pointedpleasure.com/bq3_Vs0tP.2ulvj-PxXyBzzAJ_mC9D0EPFU-NHnISJlKZ_VMeNEOlPK-WRWS5TKUd_lWlXXYUZm-lbZcVdzeV_rgSh2iljB-MlVmpnUoY_3qdrOsVtE-lv5wTxmy1_GAaBlCpDE-ZFGGhHPIV_GKRLoMWNV-RPaQbRFSp_UUaVzWFXZ-VZ0alb4cT_0eRfngMhk-1j6kSlmmt_OoapkqNr6-Nt1uAv2wd_0yJzqAaBT-dDvEQFUGp_JIQJlKELt-LNSOZPyQc_mSlTkUPVT-MXwYNZGaE_4cNdTeEf1-OhWiQj1kN_mmNnloZpj-drisZtmuR_jwNxzyQz0-MB2CVDlEM_zGcHwIZJj-ML4MJNnOZ_0QPRTSET3-MVTWMXzYN_TaQbycOdT-EftgZhmiY_zkYl2mQnz-MpzqJrlsM_WuMv4wMxD-Iz1AMBDCM_1EMFmGQH2-MJzKELyMO_DOEP2QORG-IT2UZVjWM_mYeZma9bu-ZdWelfkgP_TiQj4kMlT-gn0oMpjqk_tsNtDugvx-OxDyQzzAM_AC?ce=lnk&cel=https://manhwatop.com/manga/my-system-is-very-serious/chapter-13/&dseq=1&rsrc=popscript_popunder&sseq=1
88.85.94.249 0 B URL pointedpleasure.com/bq3_Vs0tP.2ulvj-PxXyBzzAJ_mC9D0EPFU-NHnISJlKZ_VMeNEOlPK-WRWS5TKUd_lWlXXYUZm-lbZcVdzeV_rgSh2iljB-MlVmpnUoY_3qdrOsVtE-lv5wTxmy1_GAaBlCpDE-ZFGGhHPIV_GKRLoMWNV-RPaQbRFSp_UUaVzWFXZ-VZ0alb4cT_0eRfngMhk-1j6kSlmmt_OoapkqNr6-Nt1uAv2wd_0yJzqAaBT-dDvEQFUGp_JIQJlKELt-LNSOZPyQc_mSlTkUPVT-MXwYNZGaE_4cNdTeEf1-OhWiQj1kN_mmNnloZpj-drisZtmuR_jwNxzyQz0-MB2CVDlEM_zGcHwIZJj-ML4MJNnOZ_0QPRTSET3-MVTWMXzYN_TaQbycOdT-EftgZhmiY_zkYl2mQnz-MpzqJrlsM_WuMv4wMxD-Iz1AMBDCM_1EMFmGQH2-MJzKELyMO_DOEP2QORG-IT2UZVjWM_mYeZma9bu-ZdWelfkgP_TiQj4kMlT-gn0oMpjqk_tsNtDugvx-OxDyQzzAM_AC?ce=lnk&cel=https://manhwatop.com/manga/my-system-is-very-serious/chapter-13/&dseq=1&rsrc=popscript_popunder&sseq=1
IP 88.85.94.249:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /bq3_Vs0tP.2ulvj-PxXyBzzAJ_mC9D0EPFU-NHnISJlKZ_VMeNEOlPK-WRWS5TKUd_lWlXXYUZm-lbZcVdzeV_rgSh2iljB-MlVmpnUoY_3qdrOsVtE-lv5wTxmy1_GAaBlCpDE-ZFGGhHPIV_GKRLoMWNV-RPaQbRFSp_UUaVzWFXZ-VZ0alb4cT_0eRfngMhk-1j6kSlmmt_OoapkqNr6-Nt1uAv2wd_0yJzqAaBT-dDvEQFUGp_JIQJlKELt-LNSOZPyQc_mSlTkUPVT-MXwYNZGaE_4cNdTeEf1-OhWiQj1kN_mmNnloZpj-drisZtmuR_jwNxzyQz0-MB2CVDlEM_zGcHwIZJj-ML4MJNnOZ_0QPRTSET3-MVTWMXzYN_TaQbycOdT-EftgZhmiY_zkYl2mQnz-MpzqJrlsM_WuMv4wMxD-Iz1AMBDCM_1EMFmGQH2-MJzKELyMO_DOEP2QORG-IT2UZVjWM_mYeZma9bu-ZdWelfkgP_TiQj4kMlT-gn0oMpjqk_tsNtDugvx-OxDyQzzAM_AC?ce=lnk&cel=https://manhwatop.com/manga/my-system-is-very-serious/chapter-13/&dseq=1&rsrc=popscript_popunder&sseq=1 HTTP/1.1
Host: pointedpleasure.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
server: nginx
date: Wed, 17 Apr 2024 11:58:02 GMT
content-type: text/html;charset=UTF-8
content-length: 0
expires: Mon, 26 Jul 2011 05:00:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
accept-ch: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-WoW64
referrer-policy: no-referrer
x-frame-options: DENY
location: https://pointedpleasure.com/b.3_Va0bPc3dJ-yfagWhQi9_MkzlAm0nY-Tpgq1rMsT_Uu5vZwDxU-2zYA2BVCm_NE2FJGmHZ-GJMK3LNMD_QOzPZQWRU-zTNUzVBWm_MYzZgambc-ndNeyfYgz_1iwjbk3lB-znYo3pJqp_csHtRufvc-Gx9ywzdAW_5CkDZEXFI-mHcI2JlKk_PMTNQO4PM-TRgS0TMUj_kWmXdYHZZ-ybPcTdAem_egmh9iujZ-WllmknPoT_Iq1rMsTtU-xvOwDxcy
x-content-type-options: nosniff
X-Firefox-Spdy: h2
deywepri.com/l?v=CZ4Izf1O
88.85.69.213200 OK 3.9 kB URL User Request POST HTTP/1.1 deywepri.com/l?v=CZ4Izf1O
IP 88.85.69.213:443
Certificate IssuerLet's Encrypt
Subjectdeywepri.com
FingerprintDE:4C:75:DA:2A:BF:21:15:4C:FA:CE:71:C3:FA:18:F8:F1:50:D4:3A
ValiditySat, 06 Apr 2024 23:02:46 GMT - Fri, 05 Jul 2024 23:02:45 GMT
File type HTML document, ASCII text, with very long lines (920)
Hash 30effc9b90792a144a78e71721f1cc6c
b324741d3857f507d5255dc4d9c419f7f8f91c29
0969f5d3f780d4eda83cc5e29ec12c7f9c58614d75a0ab05fc150f42dfabde27
POST /l?v=CZ4Izf1O HTTP/1.1
Host: deywepri.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 858
Origin: null
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 17 Apr 2024 11:58:03 GMT
Content-Type: text/html;charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Content-Type-Options: nosniff
Content-Encoding: br
deywepri.com/views/grecaptcha/css/style.css
88.85.69.213200 OK 599 B URL GET HTTP/1.1 deywepri.com/views/grecaptcha/css/style.css
IP 88.85.69.213:443
Requested by https://deywepri.com/l?v=CZ4Izf1O
Certificate IssuerLet's Encrypt
Subjectdeywepri.com
FingerprintDE:4C:75:DA:2A:BF:21:15:4C:FA:CE:71:C3:FA:18:F8:F1:50:D4:3A
ValiditySat, 06 Apr 2024 23:02:46 GMT - Fri, 05 Jul 2024 23:02:45 GMT
Hash 27eac474447efeacaa8d51b91912b26d
f630300c7d5c71d2d87472512f4ed4d5fbb5b89a
69790d23d3ec08dbfa6909de36996b4cd3b0154e57b78ccb0e8a281f5e6e72ce
GET /views/grecaptcha/css/style.css HTTP/1.1
Host: deywepri.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://deywepri.com/l?v=CZ4Izf1O
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 17 Apr 2024 11:58:03 GMT
Content-Type: text/css
Last-Modified: Fri, 22 Mar 2024 10:38:16 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"65fd5f98-67e"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Content-Type-Options: nosniff
Content-Encoding: br
deywepri.com/views/grecaptcha/css/mainstream.css
88.85.69.213200 OK 170 B URL GET HTTP/1.1 deywepri.com/views/grecaptcha/css/mainstream.css
IP 88.85.69.213:443
Requested by https://deywepri.com/l?v=CZ4Izf1O
Certificate IssuerLet's Encrypt
Subjectdeywepri.com
FingerprintDE:4C:75:DA:2A:BF:21:15:4C:FA:CE:71:C3:FA:18:F8:F1:50:D4:3A
ValiditySat, 06 Apr 2024 23:02:46 GMT - Fri, 05 Jul 2024 23:02:45 GMT
Hash 52b8c08e14b61f9dec8aa0ca6243dea2
1afe3e1ec5ea900ddbbca25fa085f898fdca6856
c19a3b5e10e979b08b2bcb55f68849e96e390c9bfd0b323a64a451bfbb95bf1c
GET /views/grecaptcha/css/mainstream.css HTTP/1.1
Host: deywepri.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://deywepri.com/l?v=CZ4Izf1O
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 17 Apr 2024 11:58:03 GMT
Content-Type: text/css
Last-Modified: Fri, 22 Mar 2024 10:38:16 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"65fd5f98-2d1"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Content-Type-Options: nosniff
Content-Encoding: br
deywepri.com/views/grecaptcha/js/recaptcha.min.js?v=1713281383068249900
88.85.69.213200 OK 546 B URL GET HTTP/1.1 deywepri.com/views/grecaptcha/js/recaptcha.min.js?v=1713281383068249900
IP 88.85.69.213:443
Requested by https://deywepri.com/l?v=CZ4Izf1O
Certificate IssuerLet's Encrypt
Subjectdeywepri.com
FingerprintDE:4C:75:DA:2A:BF:21:15:4C:FA:CE:71:C3:FA:18:F8:F1:50:D4:3A
ValiditySat, 06 Apr 2024 23:02:46 GMT - Fri, 05 Jul 2024 23:02:45 GMT
File type JavaScript source, ASCII text, with very long lines (1115)
Hash 26ba95d3318a71a043b60f28d2a4ef62
2a60fcd6c6ffd1a9b1268507db9c8e56a232b4df
e935e010bb697396b415fecbdc8e92dc4a3d7277649dfea0c70631fbe5c67505
GET /views/grecaptcha/js/recaptcha.min.js?v=1713281383068249900 HTTP/1.1
Host: deywepri.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://deywepri.com/l?v=CZ4Izf1O
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 17 Apr 2024 11:58:03 GMT
Content-Type: application/javascript
Last-Modified: Fri, 22 Mar 2024 10:38:16 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"65fd5f98-4f6"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Content-Type-Options: nosniff
Content-Encoding: br
deywepri.com/views/grecaptcha/js/debugMode.js?v=1713281383068249900
88.85.69.213200 OK 434 B URL GET HTTP/1.1 deywepri.com/views/grecaptcha/js/debugMode.js?v=1713281383068249900
IP 88.85.69.213:443
Requested by https://deywepri.com/l?v=CZ4Izf1O
Certificate IssuerLet's Encrypt
Subjectdeywepri.com
FingerprintDE:4C:75:DA:2A:BF:21:15:4C:FA:CE:71:C3:FA:18:F8:F1:50:D4:3A
ValiditySat, 06 Apr 2024 23:02:46 GMT - Fri, 05 Jul 2024 23:02:45 GMT
Hash 9e39ff189e016a78bc35c603f434eae3
8082d791393f3f08aaec171491d57b76d6d6d5aa
22f93a906aa144d4a67e38e0ad3eb6d5b7338949a66390864dec7d3131e362ff
GET /views/grecaptcha/js/debugMode.js?v=1713281383068249900 HTTP/1.1
Host: deywepri.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://deywepri.com/l?v=CZ4Izf1O
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 17 Apr 2024 11:58:03 GMT
Content-Type: application/javascript
Last-Modified: Fri, 22 Mar 2024 10:38:16 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"65fd5f98-553"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Content-Type-Options: nosniff
Content-Encoding: br
deywepri.com/views/grecaptcha/js/botDetect.min.js?v=1713281383068249900
88.85.69.213200 OK 9.0 kB URL GET HTTP/1.1 deywepri.com/views/grecaptcha/js/botDetect.min.js?v=1713281383068249900
IP 88.85.69.213:443
Requested by https://deywepri.com/l?v=CZ4Izf1O
Certificate IssuerLet's Encrypt
Subjectdeywepri.com
FingerprintDE:4C:75:DA:2A:BF:21:15:4C:FA:CE:71:C3:FA:18:F8:F1:50:D4:3A
ValiditySat, 06 Apr 2024 23:02:46 GMT - Fri, 05 Jul 2024 23:02:45 GMT
File type JavaScript source, ASCII text, with very long lines (29124)
Hash f7687ff36d6654cde4e042385c02d11f
92b2adb164f45ac1dbc5538b9f3ffdccfed8e482
ba9b728987cd01302f5a311e28bf6513dc2b04d43c8b47743e206ccc7608522e
GET /views/grecaptcha/js/botDetect.min.js?v=1713281383068249900 HTTP/1.1
Host: deywepri.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://deywepri.com/l?v=CZ4Izf1O
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 17 Apr 2024 11:58:03 GMT
Content-Type: application/javascript
Last-Modified: Fri, 22 Mar 2024 10:38:16 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"65fd5f98-7225"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Content-Type-Options: nosniff
Content-Encoding: br
deywepri.com/views/grecaptcha/js/touchEvent.min.js?v=1713281383068249900
88.85.69.213200 OK 5.3 kB URL GET HTTP/1.1 deywepri.com/views/grecaptcha/js/touchEvent.min.js?v=1713281383068249900
IP 88.85.69.213:443
Requested by https://deywepri.com/l?v=CZ4Izf1O
Certificate IssuerLet's Encrypt
Subjectdeywepri.com
FingerprintDE:4C:75:DA:2A:BF:21:15:4C:FA:CE:71:C3:FA:18:F8:F1:50:D4:3A
ValiditySat, 06 Apr 2024 23:02:46 GMT - Fri, 05 Jul 2024 23:02:45 GMT
File type JavaScript source, ASCII text, with very long lines (20222)
Hash da7c38d2a4e1f5d413629b404cb01836
3be32f1e0c02ae5b2f4401e8a3ee1f67f14822e7
69b3260be19acba9e09cbcd30fc608e0f60fbe7cb097483dc906827e8429e3a0
GET /views/grecaptcha/js/touchEvent.min.js?v=1713281383068249900 HTTP/1.1
Host: deywepri.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://deywepri.com/l?v=CZ4Izf1O
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 17 Apr 2024 11:58:03 GMT
Content-Type: application/javascript
Last-Modified: Fri, 22 Mar 2024 10:38:16 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"65fd5f98-4f92"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Content-Type-Options: nosniff
Content-Encoding: br
deywepri.com/views/grecaptcha/js/hanalytics.min.js?v=1713281383068249900
88.85.69.213200 OK 3.0 kB URL GET HTTP/1.1 deywepri.com/views/grecaptcha/js/hanalytics.min.js?v=1713281383068249900
IP 88.85.69.213:443
Requested by https://deywepri.com/l?v=CZ4Izf1O
Certificate IssuerLet's Encrypt
Subjectdeywepri.com
FingerprintDE:4C:75:DA:2A:BF:21:15:4C:FA:CE:71:C3:FA:18:F8:F1:50:D4:3A
ValiditySat, 06 Apr 2024 23:02:46 GMT - Fri, 05 Jul 2024 23:02:45 GMT
File type JavaScript source, ASCII text, with very long lines (8053)
Hash 3c12e7c0ee844149c50f2c547c979c0a
0e257907505db9ce27e9386da79c8db883455ca3
f70d91cf7c7080ac7863b956f3caaf55546f1b1021b70ea3ae9d1627e2f46788
GET /views/grecaptcha/js/hanalytics.min.js?v=1713281383068249900 HTTP/1.1
Host: deywepri.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://deywepri.com/l?v=CZ4Izf1O
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 17 Apr 2024 11:58:03 GMT
