cloud
Requested by https://old.sermitsiaq.ag/
Certificate IssuerLet's Encrypt
Subjectold.sermitsiaq.ag
Fingerprint9A:1E:08:6F:51:5A:ED:71:4B:70:70:2A:91:24:38:91:DB:68:AC:CC
ValiditySat, 13 Jul 2024 17:46:17 GMT - Fri, 11 Oct 2024 17:46:16 GMT
File type HTML document, Unicode text, UTF-8 text, with very long lines (1410), with CRLF, LF line terminators
Hash 090dee7fa5790af334f66c99f6ce609f
04efe75d30bc5fabdaf6affdc176fee2781bff76
790e5af657693ee77ad67b236e4a06a7ed0d44f0000ca7a382ff3914dc130d27
GET /en/printable-puff-htv.html HTTP/1.1
Host: old.sermitsiaq.ag
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://old.sermitsiaq.ag/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Sun, 24 Sep 2023 03:33:34 GMT
etag: "77a1-60612819d1f80-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 5158
content-type: text/html
date: Tue, 30 Jul 2024 20:25:07 GMT
server: Apache
X-Firefox-Spdy: h2
GET old.sermitsiaq.ag/en/org-chart-ppt-template-free-download.html
200 OK 5.6 kB URL GET HTTP/2 old.sermitsiaq.ag/en/org-chart-ppt-template-free-download.html
IP
ASN #63949 Akamai Connected Cloud
Requested by https://old.sermitsiaq.ag/
Certificate IssuerLet's Encrypt
Subjectold.sermitsiaq.ag
Fingerprint9A:1E:08:6F:51:5A:ED:71:4B:70:70:2A:91:24:38:91:DB:68:AC:CC
ValiditySat, 13 Jul 2024 17:46:17 GMT - Fri, 11 Oct 2024 17:46:16 GMT
File type HTML document, Unicode text, UTF-8 text, with very long lines (1658), with CRLF, LF line terminators
Hash c6861546d39e43c7cc492e973876e4a9
8a580882c7083387a643d2369c69d027070698c1
8698ece35aed15339d93662c922b52420ba93b26080be330364ddc6cbc212bb9
GET /en/org-chart-ppt-template-free-download.html HTTP/1.1
Host: old.sermitsiaq.ag
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://old.sermitsiaq.ag/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Sun, 24 Sep 2023 05:19:57 GMT
etag: "7e7b-60613fe11f940-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 5631
content-type: text/html
date: Tue, 30 Jul 2024 20:25:07 GMT
server: Apache
X-Firefox-Spdy: h2
GET old.sermitsiaq.ag/en/printable-fabric-slipper-pattern.html
200 OK 6.4 kB URL GET HTTP/2 old.sermitsiaq.ag/en/printable-fabric-slipper-pattern.html
IP
ASN #63949 Akamai Connected Cloud
Requested by https://old.sermitsiaq.ag/
Certificate IssuerLet's Encrypt
Subjectold.sermitsiaq.ag
Fingerprint9A:1E:08:6F:51:5A:ED:71:4B:70:70:2A:91:24:38:91:DB:68:AC:CC
ValiditySat, 13 Jul 2024 17:46:17 GMT - Fri, 11 Oct 2024 17:46:16 GMT
File type HTML document, Unicode text, UTF-8 text, with very long lines (1748), with CRLF, LF line terminators
Hash eff5bb7b845c8e3536cfb94fe33b9099
9602ea9aa6cb94a3bf14ccf006d7f5280ffa20a8
2254846c6a9ca89b6393f6f26fc8d20cfb0bc8ad678e3da8a9749d9ed7a71e3a
GET /en/printable-fabric-slipper-pattern.html HTTP/1.1
Host: old.sermitsiaq.ag
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://old.sermitsiaq.ag/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Sun, 24 Sep 2023 04:58:37 GMT
etag: "7b9d-60613b1c6b940-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 6429
content-type: text/html
date: Tue, 30 Jul 2024 20:25:07 GMT
server: Apache
X-Firefox-Spdy: h2
GET old.sermitsiaq.ag/en/clickup-dashboard-templates.html
200 OK 5.9 kB URL GET HTTP/2 old.sermitsiaq.ag/en/clickup-dashboard-templates.html
IP
ASN #63949 Akamai Connected Cloud
Requested by https://old.sermitsiaq.ag/
Certificate IssuerLet's Encrypt
Subjectold.sermitsiaq.ag
Fingerprint9A:1E:08:6F:51:5A:ED:71:4B:70:70:2A:91:24:38:91:DB:68:AC:CC
ValiditySat, 13 Jul 2024 17:46:17 GMT - Fri, 11 Oct 2024 17:46:16 GMT
File type HTML document, Unicode text, UTF-8 text, with very long lines (1436), with CRLF, LF line terminators
Hash 31cb99b49a0bf38678bc4dfb4b2bf0ca
a47d1c96f428e746119a3b6e6aef84580dea4ac6
85f620242581b2b4b0ffb0d7d8069b20b2103c72111bc7fa7e7591755d324e61
GET /en/clickup-dashboard-templates.html HTTP/1.1
Host: old.sermitsiaq.ag
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://old.sermitsiaq.ag/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Sun, 24 Sep 2023 04:21:17 GMT
etag: "74af-606132c430940-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 5896
content-type: text/html
date: Tue, 30 Jul 2024 20:25:07 GMT
server: Apache
X-Firefox-Spdy: h2
GET old.sermitsiaq.ag/en/buy-sell-agreement-template.html
200 OK 5.1 kB URL GET HTTP/2 old.sermitsiaq.ag/en/buy-sell-agreement-template.html
IP
ASN #63949 Akamai Connected Cloud
Requested by https://old.sermitsiaq.ag/
Certificate IssuerLet's Encrypt
Subjectold.sermitsiaq.ag
Fingerprint9A:1E:08:6F:51:5A:ED:71:4B:70:70:2A:91:24:38:91:DB:68:AC:CC
ValiditySat, 13 Jul 2024 17:46:17 GMT - Fri, 11 Oct 2024 17:46:16 GMT
File type HTML document, Unicode text, UTF-8 text, with very long lines (1401), with CRLF, LF line terminators
Hash ac360179bc39baf6783a1a8f477168fd
2eca9f340f41ddd3b735b6692f48b812e748c214
d164f85b8099eb7bbe3090bf1a03e82f7ac89832b50db951036a48f1a6193c59
GET /en/buy-sell-agreement-template.html HTTP/1.1
Host: old.sermitsiaq.ag
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://old.sermitsiaq.ag/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Sun, 24 Sep 2023 04:47:40 GMT
etag: "78eb-606138a9db300-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 5133
content-type: text/html
date: Tue, 30 Jul 2024 20:25:07 GMT
server: Apache
X-Firefox-Spdy: h2
GET old.sermitsiaq.ag/en/hypnotherapy-website-templates.html
200 OK 4.9 kB URL GET HTTP/2 old.sermitsiaq.ag/en/hypnotherapy-website-templates.html
IP
ASN #63949 Akamai Connected Cloud
Requested by https://old.sermitsiaq.ag/
Certificate IssuerLet's Encrypt
Subjectold.sermitsiaq.ag
Fingerprint9A:1E:08:6F:51:5A:ED:71:4B:70:70:2A:91:24:38:91:DB:68:AC:CC
ValiditySat, 13 Jul 2024 17:46:17 GMT - Fri, 11 Oct 2024 17:46:16 GMT
File type HTML document, Unicode text, UTF-8 text, with very long lines (1350), with CRLF, LF line terminators
Hash d6680a6147290a29e5287013ba330c5d
9ab24bcabe4bfd56e003c8b221e7b0e92aaaa52f
8e93552022ac86629de4fbcf472e583cef125cf14961b95791d3a1071c5644e5
GET /en/hypnotherapy-website-templates.html HTTP/1.1
Host: old.sermitsiaq.ag
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://old.sermitsiaq.ag/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Sun, 24 Sep 2023 06:07:01 GMT
etag: "770a-60614a664cb40-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 4882
content-type: text/html
date: Tue, 30 Jul 2024 20:25:07 GMT
server: Apache
X-Firefox-Spdy: h2
GET old.sermitsiaq.ag/en/printable-activities-for-autism.html
200 OK 6.3 kB URL GET HTTP/2 old.sermitsiaq.ag/en/printable-activities-for-autism.html
IP
ASN #63949 Akamai Connected Cloud
Requested by https://old.sermitsiaq.ag/
Certificate IssuerLet's Encrypt
Subjectold.sermitsiaq.ag
Fingerprint9A:1E:08:6F:51:5A:ED:71:4B:70:70:2A:91:24:38:91:DB:68:AC:CC
ValiditySat, 13 Jul 2024 17:46:17 GMT - Fri, 11 Oct 2024 17:46:16 GMT
File type HTML document, Unicode text, UTF-8 text, with very long lines (1735), with CRLF, LF line terminators
Hash 4ac2ffd4461e1ab8f2d290843df98a7e
2b2c482561dfa61e8840d69b770e5f2fa6950976
3ae6f0047d8ab93947ccfa46dd0459cf2fae841543cef14c7ff31e8227a8e248
GET /en/printable-activities-for-autism.html HTTP/1.1
Host: old.sermitsiaq.ag
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://old.sermitsiaq.ag/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Sun, 24 Sep 2023 04:27:40 GMT
etag: "7ea4-6061343172700-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 6345
content-type: text/html
date: Tue, 30 Jul 2024 20:25:07 GMT
server: Apache
X-Firefox-Spdy: h2
GET old.sermitsiaq.ag/en/duck-coloring-pages-printable.html
200 OK 5.3 kB URL GET HTTP/2 old.sermitsiaq.ag/en/duck-coloring-pages-printable.html
IP
ASN #63949 Akamai Connected Cloud
Requested by https://old.sermitsiaq.ag/
Certificate IssuerLet's Encrypt
Subjectold.sermitsiaq.ag
Fingerprint9A:1E:08:6F:51:5A:ED:71:4B:70:70:2A:91:24:38:91:DB:68:AC:CC
ValiditySat, 13 Jul 2024 17:46:17 GMT - Fri, 11 Oct 2024 17:46:16 GMT
File type HTML document, Unicode text, UTF-8 text, with very long lines (1625), with CRLF, LF line terminators
Hash 90617bc2f4b75d76421546cf8bd45f39
b9f11c23aaffeb8af6e99c54ca157aae259a71a9
9866957fa7453b39e64c6c8c41a235b8e4b1a25b8cd1454007d7c615d9a6ace0
GET /en/duck-coloring-pages-printable.html HTTP/1.1
Host: old.sermitsiaq.ag
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://old.sermitsiaq.ag/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Sun, 24 Sep 2023 03:38:51 GMT
etag: "7ad7-60612948228c0-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 5275