Content-Type: application/javascript
Last-Modified: Fri, 22 Mar 2024 10:38:16 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"65fd5f98-1fa8"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Content-Type-Options: nosniff
Content-Encoding: br
deywepri.com/views/grecaptcha/js/events.min.js?v=1713281383068249900
88.85.69.213200 OK 2.5 kB URL GET HTTP/1.1 deywepri.com/views/grecaptcha/js/events.min.js?v=1713281383068249900
IP 88.85.69.213:443
Requested by https://deywepri.com/l?v=CZ4Izf1O
Certificate IssuerLet's Encrypt
Subjectdeywepri.com
FingerprintDE:4C:75:DA:2A:BF:21:15:4C:FA:CE:71:C3:FA:18:F8:F1:50:D4:3A
ValiditySat, 06 Apr 2024 23:02:46 GMT - Fri, 05 Jul 2024 23:02:45 GMT
File type JavaScript source, ASCII text, with very long lines (7126), with no line terminators
Hash 4fb85ea7794a57ee813b86db9ff670df
d9ea12cefc454ad893e25fe9282b73b7f493089b
d87e4f84ee00f66b89738f8f7b4566f3008c36ad27fe9cdaa173eac99f37bb61
GET /views/grecaptcha/js/events.min.js?v=1713281383068249900 HTTP/1.1
Host: deywepri.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://deywepri.com/l?v=CZ4Izf1O
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 17 Apr 2024 11:58:03 GMT
Content-Type: application/javascript
Last-Modified: Fri, 22 Mar 2024 10:38:16 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"65fd5f98-1bd6"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Content-Type-Options: nosniff
Content-Encoding: br
deywepri.com/views/grecaptcha/js/cacheIcon.min.js?v=1713281383068249900
88.85.69.213200 OK 900 B URL GET HTTP/1.1 deywepri.com/views/grecaptcha/js/cacheIcon.min.js?v=1713281383068249900
IP 88.85.69.213:443
Requested by https://deywepri.com/l?v=CZ4Izf1O
Certificate IssuerLet's Encrypt
Subjectdeywepri.com
FingerprintDE:4C:75:DA:2A:BF:21:15:4C:FA:CE:71:C3:FA:18:F8:F1:50:D4:3A
ValiditySat, 06 Apr 2024 23:02:46 GMT - Fri, 05 Jul 2024 23:02:45 GMT
File type JavaScript source, ASCII text, with very long lines (1999), with no line terminators
Hash 6bc1f7fded5a7e3131bd940ed293ea49
bbd6df8fd579acecfb773d6074abe1d44f4ac46b
eda54e4682f917bf18bf48619ad08dcb5035c26b271a55e55feffcd9a75ec237
GET /views/grecaptcha/js/cacheIcon.min.js?v=1713281383068249900 HTTP/1.1
Host: deywepri.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://deywepri.com/l?v=CZ4Izf1O
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 17 Apr 2024 11:58:03 GMT
Content-Type: application/javascript
Last-Modified: Fri, 22 Mar 2024 10:38:16 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"65fd5f98-7cf"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Content-Type-Options: nosniff
Content-Encoding: br
deywepri.com/views/grecaptcha/js/checkLogin.min.js?v=1713281383068249900
88.85.69.213200 OK 663 B URL GET HTTP/1.1 deywepri.com/views/grecaptcha/js/checkLogin.min.js?v=1713281383068249900
IP 88.85.69.213:443
Requested by https://deywepri.com/l?v=CZ4Izf1O
Certificate IssuerLet's Encrypt
Subjectdeywepri.com
FingerprintDE:4C:75:DA:2A:BF:21:15:4C:FA:CE:71:C3:FA:18:F8:F1:50:D4:3A
ValiditySat, 06 Apr 2024 23:02:46 GMT - Fri, 05 Jul 2024 23:02:45 GMT
File type JavaScript source, ASCII text, with very long lines (1804), with no line terminators
Hash 1e3212d9af95966463cfe347669ac693
b14c94dc2c743ba816419275c349ad15f85e906c
f4c922a7f3513aa6574af7930e8884f972f9cfd2670b50a56d861a1328798e0a
GET /views/grecaptcha/js/checkLogin.min.js?v=1713281383068249900 HTTP/1.1
Host: deywepri.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://deywepri.com/l?v=CZ4Izf1O
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 17 Apr 2024 11:58:03 GMT
Content-Type: application/javascript
Last-Modified: Fri, 22 Mar 2024 10:38:16 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"65fd5f98-70c"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Content-Type-Options: nosniff
Content-Encoding: br
deywepri.com/views/grecaptcha/js/extFpHash.js?v=1713281383068249900
88.85.69.213200 OK 97 kB URL GET HTTP/1.1 deywepri.com/views/grecaptcha/js/extFpHash.js?v=1713281383068249900
IP 88.85.69.213:443
Requested by https://deywepri.com/l?v=CZ4Izf1O
Certificate IssuerLet's Encrypt
Subjectdeywepri.com
FingerprintDE:4C:75:DA:2A:BF:21:15:4C:FA:CE:71:C3:FA:18:F8:F1:50:D4:3A
ValiditySat, 06 Apr 2024 23:02:46 GMT - Fri, 05 Jul 2024 23:02:45 GMT
File type JavaScript source, ASCII text, with very long lines (65465)
Hash d0ab0c5780d9c77ab54e202c769b1433
c298c6ed6cfb8d35efcbe967344d2684347fd791
970fc826d5ed2e9acdd93772526abb6941c0735c6a76621969f47a1e1e1d0ae1
GET /views/grecaptcha/js/extFpHash.js?v=1713281383068249900 HTTP/1.1
Host: deywepri.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://deywepri.com/l?v=CZ4Izf1O
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 17 Apr 2024 11:58:03 GMT
Content-Type: application/javascript
Last-Modified: Fri, 22 Mar 2024 10:38:16 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"65fd5f98-41f2c"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Content-Type-Options: nosniff
Content-Encoding: br
dull-egg.pro/aMGNE./Oe_mQ9RuSZTU-lVkWPXTYI_1aMbTcUdx-OfDgchmiY_WkRlJmZnD-0pzqNrDsY_zuMvjwcxm-cz0AlBkCP_TEQF4GMHT-gJ0KMLjMk_mOcP0QlRk-MTjU0VmWc_0YlZkaMbz-0dmecfngJ_piZjDk0lz-MnDoRphqO_DsUtxuNvT-lxkyNzTAZ_jCZDWEYF3-YHmIZJkKY_zMcN0ONPD-NRlSZTTUM_3WMXGYYZz-ObCcZd1eb_mglhxiQjn-llUmenXoB_lqPrTsAtm-dvWw5xpyc_UAJB5CWDm-9FuGZHTI0_wKJLnMVNu-aPXQFRCSe_UUZVlWZXW-QZ9aMbCcZ_1ebfmglhx-QjnkllGmb_3oJptqYrX-Qt9uMvCwZ_wydzDA0Bw-JDnEJF2GP_TIAJmKaLH-MN9OcPWQE_mSbTHUBVp-PXTYMZyaN_TcIdmeafG-lh0iSjWkQ_9mYnWoMp1-OrGsQtzuM_zwhxmyYzj-UB0CYDTEc_2GMHDIIJw-YLTMUN0OY_zQRRhSOTW-ZVlWNXzYQ_waMbmcIdm-cfmgVhmiR_Gk9ltmYnW-lpuqPrQs
188.72.219.36200 OK 0 B URL POST HTTP/2 dull-egg.pro/aMGNE./Oe_mQ9RuSZTU-lVkWPXTYI_1aMbTcUdx-OfDgchmiY_WkRlJmZnD-0pzqNrDsY_zuMvjwcxm-cz0AlBkCP_TEQF4GMHT-gJ0KMLjMk_mOcP0QlRk-MTjU0VmWc_0YlZkaMbz-0dmecfngJ_piZjDk0lz-MnDoRphqO_DsUtxuNvT-lxkyNzTAZ_jCZDWEYF3-YHmIZJkKY_zMcN0ONPD-NRlSZTTUM_3WMXGYYZz-ObCcZd1eb_mglhxiQjn-llUmenXoB_lqPrTsAtm-dvWw5xpyc_UAJB5CWDm-9FuGZHTI0_wKJLnMVNu-aPXQFRCSe_UUZVlWZXW-QZ9aMbCcZ_1ebfmglhx-QjnkllGmb_3oJptqYrX-Qt9uMvCwZ_wydzDA0Bw-JDnEJF2GP_TIAJmKaLH-MN9OcPWQE_mSbTHUBVp-PXTYMZyaN_TcIdmeafG-lh0iSjWkQ_9mYnWoMp1-OrGsQtzuM_zwhxmyYzj-UB0CYDTEc_2GMHDIIJw-YLTMUN0OY_zQRRhSOTW-ZVlWNXzYQ_waMbmcIdm-cfmgVhmiR_Gk9ltmYnW-lpuqPrQs
IP 188.72.219.36:443
Requested by https://deywepri.com/l?v=CZ4Izf1O
Certificate IssuerLet's Encrypt
Subjectdull-egg.pro
Fingerprint2C:38:E2:A2:7C:32:0F:35:69:9E:5F:4E:16:78:F1:B6:84:34:5C:35
ValiditySun, 14 Apr 2024 03:22:01 GMT - Sat, 13 Jul 2024 03:22:00 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /aMGNE./Oe_mQ9RuSZTU-lVkWPXTYI_1aMbTcUdx-OfDgchmiY_WkRlJmZnD-0pzqNrDsY_zuMvjwcxm-cz0AlBkCP_TEQF4GMHT-gJ0KMLjMk_mOcP0QlRk-MTjU0VmWc_0YlZkaMbz-0dmecfngJ_piZjDk0lz-MnDoRphqO_DsUtxuNvT-lxkyNzTAZ_jCZDWEYF3-YHmIZJkKY_zMcN0ONPD-NRlSZTTUM_3WMXGYYZz-ObCcZd1eb_mglhxiQjn-llUmenXoB_lqPrTsAtm-dvWw5xpyc_UAJB5CWDm-9FuGZHTI0_wKJLnMVNu-aPXQFRCSe_UUZVlWZXW-QZ9aMbCcZ_1ebfmglhx-QjnkllGmb_3oJptqYrX-Qt9uMvCwZ_wydzDA0Bw-JDnEJF2GP_TIAJmKaLH-MN9OcPWQE_mSbTHUBVp-PXTYMZyaN_TcIdmeafG-lh0iSjWkQ_9mYnWoMp1-OrGsQtzuM_zwhxmyYzj-UB0CYDTEc_2GMHDIIJw-YLTMUN0OY_zQRRhSOTW-ZVlWNXzYQ_waMbmcIdm-cfmgVhmiR_Gk9ltmYnW-lpuqPrQs HTTP/1.1
Host: dull-egg.pro
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 61
Origin: https://deywepri.com
DNT: 1
Connection: keep-alive
Referer: https://deywepri.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 17 Apr 2024 11:58:03 GMT
content-length: 0
expires: Mon, 26 Jul 2011 05:00:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
accept-ch: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-WoW64
p3p: CP="CUR ADM OUR NOR STA NID"
access-control-allow-credentials: true
vary: Origin
last-modified: Wed, 17 Apr 2024 11:58:03 GMT
access-control-allow-origin: https://deywepri.com
x-content-type-options: nosniff
X-Firefox-Spdy: h2
deywepri.com/favicon.ico
88.85.69.213200 OK 19 kB IP 88.85.69.213:443
Requested by https://deywepri.com/l?v=CZ4Izf1O
Certificate IssuerLet's Encrypt
Subjectdeywepri.com
FingerprintDE:4C:75:DA:2A:BF:21:15:4C:FA:CE:71:C3:FA:18:F8:F1:50:D4:3A
ValiditySat, 06 Apr 2024 23:02:46 GMT - Fri, 05 Jul 2024 23:02:45 GMT
File type ASCII text, with very long lines (19321), with no line terminators
Hash b8511bc84d69b72d0194c29a3ce52968
9d7935e6aef48e623fdf1432d8847a83c44bf0ae
fbc556740a68a3c5b4dc61c37baa5c74fbb1c9fd4420811b625e557dee86fd53
GET /favicon.ico HTTP/1.1
Host: deywepri.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://deywepri.com/l?v=CZ4Izf1O
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 17 Apr 2024 11:58:04 GMT
Content-Type: image/x-icon
Content-Length: 19321
Connection: keep-alive
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Content-Type-Options: nosniff
dull-egg.pro/Ybm-Rd0eP.3fpgv_bimjVkJlZ-Dn0oypNqT_Es1tMuTvg-3xJymzFAk_SCWDQE9FM-zHQI2JMKz_IM3NJOnPN-JRZSDT0U0_OWDXEY4ZN-DbIc5dJen_NgJhZiDjI-9lJmnnNoJ_ZqDrMs9tJ-nvJwyxayW_QA9BMCzDA-0FYGTHgI1_MKTLUM5NZ-DPUQ2RYS2_VUmVNW2XJ-mZZaGbMc3_NeDfQgzhZ-WjUkzlNmz_BompMqzrg-mtduWv5wp_cyUzJA5BV-HDlEwFZGT_0IwJJKnLV-uNaOXPFQC_eSVTpUvVb-mXUY9ZMaC_Zc1dbemfl-xhQinjlkG_ZmWnVokpP-TrAsmtduW_5wpxcyUzJ-5BRCmD9Ey_bGWHFI0JP-TLAMmNcOH_QQ9RMSCTZ-yVdWjX0Yw_JambhczdP-XfFghhJim_xkwlamTn0-zpMqjrUsy_Jumvhwpxd-EzlAkBPCW_FEjFNGTHh-kJMKzLMM4_ZOmPIQ1RN-GTEU3VNWj_AYyZMaGbE-1dNeGfMg0_YiTjlkmlZ-Tnco0pMqD_JsitJunvJ-lxZykzRAv_bCWDFEpFb-jH0I
188.72.219.36200 OK 0 B URL POST HTTP/2 dull-egg.pro/Ybm-Rd0eP.3fpgv_bimjVkJlZ-Dn0oypNqT_Es1tMuTvg-3xJymzFAk_SCWDQE9FM-zHQI2JMKz_IM3NJOnPN-JRZSDT0U0_OWDXEY4ZN-DbIc5dJen_NgJhZiDjI-9lJmnnNoJ_ZqDrMs9tJ-nvJwyxayW_QA9BMCzDA-0FYGTHgI1_MKTLUM5NZ-DPUQ2RYS2_VUmVNW2XJ-mZZaGbMc3_NeDfQgzhZ-WjUkzlNmz_BompMqzrg-mtduWv5wp_cyUzJA5BV-HDlEwFZGT_0IwJJKnLV-uNaOXPFQC_eSVTpUvVb-mXUY9ZMaC_Zc1dbemfl-xhQinjlkG_ZmWnVokpP-TrAsmtduW_5wpxcyUzJ-5BRCmD9Ey_bGWHFI0JP-TLAMmNcOH_QQ9RMSCTZ-yVdWjX0Yw_JambhczdP-XfFghhJim_xkwlamTn0-zpMqjrUsy_Jumvhwpxd-EzlAkBPCW_FEjFNGTHh-kJMKzLMM4_ZOmPIQ1RN-GTEU3VNWj_AYyZMaGbE-1dNeGfMg0_YiTjlkmlZ-Tnco0pMqD_JsitJunvJ-lxZykzRAv_bCWDFEpFb-jH0I
IP 188.72.219.36:443
Requested by https://deywepri.com/l?v=CZ4Izf1O
Certificate IssuerLet's Encrypt
Subjectdull-egg.pro
Fingerprint2C:38:E2:A2:7C:32:0F:35:69:9E:5F:4E:16:78:F1:B6:84:34:5C:35
ValiditySun, 14 Apr 2024 03:22:01 GMT - Sat, 13 Jul 2024 03:22:00 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /Ybm-Rd0eP.3fpgv_bimjVkJlZ-Dn0oypNqT_Es1tMuTvg-3xJymzFAk_SCWDQE9FM-zHQI2JMKz_IM3NJOnPN-JRZSDT0U0_OWDXEY4ZN-DbIc5dJen_NgJhZiDjI-9lJmnnNoJ_ZqDrMs9tJ-nvJwyxayW_QA9BMCzDA-0FYGTHgI1_MKTLUM5NZ-DPUQ2RYS2_VUmVNW2XJ-mZZaGbMc3_NeDfQgzhZ-WjUkzlNmz_BompMqzrg-mtduWv5wp_cyUzJA5BV-HDlEwFZGT_0IwJJKnLV-uNaOXPFQC_eSVTpUvVb-mXUY9ZMaC_Zc1dbemfl-xhQinjlkG_ZmWnVokpP-TrAsmtduW_5wpxcyUzJ-5BRCmD9Ey_bGWHFI0JP-TLAMmNcOH_QQ9RMSCTZ-yVdWjX0Yw_JambhczdP-XfFghhJim_xkwlamTn0-zpMqjrUsy_Jumvhwpxd-EzlAkBPCW_FEjFNGTHh-kJMKzLMM4_ZOmPIQ1RN-GTEU3VNWj_AYyZMaGbE-1dNeGfMg0_YiTjlkmlZ-Tnco0pMqD_JsitJunvJ-lxZykzRAv_bCWDFEpFb-jH0I HTTP/1.1
Host: dull-egg.pro
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 1431
Origin: https://deywepri.com
DNT: 1
Connection: keep-alive
Referer: https://deywepri.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 17 Apr 2024 11:58:06 GMT
content-length: 0
expires: Mon, 26 Jul 2011 05:00:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
accept-ch: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-WoW64
p3p: CP="CUR ADM OUR NOR STA NID"
access-control-allow-credentials: true
vary: Origin
last-modified: Wed, 17 Apr 2024 11:58:06 GMT
access-control-allow-origin: https://deywepri.com
x-content-type-options: nosniff
X-Firefox-Spdy: h2
deywepri.com/views/grecaptcha/img/mainstream/laptop.png
88.85.69.213200 OK 1.2 MB URL GET HTTP/1.1 deywepri.com/views/grecaptcha/img/mainstream/laptop.png
IP 88.85.69.213:443
Requested by https://deywepri.com/l?v=CZ4Izf1O
Certificate IssuerLet's Encrypt
Subjectdeywepri.com
FingerprintDE:4C:75:DA:2A:BF:21:15:4C:FA:CE:71:C3:FA:18:F8:F1:50:D4:3A
ValiditySat, 06 Apr 2024 23:02:46 GMT - Fri, 05 Jul 2024 23:02:45 GMT
File type PNG image data, 1436 x 1025, 8-bit/color RGBA, non-interlaced
Size 1.2 MB (1192830 bytes)
Hash 64c05ce3df8cc7e9f2d6a828a5de9bb9
193d3891f2d1e8aa3ea0efdad64c0dadc8e2ce3e
940e231d1846ab2e4091fff0840fd4e68fc04742098006d81a6cfe463f236dd5
GET /views/grecaptcha/img/mainstream/laptop.png HTTP/1.1
Host: deywepri.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://deywepri.com/views/grecaptcha/css/mainstream.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 17 Apr 2024 11:58:06 GMT
Content-Type: image/png
Content-Length: 1192830
Last-Modified: Fri, 22 Mar 2024 10:38:16 GMT
Connection: keep-alive
ETag: "65fd5f98-12337e"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Content-Type-Options: nosniff
Accept-Ranges: bytes
deywepri.com/bdt
88.85.69.213200 OK 2 B IP 88.85.69.213:443
Requested by https://deywepri.com/l?v=CZ4Izf1O
Certificate IssuerLet's Encrypt
Subjectdeywepri.com
FingerprintDE:4C:75:DA:2A:BF:21:15:4C:FA:CE:71:C3:FA:18:F8:F1:50:D4:3A
ValiditySat, 06 Apr 2024 23:02:46 GMT - Fri, 05 Jul 2024 23:02:45 GMT
File type ASCII text, with no line terminators
Hash e0aa021e21dddbd6d8cecec71e9cf564
9ce3bd4224c8c1780db56b4125ecf3f24bf748b7
565339bc4d33d72817b583024112eb7f5cdf3e5eef0252d6ec1b9c9a94e12bb3
POST /bdt HTTP/1.1
Host: deywepri.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 2100
Origin: https://deywepri.com
DNT: 1
Connection: keep-alive
Referer: https://deywepri.com/l?v=CZ4Izf1O
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 17 Apr 2024 11:58:06 GMT
Content-Type: text/plain; charset=utf-8
Content-Length: 2
Connection: keep-alive
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Content-Type-Options: nosniff
dull-egg.pro/aMGNE./Oe_mQ9RuSZTU-lVkWPXTYI_1aMbTcUdx-OfDgchmiY_WkRlJmZnD-0pzqNrDsY_zuMvjwcxm-cz0AlBkCP_TEQF4GMHT-gJ0KMLjMk_mOcP0QlRk-MTjU0VmWc_0YlZkaMbz-0dmecfngJ_piZjDk0lz-MnDoRphqO_DsUtxuNvT-lxkyNzTAZ_jCZDWEYF3-YHmIZJkKY_zMcN0ONPD-NRlSZTTUM_3WMXGYYZz-ObCcZd1eb_mglhxiQjn-llUmenXoB_lqPrTsAtm-dvWw5xpyc_UAJB5CWDm-9FuGZHTI0_wKJLnMVNu-aPXQFRCSe_UUZVlWZXW-QZ9aMbCcZ_1ebfmglhx-QjnkllGmb_3oJptqYrX-Qt9uMvCwZ_wydzDA0Bw-JDnEJF2GP_TIAJmKaLH-MN9OcPWQE_mSbTHUBVp-PXTYMZyaN_TcIdmeafG-lh0iSjWkQ_9mYnWoMp1-OrGsQtzuM_zwhxmyYzj-UB0CYDTEc_2GMHDIIJw-YLTMUN0OY_zQRRhSOTW-ZVlWNXzYQ_waMbmcIdm-cfmgVhmiR_Gk9ltmYnW-lpuqPrQs
188.72.219.36200 OK 0 B URL POST HTTP/2 dull-egg.pro/aMGNE./Oe_mQ9RuSZTU-lVkWPXTYI_1aMbTcUdx-OfDgchmiY_WkRlJmZnD-0pzqNrDsY_zuMvjwcxm-cz0AlBkCP_TEQF4GMHT-gJ0KMLjMk_mOcP0QlRk-MTjU0VmWc_0YlZkaMbz-0dmecfngJ_piZjDk0lz-MnDoRphqO_DsUtxuNvT-lxkyNzTAZ_jCZDWEYF3-YHmIZJkKY_zMcN0ONPD-NRlSZTTUM_3WMXGYYZz-ObCcZd1eb_mglhxiQjn-llUmenXoB_lqPrTsAtm-dvWw5xpyc_UAJB5CWDm-9FuGZHTI0_wKJLnMVNu-aPXQFRCSe_UUZVlWZXW-QZ9aMbCcZ_1ebfmglhx-QjnkllGmb_3oJptqYrX-Qt9uMvCwZ_wydzDA0Bw-JDnEJF2GP_TIAJmKaLH-MN9OcPWQE_mSbTHUBVp-PXTYMZyaN_TcIdmeafG-lh0iSjWkQ_9mYnWoMp1-OrGsQtzuM_zwhxmyYzj-UB0CYDTEc_2GMHDIIJw-YLTMUN0OY_zQRRhSOTW-ZVlWNXzYQ_waMbmcIdm-cfmgVhmiR_Gk9ltmYnW-lpuqPrQs
IP 188.72.219.36:443
Requested by https://deywepri.com/l?v=CZ4Izf1O
Certificate IssuerLet's Encrypt
Subjectdull-egg.pro
Fingerprint2C:38:E2:A2:7C:32:0F:35:69:9E:5F:4E:16:78:F1:B6:84:34:5C:35
ValiditySun, 14 Apr 2024 03:22:01 GMT - Sat, 13 Jul 2024 03:22:00 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /aMGNE./Oe_mQ9RuSZTU-lVkWPXTYI_1aMbTcUdx-OfDgchmiY_WkRlJmZnD-0pzqNrDsY_zuMvjwcxm-cz0AlBkCP_TEQF4GMHT-gJ0KMLjMk_mOcP0QlRk-MTjU0VmWc_0YlZkaMbz-0dmecfngJ_piZjDk0lz-MnDoRphqO_DsUtxuNvT-lxkyNzTAZ_jCZDWEYF3-YHmIZJkKY_zMcN0ONPD-NRlSZTTUM_3WMXGYYZz-ObCcZd1eb_mglhxiQjn-llUmenXoB_lqPrTsAtm-dvWw5xpyc_UAJB5CWDm-9FuGZHTI0_wKJLnMVNu-aPXQFRCSe_UUZVlWZXW-QZ9aMbCcZ_1ebfmglhx-QjnkllGmb_3oJptqYrX-Qt9uMvCwZ_wydzDA0Bw-JDnEJF2GP_TIAJmKaLH-MN9OcPWQE_mSbTHUBVp-PXTYMZyaN_TcIdmeafG-lh0iSjWkQ_9mYnWoMp1-OrGsQtzuM_zwhxmyYzj-UB0CYDTEc_2GMHDIIJw-YLTMUN0OY_zQRRhSOTW-ZVlWNXzYQ_waMbmcIdm-cfmgVhmiR_Gk9ltmYnW-lpuqPrQs HTTP/1.1
Host: dull-egg.pro
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 6518
Origin: https://deywepri.com
DNT: 1
Connection: keep-alive
Referer: https://deywepri.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 17 Apr 2024 11:58:06 GMT
content-length: 0
expires: Mon, 26 Jul 2011 05:00:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
accept-ch: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-WoW64
access-control-allow-origin: https://deywepri.com
p3p: CP="CUR ADM OUR NOR STA NID"
access-control-allow-credentials: true
vary: Origin
last-modified: Wed, 17 Apr 2024 11:58:06 GMT
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.amazon.com/favicon.ico
23.38.201.180 2.5 kB URL GET www.amazon.com/favicon.ico
IP 23.38.201.180:0
Requested by https://deywepri.com/l?v=CZ4Izf1O
Certificate IssuerDigiCert Inc
Subjectwww.amazon.com
Fingerprint16:61:C8:C4:18:95:4A:31:9B:C4:3F:AD:F7:97:7F:5C:A7:2F:09:A0
ValidityTue, 06 Feb 2024 00:00:00 GMT - Tue, 14 Jan 2025 23:59:59 GMT
File type MS Windows icon resource - 4 icons, 48x48, 32 bits/pixel, 32x32, 32 bits/pixel
Hash ca6619b86c2f6e6068b69ba3aaddb7e4
c44a1bb9d14385334eb851fbb0afb19d961c1ee7
17d02e2db6dbedb95dd449d06868c147ac2c3b5371497bcb9407e75336a99e09
GET /favicon.ico HTTP/1.1
Host: www.amazon.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://deywepri.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: Server
content-type: image/x-icon
x-amz-rid: 26PDMZ475XDXZE2X7MFF
accept-ranges: bytes
etag: "4486-490c87c5a6340"
last-modified: Tue, 21 Sep 2010 17:37:41 GMT
x-content-type-options: nosniff
strict-transport-security: max-age=47474747; includeSubDomains; preload
x-frame-options: SAMEORIGIN
content-encoding: gzip
content-length: 2477
date: Wed, 17 Apr 2024 11:58:06 GMT
vary: Accept-Encoding
alt-svc: h3=":443"; ma=93600
x-amzn-cdn-id: ak-0.164f2417.1713355086.7a0756b2
x-cache: RefreshHit from child
X-Firefox-Spdy: h2
newassets.hcaptcha.com/captcha/v1/b1c589a/static/hcaptcha.html
104.18.124.91 686 B URL newassets.hcaptcha.com/captcha/v1/b1c589a/static/hcaptcha.html
IP 104.18.124.91:0
File type HTML document, ASCII text, with very long lines (1165)
Hash 3d1f28caf6c2bab68e6f70fa0952e46b
626164a4b3ef5da55c2d6c2b6f89e271dd622767
e1308539d9ae9c8c04a21cabd5bc4ffba8436c143b32c4fcd6329beb38d25118
GET /captcha/v1/b1c589a/static/hcaptcha.html HTTP/1.1
Host: newassets.hcaptcha.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://deywepri.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 17 Apr 2024 11:58:06 GMT
content-type: text/html
cache-control: public, max-age=1209600
alt-svc: h3=":443"; ma=86400
vary: Origin, Accept-Encoding
cf-cache-status: HIT
expires: Wed, 01 May 2024 11:58:06 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 875c3dc91d2a92a9-CPH
content-encoding: br
www.google.com/favicon.ico
142.250.147.99 1.5 kB URL GET www.google.com/favicon.ico
IP 142.250.147.99:0
Requested by https://deywepri.com/l?v=CZ4Izf1O
Certificate IssuerGoogle Trust Services LLC
Subjectwww.google.com
FingerprintCC:CC:99:46:65:6C:77:0B:C8:AA:AD:5E:58:B6:2D:19:B2:C7:0B:06
ValidityMon, 04 Mar 2024 07:19:07 GMT - Mon, 27 May 2024 07:19:06 GMT
File type MS Windows icon resource - 2 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
Hash f3418a443e7d841097c714d69ec4bcb8
49263695f6b0cdd72f45cf1b775e660fdc36c606
6da5620880159634213e197fafca1dde0272153be3e4590818533fab8d040770
GET /favicon.ico HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://deywepri.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="static-on-bigtable"
report-to: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]}
content-length: 1494
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 17 Apr 2024 10:44:41 GMT
expires: Thu, 25 Apr 2024 10:44:41 GMT
cache-control: public, max-age=691200
last-modified: Tue, 22 Oct 2019 18:30:00 GMT
content-type: image/x-icon
vary: Accept-Encoding
age: 4405
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
dull-egg.pro/aMGNE./Oe_mQ9RuSZTU-lVkWPXTYI_1aMbTcUdx-OfDgchmiY_WkRlJmZnD-0pzqNrDsY_zuMvjwcxm-cz0AlBkCP_TEQF4GMHT-gJ0KMLjMk_mOcP0QlRk-MTjU0VmWc_0YlZkaMbz-0dmecfngJ_piZjDk0lz-MnDoRphqO_DsUtxuNvT-lxkyNzTAZ_jCZDWEYF3-YHmIZJkKY_zMcN0ONPD-NRlSZTTUM_3WMXGYYZz-ObCcZd1eb_mglhxiQjn-llUmenXoB_lqPrTsAtm-dvWw5xpyc_UAJB5CWDm-9FuGZHTI0_wKJLnMVNu-aPXQFRCSe_UUZVlWZXW-QZ9aMbCcZ_1ebfmglhx-QjnkllGmb_3oJptqYrX-Qt9uMvCwZ_wydzDA0Bw-JDnEJF2GP_TIAJmKaLH-MN9OcPWQE_mSbTHUBVp-PXTYMZyaN_TcIdmeafG-lh0iSjWkQ_9mYnWoMp1-OrGsQtzuM_zwhxmyYzj-UB0CYDTEc_2GMHDIIJw-YLTMUN0OY_zQRRhSOTW-ZVlWNXzYQ_waMbmcIdm-cfmgVhmiR_Gk9ltmYnW-lpuqPrQs
188.72.219.36200 OK 0 B URL POST HTTP/2 dull-egg.pro/aMGNE./Oe_mQ9RuSZTU-lVkWPXTYI_1aMbTcUdx-OfDgchmiY_WkRlJmZnD-0pzqNrDsY_zuMvjwcxm-cz0AlBkCP_TEQF4GMHT-gJ0KMLjMk_mOcP0QlRk-MTjU0VmWc_0YlZkaMbz-0dmecfngJ_piZjDk0lz-MnDoRphqO_DsUtxuNvT-lxkyNzTAZ_jCZDWEYF3-YHmIZJkKY_zMcN0ONPD-NRlSZTTUM_3WMXGYYZz-ObCcZd1eb_mglhxiQjn-llUmenXoB_lqPrTsAtm-dvWw5xpyc_UAJB5CWDm-9FuGZHTI0_wKJLnMVNu-aPXQFRCSe_UUZVlWZXW-QZ9aMbCcZ_1ebfmglhx-QjnkllGmb_3oJptqYrX-Qt9uMvCwZ_wydzDA0Bw-JDnEJF2GP_TIAJmKaLH-MN9OcPWQE_mSbTHUBVp-PXTYMZyaN_TcIdmeafG-lh0iSjWkQ_9mYnWoMp1-OrGsQtzuM_zwhxmyYzj-UB0CYDTEc_2GMHDIIJw-YLTMUN0OY_zQRRhSOTW-ZVlWNXzYQ_waMbmcIdm-cfmgVhmiR_Gk9ltmYnW-lpuqPrQs
IP 188.72.219.36:443
Requested by https://deywepri.com/l?v=CZ4Izf1O
Certificate IssuerLet's Encrypt
Subjectdull-egg.pro
Fingerprint2C:38:E2:A2:7C:32:0F:35:69:9E:5F:4E:16:78:F1:B6:84:34:5C:35
ValiditySun, 14 Apr 2024 03:22:01 GMT - Sat, 13 Jul 2024 03:22:00 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /aMGNE./Oe_mQ9RuSZTU-lVkWPXTYI_1aMbTcUdx-OfDgchmiY_WkRlJmZnD-0pzqNrDsY_zuMvjwcxm-cz0AlBkCP_TEQF4GMHT-gJ0KMLjMk_mOcP0QlRk-MTjU0VmWc_0YlZkaMbz-0dmecfngJ_piZjDk0lz-MnDoRphqO_DsUtxuNvT-lxkyNzTAZ_jCZDWEYF3-YHmIZJkKY_zMcN0ONPD-NRlSZTTUM_3WMXGYYZz-ObCcZd1eb_mglhxiQjn-llUmenXoB_lqPrTsAtm-dvWw5xpyc_UAJB5CWDm-9FuGZHTI0_wKJLnMVNu-aPXQFRCSe_UUZVlWZXW-QZ9aMbCcZ_1ebfmglhx-QjnkllGmb_3oJptqYrX-Qt9uMvCwZ_wydzDA0Bw-JDnEJF2GP_TIAJmKaLH-MN9OcPWQE_mSbTHUBVp-PXTYMZyaN_TcIdmeafG-lh0iSjWkQ_9mYnWoMp1-OrGsQtzuM_zwhxmyYzj-UB0CYDTEc_2GMHDIIJw-YLTMUN0OY_zQRRhSOTW-ZVlWNXzYQ_waMbmcIdm-cfmgVhmiR_Gk9ltmYnW-lpuqPrQs HTTP/1.1
Host: dull-egg.pro
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 163
Origin: https://deywepri.com
DNT: 1
Connection: keep-alive
Referer: https://deywepri.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 17 Apr 2024 11:58:07 GMT
content-length: 0
expires: Mon, 26 Jul 2011 05:00:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
accept-ch: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-WoW64
access-control-allow-credentials: true
vary: Origin
last-modified: Wed, 17 Apr 2024 11:58:07 GMT
access-control-allow-origin: https://deywepri.com
p3p: CP="CUR ADM OUR NOR STA NID"