content-type: text/html
date: Tue, 30 Jul 2024 20:25:07 GMT
server: Apache
X-Firefox-Spdy: h2
471 B IP
Hash 52b438cbba4e310fcb6205fda94af2c7
c0dec35ef01ecc6d86f1a5e86e0e937d4ef669d6
a95699f3839f72f21768347aa108f8a1444aee5d5227c04921f69a05beb74406
POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 30 Jul 2024 20:25:07 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
GET apis.google.com/js/plusone.js
200 OK 22 kB URL GET HTTP/2 apis.google.com/js/plusone.js
IP
Requested by https://old.sermitsiaq.ag/
Certificate IssuerGoogle Trust Services
Subject*.apis.google.com
Fingerprint9E:C8:F3:EF:58:21:E5:16:5C:FD:85:C9:52:53:EE:3A:96:11:3F:BF
ValidityTue, 30 Jul 2024 12:52:29 GMT - Tue, 22 Oct 2024 12:52:28 GMT
File type JavaScript source, ASCII text, with very long lines (2767)
Hash 15a42f20a492648f7c1595ea6bc99244
50f3505e5459985af041ec26a6b412cfc2dc1cb5
03998e7490f0e8f7d8490dc68ee8020101ddb4e8418567dbaa93426d15b721cb
GET /js/plusone.js HTTP/1.1
Host: apis.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://old.sermitsiaq.ag/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
access-control-allow-origin: *
content-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gapi-team
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="gapi-team"
report-to: {"group":"gapi-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gapi-team"}]}
timing-allow-origin: *
content-length: 21629
date: Tue, 30 Jul 2024 20:25:07 GMT
expires: Tue, 30 Jul 2024 20:25:07 GMT
cache-control: private, max-age=1800, stale-while-revalidate=1800
etag: "9ba74e3c29037567"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
471 B IP
Hash 1c70ec8c9f44884f03f5e8c102041279
6e430d499b9be5c8eea974dae2eb9f34c101d390
3014f55cca7621f59f82faa4db5d2871f0516020da43ebb5552415b6aa266654
POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 30 Jul 2024 20:25:07 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
GET xss.my.id/theme/batman/body.js
200 OK 332 B URL GET HTTP/2 xss.my.id/theme/batman/body.js
IP
ASN #14061 DIGITALOCEAN-ASN
Requested by https://old.sermitsiaq.ag/
Certificate IssuerLet's Encrypt
Subjectxss.my.id
Fingerprint6B:C5:E7:D6:BE:34:9D:AA:28:AD:7D:2E:B0:7F:40:59:2A:42:8E:38
ValidityTue, 25 Jun 2024 12:09:33 GMT - Mon, 23 Sep 2024 12:09:32 GMT
File type HTML document, ASCII text
Hash 47d75909b1d2a6fcefa20244c68d0ae5
2dc263bf10600d745ff057ed3e5b94c0ca48ef6f
cdabb4930355af23406648d3ae6e0c6f798bb4b521d1aa87aceb0cd284fe8946
GET /theme/batman/body.js HTTP/1.1
Host: xss.my.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://old.sermitsiaq.ag/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
last-modified: Fri, 26 Apr 2024 20:36:35 GMT
etag: "296-61705dc167ac0-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 332
content-type: text/javascript
date: Tue, 30 Jul 2024 20:25:07 GMT
server: Apache
X-Firefox-Spdy: h2
GET xss.my.id/theme/batman/head.js
200 OK 158 B URL GET HTTP/2 xss.my.id/theme/batman/head.js
IP
ASN #14061 DIGITALOCEAN-ASN
Requested by https://old.sermitsiaq.ag/
Certificate IssuerLet's Encrypt
Subjectxss.my.id
Fingerprint6B:C5:E7:D6:BE:34:9D:AA:28:AD:7D:2E:B0:7F:40:59:2A:42:8E:38
ValidityTue, 25 Jun 2024 12:09:33 GMT - Mon, 23 Sep 2024 12:09:32 GMT
File type HTML document, ASCII text
Hash 3f74bbd5a5f1ff144d73d2c538df14ce
296641eea2541fbb97aacb7d9245da4dcf9bdec4
8b90117611bb8564ff3e14f13c7034a79977a95e6ffd4dedbdf429cedbfdd1f0
GET /theme/batman/head.js HTTP/1.1
Host: xss.my.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://old.sermitsiaq.ag/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
last-modified: Fri, 15 Sep 2023 18:46:24 GMT
etag: "ac-6056a3596a000-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 158
content-type: text/javascript
date: Tue, 30 Jul 2024 20:25:07 GMT
server: Apache
X-Firefox-Spdy: h2
GET xss.my.id/theme/batman/headcode.js?v=82398
200 OK 754 B URL GET HTTP/2 xss.my.id/theme/batman/headcode.js?v=82398
IP
ASN #14061 DIGITALOCEAN-ASN
Requested by https://old.sermitsiaq.ag/
Certificate IssuerLet's Encrypt
Subjectxss.my.id
Fingerprint6B:C5:E7:D6:BE:34:9D:AA:28:AD:7D:2E:B0:7F:40:59:2A:42:8E:38
ValidityTue, 25 Jun 2024 12:09:33 GMT - Mon, 23 Sep 2024 12:09:32 GMT
File type HTML document, ASCII text, with very long lines (395)
Hash aa15af8158f7c690502a25562fdf7f2c
7705fb97ef730bad6cd40e3e325b0a212b9dfa61
565eba1700ab049849db10a39e811abe83ae04d754c259df6ffaebd093b43f6b
GET /theme/batman/headcode.js?v=82398 HTTP/1.1
Host: xss.my.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://old.sermitsiaq.ag/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 06 Apr 2024 22:42:41 GMT
etag: "63a-615754a3afa40-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 754
content-type: text/javascript
date: Tue, 30 Jul 2024 20:25:07 GMT
server: Apache
X-Firefox-Spdy: h2
GET old.sermitsiaq.ag/en/detailed-oc-template.html
200 OK 6.1 kB URL GET HTTP/2 old.sermitsiaq.ag/en/detailed-oc-template.html
IP
ASN #63949 Akamai Connected Cloud
Requested by https://old.sermitsiaq.ag/
Certificate IssuerLet's Encrypt
Subjectold.sermitsiaq.ag
Fingerprint9A:1E:08:6F:51:5A:ED:71:4B:70:70:2A:91:24:38:91:DB:68:AC:CC
ValiditySat, 13 Jul 2024 17:46:17 GMT - Fri, 11 Oct 2024 17:46:16 GMT
File type HTML document, Unicode text, UTF-8 text, with very long lines (1763), with CRLF, LF line terminators
Hash e91d2f1d048ae71d499ff4d195a5f5bc
d543414d7ee662e7ddca0705062720a414d83881
349ff2fbfc281f7aa4e70fb701cc0e8dfea73d629a8970923a1303dac53f80f0
GET /en/detailed-oc-template.html HTTP/1.1
Host: old.sermitsiaq.ag
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://old.sermitsiaq.ag/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Sun, 24 Sep 2023 06:09:57 GMT
etag: "80fa-60614b0e25740-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 6105
content-type: text/html
date: Tue, 30 Jul 2024 20:25:07 GMT
server: Apache
X-Firefox-Spdy: h2
GET old.sermitsiaq.ag/en/project-discovery-template.html
200 OK 5.7 kB URL GET HTTP/2 old.sermitsiaq.ag/en/project-discovery-template.html
IP
ASN #63949 Akamai Connected Cloud
Requested by https://old.sermitsiaq.ag/
Certificate IssuerLet's Encrypt
Subjectold.sermitsiaq.ag
Fingerprint9A:1E:08:6F:51:5A:ED:71:4B:70:70:2A:91:24:38:91:DB:68:AC:CC
ValiditySat, 13 Jul 2024 17:46:17 GMT - Fri, 11 Oct 2024 17:46:16 GMT
File type HTML document, Unicode text, UTF-8 text, with very long lines (1402), with CRLF, LF line terminators
Hash fa1934b212616ddc4b936cae211216c5
54841628d4aa1ae962132acdc9c98a7b4f3a2726
193e99803bf7f9be1986260edb40be4b1dff591d8a12e0dd7f0ba08a07f5acf5
GET /en/project-discovery-template.html HTTP/1.1
Host: old.sermitsiaq.ag
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://old.sermitsiaq.ag/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Sun, 24 Sep 2023 04:44:18 GMT
etag: "7a63-606137e936c80-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 5680
content-type: text/html
date: Tue, 30 Jul 2024 20:25:07 GMT
server: Apache
X-Firefox-Spdy: h2
GET old.sermitsiaq.ag/en/printable-puff-htv.html
200 OK 5.2 kB URL GET HTTP/2 old.sermitsiaq.ag/en/printable-puff-htv.html
IP
ASN #63949 Akamai Connected Cloud
Requested by https://old.sermitsiaq.ag/
Certificate IssuerLet's Encrypt
Subjectold.sermitsiaq.ag
Fingerprint9A:1E:08:6F:51:5A:ED:71:4B:70:70:2A:91:24:38:91:DB:68:AC:CC
ValiditySat, 13 Jul 2024 17:46:17 GMT - Fri, 11 Oct 2024 17:46:16 GMT
File type HTML document, Unicode text, UTF-8 text, with very long lines (1410), with CRLF, LF line terminators
Hash 090dee7fa5790af334f66c99f6ce609f
04efe75d30bc5fabdaf6affdc176fee2781bff76
790e5af657693ee77ad67b236e4a06a7ed0d44f0000ca7a382ff3914dc130d27
GET /en/printable-puff-htv.html HTTP/1.1
Host: old.sermitsiaq.ag
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://old.sermitsiaq.ag/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Sun, 24 Sep 2023 03:33:34 GMT
etag: "77a1-60612819d1f80-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 5158
content-type: text/html
date: Tue, 30 Jul 2024 20:25:07 GMT
server: Apache
X-Firefox-Spdy: h2
GET old.sermitsiaq.ag/en/org-chart-ppt-template-free-download.html
200 OK 5.6 kB URL GET HTTP/2 old.sermitsiaq.ag/en/org-chart-ppt-template-free-download.html
IP
ASN #63949 Akamai Connected Cloud
Requested by https://old.sermitsiaq.ag/
Certificate IssuerLet's Encrypt
Subjectold.sermitsiaq.ag
Fingerprint9A:1E:08:6F:51:5A:ED:71:4B:70:70:2A:91:24:38:91:DB:68:AC:CC
ValiditySat, 13 Jul 2024 17:46:17 GMT - Fri, 11 Oct 2024 17:46:16 GMT