x-content-type-options: nosniff
X-Firefox-Spdy: h2
newassets.hcaptcha.com/captcha/v1/b1c589a/hcaptcha.js
104.18.124.91200 OK 111 kB URL GET HTTP/3 newassets.hcaptcha.com/captcha/v1/b1c589a/hcaptcha.js
IP 104.18.124.91:443
Requested by https://newassets.hcaptcha.com/captcha/v1/b1c589a/static/hcaptcha.html#frame=challenge&id=0ivk0blptk0i&host=deywepri.com&sentry=true&reportapi=https%3A%2F%2Faccounts.hcaptcha.com&recaptchacompat=true&custom=false&hl=en&tplinks=on&pstissuer=https%3A%2F%2Fpst-issuer.hcaptcha.com&sitekey=35afe8c0-9ebe-460b-b981-2dd69519f5c8&theme=light&origin=https%3A%2F%2Fdeywepri.com
Certificate IssuerLet's Encrypt
Subjecthcaptcha.com
Fingerprint8F:BD:51:60:5C:FC:EA:F0:74:47:AB:AC:1B:84:1A:7E:3C:68:A7:E5
ValidityFri, 15 Mar 2024 00:09:38 GMT - Thu, 13 Jun 2024 00:09:37 GMT
File type JavaScript source, Unicode text, UTF-8 text, with very long lines (41625)
Size 111 kB (110585 bytes)
Hash 052bf4abb4128ef78b68c418f7d94678
2b6c44a8cc009017a2909c7afd71e371e82b7d27
01908359050da30c842f89d13af0447be961b00b67b46eb61114d1fa48f1bdc9
GET /captcha/v1/b1c589a/hcaptcha.js HTTP/1.1
Host: newassets.hcaptcha.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://newassets.hcaptcha.com/captcha/v1/b1c589a/static/hcaptcha.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 17 Apr 2024 11:58:06 GMT
content-type: application/javascript
etag: W/"5a68efa2b964d5c167fde3b130af8e94"
cache-control: public, max-age=1209600
alt-svc: h3=":443"; ma=86400
vary: Origin, Accept-Encoding
cf-cache-status: HIT
expires: Wed, 01 May 2024 11:58:06 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 875c3dcb089192a9-CPH
content-encoding: br
www.baidu.com/favicon.ico
103.235.46.40 2.0 kB URL GET www.baidu.com/favicon.ico
IP 103.235.46.40:0
ASN #55967 Beijing Baidu Netcom Science and Technology Co., Ltd.
Requested by https://deywepri.com/l?v=CZ4Izf1O
Certificate IssuerGlobalSign nv-sa
Subjectbaidu.com
Fingerprint97:42:D5:98:27:D6:22:88:CF:59:C3:FF:75:86:8D:D5:D3:12:A0:AF
ValidityThu, 06 Jul 2023 01:51:06 GMT - Tue, 06 Aug 2024 01:51:05 GMT
File type MS Windows icon resource - 1 icon, 64x64, 32 bits/pixel
Hash 717b138033a41361b32b60fc5062ab2a
af9841b6f0923f890f41feec52c94a0cd68f01d8
c70088079fe9441a726c66ce0e73ae38315ec80051d3dd542c41b82fa0a1993a
GET /favicon.ico HTTP/1.1
Host: www.baidu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://deywepri.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Content-Encoding: gzip
Content-Length: 1966
Content-Type: image/x-icon
Date: Wed, 17 Apr 2024 11:58:08 GMT
Etag: "423e-5bd257db4e500"
Last-Modified: Wed, 10 Mar 2021 02:33:24 GMT
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: Apache
Set-Cookie: BAIDUID=C2C64B03EEDB047A5B05C487EAB81C15:FG=1; expires=Thu, 17-Apr-25 11:58:08 GMT; max-age=31536000; path=/; domain=.baidu.com; version=1
Vary: Accept-Encoding,User-Agent
accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&uilel=3&hl=en&service=mail
64.233.165.84302 Found 0 B URL GET HTTP/2 accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&uilel=3&hl=en&service=mail
IP 64.233.165.84:443
Requested by https://deywepri.com/l?v=CZ4Izf1O
Certificate IssuerGoogle Trust Services LLC
Subjectaccounts.google.com
FingerprintCC:CB:DD:14:30:B0:75:6A:EE:1D:20:F1:9E:C5:DD:5F:DD:68:4F:7B
ValidityMon, 18 Mar 2024 20:38:53 GMT - Mon, 10 Jun 2024 20:38:52 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&uilel=3&hl=en&service=mail HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
content-type: application/binary
set-cookie: __Host-GAPS=1:LbCoUPOyUEDncV5zxvbj85p516D1Nw:Usph4nk06AW2Zk1_; Expires=Fri, 17-Apr-2026 11:58:08 GMT; Path=/; Secure; HttpOnly; Priority=HIGH
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Wed, 17 Apr 2024 11:58:08 GMT
location: https://accounts.google.com/InteractiveLogin?continue=https://www.google.com/favicon.ico&hl=en&passive=true&service=mail&uilel=3&ifkv=ARZ0qKIiyeZSqJgC7Je1CudrhXW35zS8lRkFDVMLttr7_-giLP2K6MC6u4ICjoBQKyooZJrh-TP2-A
strict-transport-security: max-age=31536000; includeSubDomains
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
content-security-policy: script-src 'nonce-XDWgAHIYmpXMNFTMuq_5pg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/AccountsSigninPassiveLoginHttp/cspreport/allowlist, require-trusted-types-for 'script';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport
cross-origin-opener-policy: unsafe-none
cross-origin-resource-policy: cross-origin
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factor=*, ch-ua-platform=*, ch-ua-platform-version=*
server: ESF
content-length: 0
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
accounts.google.com/ServiceLogin?service=blogger&hl=de&passive=1209600&continue=https://www.blogger.com/favicon.ico
64.233.165.84302 Found 0 B URL GET HTTP/2 accounts.google.com/ServiceLogin?service=blogger&hl=de&passive=1209600&continue=https://www.blogger.com/favicon.ico
IP 64.233.165.84:443
Requested by https://deywepri.com/l?v=CZ4Izf1O
Certificate IssuerGoogle Trust Services LLC
Subjectaccounts.google.com
FingerprintCC:CB:DD:14:30:B0:75:6A:EE:1D:20:F1:9E:C5:DD:5F:DD:68:4F:7B
ValidityMon, 18 Mar 2024 20:38:53 GMT - Mon, 10 Jun 2024 20:38:52 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ServiceLogin?service=blogger&hl=de&passive=1209600&continue=https://www.blogger.com/favicon.ico HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
content-type: application/binary
set-cookie: __Host-GAPS=1:CKc3DQOtwYGkcB0_B_npedJoqVesKA:Dt9BFAH-FhPgxk0q; Expires=Fri, 17-Apr-2026 11:58:08 GMT; Path=/; Secure; HttpOnly; Priority=HIGH
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Wed, 17 Apr 2024 11:58:08 GMT
location: https://accounts.google.com/InteractiveLogin?continue=https://www.blogger.com/favicon.ico&hl=de&passive=1209600&service=blogger&ifkv=ARZ0qKI_6FgasI8b4PBdBqStQzg4g6bGPMl5DI7ZSp8H9YVx0XePPPGPOa_qO25trV9nDyEVbkHFTg
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-opener-policy: unsafe-none
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
cross-origin-resource-policy: cross-origin
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factor=*, ch-ua-platform=*, ch-ua-platform-version=*
content-security-policy: require-trusted-types-for 'script';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport, script-src 'nonce-9Kv_o4v8YeDUh9c4A_Jr9Q' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/AccountsSigninPassiveLoginHttp/cspreport/allowlist
server: ESF
content-length: 0
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&uilel=3&hl=en&service=youtube
64.233.165.84302 Found 0 B URL GET HTTP/2 accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&uilel=3&hl=en&service=youtube
IP 64.233.165.84:443
Requested by https://deywepri.com/l?v=CZ4Izf1O
Certificate IssuerGoogle Trust Services LLC
Subjectaccounts.google.com
FingerprintCC:CB:DD:14:30:B0:75:6A:EE:1D:20:F1:9E:C5:DD:5F:DD:68:4F:7B
ValidityMon, 18 Mar 2024 20:38:53 GMT - Mon, 10 Jun 2024 20:38:52 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&uilel=3&hl=en&service=youtube HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
content-type: application/binary
set-cookie: __Host-GAPS=1:PFOg29-XO2ryVRtHfzKkiGl8glyc7Q:O-WRlA-lHFX1ZTwZ; Expires=Fri, 17-Apr-2026 11:58:08 GMT; Path=/; Secure; HttpOnly; Priority=HIGH
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Wed, 17 Apr 2024 11:58:08 GMT
location: https://accounts.google.com/InteractiveLogin?continue=https://www.youtube.com/favicon.ico&hl=en&passive=true&service=youtube&uilel=3&ifkv=ARZ0qKLmCF9zMjw5kCyYN87SvUEnlNBJdwcVZs7LO03nZxkkAtUDSEIxz10J_AWzE8fL5Pg2QCquuQ
strict-transport-security: max-age=31536000; includeSubDomains
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factor=*, ch-ua-platform=*, ch-ua-platform-version=*
content-security-policy: require-trusted-types-for 'script';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport, script-src 'nonce-E-OBd0q6ZZ3OVXcIZHDMXg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/AccountsSigninPassiveLoginHttp/cspreport/allowlist
cross-origin-opener-policy: unsafe-none
cross-origin-resource-policy: cross-origin
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
server: ESF
content-length: 0
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
newassets.hcaptcha.com/captcha/v1/b1c589a/hcaptcha.js
104.18.124.91200 OK 112 kB URL GET HTTP/3 newassets.hcaptcha.com/captcha/v1/b1c589a/hcaptcha.js
IP 104.18.124.91:443
Requested by https://newassets.hcaptcha.com/captcha/v1/b1c589a/static/hcaptcha.html#frame=challenge&id=0ivk0blptk0i&host=deywepri.com&sentry=true&reportapi=https%3A%2F%2Faccounts.hcaptcha.com&recaptchacompat=true&custom=false&hl=en&tplinks=on&pstissuer=https%3A%2F%2Fpst-issuer.hcaptcha.com&sitekey=35afe8c0-9ebe-460b-b981-2dd69519f5c8&theme=light&origin=https%3A%2F%2Fdeywepri.com
Certificate IssuerLet's Encrypt
Subjecthcaptcha.com
Fingerprint8F:BD:51:60:5C:FC:EA:F0:74:47:AB:AC:1B:84:1A:7E:3C:68:A7:E5
ValidityFri, 15 Mar 2024 00:09:38 GMT - Thu, 13 Jun 2024 00:09:37 GMT
File type JavaScript source, Unicode text, UTF-8 text, with very long lines (41625)
Size 112 kB (111525 bytes)
Hash 052bf4abb4128ef78b68c418f7d94678
2b6c44a8cc009017a2909c7afd71e371e82b7d27
01908359050da30c842f89d13af0447be961b00b67b46eb61114d1fa48f1bdc9
GET /captcha/v1/b1c589a/hcaptcha.js HTTP/1.1
Host: newassets.hcaptcha.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://newassets.hcaptcha.com/captcha/v1/b1c589a/static/hcaptcha.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 17 Apr 2024 11:58:06 GMT
content-type: application/javascript
etag: W/"5a68efa2b964d5c167fde3b130af8e94"
cache-control: public, max-age=1209600
alt-svc: h3=":443"; ma=86400
vary: Origin, Accept-Encoding
cf-cache-status: HIT
expires: Wed, 01 May 2024 11:58:06 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 875c3dcb089792a9-CPH
content-encoding: br
accounts.google.com/InteractiveLogin?continue=https://www.google.com/favicon.ico&hl=en&passive=true&service=mail&uilel=3&ifkv=ARZ0qKIiyeZSqJgC7Je1CudrhXW35zS8lRkFDVMLttr7_-giLP2K6MC6u4ICjoBQKyooZJrh-TP2-A
64.233.165.84302 Found 426 B URL GET HTTP/2 accounts.google.com/InteractiveLogin?continue=https://www.google.com/favicon.ico&hl=en&passive=true&service=mail&uilel=3&ifkv=ARZ0qKIiyeZSqJgC7Je1CudrhXW35zS8lRkFDVMLttr7_-giLP2K6MC6u4ICjoBQKyooZJrh-TP2-A
IP 64.233.165.84:443
Requested by https://deywepri.com/l?v=CZ4Izf1O
Certificate IssuerGoogle Trust Services LLC
Subjectaccounts.google.com
FingerprintCC:CB:DD:14:30:B0:75:6A:EE:1D:20:F1:9E:C5:DD:5F:DD:68:4F:7B
ValidityMon, 18 Mar 2024 20:38:53 GMT - Mon, 10 Jun 2024 20:38:52 GMT
File type HTML document, ASCII text, with very long lines (403)
Hash be28cdd51a9e33553f7fb89d38e12b30
963da6e022ab9cc9e35ec4d201d36315aeed88b6
2e8b1c3b1d968428b261389e8e27ec2aef6670b78a899d516903cf7178930a20
GET /InteractiveLogin?continue=https://www.google.com/favicon.ico&hl=en&passive=true&service=mail&uilel=3&ifkv=ARZ0qKIiyeZSqJgC7Je1CudrhXW35zS8lRkFDVMLttr7_-giLP2K6MC6u4ICjoBQKyooZJrh-TP2-A HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
content-type: text/html; charset=UTF-8
set-cookie: __Host-GAPS=1:g3rM65znPtG55txObpjX3cpLzOKYjw:YinrXLsTdGvxYtiE;Path=/;Expires=Fri, 17-Apr-2026 11:58:08 GMT;Secure;HttpOnly;Priority=HIGH
x-frame-options: DENY
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Wed, 17 Apr 2024 11:58:08 GMT
location: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&hl=en&ifkv=ARZ0qKJPYcC_4hA66_wOLcM_QE2BM0IAPlPkhRcN5J4WTwdbukThk-KcTw_AecJ_R-wTmUiLPKLO4A&passive=true&service=mail&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S1745368080%3A1713355088532547&theme=mn&ddm=0
strict-transport-security: max-age=31536000; includeSubDomains
content-security-policy: script-src 'nonce-wCjcAfjagPgZPyK6Y6fldA' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /cspreport, require-trusted-types-for 'script';report-uri /cspreport
report-to: {"group":"coop_gse_qebhlk","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gse_qebhlk"}]}
cross-origin-opener-policy-report-only: same-origin; report-to="coop_gse_qebhlk"
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 426
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
accounts.google.com/InteractiveLogin?continue=https://www.blogger.com/favicon.ico&hl=de&passive=1209600&service=blogger&ifkv=ARZ0qKI_6FgasI8b4PBdBqStQzg4g6bGPMl5DI7ZSp8H9YVx0XePPPGPOa_qO25trV9nDyEVbkHFTg
64.233.165.84302 Found 424 B URL GET HTTP/2 accounts.google.com/InteractiveLogin?continue=https://www.blogger.com/favicon.ico&hl=de&passive=1209600&service=blogger&ifkv=ARZ0qKI_6FgasI8b4PBdBqStQzg4g6bGPMl5DI7ZSp8H9YVx0XePPPGPOa_qO25trV9nDyEVbkHFTg
IP 64.233.165.84:443
Requested by https://deywepri.com/l?v=CZ4Izf1O
Certificate IssuerGoogle Trust Services LLC
Subjectaccounts.google.com
FingerprintCC:CB:DD:14:30:B0:75:6A:EE:1D:20:F1:9E:C5:DD:5F:DD:68:4F:7B
ValidityMon, 18 Mar 2024 20:38:53 GMT - Mon, 10 Jun 2024 20:38:52 GMT
File type HTML document, ASCII text, with very long lines (398)
Hash 11ac83bc3d4fbb444b6d56719d06eb2e
16dc11ffb29a67a6f529992a2099643834e5b215
f2a5973cfb208214ae159f74753cb8f3fdf5287882e8f93c83b24467644ee84a
GET /InteractiveLogin?continue=https://www.blogger.com/favicon.ico&hl=de&passive=1209600&service=blogger&ifkv=ARZ0qKI_6FgasI8b4PBdBqStQzg4g6bGPMl5DI7ZSp8H9YVx0XePPPGPOa_qO25trV9nDyEVbkHFTg HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
content-type: text/html; charset=UTF-8
set-cookie: __Host-GAPS=1:ZaFnlF6I9n-Ap4Sr1Bx27ciWDgJlsg:x0SAP-xcVDIgqPdz;Path=/;Expires=Fri, 17-Apr-2026 11:58:08 GMT;Secure;HttpOnly;Priority=HIGH
x-frame-options: DENY
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Wed, 17 Apr 2024 11:58:08 GMT
location: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.blogger.com%2Ffavicon.ico&hl=de&ifkv=ARZ0qKKyIWqtA8cTbvesYZXgpoEFmBIQCe1-VbMGJH1w5EQHPXo5jussd3qs-mAwR3LCPTmp0C-lAA&passive=1209600&service=blogger&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S1124582224%3A1713355088548444&theme=mn&ddm=0
strict-transport-security: max-age=31536000; includeSubDomains
content-security-policy: script-src 'nonce-TmPIn1Nk2pz2fdZLxtD2DA' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /cspreport, require-trusted-types-for 'script';report-uri /cspreport
report-to: {"group":"coop_gse_qebhlk","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gse_qebhlk"}]}
cross-origin-opener-policy-report-only: same-origin; report-to="coop_gse_qebhlk"
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 424
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
accounts.google.com/InteractiveLogin?continue=https://www.youtube.com/favicon.ico&hl=en&passive=true&service=youtube&uilel=3&ifkv=ARZ0qKLmCF9zMjw5kCyYN87SvUEnlNBJdwcVZs7LO03nZxkkAtUDSEIxz10J_AWzE8fL5Pg2QCquuQ
64.233.165.84302 Found 430 B URL GET HTTP/2 accounts.google.com/InteractiveLogin?continue=https://www.youtube.com/favicon.ico&hl=en&passive=true&service=youtube&uilel=3&ifkv=ARZ0qKLmCF9zMjw5kCyYN87SvUEnlNBJdwcVZs7LO03nZxkkAtUDSEIxz10J_AWzE8fL5Pg2QCquuQ
IP 64.233.165.84:443
Requested by https://deywepri.com/l?v=CZ4Izf1O
Certificate IssuerGoogle Trust Services LLC
Subjectaccounts.google.com
FingerprintCC:CB:DD:14:30:B0:75:6A:EE:1D:20:F1:9E:C5:DD:5F:DD:68:4F:7B
ValidityMon, 18 Mar 2024 20:38:53 GMT - Mon, 10 Jun 2024 20:38:52 GMT
File type HTML document, ASCII text, with very long lines (407)
Hash 51fae18db019ac0b03ba0c335624fcd7
7a3e21c3f5388c5262906f3d0fd6f79300bed7f4
954018ac0d85990ad81004c9e19cf9c06e2f8ace1c0f32e7840d51724b05ef5b
GET /InteractiveLogin?continue=https://www.youtube.com/favicon.ico&hl=en&passive=true&service=youtube&uilel=3&ifkv=ARZ0qKLmCF9zMjw5kCyYN87SvUEnlNBJdwcVZs7LO03nZxkkAtUDSEIxz10J_AWzE8fL5Pg2QCquuQ HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
content-type: text/html; charset=UTF-8
set-cookie: __Host-GAPS=1:V68mSTVA3z35BKdKzloAp7y-jYjvmQ:F4sgCfT1tzbSlrzn;Path=/;Expires=Fri, 17-Apr-2026 11:58:08 GMT;Secure;HttpOnly;Priority=HIGH
x-frame-options: DENY
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Wed, 17 Apr 2024 11:58:08 GMT
location: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&hl=en&ifkv=ARZ0qKKjsDL1KK5tJ38qziQNiXfEWE9AFk6Ej3LrLKAYfUkQUw78QzkYiW2F-4ENsa3H7WI41Bs2Og&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-569822442%3A1713355088554486&theme=mn&ddm=0
strict-transport-security: max-age=31536000; includeSubDomains
report-to: {"group":"coop_gse_qebhlk","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gse_qebhlk"}]}
cross-origin-opener-policy-report-only: same-origin; report-to="coop_gse_qebhlk"
content-security-policy: script-src 'nonce-iEE836XTbAs3MDDciUQ8rA' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /cspreport, require-trusted-types-for 'script';report-uri /cspreport
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 430
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
mail.yandex.ru/?retpath=https://mail.yandex.ru/favicon.ico?666
77.88.21.37 60 B URL GET mail.yandex.ru/?retpath=https://mail.yandex.ru/favicon.ico?666
IP 77.88.21.37:0
Requested by https://deywepri.com/l?v=CZ4Izf1O
Certificate IssuerGlobalSign nv-sa
Subjectmail.yandex.ru
Fingerprint9F:BB:D2:D1:C8:B0:07:2D:1C:25:B9:DD:C2:EF:A8:AE:9F:A3:4E:9A
ValidityMon, 16 Oct 2023 07:59:00 GMT - Fri, 17 May 2024 07:59:00 GMT
File type ASCII text, with no line terminators
Hash 3ce3efffbe76c9e8938ee4068be0887e
c87dbc227147babc95d061c8acdefa75d275bed4
b287f90a45063299afd73544f5f78c33842fb8d230223a822df96c29300dbe8f
GET /?retpath=https://mail.yandex.ru/favicon.ico?666 HTTP/1.1
Host: mail.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Wed, 17 Apr 2024 11:58:08 GMT
Content-Type: text/plain; charset=utf-8
Content-Length: 60
Connection: keep-alive
Set-Cookie: yandexuid=9569186431713355088; Domain=.yandex.ru; Path=/; Expires=Mon, 17 Apr 2034 11:58:08 GMT
Location: https://360.yandex.ru/mail
Vary: Accept
NEL: {"report_to": "network-errors", "max_age": 604800, "success_fraction": 0.005, "failure_fraction": 0.5}
Report-To: {"group": "network-errors", "max_age": 604800, "endpoints": [{"url": "https://dr.yandex.net/ya360/nel", "priority": 1}, {"url": "https://dr2.yandex.net/ya360/nel", "priority": 2}]}
x-dns-prefetch-control: off
Cache-Control: private,no-cache,no-store,must-revalidate,max-age=0
X-Request-Id: bf9dfecc3619a4c993f13bb6b975048a
Strict-Transport-Security: max-age=315360000
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&hl=en&ifkv=ARZ0qKJPYcC_4hA66_wOLcM_QE2BM0IAPlPkhRcN5J4WTwdbukThk-KcTw_AecJ_R-wTmUiLPKLO4A&passive=true&service=mail&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S1745368080%3A1713355088532547&theme=mn&ddm=0
64.233.165.84403 Forbidden 805 B URL GET HTTP/2 accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&hl=en&ifkv=ARZ0qKJPYcC_4hA66_wOLcM_QE2BM0IAPlPkhRcN5J4WTwdbukThk-KcTw_AecJ_R-wTmUiLPKLO4A&passive=true&service=mail&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S1745368080%3A1713355088532547&theme=mn&ddm=0
IP 64.233.165.84:443
Requested by https://deywepri.com/l?v=CZ4Izf1O
Certificate IssuerGoogle Trust Services LLC
Subjectaccounts.google.com
FingerprintCC:CB:DD:14:30:B0:75:6A:EE:1D:20:F1:9E:C5:DD:5F:DD:68:4F:7B
ValidityMon, 18 Mar 2024 20:38:53 GMT - Mon, 10 Jun 2024 20:38:52 GMT
File type HTML document, Unicode text, UTF-8 text, with very long lines (1644), with no line terminators
Hash 93cd91b0922159a52716c8d0ae43f1e6
83ce956d911b61b7d7d1ca9696541249f39edad3
1892a1b10509cffc041abf6b7c721c00ba89b82204bf950b505f16a6e97bea42
GET /v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&hl=en&ifkv=ARZ0qKJPYcC_4hA66_wOLcM_QE2BM0IAPlPkhRcN5J4WTwdbukThk-KcTw_AecJ_R-wTmUiLPKLO4A&passive=true&service=mail&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S1745368080%3A1713355088532547&theme=mn&ddm=0 HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 403 Forbidden
content-type: text/html; charset=utf-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Wed, 17 Apr 2024 11:58:08 GMT
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
strict-transport-security: max-age=31536000; includeSubDomains
report-to: {"group":"AccountsSignInUi","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/AccountsSignInUi"}]}
content-security-policy: require-trusted-types-for 'script';report-uri /v3/signin/_/AccountsSignInUi/cspreport, script-src 'nonce-PfWzIMXj8A30xm8jRfa4Fg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /v3/signin/_/AccountsSignInUi/cspreport;worker-src 'self', script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /v3/signin/_/AccountsSignInUi/cspreport/allowlist
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factor=*, ch-ua-platform=*, ch-ua-platform-version=*
cross-origin-opener-policy-report-only: same-origin; report-to="AccountsSignInUi"
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.blogger.com%2Ffavicon.ico&hl=de&ifkv=ARZ0qKKyIWqtA8cTbvesYZXgpoEFmBIQCe1-VbMGJH1w5EQHPXo5jussd3qs-mAwR3LCPTmp0C-lAA&passive=1209600&service=blogger&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S1124582224%3A1713355088548444&theme=mn&ddm=0
64.233.165.84403 Forbidden 859 B URL GET HTTP/2 accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.blogger.com%2Ffavicon.ico&hl=de&ifkv=ARZ0qKKyIWqtA8cTbvesYZXgpoEFmBIQCe1-VbMGJH1w5EQHPXo5jussd3qs-mAwR3LCPTmp0C-lAA&passive=1209600&service=blogger&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S1124582224%3A1713355088548444&theme=mn&ddm=0
IP 64.233.165.84:443
Requested by https://deywepri.com/l?v=CZ4Izf1O
Certificate IssuerGoogle Trust Services LLC
Subjectaccounts.google.com
FingerprintCC:CB:DD:14:30:B0:75:6A:EE:1D:20:F1:9E:C5:DD:5F:DD:68:4F:7B
ValidityMon, 18 Mar 2024 20:38:53 GMT - Mon, 10 Jun 2024 20:38:52 GMT
File type gzip compressed data, max compression
Hash 673c2d82674e7ad6b6fa72cb108bb5fd
9cfb404baaa127ab6f6e21628df1fa554d4bfbf4
437bcc2edec08409df5f52077c2d2e4d198703d14c2d4d5ffb692e8d66ec1f96
GET /v3/signin/identifier?continue=https%3A%2F%2Fwww.blogger.com%2Ffavicon.ico&hl=de&ifkv=ARZ0qKKyIWqtA8cTbvesYZXgpoEFmBIQCe1-VbMGJH1w5EQHPXo5jussd3qs-mAwR3LCPTmp0C-lAA&passive=1209600&service=blogger&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S1124582224%3A1713355088548444&theme=mn&ddm=0 HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 403 Forbidden
content-type: text/html; charset=utf-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Wed, 17 Apr 2024 11:58:08 GMT
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
strict-transport-security: max-age=31536000; includeSubDomains