File type HTML document, Unicode text, UTF-8 text, with very long lines (1658), with CRLF, LF line terminators
Hash c6861546d39e43c7cc492e973876e4a9
8a580882c7083387a643d2369c69d027070698c1
8698ece35aed15339d93662c922b52420ba93b26080be330364ddc6cbc212bb9
GET /en/org-chart-ppt-template-free-download.html HTTP/1.1
Host: old.sermitsiaq.ag
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://old.sermitsiaq.ag/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Sun, 24 Sep 2023 05:19:57 GMT
etag: "7e7b-60613fe11f940-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 5631
content-type: text/html
date: Tue, 30 Jul 2024 20:25:07 GMT
server: Apache
X-Firefox-Spdy: h2
GET old.sermitsiaq.ag/en/printable-fabric-slipper-pattern.html
200 OK 6.4 kB URL GET HTTP/2 old.sermitsiaq.ag/en/printable-fabric-slipper-pattern.html
IP
ASN #63949 Akamai Connected Cloud
Requested by https://old.sermitsiaq.ag/
Certificate IssuerLet's Encrypt
Subjectold.sermitsiaq.ag
Fingerprint9A:1E:08:6F:51:5A:ED:71:4B:70:70:2A:91:24:38:91:DB:68:AC:CC
ValiditySat, 13 Jul 2024 17:46:17 GMT - Fri, 11 Oct 2024 17:46:16 GMT
File type HTML document, Unicode text, UTF-8 text, with very long lines (1748), with CRLF, LF line terminators
Hash eff5bb7b845c8e3536cfb94fe33b9099
9602ea9aa6cb94a3bf14ccf006d7f5280ffa20a8
2254846c6a9ca89b6393f6f26fc8d20cfb0bc8ad678e3da8a9749d9ed7a71e3a
GET /en/printable-fabric-slipper-pattern.html HTTP/1.1
Host: old.sermitsiaq.ag
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://old.sermitsiaq.ag/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Sun, 24 Sep 2023 04:58:37 GMT
etag: "7b9d-60613b1c6b940-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 6429
content-type: text/html
date: Tue, 30 Jul 2024 20:25:07 GMT
server: Apache
X-Firefox-Spdy: h2
GET old.sermitsiaq.ag/en/clickup-dashboard-templates.html
200 OK 5.9 kB URL GET HTTP/2 old.sermitsiaq.ag/en/clickup-dashboard-templates.html
IP
ASN #63949 Akamai Connected Cloud
Requested by https://old.sermitsiaq.ag/
Certificate IssuerLet's Encrypt
Subjectold.sermitsiaq.ag
Fingerprint9A:1E:08:6F:51:5A:ED:71:4B:70:70:2A:91:24:38:91:DB:68:AC:CC
ValiditySat, 13 Jul 2024 17:46:17 GMT - Fri, 11 Oct 2024 17:46:16 GMT
File type HTML document, Unicode text, UTF-8 text, with very long lines (1436), with CRLF, LF line terminators
Hash 31cb99b49a0bf38678bc4dfb4b2bf0ca
a47d1c96f428e746119a3b6e6aef84580dea4ac6
85f620242581b2b4b0ffb0d7d8069b20b2103c72111bc7fa7e7591755d324e61
GET /en/clickup-dashboard-templates.html HTTP/1.1
Host: old.sermitsiaq.ag
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://old.sermitsiaq.ag/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Sun, 24 Sep 2023 04:21:17 GMT
etag: "74af-606132c430940-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 5896
content-type: text/html
date: Tue, 30 Jul 2024 20:25:07 GMT
server: Apache
X-Firefox-Spdy: h2
GET old.sermitsiaq.ag/en/buy-sell-agreement-template.html
200 OK 5.1 kB URL GET HTTP/2 old.sermitsiaq.ag/en/buy-sell-agreement-template.html
IP
ASN #63949 Akamai Connected Cloud
Requested by https://old.sermitsiaq.ag/
Certificate IssuerLet's Encrypt
Subjectold.sermitsiaq.ag
Fingerprint9A:1E:08:6F:51:5A:ED:71:4B:70:70:2A:91:24:38:91:DB:68:AC:CC
ValiditySat, 13 Jul 2024 17:46:17 GMT - Fri, 11 Oct 2024 17:46:16 GMT
File type HTML document, Unicode text, UTF-8 text, with very long lines (1401), with CRLF, LF line terminators
Hash ac360179bc39baf6783a1a8f477168fd
2eca9f340f41ddd3b735b6692f48b812e748c214
d164f85b8099eb7bbe3090bf1a03e82f7ac89832b50db951036a48f1a6193c59
GET /en/buy-sell-agreement-template.html HTTP/1.1
Host: old.sermitsiaq.ag
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://old.sermitsiaq.ag/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Sun, 24 Sep 2023 04:47:40 GMT
etag: "78eb-606138a9db300-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 5133
content-type: text/html
date: Tue, 30 Jul 2024 20:25:07 GMT
server: Apache
X-Firefox-Spdy: h2
GET old.sermitsiaq.ag/en/hypnotherapy-website-templates.html
200 OK 4.9 kB URL GET HTTP/2 old.sermitsiaq.ag/en/hypnotherapy-website-templates.html
IP
ASN #63949 Akamai Connected Cloud
Requested by https://old.sermitsiaq.ag/
Certificate IssuerLet's Encrypt
Subjectold.sermitsiaq.ag
Fingerprint9A:1E:08:6F:51:5A:ED:71:4B:70:70:2A:91:24:38:91:DB:68:AC:CC
ValiditySat, 13 Jul 2024 17:46:17 GMT - Fri, 11 Oct 2024 17:46:16 GMT
File type HTML document, Unicode text, UTF-8 text, with very long lines (1350), with CRLF, LF line terminators
Hash d6680a6147290a29e5287013ba330c5d
9ab24bcabe4bfd56e003c8b221e7b0e92aaaa52f
8e93552022ac86629de4fbcf472e583cef125cf14961b95791d3a1071c5644e5
GET /en/hypnotherapy-website-templates.html HTTP/1.1
Host: old.sermitsiaq.ag
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://old.sermitsiaq.ag/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Sun, 24 Sep 2023 06:07:01 GMT
etag: "770a-60614a664cb40-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 4882
content-type: text/html
date: Tue, 30 Jul 2024 20:25:07 GMT
server: Apache
X-Firefox-Spdy: h2
GET old.sermitsiaq.ag/en/printable-activities-for-autism.html
200 OK 6.3 kB URL GET HTTP/2 old.sermitsiaq.ag/en/printable-activities-for-autism.html
IP
ASN #63949 Akamai Connected Cloud
Requested by https://old.sermitsiaq.ag/
Certificate IssuerLet's Encrypt
Subjectold.sermitsiaq.ag
Fingerprint9A:1E:08:6F:51:5A:ED:71:4B:70:70:2A:91:24:38:91:DB:68:AC:CC
ValiditySat, 13 Jul 2024 17:46:17 GMT - Fri, 11 Oct 2024 17:46:16 GMT
File type HTML document, Unicode text, UTF-8 text, with very long lines (1735), with CRLF, LF line terminators
Hash 4ac2ffd4461e1ab8f2d290843df98a7e
2b2c482561dfa61e8840d69b770e5f2fa6950976
3ae6f0047d8ab93947ccfa46dd0459cf2fae841543cef14c7ff31e8227a8e248
GET /en/printable-activities-for-autism.html HTTP/1.1
Host: old.sermitsiaq.ag
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://old.sermitsiaq.ag/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Sun, 24 Sep 2023 04:27:40 GMT
etag: "7ea4-6061343172700-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 6345
content-type: text/html
date: Tue, 30 Jul 2024 20:25:07 GMT
server: Apache
X-Firefox-Spdy: h2
GET old.sermitsiaq.ag/en/duck-coloring-pages-printable.html
200 OK 5.3 kB URL GET HTTP/2 old.sermitsiaq.ag/en/duck-coloring-pages-printable.html
IP
ASN #63949 Akamai Connected Cloud
Requested by https://old.sermitsiaq.ag/
Certificate IssuerLet's Encrypt
Subjectold.sermitsiaq.ag
Fingerprint9A:1E:08:6F:51:5A:ED:71:4B:70:70:2A:91:24:38:91:DB:68:AC:CC
ValiditySat, 13 Jul 2024 17:46:17 GMT - Fri, 11 Oct 2024 17:46:16 GMT
File type HTML document, Unicode text, UTF-8 text, with very long lines (1625), with CRLF, LF line terminators
Hash 90617bc2f4b75d76421546cf8bd45f39
b9f11c23aaffeb8af6e99c54ca157aae259a71a9
9866957fa7453b39e64c6c8c41a235b8e4b1a25b8cd1454007d7c615d9a6ace0
GET /en/duck-coloring-pages-printable.html HTTP/1.1
Host: old.sermitsiaq.ag
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://old.sermitsiaq.ag/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Sun, 24 Sep 2023 03:38:51 GMT
etag: "7ad7-60612948228c0-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 5275
content-type: text/html
date: Tue, 30 Jul 2024 20:25:07 GMT
server: Apache
X-Firefox-Spdy: h2
GET xss.my.id/theme/batman/style.css
200 OK 11 kB URL GET HTTP/2 xss.my.id/theme/batman/style.css
IP
ASN #14061 DIGITALOCEAN-ASN
Requested by https://old.sermitsiaq.ag/
Certificate IssuerLet's Encrypt
Subjectxss.my.id
Fingerprint6B:C5:E7:D6:BE:34:9D:AA:28:AD:7D:2E:B0:7F:40:59:2A:42:8E:38
ValidityTue, 25 Jun 2024 12:09:33 GMT - Mon, 23 Sep 2024 12:09:32 GMT
File type exported SGML document, ASCII text
Hash 861246b4b2880bb26801a59f14b6c474
8118f8d5da2b0eb89613de5108eb13a3bdb622dd
0e88d273060f60e43f87739e8c7ea3fea2bbb58addee6efc8217863ea88e2c49
GET /theme/batman/style.css HTTP/1.1
Host: xss.my.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://old.sermitsiaq.ag/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 15 Sep 2023 18:47:55 GMT
etag: "135fe-6056a3b032cc0-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 11058
content-type: text/css
date: Tue, 30 Jul 2024 20:25:07 GMT
server: Apache
X-Firefox-Spdy: h2
471 B IP
Hash 1ec7ab860dfb6496ec31f330c6b69c0e
075dba06422ea7fc72e00c5bfe373729a7f47101
bb32c6685e6e4cd294b73375291bdb6947e947579387bc65357f3e3622404b5a
POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 30 Jul 2024 20:25:07 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
GET ts2.mm.bing.net/th?q=Detailed%20Oc%20Template
200 OK 40 kB URL GET HTTP/2 ts2.mm.bing.net/th?q=Detailed%20Oc%20Template
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://old.sermitsiaq.ag/
Certificate IssuerMicrosoft Corporation
Subject*.mm.bing.net
FingerprintBC:F0:A5:F2:FC:A2:E1:5B:3A:D4:A6:21:36:E6:E6:75:FD:87:19:46
ValidityTue, 30 Jul 2024 04:43:23 GMT - Sun, 26 Jan 2025 04:43:23 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 0x0, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 474x474, components 3
Hash 15b4a96906f126e3984df90002059bf6
f04181d786081c7adcf4bb9598c369fe90737f50
bbcbe7f8e7df817514025db477554b0bf27dbd6ada0e4c7a9442fac132a059fc
GET /th?q=Detailed%20Oc%20Template HTTP/1.1
Host: ts2.mm.bing.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://old.sermitsiaq.ag/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
cache-control: public, max-age=5184000
content-length: 40529
content-type: image/jpeg
x-cache: TCP_MISS
access-control-allow-origin: *
access-control-allow-headers: *
access-control-allow-methods: GET, POST, OPTIONS
timing-allow-origin: *
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth&ndcParam=QUZE"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 9747474DD5DF4F688E84CABB49CF0AFA Ref B: OSL30EDGE0309 Ref C: 2024-07-30T20:25:07Z
date: Tue, 30 Jul 2024 20:25:07 GMT
X-Firefox-Spdy: h2
GET ts2.mm.bing.net/th?q=Hypnotherapy%20Website%20Templates
200 OK 17 kB URL GET HTTP/2 ts2.mm.bing.net/th?q=Hypnotherapy%20Website%20Templates
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://old.sermitsiaq.ag/
Certificate IssuerMicrosoft Corporation
Subject*.mm.bing.net
FingerprintBC:F0:A5:F2:FC:A2:E1:5B:3A:D4:A6:21:36:E6:E6:75:FD:87:19:46
ValidityTue, 30 Jul 2024 04:43:23 GMT - Sun, 26 Jan 2025 04:43:23 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 0x0, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 474x316, components 3
Hash 0e80d4d005297209cb8e567a7f98695f
b0c079dd48a7aa0d6b50a029a670f5ccd5196753
2375d4d18efd95196cc4218be8a8606f9770043d7864c134510178f30980bf62
GET /th?q=Hypnotherapy%20Website%20Templates HTTP/1.1
Host: ts2.mm.bing.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://old.sermitsiaq.ag/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=5184000
content-length: 16647
content-type: image/jpeg
x-cache: TCP_MISS
access-control-allow-origin: *
access-control-allow-headers: *
access-control-allow-methods: GET, POST, OPTIONS
timing-allow-origin: *
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth&ndcParam=QUZE"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: E90DA5D5EDFC45AF9583F44049C1DFEF Ref B: OSL30EDGE0309 Ref C: 2024-07-30T20:25:07Z
date: Tue, 30 Jul 2024 20:25:07 GMT
X-Firefox-Spdy: h2
GET ts2.mm.bing.net/th?q=Printable%20Activities%20For%20Autism
200 OK 33 kB URL GET HTTP/2 ts2.mm.bing.net/th?q=Printable%20Activities%20For%20Autism
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://old.sermitsiaq.ag/
Certificate IssuerMicrosoft Corporation
Subject*.mm.bing.net
FingerprintBC:F0:A5:F2:FC:A2:E1:5B:3A:D4:A6:21:36:E6:E6:75:FD:87:19:46
ValidityTue, 30 Jul 2024 04:43:23 GMT - Sun, 26 Jan 2025 04:43:23 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 0x0, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 474x552, components 3
Hash 4de62c2fc0324b5ea95a20684945b488
843c867eb44f384f5e1732cfeb7ff1e9002c3a53
e30befe4407914b13bc5c430624a29aad2597ba292048b41116df01d30665ef4
GET /th?q=Printable%20Activities%20For%20Autism HTTP/1.1
Host: ts2.mm.bing.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://old.sermitsiaq.ag/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=5184000
content-length: 33412
content-type: image/jpeg
x-cache: TCP_MISS
access-control-allow-origin: *
access-control-allow-headers: *
access-control-allow-methods: GET, POST, OPTIONS
timing-allow-origin: *
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth&ndcParam=QUZE"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: E23913B816B04AC2AC2C5A21B5BA49EA Ref B: OSL30EDGE0309 Ref C: 2024-07-30T20:25:07Z
date: Tue, 30 Jul 2024 20:25:07 GMT
X-Firefox-Spdy: h2
GET ts2.mm.bing.net/th?q=Duck%20Coloring%20Pages%20Printable
200 OK 31 kB URL GET HTTP/2 ts2.mm.bing.net/th?q=Duck%20Coloring%20Pages%20Printable
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://old.sermitsiaq.ag/
Certificate IssuerMicrosoft Corporation
Subject*.mm.bing.net
FingerprintBC:F0:A5:F2:FC:A2:E1:5B:3A:D4:A6:21:36:E6:E6:75:FD:87:19:46
ValidityTue, 30 Jul 2024 04:43:23 GMT - Sun, 26 Jan 2025 04:43:23 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 0x0, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 474x670, components 3
Hash b162787703c66d2491e39dc0d4378f75
3a88aeacbf23f60e89ad883bdc5593558a61f79f
4135db2ea1e80a18751c4b42ead669a540bc170e12dda5abfdf7ad71756320e7
GET /th?q=Duck%20Coloring%20Pages%20Printable HTTP/1.1
Host: ts2.mm.bing.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://old.sermitsiaq.ag/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=5184000
content-length: 30819
content-type: image/jpeg
x-cache: TCP_MISS
access-control-allow-origin: *
access-control-allow-headers: *
access-control-allow-methods: GET, POST, OPTIONS
timing-allow-origin: *
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth&ndcParam=QUZE"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: F585BA7E6FC345FC9418620B8A83D574 Ref B: OSL30EDGE0309 Ref C: 2024-07-30T20:25:07Z
date: Tue, 30 Jul 2024 20:25:07 GMT
X-Firefox-Spdy: h2
GET www.googletagmanager.com/gtag/js?id=G-S5MTG642M7
200 OK 104 kB URL GET HTTP/2 www.googletagmanager.com/gtag/js?id=G-S5MTG642M7
IP
Requested by https://old.sermitsiaq.ag/
Certificate IssuerGoogle Trust Services
Subject*.google-analytics.com
Fingerprint27:BF:6E:8E:D6:51:1C:C5:B2:CF:E2:E9:0F:87:D0:F3:33:23:E7:37
ValidityTue, 30 Jul 2024 12:32:47 GMT - Tue, 22 Oct 2024 12:32:46 GMT
File type JavaScript source, ASCII text, with very long lines (5945)
Size 104 kB (103906 bytes)
Hash 1d4cbce14993a66630339be197d8e607
df668df16f1a8dd127e97b927a554bfb959ad333
5cff9ad45672475b8c98ded1732b950b8c3e0ff66746c719f32014f28ce026d6
GET /gtag/js?id=G-S5MTG642M7 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://old.sermitsiaq.ag/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Tue, 30 Jul 2024 20:25:07 GMT
expires: Tue, 30 Jul 2024 20:25:07 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 103906
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET ts2.mm.bing.net/th?q=Buy%20Sell%20Agreement%20Template
200 OK 41 kB URL GET HTTP/2 ts2.mm.bing.net/th?q=Buy%20Sell%20Agreement%20Template
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://old.sermitsiaq.ag/
Certificate IssuerMicrosoft Corporation
Subject*.mm.bing.net
FingerprintBC:F0:A5:F2:FC:A2:E1:5B:3A:D4:A6:21:36:E6:E6:75:FD:87:19:46
ValidityTue, 30 Jul 2024 04:43:23 GMT - Sun, 26 Jan 2025 04:43:23 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 0x0, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 474x613, components 3
Hash e1053814f421988374632da417904549
cf047be69622f6714f7f851aa6207273303ff3d1
7ceb91e7697330f11da0d08086edd7c1433a80c15adbe91812c24765ca49abd9
GET /th?q=Buy%20Sell%20Agreement%20Template HTTP/1.1
Host: ts2.mm.bing.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://old.sermitsiaq.ag/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=5184000
content-length: 41153
content-type: image/jpeg
x-cache: TCP_MISS
access-control-allow-origin: *
access-control-allow-headers: *
access-control-allow-methods: GET, POST, OPTIONS
timing-allow-origin: *
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth&ndcParam=QUZE"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 5E92E25A3E424F3E9D583DE9DE6EFDB6 Ref B: OSL30EDGE0309 Ref C: 2024-07-30T20:25:07Z
date: Tue, 30 Jul 2024 20:25:07 GMT
X-Firefox-Spdy: h2
GET xss.my.id/ads/banner-loading.js
200 OK 233 B URL GET HTTP/2 xss.my.id/ads/banner-loading.js
IP
ASN #14061 DIGITALOCEAN-ASN
Requested by https://old.sermitsiaq.ag/
Certificate IssuerLet's Encrypt
Subjectxss.my.id
Fingerprint6B:C5:E7:D6:BE:34:9D:AA:28:AD:7D:2E:B0:7F:40:59:2A:42:8E:38
ValidityTue, 25 Jun 2024 12:09:33 GMT - Mon, 23 Sep 2024 12:09:32 GMT
Hash 6410776ef550d8d26846782fd73ab99d
50cb95ec1890e9d9bb13b6d2b1c3cafd268a0e0f
17d896de76e12861acf4136e208e6015ceaf9ad2a0db8216073137e78440ca9e
GET /ads/banner-loading.js HTTP/1.1
Host: xss.my.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://old.sermitsiaq.ag/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 05 Jul 2024 10:54:57 GMT