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factor=*, ch-ua-platform=*, ch-ua-platform-version=*
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
cross-origin-opener-policy-report-only: same-origin; report-to="AccountsSignInUi"
report-to: {"group":"AccountsSignInUi","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/AccountsSignInUi"}]}
content-security-policy: script-src 'nonce-esNsc8vO2GEumGQfRrHXdA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /v3/signin/_/AccountsSignInUi/cspreport;worker-src 'self', script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /v3/signin/_/AccountsSignInUi/cspreport/allowlist, require-trusted-types-for 'script';report-uri /v3/signin/_/AccountsSignInUi/cspreport
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
360.yandex.ru/mail/
87.250.250.16 43 kB IP 87.250.250.16:0
Requested by https://deywepri.com/l?v=CZ4Izf1O
Certificate IssuerGlobalSign nv-sa
Subject360.yandex.ru
FingerprintD4:DC:19:D2:42:2B:BC:88:69:10:FA:94:1C:78:04:49:44:B5:AD:58
ValidityThu, 28 Mar 2024 09:45:22 GMT - Mon, 28 Oct 2024 09:45:22 GMT
File type JavaScript source, Unicode text, UTF-8 text, with very long lines (19827)
Hash 3f39a7e492bebf609767432411804cb3
100ab12826351f2a4c96c670adedbd1d74759862
4dc3931198c0e786fac42216e0a2fe17c2d6ee046eb05d8e348ee7dff89a3f00
GET /mail/ HTTP/1.1
Host: 360.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: max-age=0, must-revalidate, proxy-revalidate, no-cache, no-store, private
Content-Encoding: gzip
Content-Security-Policy: default-src 'none'; script-src yastatic.net https://*.static-dev.mail.yandex.net/s3/psf/ 'unsafe-eval' 'nonce-Ctdq5NUEZty06xW0VAem9g==' 'self' 'unsafe-inline' mc.yandex.ru mc.yandex.az mc.yandex.by mc.yandex.co.il mc.yandex.com mc.yandex.com.am mc.yandex.com.ge mc.yandex.com.tr mc.yandex.ee mc.yandex.fr mc.yandex.kg mc.yandex.kz mc.yandex.lt mc.yandex.lv mc.yandex.md mc.yandex.ru mc.yandex.tj mc.yandex.tm mc.yandex.ua mc.yandex.uz mc.webvisor.com mc.webvisor.org mc.admetrica.ru yastatic.net; style-src yastatic.net https://*.static-dev.mail.yandex.net/s3/psf/ 'unsafe-inline' 'self' fonts.googleapis.com; font-src yastatic.net https://*.static-dev.mail.yandex.net/s3/psf/ fonts.gstatic.com; media-src yastatic.net https://*.static-dev.mail.yandex.net/s3/psf/ 'unsafe-inline' 'self' storage.yandexcloud.net s3.mds.yandex.net; img-src yastatic.net https://*.static-dev.mail.yandex.net/s3/psf/ 'self' data: blob: mc.yandex.ru mc.yandex.az mc.yandex.by mc.yandex.co.il mc.yandex.com mc.yandex.com.am mc.yandex.com.ge mc.yandex.com.tr mc.yandex.ee mc.yandex.fr mc.yandex.kg mc.yandex.kz mc.yandex.lt mc.yandex.lv mc.yandex.md mc.yandex.ru mc.yandex.tj mc.yandex.tm mc.yandex.ua mc.yandex.uz mc.webvisor.com mc.webvisor.org mc.admetrica.ru yastatic.net downloader.disk.yandex.ru downloader.disk.yandex.net yandex.ru favicon.yandex.net storage.yandexcloud.net s3.mds.yandex.net avatars.mds.yandex.net *.storage.yandex.net *.disk.yandex.net; connect-src yandex.ru mc.yandex.ru mc.yandex.az mc.yandex.by mc.yandex.co.il mc.yandex.com mc.yandex.com.am mc.yandex.com.ge mc.yandex.com.tr mc.yandex.ee mc.yandex.fr mc.yandex.kg mc.yandex.kz mc.yandex.lt mc.yandex.lv mc.yandex.md mc.yandex.ru mc.yandex.tj mc.yandex.tm mc.yandex.ua mc.yandex.uz mc.webvisor.com mc.webvisor.org mc.admetrica.ru yandexmetrica.com:* 'self' api.passport.yandex.ru mail.yandex.ru https://pdd.yandex.ru:* https://pdd.yandex.com:* api-stable.dst.yandex.ru cloud-api.yandex.ru yastatic.net https://*.static-dev.mail.yandex.net/s3/psf/; frame-src yastatic.net https://*.static-dev.mail.yandex.net/s3/psf/ 'self' blob: mc.yandex.ru forms.yandex.ru www.youtube.com yandex.ru trust.yandex.ru; child-src 'self' blob: mc.yandex.ru; base-uri 'self'; frame-ancestors 'self' https://*.webvisor.com https://metrika.yandex.com https://metrika.yandex.ru; report-uri https://csp.yandex.net/csp?from=tuning&project=tuning&yandex_login=&yandexuid=9508295161713355089;
Content-Type: text/html; charset=utf-8
Date: Wed, 17 Apr 2024 11:58:09 GMT
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Pragma: no-cache
Set-Cookie: _yasc=btS4QwHI/Zyfg23+Szb7ose/XoaUF3bnuFHc+OdBE97EYNhqpdDpN4zvirca4ynS; domain=.yandex.ru; path=/; expires=Sat, 15 Apr 2034 11:58:09 GMT; secure
i=XN2mAKCLoFmkJl5+/5Yy7zmS9wMr52BFHXeRpG7sYmjJawkIQRcL3Y0m1Zw0UUSt07t9c2KZG73jlhS5SZdVt5o/rdo=; Expires=Fri, 17-Apr-2026 11:58:09 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None
yandexuid=9508295161713355089; Expires=Fri, 17-Apr-2026 11:58:09 GMT; Domain=.yandex.ru; Path=/; Secure; SameSite=None
Transfer-Encoding: chunked
Vary: Accept-Encoding
X-Response-With: YMail
passport.baidu.com//v2/?login&redirect_to=https://www.baidu.com/favicon.ico
103.235.46.9301 Moved Permanently 184 B URL GET HTTP/1.1 passport.baidu.com//v2/?login&redirect_to=https://www.baidu.com/favicon.ico
IP 103.235.46.9:443
ASN #55967 Beijing Baidu Netcom Science and Technology Co., Ltd.
Requested by https://deywepri.com/l?v=CZ4Izf1O
Certificate IssuerGlobalSign nv-sa
Subjectbaidu.com
Fingerprint97:42:D5:98:27:D6:22:88:CF:59:C3:FF:75:86:8D:D5:D3:12:A0:AF
ValidityThu, 06 Jul 2023 01:51:06 GMT - Tue, 06 Aug 2024 01:51:05 GMT
File type HTML document, ASCII text, with CRLF line terminators
Hash 2b7e31ced8db56cadcc7127bfabe57c1
5b4be340df4fe663cafd5cada2945c743e711f36
66448fc8a8e49044e7619323442c4e74392249928f5f5ef0853e62b9ffe9fb82
GET //v2/?login&redirect_to=https://www.baidu.com/favicon.ico HTTP/1.1
Host: passport.baidu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Connection: keep-alive
Content-Length: 184
Content-Type: text/html
Date: Wed, 17 Apr 2024 11:58:09 GMT
Location: https://passport.baidu.com/v2/?login&fr=old&login&redirect_to=https://www.baidu.com/favicon.ico
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: BWS
Set-Cookie: BAIDUID=29B4C99256BF915B01F6D59B6D8E6BE8:FG=1; expires=Thu, 17-Apr-25 11:58:09 GMT; max-age=31536000; path=/; domain=.baidu.com; version=1
Strict-Transport-Security: max-age=31536000
Tracecode: 39343870772749083658041719
passport.baidu.com/v2/?login&fr=old&login&redirect_to=https://www.baidu.com/favicon.ico
103.235.46.9200 OK 6.3 kB URL GET HTTP/1.1 passport.baidu.com/v2/?login&fr=old&login&redirect_to=https://www.baidu.com/favicon.ico
IP 103.235.46.9:443
ASN #55967 Beijing Baidu Netcom Science and Technology Co., Ltd.
Requested by https://deywepri.com/l?v=CZ4Izf1O
Certificate IssuerGlobalSign nv-sa
Subjectbaidu.com
Fingerprint97:42:D5:98:27:D6:22:88:CF:59:C3:FF:75:86:8D:D5:D3:12:A0:AF
ValidityThu, 06 Jul 2023 01:51:06 GMT - Tue, 06 Aug 2024 01:51:05 GMT
File type JavaScript source, Unicode text, UTF-8 text, with very long lines (1336)
Hash 3d59332592f99a420cf38ba1b2eac0c8
aca4212dec8718359c6e3ceeebc2df5b06a47537
b2a9e1ee0295a7fce2a33a37caffc133f504fde42e8155a2148d54ad078486b3
GET /v2/?login&fr=old&login&redirect_to=https://www.baidu.com/favicon.ico HTTP/1.1
Host: passport.baidu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Trace-ID
Connection: keep-alive
Content-Security-Policy-Report-Only: object-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' 'report-sample' wappass.baidu.com:* passport.baidu.com:* wappass.bdimg.com:* passport.bdimg.com:* ppui-static-wap.cdn.bcebos.com:* ppui-static-pc.cdn.bcebos.com:* hm.baidu.com:* fe.bdimg.com:* msg.baidu.com:* pdc.baidu.com:* img.baidu.com:* openapi.baidu.com:* res.wx.qq.com:* qqq.gtimg.cn:* s.bdstatic.com:* ufosdk.baidu.com:* qapm.baidu.com:* libs.baidu.com:* ext.baidu.com:* apps.baidu.com:* s3.pstatp.com:* tb2.bdstatic.com:* b.bdstatic.com:* msg.baidu.com:* www.baidu.com:* po.srf.baidu.com:* pan.baidu.com:* play.baidu.com:* tb1.bdstatic.com:* dup.baidustatic.com:* static.tieba.baidu.com:* gss2.bdstatic.com:* blob: baiduboxapp: bootupbaiduhd: sofire.bdstatic.com:* id6.me:* opencloud.wostore.cn:* nisbj2.10010.com:* nisbj3.10010.com:* verify.cmpassport.com:* www.cmpassport.com:* nisbj1.10010.com:* mbd.baidu.com:* dlswbr.baidu.com:* dmpstatic.cdn.bcebos.com:* cdn.bootcss.com:* safe.cdn.bcebos.com:*; report-uri https://report-uri.baidu.com/report?app=passport;
Content-Type: text/html
Date: Wed, 17 Apr 2024 11:58:10 GMT
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Referrer-Policy: no-referrer-when-downgrade, strict-origin-when-cross-origin
Server: BWS
Set-Cookie: BAIDUID=1ABF1162F6F054155B07A94E48B2B499:FG=1; expires=Thu, 17-Apr-25 11:58:10 GMT; max-age=31536000; path=/; domain=.baidu.com; version=1
Strict-Transport-Security: max-age=31536000
Trace-Id: EBE8E901
Tracecode: 41487780270681357578041719
Vary: Accept-Encoding
Transfer-Encoding: chunked
accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&hl=en&ifkv=ARZ0qKKjsDL1KK5tJ38qziQNiXfEWE9AFk6Ej3LrLKAYfUkQUw78QzkYiW2F-4ENsa3H7WI41Bs2Og&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-569822442%3A1713355088554486&theme=mn&ddm=0
64.233.165.84403 Forbidden 6.8 kB URL GET HTTP/2 accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&hl=en&ifkv=ARZ0qKKjsDL1KK5tJ38qziQNiXfEWE9AFk6Ej3LrLKAYfUkQUw78QzkYiW2F-4ENsa3H7WI41Bs2Og&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-569822442%3A1713355088554486&theme=mn&ddm=0
IP 64.233.165.84:443
Requested by https://deywepri.com/l?v=CZ4Izf1O
Certificate IssuerGoogle Trust Services LLC
Subjectaccounts.google.com
FingerprintCC:CB:DD:14:30:B0:75:6A:EE:1D:20:F1:9E:C5:DD:5F:DD:68:4F:7B
ValidityMon, 18 Mar 2024 20:38:53 GMT - Mon, 10 Jun 2024 20:38:52 GMT
File type gzip compressed data, max compression
Hash c39f0a52bcd99ec6dfca2e261a9983c9
c66277c26e034fc61cc12edb05e99edca4884ddc
97a0f1157b41436b189f9fe7244f78c1a9c5545ff6c11db71e25561fc08898d6
GET /v3/signin/identifier?continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&hl=en&ifkv=ARZ0qKKjsDL1KK5tJ38qziQNiXfEWE9AFk6Ej3LrLKAYfUkQUw78QzkYiW2F-4ENsa3H7WI41Bs2Og&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-569822442%3A1713355088554486&theme=mn&ddm=0 HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 403 Forbidden
content-type: text/html; charset=utf-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Wed, 17 Apr 2024 11:58:08 GMT
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
strict-transport-security: max-age=31536000; includeSubDomains
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factor=*, ch-ua-platform=*, ch-ua-platform-version=*
content-security-policy: require-trusted-types-for 'script';report-uri /v3/signin/_/AccountsSignInUi/cspreport, script-src 'nonce-UaMfWOxa5UBnIofUoylIhQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /v3/signin/_/AccountsSignInUi/cspreport;worker-src 'self', script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /v3/signin/_/AccountsSignInUi/cspreport/allowlist
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
report-to: {"group":"AccountsSignInUi","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/AccountsSignInUi"}]}
cross-origin-opener-policy-report-only: same-origin; report-to="AccountsSignInUi"
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
aus5.mozilla.org/update/3/GMP/111.0a1/20240129201730/Linux_x86_64-gcc3/null/default/Linux%205.15.0-101-generic%20(GTK%203.24.37%2Clibpulse%20not-available)/default/default/update.xml
35.244.181.201 444 B URL aus5.mozilla.org/update/3/GMP/111.0a1/20240129201730/Linux_x86_64-gcc3/null/default/Linux%205.15.0-101-generic%20(GTK%203.24.37%2Clibpulse%20not-available)/default/default/update.xml