etag: "12a-61c7de4eb1a35-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 233
content-type: text/javascript
date: Tue, 30 Jul 2024 20:25:07 GMT
server: Apache
X-Firefox-Spdy: h2
GET ts2.mm.bing.net/th?q=Printable%20Puff%20Htv
200 OK 40 kB URL GET HTTP/2 ts2.mm.bing.net/th?q=Printable%20Puff%20Htv
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://old.sermitsiaq.ag/
Certificate IssuerMicrosoft Corporation
Subject*.mm.bing.net
FingerprintBC:F0:A5:F2:FC:A2:E1:5B:3A:D4:A6:21:36:E6:E6:75:FD:87:19:46
ValidityTue, 30 Jul 2024 04:43:23 GMT - Sun, 26 Jan 2025 04:43:23 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 0x0, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 474x474, components 3
Hash 0d9192c8a1dbd67075d900280721794b
2403676d15ddf2a4f9431dd72623934f6001e79d
d5006c24eb6d2bb7c539ec4fc5f4aadaef8abee0ed7d2e514eb6c51f87b16c18
GET /th?q=Printable%20Puff%20Htv HTTP/1.1
Host: ts2.mm.bing.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://old.sermitsiaq.ag/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
cache-control: public, max-age=5184000
content-length: 39905
content-type: image/jpeg
x-cache: TCP_MISS
access-control-allow-origin: *
access-control-allow-headers: *
access-control-allow-methods: GET, POST, OPTIONS
timing-allow-origin: *
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth&ndcParam=QUZE"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: BFE0AE6DA62A4451A316C8614EE2BE00 Ref B: OSL30EDGE0309 Ref C: 2024-07-30T20:25:07Z
date: Tue, 30 Jul 2024 20:25:07 GMT
X-Firefox-Spdy: h2
GET xss.my.id/ads/lekinapotencje.js
200 OK 717 B URL GET HTTP/2 xss.my.id/ads/lekinapotencje.js
IP
ASN #14061 DIGITALOCEAN-ASN
Requested by https://old.sermitsiaq.ag/
Certificate IssuerLet's Encrypt
Subjectxss.my.id
Fingerprint6B:C5:E7:D6:BE:34:9D:AA:28:AD:7D:2E:B0:7F:40:59:2A:42:8E:38
ValidityTue, 25 Jun 2024 12:09:33 GMT - Mon, 23 Sep 2024 12:09:32 GMT
File type ASCII text, with very long lines (343)
Hash 2ee0559648b8df728e6f192b55c65e68
17bb3bd368e33e348e0236d2525d7ef41328e8fa
a81dbf53c56ae1f6ec66d2d7d6f153c09003a3f3459d84e166ec0b3482ce6f86
GET /ads/lekinapotencje.js HTTP/1.1
Host: xss.my.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://old.sermitsiaq.ag/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Sun, 28 Apr 2024 18:34:54 GMT
etag: "690-6172c6498cf80-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 717
content-type: text/javascript
date: Tue, 30 Jul 2024 20:25:07 GMT
server: Apache
X-Firefox-Spdy: h2
GET ts2.mm.bing.net/th?q=Org%20Chart%20Ppt%20Template%20Free%20Download
200 OK 26 kB URL GET HTTP/2 ts2.mm.bing.net/th?q=Org%20Chart%20Ppt%20Template%20Free%20Download
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://old.sermitsiaq.ag/
Certificate IssuerMicrosoft Corporation
Subject*.mm.bing.net
FingerprintBC:F0:A5:F2:FC:A2:E1:5B:3A:D4:A6:21:36:E6:E6:75:FD:87:19:46
ValidityTue, 30 Jul 2024 04:43:23 GMT - Sun, 26 Jan 2025 04:43:23 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 0x0, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 474x355, components 3
Hash e878cf2df74163ff449a86ce0fd5802c
2617d18241878fb7d1cbe8ea0dd6e6f21f55ce81
6e1e2e66a4fef64d585ac383cbb156d8aa00b7e41abf5fd8a0eff3d21ade3af0
GET /th?q=Org%20Chart%20Ppt%20Template%20Free%20Download HTTP/1.1
Host: ts2.mm.bing.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://old.sermitsiaq.ag/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
cache-control: public, max-age=5184000
content-length: 26159
content-type: image/jpeg
x-cache: TCP_MISS
access-control-allow-origin: *
access-control-allow-headers: *
access-control-allow-methods: GET, POST, OPTIONS
timing-allow-origin: *
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth&ndcParam=QUZE"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: FE6931764B63422FA86530064FCEA0F9 Ref B: OSL30EDGE0309 Ref C: 2024-07-30T20:25:07Z
date: Tue, 30 Jul 2024 20:25:07 GMT
X-Firefox-Spdy: h2
GET ts2.mm.bing.net/th?q=Printable%20Fabric%20Slipper%20Pattern
200 OK 29 kB URL GET HTTP/2 ts2.mm.bing.net/th?q=Printable%20Fabric%20Slipper%20Pattern
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://old.sermitsiaq.ag/
Certificate IssuerMicrosoft Corporation
Subject*.mm.bing.net
FingerprintBC:F0:A5:F2:FC:A2:E1:5B:3A:D4:A6:21:36:E6:E6:75:FD:87:19:46
ValidityTue, 30 Jul 2024 04:43:23 GMT - Sun, 26 Jan 2025 04:43:23 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 0x0, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 474x652, components 3
Hash 5a5fabd556d33905636dcd2b8c91a7d6
8d54230fa22565dccaeb71d5c4a11265eda74ecd
f07ac416f49ee8e9781f4eb20f967a6891e28b6117d94fa7b43ec99a1672a55f
GET /th?q=Printable%20Fabric%20Slipper%20Pattern HTTP/1.1
Host: ts2.mm.bing.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://old.sermitsiaq.ag/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
cache-control: public, max-age=5184000
content-length: 29182
content-type: image/jpeg
x-cache: TCP_MISS
access-control-allow-origin: *
access-control-allow-headers: *
access-control-allow-methods: GET, POST, OPTIONS
timing-allow-origin: *
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth&ndcParam=QUZE"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 7A5C3E5BBC8C461F87AB4B70459EA71E Ref B: OSL30EDGE0309 Ref C: 2024-07-30T20:25:07Z
date: Tue, 30 Jul 2024 20:25:07 GMT
X-Firefox-Spdy: h2
GET ts2.mm.bing.net/th?q=Clickup%20Dashboard%20Templates
200 OK 22 kB URL GET HTTP/2 ts2.mm.bing.net/th?q=Clickup%20Dashboard%20Templates
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://old.sermitsiaq.ag/
Certificate IssuerMicrosoft Corporation
Subject*.mm.bing.net
FingerprintBC:F0:A5:F2:FC:A2:E1:5B:3A:D4:A6:21:36:E6:E6:75:FD:87:19:46
ValidityTue, 30 Jul 2024 04:43:23 GMT - Sun, 26 Jan 2025 04:43:23 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 0x0, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 474x322, components 3
Hash 4bccc32f3254eead782b658a2e5be2cb
1181b811dc400199dbdf012a0adf1fa12521899a
498fbe00d00144fd717292b9af1910f1eb19edb948d47ec41e91d44c98f52470
GET /th?q=Clickup%20Dashboard%20Templates HTTP/1.1
Host: ts2.mm.bing.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://old.sermitsiaq.ag/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
cache-control: public, max-age=5184000
content-length: 21718
content-type: image/jpeg
x-cache: TCP_MISS
access-control-allow-origin: *
access-control-allow-headers: *
access-control-allow-methods: GET, POST, OPTIONS
timing-allow-origin: *
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth&ndcParam=QUZE"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 50BE5DC1846B4F0C8959B76B8C9689F5 Ref B: OSL30EDGE0309 Ref C: 2024-07-30T20:25:07Z
date: Tue, 30 Jul 2024 20:25:07 GMT
X-Firefox-Spdy: h2
GET ts2.mm.bing.net/th?q=Project%20Discovery%20Template
200 OK 39 kB URL GET HTTP/2 ts2.mm.bing.net/th?q=Project%20Discovery%20Template
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://old.sermitsiaq.ag/
Certificate IssuerMicrosoft Corporation
Subject*.mm.bing.net
FingerprintBC:F0:A5:F2:FC:A2:E1:5B:3A:D4:A6:21:36:E6:E6:75:FD:87:19:46
ValidityTue, 30 Jul 2024 04:43:23 GMT - Sun, 26 Jan 2025 04:43:23 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 0x0, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 390x505, components 3
Hash 765f2dd381958ae832ea88347da46313
35868dafe86f0c6e812ee849048ccfca12cc59f3
ba259c8c82c54a384ab0b2678890586c3ecb3dd2127bd7e2a16d109362a87cfa
GET /th?q=Project%20Discovery%20Template HTTP/1.1
Host: ts2.mm.bing.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://old.sermitsiaq.ag/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
cache-control: public, max-age=5184000
content-length: 38703
content-type: image/jpeg
x-cache: TCP_MISS
access-control-allow-origin: *
access-control-allow-headers: *
access-control-allow-methods: GET, POST, OPTIONS
timing-allow-origin: *
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth&ndcParam=QUZE"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: A86545EC26774F38B429EB64686965A8 Ref B: OSL30EDGE0309 Ref C: 2024-07-30T20:25:07Z
date: Tue, 30 Jul 2024 20:25:07 GMT
X-Firefox-Spdy: h2
471 B IP
Hash 1ec7ab860dfb6496ec31f330c6b69c0e
075dba06422ea7fc72e00c5bfe373729a7f47101
bb32c6685e6e4cd294b73375291bdb6947e947579387bc65357f3e3622404b5a
POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 30 Jul 2024 20:25:08 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
504 B IP
ASN #20940 Akamai International B.V.
Hash 4e65f865b00bcb08c52dfe77a48c1c03
26cbc733e53341bd2aab8c860546de10e9839e84
00250d516d26ead1f376d80fef0c83c59df998d20c72ed5b96262e40ae3b96a8
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "00250D516D26EAD1F376D80FEF0C83C59DF998D20C72ED5B96262E40AE3B96A8"
Last-Modified: Mon, 29 Jul 2024 18:27:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5523
Expires: Tue, 30 Jul 2024 21:57:11 GMT
Date: Tue, 30 Jul 2024 20:25:08 GMT
Connection: keep-alive
GET modificationdesignate.com/136d4e249eb5c2ca63d4dd0de8205e70/invoke.js
200 OK 12 kB URL GET HTTP/1.1 modificationdesignate.com/136d4e249eb5c2ca63d4dd0de8205e70/invoke.js
IP
Requested by https://old.sermitsiaq.ag/
Certificate IssuerLet's Encrypt
Subjectmodificationdesignate.com
FingerprintCE:CA:60:43:4D:F0:A3:B2:16:A4:FE:A8:FD:00:CF:83:2B:8B:3A:11
ValidityWed, 03 Jul 2024 12:26:46 GMT - Tue, 01 Oct 2024 12:26:45 GMT
File type JavaScript source, ASCII text, with very long lines (31281), with no line terminators
Hash 4d57641dbb155ce479dfbd97a1526310
fd47d8e383326cb4f3fd79998bc6fd19b5689323
137faeda6623fc38f755d92b0c43dd2c28c1069e038b5c0c549e466c5b7ce22f
GET /136d4e249eb5c2ca63d4dd0de8205e70/invoke.js HTTP/1.1
Host: modificationdesignate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://old.sermitsiaq.ag/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Tue, 30 Jul 2024 20:25:08 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: 7e10e4dc9a90679b275c559d17b4264e
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
GET proftrafficcounter.com/stats
200 OK 40 B URL GET HTTP/2 proftrafficcounter.com/stats
IP
Requested by https://old.sermitsiaq.ag/
Certificate IssuerAmazon
Subjectproftrafficcounter.com
FingerprintE3:9F:79:6F:80:C0:BF:F8:C4:EB:45:F3:E9:0F:A7:41:F6:0C:05:E6
ValidityTue, 21 Nov 2023 00:00:00 GMT - Thu, 19 Dec 2024 23:59:59 GMT
File type ASCII text, with no line terminators
Hash 6b67f71b62f02ee6d1a532583a44dd2f
c406bab14513728610529784f79ffe9f7702f8dc
72c85fd16712ddee406fd01c27a9b914f626d65e7988f9bf15da94decd708daa
GET /stats HTTP/1.1
Host: proftrafficcounter.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://old.sermitsiaq.ag
DNT: 1
Connection: keep-alive
Referer: https://old.sermitsiaq.ag/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 30 Jul 2024 20:25:08 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: https://old.sermitsiaq.ag
vary: Origin
access-control-allow-credentials: true
set-cookie: uid_id2=9b95bf8b-ffde-4c90-a71e-d5131e8e8693:3:1; expires=Fri, 28 Jul 2034 20:25:08 GMT; secure; SameSite=None
X-Firefox-Spdy: h2
GET apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.pGGAptgAK4s.O/m=plusone/rt=j/sv=1/d=1/ed=1/am=AAAg/rs=AHpOoo-Cic-4VdRMZ7mFCYOA3wzpF7O-6g/cb=gapi.loaded_0?le=scs
200 OK 57 kB URL GET HTTP/3 apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.pGGAptgAK4s.O/m=plusone/rt=j/sv=1/d=1/ed=1/am=AAAg/rs=AHpOoo-Cic-4VdRMZ7mFCYOA3wzpF7O-6g/cb=gapi.loaded_0?le=scs
IP
Requested by https://old.sermitsiaq.ag/
Certificate IssuerGoogle Trust Services
Subject*.google.com
FingerprintA9:52:08:E0:FC:37:B4:6B:5F:CF:C5:AB:C4:10:C7:D6:00:4D:DC:69
ValidityTue, 30 Jul 2024 12:32:53 GMT - Tue, 22 Oct 2024 12:32:52 GMT
File type JavaScript source, ASCII text, with very long lines (2141)
Hash 9d72b6a80324e74b227825ed638959f9
6f3ef32a2cbbb554ec1732a29eee87d005b7b0fe
72888c73c7cbff54c030f2bf084b265196276cbc3bcd96d4bea274fc424322e9
GET /_/scs/abc-static/_/js/k=gapi.lb.en.pGGAptgAK4s.O/m=plusone/rt=j/sv=1/d=1/ed=1/am=AAAg/rs=AHpOoo-Cic-4VdRMZ7mFCYOA3wzpF7O-6g/cb=gapi.loaded_0?le=scs HTTP/1.1
Host: apis.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://old.sermitsiaq.ag/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/social-frontend-mpm-access
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="social-frontend-mpm-access"
report-to: {"group":"social-frontend-mpm-access","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/social-frontend-mpm-access"}]}
content-length: 57428
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 29 Jul 2024 17:57:05 GMT
expires: Tue, 29 Jul 2025 17:57:05 GMT
cache-control: public, max-age=31536000
age: 95284
last-modified: Thu, 11 Jul 2024 18:55:26 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
471 B IP
Hash 81f352c0db715285a62fbf29b2216d25
91ca3dbf15752b132dbfe4fbf22c8dc047dc969c
3e7f3918e9d68a81aa57bcec632dad60d1c3b32a69e4a39860b58ff646b9ac70
POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 30 Jul 2024 20:25:09 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
471 B IP
Hash 81f352c0db715285a62fbf29b2216d25
91ca3dbf15752b132dbfe4fbf22c8dc047dc969c
3e7f3918e9d68a81aa57bcec632dad60d1c3b32a69e4a39860b58ff646b9ac70
POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 30 Jul 2024 20:25:09 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
GET speechanchor.com/84/93/2d/84932d40653827795625f2179d43ab52.js
200 OK 31 kB URL GET HTTP/1.1 speechanchor.com/84/93/2d/84932d40653827795625f2179d43ab52.js
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://old.sermitsiaq.ag/
Certificate IssuerLet's Encrypt
Subjectspeechanchor.com
Fingerprint41:C1:E6:E0:E7:08:64:0F:0F:A7:6B:0D:28:20:4D:36:F3:D8:66:24
ValidityMon, 01 Jul 2024 13:44:52 GMT - Sun, 29 Sep 2024 13:44:51 GMT
File type JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Hash 3dd5d360e96ec422537c8a9947664c2b
1e8ac7670951123eb853b4c1210afd1db85b41d3
8430c9b9786f42ca5bef644ffbe05cd60f3df936bc868fb19fd7fb90b1a810d8
GET /84/93/2d/84932d40653827795625f2179d43ab52.js HTTP/1.1
Host: speechanchor.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://old.sermitsiaq.ag/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Tue, 30 Jul 2024 20:25:09 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: 87e1add1a1a50671979d637b7f4f87a2
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
GET speechanchor.com/watch.291664066790.js?key=136d4e249eb5c2ca63d4dd0de8205e70&kw=%5B%22printable%22%2C%22template%22%5D&refer=https%3A%2F%2Fold.sermitsiaq.ag%2F&tz=0&dev=e&res=14.2071&uuid=9b95bf8b-ffde-4c90-a71e-d5131e8e8693%3A3%3A1
307 Temporary Redirect 0 B URL GET HTTP/1.1 speechanchor.com/watch.291664066790.js?key=136d4e249eb5c2ca63d4dd0de8205e70&kw=%5B%22printable%22%2C%22template%22%5D&refer=https%3A%2F%2Fold.sermitsiaq.ag%2F&tz=0&dev=e&res=14.2071&uuid=9b95bf8b-ffde-4c90-a71e-d5131e8e8693%3A3%3A1
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://old.sermitsiaq.ag/
Certificate IssuerLet's Encrypt
Subjectspeechanchor.com
Fingerprint41:C1:E6:E0:E7:08:64:0F:0F:A7:6B:0D:28:20:4D:36:F3:D8:66:24
ValidityMon, 01 Jul 2024 13:44:52 GMT - Sun, 29 Sep 2024 13:44:51 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /watch.291664066790.js?key=136d4e249eb5c2ca63d4dd0de8205e70&kw=%5B%22printable%22%2C%22template%22%5D&refer=https%3A%2F%2Fold.sermitsiaq.ag%2F&tz=0&dev=e&res=14.2071&uuid=9b95bf8b-ffde-4c90-a71e-d5131e8e8693%3A3%3A1 HTTP/1.1
Host: speechanchor.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://old.sermitsiaq.ag
DNT: 1
Connection: keep-alive