IP 35.244.181.201:0
ASN #396982 GOOGLE-CLOUD-PLATFORM
File type XML 1.0 document, ASCII text, with very long lines (332)
Hash 3b324dec137a87ef7e24a30a65b13dd0
c0faa95b2f1018e264b3a14aaf50d1003e6c27b3
6cd0b591d9239fc8564627e92a804fc261951b1cbaf5fa58a8ada3cc13f51463
GET /update/3/GMP/111.0a1/20240129201730/Linux_x86_64-gcc3/null/default/Linux%205.15.0-101-generic%20(GTK%203.24.37%2Clibpulse%20not-available)/default/default/update.xml HTTP/1.1
Host: aus5.mozilla.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Cache-Control: no-cache
Pragma: no-cache
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
rule-id: unknown
rule-data-version: unknown
content-signature: x5u=https://content-signature-2.cdn.mozilla.net/chains/aus.content-signature.mozilla.org-2024-05-20-00-15-28.chain; p384ecdsa=sU5yH2M19kiaF7KbspaYsT9TMlHDeP1WpGePdH60mft-VSt7jG9sj-IqIw_4dIXZpwyE4XYH7AxIbz5r0KCaSQXOf7WyNKHunEtuWBz2B-Oq1kYj3KOQi8tfu8ycErhL
strict-transport-security: max-age=31536000;
x-content-type-options: nosniff
content-security-policy: default-src 'none'; frame-ancestors 'none'
x-proxy-cache-status: EXPIRED
content-encoding: gzip
via: 1.1 google
date: Wed, 17 Apr 2024 11:58:05 GMT
content-type: text/xml; charset=utf-8
vary: Accept-Encoding
content-length: 444
age: 16
cache-control: public,max-age=90
alt-svc: clear
X-Firefox-Spdy: h2
dull-egg.pro/Ybm-Rd0eP.3fpgv_bimjVkJlZ-Dn0oypNqT_Es1tMuTvg-3xJymzFAk_SCWDQE9FM-zHQI2JMKz_IM3NJOnPN-JRZSDT0U0_OWDXEY4ZN-DbIc5dJen_NgJhZiDjI-9lJmnnNoJ_ZqDrMs9tJ-nvJwyxayW_QA9BMCzDA-0FYGTHgI1_MKTLUM5NZ-DPUQ2RYS2_VUmVNW2XJ-mZZaGbMc3_NeDfQgzhZ-WjUkzlNmz_BompMqzrg-mtduWv5wp_cyUzJA5BV-HDlEwFZGT_0IwJJKnLV-uNaOXPFQC_eSVTpUvVb-mXUY9ZMaC_Zc1dbemfl-xhQinjlkG_ZmWnVokpP-TrAsmtduW_5wpxcyUzJ-5BRCmD9Ey_bGWHFI0JP-TLAMmNcOH_QQ9RMSCTZ-yVdWjX0Yw_JambhczdP-XfFghhJim_xkwlamTn0-zpMqjrUsy_Jumvhwpxd-EzlAkBPCW_FEjFNGTHh-kJMKzLMM4_ZOmPIQ1RN-GTEU3VNWj_AYyZMaGbE-1dNeGfMg0_YiTjlkmlZ-Tnco0pMqD_JsitJunvJ-lxZykzRAv_bCWDFEpFb-jH0I
188.72.219.36200 OK 0 B URL POST HTTP/2 dull-egg.pro/Ybm-Rd0eP.3fpgv_bimjVkJlZ-Dn0oypNqT_Es1tMuTvg-3xJymzFAk_SCWDQE9FM-zHQI2JMKz_IM3NJOnPN-JRZSDT0U0_OWDXEY4ZN-DbIc5dJen_NgJhZiDjI-9lJmnnNoJ_ZqDrMs9tJ-nvJwyxayW_QA9BMCzDA-0FYGTHgI1_MKTLUM5NZ-DPUQ2RYS2_VUmVNW2XJ-mZZaGbMc3_NeDfQgzhZ-WjUkzlNmz_BompMqzrg-mtduWv5wp_cyUzJA5BV-HDlEwFZGT_0IwJJKnLV-uNaOXPFQC_eSVTpUvVb-mXUY9ZMaC_Zc1dbemfl-xhQinjlkG_ZmWnVokpP-TrAsmtduW_5wpxcyUzJ-5BRCmD9Ey_bGWHFI0JP-TLAMmNcOH_QQ9RMSCTZ-yVdWjX0Yw_JambhczdP-XfFghhJim_xkwlamTn0-zpMqjrUsy_Jumvhwpxd-EzlAkBPCW_FEjFNGTHh-kJMKzLMM4_ZOmPIQ1RN-GTEU3VNWj_AYyZMaGbE-1dNeGfMg0_YiTjlkmlZ-Tnco0pMqD_JsitJunvJ-lxZykzRAv_bCWDFEpFb-jH0I
IP 188.72.219.36:443
Requested by https://deywepri.com/l?v=CZ4Izf1O
Certificate IssuerLet's Encrypt
Subjectdull-egg.pro
Fingerprint2C:38:E2:A2:7C:32:0F:35:69:9E:5F:4E:16:78:F1:B6:84:34:5C:35
ValiditySun, 14 Apr 2024 03:22:01 GMT - Sat, 13 Jul 2024 03:22:00 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /Ybm-Rd0eP.3fpgv_bimjVkJlZ-Dn0oypNqT_Es1tMuTvg-3xJymzFAk_SCWDQE9FM-zHQI2JMKz_IM3NJOnPN-JRZSDT0U0_OWDXEY4ZN-DbIc5dJen_NgJhZiDjI-9lJmnnNoJ_ZqDrMs9tJ-nvJwyxayW_QA9BMCzDA-0FYGTHgI1_MKTLUM5NZ-DPUQ2RYS2_VUmVNW2XJ-mZZaGbMc3_NeDfQgzhZ-WjUkzlNmz_BompMqzrg-mtduWv5wp_cyUzJA5BV-HDlEwFZGT_0IwJJKnLV-uNaOXPFQC_eSVTpUvVb-mXUY9ZMaC_Zc1dbemfl-xhQinjlkG_ZmWnVokpP-TrAsmtduW_5wpxcyUzJ-5BRCmD9Ey_bGWHFI0JP-TLAMmNcOH_QQ9RMSCTZ-yVdWjX0Yw_JambhczdP-XfFghhJim_xkwlamTn0-zpMqjrUsy_Jumvhwpxd-EzlAkBPCW_FEjFNGTHh-kJMKzLMM4_ZOmPIQ1RN-GTEU3VNWj_AYyZMaGbE-1dNeGfMg0_YiTjlkmlZ-Tnco0pMqD_JsitJunvJ-lxZykzRAv_bCWDFEpFb-jH0I HTTP/1.1
Host: dull-egg.pro
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 86
Origin: https://deywepri.com
DNT: 1
Connection: keep-alive
Referer: https://deywepri.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 17 Apr 2024 11:58:26 GMT
content-length: 0
pragma: no-cache
accept-ch: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-WoW64
expires: Mon, 26 Jul 2011 05:00:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
p3p: CP="CUR ADM OUR NOR STA NID"
access-control-allow-credentials: true
vary: Origin
last-modified: Wed, 17 Apr 2024 11:58:26 GMT
access-control-allow-origin: https://deywepri.com
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.amazon.com/ap/signin/178-4417027-1316064?_encoding=UTF8&openid.assoc_handle=usflex&openid.claimed_id=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0%2Fidentifier_select&openid.identity=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0%2Fidentifier_select&openid.mode=checkid_setup&openid.ns=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0&openid.ns.pape=http%3A%2F%2Fspecs.openid.net%2Fextensions%2Fpape%2F1.0&openid.pape.max_auth_age=10000000&openid.return_to=https%3A%2F%2Fwww.amazon.com%2Ffavicon.ico
0.0.0.0 0 B URL GET www.amazon.com/ap/signin/178-4417027-1316064?_encoding=UTF8&openid.assoc_handle=usflex&openid.claimed_id=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0%2Fidentifier_select&openid.identity=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0%2Fidentifier_select&openid.mode=checkid_setup&openid.ns=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0&openid.ns.pape=http%3A%2F%2Fspecs.openid.net%2Fextensions%2Fpape%2F1.0&openid.pape.max_auth_age=10000000&openid.return_to=https%3A%2F%2Fwww.amazon.com%2Ffavicon.ico
IP 0.0.0.0:0
Requested by https://deywepri.com/l?v=CZ4Izf1O
Certificate IssuerDigiCert Inc
Subjectwww.amazon.com
Fingerprint16:61:C8:C4:18:95:4A:31:9B:C4:3F:AD:F7:97:7F:5C:A7:2F:09:A0
ValidityTue, 06 Feb 2024 00:00:00 GMT - Tue, 14 Jan 2025 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ap/signin/178-4417027-1316064?_encoding=UTF8&openid.assoc_handle=usflex&openid.claimed_id=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0%2Fidentifier_select&openid.identity=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0%2Fidentifier_select&openid.mode=checkid_setup&openid.ns=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0&openid.ns.pape=http%3A%2F%2Fspecs.openid.net%2Fextensions%2Fpape%2F1.0&openid.pape.max_auth_age=10000000&openid.return_to=https%3A%2F%2Fwww.amazon.com%2Ffavicon.ico HTTP/1.1
Host: www.amazon.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
server: Server
content-type: text/html
x-amz-rid: HFN4008S0SXTFXCW5P6G
strict-transport-security: max-age=47474747; includeSubDomains; preload
vary: Content-Type,Accept-Encoding,User-Agent
content-encoding: gzip
p3p: policyref="http://www.amazon.com/w3c/p3p.xml",CP="CAO DSP LAW CUR ADM IVAo IVDo CONo OTPo OUR DELi PUBi OTRi BUS PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA HEA PRE LOC GOV OTC "
x-frame-options: SAMEORIGIN
date: Wed, 17 Apr 2024 11:58:08 GMT
content-length: 2372
quic-version: 0x00000001
alt-svc: h3=":443"; ma=93600
x-amzn-cdn-id: ak-0.1d4f2417.1713355088.1297bd7f
x-cache: NotCacheable from child
newassets.hcaptcha.com/captcha/v1/b1c589a/static/hcaptcha.html
104.18.124.91200 OK 1.7 kB URL GET HTTP/3 newassets.hcaptcha.com/captcha/v1/b1c589a/static/hcaptcha.html
IP 104.18.124.91:443
Requested by https://deywepri.com/l?v=CZ4Izf1O
Certificate IssuerLet's Encrypt
Subjecthcaptcha.com
Fingerprint8F:BD:51:60:5C:FC:EA:F0:74:47:AB:AC:1B:84:1A:7E:3C:68:A7:E5
ValidityFri, 15 Mar 2024 00:09:38 GMT - Thu, 13 Jun 2024 00:09:37 GMT
File type HTML document, ASCII text, with very long lines (1768), with no line terminators
Hash 825c2f21a9a22bd9911e6686ced37ded
74f703bdafeabb1aad6a04b073d1745298c111dc
0624e04628b8b0d5f77b594b9ef1408296a1774109a47d7c1ac402e1d2636350
GET /captcha/v1/b1c589a/static/hcaptcha.html HTTP/1.1
Host: newassets.hcaptcha.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://deywepri.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 17 Apr 2024 11:58:06 GMT
content-type: text/html
cache-control: public, max-age=1209600
alt-svc: h3=":443"; ma=86400
vary: Origin, Accept-Encoding
cf-cache-status: HIT
expires: Wed, 01 May 2024 11:58:06 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 875c3dc91d2892a9-CPH
content-encoding: br
www.hcaptcha.com/1/api.js?v=1713281383068249900
104.18.124.91200 OK 387 kB URL GET HTTP/2 www.hcaptcha.com/1/api.js?v=1713281383068249900
IP 104.18.124.91:443
Requested by https://deywepri.com/l?v=CZ4Izf1O
Certificate IssuerLet's Encrypt
Subjecthcaptcha.com
Fingerprint8F:BD:51:60:5C:FC:EA:F0:74:47:AB:AC:1B:84:1A:7E:3C:68:A7:E5
ValidityFri, 15 Mar 2024 00:09:38 GMT - Thu, 13 Jun 2024 00:09:37 GMT
Size 387 kB (387091 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /1/api.js?v=1713281383068249900 HTTP/1.1
Host: www.hcaptcha.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://deywepri.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 17 Apr 2024 11:58:03 GMT
content-type: application/javascript
cf-ray: 875c3db80de5be38-CPH
cf-cache-status: HIT
age: 0
cache-control: max-age=300
etag: W/"5a68efa2b964d5c167fde3b130af8e94"
expires: Wed, 01 May 2024 01:53:08 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: Origin, Accept-Encoding
alt-svc: h3=":443"; ma=86400
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
api.hcaptcha.com/checksiteconfig?v=b1c589a&host=deywepri.com&sitekey=35afe8c0-9ebe-460b-b981-2dd69519f5c8&sc=1&swa=1&spst=0
104.18.124.91200 OK 718 B URL POST HTTP/3 api.hcaptcha.com/checksiteconfig?v=b1c589a&host=deywepri.com&sitekey=35afe8c0-9ebe-460b-b981-2dd69519f5c8&sc=1&swa=1&spst=0
IP 104.18.124.91:443
Requested by https://newassets.hcaptcha.com/captcha/v1/b1c589a/static/hcaptcha.html#frame=challenge&id=0ivk0blptk0i&host=deywepri.com&sentry=true&reportapi=https%3A%2F%2Faccounts.hcaptcha.com&recaptchacompat=true&custom=false&hl=en&tplinks=on&pstissuer=https%3A%2F%2Fpst-issuer.hcaptcha.com&sitekey=35afe8c0-9ebe-460b-b981-2dd69519f5c8&theme=light&origin=https%3A%2F%2Fdeywepri.com
Certificate IssuerLet's Encrypt
Subjecthcaptcha.com
Fingerprint8F:BD:51:60:5C:FC:EA:F0:74:47:AB:AC:1B:84:1A:7E:3C:68:A7:E5
ValidityFri, 15 Mar 2024 00:09:38 GMT - Thu, 13 Jun 2024 00:09:37 GMT
File type troff or preprocessor input, ASCII text, with very long lines (734), with no line terminators
Hash bce58f3c08571105aa41352e4dc249b6
f497471476f0d9d002b8d989ec2a20b6e4373f1e
5d7a5b87fd4f0f08c1ef4c4f4fbbd8fc061e85e229cc413a611be0dcf2817870
POST /checksiteconfig?v=b1c589a&host=deywepri.com&sitekey=35afe8c0-9ebe-460b-b981-2dd69519f5c8&sc=1&swa=1&spst=0 HTTP/1.1
Host: api.hcaptcha.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://newassets.hcaptcha.com
DNT: 1
Connection: keep-alive
Referer: https://newassets.hcaptcha.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
Content-Length: 0
HTTP/3 200 OK
date: Wed, 17 Apr 2024 11:58:07 GMT
content-type: application/json
access-control-allow-origin: https://newassets.hcaptcha.com
vary: Origin, Accept-Encoding
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control, Content-Type, DNT, Referer, User-Agent
access-control-allow-methods: GET, HEAD, POST, OPTIONS
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 875c3dcdde4692a9-CPH
content-encoding: br
alt-svc: h3=":443"; ma=86400
360.yandex.ru/mail
0.0.0.0 0 B IP 0.0.0.0:0
Requested by https://deywepri.com/l?v=CZ4Izf1O
Certificate IssuerGlobalSign nv-sa
Subject360.yandex.ru
FingerprintD4:DC:19:D2:42:2B:BC:88:69:10:FA:94:1C:78:04:49:44:B5:AD:58