Referer: https://old.sermitsiaq.ag/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 307 Temporary Redirect
Server: nginx/1.21.6
Date: Tue, 30 Jul 2024 20:25:09 GMT
Content-Type: text/html
Content-Length: 0
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://old.sermitsiaq.ag
Access-Control-Allow-Origin: https://old.sermitsiaq.ag
Access-Control-Allow-Credentials: true
Location: https://speechanchor.com/watch.291664066790.js?dev=e&key=136d4e249eb5c2ca63d4dd0de8205e70&kw=%5B%22printable%22%2C%22template%22%5D&pst=1722371169&refer=https%3A%2F%2Fold.sermitsiaq.ag%2F&res=14.2071&rmtc=t&shu=ce7f8fcae5a4c23a32202d325ee59220c60d2dc6d8dcbc203e089d40442ec73988c6848e16aa458db98fe3ba3ea66dcdb7b2638b9014ec80fb2308324a52884e8023802f445ae46f501b40c0b56a5e671d21e3e08b7e76c423dfd0293a1a50&tz=0&uuid=9b95bf8b-ffde-4c90-a71e-d5131e8e8693%3A3%3A1
Set-Cookie: u_pl=16248985; expires=Wed, 31 Jul 2024 20:25:09 GMT; path=/; secure; SameSite=None
ain=eyJhbGciOiJIUzI1NiJ9.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.pIm_iIijhk-jAIh4ToUg6z94r_JQUP6FLbh9nMHkIrQ; expires=Tue, 30 Jul 2024 20:26:09 GMT; path=/; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: d78b1b65df7dc0d1e551fd35e564c73f
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains
GET blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhFbkYjl-5OYaIpJyH62IHhR68fdlMZ5mBGah4xD5MEzHDqaSUorXmRqkEZ0JcOkuvxyByhS5WyOvMZWNuIwdzVSCDztcezx3v3FMzOSxBY6ujiqUAyNrUKy-iPj0uwyM9JRFkhCxpuOsUWgzQ0IensxtgZxNmRlP3ut_qUBJZ0D7sM7DcQG6_nWqtM2Sgy/s1600/logo.png
200 OK 2.4 kB URL GET HTTP/2 blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhFbkYjl-5OYaIpJyH62IHhR68fdlMZ5mBGah4xD5MEzHDqaSUorXmRqkEZ0JcOkuvxyByhS5WyOvMZWNuIwdzVSCDztcezx3v3FMzOSxBY6ujiqUAyNrUKy-iPj0uwyM9JRFkhCxpuOsUWgzQ0IensxtgZxNmRlP3ut_qUBJZ0D7sM7DcQG6_nWqtM2Sgy/s1600/logo.png
IP
Requested by https://old.sermitsiaq.ag/
Certificate IssuerGoogle Trust Services
Subject*.googleusercontent.com
FingerprintA6:0A:39:C6:7C:75:70:95:1C:CC:6E:1F:5D:AF:3C:FD:47:BB:4D:A0
ValidityTue, 30 Jul 2024 12:49:08 GMT - Tue, 22 Oct 2024 12:49:07 GMT
File type PNG image data, 72 x 72, 8-bit colormap, non-interlaced
Hash 5bcbe28bf5b3b1069ee429bb70ae2074
67193c23f13908d49fefb3d2c60b89bbd8e9cc1f
ce53fdd708d3236116f1cea88adee6a0ce58511132369a01320936a08dedcb45
GET /img/b/R29vZ2xl/AVvXsEhFbkYjl-5OYaIpJyH62IHhR68fdlMZ5mBGah4xD5MEzHDqaSUorXmRqkEZ0JcOkuvxyByhS5WyOvMZWNuIwdzVSCDztcezx3v3FMzOSxBY6ujiqUAyNrUKy-iPj0uwyM9JRFkhCxpuOsUWgzQ0IensxtgZxNmRlP3ut_qUBJZ0D7sM7DcQG6_nWqtM2Sgy/s1600/logo.png HTTP/1.1
Host: blogger.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://old.sermitsiaq.ag/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/png
vary: Origin
access-control-expose-headers: Content-Length
etag: "v625"
expires: Wed, 31 Jul 2024 20:25:09 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="logo.png"
x-content-type-options: nosniff
date: Tue, 30 Jul 2024 20:25:09 GMT
server: fife
content-length: 2416
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiuHdvkbqBty16ErkcQdGN2qkRNOmibs6faXyMXK1ahEgEcVDIllRM3x532RbYCkREV9Z4w6_E7kjasobINkBLCVxzBBVfo56CpKcqu5AyCDApgJ1CLht0lIEYvs4j-W4lFHhwqsbqePmdT-gJ4IBZkkN21Hp2K8Eqy3Kq6g21APDkKEsW0qWwoBysgNmcf/s1600/icon.png
200 OK 1.7 kB URL GET HTTP/2 blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiuHdvkbqBty16ErkcQdGN2qkRNOmibs6faXyMXK1ahEgEcVDIllRM3x532RbYCkREV9Z4w6_E7kjasobINkBLCVxzBBVfo56CpKcqu5AyCDApgJ1CLht0lIEYvs4j-W4lFHhwqsbqePmdT-gJ4IBZkkN21Hp2K8Eqy3Kq6g21APDkKEsW0qWwoBysgNmcf/s1600/icon.png
IP
Requested by https://old.sermitsiaq.ag/
Certificate IssuerGoogle Trust Services
Subject*.googleusercontent.com
FingerprintA6:0A:39:C6:7C:75:70:95:1C:CC:6E:1F:5D:AF:3C:FD:47:BB:4D:A0
ValidityTue, 30 Jul 2024 12:49:08 GMT - Tue, 22 Oct 2024 12:49:07 GMT
File type PNG image data, 48 x 48, 8-bit colormap, non-interlaced
Hash 00d74b8f936bc0ced39677e51d5730f9
000944a012d4692bd00c289920b19147a4e228e5
916a0f75e61251e4a453dc7a4680b36b93c37686096679404fe573fde8a1d3eb
GET /img/b/R29vZ2xl/AVvXsEiuHdvkbqBty16ErkcQdGN2qkRNOmibs6faXyMXK1ahEgEcVDIllRM3x532RbYCkREV9Z4w6_E7kjasobINkBLCVxzBBVfo56CpKcqu5AyCDApgJ1CLht0lIEYvs4j-W4lFHhwqsbqePmdT-gJ4IBZkkN21Hp2K8Eqy3Kq6g21APDkKEsW0qWwoBysgNmcf/s1600/icon.png HTTP/1.1
Host: blogger.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://old.sermitsiaq.ag/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/png
vary: Origin
access-control-expose-headers: Content-Length
etag: "v623"
expires: Wed, 31 Jul 2024 20:25:09 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="icon.png"
x-content-type-options: nosniff
date: Tue, 30 Jul 2024 20:25:09 GMT
server: fife
content-length: 1650
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET speechanchor.com/watch.291664066790.js?dev=e&key=136d4e249eb5c2ca63d4dd0de8205e70&kw=%5B%22printable%22%2C%22template%22%5D&pst=1722371169&refer=https%3A%2F%2Fold.sermitsiaq.ag%2F&res=14.2071&rmtc=t&shu=ce7f8fcae5a4c23a32202d325ee59220c60d2dc6d8dcbc203e089d40442ec73988c6848e16aa458db98fe3ba3ea66dcdb7b2638b9014ec80fb2308324a52884e8023802f445ae46f501b40c0b56a5e671d21e3e08b7e76c423dfd0293a1a50&tz=0&uuid=9b95bf8b-ffde-4c90-a71e-d5131e8e8693%3A3%3A1
200 OK 2.0 kB URL GET HTTP/1.1 speechanchor.com/watch.291664066790.js?dev=e&key=136d4e249eb5c2ca63d4dd0de8205e70&kw=%5B%22printable%22%2C%22template%22%5D&pst=1722371169&refer=https%3A%2F%2Fold.sermitsiaq.ag%2F&res=14.2071&rmtc=t&shu=ce7f8fcae5a4c23a32202d325ee59220c60d2dc6d8dcbc203e089d40442ec73988c6848e16aa458db98fe3ba3ea66dcdb7b2638b9014ec80fb2308324a52884e8023802f445ae46f501b40c0b56a5e671d21e3e08b7e76c423dfd0293a1a50&tz=0&uuid=9b95bf8b-ffde-4c90-a71e-d5131e8e8693%3A3%3A1
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://old.sermitsiaq.ag/
Certificate IssuerLet's Encrypt
Subjectspeechanchor.com
Fingerprint41:C1:E6:E0:E7:08:64:0F:0F:A7:6B:0D:28:20:4D:36:F3:D8:66:24
ValidityMon, 01 Jul 2024 13:44:52 GMT - Sun, 29 Sep 2024 13:44:51 GMT
File type JavaScript source, ASCII text, with very long lines (2527)
Hash bd5961fb610df0daa7d3b61ff70fd95f
171090ea5442c2d813e330d66c36f44444d9e733
d4b82613b11ea9c2b6963868a398d69bbbdd76e10593bdccbc40db0802ea0132
GET /watch.291664066790.js?dev=e&key=136d4e249eb5c2ca63d4dd0de8205e70&kw=%5B%22printable%22%2C%22template%22%5D&pst=1722371169&refer=https%3A%2F%2Fold.sermitsiaq.ag%2F&res=14.2071&rmtc=t&shu=ce7f8fcae5a4c23a32202d325ee59220c60d2dc6d8dcbc203e089d40442ec73988c6848e16aa458db98fe3ba3ea66dcdb7b2638b9014ec80fb2308324a52884e8023802f445ae46f501b40c0b56a5e671d21e3e08b7e76c423dfd0293a1a50&tz=0&uuid=9b95bf8b-ffde-4c90-a71e-d5131e8e8693%3A3%3A1 HTTP/1.1
Host: speechanchor.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://old.sermitsiaq.ag
Referer: https://old.sermitsiaq.ag/
DNT: 1
Connection: keep-alive