ValidityThu, 28 Mar 2024 09:45:22 GMT - Mon, 28 Oct 2024 09:45:22 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /mail HTTP/1.1
Host: 360.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Content-Length: 40
Content-Type: text/plain; charset=utf-8
Date: Wed, 17 Apr 2024 11:58:09 GMT
Location: /mail/
Set-Cookie: _yasc=SO2up15I9jU0v+tC2YCu3kiDV9HirbRtaUulnd6KgYaVFmnAED9+hbZeCgzE+/rU; domain=.yandex.ru; path=/; expires=Sat, 15 Apr 2034 11:58:08 GMT; secure
i=/5gAvLzMuk1ncLcMgNu8PtdaF2kDVVYiSnPF4ZZpb2i9JbsI4kp6M/lSaOYG3TbkYPeRywyZPP29LbvpYDbuFb1Po1o=; Expires=Fri, 17-Apr-2026 11:58:08 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None
yandexuid=7548567471713355088; Expires=Fri, 17-Apr-2026 11:58:08 GMT; Domain=.yandex.ru; Path=/; Secure; SameSite=None
Vary: Accept
wavylandscape.pro/buW.NvlwPx3-Nz0AYBXCR_1EcFzG1Hm-YJWKlLsM
88.85.94.240200 OK 168 B URL GET HTTP/2 wavylandscape.pro/buW.NvlwPx3-Nz0AYBXCR_1EcFzG1Hm-YJWKlLsM
IP 88.85.94.240:443
Requested by https://deywepri.com/l?v=CZ4Izf1O
Certificate IssuerLet's Encrypt
Subjectwavylandscape.pro
Fingerprint78:9F:25:4A:A8:04:C7:7F:D6:2E:E5:67:9F:55:21:65:94:8C:1D:C6
ValiditySun, 25 Feb 2024 00:50:41 GMT - Sat, 25 May 2024 00:50:40 GMT
File type HTML document, ASCII text, with no line terminators
Hash 9e0c04f6a728b6a6b4cf6033ef73800b
eb16f7f814f9960764a7fcf7d1d8e9a86afc728f
b7d9c4839c6c376dee60d4c451e6ba68b4d1883e60d7187ccdd1575befca836d
GET /buW.NvlwPx3-Nz0AYBXCR_1EcFzG1Hm-YJWKlLsM HTTP/1.1
Host: wavylandscape.pro
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://deywepri.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 17 Apr 2024 11:58:03 GMT
content-type: text/html;charset=UTF-8
vary: Accept-Encoding
accept-ch: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-WoW64
expires: Mon, 26 Jul 2011 05:00:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
x-content-type-options: nosniff
content-encoding: br
X-Firefox-Spdy: h2
newassets.hcaptcha.com/captcha/v1/b1c589a/static/hcaptcha.html
104.18.124.91200 OK 1.7 kB URL GET HTTP/3 newassets.hcaptcha.com/captcha/v1/b1c589a/static/hcaptcha.html
IP 104.18.124.91:443
Requested by https://deywepri.com/l?v=CZ4Izf1O
Certificate IssuerLet's Encrypt
Subjecthcaptcha.com
Fingerprint8F:BD:51:60:5C:FC:EA:F0:74:47:AB:AC:1B:84:1A:7E:3C:68:A7:E5
ValidityFri, 15 Mar 2024 00:09:38 GMT - Thu, 13 Jun 2024 00:09:37 GMT
File type HTML document, ASCII text, with very long lines (1768), with no line terminators
Hash 825c2f21a9a22bd9911e6686ced37ded
74f703bdafeabb1aad6a04b073d1745298c111dc
0624e04628b8b0d5f77b594b9ef1408296a1774109a47d7c1ac402e1d2636350
GET /captcha/v1/b1c589a/static/hcaptcha.html HTTP/1.1
Host: newassets.hcaptcha.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://deywepri.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 17 Apr 2024 11:58:06 GMT
content-type: text/html
cache-control: public, max-age=1209600
alt-svc: h3=":443"; ma=86400
vary: Origin, Accept-Encoding
cf-cache-status: HIT
expires: Wed, 01 May 2024 11:58:06 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 875c3dc91d2a92a9-CPH
content-encoding: br
newassets.hcaptcha.com/c/282d0ff/hsw.js
104.18.124.91200 OK 528 kB URL GET HTTP/3 newassets.hcaptcha.com/c/282d0ff/hsw.js
IP 104.18.124.91:443
Requested by https://newassets.hcaptcha.com/captcha/v1/b1c589a/static/hcaptcha.html#frame=challenge&id=0ivk0blptk0i&host=deywepri.com&sentry=true&reportapi=https%3A%2F%2Faccounts.hcaptcha.com&recaptchacompat=true&custom=false&hl=en&tplinks=on&pstissuer=https%3A%2F%2Fpst-issuer.hcaptcha.com&sitekey=35afe8c0-9ebe-460b-b981-2dd69519f5c8&theme=light&origin=https%3A%2F%2Fdeywepri.com
Certificate IssuerLet's Encrypt
Subjecthcaptcha.com
Fingerprint8F:BD:51:60:5C:FC:EA:F0:74:47:AB:AC:1B:84:1A:7E:3C:68:A7:E5
ValidityFri, 15 Mar 2024 00:09:38 GMT - Thu, 13 Jun 2024 00:09:37 GMT
Size 528 kB (527636 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /c/282d0ff/hsw.js HTTP/1.1
Host: newassets.hcaptcha.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://newassets.hcaptcha.com/captcha/v1/b1c589a/static/hcaptcha.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 17 Apr 2024 11:58:07 GMT
content-type: application/javascript
etag: W/"f593c8f46e9cb4a93e13a33ec29e7214"
cache-control: public, max-age=3024000
alt-svc: h3=":443"; ma=86400
vary: Origin, Accept-Encoding
cf-cache-status: HIT
expires: Wed, 22 May 2024 11:58:07 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 875c3dce5f5192a9-CPH
content-encoding: br
deliverytraffico.com/0b085559bbdffdb520aa77a4607ee9f9/
146.190.238.229302 Found 168 B URL GET HTTP/2 deliverytraffico.com/0b085559bbdffdb520aa77a4607ee9f9/
IP 146.190.238.229:443
ASN #14061 DIGITALOCEAN-ASN
Requested by https://deywepri.com/l?v=CZ4Izf1O
Certificate IssuerLet's Encrypt
Subjectdeliverytraffico.com
Fingerprint18:75:66:3D:C9:14:8C:B8:55:F8:F0:77:8B:61:60:A0:3E:B2:48:8F
ValiditySun, 25 Feb 2024 12:47:33 GMT - Sat, 25 May 2024 12:47:32 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /0b085559bbdffdb520aa77a4607ee9f9/ HTTP/1.1
Host: deliverytraffico.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://deywepri.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
server: nginx
date: Wed, 17 Apr 2024 11:58:03 GMT
content-type: text/html; charset=UTF-8
location: https://wavylandscape.pro/buW.NvlwPx3-Nz0AYBXCR_1EcFzG1Hm-YJWKlLsM
access-control-allow-origin: https://deywepri.com
access-control-allow-credentials: true
X-Firefox-Spdy: h2
deliverytraffico.com/37a21b48e24ed1184aa8b073cbd7f7f6/?rid=rV5ar4R7deaey2tACGi4K6KaWTy2YxAy&host=landings-eu01.sdkl.info
146.190.238.229200 OK 14 B URL GET HTTP/2 deliverytraffico.com/37a21b48e24ed1184aa8b073cbd7f7f6/?rid=rV5ar4R7deaey2tACGi4K6KaWTy2YxAy&host=landings-eu01.sdkl.info
IP 146.190.238.229:443
ASN #14061 DIGITALOCEAN-ASN
Requested by https://deywepri.com/l?v=CZ4Izf1O
Certificate IssuerLet's Encrypt
Subjectdeliverytraffico.com
Fingerprint18:75:66:3D:C9:14:8C:B8:55:F8:F0:77:8B:61:60:A0:3E:B2:48:8F
ValiditySun, 25 Feb 2024 12:47:33 GMT - Sat, 25 May 2024 12:47:32 GMT
File type ASCII text, with no line terminators
Hash c7a2377feeb4a2ea7470a8f3361cadd4
90978eb556bfdc5b8d5c827d77d3f7893349d606
5a6a29ee17ce768dda0fb65615d1d2ae4490f9ce1c33b30c2341a856bd3dc8c0
GET /37a21b48e24ed1184aa8b073cbd7f7f6/?rid=rV5ar4R7deaey2tACGi4K6KaWTy2YxAy&host=landings-eu01.sdkl.info HTTP/1.1
Host: deliverytraffico.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://deywepri.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 17 Apr 2024 11:58:03 GMT
content-type: text/html; charset=UTF-8
content-encoding: br
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/yD/r/d4ZIVX-5C-b.ico
31.13.72.12404 Not Found 0 B URL GET HTTP/2 static.xx.fbcdn.net/rsrc.php/yD/r/d4ZIVX-5C-b.ico
IP 31.13.72.12:443
Requested by https://deywepri.com/l?v=CZ4Izf1O
Certificate IssuerDigiCert Inc
Subject*.facebook.com
Fingerprint4C:5D:97:C0:0A:EB:1E:0D:F5:D3:99:A6:88:D7:D4:63:69:9B:2F:24
ValidityThu, 25 Jan 2024 00:00:00 GMT - Wed, 24 Apr 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /rsrc.php/yD/r/d4ZIVX-5C-b.ico HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://deywepri.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
x-fatal-request: static.xx.fbcdn.net
pragma: no-cache
cache-control: private, no-cache, no-store, must-revalidate
expires: Sat, 01 Jan 2000 00:00:00 GMT
timing-allow-origin: *
reporting-endpoints: permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/"
report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
content-security-policy-report-only: default-src data: blob: chrome-extension: 'unsafe-inline' 'unsafe-eval';report-uri https://www.xx.facebook.com/csp/reporting/?m=c&minimize=0;
content-security-policy: default-src data: blob: 'self';script-src *.fbcdn.net 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src 'unsafe-inline';connect-src *.fbcdn.net wss://*.fbcdn.net attachment.fbsbx.com blob: 'self';img-src data: blob: 'self';block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.xx.facebook.com/csp/reporting/?m=c&minimize=0;require-trusted-types-for 'script';
document-policy: force-load-at-top
permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(), clipboard-write=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), usb=(), window-management=(), xr-spatial-tracking=();report-to="permissions_policy"
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-xss-protection: 0
content-type: text/html; charset="utf-8"
x-fb-debug: GjeyCUxV0Mr1dOU10dtUEJeTKY+Qi/wdEtKMzK4LrgwgMWW40DCW6rpmEkL3bAhHI9hJRrAwysTxsmQBbQLTJw==
content-length: 0
proxy-status: http_request_error; e_fb_configversion="AcL3gGrxepeRWJunAm_JcMNQBUNJjZDoGTIP82jf3Czx-gmfzcr8siHA8aPdCg"; e_clientaddr="AcKbGbNlNu5l_XC9PBlPohf8twl3KryQqVgK6JMK1lg323kAcspVgzniRQAZRY3XR0RJsJuMBqeuNcykTwessXitsb-cJIOEXiUM9bYio2IDLQS4ZA"; e_fb_vipport="AcI-yeX85You_l_J2KlNAWWdLuE6vdKcnuzqMNjmn04LvYLt42K2ws5DgthG"; e_upip="AcLcPg-mVOla9qg60kLa2sclCEeR3TpEhU5QrY4l0NQ-1KxZgT29c15YAGAOgcGwGr5eF2q6rbPcoTOZ4-hhhKYNvbulTLMyHdw"; e_fb_requestsequencenumber="AcI3kWjH96lsMu-iPKU7eTcod_KNWwMrXpKIWmXAyrGc2_-ouqf7KWkCffM"; e_fb_hostheader="AcLQXRBrbeeHyhxFeJwSyMfDryl2lPYbdWycAuIRgxYILbUVYVh9dp51HNitsRBxZ4zyRTUiX3SybsthoQ"; e_fb_vipaddr="AcKNRK7DJsVLVKuV9978lwoMz_cpPuwSoNn83WHYeZ8pf57Mn40kl5VDSUmPFImI2E_6cHMO1DN_iC0DFQEA-FLOHyhEGqbX8Q"; e_fb_requesthandler="AcLoZ1PybeSfBAkdM7rLyEm2SYzBvv-26CGbBr6mmySRXJ38apjJrwddEQ-nEoW_cjmjfby1x68"; e_fb_requesttime="AcKTHIcrBwwuFe9fM9iMb300Z5F8kWDrlzHu90QHH1Br3x8CI-2lSjx_4vPUf8j1slP5piOWWA"; e_fb_builduser="AcKXNFStVLMuymP29LmNuCU0O1xmBB-UdmM04nlTePPAkMo62C3cCAB_jYwPZBKHn3M"; e_fb_httpversion="AcLz5RB2ql0ej8aZwaQe0rYLZXxwKXWGmqXQw-9V5HybupX28mZCw55aP4ij"; e_fb_binaryversion="AcKSVK84Ij1Kp0IzG7arR6eehGQvmQbHnJJ34ETS72hPI5lsY_SiXUTdFeio2fFYpEpIIWQorbFBhXTdjBsQwEV1OcJ1LnhedRQ"; e_proxy="AcJRdydJCQRdKijLWKYxD9DXy6_lgauQh_8itmHd8l22Bz4A44F9OzszmS__myzOZ8vlaQOXeTwONz4sVmFy", http_request_error; e_fb_configversion="AcJllOxWC1RIsdNkXvyrq8p4oPMpHmYHfoz4WsVKHhgBX9XDygsTzbynRpPQIQ"; e_clientaddr="AcIcJdXTOHsrdzm8ruFk8Og3ULF5gyFhtxZ6CWHLOv5YoRKP-dYWKk4HGFqjLHUZbtY8yGlEmhSEKnOL"; e_fb_vipport="AcLLEr4cORc5ayivASDeVaAu-Xuao1McOnx8wXTnvhpDSUGY775D0KpOQsjd"; e_fb_requestsequencenumber="AcKXCEl5s9tyDyVlyZWXEBwMoi1SuWmcI33Eqhyvh-KmpIc1NJdp1dSRpw"; e_fb_hostheader="AcJShuAdbFec1vFMLXWZzQoW0CYnWUmQQkinPwfS2N5XdfCFiUoIWiP4Lm4glzDrg7HmcMTQ51PvSRN6Sg"; e_fb_vipaddr="AcIH-jwoCrDv_vUi37bpqGh6mbmY-ntE1RhaEwuhyHX-zTAKSjCCePkYwXDa2QNzHmGlXvc"; e_fb_requesthandler="AcLxLsSt5vHjAJuQJ3DxZ9PGjfu1yhzALmpyh8x6-s1glnx_4J8aLYuMVNdWuciStYJSaTI3bwPsVQ"; e_fb_requesttime="AcKK1zhf5Xsr0b-BOnqyFUYVbgJ8oy8NOSj7CQJ3_emgjOI838VhgPBdYpzo4n1EBcugmf3nBg"; e_fb_builduser="AcJ13L7_-ek4l0dR7zsRwfiVx9yyDkjTodIJbBzg92OxdJaqE9ZB90ZHUSTjnjucxyc"; e_fb_httpversion="AcKJJJSe9CnEMzwypH3BZ3D4JY_W9nsPKdB3EVR5QmZozl1VGaZUHrTVD5Rs"; e_fb_binaryversion="AcJ5E-ddfitRseIrc6lZwTOohEbiB1bG9trFOucYSvBYs9kjkrzM9iIdjT9wo9ugBgGLDHTRUM9-idSBj9OVobiqP0lAYMl8Tgc"; e_proxy="AcL50Eyj14uDe90ywagjax0Mudsa3fsRBSreuFdtdip3JKUkP0U-HqdmWDjREtxC_Rm2YU9y5iFcDFA"
date: Wed, 17 Apr 2024 11:58:06 GMT
x-fb-connection-quality: EXCELLENT; q=0.9, rtt=7, rtx=0, c=13, mss=1380, tbw=3441, tp=-1, tpl=-1, uplat=0, ullat=-1
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2