Cookie: u_pl=16248985; ain=eyJhbGciOiJIUzI1NiJ9.eyJwIjp7ImlkIjoxNjI0ODk4NSwiayI6IjEzNmQ0ZTI0OWViNWMyY2E2M2Q0ZGQwZGU4MjA1ZTcwIiwic2lkIjoiIiwiaXNpZCI6MiwiYXNpZCI6MSwiemlkIjoxNTQ2Mzk5LCJwaWQiOjcyNjI2LCJhbiI6dHJ1ZSwibGFuIjp0cnVlLCJjaWQiOjM1LCJhaWQiOjIzLCJwdCI6NCwicGsiOiJmOTZlcHllbSIsImNwa3MiOnsiMjgiOiI4NDkzMmQ0MDY1MzgyNzc5NTYyNWYyMTc5ZDQzYWI1MiJ9LCJ0IjoxfSwidSI6eyJ1IjoxLCJhdSI6MSwiZCI6eyJpZCI6Nzk5NTQxOTYsImlkcyI6IiIsImljIjpmYWxzZSwibiI6IkRlc2t0b3AsRW11bGF0b3IiLCJ2IjoiVW5rbm93biIsIm0iOiJVbmtub3duIiwiZiI6MSwiZm4iOiJEZXNrdG9wIiwib2lkIjoxODExMCwib24iOiJMaW51eCIsIm92IjoiVW5rbm93biIsImJpZCI6MTE2NjcwLCJibiI6IkZpcmVmb3giLCJidiI6Ijk2LjAiLCJ3diI6ZmFsc2UsImUiOnRydWUsImFiIjpmYWxzZX0sImMiOnsiaWQiOjE2MiwiYyI6Ik5PIiwibiI6Ik5vcndheSJ9LCJhIjpmYWxzZSwiY3IiOnsibiI6IkJsaXggU29sdXRpb25zIn0sInhmIjoiIiwiaXhmIjpmYWxzZSwiaWd4ZiI6ZmFsc2UsInVwIjp0cnVlLCJyIjoiaHR0cHM6Ly9vbGQuc2VybWl0c2lhcS5hZy8iLCJhciI6W119fQ.pIm_iIijhk-jAIh4ToUg6z94r_JQUP6FLbh9nMHkIrQ
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Tue, 30 Jul 2024 20:25:09 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://old.sermitsiaq.ag
Access-Control-Allow-Origin: https://old.sermitsiaq.ag
Access-Control-Allow-Credentials: true
Set-Cookie: uid_id2=9b95bf8b-ffde-4c90-a71e-d5131e8e8693:3:1; expires=Tue, 06 Aug 2024 20:25:09 GMT; path=/; secure; SameSite=None
iprc04622adb500b69cb775c306736f61c37=5260138; expires=Wed, 31 Jul 2024 20:25:09 GMT; path=/; secure; SameSite=None
pdhtkv=true; expires=Wed, 31 Jul 2024 20:25:09 GMT; path=/; secure; SameSite=None
uncs=1; expires=Wed, 31 Jul 2024 20:25:09 GMT; path=/; secure; SameSite=None
pdhtkv23=true; expires=Wed, 31 Jul 2024 20:25:09 GMT; path=/; secure; SameSite=None
uncs23=1; expires=Wed, 31 Jul 2024 20:25:09 GMT; path=/; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: 912194b58986ad81233d8bfe77535aff
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
471 B IP
Hash 81f352c0db715285a62fbf29b2216d25
91ca3dbf15752b132dbfe4fbf22c8dc047dc969c
3e7f3918e9d68a81aa57bcec632dad60d1c3b32a69e4a39860b58ff646b9ac70
POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 30 Jul 2024 20:25:09 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
GET employmentpersons.com/pixel/purst?dl=0&th=0&sc=0&rs=2575&rd=2575&fd=595&bv=24.5.8221&tmpl=136
200 OK 0 B URL GET HTTP/1.1 employmentpersons.com/pixel/purst?dl=0&th=0&sc=0&rs=2575&rd=2575&fd=595&bv=24.5.8221&tmpl=136
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://old.sermitsiaq.ag/
Certificate IssuerLet's Encrypt
Subjectemploymentpersons.com
FingerprintA8:88:C9:4C:AC:01:E7:00:9F:E9:49:9A:F8:7A:D5:D2:0A:88:79:4E
ValidityMon, 01 Jul 2024 15:33:43 GMT - Sun, 29 Sep 2024 15:33:42 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pixel/purst?dl=0&th=0&sc=0&rs=2575&rd=2575&fd=595&bv=24.5.8221&tmpl=136 HTTP/1.1
Host: employmentpersons.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://old.sermitsiaq.ag/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Tue, 30 Jul 2024 20:25:09 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
GET cdn.cloudimagesb.com/cti/d8/e6/0c/d8e60ca3941a06eb21874c213b2cd8e6/1716313389.gif
200 OK 263 kB URL GET HTTP/2 cdn.cloudimagesb.com/cti/d8/e6/0c/d8e60ca3941a06eb21874c213b2cd8e6/1716313389.gif
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://old.sermitsiaq.ag/
Certificate IssuerLet's Encrypt
Subjectcdn.cloudimagesb.com
FingerprintC4:E5:6E:E8:15:37:9B:58:9E:AA:84:E9:B0:65:53:C9:88:43:C1:59
ValiditySat, 20 Jul 2024 04:00:43 GMT - Fri, 18 Oct 2024 04:00:42 GMT
File type GIF image data, version 89a, 728 x 90
Size 263 kB (263110 bytes)
Hash 6ce4a4203b237535758ba6f50035e6fc
13c649f7721244ca0d9c544135732d07bb333f4c
7eb366c052562a431a9db71e7239348fbca887586223a3fe2cae0644727e263a
GET /cti/d8/e6/0c/d8e60ca3941a06eb21874c213b2cd8e6/1716313389.gif HTTP/1.1
Host: cdn.cloudimagesb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 30 Jul 2024 20:25:09 GMT
content-type: image/gif
content-length: 263110
server: nginx/1.21.6
last-modified: Tue, 21 May 2024 17:43:18 GMT
etag: "664cdd36-403c6"
expires: Thu, 01 Aug 2024 20:25:09 GMT
cache-control: max-age=172800
x-proxy-cache: HIT
x-cdn-host-id: ds5859
accept-ranges: bytes
X-Firefox-Spdy: h2
GET unseenreport.com/pxf.gif?uuid=9b95bf8b-ffde-4c90-a71e-d5131e8e8693&eb=978028c5053b26833423c7a069ce3bd5&te=5db3a4e34790624df926db520a13f79f&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&dev=e&res=14.2071&b_frame=0&pk=84932d40653827795625f2179d43ab52&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=20
200 OK 1 B URL GET HTTP/1.1 unseenreport.com/pxf.gif?uuid=9b95bf8b-ffde-4c90-a71e-d5131e8e8693&eb=978028c5053b26833423c7a069ce3bd5&te=5db3a4e34790624df926db520a13f79f&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&dev=e&res=14.2071&b_frame=0&pk=84932d40653827795625f2179d43ab52&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=20
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://old.sermitsiaq.ag/
Certificate IssuerLet's Encrypt
Subject*.unseenreport.com
FingerprintD9:3D:28:C1:14:1B:2B:53:0E:E4:3E:FC:88:7A:FF:9C:45:4B:63:C7
ValiditySat, 20 Jul 2024 14:59:20 GMT - Fri, 18 Oct 2024 14:59:19 GMT
File type very short file (no magic)
Hash 93b885adfe0da089cdf634904fd59f71
5ba93c9db0cff93f52b521d7420e43f6eda2784f
6e340b9cffb37a989ca544e6bb780a2c78901d3fb33738768511a30617afa01d
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /pxf.gif?uuid=9b95bf8b-ffde-4c90-a71e-d5131e8e8693&eb=978028c5053b26833423c7a069ce3bd5&te=5db3a4e34790624df926db520a13f79f&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&dev=e&res=14.2071&b_frame=0&pk=84932d40653827795625f2179d43ab52&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=20 HTTP/1.1
Host: unseenreport.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://old.sermitsiaq.ag/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Tue, 30 Jul 2024 20:25:10 GMT
Content-Type: image/gif
Content-Length: 1
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: 245981f829221f1665cd017994cd3ec3
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains
GET recordedthereby.com/sfp.js
200 OK 85 kB URL GET HTTP/2 recordedthereby.com/sfp.js
IP
Requested by https://old.sermitsiaq.ag/
Certificate IssuerGoogle Trust Services
Subjectrecordedthereby.com
FingerprintA1:CB:3E:AF:CE:F5:E9:D2:26:FB:E2:D4:FE:4B:29:D2:B3:C9:AD:3B
ValiditySat, 06 Jul 2024 15:25:15 GMT - Fri, 04 Oct 2024 15:25:14 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sfp.js HTTP/1.1
Host: recordedthereby.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://old.sermitsiaq.ag/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 30 Jul 2024 20:25:09 GMT
content-type: application/javascript; charset=utf-8
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
access-control-allow-origin: *
expires: Thu, 01 Jan 1970 00:00:01 GMT
cache-control: no-cache, max-age=0, private, no-cache
x-request-id: 2a32d33d0273c6e3a8f75409f4834bf6
pragma: no-cache
strict-transport-security: max-age=0; includeSubdomains
cf-cache-status: BYPASS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=m1dfjQoZKvGZsAg37gJ9mEXBJE7LebKPBa6%2BKCLXD0OUaazlJDKEb%2FeWAw5OxNMt94uMD1lqFaz74LGHlR%2BZ2ESXxE373DOegF7QBq2nz7x0hn23aluTX4IKqYO5pHgVEWqYnzkl"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8ab813897ad2b500-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
85.159.213.158
142.250.74.110
104.21.91.24
23.36.76.226
52.57.71.154